{"id":296,"name":"github.com/google/go-containerregistry","ecosystem":"go","repository_url":"https://github.com/google/go-containerregistry","issues_count":1311,"created_at":"2025-06-06T15:01:33.624Z","updated_at":"2025-06-06T15:01:33.624Z","purl":"pkg:golang/github.com/google/go-containerregistry","metadata":{"id":3492522,"name":"github.com/google/go-containerregistry","ecosystem":"go","description":"","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google","versions_count":39,"first_release_published_at":"2020-06-03T20:01:40.000Z","latest_release_published_at":"2025-05-21T00:03:21.000Z","latest_release_number":"v0.20.5","last_synced_at":"2025-06-06T14:32:24.200Z","created_at":"2022-04-10T19:10:02.568Z","updated_at":"2025-06-06T14:32:24.201Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry","install_command":"go get github.com/google/go-containerregistry","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry#section-documentation","metadata":{},"repo_metadata":{"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2023-03-15T22:22:33.000Z","size":19380,"stargazers_count":2266,"open_issues_count":91,"forks_count":422,"subscribers_count":34,"default_branch":"main","last_synced_at":"2023-03-15T23:13:53.972Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"logo_url":null,"metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2023-03-15T22:55:52.000Z","dependencies_parsed_at":"2022-07-09T14:00:26.620Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":null,"repository_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","manifests_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":108921946,"host_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":null,"twitter":"GoogleOSS","company":null,"avatar_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2429,"last_synced_at":"2023-02-19T21:08:07.521Z","metadata":{"has_sponsors_listing":false},"owner_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google"},"tags":[{"name":"v0.12.1","sha":"76ae8192efd86521005acc6d6d3d43ef10d9e6be","kind":"commit","published_at":"2022-11-10T03:01:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.1"},{"name":"v0.12.0","sha":"3413eb6ce4b011eeda196bc0461f5d70826e9a47","kind":"commit","published_at":"2022-10-19T20:27:46.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.0"},{"name":"v0.11.0","sha":"31786c6cbb82d6ec4fb8eb79cd9387905130534e","kind":"commit","published_at":"2022-07-20T19:50:16.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.11.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.11.0"},{"name":"v0.10.0","sha":"0c40ec8ad2226e1d374f1f1c01d5694f505ff946","kind":"commit","published_at":"2022-06-21T17:53:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.10.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.10.0"},{"name":"v0.9.0","sha":"49e51707501a2e9eff2ee03f9c3df830dd76dbad","kind":"commit","published_at":"2022-05-17T14:02:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.9.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.9.0"},{"name":"v0.8.0","sha":"d9bfbcb99e526b2a9417160e209b816e1b1fb6bd","kind":"commit","published_at":"2022-01-05T22:06:05.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.8.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.8.0"},{"name":"v0.6.1","sha":"99fe0b005a03008f7080fbfede930bdc192c3bb7","kind":"commit","published_at":"2021-12-28T21:54:42.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.1"},{"name":"v0.7.0","sha":"542cd568cb6abd9dfa1d11a8d9b8812678aab8ff","kind":"commit","published_at":"2021-11-12T21:00:45.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.7.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.7.0"},{"name":"v0.6.0","sha":"092caf0f50b9a09588b653e08480ec4077cb289f","kind":"commit","published_at":"2021-07-30T17:26:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.0"},{"name":"v0.5.1","sha":"c061b3f39cff652d18f95ee23ebfd39cb3f5ee89","kind":"commit","published_at":"2021-05-17T22:51:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.1"},{"name":"v0.5.0","sha":"a58f1d55bc799c55deb7cfaa35ef5234e9da7ff3","kind":"commit","published_at":"2021-04-28T18:01:26.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.0"},{"name":"v0.4.1","sha":"efb2d62d93a7705315b841d0544cb5b13565ff2a","kind":"commit","published_at":"2021-02-25T14:27:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.1"},{"name":"v0.4.0","sha":"4eb508cda163bef9f0859b30f22168e2a095281e","kind":"commit","published_at":"2021-01-13T22:10:12.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.0"},{"name":"v0.3.0","sha":"c95d7bdd6359dab9cbf575fae14e3389e3efa84e","kind":"commit","published_at":"2020-12-22T00:14:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.3.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.3.0"},{"name":"v0.2.1","sha":"f937abdc5c9af165a6921363fb49da3fe6cef421","kind":"commit","published_at":"2020-12-01T15:48:15.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.1"},{"name":"v0.2.0","sha":"7c586d4a0cef22340876855603735136c846793e","kind":"commit","published_at":"2020-12-01T00:50:30.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.0"},{"name":"v0.1.4","sha":"8a2841911ffee4f6892ca0083e89752fb46c48dd","kind":"commit","published_at":"2020-10-22T01:19:50.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.4"},{"name":"v0.1.3","sha":"2ff6f48e2524c5b02a915978ff247802451efa6b","kind":"commit","published_at":"2020-09-16T21:54:10.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.3"},{"name":"v0.1.2","sha":"cecf3907384cf6c55b9fddf4e7e8725ba206d5e5","kind":"commit","published_at":"2020-08-21T19:27:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.2"},{"name":"v0.1.1","sha":"2a1a46d929f8e396080340669edf5456a67493b5","kind":"commit","published_at":"2020-06-11T17:14:17.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.1"},{"name":"v0.1.0","sha":"57766c1fee7bdc67c4e70680efffed535d50b459","kind":"commit","published_at":"2020-06-03T20:01:40.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.0"}]},"repo_metadata_updated_at":"2023-03-21T18:37:56.949Z","dependent_packages_count":3580,"downloads":null,"downloads_period":null,"dependent_repos_count":11790,"rankings":{"downloads":null,"dependent_repos_count":0.06991592635522424,"dependent_packages_count":0.07474125460587848,"stargazers_count":1.378709214426294,"forks_count":1.3928771995026832,"docker_downloads_count":0.11139321599914583,"average":0.6055273621778452},"purl":"pkg:golang/github.com/google/go-containerregistry","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry","docker_dependents_count":3891,"docker_downloads_count":4564433695,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/dependencies","status":null,"funding_links":[],"critical":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1882879,"maintainers_count":0,"namespaces_count":723926,"keywords_count":97872,"github":"golang","metadata":{"funded_packages_count":39346},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-06-06T05:22:27.920Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},"unique_repositories_count":359,"unique_repositories_count_past_30_days":20,"recent_issues":[{"uuid":"4610130261","node_id":"PR_kwDODD8zz87jwoqO","number":996,"state":"open","title":"chore(deps): Bump the gomod group with 10 updates","user":"dependabot[bot]","labels":["dco-signoff: yes","size/L","dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-08T04:56:14.000Z","updated_at":"2026-06-08T04:56:31.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): Bump","group_name":"gomod","update_count":10,"packages":[{"name":"cloud.google.com/go/storage","old_version":"1.62.1","new_version":"1.62.3","repository_url":"https://github.com/googleapis/google-cloud-go"},{"name":"github.com/aws/aws-sdk-go-v2","old_version":"1.41.7","new_version":"1.41.12","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/config","old_version":"1.32.17","new_version":"1.32.23","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/docker/cli","old_version":"29.5.2+incompatible","new_version":"29.5.3+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/sigstore/sigstore","old_version":"1.10.6","new_version":"1.10.8","repository_url":"https://github.com/sigstore/sigstore"},{"name":"github.com/sigstore/sigstore/pkg/signature/kms/aws","old_version":"1.10.6","new_version":"1.10.8","repository_url":"https://github.com/sigstore/sigstore"},{"name":"github.com/sigstore/sigstore/pkg/signature/kms/azure","old_version":"1.10.6","new_version":"1.10.8","repository_url":"https://github.com/sigstore/sigstore"},{"name":"github.com/sigstore/sigstore/pkg/signature/kms/gcp","old_version":"1.10.6","new_version":"1.10.8","repository_url":"https://github.com/sigstore/sigstore"},{"name":"github.com/sigstore/sigstore/pkg/signature/kms/hashivault","old_version":"1.10.6","new_version":"1.10.8","repository_url":"https://github.com/sigstore/sigstore"}],"path":null,"ecosystem":"go"},"body":"Bumps the gomod group with 10 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.62.1` | `1.62.3` |\n| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.7` | `1.41.12` |\n| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.17` | `1.32.23` |\n| [github.com/docker/cli](https://github.com/docker/cli) | `29.5.2+incompatible` | `29.5.3+incompatible` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.5` | `0.21.6` |\n| [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.10.6` | `1.10.8` |\n| [github.com/sigstore/sigstore/pkg/signature/kms/aws](https://github.com/sigstore/sigstore) | `1.10.6` | `1.10.8` |\n| [github.com/sigstore/sigstore/pkg/signature/kms/azure](https://github.com/sigstore/sigstore) | `1.10.6` | `1.10.8` |\n| [github.com/sigstore/sigstore/pkg/signature/kms/gcp](https://github.com/sigstore/sigstore) | `1.10.6` | `1.10.8` |\n| [github.com/sigstore/sigstore/pkg/signature/kms/hashivault](https://github.com/sigstore/sigstore) | `1.10.6` | `1.10.8` |\n\nUpdates `cloud.google.com/go/storage` from 1.62.1 to 1.62.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/google-cloud-go/releases\"\u003ecloud.google.com/go/storage's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003estorage: v1.62.3\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/storage/v1.62.2...storage/v1.62.3\"\u003ev1.62.3\u003c/a\u003e (2026-06-03)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003efix race condition during retries in gRPC writer (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14649\"\u003e#14649\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/04b6c635\"\u003e04b6c635\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eadd server closed idle connection to retriable errors (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14594\"\u003e#14594\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/20b37d65\"\u003e20b37d65\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003estorage: v1.62.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/storage/v1.62.1...storage/v1.62.2\"\u003ev1.62.2\u003c/a\u003e (2026-05-18)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eenable open telemetry attrs (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14426\"\u003e#14426\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/74eab64d\"\u003e74eab64d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003erestore metadata operations timeout in gRPC (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14575\"\u003e#14575\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/275ff562\"\u003e275ff562\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSet default chunkRetryDeadline to 32s in NewWriterFromAppendableObject (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14458\"\u003e#14458\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/ec7c7d66\"\u003eec7c7d66\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003erefactor userProject metadata propagation in ListObjects  (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14533\"\u003e#14533\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/fbb543e3\"\u003efbb543e3\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/8afd6a0bc8822cdcd6b0f90d64522a44459c39a2\"\u003e\u003ccode\u003e8afd6a0\u003c/code\u003e\u003c/a\u003e chore: librarian release pull request: 20260603T093646Z (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14699\"\u003e#14699\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/04b6c635c09de1772fcefd8a7fd5e4ffdd370b79\"\u003e\u003ccode\u003e04b6c63\u003c/code\u003e\u003c/a\u003e fix(storage): fix race condition during retries in gRPC writer (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14649\"\u003e#14649\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/20b37d65d56d4b5e7b8d43b1f6b2ddefcd8944be\"\u003e\u003ccode\u003e20b37d6\u003c/code\u003e\u003c/a\u003e fix(storage): add server closed idle connection to retriable errors (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14594\"\u003e#14594\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/50a575507ac6f3bdcc926dceda45cfa4c943a637\"\u003e\u003ccode\u003e50a5755\u003c/code\u003e\u003c/a\u003e chore: librarian release pull request: 20260518T161338Z (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14610\"\u003e#14610\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/585840ff8168325dea801e13c398055692c0fe32\"\u003e\u003ccode\u003e585840f\u003c/code\u003e\u003c/a\u003e spanner: skip flaky TestIntegration_DbRemovalRecovery (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14607\"\u003e#14607\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/f8bf88faa8738e9ca6684d9e28e2f0c05ff1eda1\"\u003e\u003ccode\u003ef8bf88f\u003c/code\u003e\u003c/a\u003e test(spanner): retry query after database recreation in integration test (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14\"\u003e#14\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/9168ab887eb52ea8f4b45425f493d14ff047d3b6\"\u003e\u003ccode\u003e9168ab8\u003c/code\u003e\u003c/a\u003e chore(librariangen): tweak release preview test (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14599\"\u003e#14599\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/f8b9a93aefedc167db7c7a28140d47ef2f1e3a82\"\u003e\u003ccode\u003ef8b9a93\u003c/code\u003e\u003c/a\u003e fix(spanner/spannertest): Support UUID as a base data type (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14117\"\u003e#14117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/a42fd83b04237b9f04e54cf0de86978c97ad5a04\"\u003e\u003ccode\u003ea42fd83\u003c/code\u003e\u003c/a\u003e fix(internal/librariange): release preview support (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14588\"\u003e#14588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/d9448309a64e756a5facdfbd6ffa9d51f27c0610\"\u003e\u003ccode\u003ed944830\u003c/code\u003e\u003c/a\u003e fix(datastore): add retries to emulator (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14591\"\u003e#14591\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/storage/v1.62.1...storage/v1.62.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2` from 1.41.7 to 1.41.12\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7146c2b4007293f0acc9b2e8b92ffa7a30841df0\"\u003e\u003ccode\u003e7146c2b\u003c/code\u003e\u003c/a\u003e Release 2026-06-04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5aef2fd8a4027ecf34eb5e32a28ff4a955b353d6\"\u003e\u003ccode\u003e5aef2fd\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f94c04478d36a4ffb777221761459fb4b1d20cba\"\u003e\u003ccode\u003ef94c044\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f00b205128286d6431115dd078da3c36197999f4\"\u003e\u003ccode\u003ef00b205\u003c/code\u003e\u003c/a\u003e bump to smithy-go v1.27.1 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3434\"\u003e#3434\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/c4ad7dee6ebd9a3e1c7ee208f77e4ac8532b17c9\"\u003e\u003ccode\u003ec4ad7de\u003c/code\u003e\u003c/a\u003e drop service/internal/benchmark (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3433\"\u003e#3433\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/91eca463daf932474778dc4a984c41ecfcd9dc3c\"\u003e\u003ccode\u003e91eca46\u003c/code\u003e\u003c/a\u003e Release 2026-06-03.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e9d9e156c352b4956ed0b3d57614467d1f79c62b\"\u003e\u003ccode\u003ee9d9e15\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/def6a3a4bb06c199a4843c501d84730d8235cab4\"\u003e\u003ccode\u003edef6a3a\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/fa369bd7bb9576e85ac094a43a15e8372a3d0129\"\u003e\u003ccode\u003efa369bd\u003c/code\u003e\u003c/a\u003e Release 2026-06-03\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/960ee4dc8380a46ded94f3976e073242d42bf8ed\"\u003e\u003ccode\u003e960ee4d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/v1.41.7...v1.41.12\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/config` from 1.32.17 to 1.32.23\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7146c2b4007293f0acc9b2e8b92ffa7a30841df0\"\u003e\u003ccode\u003e7146c2b\u003c/code\u003e\u003c/a\u003e Release 2026-06-04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5aef2fd8a4027ecf34eb5e32a28ff4a955b353d6\"\u003e\u003ccode\u003e5aef2fd\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f94c04478d36a4ffb777221761459fb4b1d20cba\"\u003e\u003ccode\u003ef94c044\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f00b205128286d6431115dd078da3c36197999f4\"\u003e\u003ccode\u003ef00b205\u003c/code\u003e\u003c/a\u003e bump to smithy-go v1.27.1 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3434\"\u003e#3434\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/c4ad7dee6ebd9a3e1c7ee208f77e4ac8532b17c9\"\u003e\u003ccode\u003ec4ad7de\u003c/code\u003e\u003c/a\u003e drop service/internal/benchmark (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3433\"\u003e#3433\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/91eca463daf932474778dc4a984c41ecfcd9dc3c\"\u003e\u003ccode\u003e91eca46\u003c/code\u003e\u003c/a\u003e Release 2026-06-03.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e9d9e156c352b4956ed0b3d57614467d1f79c62b\"\u003e\u003ccode\u003ee9d9e15\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/def6a3a4bb06c199a4843c501d84730d8235cab4\"\u003e\u003ccode\u003edef6a3a\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/fa369bd7bb9576e85ac094a43a15e8372a3d0129\"\u003e\u003ccode\u003efa369bd\u003c/code\u003e\u003c/a\u003e Release 2026-06-03\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/960ee4dc8380a46ded94f3976e073242d42bf8ed\"\u003e\u003ccode\u003e960ee4d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.17...config/v1.32.23\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/cli` from 29.5.2+incompatible to 29.5.3+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/d1c06ef6b41d88d76866aea43c246cd7c63d04fa\"\u003e\u003ccode\u003ed1c06ef\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7022\"\u003e#7022\u003c/a\u003e from mickael-docker/docs-request-field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/7dd053b1d1d66bec5f793d090dba7e81240afadd\"\u003e\u003ccode\u003e7dd053b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7003\"\u003e#7003\u003c/a\u003e from thaJeztah/logs_links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/37c3d316cc76fa9ad27e3897fa7e60c5a3b66d1f\"\u003e\u003ccode\u003e37c3d31\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7024\"\u003e#7024\u003c/a\u003e from thaJeztah/add_zizmor\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/45f10f226e8e6eba41064a7819bec986ac850288\"\u003e\u003ccode\u003e45f10f2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7025\"\u003e#7025\u003c/a\u003e from vvoland/update-go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/b458dc9e81e732fdaa66dac672db36ff28d6b6c5\"\u003e\u003ccode\u003eb458dc9\u003c/code\u003e\u003c/a\u003e update to go1.26.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1953194bd5a44b1a991eea79c4f0aacfb6c74aab\"\u003e\u003ccode\u003e1953194\u003c/code\u003e\u003c/a\u003e gha: apply zizmor fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/ac0419ea90d1177eb11655a5ee9795126e8deb7a\"\u003e\u003ccode\u003eac0419e\u003c/code\u003e\u003c/a\u003e gha: add zizmor workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1aa0416b8a5973bc5f605a42d13f1926ab01f2ac\"\u003e\u003ccode\u003e1aa0416\u003c/code\u003e\u003c/a\u003e docs: recommend default deny and clarify requesturi field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/3a8595298407d5ab67d0ed13d57819dddf561d98\"\u003e\u003ccode\u003e3a85952\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7020\"\u003e#7020\u003c/a\u003e from thaJeztah/full_semver\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/8d3fbdf5707f6cd6b3157eef5aeba8af2f436f9d\"\u003e\u003ccode\u003e8d3fbdf\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7019\"\u003e#7019\u003c/a\u003e from thaJeztah/dependabot_labels\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v29.5.2...v29.5.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore` from 1.10.6 to 1.10.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.8\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport standard PKCS#8 encrypted private key decryption in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2333\"\u003esigstore/sigstore#2333\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.10.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd functional options to DSSE to improve memory usage, validation in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2326\"\u003esigstore/sigstore#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExtend PEM private key unmarshalling to support legacy format in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2332\"\u003esigstore/sigstore#2332\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/c761681120b37d9c4b1410cf5720571582ab090a\"\u003e\u003ccode\u003ec761681\u003c/code\u003e\u003c/a\u003e Support standard PKCS#8 encrypted private key decryption (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2333\"\u003e#2333\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/005faf920b7c695a89b68cf226f95d88a468deb8\"\u003e\u003ccode\u003e005faf9\u003c/code\u003e\u003c/a\u003e Extend PEM private key unmarshalling to support legacy format (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2332\"\u003e#2332\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/e70e4ed4219b8017e5462886cd1c06df23e8b3cf\"\u003e\u003ccode\u003ee70e4ed\u003c/code\u003e\u003c/a\u003e add functional options to DSSE to improve memory usage, validation (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2326\"\u003e#2326\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/899684dc4056768cda4f2523842cd90de4edbfcf\"\u003e\u003ccode\u003e899684d\u003c/code\u003e\u003c/a\u003e build(deps): Bump github.com/letsencrypt/boulder (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2307\"\u003e#2307\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/181dc40b3141c75dde47e3871b2174e3dcfda9e0\"\u003e\u003ccode\u003e181dc40\u003c/code\u003e\u003c/a\u003e build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2308\"\u003e#2308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2c141a745b811348a0dbea4447e0c8b2f3092d2f\"\u003e\u003ccode\u003e2c141a7\u003c/code\u003e\u003c/a\u003e build(deps): Bump golangci/golangci-lint-action in the all group (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/b6c02147eb2755eb8ff78ec96c97835d3742821d\"\u003e\u003ccode\u003eb6c0214\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2ff50c9b56fecfa71e05edd7aa5e258d45c78a47\"\u003e\u003ccode\u003e2ff50c9\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/dependency-review-action from 4.8.3 to 5.0.0 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2330\"\u003e#2330\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/d0204c36ab40cfc854fa3689f7f472a98c83fea2\"\u003e\u003ccode\u003ed0204c3\u003c/code\u003e\u003c/a\u003e build(deps): Bump hashicorp/vault from 1.21.4 to 2.0.1 in /test/e2e (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/afdf89749d49660ba76eb59a410352e4e33225cb\"\u003e\u003ccode\u003eafdf897\u003c/code\u003e\u003c/a\u003e build(deps): Bump google.golang.org/grpc in /pkg/signature/kms/gcp (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2312\"\u003e#2312\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore/pkg/signature/kms/aws` from 1.10.6 to 1.10.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore/pkg/signature/kms/aws's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.8\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport standard PKCS#8 encrypted private key decryption in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2333\"\u003esigstore/sigstore#2333\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.10.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd functional options to DSSE to improve memory usage, validation in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2326\"\u003esigstore/sigstore#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExtend PEM private key unmarshalling to support legacy format in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2332\"\u003esigstore/sigstore#2332\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/c761681120b37d9c4b1410cf5720571582ab090a\"\u003e\u003ccode\u003ec761681\u003c/code\u003e\u003c/a\u003e Support standard PKCS#8 encrypted private key decryption (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2333\"\u003e#2333\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/005faf920b7c695a89b68cf226f95d88a468deb8\"\u003e\u003ccode\u003e005faf9\u003c/code\u003e\u003c/a\u003e Extend PEM private key unmarshalling to support legacy format (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2332\"\u003e#2332\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/e70e4ed4219b8017e5462886cd1c06df23e8b3cf\"\u003e\u003ccode\u003ee70e4ed\u003c/code\u003e\u003c/a\u003e add functional options to DSSE to improve memory usage, validation (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2326\"\u003e#2326\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/899684dc4056768cda4f2523842cd90de4edbfcf\"\u003e\u003ccode\u003e899684d\u003c/code\u003e\u003c/a\u003e build(deps): Bump github.com/letsencrypt/boulder (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2307\"\u003e#2307\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/181dc40b3141c75dde47e3871b2174e3dcfda9e0\"\u003e\u003ccode\u003e181dc40\u003c/code\u003e\u003c/a\u003e build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2308\"\u003e#2308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2c141a745b811348a0dbea4447e0c8b2f3092d2f\"\u003e\u003ccode\u003e2c141a7\u003c/code\u003e\u003c/a\u003e build(deps): Bump golangci/golangci-lint-action in the all group (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/b6c02147eb2755eb8ff78ec96c97835d3742821d\"\u003e\u003ccode\u003eb6c0214\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2ff50c9b56fecfa71e05edd7aa5e258d45c78a47\"\u003e\u003ccode\u003e2ff50c9\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/dependency-review-action from 4.8.3 to 5.0.0 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2330\"\u003e#2330\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/d0204c36ab40cfc854fa3689f7f472a98c83fea2\"\u003e\u003ccode\u003ed0204c3\u003c/code\u003e\u003c/a\u003e build(deps): Bump hashicorp/vault from 1.21.4 to 2.0.1 in /test/e2e (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/afdf89749d49660ba76eb59a410352e4e33225cb\"\u003e\u003ccode\u003eafdf897\u003c/code\u003e\u003c/a\u003e build(deps): Bump google.golang.org/grpc in /pkg/signature/kms/gcp (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2312\"\u003e#2312\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore/pkg/signature/kms/azure` from 1.10.6 to 1.10.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore/pkg/signature/kms/azure's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.8\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport standard PKCS#8 encrypted private key decryption in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2333\"\u003esigstore/sigstore#2333\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.10.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd functional options to DSSE to improve memory usage, validation in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2326\"\u003esigstore/sigstore#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExtend PEM private key unmarshalling to support legacy format in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2332\"\u003esigstore/sigstore#2332\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/c761681120b37d9c4b1410cf5720571582ab090a\"\u003e\u003ccode\u003ec761681\u003c/code\u003e\u003c/a\u003e Support standard PKCS#8 encrypted private key decryption (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2333\"\u003e#2333\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/005faf920b7c695a89b68cf226f95d88a468deb8\"\u003e\u003ccode\u003e005faf9\u003c/code\u003e\u003c/a\u003e Extend PEM private key unmarshalling to support legacy format (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2332\"\u003e#2332\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/e70e4ed4219b8017e5462886cd1c06df23e8b3cf\"\u003e\u003ccode\u003ee70e4ed\u003c/code\u003e\u003c/a\u003e add functional options to DSSE to improve memory usage, validation (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2326\"\u003e#2326\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/899684dc4056768cda4f2523842cd90de4edbfcf\"\u003e\u003ccode\u003e899684d\u003c/code\u003e\u003c/a\u003e build(deps): Bump github.com/letsencrypt/boulder (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2307\"\u003e#2307\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/181dc40b3141c75dde47e3871b2174e3dcfda9e0\"\u003e\u003ccode\u003e181dc40\u003c/code\u003e\u003c/a\u003e build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2308\"\u003e#2308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2c141a745b811348a0dbea4447e0c8b2f3092d2f\"\u003e\u003ccode\u003e2c141a7\u003c/code\u003e\u003c/a\u003e build(deps): Bump golangci/golangci-lint-action in the all group (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/b6c02147eb2755eb8ff78ec96c97835d3742821d\"\u003e\u003ccode\u003eb6c0214\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2ff50c9b56fecfa71e05edd7aa5e258d45c78a47\"\u003e\u003ccode\u003e2ff50c9\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/dependency-review-action from 4.8.3 to 5.0.0 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2330\"\u003e#2330\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/d0204c36ab40cfc854fa3689f7f472a98c83fea2\"\u003e\u003ccode\u003ed0204c3\u003c/code\u003e\u003c/a\u003e build(deps): Bump hashicorp/vault from 1.21.4 to 2.0.1 in /test/e2e (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/afdf89749d49660ba76eb59a410352e4e33225cb\"\u003e\u003ccode\u003eafdf897\u003c/code\u003e\u003c/a\u003e build(deps): Bump google.golang.org/grpc in /pkg/signature/kms/gcp (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2312\"\u003e#2312\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore/pkg/signature/kms/gcp` from 1.10.6 to 1.10.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore/pkg/signature/kms/gcp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.8\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport standard PKCS#8 encrypted private key decryption in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2333\"\u003esigstore/sigstore#2333\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.10.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd functional options to DSSE to improve memory usage, validation in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2326\"\u003esigstore/sigstore#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExtend PEM private key unmarshalling to support legacy format in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2332\"\u003esigstore/sigstore#2332\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/c761681120b37d9c4b1410cf5720571582ab090a\"\u003e\u003ccode\u003ec761681\u003c/code\u003e\u003c/a\u003e Support standard PKCS#8 encrypted private key decryption (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2333\"\u003e#2333\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/005faf920b7c695a89b68cf226f95d88a468deb8\"\u003e\u003ccode\u003e005faf9\u003c/code\u003e\u003c/a\u003e Extend PEM private key unmarshalling to support legacy format (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2332\"\u003e#2332\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/e70e4ed4219b8017e5462886cd1c06df23e8b3cf\"\u003e\u003ccode\u003ee70e4ed\u003c/code\u003e\u003c/a\u003e add functional options to DSSE to improve memory usage, validation (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2326\"\u003e#2326\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/899684dc4056768cda4f2523842cd90de4edbfcf\"\u003e\u003ccode\u003e899684d\u003c/code\u003e\u003c/a\u003e build(deps): Bump github.com/letsencrypt/boulder (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2307\"\u003e#2307\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/181dc40b3141c75dde47e3871b2174e3dcfda9e0\"\u003e\u003ccode\u003e181dc40\u003c/code\u003e\u003c/a\u003e build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2308\"\u003e#2308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2c141a745b811348a0dbea4447e0c8b2f3092d2f\"\u003e\u003ccode\u003e2c141a7\u003c/code\u003e\u003c/a\u003e build(deps): Bump golangci/golangci-lint-action in the all group (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/b6c02147eb2755eb8ff78ec96c97835d3742821d\"\u003e\u003ccode\u003eb6c0214\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2ff50c9b56fecfa71e05edd7aa5e258d45c78a47\"\u003e\u003ccode\u003e2ff50c9\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/dependency-review-action from 4.8.3 to 5.0.0 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2330\"\u003e#2330\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/d0204c36ab40cfc854fa3689f7f472a98c83fea2\"\u003e\u003ccode\u003ed0204c3\u003c/code\u003e\u003c/a\u003e build(deps): Bump hashicorp/vault from 1.21.4 to 2.0.1 in /test/e2e (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/afdf89749d49660ba76eb59a410352e4e33225cb\"\u003e\u003ccode\u003eafdf897\u003c/code\u003e\u003c/a\u003e build(deps): Bump google.golang.org/grpc in /pkg/signature/kms/gcp (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2312\"\u003e#2312\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore/pkg/signature/kms/hashivault` from 1.10.6 to 1.10.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore/pkg/signature/kms/hashivault's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.8\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport standard PKCS#8 encrypted private key decryption in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2333\"\u003esigstore/sigstore#2333\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.10.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd functional options to DSSE to improve memory usage, validation in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2326\"\u003esigstore/sigstore#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExtend PEM private key unmarshalling to support legacy format in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2332\"\u003esigstore/sigstore#2332\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/c761681120b37d9c4b1410cf5720571582ab090a\"\u003e\u003ccode\u003ec761681\u003c/code\u003e\u003c/a\u003e Support standard PKCS#8 encrypted private key decryption (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2333\"\u003e#2333\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/005faf920b7c695a89b68cf226f95d88a468deb8\"\u003e\u003ccode\u003e005faf9\u003c/code\u003e\u003c/a\u003e Extend PEM private key unmarshalling to support legacy format (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2332\"\u003e#2332\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/e70e4ed4219b8017e5462886cd1c06df23e8b3cf\"\u003e\u003ccode\u003ee70e4ed\u003c/code\u003e\u003c/a\u003e add functional options to DSSE to improve memory usage, validation (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2326\"\u003e#2326\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/899684dc4056768cda4f2523842cd90de4edbfcf\"\u003e\u003ccode\u003e899684d\u003c/code\u003e\u003c/a\u003e build(deps): Bump github.com/letsencrypt/boulder (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2307\"\u003e#2307\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/181dc40b3141c75dde47e3871b2174e3dcfda9e0\"\u003e\u003ccode\u003e181dc40\u003c/code\u003e\u003c/a\u003e build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2308\"\u003e#2308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2c141a745b811348a0dbea4447e0c8b2f3092d2f\"\u003e\u003ccode\u003e2c141a7\u003c/code\u003e\u003c/a\u003e build(deps): Bump golangci/golangci-lint-action in the all group (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/b6c02147eb2755eb8ff78ec96c97835d3742821d\"\u003e\u003ccode\u003eb6c0214\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2ff50c9b56fecfa71e05edd7aa5e258d45c78a47\"\u003e\u003ccode\u003e2ff50c9\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/dependency-review-action from 4.8.3 to 5.0.0 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2330\"\u003e#2330\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/d0204c36ab40cfc854fa3689f7f472a98c83fea2\"\u003e\u003ccode\u003ed0204c3\u003c/code\u003e\u003c/a\u003e build(deps): Bump hashicorp/vault from 1.21.4 to 2.0.1 in /test/e2e (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/afdf89749d49660ba76eb59a410352e4e33225cb\"\u003e\u003ccode\u003eafdf897\u003c/code\u003e\u003c/a\u003e build(deps): Bump google.golang.org/grpc in /pkg/signature/kms/gcp (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2312\"\u003e#2312\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/falcosecurity/falcoctl/pull/996","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/falcosecurity%2Ffalcoctl/issues/996","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/996/packages"},{"uuid":"4594283367","node_id":"PR_kwDOFfHUDs7i9pLA","number":613,"state":"open","title":"Bump the all group across 2 directories with 10 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-05T04:48:36.000Z","updated_at":"2026-06-09T06:01:47.955Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"all","update_count":10,"packages":[{"name":"github.com/aws/aws-sdk-go-v2","old_version":"1.41.5","new_version":"1.41.12","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/config","old_version":"1.32.13","new_version":"1.32.23","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/service/ec2","old_version":"1.296.2","new_version":"1.305.2","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.3","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/maxbrunsfeld/counterfeiter/v6","old_version":"6.12.1","new_version":"6.12.2","repository_url":"https://github.com/maxbrunsfeld/counterfeiter"},{"name":"helm.sh/helm/v3","old_version":"3.20.1","new_version":"3.21.0","repository_url":"https://github.com/helm/helm"}],"path":null,"ecosystem":"go"},"body":"Bumps the all group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.5` | `1.41.12` |\n| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.13` | `1.32.23` |\n| [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) | `1.296.2` | `1.305.2` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.3` | `0.21.6` |\n| [github.com/maxbrunsfeld/counterfeiter/v6](https://github.com/maxbrunsfeld/counterfeiter) | `6.12.1` | `6.12.2` |\n| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.20.1` | `3.21.0` |\n\nBumps the all group with 3 updates in the /buoy directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git), [golang.org/x/mod](https://github.com/golang/mod) and [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery).\n\nUpdates `github.com/aws/aws-sdk-go-v2` from 1.41.5 to 1.41.12\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7146c2b4007293f0acc9b2e8b92ffa7a30841df0\"\u003e\u003ccode\u003e7146c2b\u003c/code\u003e\u003c/a\u003e Release 2026-06-04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5aef2fd8a4027ecf34eb5e32a28ff4a955b353d6\"\u003e\u003ccode\u003e5aef2fd\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f94c04478d36a4ffb777221761459fb4b1d20cba\"\u003e\u003ccode\u003ef94c044\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f00b205128286d6431115dd078da3c36197999f4\"\u003e\u003ccode\u003ef00b205\u003c/code\u003e\u003c/a\u003e bump to smithy-go v1.27.1 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3434\"\u003e#3434\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/c4ad7dee6ebd9a3e1c7ee208f77e4ac8532b17c9\"\u003e\u003ccode\u003ec4ad7de\u003c/code\u003e\u003c/a\u003e drop service/internal/benchmark (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3433\"\u003e#3433\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/91eca463daf932474778dc4a984c41ecfcd9dc3c\"\u003e\u003ccode\u003e91eca46\u003c/code\u003e\u003c/a\u003e Release 2026-06-03.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e9d9e156c352b4956ed0b3d57614467d1f79c62b\"\u003e\u003ccode\u003ee9d9e15\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/def6a3a4bb06c199a4843c501d84730d8235cab4\"\u003e\u003ccode\u003edef6a3a\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/fa369bd7bb9576e85ac094a43a15e8372a3d0129\"\u003e\u003ccode\u003efa369bd\u003c/code\u003e\u003c/a\u003e Release 2026-06-03\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/960ee4dc8380a46ded94f3976e073242d42bf8ed\"\u003e\u003ccode\u003e960ee4d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/v1.41.5...v1.41.12\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/config` from 1.32.13 to 1.32.23\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7146c2b4007293f0acc9b2e8b92ffa7a30841df0\"\u003e\u003ccode\u003e7146c2b\u003c/code\u003e\u003c/a\u003e Release 2026-06-04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5aef2fd8a4027ecf34eb5e32a28ff4a955b353d6\"\u003e\u003ccode\u003e5aef2fd\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f94c04478d36a4ffb777221761459fb4b1d20cba\"\u003e\u003ccode\u003ef94c044\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f00b205128286d6431115dd078da3c36197999f4\"\u003e\u003ccode\u003ef00b205\u003c/code\u003e\u003c/a\u003e bump to smithy-go v1.27.1 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3434\"\u003e#3434\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/c4ad7dee6ebd9a3e1c7ee208f77e4ac8532b17c9\"\u003e\u003ccode\u003ec4ad7de\u003c/code\u003e\u003c/a\u003e drop service/internal/benchmark (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3433\"\u003e#3433\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/91eca463daf932474778dc4a984c41ecfcd9dc3c\"\u003e\u003ccode\u003e91eca46\u003c/code\u003e\u003c/a\u003e Release 2026-06-03.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e9d9e156c352b4956ed0b3d57614467d1f79c62b\"\u003e\u003ccode\u003ee9d9e15\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/def6a3a4bb06c199a4843c501d84730d8235cab4\"\u003e\u003ccode\u003edef6a3a\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/fa369bd7bb9576e85ac094a43a15e8372a3d0129\"\u003e\u003ccode\u003efa369bd\u003c/code\u003e\u003c/a\u003e Release 2026-06-03\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/960ee4dc8380a46ded94f3976e073242d42bf8ed\"\u003e\u003ccode\u003e960ee4d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.13...config/v1.32.23\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/service/ec2` from 1.296.2 to 1.305.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7146c2b4007293f0acc9b2e8b92ffa7a30841df0\"\u003e\u003ccode\u003e7146c2b\u003c/code\u003e\u003c/a\u003e Release 2026-06-04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5aef2fd8a4027ecf34eb5e32a28ff4a955b353d6\"\u003e\u003ccode\u003e5aef2fd\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f94c04478d36a4ffb777221761459fb4b1d20cba\"\u003e\u003ccode\u003ef94c044\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f00b205128286d6431115dd078da3c36197999f4\"\u003e\u003ccode\u003ef00b205\u003c/code\u003e\u003c/a\u003e bump to smithy-go v1.27.1 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3434\"\u003e#3434\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/c4ad7dee6ebd9a3e1c7ee208f77e4ac8532b17c9\"\u003e\u003ccode\u003ec4ad7de\u003c/code\u003e\u003c/a\u003e drop service/internal/benchmark (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3433\"\u003e#3433\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/91eca463daf932474778dc4a984c41ecfcd9dc3c\"\u003e\u003ccode\u003e91eca46\u003c/code\u003e\u003c/a\u003e Release 2026-06-03.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e9d9e156c352b4956ed0b3d57614467d1f79c62b\"\u003e\u003ccode\u003ee9d9e15\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/def6a3a4bb06c199a4843c501d84730d8235cab4\"\u003e\u003ccode\u003edef6a3a\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/fa369bd7bb9576e85ac094a43a15e8372a3d0129\"\u003e\u003ccode\u003efa369bd\u003c/code\u003e\u003c/a\u003e Release 2026-06-03\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/960ee4dc8380a46ded94f3976e073242d42bf8ed\"\u003e\u003ccode\u003e960ee4d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.296.2...service/ec2/v1.305.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.3 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.21.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2254\"\u003egoogle/go-containerregistry#2254\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.3...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/maxbrunsfeld/counterfeiter/v6` from 6.12.1 to 6.12.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/releases\"\u003egithub.com/maxbrunsfeld/counterfeiter/v6's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.12.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump golang.org/x/text from 0.31.0 to 0.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/349\"\u003emaxbrunsfeld/counterfeiter#349\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github.com/onsi/gomega from 1.38.2 to 1.38.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/350\"\u003emaxbrunsfeld/counterfeiter#350\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/tools from 0.39.0 to 0.40.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/348\"\u003emaxbrunsfeld/counterfeiter#348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github.com/onsi/gomega from 1.38.3 to 1.39.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/351\"\u003emaxbrunsfeld/counterfeiter#351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/tools from 0.40.0 to 0.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/353\"\u003emaxbrunsfeld/counterfeiter#353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github.com/onsi/gomega from 1.39.0 to 1.39.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/354\"\u003emaxbrunsfeld/counterfeiter#354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/text from 0.33.0 to 0.34.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/356\"\u003emaxbrunsfeld/counterfeiter#356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/tools from 0.41.0 to 0.42.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/355\"\u003emaxbrunsfeld/counterfeiter#355\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/text from 0.34.0 to 0.35.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/357\"\u003emaxbrunsfeld/counterfeiter#357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/tools from 0.42.0 to 0.43.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/358\"\u003emaxbrunsfeld/counterfeiter#358\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/compare/v6.12.1...v6.12.2\"\u003ehttps://github.com/maxbrunsfeld/counterfeiter/compare/v6.12.1...v6.12.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/4fbda3b69602620795b66f504c63e8f4671d1335\"\u003e\u003ccode\u003e4fbda3b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/358\"\u003e#358\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/golang.org/x/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/49c41c05fefceea4b07e4569c9d01b881d14bec7\"\u003e\u003ccode\u003e49c41c0\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/tools from 0.42.0 to 0.43.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/266628fb9aab0c6a434c665409c7cfd901198916\"\u003e\u003ccode\u003e266628f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/357\"\u003e#357\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/golang.org/x/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/e19e05eee34e8794f036c2da96bedec17b2f115e\"\u003e\u003ccode\u003ee19e05e\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/text from 0.34.0 to 0.35.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/46bc14382eff44b0323bea8a26d0f22b24cf1f5a\"\u003e\u003ccode\u003e46bc143\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/355\"\u003e#355\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/golang.org/x/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/2fa471e42c1e49affb8d3db2e1428a369e9a84d5\"\u003e\u003ccode\u003e2fa471e\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/tools from 0.41.0 to 0.42.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/0f165c01f6fab30bb872cf173c2609b56e796eb8\"\u003e\u003ccode\u003e0f165c0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/356\"\u003e#356\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/golang.org/x/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/807573ef71150b212ae5070207cd40e527eda58e\"\u003e\u003ccode\u003e807573e\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/text from 0.33.0 to 0.34.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/7c40434dee088f5852b1e0f52d99274b79972760\"\u003e\u003ccode\u003e7c40434\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/354\"\u003e#354\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/github.com/on...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/92c75caa6e936457bc76f506444fee900c8f27bf\"\u003e\u003ccode\u003e92c75ca\u003c/code\u003e\u003c/a\u003e Bump github.com/onsi/gomega from 1.39.0 to 1.39.1\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/compare/v6.12.1...v6.12.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `helm.sh/helm/v3` from 3.20.1 to 3.21.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/helm/helm/releases\"\u003ehelm.sh/helm/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eHelm v3.21.0 is a feature release. Users are encouraged to upgrade for the best experience.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!WARNING]\nHelm v3 is approaching end-of-life. Please update to Helm v4.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThe community keeps growing, and we'd love to see you there!\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJoin the discussion in \u003ca href=\"https://kubernetes.slack.com\"\u003eKubernetes Slack\u003c/a\u003e:\n\u003cul\u003e\n\u003cli\u003efor questions and just to hang out\u003c/li\u003e\n\u003cli\u003efor discussing PRs, code, and bugs\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eHang out at the Public Developer Call: Thursday, 9:30 Pacific via \u003ca href=\"https://zoom.us/j/696660622\"\u003eZoom\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTest, debug, and contribute charts: \u003ca href=\"https://artifacthub.io/packages/search?kind=0\"\u003eArtifactHub/packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNotable Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKubernetes client libraries to v1.36\u003c/li\u003e\n\u003cli\u003enotable changes here\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eInstallation and Upgrading\u003c/h2\u003e\n\u003cp\u003eDownload Helm v3.21.0. The common platform binaries are here:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-darwin-amd64.tar.gz\"\u003eMacOS amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-darwin-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 8bc0c1f85f8738cc3cda4a2cc73047145bcdcb1f4d9cdcc29073037bfb22fa2e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-darwin-arm64.tar.gz\"\u003eMacOS arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-darwin-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 68bfbdc022c543a2a022597b20298216877e98abe6e4a345d3ecf114d79cae5f)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-amd64.tar.gz\"\u003eLinux amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 0093eb572e3d2380f094df162ddb525e219249de88957afe24cfbb19632acd36)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-arm.tar.gz\"\u003eLinux arm\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-arm.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / d310ac387324538a37192e8e13628eb1def2596bbac6b6481ae20d8d5e3532bd)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-arm64.tar.gz\"\u003eLinux arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 8de5a0c9a47431e59fd560e91e0779c8cf9316c383da7efb84128a4c339ecb2d)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-386.tar.gz\"\u003eLinux i386\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-386.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / fc85f14c9ce7e6a48a2b19a97edbc5529ed7aa2bc10f3d2c241e1c2ef12ccd22)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-ppc64le.tar.gz\"\u003eLinux ppc64le\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-ppc64le.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / e2dced0f903acda417f879012c7e09ca461000e26a04e8f7a1cfe0dcf495f62c)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-s390x.tar.gz\"\u003eLinux s390x\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-s390x.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / a176d7460a615b8df5b1a58ecf09fcc731c7733ca4cf10116cf198575b0371b5)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-riscv64.tar.gz\"\u003eLinux riscv64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-riscv64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 4935c95c55bc5c3357143698a87185e17a39de9b6148dfd6cce0fc11859dbfeb)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-windows-amd64.zip\"\u003eWindows amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-windows-amd64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / 3ea6b8383e6c0b7ce45d06a5746313b8e9225edd88d42f4f64582ff3792d7b55)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-windows-arm64.zip\"\u003eWindows arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-windows-arm64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / 90d8c87e07267e6c71e678c9e33dd11cc121789c823ccc380de9d1dd521c8cba)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThis release was signed by \u003ca href=\"https://github.com/gjenkins8\"\u003e\u003ccode\u003e@​gjenkins8\u003c/code\u003e\u003c/a\u003e with key \u003ccode\u003eBF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739\u003c/code\u003e, which can be found at \u003ca href=\"https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739\"\u003ehttps://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739\u003c/a\u003e. Please use the attached signatures for verifying this release using gpg.\u003c/p\u003e\n\u003cp\u003eThe \u003ca href=\"https://helm.sh/docs/intro/quickstart/\"\u003eQuickstart Guide\u003c/a\u003e will get you going from there. For \u003cstrong\u003eupgrade instructions\u003c/strong\u003e or detailed installation notes, check the \u003ca href=\"https://helm.sh/docs/intro/install/\"\u003einstall guide\u003c/a\u003e. You can also use a \u003ca href=\"https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3\"\u003escript to install\u003c/a\u003e on any system with \u003ccode\u003ebash\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eWhat's Next\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e3.21.1 will contain only bug fixes.\u003c/li\u003e\n\u003cli\u003e3.22.0 is the next feature release for Kubernetes v1.37\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v3] Bump to version v3.21 e0878d41b711792be60777fd65ad23a101e6b85f (George Jenkins)\u003c/li\u003e\n\u003cli\u003efix: upgrade opentelemetry packages to patch CVEs 13d5fc4ae0e7222e1af8796ff4fa467b52208471 (Terry Howe)\u003c/li\u003e\n\u003cli\u003efix: Chart dot-name path bug 2552884e3bc1b763c3901c5ea7240b59ef6791f1 (George Jenkins)\u003c/li\u003e\n\u003cli\u003efix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow ec05dd5f0481c2de3a41a554adf3c52a6a2a9bb6 (Terry Howe)\u003c/li\u003e\n\u003cli\u003eadd image index test b0dfec5af4d7f642d8dea3b9058856541fe5017c (Pedro Tôrres)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/e0878d41b711792be60777fd65ad23a101e6b85f\"\u003e\u003ccode\u003ee0878d4\u003c/code\u003e\u003c/a\u003e [v3] Bump to version v3.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/4d4902c431129b0e6f5809e618b64dc437fc69d8\"\u003e\u003ccode\u003e4d4902c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/helm/helm/issues/32041\"\u003e#32041\u003c/a\u003e from TerryHowe/fix/upgrade-otel-cves\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/13d5fc4ae0e7222e1af8796ff4fa467b52208471\"\u003e\u003ccode\u003e13d5fc4\u003c/code\u003e\u003c/a\u003e fix: upgrade opentelemetry packages to patch CVEs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/a60cb79dfb117f22ec30833c87ab3172eba532d2\"\u003e\u003ccode\u003ea60cb79\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/d3bc8535bbc87c1b7300aee892a822372a7d4e2d\"\u003e\u003ccode\u003ed3bc853\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/helm/helm/issues/32026\"\u003e#32026\u003c/a\u003e from gjenkins8/gjenkins/code_action_pin_v3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/2552884e3bc1b763c3901c5ea7240b59ef6791f1\"\u003e\u003ccode\u003e2552884\u003c/code\u003e\u003c/a\u003e fix: Chart dot-name path bug\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/ec05dd5f0481c2de3a41a554adf3c52a6a2a9bb6\"\u003e\u003ccode\u003eec05dd5\u003c/code\u003e\u003c/a\u003e fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/6d809b20f146f8a09f74ad92080926cda0d6ae7c\"\u003e\u003ccode\u003e6d809b2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/helm/helm/issues/31883\"\u003e#31883\u003c/a\u003e from t0rr3sp3dr0/pedrotorres/backport-31776-to-v3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/b0dfec5af4d7f642d8dea3b9058856541fe5017c\"\u003e\u003ccode\u003eb0dfec5\u003c/code\u003e\u003c/a\u003e add image index test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/e629995c5d65ec2d5095ecd6d094bf85d02b3266\"\u003e\u003ccode\u003ee629995\u003c/code\u003e\u003c/a\u003e fix pulling charts from OCI indices\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/helm/helm/compare/v3.20.1...v3.21.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.17.2 to 5.19.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ev5: plumbing: transport/ssh, Shell-quote path by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2068\"\u003ego-git/go-git#2068\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, Fix relative URL resolution by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2070\"\u003ego-git/go-git#2070\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, canonical remote for relative URLs by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2074\"\u003ego-git/go-git#2074\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, error on remote without URLs by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2078\"\u003ego-git/go-git#2078\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format/idxfile, Validate offset64 indices by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2084\"\u003ego-git/go-git#2084\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: *: Reject malformed variable-length integers by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2092\"\u003ego-git/go-git#2092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format/packfile, Tighten delta validation by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2091\"\u003ego-git/go-git#2091\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Add \u003ccode\u003eworktreeFilesystem\u003c/code\u003e wrapper for worktree and hardening by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2100\"\u003ego-git/go-git#2100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: config: validate submodule names by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2082\"\u003ego-git/go-git#2082\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.19.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2111\"\u003ego-git/go-git#2111\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: Allow MkdirAll on worktree-root paths by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2117\"\u003ego-git/go-git#2117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: Stop validating symlink target paths by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2116\"\u003ego-git/go-git#2116\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format decoder input bounds and contracts by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2125\"\u003ego-git/go-git#2125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplumbing: format/packfile, cap delta chain depth in parser by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2137\"\u003ego-git/go-git#2137\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.19.0...v5.19.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.19.0...v5.19.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3c3be601aa6c0fd0d536c0d1e4f898b4c60e65fe\"\u003e\u003ccode\u003e3c3be60\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2137\"\u003e#2137\u003c/a\u003e from go-git/validate-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3fba897bd9e84b1aec170fa708b80e297b7d6cf6\"\u003e\u003ccode\u003e3fba897\u003c/code\u003e\u003c/a\u003e plumbing: format/packfile, cap delta chain depth in parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a97d6601c85e017bb64c2b0f2e3169f6ef6a6709\"\u003e\u003ccode\u003ea97d660\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2125\"\u003e#2125\u003c/a\u003e from hiddeco/v5/format-input-bounds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/aeaa125c8af8e4c4c95b574c22c5633e97fc436e\"\u003e\u003ccode\u003eaeaa125\u003c/code\u003e\u003c/a\u003e plumbing: format/objfile, require Header before Read\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1f38e171218526ea254a73187a52f0648253c1b8\"\u003e\u003ccode\u003e1f38e17\u003c/code\u003e\u003c/a\u003e plumbing: format/packfile, bound inflate size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f7545a02529e03998d6a7219140dc0e6644ad337\"\u003e\u003ccode\u003ef7545a0\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, bound nr by file size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/170b88181f385913a457a08b68c88956fb3f8e4f\"\u003e\u003ccode\u003e170b881\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2116\"\u003e#2116\u003c/a\u003e from pjbgf/symlink-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/7b6d994467f06630268904aa3c441b6de7248b31\"\u003e\u003ccode\u003e7b6d994\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2117\"\u003e#2117\u003c/a\u003e from hiddeco/v5/worktree-fs-mkdirall-root-noop\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f0709b32f8fbb87c16cd63c6762d2cd515f36541\"\u003e\u003ccode\u003ef0709b3\u003c/code\u003e\u003c/a\u003e git: Stop validating symlink target paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/776d00f11d336f26862d0f2bab987b217f3a7844\"\u003e\u003ccode\u003e776d00f\u003c/code\u003e\u003c/a\u003e git: Allow MkdirAll on worktree-root paths\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.19.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/mod` from 0.34.0 to 0.36.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/643da9ba74f1165d8cae1505d453b3de3cf21b7b\"\u003e\u003ccode\u003e643da9b\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/ccc3cdf529d1eee2a832437eb1b85240044d21cb\"\u003e\u003ccode\u003eccc3cdf\u003c/code\u003e\u003c/a\u003e zip: include 'but content has correct sum' note in TestVCS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/ab3031803214705d2c9f1102318b083e7086a155\"\u003e\u003ccode\u003eab30318\u003c/code\u003e\u003c/a\u003e zip: update zip hashes for new flate compression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/03901d351deb5bd95deb90714fb75bf8e232cb22\"\u003e\u003ccode\u003e03901d3\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/mod/compare/v0.34.0...v0.36.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.52.0 to 0.53.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a8d1fc14d9e33e1f6842ab78a0127d42cd8fff44\"\u003e\u003ccode\u003ea8d1fc1\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/056ac742146af742aa760d690269c02fa238cc7a\"\u003e\u003ccode\u003e056ac74\u003c/code\u003e\u003c/a\u003e quic: avoid depending on golang.org/x/sys/unix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/c85f61116e47b1523036c3005f8b2923b661eb64\"\u003e\u003ccode\u003ec85f611\u003c/code\u003e\u003c/a\u003e http3: add http3 package for testing in std\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/805fc81a196b95c3c00f02e135ffb8a8d5582bdf\"\u003e\u003ccode\u003e805fc81\u003c/code\u003e\u003c/a\u003e http2: add transport API tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e63b894ab3cd38a1d05396530dccde7ffa3f68d0\"\u003e\u003ccode\u003ee63b894\u003c/code\u003e\u003c/a\u003e http2: support testing via net/http.Transport.RoundTrip\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/9ee1e484e5aab0d95b3babbc6f1384d03f4f9e22\"\u003e\u003ccode\u003e9ee1e48\u003c/code\u003e\u003c/a\u003e http2/hpack: prevent HeaderField from escaping during encoding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1e71bd86e4a302b4e731bc06da6eb51679c7bd49\"\u003e\u003ccode\u003e1e71bd8\u003c/code\u003e\u003c/a\u003e http2: prevent hanging Transport due to bad SETTINGS frame\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/7bca15042b9d2bda1402cb42232a9c6ddbae6212\"\u003e\u003ccode\u003e7bca150\u003c/code\u003e\u003c/a\u003e internal/http3: respect net/http Server Shutdown context when shutting down\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/44c41bee5028537e64410b1583e8ae329ceac284\"\u003e\u003ccode\u003e44c41be\u003c/code\u003e\u003c/a\u003e internal/http3: prevent server from holding mutex when sleeping during shutdown\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/228a67a374710bff77fc490e7f538b317c34e247\"\u003e\u003ccode\u003e228a67a\u003c/code\u003e\u003c/a\u003e internal/http3: add CloseIdleConnections support in transport\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.52.0...v0.53.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/apimachinery` from 0.35.3 to 0.36.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/7af103a2a439106791220493349f8d13bc0a1efd\"\u003e\u003ccode\u003e7af103a\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.1 tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/efb7f2628b269921e5f12c4d42aece418c76789c\"\u003e\u003ccode\u003eefb7f26\u003c/code\u003e\u003c/a\u003e Merge remote-tracking branch 'origin/master' into release-1.36\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/d966e565cd271c44ba799b594ddb67987791cb80\"\u003e\u003ccode\u003ed966e56\u003c/code\u003e\u003c/a\u003e Update github.com/moby/spdystream from v0.5.0 to v0.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/79b363268543c402b68449b0cd531f8f8d0197d1\"\u003e\u003ccode\u003e79b3632\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/137864\"\u003e#137864\u003c/a\u003e from yongruilin/dv-dra-mismatch\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/a8822f7bf620eede6c3f36354cec940c3844e7a8\"\u003e\u003ccode\u003ea8822f7\u003c/code\u003e\u003c/a\u003e Add slice and map union member support with tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/7dba2d08090b9d2285266ec2492d0b6395151f50\"\u003e\u003ccode\u003e7dba2d0\u003c/code\u003e\u003c/a\u003e Use IsZero instead of IsNil for union ratcheting check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/d95710f91d61d2656298071a40a04d5343c642e5\"\u003e\u003ccode\u003ed95710f\u003c/code\u003e\u003c/a\u003e Fix union validation ratcheting when oldObj is nil\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/729062d58854ae8e9e85f5dc8d1660fb963ae483\"\u003e\u003ccode\u003e729062d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/137849\"\u003e#137849\u003c/a\u003e from bryantbiggs/deps/update-kube-openapi\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/13b12e6214bc1c2253aa3bcf8d52c2f83e767eb0\"\u003e\u003ccode\u003e13b12e6\u003c/code\u003e\u003c/a\u003e dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/27f467019a4eb99953b81708326a574524b11e8f\"\u003e\u003ccode\u003e27f4670\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/136657\"\u003e#136657\u003c/a\u003e from Jefftree/sharding-test\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kubernetes/apimachinery/compare/v0.35.3...v0.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/saschagrunert/zeitgeist/pull/613","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/saschagrunert%2Fzeitgeist/issues/613","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/613/packages"},{"uuid":"4560742060","node_id":"PR_kwDOEQW51M7hPc3T","number":2117,"state":"closed","title":"update: bump the gomod-packages group across 1 directory with 14 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-09T03:23:41.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-01T06:03:14.000Z","updated_at":"2026-06-09T03:23:43.000Z","time_to_close":681627,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"update: bump","group_name":"gomod-packages","update_count":14,"packages":[{"name":"github.com/alicebob/miniredis/v2","old_version":"2.37.0","new_version":"2.38.0","repository_url":"https://github.com/alicebob/miniredis"},{"name":"github.com/docker/cli","old_version":"29.4.3+incompatible","new_version":"29.5.3+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/go-playground/validator/v10","old_version":"10.30.2","new_version":"10.30.3","repository_url":"https://github.com/go-playground/validator"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/redis/go-redis/v9","old_version":"9.19.0","new_version":"9.20.0","repository_url":"https://github.com/redis/go-redis"},{"name":"github.com/sigstore/rekor","old_version":"1.5.1","new_version":"1.5.2","repository_url":"https://github.com/sigstore/rekor"},{"name":"k8s.io/api","old_version":"0.36.0","new_version":"0.36.1","repository_url":"https://github.com/kubernetes/api"},{"name":"k8s.io/client-go","old_version":"0.36.0","new_version":"0.36.1","repository_url":"https://github.com/kubernetes/client-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the gomod-packages group with 8 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) | `2.37.0` | `2.38.0` |\n| [github.com/docker/cli](https://github.com/docker/cli) | `29.4.3+incompatible` | `29.5.3+incompatible` |\n| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.30.2` | `10.30.3` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.5` | `0.21.6` |\n| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.19.0` | `9.20.0` |\n| [github.com/sigstore/rekor](https://github.com/sigstore/rekor) | `1.5.1` | `1.5.2` |\n| [k8s.io/api](https://github.com/kubernetes/api) | `0.36.0` | `0.36.1` |\n| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.0` | `0.36.1` |\n\n\nUpdates `github.com/alicebob/miniredis/v2` from 2.37.0 to 2.38.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/alicebob/miniredis/releases\"\u003egithub.com/alicebob/miniredis/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eDELEX and fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eXADD TRIM (thanks \u003ca href=\"https://github.com/evan-choi\"\u003e\u003ccode\u003e@​evan-choi\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate XINFO STREAM (thanks \u003ca href=\"https://github.com/TomBailey167\"\u003e\u003ccode\u003e@​TomBailey167\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003elua fix (thanks \u003ca href=\"https://github.com/infastin\"\u003e\u003ccode\u003e@​infastin\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epartial support for DELEX\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md\"\u003egithub.com/alicebob/miniredis/v2's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.38.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eXADD TRIM (thanks \u003ca href=\"https://github.com/evan-choi\"\u003e\u003ccode\u003e@​evan-choi\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate XINFO STREAM (thanks \u003ca href=\"https://github.com/TomBailey167\"\u003e\u003ccode\u003e@​TomBailey167\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003elua fix (thanks \u003ca href=\"https://github.com/infastin\"\u003e\u003ccode\u003e@​infastin\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epartial support for DELEX\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/d67bfae4c370e8451561165eca6ddc50f056f083\"\u003e\u003ccode\u003ed67bfae\u003c/code\u003e\u003c/a\u003e update changelog for v2.38.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/2b1abd81e1c58fb6d440b4637287d3ee09f7f66a\"\u003e\u003ccode\u003e2b1abd8\u003c/code\u003e\u003c/a\u003e DELEX (partly) (\u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/442\"\u003e#442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/452dd373d138f7ad858dd6e25e2a92753f83498e\"\u003e\u003ccode\u003e452dd37\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/440\"\u003e#440\u003c/a\u003e from infastin/server-alias\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/b5b8ec2cfde407552ea028514409599dbd5e1600\"\u003e\u003ccode\u003eb5b8ec2\u003c/code\u003e\u003c/a\u003e feat: add 'server' alias to 'redis' in lua scripts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/ecc4af14f2444ea1a57d040185781fe197bdfc9d\"\u003e\u003ccode\u003eecc4af1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/439\"\u003e#439\u003c/a\u003e from TomBailey167/xinfo-stream-last-generated-id\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/4a2a33e841b359a2569fe9a35d6d46414bf40aec\"\u003e\u003ccode\u003e4a2a33e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/435\"\u003e#435\u003c/a\u003e from evan-choi/fix/xadd-equals-trim-modifier\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/d6261eff59117ccea7387f3a608caa1006b1adef\"\u003e\u003ccode\u003ed6261ef\u003c/code\u003e\u003c/a\u003e feat: add last-generated-id to XINFO STREAM response\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/f4d8aa342425de1b740a6f22a7dd230f83e3712a\"\u003e\u003ccode\u003ef4d8aa3\u003c/code\u003e\u003c/a\u003e fix: accept = trim modifier in xadd\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/alicebob/miniredis/compare/v2.37.0...v2.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/cli` from 29.4.3+incompatible to 29.5.3+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/d1c06ef6b41d88d76866aea43c246cd7c63d04fa\"\u003e\u003ccode\u003ed1c06ef\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7022\"\u003e#7022\u003c/a\u003e from mickael-docker/docs-request-field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/7dd053b1d1d66bec5f793d090dba7e81240afadd\"\u003e\u003ccode\u003e7dd053b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7003\"\u003e#7003\u003c/a\u003e from thaJeztah/logs_links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/37c3d316cc76fa9ad27e3897fa7e60c5a3b66d1f\"\u003e\u003ccode\u003e37c3d31\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7024\"\u003e#7024\u003c/a\u003e from thaJeztah/add_zizmor\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/45f10f226e8e6eba41064a7819bec986ac850288\"\u003e\u003ccode\u003e45f10f2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7025\"\u003e#7025\u003c/a\u003e from vvoland/update-go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/b458dc9e81e732fdaa66dac672db36ff28d6b6c5\"\u003e\u003ccode\u003eb458dc9\u003c/code\u003e\u003c/a\u003e update to go1.26.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1953194bd5a44b1a991eea79c4f0aacfb6c74aab\"\u003e\u003ccode\u003e1953194\u003c/code\u003e\u003c/a\u003e gha: apply zizmor fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/ac0419ea90d1177eb11655a5ee9795126e8deb7a\"\u003e\u003ccode\u003eac0419e\u003c/code\u003e\u003c/a\u003e gha: add zizmor workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1aa0416b8a5973bc5f605a42d13f1926ab01f2ac\"\u003e\u003ccode\u003e1aa0416\u003c/code\u003e\u003c/a\u003e docs: recommend default deny and clarify requesturi field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/3a8595298407d5ab67d0ed13d57819dddf561d98\"\u003e\u003ccode\u003e3a85952\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7020\"\u003e#7020\u003c/a\u003e from thaJeztah/full_semver\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/8d3fbdf5707f6cd6b3157eef5aeba8af2f436f9d\"\u003e\u003ccode\u003e8d3fbdf\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7019\"\u003e#7019\u003c/a\u003e from thaJeztah/dependabot_labels\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v29.4.3...v29.5.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-playground/validator/v10` from 10.30.2 to 10.30.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-playground/validator/releases\"\u003egithub.com/go-playground/validator/v10's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev10.30.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix/issue 1550 UUID case insensitive by \u003ca href=\"https://github.com/leo-jp-edwards\"\u003e\u003ccode\u003e@​leo-jp-edwards\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1551\"\u003ego-playground/validator#1551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFeat: Add NoneOf Validation by \u003ca href=\"https://github.com/Carmen-Shannon\"\u003e\u003ccode\u003e@​Carmen-Shannon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1554\"\u003ego-playground/validator#1554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd bcp47_strict_language_tag validator by \u003ca href=\"https://github.com/bfabio\"\u003e\u003ccode\u003e@​bfabio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1489\"\u003ego-playground/validator#1489\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1558\"\u003ego-playground/validator#1558\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1559\"\u003ego-playground/validator#1559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd CLAUDE.md with repo guidance for Claude Code by \u003ca href=\"https://github.com/deankarn\"\u003e\u003ccode\u003e@​deankarn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1564\"\u003ego-playground/validator#1564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce build size with dead code elimination by \u003ca href=\"https://github.com/zemzale\"\u003e\u003ccode\u003e@​zemzale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1542\"\u003ego-playground/validator#1542\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactored out detectFileMIMEType, matchesMIMEType logic for reuse. Added standalone isMIMEType validator for flexibility by \u003ca href=\"https://github.com/dapzthelegend\"\u003e\u003ccode\u003e@​dapzthelegend\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1544\"\u003ego-playground/validator#1544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(translations): add timezone support for en and ja locales by \u003ca href=\"https://github.com/dedyf5\"\u003e\u003ccode\u003e@​dedyf5\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1566\"\u003ego-playground/validator#1566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: use errors.As in README and translations example by \u003ca href=\"https://github.com/eyupcanakman\"\u003e\u003ccode\u003e@​eyupcanakman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1563\"\u003ego-playground/validator#1563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: fix typos by \u003ca href=\"https://github.com/rymiyamoto\"\u003e\u003ccode\u003e@​rymiyamoto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1568\"\u003ego-playground/validator#1568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add origin validator for web origin URLs by \u003ca href=\"https://github.com/ahmedkamalio\"\u003e\u003ccode\u003e@​ahmedkamalio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1565\"\u003ego-playground/validator#1565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject hostnames with trailing hyphen in RFC 952 validator by \u003ca href=\"https://github.com/ahmedkamalio\"\u003e\u003ccode\u003e@​ahmedkamalio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1569\"\u003ego-playground/validator#1569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(lint): correctly disable govet inline analyzer \u0026amp; deprecated gomodguard by \u003ca href=\"https://github.com/nodivbyzero\"\u003e\u003ccode\u003e@​nodivbyzero\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1574\"\u003ego-playground/validator#1574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1572\"\u003ego-playground/validator#1572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1571\"\u003ego-playground/validator#1571\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(cron): anchor regex and accept full cron syntax by \u003ca href=\"https://github.com/ahmedkamalio\"\u003e\u003ccode\u003e@​ahmedkamalio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1577\"\u003ego-playground/validator#1577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1580\"\u003ego-playground/validator#1580\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: omit blank tag names from namespace by \u003ca href=\"https://github.com/abemedia\"\u003e\u003ccode\u003e@​abemedia\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1567\"\u003ego-playground/validator#1567\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(docs): correct ripemd160 tag name in README validation table by \u003ca href=\"https://github.com/napoleonbot\"\u003e\u003ccode\u003e@​napoleonbot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1582\"\u003ego-playground/validator#1582\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/leo-jp-edwards\"\u003e\u003ccode\u003e@​leo-jp-edwards\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1551\"\u003ego-playground/validator#1551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Carmen-Shannon\"\u003e\u003ccode\u003e@​Carmen-Shannon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1554\"\u003ego-playground/validator#1554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dapzthelegend\"\u003e\u003ccode\u003e@​dapzthelegend\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1544\"\u003ego-playground/validator#1544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dedyf5\"\u003e\u003ccode\u003e@​dedyf5\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1566\"\u003ego-playground/validator#1566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eyupcanakman\"\u003e\u003ccode\u003e@​eyupcanakman\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1563\"\u003ego-playground/validator#1563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rymiyamoto\"\u003e\u003ccode\u003e@​rymiyamoto\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1568\"\u003ego-playground/validator#1568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/abemedia\"\u003e\u003ccode\u003e@​abemedia\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1567\"\u003ego-playground/validator#1567\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/napoleonbot\"\u003e\u003ccode\u003e@​napoleonbot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1582\"\u003ego-playground/validator#1582\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-playground/validator/compare/v10.30.2...v10.30.3\"\u003ehttps://github.com/go-playground/validator/compare/v10.30.2...v10.30.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/ac4c1bab0d4aa957466faa1948af28130767e43a\"\u003e\u003ccode\u003eac4c1ba\u003c/code\u003e\u003c/a\u003e fix(docs): correct ripemd160 tag name in README validation table (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1582\"\u003e#1582\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/feacb34d4fa5bd263392bcd03d5348a94ca28870\"\u003e\u003ccode\u003efeacb34\u003c/code\u003e\u003c/a\u003e feat: omit blank tag names from namespace (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1567\"\u003e#1567\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/5ed0a7ea9ac87c2409326e1d88f34678658b84e0\"\u003e\u003ccode\u003e5ed0a7e\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1580\"\u003e#1580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/0364541fa467027703223b3d0cace07a667c8302\"\u003e\u003ccode\u003e0364541\u003c/code\u003e\u003c/a\u003e fix(cron): anchor regex and accept full cron syntax (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1577\"\u003e#1577\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/8eb2659789a33bda9262ce62eed2d714539dc8c5\"\u003e\u003ccode\u003e8eb2659\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1571\"\u003e#1571\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/f7e1721521360af7958fe59e9c34ba0813f25bf8\"\u003e\u003ccode\u003ef7e1721\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1572\"\u003e#1572\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/cf37fce7a1a5dee2810a085ae39aec5c78e7cd8a\"\u003e\u003ccode\u003ecf37fce\u003c/code\u003e\u003c/a\u003e fix(lint): correctly disable govet inline analyzer \u0026amp; deprecated gomodguard (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/7c334e52092ad1224f0a2eed6bc77408374048b7\"\u003e\u003ccode\u003e7c334e5\u003c/code\u003e\u003c/a\u003e fix: reject hostnames with trailing hyphen in RFC 952 validator (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1569\"\u003e#1569\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/6bcb7bcaf6a99f8d6cf16cc8d062ad8c47950901\"\u003e\u003ccode\u003e6bcb7bc\u003c/code\u003e\u003c/a\u003e feat: add origin validator for web origin URLs (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1565\"\u003e#1565\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/6fd2fa82069c9aede1882d703c0e7ee2660bc4d9\"\u003e\u003ccode\u003e6fd2fa8\u003c/code\u003e\u003c/a\u003e docs: fix typos (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1568\"\u003e#1568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-playground/validator/compare/v10.30.2...v10.30.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/redis/go-redis/v9` from 9.19.0 to 9.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/go-redis/releases\"\u003egithub.com/redis/go-redis/v9's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e9.20.0\u003c/h2\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRedis 8.8 Support\u003c/h3\u003e\n\u003cp\u003eThis release adds support for \u003cstrong\u003eRedis 8.8\u003c/strong\u003e. The README's supported-versions list now includes Redis 8.8 alongside 8.0/8.2/8.4, and CI exercises the \u003ccode\u003e8.8\u003c/code\u003e client-libs-test image across the full suite (Makefile, build workflow, doctests, run-tests action, and docker-compose).\u003c/p\u003e\n\u003cp\u003eCoverage for the new commands that ship in the 8.x line, rounded out in this release:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eAR*\u003c/code\u003e array data type\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3813\"\u003e#3813\u003c/a\u003e) — new array data structure, exposed via the \u003ccode\u003eArrayCmdable\u003c/code\u003e interface (see the experimental-features highlight below).\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eINCREX\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3816\"\u003e#3816\u003c/a\u003e) — atomic increment with expiration in a single round-trip.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXNACK\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3790\"\u003e#3790\u003c/a\u003e) — explicit negative-acknowledge of pending stream entries.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXAUTOCLAIM\u003c/code\u003e PEL deletes\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3798\"\u003e#3798\u003c/a\u003e) — \u003ccode\u003eXAUTOCLAIM\u003c/code\u003e/\u003ccode\u003eXAUTOCLAIMJUSTID\u003c/code\u003e now return the list of deleted message IDs from the pending entries list.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eTS.RANGE\u003c/code\u003e multiple aggregators\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3791\"\u003e#3791\u003c/a\u003e) — \u003ccode\u003eTS.RANGE\u003c/code\u003e/\u003ccode\u003eTS.REVRANGE\u003c/code\u003e/\u003ccode\u003eTS.MRANGE\u003c/code\u003e/\u003ccode\u003eTS.MREVRANGE\u003c/code\u003e accept multiple aggregators in a single call.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eZ(UNION|INTER|DIFF)\u003c/code\u003e \u003ccode\u003eCOUNT\u003c/code\u003e aggregator\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3802\"\u003e#3802\u003c/a\u003e) — \u003ccode\u003eCOUNT\u003c/code\u003e reducer for sorted-set set operations.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eJSON.SET FPHA\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3797\"\u003e#3797\u003c/a\u003e) — new \u003ccode\u003eFPHA\u003c/code\u003e argument that specifies the floating-point type for homogeneous FP arrays.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCI image bump (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3814\"\u003e#3814\u003c/a\u003e) by \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e. Command coverage contributions by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Khukharr\"\u003e\u003ccode\u003e@​Khukharr\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eStable RESP3 for RediSearch (\u003ccode\u003eUnstableResp3\u003c/code\u003e deprecated)\u003c/h3\u003e\n\u003cp\u003e\u003ccode\u003eFT.SEARCH\u003c/code\u003e, \u003ccode\u003eFT.AGGREGATE\u003c/code\u003e, \u003ccode\u003eFT.INFO\u003c/code\u003e, \u003ccode\u003eFT.SPELLCHECK\u003c/code\u003e, and \u003ccode\u003eFT.SYNDUMP\u003c/code\u003e now parse RESP3 (map) responses into the same typed result objects as RESP2 — \u003ccode\u003eVal()\u003c/code\u003e and \u003ccode\u003eResult()\u003c/code\u003e work uniformly on both protocols, no flag required. Previously, RESP3 search responses required \u003ccode\u003eUnstableResp3: true\u003c/code\u003e and were returned as opaque maps accessible only via \u003ccode\u003eRawResult()\u003c/code\u003e / \u003ccode\u003eRawVal()\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eAs a result, the \u003ccode\u003eUnstableResp3\u003c/code\u003e option is now a \u003cstrong\u003eno-op\u003c/strong\u003e across every options struct (\u003ccode\u003eOptions\u003c/code\u003e, \u003ccode\u003eClusterOptions\u003c/code\u003e, \u003ccode\u003eUniversalOptions\u003c/code\u003e, \u003ccode\u003eFailoverOptions\u003c/code\u003e, \u003ccode\u003eRingOptions\u003c/code\u003e) and has been marked \u003ccode\u003e// Deprecated:\u003c/code\u003e. The field is retained for backwards compatibility — existing code that sets \u003ccode\u003eUnstableResp3: true\u003c/code\u003e will continue to compile and behave identically — but it will be removed in a future release and new code should not set it. \u003ccode\u003eRawResult()\u003c/code\u003e / \u003ccode\u003eRawVal()\u003c/code\u003e continue to work for callers that prefer the raw RESP payload.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3741\"\u003e#3741\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eExperimental Array Data Structure Commands\u003c/h3\u003e\n\u003cp\u003eAdds an experimental \u003ccode\u003eArrayCmdable\u003c/code\u003e interface with the \u003ccode\u003eAR*\u003c/code\u003e command family (\u003ccode\u003eARSet\u003c/code\u003e, \u003ccode\u003eARGet\u003c/code\u003e, \u003ccode\u003eARGetRange\u003c/code\u003e, \u003ccode\u003eARMSet\u003c/code\u003e, \u003ccode\u003eARMGet\u003c/code\u003e, \u003ccode\u003eARDel\u003c/code\u003e, \u003ccode\u003eARDelRange\u003c/code\u003e, \u003ccode\u003eARScan\u003c/code\u003e, \u003ccode\u003eARSeek\u003c/code\u003e, \u003ccode\u003eARNext\u003c/code\u003e, \u003ccode\u003eARLastItems\u003c/code\u003e, \u003ccode\u003eARGrep\u003c/code\u003e, \u003ccode\u003eARGrepWithValues\u003c/code\u003e, \u003ccode\u003eARInfo\u003c/code\u003e/\u003ccode\u003eARInfoFull\u003c/code\u003e, and typed reducers \u003ccode\u003eAROpSum\u003c/code\u003e/\u003ccode\u003eAROpMin\u003c/code\u003e/\u003ccode\u003eAROpMax\u003c/code\u003e/\u003ccode\u003eAROpAnd\u003c/code\u003e/\u003ccode\u003eAROpOr\u003c/code\u003e/\u003ccode\u003eAROpXor\u003c/code\u003e/\u003ccode\u003eAROpMatch\u003c/code\u003e/\u003ccode\u003eAROpUsed\u003c/code\u003e) for working with Redis 8.8's new array data type. \u003cstrong\u003eAPI is experimental and may change in a future release.\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3813\"\u003e#3813\u003c/a\u003e) by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e✨ New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRESP3 search parser\u003c/strong\u003e: First-class RESP3 parsing for \u003ccode\u003eFT.SEARCH\u003c/code\u003e/\u003ccode\u003eFT.AGGREGATE\u003c/code\u003e/\u003ccode\u003eFT.INFO\u003c/code\u003e/\u003ccode\u003eFT.SPELLCHECK\u003c/code\u003e/\u003ccode\u003eFT.SYNDUMP\u003c/code\u003e responses with backwards compatibility for RESP2 (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3741\"\u003e#3741\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eINCREX\u003c/strong\u003e: New \u003ccode\u003eINCREX\u003c/code\u003e command support — atomic increment with expiration (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3816\"\u003e#3816\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eXNACK\u003c/strong\u003e: Client support for the \u003ccode\u003eXNACK\u003c/code\u003e stream command for explicitly negative-acknowledging pending entries (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3790\"\u003e#3790\u003c/a\u003e) by \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTS range multiple aggregators\u003c/strong\u003e: \u003ccode\u003eTS.RANGE\u003c/code\u003e/\u003ccode\u003eTS.REVRANGE\u003c/code\u003e/\u003ccode\u003eTS.MRANGE\u003c/code\u003e/\u003ccode\u003eTS.MREVRANGE\u003c/code\u003e now accept multiple aggregators in a single call (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3791\"\u003e#3791\u003c/a\u003e) by \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXAutoClaim\u003c/code\u003e deleted IDs\u003c/strong\u003e: \u003ccode\u003eXAUTOCLAIM\u003c/code\u003e/\u003ccode\u003eXAUTOCLAIMJUSTID\u003c/code\u003e now return the list of deleted message IDs from the PEL (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3798\"\u003e#3798\u003c/a\u003e) by \u003ca href=\"https://github.com/Khukharr\"\u003e\u003ccode\u003e@​Khukharr\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eJSON.SET FPHA\u003c/code\u003e\u003c/strong\u003e: \u003ccode\u003eJSON.SET\u003c/code\u003e accepts a new \u003ccode\u003eFPHA\u003c/code\u003e argument that specifies the floating-point type for homogeneous floating-point arrays (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3797\"\u003e#3797\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSorted-set union/intersection COUNT\u003c/strong\u003e: \u003ccode\u003eZUNION\u003c/code\u003e/\u003ccode\u003eZINTER\u003c/code\u003e/\u003ccode\u003eZDIFF\u003c/code\u003e aggregator now supports \u003ccode\u003eCOUNT\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3802\"\u003e#3802\u003c/a\u003e) by \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eFT.HYBRID\u003c/code\u003e vector validation\u003c/strong\u003e: Validates hybrid-search vector input types and adds proper typed vector parameters (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3756\"\u003e#3756\u003c/a\u003e) by \u003ca href=\"https://github.com/DengY11\"\u003e\u003ccode\u003e@​DengY11\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eCluster pool wait stats\u003c/strong\u003e: \u003ccode\u003eClusterClient.PoolStats()\u003c/code\u003e now accumulates \u003ccode\u003eWaitCount\u003c/code\u003e and \u003ccode\u003eWaitDurationNs\u003c/code\u003e across all node pools (previously always zero) (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3809\"\u003e#3809\u003c/a\u003e) by \u003ca href=\"https://github.com/LINKIWI\"\u003e\u003ccode\u003e@​LINKIWI\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eTLS-only Cluster PubSub\u003c/strong\u003e: \u003ccode\u003eCLUSTER SLOTS\u003c/code\u003e port-0 entries now fall back to the origin endpoint's port, fixing \u003ccode\u003edial tcp \u0026lt;ip\u0026gt;:0: connection refused\u003c/code\u003e on TLS-only clusters started with \u003ccode\u003e--port 0 --tls-port \u0026lt;port\u0026gt;\u003c/code\u003e (fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3726\"\u003e#3726\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3828\"\u003e#3828\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSharded PubSub reconnect routing\u003c/strong\u003e: \u003ccode\u003ePubSub.conn()\u003c/code\u003e now passes both regular (\u003ccode\u003ec.channels\u003c/code\u003e) and sharded (\u003ccode\u003ec.schannels\u003c/code\u003e) channels into the per-PubSub \u003ccode\u003enewConn\u003c/code\u003e closure. Previously, \u003ccode\u003eClusterClient.SSubscribe\u003c/code\u003e-only PubSubs reconnected to a random node (because the routing closure saw an empty channel list), the \u003ccode\u003eSSUBSCRIBE\u003c/code\u003e was sent to the wrong shard, and the resulting \u003ccode\u003eMOVED\u003c/code\u003e reply was silently dropped (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3829\"\u003e#3829\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eClusterClient \u003ccode\u003eWatch\u003c/code\u003e retry\u003c/strong\u003e: User errors returned from a \u003ccode\u003eWatch\u003c/code\u003e callback are no longer subjected to cluster-retry classification; transient cluster errors still retry, but a callback returning e.g. \u003ccode\u003enet.ErrClosed\u003c/code\u003e short-circuits immediately (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3821\"\u003e#3821\u003c/a\u003e) by \u003ca href=\"https://github.com/obiyang\"\u003e\u003ccode\u003e@​obiyang\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md\"\u003egithub.com/redis/go-redis/v9's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e9.20.0 (2026-05-28)\u003c/h1\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRedis 8.8 Support\u003c/h3\u003e\n\u003cp\u003eThis release adds support for \u003cstrong\u003eRedis 8.8\u003c/strong\u003e. The README's supported-versions list now includes Redis 8.8 alongside 8.0/8.2/8.4, and CI exercises the \u003ccode\u003e8.8-rc1\u003c/code\u003e client-libs-test image across the full suite (Makefile, build workflow, doctests, run-tests action, and docker-compose).\u003c/p\u003e\n\u003cp\u003eCoverage for the new commands that ship in the 8.x line, rounded out in this release:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eAR*\u003c/code\u003e array data type\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3813\"\u003e#3813\u003c/a\u003e) — new array data structure, exposed via the \u003ccode\u003eArrayCmdable\u003c/code\u003e interface (see the experimental-features highlight below).\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eINCREX\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3816\"\u003e#3816\u003c/a\u003e) — atomic increment with expiration in a single round-trip.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXNACK\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3790\"\u003e#3790\u003c/a\u003e) — explicit negative-acknowledge of pending stream entries.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXAUTOCLAIM\u003c/code\u003e PEL deletes\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3798\"\u003e#3798\u003c/a\u003e) — \u003ccode\u003eXAUTOCLAIM\u003c/code\u003e/\u003ccode\u003eXAUTOCLAIMJUSTID\u003c/code\u003e now return the list of deleted message IDs from the pending entries list.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eTS.RANGE\u003c/code\u003e multiple aggregators\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3791\"\u003e#3791\u003c/a\u003e) — \u003ccode\u003eTS.RANGE\u003c/code\u003e/\u003ccode\u003eTS.REVRANGE\u003c/code\u003e/\u003ccode\u003eTS.MRANGE\u003c/code\u003e/\u003ccode\u003eTS.MREVRANGE\u003c/code\u003e accept multiple aggregators in a single call.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eZ(UNION|INTER|DIFF)\u003c/code\u003e \u003ccode\u003eCOUNT\u003c/code\u003e aggregator\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3802\"\u003e#3802\u003c/a\u003e) — \u003ccode\u003eCOUNT\u003c/code\u003e reducer for sorted-set set operations.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eJSON.SET FPHA\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3797\"\u003e#3797\u003c/a\u003e) — new \u003ccode\u003eFPHA\u003c/code\u003e argument that specifies the floating-point type for homogeneous FP arrays.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCI image bump (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3814\"\u003e#3814\u003c/a\u003e) by \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e. Command coverage contributions by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Khukharr\"\u003e\u003ccode\u003e@​Khukharr\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eStable RESP3 for RediSearch (\u003ccode\u003eUnstableResp3\u003c/code\u003e deprecated)\u003c/h3\u003e\n\u003cp\u003e\u003ccode\u003eFT.SEARCH\u003c/code\u003e, \u003ccode\u003eFT.AGGREGATE\u003c/code\u003e, \u003ccode\u003eFT.INFO\u003c/code\u003e, \u003ccode\u003eFT.SPELLCHECK\u003c/code\u003e, and \u003ccode\u003eFT.SYNDUMP\u003c/code\u003e now parse RESP3 (map) responses into the same typed result objects as RESP2 — \u003ccode\u003eVal()\u003c/code\u003e and \u003ccode\u003eResult()\u003c/code\u003e work uniformly on both protocols, no flag required. Previously, RESP3 search responses required \u003ccode\u003eUnstableResp3: true\u003c/code\u003e and were returned as opaque maps accessible only via \u003ccode\u003eRawResult()\u003c/code\u003e / \u003ccode\u003eRawVal()\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eAs a result, the \u003ccode\u003eUnstableResp3\u003c/code\u003e option is now a \u003cstrong\u003eno-op\u003c/strong\u003e across every options struct (\u003ccode\u003eOptions\u003c/code\u003e, \u003ccode\u003eClusterOptions\u003c/code\u003e, \u003ccode\u003eUniversalOptions\u003c/code\u003e, \u003ccode\u003eFailoverOptions\u003c/code\u003e, \u003ccode\u003eRingOptions\u003c/code\u003e) and has been marked \u003ccode\u003e// Deprecated:\u003c/code\u003e. The field is retained for backwards compatibility — existing code that sets \u003ccode\u003eUnstableResp3: true\u003c/code\u003e will continue to compile and behave identically — but it will be removed in a future release and new code should not set it. \u003ccode\u003eRawResult()\u003c/code\u003e / \u003ccode\u003eRawVal()\u003c/code\u003e continue to work for callers that prefer the raw RESP payload.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3741\"\u003e#3741\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eExperimental Array Data Structure Commands\u003c/h3\u003e\n\u003cp\u003eAdds an experimental \u003ccode\u003eArrayCmdable\u003c/code\u003e interface with the \u003ccode\u003eAR*\u003c/code\u003e command family (\u003ccode\u003eARSet\u003c/code\u003e, \u003ccode\u003eARGet\u003c/code\u003e, \u003ccode\u003eARGetRange\u003c/code\u003e, \u003ccode\u003eARMSet\u003c/code\u003e, \u003ccode\u003eARMGet\u003c/code\u003e, \u003ccode\u003eARDel\u003c/code\u003e, \u003ccode\u003eARDelRange\u003c/code\u003e, \u003ccode\u003eARScan\u003c/code\u003e, \u003ccode\u003eARSeek\u003c/code\u003e, \u003ccode\u003eARNext\u003c/code\u003e, \u003ccode\u003eARLastItems\u003c/code\u003e, \u003ccode\u003eARGrep\u003c/code\u003e, \u003ccode\u003eARGrepWithValues\u003c/code\u003e, \u003ccode\u003eARInfo\u003c/code\u003e/\u003ccode\u003eARInfoFull\u003c/code\u003e, and typed reducers \u003ccode\u003eAROpSum\u003c/code\u003e/\u003ccode\u003eAROpMin\u003c/code\u003e/\u003ccode\u003eAROpMax\u003c/code\u003e/\u003ccode\u003eAROpAnd\u003c/code\u003e/\u003ccode\u003eAROpOr\u003c/code\u003e/\u003ccode\u003eAROpXor\u003c/code\u003e/\u003ccode\u003eAROpMatch\u003c/code\u003e/\u003ccode\u003eAROpUsed\u003c/code\u003e) for working with Redis 8.8's new array data type. \u003cstrong\u003eAPI is experimental and may change in a future release.\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3813\"\u003e#3813\u003c/a\u003e) by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e✨ New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRESP3 search parser\u003c/strong\u003e: First-class RESP3 parsing for \u003ccode\u003eFT.SEARCH\u003c/code\u003e/\u003ccode\u003eFT.AGGREGATE\u003c/code\u003e/\u003ccode\u003eFT.INFO\u003c/code\u003e/\u003ccode\u003eFT.SPELLCHECK\u003c/code\u003e/\u003ccode\u003eFT.SYNDUMP\u003c/code\u003e responses with backwards compatibility for RESP2 (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3741\"\u003e#3741\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eINCREX\u003c/strong\u003e: New \u003ccode\u003eINCREX\u003c/code\u003e command support — atomic increment with expiration (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3816\"\u003e#3816\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eXNACK\u003c/strong\u003e: Client support for the \u003ccode\u003eXNACK\u003c/code\u003e stream command for explicitly negative-acknowledging pending entries (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3790\"\u003e#3790\u003c/a\u003e) by \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTS range multiple aggregators\u003c/strong\u003e: \u003ccode\u003eTS.RANGE\u003c/code\u003e/\u003ccode\u003eTS.REVRANGE\u003c/code\u003e/\u003ccode\u003eTS.MRANGE\u003c/code\u003e/\u003ccode\u003eTS.MREVRANGE\u003c/code\u003e now accept multiple aggregators in a single call (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3791\"\u003e#3791\u003c/a\u003e) by \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXAutoClaim\u003c/code\u003e deleted IDs\u003c/strong\u003e: \u003ccode\u003eXAUTOCLAIM\u003c/code\u003e/\u003ccode\u003eXAUTOCLAIMJUSTID\u003c/code\u003e now return the list of deleted message IDs from the PEL (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3798\"\u003e#3798\u003c/a\u003e) by \u003ca href=\"https://github.com/Khukharr\"\u003e\u003ccode\u003e@​Khukharr\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eJSON.SET FPHA\u003c/code\u003e\u003c/strong\u003e: \u003ccode\u003eJSON.SET\u003c/code\u003e accepts a new \u003ccode\u003eFPHA\u003c/code\u003e argument that specifies the floating-point type for homogeneous floating-point arrays (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3797\"\u003e#3797\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSorted-set union/intersection COUNT\u003c/strong\u003e: \u003ccode\u003eZUNION\u003c/code\u003e/\u003ccode\u003eZINTER\u003c/code\u003e/\u003ccode\u003eZDIFF\u003c/code\u003e aggregator now supports \u003ccode\u003eCOUNT\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3802\"\u003e#3802\u003c/a\u003e) by \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eFT.HYBRID\u003c/code\u003e vector validation\u003c/strong\u003e: Validates hybrid-search vector input types and adds proper typed vector parameters (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3756\"\u003e#3756\u003c/a\u003e) by \u003ca href=\"https://github.com/DengY11\"\u003e\u003ccode\u003e@​DengY11\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eCluster pool wait stats\u003c/strong\u003e: \u003ccode\u003eClusterClient.PoolStats()\u003c/code\u003e now accumulates \u003ccode\u003eWaitCount\u003c/code\u003e and \u003ccode\u003eWaitDurationNs\u003c/code\u003e across all node pools (previously always zero) (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3809\"\u003e#3809\u003c/a\u003e) by \u003ca href=\"https://github.com/LINKIWI\"\u003e\u003ccode\u003e@​LINKIWI\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eTLS-only Cluster PubSub\u003c/strong\u003e: \u003ccode\u003eCLUSTER SLOTS\u003c/code\u003e port-0 entries now fall back to the origin endpoint's port, fixing \u003ccode\u003edial tcp \u0026lt;ip\u0026gt;:0: connection refused\u003c/code\u003e on TLS-only clusters started with \u003ccode\u003e--port 0 --tls-port \u0026lt;port\u0026gt;\u003c/code\u003e (fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3726\"\u003e#3726\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3828\"\u003e#3828\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSharded PubSub reconnect routing\u003c/strong\u003e: \u003ccode\u003ePubSub.conn()\u003c/code\u003e now passes both regular (\u003ccode\u003ec.channels\u003c/code\u003e) and sharded (\u003ccode\u003ec.schannels\u003c/code\u003e) channels into the per-PubSub \u003ccode\u003enewConn\u003c/code\u003e closure. Previously, \u003ccode\u003eClusterClient.SSubscribe\u003c/code\u003e-only PubSubs reconnected to a random node (because the routing closure saw an empty channel list), the \u003ccode\u003eSSUBSCRIBE\u003c/code\u003e was sent to the wrong shard, and the resulting \u003ccode\u003eMOVED\u003c/code\u003e reply was silently dropped (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3829\"\u003e#3829\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/7d05dd3b7ce12a7b8c7923f73da0fede3bfa7c03\"\u003e\u003ccode\u003e7d05dd3\u003c/code\u003e\u003c/a\u003e chore(release): v9.20.0 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3832\"\u003e#3832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/97568827124c58f1338d78b9535edc0eb9435453\"\u003e\u003ccode\u003e9756882\u003c/code\u003e\u003c/a\u003e fix(test): make waitForSentinelClusterStable robust to disconnected r… (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3830\"\u003e#3830\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/875ce21e4862a7913edb5308b16869141ce5e833\"\u003e\u003ccode\u003e875ce21\u003c/code\u003e\u003c/a\u003e fix(sentinel): do not close sentinel when replica list is empty (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3795\"\u003e#3795\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/8a027f21ba2686511e1a6a159f0c6888f11d48e7\"\u003e\u003ccode\u003e8a027f2\u003c/code\u003e\u003c/a\u003e chore(ci): add govulncheck workflow (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3779\"\u003e#3779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/d8407df30af7eba2c24280791fed4b8bd3e62c97\"\u003e\u003ccode\u003ed8407df\u003c/code\u003e\u003c/a\u003e fix(pubsub): include shard channels in newConn routing list (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3829\"\u003e#3829\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/6af9bdc84ba25303f2b9dd9949055ee6224c6d96\"\u003e\u003ccode\u003e6af9bdc\u003c/code\u003e\u003c/a\u003e fix(cluster): fall back to origin port when CLUSTER SLOTS reports port 0 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3828\"\u003e#3828\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/fa5aa8c4d26a0983f16ebc537696150d80bfc8f0\"\u003e\u003ccode\u003efa5aa8c\u003c/code\u003e\u003c/a\u003e chore(doc): Update README and CI image. (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3822\"\u003e#3822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/fdcc6f9221e6d447b1c1a50d946c74d8db51cda3\"\u003e\u003ccode\u003efdcc6f9\u003c/code\u003e\u003c/a\u003e refactor(keyPos): Enhance key position retrieval with CommandInfo caching (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3\"\u003e#3\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/68a8bc1e8457d796d35cae34435529cd6e56a762\"\u003e\u003ccode\u003e68a8bc1\u003c/code\u003e\u003c/a\u003e fix(sentinel): close non-winning sentinel clients in MasterAddr concurrent pr...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/00bf6d3edc1f50cce7a81d6a11a580cb060fce56\"\u003e\u003ccode\u003e00bf6d3\u003c/code\u003e\u003c/a\u003e fix: avoid retrying ClusterClient Watch callback errors (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3821\"\u003e#3821\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/redis/go-redis/compare/v9.19.0...v9.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/rekor` from 1.5.1 to 1.5.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/rekor/releases\"\u003egithub.com/sigstore/rekor's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.5.2\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e759b98e2a7c39ea9779b6a51299c5f0f987f8802 alpine: Enforce max size limit on decompression (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2831\"\u003e#2831\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec7e77ee26edd8631dd417166907093a9f13b85e5 Support restricting kinds on insertion (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2814\"\u003e#2814\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ea10818a8778dcb58eb582d00ffda4b2c86bf190b fix(trillianclient): strip dns:/// scheme from TLS ServerName in gRPC dial (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2812\"\u003e#2812\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e8a2f3a2dd023b81ad8b63e2f365676ec438dc9fa add checks to ensure returned entries match client inputs to rekor-cli (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2799\"\u003e#2799\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e0e88bac01d1173b8b2cbc8ed790106441573bbdb add nil pointer check to resolve fuzzing crash (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2807\"\u003e#2807\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e93da954478a2ffb1821d4904a80d9a5cbe268324 client: surface last-response details after retries are exhausted (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2796\"\u003e#2796\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e4d67ecd8ec810bc6af9761ad10ebd2ac899cfdbd Fix internal error detail leakage in 500 responses (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2801\"\u003e#2801\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eb34ca94fc01405cb50acb956cc181d57382a6b2d add defensive check to ensure tid is in config ahead of getting client (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2795\"\u003e#2795\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e656c832ab90feef91f5dcc751ae1cb851c73f4bd restapi: include inactiveShards in the homepage total count (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2797\"\u003e#2797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eThanks for all contributors!\u003c/h3\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/3b75cd9c9a101bae26eecf1ad261d94aba247ee9\"\u003e\u003ccode\u003e3b75cd9\u003c/code\u003e\u003c/a\u003e build(deps): Bump the all group across 1 directory with 7 updates (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2829\"\u003e#2829\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/759b98e2a7c39ea9779b6a51299c5f0f987f8802\"\u003e\u003ccode\u003e759b98e\u003c/code\u003e\u003c/a\u003e alpine: Enforce max size limit on decompression (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2831\"\u003e#2831\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/c7e77ee26edd8631dd417166907093a9f13b85e5\"\u003e\u003ccode\u003ec7e77ee\u003c/code\u003e\u003c/a\u003e Support restricting kinds on insertion (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2814\"\u003e#2814\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/a10818a8778dcb58eb582d00ffda4b2c86bf190b\"\u003e\u003ccode\u003ea10818a\u003c/code\u003e\u003c/a\u003e fix(trillianclient): strip dns:/// scheme from TLS ServerName in gRPC dial (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/c31f3fc8141e61ee2af5dcc4e8a0f9988231b12e\"\u003e\u003ccode\u003ec31f3fc\u003c/code\u003e\u003c/a\u003e build(deps): Bump cloud.google.com/go/profiler from 0.4.3 to 0.6.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/f2a9fb018c17329072f2ac2da426723ad18a89e7\"\u003e\u003ccode\u003ef2a9fb0\u003c/code\u003e\u003c/a\u003e build(deps): Bump go.uber.org/zap from 1.27.1 to 1.28.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/e3ba2484923513670a5617a40584a16ff2530e98\"\u003e\u003ccode\u003ee3ba248\u003c/code\u003e\u003c/a\u003e build(deps): Bump golang in the all group across 1 directory\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/62e5ddd8cad078321d0851b0eaac6332eea87d65\"\u003e\u003ccode\u003e62e5ddd\u003c/code\u003e\u003c/a\u003e build(deps): Bump github.com/go-openapi/swag from 0.25.5 to 0.26.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/f4f91d5ca10c7be17121ade17a0f6431865f12f6\"\u003e\u003ccode\u003ef4f91d5\u003c/code\u003e\u003c/a\u003e build(deps): Bump github.com/tink-crypto/tink-go-awskms/v2 to v3 (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2827\"\u003e#2827\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/9bc540f214712dfa4b891cca828382855ada227a\"\u003e\u003ccode\u003e9bc540f\u003c/code\u003e\u003c/a\u003e build(deps): Bump google.com/cloudsdktool/google-cloud-cli (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2820\"\u003e#2820\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sigstore/rekor/compare/v1.5.1...v1.5.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore` from 1.10.5 to 1.10.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: remove leftover Go template syntax from success page by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2324\"\u003esigstore/sigstore#2324\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/311895e7870187320e47337734a9c321c0a8819c\"\u003e\u003ccode\u003e311895e\u003c/code\u003e\u003c/a\u003e fix: remove leftover Go template syntax from success page (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2324\"\u003e#2324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore/pkg/signature/kms/aws` from 1.10.5 to 1.10.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore/pkg/signature/kms/aws's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: remove leftover Go template syntax from success page by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2324\"\u003esigstore/sigstore#2324\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/311895e7870187320e47337734a9c321c0a8819c\"\u003e\u003ccode\u003e311895e\u003c/code\u003e\u003c/a\u003e fix: remove leftover Go template syntax from success page (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2324\"\u003e#2324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore/pkg/signature/kms/azure` from 1.10.5 to 1.10.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore/pkg/signature/kms/azure's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: remove leftover Go template syntax from success page by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2324\"\u003esigstore/sigstore#2324\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/311895e7870187320e47337734a9c321c0a8819c\"\u003e\u003ccode\u003e311895e\u003c/code\u003e\u003c/a\u003e fix: remove leftover Go template syntax from success page (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2324\"\u003e#2324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore/pkg/signature/kms/gcp` from 1.10.5 to 1.10.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore/pkg/signature/kms/gcp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: remove leftover Go template syntax from success page by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2324\"\u003esigstore/sigstore#2324\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/311895e7870187320e47337734a9c321c0a8819c\"\u003e\u003ccode\u003e311895e\u003c/code\u003e\u003c/a\u003e fix: remove leftover Go template syntax from success page (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2324\"\u003e#2324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore/pkg/signature/kms/hashivault` from 1.10.5 to 1.10.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore/pkg/signature/kms/hashivault's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: remove leftover Go template syntax from success page by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2324\"\u003esigstore/sigstore#2324\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/311895e7870187320e47337734a9c321c0a8819c\"\u003e\u003ccode\u003e311895e\u003c/code\u003e\u003c/a\u003e fix: remove leftover Go template syntax from success page (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2324\"\u003e#2324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/api` from 0.36.0 to 0.36.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/25001c854943b552769cd32eacd0bef7467c0eea\"\u003e\u003ccode\u003e25001c8\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.1 tag\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kubernetes/api/compare/v0.36.0...v0.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/apimachinery` from 0.36.0 to 0.36.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/7af103a2a439106791220493349f8d13bc0a1efd\"\u003e\u003ccode\u003e7af103a\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.1 tag\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kubernetes/apimachinery/compare/v0.36.0...v0.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/client-go` from 0.36.0 to 0.36.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/55ef15a9fb552182b78f7b1d0d09d618632dfe7f\"\u003e\u003ccode\u003e55ef15a\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.1 tag\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kubernetes/client-go/compare/v0.36.0...v0.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e","html_url":"https://github.com/sse-secure-systems/connaisseur/pull/2117","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sse-secure-systems%2Fconnaisseur/issues/2117","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2117/packages"},{"uuid":"4556671768","node_id":"PR_kwDOHqP31c7hDDs-","number":6389,"state":"open","title":"chore(deps): bump the go-minor group with 30 updates","user":"dependabot[bot]","labels":["needs/kind","needs/priority","needs/area","dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-31T05:31:31.000Z","updated_at":"2026-05-31T05:31:41.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-minor","update_count":30,"packages":[{"name":"code.gitea.io/sdk/gitea","old_version":"0.22.1","new_version":"0.25.1"},{"name":"github.com/Azure/azure-sdk-for-go/sdk/azcore","old_version":"1.20.0","new_version":"1.21.1","repository_url":"https://github.com/Azure/azure-sdk-for-go"},{"name":"github.com/Masterminds/semver/v3","old_version":"3.4.0","new_version":"3.5.0","repository_url":"https://github.com/Masterminds/semver"},{"name":"github.com/aws/aws-sdk-go-v2/service/ecr","old_version":"1.55.4","new_version":"1.57.4","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/bmatcuk/doublestar/v4","old_version":"4.9.2","new_version":"4.10.0","repository_url":"https://github.com/bmatcuk/doublestar"},{"name":"github.com/coreos/go-oidc/v3","old_version":"3.17.0","new_version":"3.18.0","repository_url":"https://github.com/coreos/go-oidc"},{"name":"github.com/fluxcd/pkg/kustomize","old_version":"1.24.0","new_version":"1.32.0","repository_url":"https://github.com/fluxcd/pkg"},{"name":"github.com/gin-gonic/gin","old_version":"1.11.0","new_version":"1.12.0","repository_url":"https://github.com/gin-gonic/gin"},{"name":"github.com/go-openapi/runtime","old_version":"0.31.0","new_version":"0.32.2","repository_url":"https://github.com/go-openapi/runtime"},{"name":"github.com/goccy/go-yaml","old_version":"1.18.0","new_version":"1.19.2","repository_url":"https://github.com/goccy/go-yaml"},{"name":"github.com/google/go-containerregistry","old_version":"0.20.7","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/jferrl/go-githubauth","old_version":"1.5.1","new_version":"1.6.0","repository_url":"https://github.com/jferrl/go-githubauth"},{"name":"github.com/pelletier/go-toml/v2","old_version":"2.2.4","new_version":"2.3.1","repository_url":"https://github.com/pelletier/go-toml"},{"name":"gitlab.com/gitlab-org/api/client-go","old_version":"1.13.0","new_version":"1.46.0"},{"name":"go.uber.org/zap","old_version":"1.27.1","new_version":"1.28.0","repository_url":"https://github.com/uber-go/zap"},{"name":"golang.org/x/crypto","old_version":"0.51.0","new_version":"0.52.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/oauth2","old_version":"0.34.0","new_version":"0.36.0","repository_url":"https://github.com/golang/oauth2"},{"name":"google.golang.org/api","old_version":"0.259.0","new_version":"0.282.0","repository_url":"https://github.com/googleapis/google-api-go-client"},{"name":"google.golang.org/grpc","old_version":"1.79.3","new_version":"1.81.1","repository_url":"https://github.com/grpc/grpc-go"},{"name":"google.golang.org/protobuf","old_version":"1.36.11","new_version":"1.36.12-0.20260120151049-f2248ac996af"},{"name":"helm.sh/helm/v3","old_version":"3.19.5","new_version":"3.21.0","repository_url":"https://github.com/helm/helm"},{"name":"k8s.io/api","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/api"},{"name":"k8s.io/apiextensions-apiserver","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/apiextensions-apiserver"},{"name":"k8s.io/apimachinery","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/apimachinery"},{"name":"k8s.io/apiserver","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/apiserver"},{"name":"k8s.io/cli-runtime","old_version":"0.34.3","new_version":"0.35.1","repository_url":"https://github.com/kubernetes/cli-runtime"},{"name":"k8s.io/client-go","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/client-go"},{"name":"k8s.io/klog/v2","old_version":"2.130.1","new_version":"2.140.0","repository_url":"https://github.com/kubernetes/klog"},{"name":"k8s.io/utils","old_version":"0.0.0-20250604170112-4c0f3b243397","new_version":"0.0.0-20260210185600-b8788abfbbc2","repository_url":"https://github.com/kubernetes/utils"},{"name":"sigs.k8s.io/controller-runtime","old_version":"0.22.4","new_version":"0.24.0","repository_url":"https://github.com/kubernetes-sigs/controller-runtime"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor group with 30 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| code.gitea.io/sdk/gitea | `0.22.1` | `0.25.1` |\n| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.20.0` | `1.21.1` |\n| [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) | `3.4.0` | `3.5.0` |\n| [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.55.4` | `1.57.4` |\n| [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) | `4.9.2` | `4.10.0` |\n| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.17.0` | `3.18.0` |\n| [github.com/fluxcd/pkg/kustomize](https://github.com/fluxcd/pkg) | `1.24.0` | `1.32.0` |\n| [github.com/gin-gonic/gin](https://github.com/gin-gonic/gin) | `1.11.0` | `1.12.0` |\n| [github.com/go-openapi/runtime](https://github.com/go-openapi/runtime) | `0.31.0` | `0.32.2` |\n| [github.com/goccy/go-yaml](https://github.com/goccy/go-yaml) | `1.18.0` | `1.19.2` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.7` | `0.21.6` |\n| [github.com/jferrl/go-githubauth](https://github.com/jferrl/go-githubauth) | `1.5.1` | `1.6.0` |\n| [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) | `2.2.4` | `2.3.1` |\n| [gitlab.com/gitlab-org/api/client-go](https://gitlab.com/gitlab-org/api/client-go) | `1.13.0` | `1.46.0` |\n| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.1` | `1.28.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.51.0` | `0.52.0` |\n| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.34.0` | `0.36.0` |\n| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.259.0` | `0.282.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.79.3` | `1.81.1` |\n| google.golang.org/protobuf | `1.36.11` | `1.36.12-0.20260120151049-f2248ac996af` |\n| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.19.5` | `3.21.0` |\n| [k8s.io/api](https://github.com/kubernetes/api) | `0.34.3` | `0.36.0` |\n| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.34.3` | `0.36.0` |\n| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.34.3` | `0.36.0` |\n| [k8s.io/apiserver](https://github.com/kubernetes/apiserver) | `0.34.3` | `0.36.0` |\n| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.34.3` | `0.35.1` |\n| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.34.3` | `0.36.0` |\n| [k8s.io/klog/v2](https://github.com/kubernetes/klog) | `2.130.1` | `2.140.0` |\n| [k8s.io/utils](https://github.com/kubernetes/utils) | `0.0.0-20250604170112-4c0f3b243397` | `0.0.0-20260210185600-b8788abfbbc2` |\n| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.22.4` | `0.24.0` |\n\nUpdates `code.gitea.io/sdk/gitea` from 0.22.1 to 0.25.1\n\nUpdates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.20.0 to 1.21.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/63e4ba18204b0df554e330df8f85662e653e67ab\"\u003e\u003ccode\u003e63e4ba1\u003c/code\u003e\u003c/a\u003e Bump release date for azcore (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26613\"\u003e#26613\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/fa0312174d17ff4cb7cb0118fa80de07409841c2\"\u003e\u003ccode\u003efa03121\u003c/code\u003e\u003c/a\u003e remove bypass local dns (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26609\"\u003e#26609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/c47f9a60dd1e9be6943ff0d6a5666a0ac09f6cfa\"\u003e\u003ccode\u003ec47f9a6\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 15153 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26607\"\u003e#26607\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/88b8b5b38ecebb929a2e302df054fed1d68618b8\"\u003e\u003ccode\u003e88b8b5b\u003c/code\u003e\u003c/a\u003e Changelog for v2.2.0 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26567\"\u003e#26567\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/72ca19ae2b8b4514c4f48a5ff33495b03c08afd0\"\u003e\u003ccode\u003e72ca19a\u003c/code\u003e\u003c/a\u003e Storage STG 101 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26568\"\u003e#26568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/b64baf56c6b168d258b2a0678290ac5f9ab97938\"\u003e\u003ccode\u003eb64baf5\u003c/code\u003e\u003c/a\u003e Sync .github directory with azure-sdk-tools repository (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26600\"\u003e#26600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/ecd64dd6500a04da22107925c3ba9fbe8e636f2c\"\u003e\u003ccode\u003eecd64dd\u003c/code\u003e\u003c/a\u003e Prep azcore@v1.21.1 for release (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26596\"\u003e#26596\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/1d02f204d0146ffd7d13d5585bf3766e53c32cc5\"\u003e\u003ccode\u003e1d02f20\u003c/code\u003e\u003c/a\u003e Update copilot code review instructions and migration breaking change mitigat...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/f6e9ce3212cc9d654d349778f19065eb5d849197\"\u003e\u003ccode\u003ef6e9ce3\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 14973 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26531\"\u003e#26531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/d5a3baf11e0b743a4009efb8e84cbaee335fc0eb\"\u003e\u003ccode\u003ed5a3baf\u003c/code\u003e\u003c/a\u003e Update CODEOWNERS to remove one owner from Custom Providers (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26588\"\u003e#26588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.20.0...sdk/azcore/v1.21.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/Masterminds/semver/v3` from 3.4.0 to 3.5.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Masterminds/semver/releases\"\u003egithub.com/Masterminds/semver/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.5.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdding more prerelease tests by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/273\"\u003eMasterminds/semver#273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate constraint error messages by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/278\"\u003eMasterminds/semver#278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix edge cases by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/279\"\u003eMasterminds/semver#279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdding some checks in by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/280\"\u003eMasterminds/semver#280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdating deps by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/281\"\u003eMasterminds/semver#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github/codeql-action from 4.35.1 to 4.35.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/282\"\u003eMasterminds/semver#282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/cache from 4.2.3 to 5.0.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/283\"\u003eMasterminds/semver#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 7.0.1 to 9.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/284\"\u003eMasterminds/semver#284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdating gitignore for devcontainers by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/286\"\u003eMasterminds/semver#286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixing some quality issues by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/287\"\u003eMasterminds/semver#287\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/282\"\u003eMasterminds/semver#282\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/Masterminds/semver/compare/v3.4.0...v3.5.0\"\u003ehttps://github.com/Masterminds/semver/compare/v3.4.0...v3.5.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Masterminds/semver/blob/master/CHANGELOG.md\"\u003egithub.com/Masterminds/semver/v3's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/8b89c86cb53c57cfd5d07c13de12bc4d78954e99\"\u003e\u003ccode\u003e8b89c86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/287\"\u003e#287\u003c/a\u003e from mattfarina/fix-da-issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/29d51d0ea4bffe39173673685d0dd312447d74a7\"\u003e\u003ccode\u003e29d51d0\u003c/code\u003e\u003c/a\u003e Fixing some quality issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/87f651dbe2f616342d6408b997ad7116ba72ddf3\"\u003e\u003ccode\u003e87f651d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/286\"\u003e#286\u003c/a\u003e from mattfarina/update-devcontainer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/158a6852a7e66d99594653227d3e8c3dc6d160ca\"\u003e\u003ccode\u003e158a685\u003c/code\u003e\u003c/a\u003e Updating gitignore for devcontainers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/7e83c080cfb4455752c654805b189274a10890ab\"\u003e\u003ccode\u003e7e83c08\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/284\"\u003e#284\u003c/a\u003e from Masterminds/dependabot/github_actions/golangci/g...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/697e27f32e7419eb896e7d3ec680c65fc673166b\"\u003e\u003ccode\u003e697e27f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/283\"\u003e#283\u003c/a\u003e from Masterminds/dependabot/github_actions/actions/ca...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/1591f8e3806198f60fa4dcaf2751bfc805c7740d\"\u003e\u003ccode\u003e1591f8e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/282\"\u003e#282\u003c/a\u003e from Masterminds/dependabot/github_actions/github/cod...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/3f5ff1737a28437e536d3ec54e41919577748ae6\"\u003e\u003ccode\u003e3f5ff17\u003c/code\u003e\u003c/a\u003e Bump golangci/golangci-lint-action from 7.0.1 to 9.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/04baa3376047b6d5e79ffcc60f69332dd3e26c85\"\u003e\u003ccode\u003e04baa33\u003c/code\u003e\u003c/a\u003e Bump actions/cache from 4.2.3 to 5.0.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/45939fec77cd7d07d586b823284d11423028e9c2\"\u003e\u003ccode\u003e45939fe\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 4.35.1 to 4.35.2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Masterminds/semver/compare/v3.4.0...v3.5.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.55.4 to 1.57.4\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5841d3ae2cfd6e6113ca61b71d69131b84932f4c\"\u003e\u003ccode\u003e5841d3a\u003c/code\u003e\u003c/a\u003e Release 2026-05-29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/16ac80d79c282366cae312281b3df925af4e9bf1\"\u003e\u003ccode\u003e16ac80d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/167926f8aca7228f2dd1bed73707505875aafef4\"\u003e\u003ccode\u003e167926f\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/a0fce13e18c6bff397ad77fac4cde4ab3f3b93e0\"\u003e\u003ccode\u003ea0fce13\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/223c0057211950899e0117dc027cc299a1dac664\"\u003e\u003ccode\u003e223c005\u003c/code\u003e\u003c/a\u003e update to smithy-go v1.26.0 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3426\"\u003e#3426\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/74c501189a40c9b937432a1b2a4cacffc851ea76\"\u003e\u003ccode\u003e74c5011\u003c/code\u003e\u003c/a\u003e Release 2026-05-28\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7d82651329a86064a9026f6219cff72921fa74da\"\u003e\u003ccode\u003e7d82651\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/79c63d9289784de4914143b7bff67157aa6a2a90\"\u003e\u003ccode\u003e79c63d9\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b15b3b873ad5c294d0c010fb1cc56ecb583d1618\"\u003e\u003ccode\u003eb15b3b8\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/090e46936630944917cfd6a0990ea3fd6391475b\"\u003e\u003ccode\u003e090e469\u003c/code\u003e\u003c/a\u003e Feat tmv2 parity (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3424\"\u003e#3424\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/ecr/v1.55.4...service/ecr/v1.57.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/bmatcuk/doublestar/v4` from 4.9.2 to 4.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bmatcuk/doublestar/releases\"\u003egithub.com/bmatcuk/doublestar/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eAdded WithNoHidden option\u003c/h2\u003e\n\u003cp\u003eAdded support for a \u003ccode\u003eWithNoHidden\u003c/code\u003e option to ignore hidden files in patterns that might unintentionally match them. For example, a \u003ccode\u003e.config\u003c/code\u003e directory would not be matched by \u003ccode\u003e*\u003c/code\u003e or recursed into by \u003ccode\u003e**\u003c/code\u003e, but \u003cem\u003ewould\u003c/em\u003e be matched by \u003ccode\u003e.*\u003c/code\u003e or recursed by \u003ccode\u003e.config/**\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/lukasngl\"\u003e\u003ccode\u003e@​lukasngl\u003c/code\u003e\u003c/a\u003e for the initial PR and idea!\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add WithNoHidden option to skip hidden files by \u003ca href=\"https://github.com/lukasngl\"\u003e\u003ccode\u003e@​lukasngl\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/109\"\u003ebmatcuk/doublestar#109\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lukasngl\"\u003e\u003ccode\u003e@​lukasngl\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/109\"\u003ebmatcuk/doublestar#109\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/bmatcuk/doublestar/compare/v4.9.2...v4.10.0\"\u003ehttps://github.com/bmatcuk/doublestar/compare/v4.9.2...v4.10.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/a9ad9e0ef4d6b7e4443090e9a7201d847a881711\"\u003e\u003ccode\u003ea9ad9e0\u003c/code\u003e\u003c/a\u003e allow starting test manually\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/9987c0c624376f84f44515adca73ddcdfdcdf453\"\u003e\u003ccode\u003e9987c0c\u003c/code\u003e\u003c/a\u003e update docs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/d3b2184d103391fcd0fcca6590c16367310eee65\"\u003e\u003ccode\u003ed3b2184\u003c/code\u003e\u003c/a\u003e windows support for WithNoHidden; better tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/5d6a6cd76ba3e45482d13140f332be36451f5a48\"\u003e\u003ccode\u003e5d6a6cd\u003c/code\u003e\u003c/a\u003e Merge branch 'lukasngl-feat/no-hidden'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/e8319d206e9dab8d51d41e662811cdfb9af72b24\"\u003e\u003ccode\u003ee8319d2\u003c/code\u003e\u003c/a\u003e run tests when a branch/tag is created\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/614b331133390c7682c227740c51ff65dea2de65\"\u003e\u003ccode\u003e614b331\u003c/code\u003e\u003c/a\u003e run tests when a branch/tag is created\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/df2e03fb0b91b726e0366c0d9ba1c5e580e2d0c9\"\u003e\u003ccode\u003edf2e03f\u003c/code\u003e\u003c/a\u003e feat: add WithNoHidden option to skip hidden files\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/bmatcuk/doublestar/compare/v4.9.2...v4.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/coreos/go-oidc/v3` from 3.17.0 to 3.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/coreos/go-oidc/releases\"\u003egithub.com/coreos/go-oidc/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e.github: configure dependabot by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/477\"\u003ecoreos/go-oidc#477\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e.github: update go versions in CI by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/480\"\u003ecoreos/go-oidc#480\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/478\"\u003ecoreos/go-oidc#478\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/479\"\u003ecoreos/go-oidc#479\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/da6b3bfca8af72414ee0e6e8746585ff5d206003\"\u003e\u003ccode\u003eda6b3bf\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/7f80694215d5eb5b28f851f35845439b1e1e9e5d\"\u003e\u003ccode\u003e7f80694\u003c/code\u003e\u003c/a\u003e build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/7271de57587bb756318f9819796ba846b1ba875a\"\u003e\u003ccode\u003e7271de5\u003c/code\u003e\u003c/a\u003e .github: update go versions in CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/3ccf20fdc4afab7c64881a108d6f4c17a4ecc24d\"\u003e\u003ccode\u003e3ccf20f\u003c/code\u003e\u003c/a\u003e .github: configure dependabot\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/fluxcd/pkg/kustomize` from 1.24.0 to 1.32.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/f3ad4b56adec90eb5661af565cdebec997ad4bfb\"\u003e\u003ccode\u003ef3ad4b5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/fluxcd/pkg/issues/1195\"\u003e#1195\u003c/a\u003e from fluxcd/release-main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/f35b4fd025cdee1664ca3d7aede2eb2fd594583d\"\u003e\u003ccode\u003ef35b4fd\u003c/code\u003e\u003c/a\u003e Prepare for release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/18e165c2592fb2a9633b9a80371e730d88bcab29\"\u003e\u003ccode\u003e18e165c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/fluxcd/pkg/issues/1194\"\u003e#1194\u003c/a\u003e from fluxcd/k8s-1.36\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/fe4377874a6d57593120ee524e1913ca81a5d2e5\"\u003e\u003ccode\u003efe43778\u003c/code\u003e\u003c/a\u003e Update controller-gen to v0.21.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/2498ab414d7e2abaee4131142293e520ee76b390\"\u003e\u003ccode\u003e2498ab4\u003c/code\u003e\u003c/a\u003e Update cloud auth SDKs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/b3bb0e0ff6bc2f42f23ff110baa0e7ae0f2ee685\"\u003e\u003ccode\u003eb3bb0e0\u003c/code\u003e\u003c/a\u003e Update go-git to v5.19.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/545dc4f55ab3850dca6401177c94e37ed40b5c87\"\u003e\u003ccode\u003e545dc4f\u003c/code\u003e\u003c/a\u003e Update distribution to v3.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/b23cbf9f0581b9dc5594e8659739f1bc9c870d35\"\u003e\u003ccode\u003eb23cbf9\u003c/code\u003e\u003c/a\u003e Update Kubernetes packages to 1.36\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/c6042810b61f1937c72a0e04d81d0091ca6e7dae\"\u003e\u003ccode\u003ec604281\u003c/code\u003e\u003c/a\u003e Update Go to 1.26\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/939c616718374460667e648c796487bfedfa6d98\"\u003e\u003ccode\u003e939c616\u003c/code\u003e\u003c/a\u003e ssa: Fix race condition in CRD tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/fluxcd/pkg/compare/apis/meta/v1.24.0...kustomize/v1.32.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/gin-gonic/gin` from 1.11.0 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/gin-gonic/gin/releases\"\u003egithub.com/gin-gonic/gin's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.12.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e192ac89eefc1c30f7c97ae48a9ffb1c6f1c8c8bc: feat(binding): add support for encoding.UnmarshalText in uri/query binding (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4203\"\u003e#4203\u003c/a\u003e) (\u003ca href=\"https://github.com/takanuva15\"\u003e\u003ccode\u003e@​takanuva15\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e53410d2e07054369e0960fbe2eed97e1b9966f12: feat(context): add GetError and GetErrorSlice methods for error retrieval (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4502\"\u003e#4502\u003c/a\u003e) (\u003ca href=\"https://github.com/raju-mechatronics\"\u003e\u003ccode\u003e@​raju-mechatronics\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eacc55e049e33b401e810dbd8c0d6dcb6b3ba2b05: feat(context): add Protocol Buffers support to content negotiation (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4423\"\u003e#4423\u003c/a\u003e) (\u003ca href=\"https://github.com/1911860538\"\u003e\u003ccode\u003e@​1911860538\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e38e765119241d990705169bedb5002a29ae0cbd1: feat(context): implemented Delete method (\u003ca href=\"https://github.com/Spyder01\"\u003e\u003ccode\u003e@​Spyder01\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e771dcc6476d7bc6abb9ec0235ecefa4d38fe6fb0: feat(gin): add option to use escaped path (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4420\"\u003e#4420\u003c/a\u003e) (\u003ca href=\"https://github.com/ldesauw\"\u003e\u003ccode\u003e@​ldesauw\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e4dec17afdff48e8018c83618fbbe69fceeb2b41d: feat(logger): color latency (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4146\"\u003e#4146\u003c/a\u003e) (\u003ca href=\"https://github.com/wsyqn6\"\u003e\u003ccode\u003e@​wsyqn6\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ed7776de7d444935ea4385999711bd6331a98fecb: feat(render): add bson protocol (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4145\"\u003e#4145\u003c/a\u003e) (\u003ca href=\"https://github.com/laurentcau\"\u003e\u003ccode\u003e@​laurentcau\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eb917b14ff9d189f16a7492be79d123a47806ee19: fix(binding): empty value error (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/2169\"\u003e#2169\u003c/a\u003e) (\u003ca href=\"https://github.com/guonaihong\"\u003e\u003ccode\u003e@​guonaihong\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec3d1092b3b48addf6f9cd00fe274ec3bd14650eb: fix(binding): improve empty slice/array handling in form binding (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4380\"\u003e#4380\u003c/a\u003e) (\u003ca href=\"https://github.com/1911860538\"\u003e\u003ccode\u003e@​1911860538\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e9914178584e42458ff7d23891463a880f58c9d86: fix(context): ClientIP handling for multiple X-Forwarded-For header values (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4472\"\u003e#4472\u003c/a\u003e) (\u003ca href=\"https://github.com/Nurysso\"\u003e\u003ccode\u003e@​Nurysso\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e2a794cd0b0faa7d829291375b27a3467ea972b0d: fix(debug): version mismatch (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4403\"\u003e#4403\u003c/a\u003e) (\u003ca href=\"https://github.com/zeek0x\"\u003e\u003ccode\u003e@​zeek0x\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec3d5a28ed6d3849da820195b6774d212bcc038a9: fix(gin): close os.File in RunFd to prevent resource leak (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4422\"\u003e#4422\u003c/a\u003e) (\u003ca href=\"https://github.com/1911860538\"\u003e\u003ccode\u003e@​1911860538\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e5fad976b372e381312f8de69f0969f1284d229d3: fix(gin): literal colon routes not working with engine.Handler() (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4415\"\u003e#4415\u003c/a\u003e) (\u003ca href=\"https://github.com/pawannn\"\u003e\u003ccode\u003e@​pawannn\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e63dd3e60cab89c27fb66bce1423bd268d52abad1: fix(recover): suppress http.ErrAbortHandler in recover (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4336\"\u003e#4336\u003c/a\u003e) (\u003ca href=\"https://github.com/MondayCha\"\u003e\u003ccode\u003e@​MondayCha\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e5c00df8afadd06cc5be530dde00fe6d9fa4a2e4a: fix(render): write content length in Data.Render (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4206\"\u003e#4206\u003c/a\u003e) (\u003ca href=\"https://github.com/dengaleev\"\u003e\u003ccode\u003e@​dengaleev\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e234a6d4c00cb77af9852aca0b8289745d5529b4b: fix(response): refine hijack behavior for response lifecycle (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4373\"\u003e#4373\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e472d086af2acd924cb4b9d7be0525f7d790f69bc: fix(tree): panic in findCaseInsensitivePathRec with RedirectFixedPath (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4535\"\u003e#4535\u003c/a\u003e) (\u003ca href=\"https://github.com/veeceey\"\u003e\u003ccode\u003e@​veeceey\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e8e07d37c63e5536eb25f4af4c91eabeee4011fba: fix: Correct typos, improve documentation clarity, and remove dead code (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4511\"\u003e#4511\u003c/a\u003e) (\u003ca href=\"https://github.com/mahanadh\"\u003e\u003ccode\u003e@​mahanadh\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eba093d19477b896ac89a7fc3246af23d290b8e26: chore(binding): upgrade bson dependency to mongo-driver v2 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4549\"\u003e#4549\u003c/a\u003e) (\u003ca href=\"https://github.com/BobDu\"\u003e\u003ccode\u003e@​BobDu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eb2b489dbf4826c2c630717a77fd5e42774625410: chore(context): always trust xff headers from unix socket (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/3359\"\u003e#3359\u003c/a\u003e) (\u003ca href=\"https://github.com/WeidiDeng\"\u003e\u003ccode\u003e@​WeidiDeng\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eecb3f7b5e2f3915bf1db240ed5eee572f8dbea36: chore(deps): upgrade golang.org/x/crypto to v0.45.0 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4449\"\u003e#4449\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eaf6e8b70b8261bb0c99ad094fe552ab92991620a: chore(deps): upgrade quic-go to v0.57.1 (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edb309081bc5c137b2aa15701ef53f7f19788da25: chore(logger): allow skipping query string output (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4547\"\u003e#4547\u003c/a\u003e) (\u003ca href=\"https://github.com/USA-RedDragon\"\u003e\u003ccode\u003e@​USA-RedDragon\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e26c3a628655cad2388380cb8102d6ce7d4875f3b: chore(response): prevent Flush() panic when \u003ccode\u003ehttp.Flusher\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4479\"\u003e#4479\u003c/a\u003e) (\u003ca href=\"https://github.com/Twacqwq\"\u003e\u003ccode\u003e@​Twacqwq\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e5dd833f1f26de0eb30eae47b17e05ced2482dc41: chore: bump minimum Go version to 1.24 and update workflows (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4388\"\u003e#4388\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRefactor\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e39858a0859c914bd26948fa950477e11bd8d3823: refactor(binding): use maps.Copy for cleaner map handling (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4352\"\u003e#4352\u003c/a\u003e) (\u003ca href=\"https://github.com/russcoss\"\u003e\u003ccode\u003e@​russcoss\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec0048f645ee945c4db30593afdea10123e2c30a6: refactor(context): omit the return value names (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4395\"\u003e#4395\u003c/a\u003e) (\u003ca href=\"https://github.com/wanghaolong613\"\u003e\u003ccode\u003e@​wanghaolong613\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e915e4c90d28ec4cffc6eb146e208ab5a65eac772: refactor(context): replace hardcoded localhost IPs with constants (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4481\"\u003e#4481\u003c/a\u003e) (\u003ca href=\"https://github.com/pauloappbr\"\u003e\u003ccode\u003e@​pauloappbr\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e414de60574449457f3192a7a1d5528940db2836d: refactor(context): using maps.Clone (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4333\"\u003e#4333\u003c/a\u003e) (\u003ca href=\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e59e9d4a794f12c4f9a6c7bed441b9644e5f6d99b: refactor(ginS): use sync.OnceValue to simplify engine function (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4314\"\u003e#4314\u003c/a\u003e) (\u003ca href=\"https://github.com/1911860538\"\u003e\u003ccode\u003e@​1911860538\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e3ab698dc5110af1977d57226e4995c57dd34c233: refactor(recovery): smart error comparison (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4142\"\u003e#4142\u003c/a\u003e) (\u003ca href=\"https://github.com/zeek0x\"\u003e\u003ccode\u003e@​zeek0x\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ed1a15347b1e45a8ee816193d3578a93bfd73b70f: refactor(utils): move util functions to utils.go (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4467\"\u003e#4467\u003c/a\u003e) (\u003ca href=\"https://github.com/zeek0x\"\u003e\u003ccode\u003e@​zeek0x\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ee3118cc378d263454098924ebbde7e8d1dd2e904: refactor: for loop can be modernized using range over int (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4392\"\u003e#4392\u003c/a\u003e) (\u003ca href=\"https://github.com/wanghaolong613\"\u003e\u003ccode\u003e@​wanghaolong613\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e488f8c3ffa579a8d19beb2bae95ff8ef36b3d53f: refactor: replace magic numbers with named constants in bodyAllowedForStatus (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4529\"\u003e#4529\u003c/a\u003e) (\u003ca href=\"https://github.com/veeceey\"\u003e\u003ccode\u003e@​veeceey\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e9968c4bf9d5a99edc3eee2c068a4c9160ece8915: refactor: use b.Loop() to simplify the code and improve performance (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4389\"\u003e#4389\u003c/a\u003e) (\u003ca href=\"https://github.com/reddaisyy\"\u003e\u003ccode\u003e@​reddaisyy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ea85ef5ce4d0cda8834c59c855068ed48b51192d1: refactor: use b.Loop() to simplify the code and improve performance (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4432\"\u003e#4432\u003c/a\u003e) (\u003ca href=\"https://github.com/efcking\"\u003e\u003ccode\u003e@​efcking\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBuild process updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e61b67de522a189b568aced4c5c16917c558e3387: ci(bot): increase frequency and group updates for dependencies (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4367\"\u003e#4367\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efb27ef26c2fdfe25344b4c039d8a53551f9e912c: ci(lint): refactor test assertions and linter configuration (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4436\"\u003e#4436\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e93ff771e6dbf10e432864b30f3719ac5c84a4d4a: ci(sec): improve type safety and server organization in HTTP middleware (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4437\"\u003e#4437\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ee88fc8927a52b74f55bec0351604a56ac0aa1c51: ci(sec): schedule Trivy security scans to run daily at midnight UTC (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4439\"\u003e#4439\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e5e5ff3ace496a31b138b0820136a146bfb5de0ef: ci: replace vulnerability scanning workflow with Trivy integration (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4421\"\u003e#4421\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e00900fb3e1ea9dde33985a0e4f6afec793d5e786: ci: update CI workflows and standardize Trivy config quotes (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4531\"\u003e#4531\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eae3f524974fc4f55d18c9e7fae4614503c015226: ci: update Go version support to 1.25+ across CI and docs (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4550\"\u003e#4550\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/gin-gonic/gin/blob/master/CHANGELOG.md\"\u003egithub.com/gin-gonic/gin's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eGin v1.12.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(render): add bson protocol (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4145\"\u003e#4145\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(context): add GetError and GetErrorSlice methods for error retrieval (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4502\"\u003e#4502\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(binding): add support for encoding.UnmarshalText in uri/query binding (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4203\"\u003e#4203\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(gin): add option to use escaped path (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4420\"\u003e#4420\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(context): add Protocol Buffers support to content negotiation (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4423\"\u003e#4423\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(context): implemented Delete method (\u003ca href=\"https://github.com/gin-gonic/gin/commit/38e7651\"\u003e#38e7651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(logger): color latency (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4146\"\u003e#4146\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eperf(tree): reduce allocations in findCaseInsensitivePath (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4417\"\u003e#4417\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eperf(recovery): optimize line reading in stack function (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4466\"\u003e#4466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eperf(path): replace regex with custom functions in redirectTrailingSlash (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4414\"\u003e#4414\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eperf(tree): optimize path parsing using strings.Count (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4246\"\u003e#4246\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(logger): allow skipping query string output (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4547\"\u003e#4547\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(context): always trust xff headers from unix socket (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/3359\"\u003e#3359\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(response): prevent Flush() panic when the underlying ResponseWriter does not implement \u003ccode\u003ehttp.Flusher\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4479\"\u003e#4479\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(recovery): smart error comparison (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4142\"\u003e#4142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(context): replace hardcoded localhost IPs with constants (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4481\"\u003e#4481\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(utils): move util functions to utils.go (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4467\"\u003e#4467\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(binding): use maps.Copy for cleaner map handling (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4352\"\u003e#4352\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(context): using maps.Clone (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4333\"\u003e#4333\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(ginS): use sync.OnceValue to simplify engine function (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4314\"\u003e#4314\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor: replace magic numbers with named constants in bodyAllowedForStatus (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4529\"\u003e#4529\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor: for loop can be modernized using range over int (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4392\"\u003e#4392\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(tree): panic in findCaseInsensitivePathRec with RedirectFixedPath (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4535\"\u003e#4535\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(render): write content length in Data.Render (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4206\"\u003e#4206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(context): ClientIP handling for multiple X-Forwarded-For header values (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4472\"\u003e#4472\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(binding): empty value error (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/2169\"\u003e#2169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(recover): suppress http.ErrAbortHandler in recover (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4336\"\u003e#4336\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(gin): literal colon routes not working with engine.Handler() (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4415\"\u003e#4415\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(gin): close os.File in RunFd to prevent resource leak (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4422\"\u003e#4422\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(response): refine hijack behavior for response lifecycle (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4373\"\u003e#4373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(binding): improve empty slice/array handling in form binding (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4380\"\u003e#4380\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(debug): version mismatch (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4403\"\u003e#4403\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: correct typos, improve documentation clarity, and remove dead code (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4511\"\u003e#4511\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBuild process updates / CI\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eci: update Go version support to 1.25+ across CI and docs (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4550\"\u003e#4550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(binding): upgrade bson dependency to mongo-driver v2 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4549\"\u003e#4549\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/73726dc606796a025971fe451f0aa6f1b9b847f6\"\u003e\u003ccode\u003e73726dc\u003c/code\u003e\u003c/a\u003e docs: update documentation to reflect Go version changes (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4552\"\u003e#4552\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/e292e5caa777bce70b66fe08c94cbe9cef3e2ec9\"\u003e\u003ccode\u003ee292e5c\u003c/code\u003e\u003c/a\u003e docs: document and finalize Gin v1.12.0 release (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4551\"\u003e#4551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/ae3f524974fc4f55d18c9e7fae4614503c015226\"\u003e\u003ccode\u003eae3f524\u003c/code\u003e\u003c/a\u003e ci: update Go version support to 1.25+ across CI and docs (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4550\"\u003e#4550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/38534e2bf98a06e1f62d6b24384e90b5f78699bf\"\u003e\u003ccode\u003e38534e2\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4548\"\u003e#4548\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/472d086af2acd924cb4b9d7be0525f7d790f69bc\"\u003e\u003ccode\u003e472d086\u003c/code\u003e\u003c/a\u003e fix(tree): panic in findCaseInsensitivePathRec with RedirectFixedPath (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4535\"\u003e#4535\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/fb2583442c4d9bccb75e6d26f1aa6e7c01950db6\"\u003e\u003ccode\u003efb25834\u003c/code\u003e\u003c/a\u003e test(context): use http.StatusContinue constant instead of magic number 100 (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/6f1d5fe3cdb171a08928c3c9dd3fbcfc9ee1b521\"\u003e\u003ccode\u003e6f1d5fe\u003c/code\u003e\u003c/a\u003e test(render): add comprehensive error handling tests (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4541\"\u003e#4541\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/5c00df8afadd06cc5be530dde00fe6d9fa4a2e4a\"\u003e\u003ccode\u003e5c00df8\u003c/code\u003e\u003c/a\u003e fix(render): write content length in Data.Render (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4206\"\u003e#4206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/db309081bc5c137b2aa15701ef53f7f19788da25\"\u003e\u003ccode\u003edb30908\u003c/code\u003e\u003c/a\u003e chore(logger): allow skipping query string output (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4547\"\u003e#4547\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/ba093d19477b896ac89a7fc3246af23d290b8e26\"\u003e\u003ccode\u003eba093d1\u003c/code\u003e\u003c/a\u003e chore(binding): upgrade bson dependency to mongo-driver v2 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4549\"\u003e#4549\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/gin-gonic/gin/compare/v1.11.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-openapi/runtime` from 0.31.0 to 0.32.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-openapi/runtime/releases\"\u003egithub.com/go-openapi/runtime's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.32.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/go-openapi/runtime/tree/v0.32.2\"\u003e0.32.2\u003c/a\u003e - 2026-05-27\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-openapi/runtime/compare/v0.32.1...v0.32.2\"\u003ehttps://github.com/go-openapi/runtime/compare/v0.32.1...v0.32.2\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e2 commits in this release.\u003c/p\u003e\n\u003chr /\u003e\n\u003ch3\u003e\u003c!-- raw HTML omitted --\u003eFixed bugs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(client): added a guard to avoid the client to panic by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/474\"\u003e#474\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/10b4d12b0cd87e2f815d599da4fe4dd193860402\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003c!-- raw HTML omitted --\u003eMiscellaneous tasks\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore: prepare release v0.32.2 by \u003ca href=\"https://github.com/bot-go-openapi%5Bbot%5D\"\u003e\u003ccode\u003e@​bot-go-openapi[bot]\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/475\"\u003e#475\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/a357ecf20e27c31a91eab863273f0d8b4a226f27\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003ePeople who contributed to this release\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/go-openapi/runtime\"\u003eruntime\u003c/a\u003e license terms\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/go-openapi/runtime/?tab=Apache-2.0-1-ov-file#readme\"\u003e\u003cimg src=\"http://img.shields.io/badge/license-Apache%20v2-orange.svg\" alt=\"License\" /\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch1\u003ePer-module changes\u003c/h1\u003e\n\u003chr /\u003e\n\u003ch2\u003eclient-middleware/opentracing (0.32.2)\u003c/h2\u003e\n\u003ch3\u003e\u003c!-- raw HTML omitted --\u003eMiscellaneous tasks\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore: prepare release v0.32.2 by \u003ca href=\"https://github.com/bot-go-openapi%5Bbot%5D\"\u003e\u003ccode\u003e@​bot-go-openapi[bot]\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/475\"\u003e#475\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/a357ecf20e27c31a91eab863273f0d8b4a226f27\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.32.1\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/a357ecf20e27c31a91eab863273f0d8b4a226f27\"\u003e\u003ccode\u003ea357ecf\u003c/code\u003e\u003c/a\u003e chore: prepare release v0.32.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/10b4d12b0cd87e2f815d599da4fe4dd193860402\"\u003e\u003ccode\u003e10b4d12\u003c/code\u003e\u003c/a\u003e fix(client): added a guard to avoid the client to panic (\u003ca href=\"https://redirect.github.com/go-openapi/runtime/issues/474\"\u003e#474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/ea80e5aacea5c4beb4e0149c16bfedafeb712ade\"\u003e\u003ccode\u003eea80e5a\u003c/code\u003e\u003c/a\u003e chore: prepare release v0.32.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/01f5c5554ca086b21e2edeb501df8d1ea3442e89\"\u003e\u003ccode\u003e01f5c55\u003c/code\u003e\u003c/a\u003e doc: documented SkipAuth feature with build tag (\u003ca href=\"https://redirect.github.com/go-openapi/runtime/issues/472\"\u003e#472\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/af192a9fb1651707e247f9a61b98f4bd033e86b1\"\u003e\u003ccode\u003eaf192a9\u003c/code\u003e\u003c/a\u003e refactor(client): promote ContextualTransport to runtime package (\u003ca href=\"https://redirect.github.com/go-openapi/runtime/issues/471\"\u003e#471\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/100221960271f64b93bda18c4710deaffec71fba\"\u003e\u003ccode\u003e1002219\u003c/code\u003e\u003c/a\u003e chore: prepare release v0.32.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/c1e2e2cb180aa5f374faa5ac74868eab49f53eb3\"\u003e\u003ccode\u003ec1e2e2c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-openapi/runtime/issues/469\"\u003e#469\u003c/a\u003e from fredbi/fix/3113-file-urlencoded\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/584ff89d96ca40fb1fc2dafb11d1a778b10eac75\"\u003e\u003ccode\u003e584ff89\u003c/code\u003e\u003c/a\u003e ci: add unsafe-skipauth tagged-build workflow with coverage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/4042690b6876ac18d04c0803d55aefcd86948472\"\u003e\u003ccode\u003e4042690\u003c/code\u003e\u003c/a\u003e feat(middleware): build-tag-gated SetSkipAuth for dev-mode auth bypass\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/cd748fa92d58a2758a07a632ea5905e5f76126ba\"\u003e\u003ccode\u003ecd748fa\u003c/code\u003e\u003c/a\u003e refactor(client/otel): pivot OpenTelemetry transport to SubmitContext\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-openapi/runtime/compare/v0.31.0...v0.32.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/goccy/go-yaml` from 1.18.0 to 1.19.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/goccy/go-yaml/releases\"\u003egithub.com/goccy/go-yaml's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.19.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix anchor reference regression in nested structures by \u003ca href=\"https://github.com/linyows\"\u003e\u003ccode\u003e@​linyows\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/839\"\u003egoccy/go-yaml#839\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/linyows\"\u003e\u003ccode\u003e@​linyows\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/839\"\u003egoccy/go-yaml#839\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/goccy/go-yaml/compare/v1.19.1...v1.19.2\"\u003ehttps://github.com/goccy/go-yaml/compare/v1.19.1...v1.19.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.19.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix decoding of integer keys of map type by \u003ca href=\"https://github.com/goccy\"\u003e\u003ccode\u003e@​goccy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/829\"\u003egoccy/go-yaml#829\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport line comment for flow sequence or flow map by \u003ca href=\"https://github.com/goccy\"\u003e\u003ccode\u003e@​goccy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/834\"\u003egoccy/go-yaml#834\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/goccy/go-yaml/compare/v1.19.0...v1.19.1\"\u003ehttps://github.com/goccy/go-yaml/compare/v1.19.0...v1.19.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;feat: Dont make copies of structs for validation\u0026quot; by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/763\"\u003egoccy/go-yaml#763\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd decode option that allows specific field prefixes by \u003ca href=\"https://github.com/cpuguy83\"\u003e\u003ccode\u003e@​cpuguy83\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/795\"\u003egoccy/go-yaml#795\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNormalize CR and CRLF in multi-line strings by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/754\"\u003egoccy/go-yaml#754\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport non string map keys by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/756\"\u003egoccy/go-yaml#756\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSkip directive in path operations by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/758\"\u003egoccy/go-yaml#758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd indentation to flow values on new lines by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/759\"\u003egoccy/go-yaml#759\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd support for RawMessage, similar to json.RawMessage by \u003ca href=\"https://github.com/thanethomson\"\u003e\u003ccode\u003e@​thanethomson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/790\"\u003egoccy/go-yaml#790\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cpuguy83\"\u003e\u003ccode\u003e@​cpuguy83\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/795\"\u003egoccy/go-yaml#795\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/thanethomson\"\u003e\u003ccode\u003e@​thanethomson\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/790\"\u003egoccy/go-yaml#790\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/goccy/go-yaml/compare/v1.18.0...v1.19.0\"\u003ehttps://github.com/goccy/go-yaml/compare/v1.18.0...v1.19.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/92bc79cb5f685e999ad131473168fc45215d12d9\"\u003e\u003ccode\u003e92bc79c\u003c/code\u003e\u003c/a\u003e Fix anchor reference regression in nested structures (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/839\"\u003e#839\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/b0ab06985557a2d84913ecba6dda0dbedbd5e154\"\u003e\u003ccode\u003eb0ab069\u003c/code\u003e\u003c/a\u003e Support line comment for flow sequence or flow map (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/834\"\u003e#834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/9e98b0c753ff2b8f0b323929c9c60fe7951d0f45\"\u003e\u003ccode\u003e9e98b0c\u003c/code\u003e\u003c/a\u003e Fix decoding of integer keys of map type (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/829\"\u003e#829\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/a7b4bfbcf4a41152862ffba5cce666631bc04bb1\"\u003e\u003ccode\u003ea7b4bfb\u003c/code\u003e\u003c/a\u003e Add support for RawMessage, similar to json.RawMessage (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/790\"\u003e#790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/07c09c028744e7aac32d1b11279a401055d107f5\"\u003e\u003ccode\u003e07c09c0\u003c/code\u003e\u003c/a\u003e Add indentation to flow values on new lines (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/759\"\u003e#759\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/0040ab4161153c5b812ae51984d3967ad3dbd068\"\u003e\u003ccode\u003e0040ab4\u003c/code\u003e\u003c/a\u003e Skip directive in path operations (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/758\"\u003e#758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/7901e98f54d280a553a0d606c91a82fa89493928\"\u003e\u003ccode\u003e7901e98\u003c/code\u003e\u003c/a\u003e Support non string map keys (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/756\"\u003e#756\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/f4d13479ba3d44541a65d0dffeab5e3fa805413a\"\u003e\u003ccode\u003ef4d1347\u003c/code\u003e\u003c/a\u003e Normalize CR and CRLF in multi-line strings (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/754\"\u003e#754\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/90e852559132e85734ab0c9a48b3a912ebd3f060\"\u003e\u003ccode\u003e90e8525\u003c/code\u003e\u003c/a\u003e Add decode option that allows specific field prefixes (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/795\"\u003e#795\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/25e5d9094248e480434ca87d9119e3d9ce7ac1d7\"\u003e\u003ccode\u003e25e5d90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;feat: Dont make copies of structs for validation (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/737\"\u003e#737\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/763\"\u003e#763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/goccy/go-yaml/compare/v1.18.0...v1.19.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.20.7 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.21.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2254\"\u003egoogle/go-containerregistry#2254\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jferrl/go-githubauth` from 1.5.1 to 1.6.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jferrl/go-githubauth/releases\"\u003egithub.com/jferrl/go-githubauth's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.6.0\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003ch3\u003eExternal key store support for GitHub App JWTs\u003c/h3\u003e\n\u003cp\u003eAdded \u003ccode\u003eNewApplicationTokenSourceFromSigner\u003c/code\u003e which accepts any \u003ccode\u003ecrypto.Signer\u003c/code\u003e with an RSA public key. Enables signing via AWS KMS, GCP KMS, Azure Key Vault, HashiCorp Vault Transit, PKCS#11 HSMs, or ssh-agent — the private key never touches process memory. Validates at construction that the signer's public key is \u003ccode\u003e*rsa.PublicKey\u003c/code\u003e (GitHub requires RS256).\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003esi...\n\n_Description has been truncated_","html_url":"https://github.com/akuity/kargo/pull/6389","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/akuity%2Fkargo/issues/6389","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/6389/packages"},{"uuid":"4552121993","node_id":"PR_kwDOD5cBa87g1Nx-","number":608,"state":"closed","title":"chore(deps): bump the go-minor-patch group across 1 directory with 7 updates","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-29T22:56:07.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-29T22:55:57.000Z","updated_at":"2026-05-29T22:56:10.000Z","time_to_close":10,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-minor-patch","update_count":7,"packages":[{"name":"github.com/containerd/containerd/v2","old_version":"2.3.0","new_version":"2.3.1","repository_url":"https://github.com/containerd/containerd"},{"name":"github.com/docker/cli","old_version":"29.4.3+incompatible","new_version":"29.5.2+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/docker/go-connections","old_version":"0.6.0","new_version":"0.7.0","repository_url":"https://github.com/docker/go-connections"},{"name":"github.com/go-test/deep","old_version":"1.0.8","new_version":"1.1.1","repository_url":"https://github.com/go-test/deep"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"golang.org/x/crypto","old_version":"0.50.0","new_version":"0.52.0","repository_url":"https://github.com/golang/crypto"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor-patch group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.3.0` | `2.3.1` |\n| [github.com/docker/cli](https://github.com/docker/cli) | `29.4.3+incompatible` | `29.5.2+incompatible` |\n| [github.com/docker/go-connections](https://github.com/docker/go-connections) | `0.6.0` | `0.7.0` |\n| [github.com/go-test/deep](https://github.com/go-test/deep) | `1.0.8` | `1.1.1` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.5` | `0.21.6` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.50.0` | `0.52.0` |\n\n\nUpdates `github.com/containerd/containerd/v2` from 2.3.0 to 2.3.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/containerd/containerd/releases\"\u003egithub.com/containerd/containerd/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003econtainerd 2.3.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v2.3.1 release of containerd!\u003c/p\u003e\n\u003cp\u003eThe first patch release for containerd 2.3 contains various fixes and improvements.\u003c/p\u003e\n\u003ch3\u003eSecurity Updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/security/advisories/GHSA-fqw6-gf59-qr4w\"\u003e\u003cstrong\u003eCVE-2026-46680\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eHighlights\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bug where failed gRPC plugins were not tolerated when starting listeners (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13390\"\u003e#13390\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eImage Storage\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure metadata and mount plugin boltdb files are closed on server shutdown (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13379\"\u003e#13379\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eRuntime\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix handling of out-of-range USER values in OCI spec to avoid unexpected username/group lookups (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13447\"\u003e#13447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix sandbox task API endpoints for non-runc runtimes and deprecate task fields in Runc options (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13422\"\u003e#13422\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply hardening to default seccomp socket policy by blocking AF_ALG (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13409\"\u003e#13409\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eSnapshotters\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eDisable overlayfs \u0026quot;rebase\u0026quot; capability when running in user namespace (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13394\"\u003e#13394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix transfer plugin error when EROFS differ is configured but mkfs.erofs is unavailable (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13364\"\u003e#13364\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/containerd/containerd/issues\"\u003ehttps://github.com/containerd/containerd/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMaksym Pavlenko\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eDerek McGowan\u003c/li\u003e\n\u003cli\u003ePaweł Gronowski\u003c/li\u003e\n\u003cli\u003eBrian Goff\u003c/li\u003e\n\u003cli\u003eAustin Vazquez\u003c/li\u003e\n\u003cli\u003eLEI WANG\u003c/li\u003e\n\u003cli\u003eSamuel Karp\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare release notes for v2.3.1 (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13405\"\u003e#13405\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/58af9651939577f81969b387b6b2e2aed45ead7d\"\u003e\u003ccode\u003e58af96519\u003c/code\u003e\u003c/a\u003e Prepare release notes for v2.3.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/8f0b3ca83015873d643db246202b63b8384f14fd\"\u003e\u003ccode\u003e8f0b3ca83\u003c/code\u003e\u003c/a\u003e Update api to v1.11.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eoci: return explicit error for out-of-range USER values (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13447\"\u003e#13447\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/64b425cf570b3b8dd1d4cc46da7c1fce65c6651a\"\u003e\u003ccode\u003e64b425c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13405\"\u003e#13405\u003c/a\u003e from AkihiroSuda/prepare-release-2.3.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/58af9651939577f81969b387b6b2e2aed45ead7d\"\u003e\u003ccode\u003e58af965\u003c/code\u003e\u003c/a\u003e Prepare release notes for v2.3.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/8f0b3ca83015873d643db246202b63b8384f14fd\"\u003e\u003ccode\u003e8f0b3ca\u003c/code\u003e\u003c/a\u003e Update api to v1.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/9f8f4538dea6960e9f53a8f0caba11531fcc095c\"\u003e\u003ccode\u003e9f8f453\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13447\"\u003e#13447\u003c/a\u003e from samuelkarp/oci-withuser-errrange-2.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/f822a911ab2b7c73e30bc0f36ea319642c9711b1\"\u003e\u003ccode\u003ef822a91\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13444\"\u003e#13444\u003c/a\u003e from dmcgowan/prepare-api-v1.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/da7aef299c57cc1f290700ade8fa0a5fec69a462\"\u003e\u003ccode\u003eda7aef2\u003c/code\u003e\u003c/a\u003e Prepare release notes for api/v1.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/a50a704094cf72710ccfa4944a642ef4e7ec9d2c\"\u003e\u003ccode\u003ea50a704\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13422\"\u003e#13422\u003c/a\u003e from k8s-infra-cherrypick-robot/cherry-pick-13360-t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/5282d4e09d3bc8b0957780caa7a4644fac7c86a7\"\u003e\u003ccode\u003e5282d4e\u003c/code\u003e\u003c/a\u003e Wire task address and version fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/e44f5f9ec610d95a712d230e8a19ae516e0a26ac\"\u003e\u003ccode\u003ee44f5f9\u003c/code\u003e\u003c/a\u003e protos: include task API address to CreateTaskRequest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/85f22f7afa3af5aa5083cc7ae50c3b58a35b8849\"\u003e\u003ccode\u003e85f22f7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13409\"\u003e#13409\u003c/a\u003e from k8s-infra-cherrypick-robot/cherry-pick-13327-t...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/containerd/containerd/compare/v2.3.0...v2.3.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/cli` from 29.4.3+incompatible to 29.5.2+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/79eb04c7d8e1d73247cb7fe011eecc645063e0f0\"\u003e\u003ccode\u003e79eb04c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/3173\"\u003e#3173\u003c/a\u003e from rene-hermenau/patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1a3048fe6ca313e50ea70ae34e3e0917a1987a0a\"\u003e\u003ccode\u003e1a3048f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6997\"\u003e#6997\u003c/a\u003e from vvoland/gha-fix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9177c7fc6b11fcef52d2bcacdbf72681fdab6821\"\u003e\u003ccode\u003e9177c7f\u003c/code\u003e\u003c/a\u003e gha: Port validate milestones from Moby\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/77cb1567643b34da4390216e61f8f53c80e59d36\"\u003e\u003ccode\u003e77cb156\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6994\"\u003e#6994\u003c/a\u003e from thaJeztah/bump_buildx\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/382a92daa8c5721fda7e6011629cfbdc70fa0633\"\u003e\u003ccode\u003e382a92d\u003c/code\u003e\u003c/a\u003e Dockerfile: update buildx to v0.34.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/5c0919a947be11e0e07fd1cfd7949700255a50a4\"\u003e\u003ccode\u003e5c0919a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6995\"\u003e#6995\u003c/a\u003e from thaJeztah/bump_version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/a68dd7a4fbfe34bc3a057cf532abda740f6f0ad3\"\u003e\u003ccode\u003ea68dd7a\u003c/code\u003e\u003c/a\u003e bump VERSION to v29.5.2-dev\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2518b52d948a0cbee071d394c03c86a3005636ba\"\u003e\u003ccode\u003e2518b52\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6991\"\u003e#6991\u003c/a\u003e from mickael-docker/docs-clarify-authz\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9f18a0a70c9228f5892594c6b56425b8bed1899f\"\u003e\u003ccode\u003e9f18a0a\u003c/code\u003e\u003c/a\u003e docs: clarify authz content type\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2944fd1daa5d54315ab8fcd874ea9cb6199c6117\"\u003e\u003ccode\u003e2944fd1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6989\"\u003e#6989\u003c/a\u003e from thaJeztah/bump_version\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v29.4.3...v29.5.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/go-connections` from 0.6.0 to 0.7.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/7997b0f0ac81b5b26ad7d3d2c02ca2e8fbc6c7d9\"\u003e\u003ccode\u003e7997b0f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/go-connections/issues/156\"\u003e#156\u003c/a\u003e from thaJeztah/bump_go_winio\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/329724ad4d0a0ae91c392b41a47df3d7c6475a7f\"\u003e\u003ccode\u003e329724a\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/Microsoft/go-winio v0.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/161dc9bf709385ed22c1c9665d5ef45fc333ce7e\"\u003e\u003ccode\u003e161dc9b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/go-connections/issues/155\"\u003e#155\u003c/a\u003e from thaJeztah/pin_actions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/b115e42ee9f98b5f9de19a2054ae54483e84226d\"\u003e\u003ccode\u003eb115e42\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/go-connections/issues/154\"\u003e#154\u003c/a\u003e from thaJeztah/fix_non_linux_tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/4c35b2ac042020d513569f7578c52177d2b1a03e\"\u003e\u003ccode\u003e4c35b2a\u003c/code\u003e\u003c/a\u003e ci: pin actions to sha\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/b4454a660b5f65feff1ae967957eae3293c85bec\"\u003e\u003ccode\u003eb4454a6\u003c/code\u003e\u003c/a\u003e tlsconfig: make root pool tests deterministic across platforms\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/0819711a9938706b2f8af55cdec923fe8e71ccb4\"\u003e\u003ccode\u003e0819711\u003c/code\u003e\u003c/a\u003e tlsconfig: certPool: pass options as argument\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/03296353c218966349e11c41430ffd4abdff93c3\"\u003e\u003ccode\u003e0329635\u003c/code\u003e\u003c/a\u003e tlsconfig: rename some vars that shadowed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/894d811275c2f782172ae739d170bcaad295f188\"\u003e\u003ccode\u003e894d811\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/go-connections/issues/150\"\u003e#150\u003c/a\u003e from thaJeztah/deprecate_SystemCertPool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/0a1293ab5fa588c0498e1447e1d53ce95c6f3315\"\u003e\u003ccode\u003e0a1293a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/go-connections/issues/153\"\u003e#153\u003c/a\u003e from thaJeztah/chachacha\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/go-connections/compare/v0.6.0...v0.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-test/deep` from 1.0.8 to 1.1.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-test/deep/releases\"\u003egithub.com/go-test/deep's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix copy pasta error in TestNilMapsAreEmpty by \u003ca href=\"https://github.com/bartleyg\"\u003e\u003ccode\u003e@​bartleyg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-test/deep/pull/58\"\u003ego-test/deep#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd an option to consider nil pointers to be equivalent to zero values by \u003ca href=\"https://github.com/seveas\"\u003e\u003ccode\u003e@​seveas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-test/deep/pull/61\"\u003ego-test/deep#61\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bartleyg\"\u003e\u003ccode\u003e@​bartleyg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-test/deep/pull/58\"\u003ego-test/deep#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/seveas\"\u003e\u003ccode\u003e@​seveas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-test/deep/pull/61\"\u003ego-test/deep#61\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-test/deep/compare/v1.1.0...v1.1.1\"\u003ehttps://github.com/go-test/deep/compare/v1.1.0...v1.1.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.1.0\u003c/h2\u003e\n\u003cp\u003eNew minor release, v1.1, that adds support for \u003cem\u003eoptional\u003c/em\u003e flags.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImplment issue 28 with FLAG_IGNORE_SLICE_ORDER by \u003ca href=\"https://github.com/daniel-nichter\"\u003e\u003ccode\u003e@​daniel-nichter\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-test/deep/pull/56\"\u003ego-test/deep#56\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-test/deep/compare/v1.0.9...v1.1.0\"\u003ehttps://github.com/go-test/deep/compare/v1.0.9...v1.1.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.0.9\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove Travis CI, use GitHub Actinos instead by \u003ca href=\"https://github.com/daniel-nichter\"\u003e\u003ccode\u003e@​daniel-nichter\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-test/deep/pull/53\"\u003ego-test/deep#53\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix issue 45: don't try to call Error method on unexported field by \u003ca href=\"https://github.com/daniel-nichter\"\u003e\u003ccode\u003e@​daniel-nichter\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-test/deep/pull/54\"\u003ego-test/deep#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd CompareFunctions (issue 46) by \u003ca href=\"https://github.com/daniel-nichter\"\u003e\u003ccode\u003e@​daniel-nichter\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-test/deep/pull/55\"\u003ego-test/deep#55\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-test/deep/compare/v1.0.8...v1.0.9\"\u003ehttps://github.com/go-test/deep/compare/v1.0.8...v1.0.9\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-test/deep/blob/master/CHANGES.md\"\u003egithub.com/go-test/deep's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.1 released 2024-06-23\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eNilPointersAreZero\u003c/code\u003e option: causes a nil pointer to be equal to a zero value (PR \u003ca href=\"https://redirect.github.com/go-test/deep/issues/61\"\u003e#61\u003c/a\u003e) (\u003ca href=\"https://github.com/seveas\"\u003e\u003ccode\u003e@​seveas\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdated test matrix to go1.22, go1.21, and go1.20\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.0 released 2022-12-09\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd optional flags: \u003ccode\u003eEqual(a, b, flags..)\u003c/code\u003e and \u003ccode\u003eFLAG_IGNORE_SLICE_ORDER\u003c/code\u003e (issue \u003ca href=\"https://redirect.github.com/go-test/deep/issues/28\"\u003e#28\u003c/a\u003e, PR \u003ca href=\"https://redirect.github.com/go-test/deep/issues/56\"\u003e#56\u003c/a\u003e) (\u003ca href=\"https://github.com/alenkacz\"\u003e\u003ccode\u003e@​alenkacz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch2\u003ev1.0.9 released 2022-12-09\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed issue \u003ca href=\"https://redirect.github.com/go-test/deep/issues/45\"\u003e#45\u003c/a\u003e: Panic when comparing errors in unexported fields (PR \u003ca href=\"https://redirect.github.com/go-test/deep/issues/54\"\u003e#54\u003c/a\u003e) (\u003ca href=\"https://github.com/seveas\"\u003e\u003ccode\u003e@​seveas\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed issue \u003ca href=\"https://redirect.github.com/go-test/deep/issues/46\"\u003e#46\u003c/a\u003e: Functions are handled differently from reflect.DeepEqual (PR \u003ca href=\"https://redirect.github.com/go-test/deep/issues/55\"\u003e#55\u003c/a\u003e) (\u003ca href=\"https://github.com/countcb\"\u003e\u003ccode\u003e@​countcb\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdated test matrix to go1.17, go1.18, and go1.19 and moved testing to GitHub Actions\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/9e863ff5cf900f95c7e8a5e8248300939257744b\"\u003e\u003ccode\u003e9e863ff\u003c/code\u003e\u003c/a\u003e Release v1.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/dc5b2f649f19df10b41b5f6ad46f62bc22d60341\"\u003e\u003ccode\u003edc5b2f6\u003c/code\u003e\u003c/a\u003e Update SECURITY.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/185886dcdbd18eef2db9c45ad3250df9c723776d\"\u003e\u003ccode\u003e185886d\u003c/code\u003e\u003c/a\u003e Restore 100% test coverage (NilPointersAreZero case)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/47ae1b86a22d8f95d90795f0803d1b1cb50c824d\"\u003e\u003ccode\u003e47ae1b8\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-test/deep/issues/61\"\u003e#61\u003c/a\u003e from seveas/nil-pointers-are-zero\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/93c35acf4ad7e9428d206384fc891d0d93e732a4\"\u003e\u003ccode\u003e93c35ac\u003c/code\u003e\u003c/a\u003e Merge branch 'master' into nil-pointers-are-zero\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/2982c5cd7f0df7e1fc742be1c9647b4a93a4b69f\"\u003e\u003ccode\u003e2982c5c\u003c/code\u003e\u003c/a\u003e Update test matrix to latest 3 Go versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/2b8252e0e2927def6d2e4b3da423773b7da0c593\"\u003e\u003ccode\u003e2b8252e\u003c/code\u003e\u003c/a\u003e Add an option to consider nil pointers to be equivalent to zero values\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/95fb3b12750bb129d99591610527cbb1512565c9\"\u003e\u003ccode\u003e95fb3b1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-test/deep/issues/58\"\u003e#58\u003c/a\u003e from bartleyg/patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/1127c8410de31c10a9ee65a3130cb9999222f888\"\u003e\u003ccode\u003e1127c84\u003c/code\u003e\u003c/a\u003e fix copy pasta test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/7ff4e92ca97b8da0d9584639f74080f9a62fd2f0\"\u003e\u003ccode\u003e7ff4e92\u003c/code\u003e\u003c/a\u003e Update changelog for v1.1.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-test/deep/compare/v1.0.8...v1.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/moby/moby/client` from 0.4.0 to 0.4.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/moby/releases\"\u003egithub.com/moby/moby/client's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eclient/v0.4.1\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclient: fix \u003ccode\u003eImagePullResponse.Wait\u003c/code\u003e, \u003ccode\u003eImagePushResponse.Wait\u003c/code\u003e not returning an error if pull/push errors happend during the pull operation. \u003ca href=\"https://redirect.github.com/moby/moby/pull/52305\"\u003emoby/moby#52305\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edaemon, client: diskUsage: explicitly exclude \u0026quot;-1\u0026quot; for containers. \u003ca href=\"https://redirect.github.com/moby/moby/pull/52309\"\u003emoby/moby#52309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego.mod: add back replace rules. \u003ca href=\"https://redirect.github.com/moby/moby/pull/52325\"\u003emoby/moby#52325\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evendor: github.com/docker/go-connections v0.7.0. \u003ca href=\"https://redirect.github.com/moby/moby/pull/51311\"\u003emoby/moby#51311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evendor: github.com/moby/moby/api v1.54.2. \u003ca href=\"https://redirect.github.com/moby/moby/pull/52416\"\u003emoby/moby#52416\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/moby/blob/v0.4.1/CHANGELOG.md\"\u003egithub.com/moby/moby/client's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.4.1 (2013-06-17)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemote Api: Add flag to enable cross domain requests\u003c/li\u003e\n\u003cli\u003eRemote Api/Client: Add images and containers sizes in docker ps and docker images\u003c/li\u003e\n\u003cli\u003eRuntime: Configure dns configuration host-wide with 'docker -d -dns'\u003c/li\u003e\n\u003cli\u003eRuntime: Detect faulty DNS configuration and replace it with a public default\u003c/li\u003e\n\u003cli\u003eRuntime: allow docker run \u003c!-- raw HTML omitted --\u003e:\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eRuntime: you can now specify public port (ex: -p 80:4500)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cul\u003e\n\u003cli\u003eClient: allow multiple params in inspect\u003c/li\u003e\n\u003cli\u003eClient: Print the container id before the hijack in \u003ccode\u003edocker run\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eRegistry: add regexp check on repo's name\u003c/li\u003e\n\u003cli\u003eRegistry: Move auth to the client\u003c/li\u003e\n\u003cli\u003eRuntime: improved image removal to garbage-collect unreferenced parents\u003c/li\u003e\n\u003cli\u003eVagrantfile: Add the rest api port to vagrantfile's port_forward\u003c/li\u003e\n\u003cli\u003eUpgrade to Go 1.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003cul\u003e\n\u003cli\u003eBuilder: don't ignore last line in Dockerfile when it doesn't end with \\n\u003c/li\u003e\n\u003cli\u003eRegistry: Remove login check on pull\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/7b6f50772cc7003fede23e74f70f8dc76b96a434\"\u003e\u003ccode\u003e7b6f507\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/moby/issues/912\"\u003e#912\u003c/a\u003e from dotcloud/bump_0.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/6e2c32eb9a86c65c55d9097e58a5ad5c9a950e66\"\u003e\u003ccode\u003e6e2c32e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/moby/issues/911\"\u003e#911\u003c/a\u003e from dotcloud/add_port_redirection_doc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/22b0a38df51acd9f96ae1a82f8a5b86640b5f3b5\"\u003e\u003ccode\u003e22b0a38\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/moby/issues/897\"\u003e#897\u003c/a\u003e from dotcloud/fix-overlapping-add\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/cb58e63fc54fb3f1c620c8372269a8e308e43bee\"\u003e\u003ccode\u003ecb58e63\u003c/code\u003e\u003c/a\u003e Typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/862659875335c953bf6974af4cace397c7ec3902\"\u003e\u003ccode\u003e8626598\u003c/code\u003e\u003c/a\u003e Added content to port redirect doc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/36231345f17e6fdb08b0f756c4872294d4745048\"\u003e\u003ccode\u003e3623134\u003c/code\u003e\u003c/a\u003e add port redirection doc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/e8f001d45157f2f645e415543d7c3e7bf832c665\"\u003e\u003ccode\u003ee8f001d\u003c/code\u003e\u003c/a\u003e Bumped version to 0.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/389db5f5987e927bf2f8f90ea536fec3a95ac1cb\"\u003e\u003ccode\u003e389db5f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/moby/issues/887\"\u003e#887\u003c/a\u003e from dotcloud/761-packaging-dockerbuilder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/6746c385bd7938e1bbcf588a27651de63a2de04a\"\u003e\u003ccode\u003e6746c38\u003c/code\u003e\u003c/a\u003e FIXMEs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/30f604517a5ddc15b3e9f6e9d42f4c7569c1627f\"\u003e\u003ccode\u003e30f6045\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/moby/issues/895\"\u003e#895\u003c/a\u003e from dotcloud/build-fixes\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/moby/compare/v0.4.0...v0.4.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.50.0 to 0.52.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a1c0d9929856c8aba2b31f079340f00578eda803\"\u003e\u003ccode\u003ea1c0d99\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/3c7c86938f4541c333d506f719388d9c42d4763d\"\u003e\u003ccode\u003e3c7c869\u003c/code\u003e\u003c/a\u003e ssh: fix deadlock on unexpected channel responses\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/533fb3f7e4a5ae23f69d1837cd851d35ff5b76ce\"\u003e\u003ccode\u003e533fb3f\u003c/code\u003e\u003c/a\u003e ssh: fix source-address critical option bypass\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/abbc44d451a6f9236a2bbd26cbcd4d0fec473da3\"\u003e\u003ccode\u003eabbc44d\u003c/code\u003e\u003c/a\u003e ssh: fix incorrect operator order\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e052873987615dc96fe67607a9a6adb76311344f\"\u003e\u003ccode\u003ee052873\u003c/code\u003e\u003c/a\u003e ssh: fix infinite loop on large channel writes due to integer overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b61cf853a89d82cad68da5e12a6beca2116f8456\"\u003e\u003ccode\u003eb61cf85\u003c/code\u003e\u003c/a\u003e ssh: enforce user presence verification for security keys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/9c2cd33e8d96a96133fd6ff732510ebba539c2bd\"\u003e\u003ccode\u003e9c2cd33\u003c/code\u003e\u003c/a\u003e ssh: enforce strict limits on DSA key parameters\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/890731877d85f71cfdc9554e7a27fec4684fc4c4\"\u003e\u003ccode\u003e8907318\u003c/code\u003e\u003c/a\u003e ssh: reject RSA keys with excessively large moduli\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/ffd87b4878fa98ca2908ec534e1a410bf095a35e\"\u003e\u003ccode\u003effd87b4\u003c/code\u003e\u003c/a\u003e ssh: fix panic when authority callbacks are nil\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e7a7384ecbc8d519f6f4c11b36fa9d761fc8946\"\u003e\u003ccode\u003e4e7a738\u003c/code\u003e\u003c/a\u003e ssh: fix deadlock on unexpected global responses\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.50.0...v0.52.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/anchore/stereoscope/pull/608","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fstereoscope/issues/608","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/608/packages"},{"uuid":"4543804226","node_id":"PR_kwDOHI_2wc7gZ-IG","number":1292,"state":"closed","title":"chore: bump the engine group across 1 directory with 50 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-12T01:24:26.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-28T21:03:15.000Z","updated_at":"2026-06-12T01:24:28.000Z","time_to_close":1225271,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore: bump","group_name":"engine","update_count":50,"packages":[{"name":"charm.land/lipgloss/v2","old_version":"2.0.2","new_version":"2.0.3","repository_url":"https://github.com/charmbracelet/lipgloss"},{"name":"cloud.google.com/go/secretmanager","old_version":"1.16.0","new_version":"1.20.0","repository_url":"https://github.com/googleapis/google-cloud-go"},{"name":"github.com/1password/onepassword-sdk-go","old_version":"0.3.1","new_version":"0.4.0","repository_url":"https://github.com/1password/onepassword-sdk-go"},{"name":"github.com/99designs/gqlgen","old_version":"0.17.89","new_version":"0.17.90","repository_url":"https://github.com/99designs/gqlgen"},{"name":"github.com/alecthomas/chroma/v2","old_version":"2.23.1","new_version":"2.26.1","repository_url":"https://github.com/alecthomas/chroma"},{"name":"github.com/anthropics/anthropic-sdk-go","old_version":"1.30.0","new_version":"1.46.0","repository_url":"https://github.com/anthropics/anthropic-sdk-go"},{"name":"github.com/aws/aws-sdk-go-v2","old_version":"1.41.5","new_version":"1.41.9","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/config","old_version":"1.32.14","new_version":"1.32.20","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/service/secretsmanager","old_version":"1.41.5","new_version":"1.41.9","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/service/ssm","old_version":"1.68.4","new_version":"1.68.8","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/containerd/containerd/api","old_version":"1.10.0","new_version":"1.11.1","repository_url":"https://github.com/containerd/containerd"},{"name":"github.com/containerd/containerd/v2","old_version":"2.2.3","new_version":"2.3.1","repository_url":"https://github.com/containerd/containerd"},{"name":"github.com/containerd/fuse-overlayfs-snapshotter/v2","old_version":"2.1.2","new_version":"2.1.7","repository_url":"https://github.com/containerd/fuse-overlayfs-snapshotter"},{"name":"github.com/containerd/typeurl/v2","old_version":"2.2.3","new_version":"2.3.0","repository_url":"https://github.com/containerd/typeurl"},{"name":"github.com/docker/cli","old_version":"29.3.1+incompatible","new_version":"29.5.2+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/docker/go-connections","old_version":"0.6.0","new_version":"0.7.0","repository_url":"https://github.com/docker/go-connections"},{"name":"github.com/go-git/go-git/v5","old_version":"5.17.2","new_version":"5.19.1","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.4","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/goproxy/goproxy","old_version":"0.26.0","new_version":"0.26.1","repository_url":"https://github.com/goproxy/goproxy"},{"name":"github.com/in-toto/in-toto-golang","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/in-toto/in-toto-golang"},{"name":"github.com/invopop/jsonschema","old_version":"0.13.0","new_version":"0.14.0","repository_url":"https://github.com/invopop/jsonschema"},{"name":"github.com/jackpal/gateway","old_version":"1.1.1","new_version":"1.2.0","repository_url":"https://github.com/jackpal/gateway"},{"name":"github.com/mark3labs/mcp-go","old_version":"0.47.0","new_version":"0.54.1","repository_url":"https://github.com/mark3labs/mcp-go"},{"name":"github.com/moby/go-archive","old_version":"0.1.0","new_version":"0.2.0","repository_url":"https://github.com/moby/go-archive"},{"name":"github.com/modelcontextprotocol/go-sdk","old_version":"1.4.1","new_version":"1.6.1","repository_url":"https://github.com/modelcontextprotocol/go-sdk"},{"name":"github.com/opencontainers/selinux","old_version":"1.13.1","new_version":"1.15.1","repository_url":"https://github.com/opencontainers/selinux"},{"name":"github.com/package-url/packageurl-go","old_version":"0.1.5","new_version":"0.1.6","repository_url":"https://github.com/package-url/packageurl-go"},{"name":"github.com/tidwall/gjson","old_version":"1.18.0","new_version":"1.19.0","repository_url":"https://github.com/tidwall/gjson"},{"name":"golang.org/x/sys","old_version":"0.44.0","new_version":"0.45.0","repository_url":"https://github.com/golang/sys"},{"name":"google.golang.org/genai","old_version":"1.52.1","new_version":"1.58.0","repository_url":"https://github.com/googleapis/go-genai"},{"name":"google.golang.org/grpc","old_version":"1.80.0","new_version":"1.81.1","repository_url":"https://github.com/grpc/grpc-go"},{"name":"modernc.org/sqlite","old_version":"1.48.1","new_version":"1.51.0"}],"path":null,"ecosystem":"go"},"body":"Bumps the engine group with 32 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [charm.land/lipgloss/v2](https://github.com/charmbracelet/lipgloss) | `2.0.2` | `2.0.3` |\n| [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) | `1.16.0` | `1.20.0` |\n| [github.com/1password/onepassword-sdk-go](https://github.com/1password/onepassword-sdk-go) | `0.3.1` | `0.4.0` |\n| [github.com/99designs/gqlgen](https://github.com/99designs/gqlgen) | `0.17.89` | `0.17.90` |\n| [github.com/alecthomas/chroma/v2](https://github.com/alecthomas/chroma) | `2.23.1` | `2.26.1` |\n| [github.com/anthropics/anthropic-sdk-go](https://github.com/anthropics/anthropic-sdk-go) | `1.30.0` | `1.46.0` |\n| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.5` | `1.41.9` |\n| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.14` | `1.32.20` |\n| [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2) | `1.41.5` | `1.41.9` |\n| [github.com/aws/aws-sdk-go-v2/service/ssm](https://github.com/aws/aws-sdk-go-v2) | `1.68.4` | `1.68.8` |\n| [github.com/containerd/containerd/api](https://github.com/containerd/containerd) | `1.10.0` | `1.11.1` |\n| [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.2.3` | `2.3.1` |\n| [github.com/containerd/fuse-overlayfs-snapshotter/v2](https://github.com/containerd/fuse-overlayfs-snapshotter) | `2.1.2` | `2.1.7` |\n| [github.com/containerd/typeurl/v2](https://github.com/containerd/typeurl) | `2.2.3` | `2.3.0` |\n| [github.com/docker/cli](https://github.com/docker/cli) | `29.3.1+incompatible` | `29.5.2+incompatible` |\n| [github.com/docker/go-connections](https://github.com/docker/go-connections) | `0.6.0` | `0.7.0` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.17.2` | `5.19.1` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.4` | `0.21.6` |\n| [github.com/goproxy/goproxy](https://github.com/goproxy/goproxy) | `0.26.0` | `0.26.1` |\n| [github.com/in-toto/in-toto-golang](https://github.com/in-toto/in-toto-golang) | `0.10.0` | `0.11.0` |\n| [github.com/invopop/jsonschema](https://github.com/invopop/jsonschema) | `0.13.0` | `0.14.0` |\n| [github.com/jackpal/gateway](https://github.com/jackpal/gateway) | `1.1.1` | `1.2.0` |\n| [github.com/mark3labs/mcp-go](https://github.com/mark3labs/mcp-go) | `0.47.0` | `0.54.1` |\n| [github.com/moby/go-archive](https://github.com/moby/go-archive) | `0.1.0` | `0.2.0` |\n| [github.com/modelcontextprotocol/go-sdk](https://github.com/modelcontextprotocol/go-sdk) | `1.4.1` | `1.6.1` |\n| [github.com/opencontainers/selinux](https://github.com/opencontainers/selinux) | `1.13.1` | `1.15.1` |\n| [github.com/package-url/packageurl-go](https://github.com/package-url/packageurl-go) | `0.1.5` | `0.1.6` |\n| [github.com/tidwall/gjson](https://github.com/tidwall/gjson) | `1.18.0` | `1.19.0` |\n| [golang.org/x/sys](https://github.com/golang/sys) | `0.44.0` | `0.45.0` |\n| [google.golang.org/genai](https://github.com/googleapis/go-genai) | `1.52.1` | `1.58.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.80.0` | `1.81.1` |\n| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.48.1` | `1.51.0` |\n\n\nUpdates `charm.land/lipgloss/v2` from 2.0.2 to 2.0.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/charmbracelet/lipgloss/releases\"\u003echarm.land/lipgloss/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.0.3\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e472d718e2314596549bee2c0c8ccf8beea5f25ae: fix: Avoid background color query hang (\u003ca href=\"https://redirect.github.com/charmbracelet/lipgloss/issues/636\"\u003e#636\u003c/a\u003e) (\u003ca href=\"https://github.com/jedevc\"\u003e\u003ccode\u003e@​jedevc\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e9e39a0ad4f4fc779d620f17783cee3494da6ae29: docs: fix README typo (\u003ca href=\"https://redirect.github.com/charmbracelet/lipgloss/issues/629\"\u003e#629\u003c/a\u003e) (\u003ca href=\"https://github.com/Rohan5commit\"\u003e\u003ccode\u003e@​Rohan5commit\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecd93a9f5d2e3cb151da83150db29751d92585d23: docs: fix tree comment typo (\u003ca href=\"https://redirect.github.com/charmbracelet/lipgloss/issues/634\"\u003e#634\u003c/a\u003e) (\u003ca href=\"https://github.com/Rohan5commit\"\u003e\u003ccode\u003e@​Rohan5commit\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003cp\u003eThoughts? Questions? We love hearing from you. Feel free to reach out on \u003ca href=\"https://x.com/charmcli\"\u003eX\u003c/a\u003e, \u003ca href=\"https://charm.land/discord\"\u003eDiscord\u003c/a\u003e, \u003ca href=\"https://charm.land/slack\"\u003eSlack\u003c/a\u003e, \u003ca href=\"https://mastodon.social/@charmcli\"\u003eThe Fediverse\u003c/a\u003e, \u003ca href=\"https://bsky.app/profile/charm.land\"\u003eBluesky\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/charmbracelet/lipgloss/commit/472d718e2314596549bee2c0c8ccf8beea5f25ae\"\u003e\u003ccode\u003e472d718\u003c/code\u003e\u003c/a\u003e fix: Avoid background color query hang (\u003ca href=\"https://redirect.github.com/charmbracelet/lipgloss/issues/636\"\u003e#636\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/charmbracelet/lipgloss/commit/89fafbaf3ea3523e6afa6b82fde91fc41fefe45a\"\u003e\u003ccode\u003e89fafba\u003c/code\u003e\u003c/a\u003e chore: bump x/ansi to v0.11.7 to fix width calculation bug\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/charmbracelet/lipgloss/commit/d6d41e14fc7231f118013f5e5a05a9eb8224d7ea\"\u003e\u003ccode\u003ed6d41e1\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/sys in the all group (\u003ca href=\"https://redirect.github.com/charmbracelet/lipgloss/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/charmbracelet/lipgloss/commit/23a1bb1ed311e489eadb6c8f3cf53e20cfcc9338\"\u003e\u003ccode\u003e23a1bb1\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/lucasb-eyer/go-colorful in the all group (\u003ca href=\"https://redirect.github.com/charmbracelet/lipgloss/issues/640\"\u003e#640\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/charmbracelet/lipgloss/commit/cd93a9f5d2e3cb151da83150db29751d92585d23\"\u003e\u003ccode\u003ecd93a9f\u003c/code\u003e\u003c/a\u003e docs: fix tree comment typo (\u003ca href=\"https://redirect.github.com/charmbracelet/lipgloss/issues/634\"\u003e#634\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/charmbracelet/lipgloss/commit/25c5fb25df7b44558aa3678aa21f0a678e499602\"\u003e\u003ccode\u003e25c5fb2\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/charmbracelet/colorprofile in the all group (\u003ca href=\"https://redirect.github.com/charmbracelet/lipgloss/issues/630\"\u003e#630\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/charmbracelet/lipgloss/commit/9e39a0ad4f4fc779d620f17783cee3494da6ae29\"\u003e\u003ccode\u003e9e39a0a\u003c/code\u003e\u003c/a\u003e docs: fix README typo (\u003ca href=\"https://redirect.github.com/charmbracelet/lipgloss/issues/629\"\u003e#629\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/charmbracelet/lipgloss/compare/v2.0.2...v2.0.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `cloud.google.com/go/secretmanager` from 1.16.0 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/google-cloud-go/releases\"\u003ecloud.google.com/go/secretmanager's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eworkflows: v1.19.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/workflows/v1.18.0...workflows/v1.19.0\"\u003ev1.19.0\u003c/a\u003e (2026-05-07)\u003c/h2\u003e\n\u003ch2\u003estoragetransfer: v1.18.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/storagetransfer/v1.17.0...storagetransfer/v1.18.0\"\u003ev1.18.0\u003c/a\u003e (2026-05-07)\u003c/h2\u003e\n\u003ch2\u003eservicedirectory: v1.17.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/servicedirectory/v1.16.0...servicedirectory/v1.17.0\"\u003ev1.17.0\u003c/a\u003e (2026-05-07)\u003c/h2\u003e\n\u003ch2\u003etranslate: v1.17.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/translate/v1.16.0...translate/v1.17.0\"\u003ev1.17.0\u003c/a\u003e (2026-05-07)\u003c/h2\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md\"\u003ecloud.google.com/go/secretmanager's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/documentai/v1.19.0...documentai/v1.20.0\"\u003e1.20.0\u003c/a\u003e (2023-06-20)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edocumentai:\u003c/strong\u003e Add StyleInfo to document.proto (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/b726d413166faa8c84c0a09c6019ff50f3249b9d\"\u003eb726d41\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocumentai:\u003c/strong\u003e Add StyleInfo to document.proto (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/b726d413166faa8c84c0a09c6019ff50f3249b9d\"\u003eb726d41\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edocumentai:\u003c/strong\u003e REST query UpdateMask bug (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/df52820b0e7721954809a8aa8700b93c5662dc9b\"\u003edf52820\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/documentai/v1.18.1...documentai/v1.19.0\"\u003e1.19.0\u003c/a\u003e (2023-05-30)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edocumentai:\u003c/strong\u003e Update all direct dependencies (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/b340d030f2b52a4ce48846ce63984b28583abde6\"\u003eb340d03\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/documentai/v1.18.0...documentai/v1.18.1\"\u003e1.18.1\u003c/a\u003e (2023-05-08)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edocumentai:\u003c/strong\u003e Update grpc to v1.55.0 (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/1147ce02a990276ca4f8ab7a1ab65c14da4450ef\"\u003e1147ce0\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/documentai/v1.17.0...documentai/v1.18.0\"\u003e1.18.0\u003c/a\u003e (2023-03-22)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edocumentai:\u003c/strong\u003e Add ImportProcessorVersion in v1beta3 (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/c967961ed95750e173af0193ec8d0974471f43ff\"\u003ec967961\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/documentai/v1.16.0...documentai/v1.17.0\"\u003e1.17.0\u003c/a\u003e (2023-03-15)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edocumentai:\u003c/strong\u003e Added hints.language_hints field in OcrConfig (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/7522\"\u003e#7522\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/b2c40c3df916691b82f1b384eac5bc953960960a\"\u003eb2c40c3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/47bb902e48695e5f0c46f7bee00d72ae5f794e1e\"\u003e\u003ccode\u003e47bb902\u003c/code\u003e\u003c/a\u003e chore: release main (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/10988\"\u003e#10988\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/2b8ca4b4127ce3025c7a21cc7247510e07cc5625\"\u003e\u003ccode\u003e2b8ca4b\u003c/code\u003e\u003c/a\u003e chore: add Protobuf warning to release notes (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/11025\"\u003e#11025\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/8bb87d56af1cba736e0fe243979723e747e5e11e\"\u003e\u003ccode\u003e8bb87d5\u003c/code\u003e\u003c/a\u003e chore: update google.golang.org/api to v0.203.0 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/11022\"\u003e#11022\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/d40fbff9c1984aeed0224a4ac93eb95c5af17126\"\u003e\u003ccode\u003ed40fbff\u003c/code\u003e\u003c/a\u003e fix(storage): Skip only specific transport tests. (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/11016\"\u003e#11016\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/ff06fc220a2457e57c9e904c9aae1ab7a283521f\"\u003e\u003ccode\u003eff06fc2\u003c/code\u003e\u003c/a\u003e fix: Fix default service account tests on GCE. (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/11021\"\u003e#11021\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/6071167b8020c2190109035451a45aed28cc0061\"\u003e\u003ccode\u003e6071167\u003c/code\u003e\u003c/a\u003e feat(alloydb): add new PSC instance configuration setting and output the PSC ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/15eacb97ec27d3869cd554d6983433fbf82d0b4a\"\u003e\u003ccode\u003e15eacb9\u003c/code\u003e\u003c/a\u003e chore: update SA used for tests (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/e78389d1cf8ea4af49bfef76a36a08cb5f484b95\"\u003e\u003ccode\u003ee78389d\u003c/code\u003e\u003c/a\u003e chore: fix doc publish creds (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/11019\"\u003e#11019\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/1d7ee9f526fdb4d8e2210cc41030effe2c8d36e7\"\u003e\u003ccode\u003e1d7ee9f\u003c/code\u003e\u003c/a\u003e chore(main): release auth 0.9.9 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/11003\"\u003e#11003\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/6e69d2e85849002bad227ea5bebcde9199605bef\"\u003e\u003ccode\u003e6e69d2e\u003c/code\u003e\u003c/a\u003e feat(texttospeech): add brand voice lite, which lets you clone a voice with j...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/kms/v1.16.0...dlp/v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/1password/onepassword-sdk-go` from 0.3.1 to 0.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/1password/onepassword-sdk-go/releases\"\u003egithub.com/1password/onepassword-sdk-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 0.4.0\u003c/h2\u003e\n\u003ch1\u003e1Password Go SDK v0.4.0\u003c/h1\u003e\n\u003ch2\u003eNEW\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDesktop App integration:\u003c/strong\u003e The SDK can now authenticate via an authorization prompt from the 1Password app.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eVault CRUDL:\u003c/strong\u003e You can now fully manage 1Password vaults with the SDK, including creating, reading, updating, deleting and listing.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eVault group permission management operations:\u003c/strong\u003e You can now grant, update and revoke group access to vaults using \u003ccode\u003egrantGroupPermissions\u003c/code\u003e, \u003ccode\u003eupdateGroupPermissions\u003c/code\u003e, and \u003ccode\u003erevokeGroupPermissions\u003c/code\u003e functions.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eItem batch management:\u003c/strong\u003e You can now retrieve, create, update and delete items in batch, enabling more scalable item management.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 0.4.0-beta.2\u003c/h2\u003e\n\u003ch1\u003e1Password Go SDK v0.4.0-beta.2\u003c/h1\u003e\n\u003ch2\u003eNEW\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eVault group permission management operations:\u003c/strong\u003e You can now grant, update and revoke group access to vaults using \u003ccode\u003eGrantGroupPermissions\u003c/code\u003e, \u003ccode\u003eUpdateGroupPermissions\u003c/code\u003e, and \u003ccode\u003eRevokeGroupPermissions\u003c/code\u003e functions.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDesktop App integration on Windows:\u003c/strong\u003e The SDK can now authenticate via an authorization prompt from the 1Password app on Windows as well. Now all major desktop OSs support this feature.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFIXED\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eVault listing with additional parameters:\u003c/strong\u003e \u003ccode\u003eVaults().List\u003c/code\u003e no longer errors when additional parameters are provided.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHandling locked 1Password app state:\u003c/strong\u003e When the 1Password app gets locked after the SDK client is authenticated, it will now automatically re-authenticate.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 0.4.0-beta.1\u003c/h2\u003e\n\u003ch1\u003e1Password Go SDK v0.4.0-beta.1\u003c/h1\u003e\n\u003ch2\u003eNEW\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eThe SDK can now authenticate with the Desktop App.\u003c/li\u003e\n\u003cli\u003eVault \u003ccode\u003eGet\u003c/code\u003e, \u003ccode\u003eGetOverview\u003c/code\u003e as well as new options for vault \u003ccode\u003eList\u003c/code\u003e are now available.\u003c/li\u003e\n\u003cli\u003eItem batch operations are now available.\u003c/li\u003e\n\u003cli\u003eThe Groups API has been introduced.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/d0f8afa3413b85fd22bac5e6ab2fbee550c17169\"\u003e\u003ccode\u003ed0f8afa\u003c/code\u003e\u003c/a\u003e Update notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/6e24bc3f15761bedb052cf63b3fede06439b933d\"\u003e\u003ccode\u003e6e24bc3\u003c/code\u003e\u003c/a\u003e Release v0.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/ee80f4c52f796b3aceff5fc46f756d2ce32d34a5\"\u003e\u003ccode\u003eee80f4c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/1password/onepassword-sdk-go/issues/249\"\u003e#249\u003c/a\u003e from 1Password/morgan/add-vault-group-operations-exam...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/2a46d8e1314c8682c74dd1d5808cd2f7c2d06f1a\"\u003e\u003ccode\u003e2a46d8e\u003c/code\u003e\u003c/a\u003e removed vault crudl operations from service account examples\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/26c7319f6830091ce71619ea7af83cf7076825ee\"\u003e\u003ccode\u003e26c7319\u003c/code\u003e\u003c/a\u003e formatted variable names. Removed create vault example from service account t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/8d5d8a64f2defd9689baca68e4a1ca5a7121ac9a\"\u003e\u003ccode\u003e8d5d8a6\u003c/code\u003e\u003c/a\u003e reverted import change so it's contained within docs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/b99ef4609ab857371790e56447776617a9836327\"\u003e\u003ccode\u003eb99ef46\u003c/code\u003e\u003c/a\u003e Merge branch 'main' into morgan/add-vault-group-operations-examples\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/47716edd199fbb239175a8c6386f335245a2d620\"\u003e\u003ccode\u003e47716ed\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/1password/onepassword-sdk-go/issues/251\"\u003e#251\u003c/a\u003e from 1Password/beta\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/5e5ee00644599b84681f0618292f6da272e4d0e2\"\u003e\u003ccode\u003e5e5ee00\u003c/code\u003e\u003c/a\u003e removed group functionality from service account example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/35aa35cf03c08b29886b62d7a11dadf7c2582a05\"\u003e\u003ccode\u003e35aa35c\u003c/code\u003e\u003c/a\u003e fixed golangca lint error\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/1password/onepassword-sdk-go/compare/v0.3.1...v0.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/99designs/gqlgen` from 0.17.89 to 0.17.90\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/99designs/gqlgen/releases\"\u003egithub.com/99designs/gqlgen's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.17.90\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: add locations to resolver error responses by \u003ca href=\"https://github.com/florinel-chis\"\u003e\u003ccode\u003e@​florinel-chis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4090\"\u003e99designs/gqlgen#4090\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: return 500 instead of 422 for panic recovery by \u003ca href=\"https://github.com/PavelStefanov\"\u003e\u003ccode\u003e@​PavelStefanov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4098\"\u003e99designs/gqlgen#4098\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove use_light_mode_prefetch docs by \u003ca href=\"https://github.com/henrywoody\"\u003e\u003ccode\u003e@​henrywoody\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4101\"\u003e99designs/gqlgen#4101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: fix modernize lint issues by \u003ca href=\"https://github.com/alexandear\"\u003e\u003ccode\u003e@​alexandear\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4111\"\u003e99designs/gqlgen#4111\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFeature/field requested condition by \u003ca href=\"https://github.com/parkerroan\"\u003e\u003ccode\u003e@​parkerroan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4113\"\u003e99designs/gqlgen#4113\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBugfix/4102 input object dir with arg by \u003ca href=\"https://github.com/parkerroan\"\u003e\u003ccode\u003e@​parkerroan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4112\"\u003e99designs/gqlgen#4112\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix panic in transport on null body by \u003ca href=\"https://github.com/jeolted\"\u003e\u003ccode\u003e@​jeolted\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4115\"\u003e99designs/gqlgen#4115\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix gosec G115 integer overflow in generated atomic.AddInt32 call by \u003ca href=\"https://github.com/3rg0n\"\u003e\u003ccode\u003e@​3rg0n\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4120\"\u003e99designs/gqlgen#4120\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: deduplicate Child field context switches and scalar fieldContex… by \u003ca href=\"https://github.com/syssam\"\u003e\u003ccode\u003e@​syssam\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4086\"\u003e99designs/gqlgen#4086\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix: directive-only schema files break \u003ccode\u003efollow-schema\u003c/code\u003e code generation by \u003ca href=\"https://github.com/StevenACoffman\"\u003e\u003ccode\u003e@​StevenACoffman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4141\"\u003e99designs/gqlgen#4141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate gqlparser to v2.5.33 see \u003ca href=\"https://github.com/vektah/gqlparser/releases/tag/v2_5_33\"\u003ehttps://github.com/vektah/gqlparser/releases/tag/v2_5_33\u003c/a\u003e by \u003ca href=\"https://github.com/StevenACoffman\"\u003e\u003ccode\u003e@​StevenACoffman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4142\"\u003e99designs/gqlgen#4142\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce template logic: Part 1 ECDot by \u003ca href=\"https://github.com/StevenACoffman\"\u003e\u003ccode\u003e@​StevenACoffman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4144\"\u003e99designs/gqlgen#4144\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce Template Logic Part 2 by \u003ca href=\"https://github.com/StevenACoffman\"\u003e\u003ccode\u003e@​StevenACoffman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4145\"\u003e99designs/gqlgen#4145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePart 3 - reduce template logic: Unify ProcessArgField and ProcessArgFieldWithEC by \u003ca href=\"https://github.com/StevenACoffman\"\u003e\u003ccode\u003e@​StevenACoffman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4146\"\u003e99designs/gqlgen#4146\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump the npm_and_yarn group across 1 directory with 1 update by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4099\"\u003e99designs/gqlgen#4099\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump vitest from 4.0.18 to 4.1.0 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4078\"\u003e99designs/gqlgen#4078\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/urfave/cli/v3 from 3.7.0 to 3.8.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4103\"\u003e99designs/gqlgen#4103\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump graphql-ws from 6.0.7 to 6.0.8 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4104\"\u003e99designs/gqlgen#4104\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump mikepenz/action-junit-report from 6.3.1 to 6.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4110\"\u003e99designs/gqlgen#4110\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump graphql from 16.13.1 to 16.13.2 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4106\"\u003e99designs/gqlgen#4106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump typescript from 5.9.3 to 6.0.2 in /_examples/chat by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4108\"\u003e99designs/gqlgen#4108\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump typescript from 5.9.3 to 6.0.2 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4105\"\u003e99designs/gqlgen#4105\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 6.3.0 to 6.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4109\"\u003e99designs/gqlgen#4109\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump vitest from 4.1.1 to 4.1.2 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4107\"\u003e99designs/gqlgen#4107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump dawidd6/action-download-artifact from 19 to 20 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4116\"\u003e99designs/gqlgen#4116\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/text from 0.34.0 to 0.35.0 in /_examples by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4075\"\u003e99designs/gqlgen#4075\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump the npm_and_yarn group across 1 directory with 2 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4118\"\u003e99designs/gqlgen#4118\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump vitest from 4.1.2 to 4.1.4 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4125\"\u003e99designs/gqlgen#4125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump \u003ccode\u003e@​apollo/client\u003c/code\u003e from 4.1.6 to 4.1.7 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4126\"\u003e99designs/gqlgen#4126\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4127\"\u003e99designs/gqlgen#4127\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0 in /_examples by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4124\"\u003e99designs/gqlgen#4124\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/jackc/pgx/v5 from 5.7.4 to 5.9.0 in /_examples/mini-habr-with-subscriptions in the go_modules group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4128\"\u003e99designs/gqlgen#4128\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2 in /_examples/mini-habr-with-subscriptions in the go_modules group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4139\"\u003e99designs/gqlgen#4139\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump robherley/go-test-action from 0.7.1 to 1.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4137\"\u003e99designs/gqlgen#4137\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4136\"\u003e99designs/gqlgen#4136\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump \u003ccode\u003e@​graphql-codegen/introspection\u003c/code\u003e from 5.0.1 to 5.0.2 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4134\"\u003e99designs/gqlgen#4134\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump \u003ccode\u003e@​graphql-codegen/cli\u003c/code\u003e from 6.2.1 to 6.3.1 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4135\"\u003e99designs/gqlgen#4135\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump urql from 5.0.1 to 5.0.2 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4133\"\u003e99designs/gqlgen#4133\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/PuerkitoBio/goquery from 1.11.0 to 1.12.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4076\"\u003e99designs/gqlgen#4076\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/tools from 0.42.0 to 0.44.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4122\"\u003e99designs/gqlgen#4122\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4123\"\u003e99designs/gqlgen#4123\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/mattn/go-isatty from 0.0.20 to 0.0.21 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4130\"\u003e99designs/gqlgen#4130\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump postcss from 8.5.9 to 8.5.10 in /integration in the npm_and_yarn group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4143\"\u003e99designs/gqlgen#4143\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/florinel-chis\"\u003e\u003ccode\u003e@​florinel-chis\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4090\"\u003e99designs/gqlgen#4090\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PavelStefanov\"\u003e\u003ccode\u003e@​PavelStefanov\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4098\"\u003e99designs/gqlgen#4098\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/henrywoody\"\u003e\u003ccode\u003e@​henrywoody\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4101\"\u003e99designs/gqlgen#4101\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/0945c8330037e838af683851b40983ede8df60d5\"\u003e\u003ccode\u003e0945c83\u003c/code\u003e\u003c/a\u003e release v0.17.90\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/4a2c5d8022a73f2aefbe9d608f3932eef9ff9562\"\u003e\u003ccode\u003e4a2c5d8\u003c/code\u003e\u003c/a\u003e Part 3 - reduce template logic (\u003ca href=\"https://redirect.github.com/99designs/gqlgen/issues/4146\"\u003e#4146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/8b08751435cfe3c80a1de5319b58eaf8f6b5d31e\"\u003e\u003ccode\u003e8b08751\u003c/code\u003e\u003c/a\u003e Reduce Template Logic Part 2 (\u003ca href=\"https://redirect.github.com/99designs/gqlgen/issues/4145\"\u003e#4145\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/8c35336ad3a074f07ee1578d32f9011772780ab8\"\u003e\u003ccode\u003e8c35336\u003c/code\u003e\u003c/a\u003e Reduce template logic: Part 1 ECDot (\u003ca href=\"https://redirect.github.com/99designs/gqlgen/issues/4144\"\u003e#4144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/bdeb6efa2bfffecce889d5fcc1da8605d75461ef\"\u003e\u003ccode\u003ebdeb6ef\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump postcss (\u003ca href=\"https://redirect.github.com/99designs/gqlgen/issues/4143\"\u003e#4143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/6e8a0482c5ef35b757321afdb1f5ab42954ad1a7\"\u003e\u003ccode\u003e6e8a048\u003c/code\u003e\u003c/a\u003e Update gqlparser to v2.5.33 see \u003ca href=\"https://github.com/vektah/gqlparser/releases/\"\u003ehttps://github.com/vektah/gqlparser/releases/\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/e3f5362536a60f15e5973840f5d1b7cd43d5f7cc\"\u003e\u003ccode\u003ee3f5362\u003c/code\u003e\u003c/a\u003e Revise PR \u003ca href=\"https://redirect.github.com/99designs/gqlgen/issues/4121\"\u003e#4121\u003c/a\u003e from \u003ca href=\"https://github.com/toga4\"\u003e\u003ccode\u003e@​toga4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/99designs/gqlgen/issues/4141\"\u003e#4141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/3ab446064e85efeda6de5e5a9c014ff3e1c0ffe0\"\u003e\u003ccode\u003e3ab4460\u003c/code\u003e\u003c/a\u003e feat: deduplicate Child field context switches and scalar fieldContex… (\u003ca href=\"https://redirect.github.com/99designs/gqlgen/issues/4086\"\u003e#4086\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/2d63840966b8a2e3704f8ddb6445015854158b39\"\u003e\u003ccode\u003e2d63840\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/mattn/go-isatty from 0.0.20 to 0.0.21 (\u003ca href=\"https://redirect.github.com/99designs/gqlgen/issues/4130\"\u003e#4130\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/39d244a30d330c3605f3cb3ade0c7c3e95d6067d\"\u003e\u003ccode\u003e39d244a\u003c/code\u003e\u003c/a\u003e Fix go.sum\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/99designs/gqlgen/compare/v0.17.89...v0.17.90\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/alecthomas/chroma/v2` from 2.23.1 to 2.26.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/alecthomas/chroma/releases\"\u003egithub.com/alecthomas/chroma/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.26.1\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e56c7702 fix: downgrade go.mod version to 1.25\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.26.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ea4d3f60 feat(chromad): use style counterparts for theme switching\u003c/li\u003e\n\u003cli\u003ece159e6 chore: migrate to new bit format\u003c/li\u003e\n\u003cli\u003e180ea9f perf(colour): replace Sprintf/ParseUint round-trip in NewColour with direct bit arithmetic (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1274\"\u003e#1274\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e68a08b0 docs: how to support dynamic theme switching\u003c/li\u003e\n\u003cli\u003e6fb9d92 feat(html): tag output with style mode\u003c/li\u003e\n\u003cli\u003ea71fea3 feat(styles): add light/dark mode support\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.25.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ec3826f0 chore: go mod tidy\u003c/li\u003e\n\u003cli\u003efb5bc39 fix: emit HTTP body tokens without Coalesce\u003c/li\u003e\n\u003cli\u003ea3c2946 Improve Nu file detection (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1260\"\u003e#1260\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ee841b1a chore(deps): update all non-major dependencies (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1272\"\u003e#1272\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e3ed2db8 Add Gemfile.lock lexer (\u0026amp; ruby improvements) (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1269\"\u003e#1269\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e41fb546 Add YAML+Jinja lexer (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1268\"\u003e#1268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ee99b881 chore(deps): update all non-major dependencies (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1263\"\u003e#1263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ee67dd2f (Markless) Fix parse issue for embed directives without options (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1266\"\u003e#1266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edffa370 fix(go): tokenize trailing // as comment instead of consuming next line (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1265\"\u003e#1265\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e1cf1560 chore: upgrade to github.com/dlclark/regexp2/v2\u003c/li\u003e\n\u003cli\u003e2cbcf7b chore: upgrade golangci-lint\u003c/li\u003e\n\u003cli\u003e786675b chore(deps): update all non-major dependencies (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1257\"\u003e#1257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e235590c feat: add JSONL support to JSON lexer (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1262\"\u003e#1262\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ef9b5c97 fix(dart): match single-line comments without trailing newline (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1225\"\u003e#1225\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1261\"\u003e#1261\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e097f8e9 Mention Arturo in README (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1256\"\u003e#1256\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ed46ce60 feat(markdown): highlight frontmatter and comments (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1245\"\u003e#1245\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ef786b2a feat(lexers): add support for LilyPond (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1255\"\u003e#1255\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e0a02b98 chore(deps): update actions/checkout digest to de0fac2 (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1212\"\u003e#1212\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec55009e Fix AGENTS.md referencing a non-existent scripts directory (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1231\"\u003e#1231\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec5e763e Improve protobuf lexer (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1253\"\u003e#1253\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e113cd0e Add Arturo lexer (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1232\"\u003e#1232\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e4498d71 chore(deps): update dependency binaryen to v129 (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1238\"\u003e#1238\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e885f912 Added f4 to \u0026quot;Projects using Chroma\u0026quot; list (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1242\"\u003e#1242\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec42c9ef Update java lexer (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1254\"\u003e#1254\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.24.1\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ed2a3784 fix: fallback bug\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.24.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e0b841ee chore: go mod tidy\u003c/li\u003e\n\u003cli\u003e10fcb68 chore(deps): update ubuntu docker tag to v26 (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1251\"\u003e#1251\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e2218de6 chore(deps): update all non-major dependencies (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1236\"\u003e#1236\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e2099887 Update Solarized Light to use correct background color (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1250\"\u003e#1250\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/56c7702e16f3bf78b335c57cdd5af8f8b493f1c6\"\u003e\u003ccode\u003e56c7702\u003c/code\u003e\u003c/a\u003e fix: downgrade go.mod version to 1.25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/a4d3f60813272352474a6ecda93270487d20a9ee\"\u003e\u003ccode\u003ea4d3f60\u003c/code\u003e\u003c/a\u003e feat(chromad): use style counterparts for theme switching\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/ce159e61b0d7234beba95e25e25464ea90324d1f\"\u003e\u003ccode\u003ece159e6\u003c/code\u003e\u003c/a\u003e chore: migrate to new bit format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/180ea9f54dce4c7b7241944110fc0e01bffae913\"\u003e\u003ccode\u003e180ea9f\u003c/code\u003e\u003c/a\u003e perf(colour): replace Sprintf/ParseUint round-trip in NewColour with direct b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/68a08b0f9a1f4edeaadd0ef9fbbc2945b5a02adf\"\u003e\u003ccode\u003e68a08b0\u003c/code\u003e\u003c/a\u003e docs: how to support dynamic theme switching\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/6fb9d920b575be857c7322f79699fd92e3645e2f\"\u003e\u003ccode\u003e6fb9d92\u003c/code\u003e\u003c/a\u003e feat(html): tag output with style mode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/a71fea34358d2b9f75c0d5be2002a5293633116d\"\u003e\u003ccode\u003ea71fea3\u003c/code\u003e\u003c/a\u003e feat(styles): add light/dark mode support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/c3826f007cb719dfba2e331ee356c9f0d521dbad\"\u003e\u003ccode\u003ec3826f0\u003c/code\u003e\u003c/a\u003e chore: go mod tidy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/fb5bc39d407d3d39fb71f010683a2d4b6211da2f\"\u003e\u003ccode\u003efb5bc39\u003c/code\u003e\u003c/a\u003e fix: emit HTTP body tokens without Coalesce\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/a3c2946ab1b0af692b2087b9f54e70f87a7b0295\"\u003e\u003ccode\u003ea3c2946\u003c/code\u003e\u003c/a\u003e Improve Nu file detection (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1260\"\u003e#1260\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/alecthomas/chroma/compare/v2.23.1...v2.26.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/anthropics/anthropic-sdk-go` from 1.30.0 to 1.46.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/releases\"\u003egithub.com/anthropics/anthropic-sdk-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.46.0\u003c/h2\u003e\n\u003ch2\u003e1.46.0 (2026-05-28)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.45.0...v1.46.0\"\u003ev1.45.0...v1.46.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e Add support for claude-opus-4-8, mid-conversation system blocks, and usage.output_tokens_details (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/4cd860b8bd5365709f7f86466f449797a5f01875\"\u003e4cd860b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport custom file size caps (\u003ca href=\"https://redirect.github.com/anthropics/anthropic-sdk-go/issues/876\"\u003e#876\u003c/a\u003e) (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/99634e85815be2215a8beb05f2deeec895133b3b\"\u003e99634e8\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eexamples:\u003c/strong\u003e rename managed-agents private-sandbox-worker to self-hosted-sandbox-worker (\u003ca href=\"https://redirect.github.com/anthropics/anthropic-sdk-go/issues/873\"\u003e#873\u003c/a\u003e) (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/07d3e461f094d40a1bcf25fa8cefee7a90835193\"\u003e07d3e46\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ereplace literal newlines (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/cbb7ea55b131f492753ce9fdcfc73df2847daafd\"\u003ecbb7ea5\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.45.0\u003c/h2\u003e\n\u003ch2\u003e1.45.0 (2026-05-21)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.44.1...v1.45.0\"\u003ev1.44.1...v1.45.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e Add support for thinking-token-count beta for estimated tokens in thinking block deltas when streaming (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/dedeb6d263a651d63c95bd360befbd53dd26ec12\"\u003ededeb6d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.44.1\u003c/h2\u003e\n\u003ch2\u003e1.44.1 (2026-05-19)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.44.0...v1.44.1\"\u003ev1.44.0...v1.44.1\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003erunner:\u003c/strong\u003e skip tool calls SessionToolRunner does not own (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/93afc65f2f1b811d760f2e5149e13dd5eb328f79\"\u003e93afc65\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.44.0\u003c/h2\u003e\n\u003ch2\u003e1.44.0 (2026-05-19)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.43.0...v1.44.0\"\u003ev1.43.0...v1.44.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e Add support for self-hosted sandboxes in CMA with sandbox helpers (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/34354c43f329852a88682bb6665a1453754d61be\"\u003e34354c4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.43.0\u003c/h2\u003e\n\u003ch2\u003e1.43.0 (2026-05-13)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/blob/main/CHANGELOG.md\"\u003egithub.com/anthropics/anthropic-sdk-go's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.46.0 (2026-05-28)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.45.0...v1.46.0\"\u003ev1.45.0...v1.46.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e Add support for claude-opus-4-8, mid-conversation system blocks, and usage.output_tokens_details (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/4cd860b8bd5365709f7f86466f449797a5f01875\"\u003e4cd860b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport custom file size caps (\u003ca href=\"https://redirect.github.com/anthropics/anthropic-sdk-go/issues/876\"\u003e#876\u003c/a\u003e) (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/99634e85815be2215a8beb05f2deeec895133b3b\"\u003e99634e8\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eexamples:\u003c/strong\u003e rename managed-agents private-sandbox-worker to self-hosted-sandbox-worker (\u003ca href=\"https://redirect.github.com/anthropics/anthropic-sdk-go/issues/873\"\u003e#873\u003c/a\u003e) (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/07d3e461f094d40a1bcf25fa8cefee7a90835193\"\u003e07d3e46\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ereplace literal newlines (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/cbb7ea55b131f492753ce9fdcfc73df2847daafd\"\u003ecbb7ea5\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.45.0 (2026-05-21)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.44.1...v1.45.0\"\u003ev1.44.1...v1.45.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e Add support for thinking-token-count beta for estimated tokens in thinking block deltas when streaming (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/dedeb6d263a651d63c95bd360befbd53dd26ec12\"\u003ededeb6d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.44.1 (2026-05-19)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.44.0...v1.44.1\"\u003ev1.44.0...v1.44.1\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003erunner:\u003c/strong\u003e skip tool calls SessionToolRunner does not own (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/93afc65f2f1b811d760f2e5149e13dd5eb328f79\"\u003e93afc65\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.44.0 (2026-05-19)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.43.0...v1.44.0\"\u003ev1.43.0...v1.44.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e Add support for self-hosted sandboxes in CMA with sandbox helpers (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/34354c43f329852a88682bb6665a1453754d61be\"\u003e34354c4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.43.0 (2026-05-13)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.42.0...v1.43.0\"\u003ev1.42.0...v1.43.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e Add BetaManagedAgentsSearchResultBlock types (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/498fafcadd46be3a53e24ca2e7c40d00da6361bd\"\u003e498fafc\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/058d85cd7e656f5fe972591bcf841c99564581e9\"\u003e\u003ccode\u003e058d85c\u003c/code\u003e\u003c/a\u003e release: 1.46.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/5c328bc227a82cc46b273924a398d6fabc689410\"\u003e\u003ccode\u003e5c328bc\u003c/code\u003e\u003c/a\u003e feat(api): Add support for claude-opus-4-8, mid-conversation system blocks, a...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/9df7ac07d30e17ce37712e0c083294a597058054\"\u003e\u003ccode\u003e9df7ac0\u003c/code\u003e\u003c/a\u003e docs: replace literal newlines\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/d8020e0a73623855636de14c65a183fcc12f516f\"\u003e\u003ccode\u003ed8020e0\u003c/code\u003e\u003c/a\u003e ci: run breaking change detection on every branch (\u003ca href=\"https://redirect.github.com/anthropics/anthropic-sdk-go/issues/803\"\u003e#803\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/c9bae2d86565b73cab7c4b6b7b0066a1697d4968\"\u003e\u003ccode\u003ec9bae2d\u003c/code\u003e\u003c/a\u003e feat: support custom file size caps (\u003ca href=\"https://redirect.github.com/anthropics/anthropic-sdk-go/issues/876\"\u003e#876\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/816a9c6e9488edfab819a31d955e128ab57bede0\"\u003e\u003ccode\u003e816a9c6\u003c/code\u003e\u003c/a\u003e codegen metadata\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/ec37441e01163d327f42b3eea6e9955e686b5e72\"\u003e\u003ccode\u003eec37441\u003c/code\u003e\u003c/a\u003e chore(examples): rename managed-agents private-sandbox-worker to self-hosted-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/88310ccdb19419fb6c8b0fd2e99f1e3d8c74041e\"\u003e\u003ccode\u003e88310cc\u003c/code\u003e\u003c/a\u003e release: 1.45.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/4eb28e321282db071753c97d3223b092db9108d1\"\u003e\u003ccode\u003e4eb28e3\u003c/code\u003e\u003c/a\u003e feat(api): Add support for thinking-token-count beta for estimated tokens in ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/d138190aeae5568972430f9a6204875aa04097fc\"\u003e\u003ccode\u003ed138190\u003c/code\u003e\u003c/a\u003e release: 1.44.1\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.30.0...v1.46.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2` from 1.41.5 to 1.41.9\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5841d3ae2cfd6e6113ca61b71d69131b84932f4c\"\u003e\u003ccode\u003e5841d3a\u003c/code\u003e\u003c/a\u003e Release 2026-05-29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/16ac80d79c282366cae312281b3df925af4e9bf1\"\u003e\u003ccode\u003e16ac80d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/167926f8aca7228f2dd1bed73707505875aafef4\"\u003e\u003ccode\u003e167926f\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/a0fce13e18c6bff397ad77fac4cde4ab3f3b93e0\"\u003e\u003ccode\u003ea0fce13\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/223c0057211950899e0117dc027cc299a1dac664\"\u003e\u003ccode\u003e223c005\u003c/code\u003e\u003c/a\u003e update to smithy-go v1.26.0 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3426\"\u003e#3426\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/74c501189a40c9b937432a1b2a4cacffc851ea76\"\u003e\u003ccode\u003e74c5011\u003c/code\u003e\u003c/a\u003e Release 2026-05-28\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7d82651329a86064a9026f6219cff72921fa74da\"\u003e\u003ccode\u003e7d82651\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/79c63d9289784de4914143b7bff67157aa6a2a90\"\u003e\u003ccode\u003e79c63d9\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b15b3b873ad5c294d0c010fb1cc56ecb583d1618\"\u003e\u003ccode\u003eb15b3b8\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/090e46936630944917cfd6a0990ea3fd6391475b\"\u003e\u003ccode\u003e090e469\u003c/code\u003e\u003c/a\u003e Feat tmv2 parity (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3424\"\u003e#3424\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/v1.41.5...v1.41.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/config` from 1.32.14 to 1.32.20\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5841d3ae2cfd6e6113ca61b71d69131b84932f4c\"\u003e\u003ccode\u003e5841d3a\u003c/code\u003e\u003c/a\u003e Release 2026-05-29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/16ac80d79c282366cae312281b3df925af4e9bf1\"\u003e\u003ccode\u003e16ac80d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/167926f8aca7228f2dd1bed73707505875aafef4\"\u003e\u003ccode\u003e167926f\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/a0fce13e18c6bff397ad77fac4cde4ab3f3b93e0\"\u003e\u003ccode\u003ea0fce13\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/223c0057211950899e0117dc027cc299a1dac664\"\u003e\u003ccode\u003e223c005\u003c/code\u003e\u003c/a\u003e update to smithy-go v1.26.0 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3426\"\u003e#3426\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/74c501189a40c9b937432a1b2a4cacffc851ea76\"\u003e\u003ccode\u003e74c5011\u003c/code\u003e\u003c/a\u003e Release 2026-05-28\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7d82651329a86064a9026f6219cff72921fa74da\"\u003e\u003ccode\u003e7d82651\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/79c63d9289784de4914143b7bff67157aa6a2a90\"\u003e\u003ccode\u003e79c63d9\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b15b3b873ad5c294d0c010fb1cc56ecb583d1618\"\u003e\u003ccode\u003eb15b3b8\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/090e46936630944917cfd6a0990ea3fd6391475b\"\u003e\u003ccode\u003e090e469\u003c/code\u003e\u003c/a\u003e Feat tmv2 parity (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3424\"\u003e#3424\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.14...config/v1.32.20\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/service/secretsmanager` from 1.41.5 to 1.41.9\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5841d3ae2cfd6e6113ca61b71d69131b84932f4c\"\u003e\u003ccode\u003e5841d3a\u003c/code\u003e\u003c/a\u003e Release 2026-05-29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/16ac80d79c282366cae312281b3df925af4e9bf1\"\u003e\u003ccode\u003e16ac80d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/167926f8aca7228f2dd1bed73707505875aafef4\"\u003e\u003ccode\u003e167926f\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/a0fce13e18c6bff397ad77fac4cde4ab3f3b93e0\"\u003e\u003ccode\u003ea0fce13\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/223c0057211950899e0117dc027cc299a1dac664\"\u003e\u003ccode\u003e223c005\u003c/code\u003e\u003c/a\u003e update to smithy-go v1.26.0 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3426\"\u003e#3426\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/74c501189a40c9b937432a1b2a4cacffc851ea76\"\u003e\u003ccode\u003e74c5011\u003c/code\u003e\u003c/a\u003e Release 2026-05-28\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7d82651329a86064a9026f6219cff72921fa74da\"\u003e\u003ccode\u003e7d82651\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/79c63d9289784de4914143b7bff67157aa6a2a90\"\u003e\u003ccode\u003e79c63d9\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b15b3b873ad5c294d0c010fb1cc56ecb583d1618\"\u003e\u003ccode\u003eb15b3b8\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/090e46936630944917cfd6a0990ea3fd6391475b\"\u003e\u003ccode\u003e090e469\u003c/code\u003e\u003c/a\u003e Feat tmv2 parity (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3424\"\u003e#3424\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/v1.41.5...v1.41.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/service/ssm` from 1.68.4 to 1.68.8\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5841d3ae2cfd6e6113ca61b71d69131b84932f4c\"\u003e\u003ccode\u003e5841d3a\u003c/code\u003e\u003c/a\u003e Release 2026-05-29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/16ac80d79c282366cae312281b3df925af4e9bf1\"\u003e\u003ccode\u003e16ac80d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/167926f8aca7228f2dd1bed73707505875aafef4\"\u003e\u003ccode\u003e167926f\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/a0fce13e18c6bff397ad77fac4cde4ab3f3b93e0\"\u003e\u003ccode\u003ea0fce13\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/223c0057211950899e0117dc027cc299a1dac664\"\u003e\u003ccode\u003e223c005\u003c/code\u003e\u003c/a\u003e update to smithy-go v1.26.0 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3426\"\u003e#3426\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/74c501189a40c9b937432a1b2a4cacffc851ea76\"\u003e\u003ccode\u003e74c5011\u003c/code\u003e\u003c/a\u003e Release 2026-05-28\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7d82651329a86064a9026f6219cff72921fa74da\"\u003e\u003ccode\u003e7d82651\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/79c63d9289784de4914143b7bff67157aa6a2a90\"\u003e\u003ccode\u003e79c63d9\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b15b3b873ad5c294d0c010fb1cc56ecb583d1618\"\u003e\u003ccode\u003eb15b3b8\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/090e46936630944917cfd6a0990ea3fd6391475b\"\u003e\u003ccode\u003e090e469\u003c/code\u003e\u003c/a\u003e Feat tmv2 parity (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3424\"\u003e#3424\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/ssm/v1.68.4...service/ssm/v1.68.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/smithy-go` from 1.24.2 to 1.26.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/smithy-go/releases\"\u003egithub.com/aws/smithy-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.25.0\u003c/h2\u003e\n\u003ch1\u003eRelease (2026-04-15)\u003c/h1\u003e\n\u003ch2\u003eGeneral Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDependency Update\u003c/strong\u003e: Updated to the latest SDK module versions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eModule Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egithub.com/aws/smithy-go\u003c/code\u003e: v1.25.0\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eFeature\u003c/strong\u003e: Add support for endpointBdd trait\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/smithy-go/blob/main/CHANGELOG.md\"\u003egithub.com/aws/smithy-go's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eRelease (2026-05-27)\u003c/h1\u003e\n\u003ch2\u003eGeneral Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDependency Update\u003c/strong\u003e: Updated to the latest SDK module versions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eModule Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egithub.com/aws/smithy-go\u003c/code\u003e: v1.26.0\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eFeature\u003c/strong\u003e: Add StringSlice to endpoint rulesfn.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eRelease (2026-04-23)\u003c/h1\u003e\n\u003ch2\u003eGeneral Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDependency Update\u003c/strong\u003e: Updated to the latest SDK module versions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eModule Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egithub.com/aws/smithy-go\u003c/code\u003e: v1.25.1\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBug Fix\u003c/strong\u003e: Fixed a memory leak in the LRU cache implementation used by some AWS services.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eRelease (2026-04-15)\u003c/h1\u003e\n\u003ch2\u003eGeneral Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDependency Update\u003c/strong\u003e: Updated to the latest SDK module versions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eModule Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egithub.com/aws/smithy-go\u003c/code\u003e: v1.25.0\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eFeature\u003c/strong\u003e: Add support for endpointBdd trait\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eRelease (2026-04-02)\u003c/h1\u003e\n\u003ch2\u003eGeneral Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDependency Update\u003c/strong\u003e: Updated to the latest SDK module versions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eModule Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egithub.com/aws/smithy-go\u003c/code\u003e: v1.24.3\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBug Fix\u003c/strong\u003e: Add additional sigv4 configuration.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003egithub.com/aws/smithy-go/aws-http-auth\u003c/code\u003e: \u003ca href=\"https://github.com/aws/smithy-go/blob/main/aws-http-auth/CHANGELOG.md#v113-2026-04-02\"\u003ev1.1.3\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBug Fix\u003c/strong\u003e: Add additional sigv4 configuration.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eRelease (2026-02-27)\u003c/h1\u003e\n\u003ch2\u003eGeneral Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDependency Update\u003c/strong\u003e: Bump minimum go version to 1.24.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eRelease (2026-02-20)\u003c/h1\u003e\n\u003ch2\u003eGeneral Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDependency Update\u003c/strong\u003e: Updated to the latest SDK module versions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eModule Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egithub.com/aws/smithy-go\u003c/code\u003e: v1.24.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/45ed8311108fa4d204aa8ad3f5264442568c6b01\"\u003e\u003ccode\u003e45ed831\u003c/code\u003e\u003c/a\u003e Release 2026-05-27\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/36699a9ad5bb1f4054d69de11e573003ec6c2865\"\u003e\u003ccode\u003e36699a9\u003c/code\u003e\u003c/a\u003e handle vars in auth scheme id tmpl (\u003ca href=\"https://redirect.github.com/aws/smithy-go/issues/667\"\u003e#667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/b81ddf73b3738ec93447b59aa920666f7154ae36\"\u003e\u003ccode\u003eb81ddf7\u003c/code\u003e\u003c/a\u003e Use GoDependency to add SDK dependencies on codegen instead of relying on go ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/999a54bb7359cf5740b9c23ca52220c5777b486d\"\u003e\u003ccode\u003e999a54b\u003c/code\u003e\u003c/a\u003e add event stream test generator (\u003ca href=\"https://redirect.github.com/aws/smithy-go/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/22e6cf7f8d19a35512b84cfb3f72e4e77ab29592\"\u003e\u003ccode\u003e22e6cf7\u003c/code\u003e\u003c/a\u003e Expand JMESPath truthy check by allowing bare collections to be evaluated (\u003ca href=\"https://redirect.github.com/aws/smithy-go/issues/654\"\u003e#654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/e094f45e716e33a1b950cf8bbe804790bf87f965\"\u003e\u003ccode\u003ee094f45\u003c/code\u003e\u003c/a\u003e Release 2026-04-23\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/214d45be3be5188c4d2fd9cf744c21f8b3dfbabc\"\u003e\u003ccode\u003e214d45b\u003c/code\u003e\u003c/a\u003e changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/3477da0b4dbf31de58ac375fe5abe5d268280824\"\u003e\u003ccode\u003e3477da0\u003c/code\u003e\u003c/a\u003e fix lrucache memory leak on existing item put (\u003ca href=\"https://redirect.github.com/aws/smithy-go/issues/652\"\u003e#652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/0d0b4d00f2430e62a790203b89fd76dceb4ae213\"\u003e\u003ccode\u003e0d0b4d0\u003c/code\u003e\u003c/a\u003e Bump Smithy version to 1.69.0 (\u003ca href=\"https://redirect.github.com/aws/smithy-go/issues/650\"\u003e#650\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/be5e5ef0d73560eac9d71df7995b0eaffb9a8d71\"\u003e\u003ccode\u003ebe5e5ef\u003c/code\u003e\u003c/a\u003e check \u003ca href=\"https://github.com/enum\"\u003e\u003ccode\u003e@​enum\u003c/code\u003e\u003c/a\u003e on strings for cbor (\u003ca href=\"https://redirect.github.com/aws/smithy-go/issues/649\"\u003e#649\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/smithy-go/compare/v1.24.2...v1.26.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/containerd/containerd/api` from 1.10.0 to 1.11.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/containerd/containerd/releases\"\u003egithub.com/containerd/containerd/api's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003econtainerd API 1.11.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the api/v1.11.1 release of containerd!\u003c/p\u003e\n\u003cp\u003eThe first patch release for the containerd 1.11 API includes a fix\nin the task endpoints for non-runc shims.\u003c/p\u003e\n\u003ch3\u003eHighlights\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix sandbox task API endpoints for non-runc runtimes (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13422\"\u003e#13422\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/containerd/containerd/issues\"\u003ehttps://github.com/containerd/containerd/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDerek McGowan\u003c/li\u003e\n\u003cli\u003eMaksym Pavlenko\u003c/li\u003e\n\u003cli\u003eSamuel Karp\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare release notes for api/v1.11.1 (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13444\"\u003e#13444\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/da7aef299c57cc1f290700ade8fa0a5fec69a462\"\u003e\u003ccode\u003eda7aef299\u003c/code\u003e\u003c/a\u003e Prepare release notes for api/v1.11.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eFix sandbox task API endpoints for non-runc runtimes (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13422\"\u003e#13422\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/e44f5f9ec610d95a712d230e8a19ae516e0a26ac\"\u003e\u003ccode\u003ee44f5f9ec\u003c/code\u003e\u003c/a\u003e protos: include task API address to CreateTaskRequest\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cp\u003eThis release has no dependency changes\u003c/p\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/containerd/containerd/releases/tag/api/v1.11.0\"\u003eapi/v1.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003econtainerd API 1.11.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the api/v1.11.0 release of containerd!\u003c/p\u003e\n\u003cp\u003eThe 12th release for the containerd 1.x API aligns with the containerd 2.3 release.\u003c/p\u003e\n\u003ch3\u003eHighlights\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd transfer types for container filesystem copy (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13165\"\u003e#13165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate sandbox API to include spec field (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12840\"\u003e#12840\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eImage Distribution\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eAdd os.features support for EROFS native container images (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13091\"\u003e#13091\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/f822a911ab2b7c73e30bc0f36ea319642c9711b1\"\u003e\u003ccode\u003ef822a91\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13444\"\u003e#13444\u003c/a\u003e from dmcgowan/prepare-api-v1.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/da7aef299c57cc1f290700ade8fa0a5fec69a462\"\u003e\u003ccode\u003eda7aef2\u003c/code\u003e\u003c/a\u003e Prepare release notes for api/v1.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/a50a704094cf72710ccfa4944a642ef4e7ec9d2c\"\u003e\u003ccode\u003ea50a704\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13422\"\u003e#13422\u003c/a\u003e from k8s-infra-cherrypick-robot/cherry-pick-13360-t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/5282d4e09d3bc8b0957780caa7a4644fac7c86a7\"\u003e\u003ccode\u003e5282d4e\u003c/code\u003e\u003c/a\u003e Wire task address and version fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/e44f5f9ec610d95a712d230e8a19ae516e0a26ac\"\u003e\u003ccode\u003ee44f5f9\u003c/code\u003e\u003c/a\u003e protos: include task API address to CreateTaskRequest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/85f22f7afa3af5aa5083cc7ae50c3b58a35b8849\"\u003e\u003ccode\u003e85f22f7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13409\"\u003e#13409\u003c/a\u003e from k8s-infra-cherrypick-robot/cherry-pick-13327-t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/4d80a31bf637bc15e83e50a15941bf5bb0cb3988\"\u003e\u003ccode\u003e4d80a31\u003c/code\u003e\u003c/a\u003e seccomp: Block AF_ALG in default socket policy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/2ed0d97b6e58def34684a1bffc2ab6931182f221\"\u003e\u003ccode\u003e2ed0d97\u003c/code\u003e\u003c/a\u003e seccomp: Document socket rule scope and socketcall limitation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/2315484b7e7a5b53e73ad3b143c780ec7612420b\"\u003e\u003ccode\u003e2315484\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13390\"\u003e#13390\u003c/a\u003e from k8s-infra-cherrypick-robot/cherry-pick-13363-t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/1ad3402b855b77eb3800f74c87ff78736edf72d2\"\u003e\u003ccode\u003e1ad3402\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13394\"\u003e#13394\u003c/a\u003e from k8s-infra-cherrypick-robot/cherry-pick-13389-t...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/containerd/containerd/compare/api/v1.10.0...api/v1.11.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/containerd/containerd/v2` from 2.2.3 to 2.3.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/containerd/containerd/releases\"\u003egithub.com/containerd/containerd/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003econtainerd 2.3.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v2.3.1 release of containerd!\u003c/p\u003e\n\u003cp\u003eThe first patch ...\n\n_Description has been truncated_","html_url":"https://github.com/sipsma/dagger/pull/1292","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sipsma%2Fdagger/issues/1292","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1292/packages"},{"uuid":"4539162287","node_id":"PR_kwDOFu-Xms7gKsQp","number":263,"state":"closed","title":"chore(deps): bump the others group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-01T00:06:48.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-28T09:09:13.000Z","updated_at":"2026-06-01T00:06:49.000Z","time_to_close":313055,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"others","update_count":8,"packages":[{"name":"github.com/Azure/azure-sdk-for-go/sdk/storage/azblob","old_version":"1.6.4","new_version":"1.7.0","repository_url":"https://github.com/Azure/azure-sdk-for-go"},{"name":"github.com/CycloneDX/cyclonedx-go","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/CycloneDX/cyclonedx-go"},{"name":"github.com/aws/aws-sdk-go-v2/config","old_version":"1.32.17","new_version":"1.32.18","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/package-url/packageurl-go","old_version":"0.1.5","new_version":"0.1.6","repository_url":"https://github.com/package-url/packageurl-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the others group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/Azure/azure-sdk-for-go/sdk/storage/azblob](https://github.com/Azure/azure-sdk-for-go) | `1.6.4` | `1.7.0` |\n| [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) | `0.10.0` | `0.11.0` |\n| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.17` | `1.32.18` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.5` | `0.21.6` |\n| [github.com/package-url/packageurl-go](https://github.com/package-url/packageurl-go) | `0.1.5` | `0.1.6` |\n\n\nUpdates `github.com/Azure/azure-sdk-for-go/sdk/storage/azblob` from 1.6.4 to 1.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/releases\"\u003egithub.com/Azure/azure-sdk-for-go/sdk/storage/azblob's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esdk/storage/azblob/v1.7.0\u003c/h2\u003e\n\u003ch2\u003e1.7.0 (2026-05-14)\u003c/h2\u003e\n\u003ch3\u003eFeatures Added\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIncludes all features from \u003ccode\u003e1.7.0-beta.1\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/624babab3d2e3a95628afa61d1474a035cc7d094\"\u003e\u003ccode\u003e624baba\u003c/code\u003e\u003c/a\u003e bump azcore version number\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/ce7217c3f5f5a2f88f3a5d1ded48da338f3d8d06\"\u003e\u003ccode\u003ece7217c\u003c/code\u003e\u003c/a\u003e Prep for azcore v1.7.0 release (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/21149\"\u003e#21149\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/62a8079d41783914d9a5f585bcdb6f6b91223e5c\"\u003e\u003ccode\u003e62a8079\u003c/code\u003e\u003c/a\u003e Add support for shallow cloning azcore.Client instances (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/21065\"\u003e#21065\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/21098\"\u003e#21098\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/47286b065b0e3aa7d367fb20212aad3a143e6343\"\u003e\u003ccode\u003e47286b0\u003c/code\u003e\u003c/a\u003e Add flag to enable skipping of dependency checks (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/21146\"\u003e#21146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/ee762d4420eb57051cdebe55e55b107dae4f6bfc\"\u003e\u003ccode\u003eee762d4\u003c/code\u003e\u003c/a\u003e Fix populating module name in telemetry policy (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/20967\"\u003e#20967\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/20971\"\u003e#20971\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/02431759c00a99a31e159e9905c392b8f430c897\"\u003e\u003ccode\u003e0243175\u003c/code\u003e\u003c/a\u003e Prep azcore v1.6.1 for release (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/20961\"\u003e#20961\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/9c9d62a1d612cf1f9e6902ddd3c538abd90b955c\"\u003e\u003ccode\u003e9c9d62a\u003c/code\u003e\u003c/a\u003e Increment package version after release of azcore (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/20740\"\u003e#20740\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/36f766d2feba70f64bed923c23b57602998e16c8\"\u003e\u003ccode\u003e36f766d\u003c/code\u003e\u003c/a\u003e add sdk/resourcemanager/cosmos/armcosmos live test (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/20705\"\u003e#20705\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/c005ed6159fdf2104077694b5f89e7063a0cc586\"\u003e\u003ccode\u003ec005ed6\u003c/code\u003e\u003c/a\u003e sdk/resourcemanager/network/armnetwork live test (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/20331\"\u003e#20331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/5fa7df4852a100f4a7502d5064ae54b0aceb8260\"\u003e\u003ccode\u003e5fa7df4\u003c/code\u003e\u003c/a\u003e add sdk/resourcemanager/compute/armcompute live test (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/20048\"\u003e#20048\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/compare/sdk/storage/azblob/v1.6.4...sdk/azcore/v1.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/CycloneDX/cyclonedx-go` from 0.10.0 to 0.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/releases\"\u003egithub.com/CycloneDX/cyclonedx-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eBuilding and Packaging\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e32221d4829e8ec6007896af2d7f11fd6ba13d6c5: build(deps): bump actions/setup-go from 6.2.0 to 6.4.0 (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/261\"\u003e#261\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ea42a4dd9163df91c4173d41db2cc7ed67f0db0b6: build(deps): bump gitpod/workspace-go from \u003ccode\u003e08a7c68\u003c/code\u003e to \u003ccode\u003e00059ff\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/255\"\u003e#255\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e9810ab9f48d46f134ad9a13bbabd1397cc64804e: build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.1 (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/263\"\u003e#263\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOthers\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e2cef05662cba14b4ae948b1858fee532f8adadd1: Add comprehensive support for CycloneDX 1.7 specification (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/257\"\u003e#257\u003c/a\u003e) (\u003ca href=\"https://github.com/alistair-mclean\"\u003e\u003ccode\u003e@​alistair-mclean\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e3ed34da50502f9b9d6ac9dff64df8b08e53aa2a5: Added 5 missing fields to match CycloneDX 1.6 spec: (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/256\"\u003e#256\u003c/a\u003e) (\u003ca href=\"https://github.com/alistair-mclean\"\u003e\u003ccode\u003e@​alistair-mclean\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/a42a4dd9163df91c4173d41db2cc7ed67f0db0b6\"\u003e\u003ccode\u003ea42a4dd\u003c/code\u003e\u003c/a\u003e build(deps): bump gitpod/workspace-go from \u003ccode\u003e08a7c68\u003c/code\u003e to \u003ccode\u003e00059ff\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/255\"\u003e#255\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/9810ab9f48d46f134ad9a13bbabd1397cc64804e\"\u003e\u003ccode\u003e9810ab9\u003c/code\u003e\u003c/a\u003e build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.1 (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/263\"\u003e#263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/32221d4829e8ec6007896af2d7f11fd6ba13d6c5\"\u003e\u003ccode\u003e32221d4\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-go from 6.2.0 to 6.4.0 (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/261\"\u003e#261\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/2cef05662cba14b4ae948b1858fee532f8adadd1\"\u003e\u003ccode\u003e2cef056\u003c/code\u003e\u003c/a\u003e Add comprehensive support for CycloneDX 1.7 specification (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/257\"\u003e#257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/3ed34da50502f9b9d6ac9dff64df8b08e53aa2a5\"\u003e\u003ccode\u003e3ed34da\u003c/code\u003e\u003c/a\u003e Added 5 missing fields to match CycloneDX 1.6 spec: (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/256\"\u003e#256\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/compare/v0.10.0...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/config` from 1.32.17 to 1.32.18\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/db9f4e546dfe2f62a6bc3bf54b9da42ebace6372\"\u003e\u003ccode\u003edb9f4e5\u003c/code\u003e\u003c/a\u003e Release 2026-05-22\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/34e7ddc9400e830a9ae226a7e3c2161e5ece4f19\"\u003e\u003ccode\u003e34e7ddc\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f9db036cf7b3b8a1ea5eb67c3d296da4b48b6e2b\"\u003e\u003ccode\u003ef9db036\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ae5eae1e3ec46433bd99496bfa6936f8f09a2e72\"\u003e\u003ccode\u003eae5eae1\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/429dbdd2a35d325aabc5757edfc9ebf09c2ad12e\"\u003e\u003ccode\u003e429dbdd\u003c/code\u003e\u003c/a\u003e Feat discover endpoint partition validation (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3410\"\u003e#3410\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ab4f5b60785064ec6346c922604d94b63d9c7299\"\u003e\u003ccode\u003eab4f5b6\u003c/code\u003e\u003c/a\u003e Release 2026-05-21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/757a09909a97a15e5a481d9839b83f15b8fdc4bc\"\u003e\u003ccode\u003e757a099\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/02c8323ee6c99be82dae3a3923616756cb164525\"\u003e\u003ccode\u003e02c8323\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f4ac954c5b3567f7918fbaa845bd05a8b211f54e\"\u003e\u003ccode\u003ef4ac954\u003c/code\u003e\u003c/a\u003e Bump smithy-go version and update imports for evenstream protocoltests (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3420\"\u003e#3420\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/6d937001e020def8b587dccbe5d803933ce57bfd\"\u003e\u003ccode\u003e6d93700\u003c/code\u003e\u003c/a\u003e Add replace for credentials dependency added on go.mod (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3419\"\u003e#3419\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.17...config/v1.32.18\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.16 to 1.19.17\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/db9f4e546dfe2f62a6bc3bf54b9da42ebace6372\"\u003e\u003ccode\u003edb9f4e5\u003c/code\u003e\u003c/a\u003e Release 2026-05-22\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/34e7ddc9400e830a9ae226a7e3c2161e5ece4f19\"\u003e\u003ccode\u003e34e7ddc\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f9db036cf7b3b8a1ea5eb67c3d296da4b48b6e2b\"\u003e\u003ccode\u003ef9db036\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ae5eae1e3ec46433bd99496bfa6936f8f09a2e72\"\u003e\u003ccode\u003eae5eae1\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/429dbdd2a35d325aabc5757edfc9ebf09c2ad12e\"\u003e\u003ccode\u003e429dbdd\u003c/code\u003e\u003c/a\u003e Feat discover endpoint partition validation (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3410\"\u003e#3410\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ab4f5b60785064ec6346c922604d94b63d9c7299\"\u003e\u003ccode\u003eab4f5b6\u003c/code\u003e\u003c/a\u003e Release 2026-05-21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/757a09909a97a15e5a481d9839b83f15b8fdc4bc\"\u003e\u003ccode\u003e757a099\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/02c8323ee6c99be82dae3a3923616756cb164525\"\u003e\u003ccode\u003e02c8323\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f4ac954c5b3567f7918fbaa845bd05a8b211f54e\"\u003e\u003ccode\u003ef4ac954\u003c/code\u003e\u003c/a\u003e Bump smithy-go version and update imports for evenstream protocoltests (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3420\"\u003e#3420\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/6d937001e020def8b587dccbe5d803933ce57bfd\"\u003e\u003ccode\u003e6d93700\u003c/code\u003e\u003c/a\u003e Add replace for credentials dependency added on go.mod (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3419\"\u003e#3419\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/credentials/v1.19.16...credentials/v1.19.17\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/package-url/packageurl-go` from 0.1.5 to 0.1.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/package-url/packageurl-go/releases\"\u003egithub.com/package-url/packageurl-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.1.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize parsing and serialization performance by \u003ca href=\"https://github.com/andrew\"\u003e\u003ccode\u003e@​andrew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/package-url/packageurl-go/pull/86\"\u003epackage-url/packageurl-go#86\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andrew\"\u003e\u003ccode\u003e@​andrew\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/package-url/packageurl-go/pull/86\"\u003epackage-url/packageurl-go#86\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/package-url/packageurl-go/compare/v0.1.5...v0.1.6\"\u003ehttps://github.com/package-url/packageurl-go/compare/v0.1.5...v0.1.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/package-url/packageurl-go/commit/a74324e4e5d01ba49accd9f2f327e22206c7920d\"\u003e\u003ccode\u003ea74324e\u003c/code\u003e\u003c/a\u003e Optimize parsing and serialization performance (\u003ca href=\"https://redirect.github.com/package-url/packageurl-go/issues/86\"\u003e#86\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/package-url/packageurl-go/commit/b41f387d16428dd565a73fe18800629c8ad0338f\"\u003e\u003ccode\u003eb41f387\u003c/code\u003e\u003c/a\u003e Address review feedback and add chrome-extension validation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/package-url/packageurl-go/commit/a546cc5887560ce7b304fe8d7d95e0e2e4407a7f\"\u003e\u003ccode\u003ea546cc5\u003c/code\u003e\u003c/a\u003e Optimize parsing and serialization performance\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/package-url/packageurl-go/compare/v0.1.5...v0.1.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/term` from 0.42.0 to 0.43.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/term/commit/3c3e4855f7d2eb06c3e48933554add9ec6b599b5\"\u003e\u003ccode\u003e3c3e485\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/term/compare/v0.42.0...v0.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/text` from 0.36.0 to 0.37.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/text/commit/3ef517e623a4bfc08d6457f87d73afda7af7d8e1\"\u003e\u003ccode\u003e3ef517e\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/text/compare/v0.36.0...v0.37.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/bruto001/vuls/pull/263","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/bruto001%2Fvuls/issues/263","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/263/packages"},{"uuid":"4536955261","node_id":"PR_kwDOKrhEtM7gDjw2","number":3201,"state":"open","title":"Bump github.com/google/go-containerregistry from 0.21.5 to 0.21.6","user":"dependabot[bot]","labels":["dependencies","pr/no-changelog","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-28T01:27:57.000Z","updated_at":"2026-05-28T08:43:08.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.21.5 to 0.21.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/openbao/openbao/pull/3201","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/openbao%2Fopenbao/issues/3201","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3201/packages"},{"uuid":"4521186678","node_id":"PR_kwDOFhQNG87fQTvN","number":1471,"state":"open","title":"build(deps): bump the prod-dependencies group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["needs-rebase","ok-to-test","dependencies","go"],"assignees":[],"locked":false,"comments_count":13,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-26T03:48:56.000Z","updated_at":"2026-06-03T22:27:55.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"prod-dependencies","update_count":8,"packages":[{"name":"github.com/docker/cli","old_version":"29.4.1+incompatible","new_version":"29.5.1+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/onsi/ginkgo/v2","old_version":"2.28.1","new_version":"2.29.0","repository_url":"https://github.com/onsi/ginkgo"},{"name":"k8s.io/api","old_version":"0.35.4","new_version":"0.36.1","repository_url":"https://github.com/kubernetes/api"},{"name":"k8s.io/client-go","old_version":"0.35.4","new_version":"0.36.1","repository_url":"https://github.com/kubernetes/client-go"},{"name":"sigs.k8s.io/controller-runtime","old_version":"0.23.3","new_version":"0.24.1","repository_url":"https://github.com/kubernetes-sigs/controller-runtime"}],"path":null,"ecosystem":"go"},"body":"Bumps the prod-dependencies group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/docker/cli](https://github.com/docker/cli) | `29.4.1+incompatible` | `29.5.1+incompatible` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.5` | `0.21.6` |\n| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.28.1` | `2.29.0` |\n| [k8s.io/api](https://github.com/kubernetes/api) | `0.35.4` | `0.36.1` |\n| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.35.4` | `0.36.1` |\n| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.23.3` | `0.24.1` |\n\n\nUpdates `github.com/docker/cli` from 29.4.1+incompatible to 29.5.1+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2518b52d948a0cbee071d394c03c86a3005636ba\"\u003e\u003ccode\u003e2518b52\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6991\"\u003e#6991\u003c/a\u003e from mickael-docker/docs-clarify-authz\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9f18a0a70c9228f5892594c6b56425b8bed1899f\"\u003e\u003ccode\u003e9f18a0a\u003c/code\u003e\u003c/a\u003e docs: clarify authz content type\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2944fd1daa5d54315ab8fcd874ea9cb6199c6117\"\u003e\u003ccode\u003e2944fd1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6989\"\u003e#6989\u003c/a\u003e from thaJeztah/bump_version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/c41489ac3901885bb3891aef9cfe65ca69dc4580\"\u003e\u003ccode\u003ec41489a\u003c/code\u003e\u003c/a\u003e bump VERSION to v29.5.1-dev\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/98f14649600f05480629d5c481878b1e1bcb7c17\"\u003e\u003ccode\u003e98f1464\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6988\"\u003e#6988\u003c/a\u003e from thaJeztah/make_shell\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/50712c932660e7859d692b5aed45ad321beced1a\"\u003e\u003ccode\u003e50712c9\u003c/code\u003e\u003c/a\u003e README: simplify instructions for using dev container\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/653dc8f03d161677a8648758cdf0af8b150780bc\"\u003e\u003ccode\u003e653dc8f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6485\"\u003e#6485\u003c/a\u003e from paulchen5/6484-update-pull-request-template\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/13945822d4ba2119b867ee2cf215506c8b9f9817\"\u003e\u003ccode\u003e1394582\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6987\"\u003e#6987\u003c/a\u003e from thaJeztah/contributing_links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/f99747b9e0bee5623a13655439e7a34b696e8617\"\u003e\u003ccode\u003ef99747b\u003c/code\u003e\u003c/a\u003e docs: fix stale links in CONTRIBUTING.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/ddac061db783a24d75b24cabc74793f6924d4724\"\u003e\u003ccode\u003eddac061\u003c/code\u003e\u003c/a\u003e PR template: remove outdated contributing guide link\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v29.4.1...v29.5.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/onsi/ginkgo/v2` from 2.28.1 to 2.29.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/ginkgo/releases\"\u003egithub.com/onsi/ginkgo/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.29.0\u003c/h2\u003e\n\u003ch2\u003e2.29.0\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003eGinkgoHelperGo\u003c/code\u003e makes it easier to write test helpers that need to run in goroutines.  Specifically, it makes managing the failure state and capturing failure panics correctly straightforward.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eginkgo outline\u003c/code\u003e now includes entries defined in \u003ccode\u003eDescribeTableSubtree\u003c/code\u003e\u003c/p\u003e\n\u003ch2\u003ev2.28.3\u003c/h2\u003e\n\u003ch2\u003e2.28.3\u003c/h2\u003e\n\u003ch3\u003eMaintenance\u003c/h3\u003e\n\u003cp\u003eBump all dependencies\u003c/p\u003e\n\u003ch2\u003ev2.28.2\u003c/h2\u003e\n\u003ch2\u003e2.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd ArtifactDir() to support Go 1.26 testing.TB interface [f3a36b6]\u003c/li\u003e\n\u003cli\u003eImplement shell completion [94151c8]\u003c/li\u003e\n\u003cli\u003eAdd asan CLI option mirroring msan implementation [4d21dbb]\u003c/li\u003e\n\u003cli\u003eBump uri from 1.0.3 to 1.0.4 in /docs (\u003ca href=\"https://redirect.github.com/onsi/ginkgo/issues/1630\"\u003e#1630\u003c/a\u003e) [c102161]\u003c/li\u003e\n\u003cli\u003efix aspect ratio [9619647]\u003c/li\u003e\n\u003cli\u003eupdate logos [5779304]\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md\"\u003egithub.com/onsi/ginkgo/v2's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.29.0\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003eGinkgoHelperGo\u003c/code\u003e makes it easier to write test helpers that need to run in goroutines.  Specifically, it makes managing the failure state and capturing failure panics correctly straightforward.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eginkgo outline\u003c/code\u003e now includes entries defined in \u003ccode\u003eDescribeTableSubtree\u003c/code\u003e\u003c/p\u003e\n\u003ch2\u003e2.28.3\u003c/h2\u003e\n\u003ch3\u003eMaintenance\u003c/h3\u003e\n\u003cp\u003eBump all dependencies\u003c/p\u003e\n\u003ch2\u003e2.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd ArtifactDir() to support Go 1.26 testing.TB interface [f3a36b6]\u003c/li\u003e\n\u003cli\u003eImplement shell completion [94151c8]\u003c/li\u003e\n\u003cli\u003eAdd asan CLI option mirroring msan implementation [4d21dbb]\u003c/li\u003e\n\u003cli\u003eBump uri from 1.0.3 to 1.0.4 in /docs (\u003ca href=\"https://redirect.github.com/onsi/ginkgo/issues/1630\"\u003e#1630\u003c/a\u003e) [c102161]\u003c/li\u003e\n\u003cli\u003efix aspect ratio [9619647]\u003c/li\u003e\n\u003cli\u003eupdate logos [5779304]\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/04b5bcbe4eee911a1baf506eda1e7e811c978937\"\u003e\u003ccode\u003e04b5bcb\u003c/code\u003e\u003c/a\u003e v2.29.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/124232a4531c77a7f31a036e0150e06fa78b2af8\"\u003e\u003ccode\u003e124232a\u003c/code\u003e\u003c/a\u003e docs: GinkgoHelperGo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/ad9cee80bdfda573e94f1b05f2bd4afa1a2fe815\"\u003e\u003ccode\u003ead9cee8\u003c/code\u003e\u003c/a\u003e feat: GinkgoHelperGo, with integration tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/9e56a0a2a090eb83af696381161bdb996c69bcac\"\u003e\u003ccode\u003e9e56a0a\u003c/code\u003e\u003c/a\u003e chore: refactor devcontainer for better maintenance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/3d235a96ac05d9e855048c66528d2fdbfb9101f7\"\u003e\u003ccode\u003e3d235a9\u003c/code\u003e\u003c/a\u003e chore: ignore internal/tmp_*/ integration suite temporary dirs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/782666ae83c2bc804f28b1333bf91a21b093d946\"\u003e\u003ccode\u003e782666a\u003c/code\u003e\u003c/a\u003e feat: devcontainer configuration with local pkgsite and GH pages\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/009dd04de2d18f00c3c812d2caab713a165a1f7c\"\u003e\u003ccode\u003e009dd04\u003c/code\u003e\u003c/a\u003e Support DescribeTableSubtree in ginkgo outline\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/5de9c152e440036fef089e065449ecaae64264f9\"\u003e\u003ccode\u003e5de9c15\u003c/code\u003e\u003c/a\u003e v2.28.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/7e2fa191179736dde68165bc101e99c4980fe124\"\u003e\u003ccode\u003e7e2fa19\u003c/code\u003e\u003c/a\u003e bump dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/1a819128ddbbcc39f57ac8716943d82c4bd6ef6f\"\u003e\u003ccode\u003e1a81912\u003c/code\u003e\u003c/a\u003e v2.28.2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/onsi/ginkgo/compare/v2.28.1...v2.29.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/onsi/gomega` from 1.39.1 to 1.40.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/gomega/releases\"\u003egithub.com/onsi/gomega's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.40.0\u003c/h2\u003e\n\u003ch2\u003e1.40.0\u003c/h2\u003e\n\u003cp\u003eWe're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega.  It is a limitation of the go mod toolchain that \u003cem\u003etest\u003c/em\u003e subdependencies of your project's direct dependencies get pulled in as \u003cem\u003eindirect\u003c/em\u003e dependencies.  In the case of Gomega, this ends up pulling in all of Ginkgo into your \u003ccode\u003ego.mod\u003c/code\u003e even if you are only using Gomega (Gomega uses Ginkgo for its own tests).\u003c/p\u003e\n\u003cp\u003eGoing forward, releases will strip out all tests, tidy up the \u003ccode\u003ego.mod\u003c/code\u003e and then push this stripped down version to a new \u003ccode\u003emaster-lite\u003c/code\u003e branch.  These stripped-down versions will receive the \u003ccode\u003evx.y.z\u003c/code\u003e git tag and will be picked up by the go toolchain.\u003c/p\u003e\n\u003cp\u003ePlease open an issue if this new release process causes unexpected changes for your projects.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/gomega/blob/master/CHANGELOG.md\"\u003egithub.com/onsi/gomega's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.40.0\u003c/h2\u003e\n\u003cp\u003eWe're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega.  It is a limitation of the go mod toolchain that \u003cem\u003etest\u003c/em\u003e subdependencies of your project's direct dependencies get pulled in as \u003cem\u003eindirect\u003c/em\u003e dependencies.  In the case of Gomega, this ends up pulling in all of Ginkgo into your \u003ccode\u003ego.mod\u003c/code\u003e even if you are only using Gomega (Gomega uses Ginkgo for its own tests).\u003c/p\u003e\n\u003cp\u003eGoing forward, releases will strip out all tests, tidy up the \u003ccode\u003ego.mod\u003c/code\u003e and then push this stripped down version to a new \u003ccode\u003emaster-lite\u003c/code\u003e branch.  These stripped-down versions will receive the \u003ccode\u003evx.y.z\u003c/code\u003e git tag and will be picked up by the go toolchain.\u003c/p\u003e\n\u003cp\u003ePlease open an issue if this new release process causes unexpected changes for your projects.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/87ee9d3caabba627e5951958be800828b85f0370\"\u003e\u003ccode\u003e87ee9d3\u003c/code\u003e\u003c/a\u003e v1.40.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/ea660274df4319411eea463c942d1d3a56e6c2e6\"\u003e\u003ccode\u003eea66027\u003c/code\u003e\u003c/a\u003e v1.40.0 (full)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/e3fd789576a5f5b9a35847683804349bb4bbc761\"\u003e\u003ccode\u003ee3fd789\u003c/code\u003e\u003c/a\u003e update docs to reflect new versioning strategy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/7d4ee309b2c28ab1854424f70c99a173650ab2f6\"\u003e\u003ccode\u003e7d4ee30\u003c/code\u003e\u003c/a\u003e first push to master-lite\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/e4a82d1a2de91721bb249fe9532c4d9211920363\"\u003e\u003ccode\u003ee4a82d1\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 3 to 4 (\u003ca href=\"https://redirect.github.com/onsi/gomega/issues/875\"\u003e#875\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/af627234340a2e1d40074d6e6860a1b41dc03204\"\u003e\u003ccode\u003eaf62723\u003c/code\u003e\u003c/a\u003e Bump rexml from 3.4.0 to 3.4.2 in /docs (\u003ca href=\"https://redirect.github.com/onsi/gomega/issues/870\"\u003e#870\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/e1642211b3906ab5456d9d3ed7cfd9edd11f2d63\"\u003e\u003ccode\u003ee164221\u003c/code\u003e\u003c/a\u003e Bump github.com/onsi/ginkgo/v2 from 2.28.0 to 2.28.1 (\u003ca href=\"https://redirect.github.com/onsi/gomega/issues/895\"\u003e#895\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/334a282f9d59760a3e737e5b61400a3162997803\"\u003e\u003ccode\u003e334a282\u003c/code\u003e\u003c/a\u003e Bump faraday from 2.12.2 to 2.14.1 in /docs (\u003ca href=\"https://redirect.github.com/onsi/gomega/issues/896\"\u003e#896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/onsi/gomega/compare/v1.39.1...v1.40.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/api` from 0.35.4 to 0.36.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/25001c854943b552769cd32eacd0bef7467c0eea\"\u003e\u003ccode\u003e25001c8\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.1 tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/879d3962091a3578f73c31a82c619e7a7bdfdd12\"\u003e\u003ccode\u003e879d396\u003c/code\u003e\u003c/a\u003e Merge remote-tracking branch 'origin/master' into release-1.36\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/030d81f63ea13f09388aee12e9c39b8d7ce9e841\"\u003e\u003ccode\u003e030d81f\u003c/code\u003e\u003c/a\u003e Update github.com/moby/spdystream from v0.5.0 to v0.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/aef6eb6922295161de2f7c1b9a496677938f8b20\"\u003e\u003ccode\u003eaef6eb6\u003c/code\u003e\u003c/a\u003e Add granular authorization for DRA ResourceClaim status updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/91061ea648b73ce8944e1c1ff2c1e99d6bacdb54\"\u003e\u003ccode\u003e91061ea\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/api/issues/136589\"\u003e#136589\u003c/a\u003e from tosi3k/preemption-mode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/e6b81e28967d56d57aa665d6b28cc7a807423f1f\"\u003e\u003ccode\u003ee6b81e2\u003c/code\u003e\u003c/a\u003e Add Workload-Aware Preemption fields to Workload and PodGroup APIs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/f8fce2ea6d494ed13df7d57d84e4b30b5ad5c8a3\"\u003e\u003ccode\u003ef8fce2e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/api/issues/136989\"\u003e#136989\u003c/a\u003e from nojnhuh/podgroup-resourceclaim\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/b928f5ee0f7878ef903e95ab771f1a55ed867c54\"\u003e\u003ccode\u003eb928f5e\u003c/code\u003e\u003c/a\u003e Workload API: PodGroup ResourceClaims (KEP-5729)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/61bd78e724dd0616b1cd7f6cd802f41a32400d73\"\u003e\u003ccode\u003e61bd78e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/api/issues/137190\"\u003e#137190\u003c/a\u003e from everpeace/KEP-5491-alpha\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/6bf46eb598a71fec3182b4d598734c6a364e7cca\"\u003e\u003ccode\u003e6bf46eb\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/api/issues/137028\"\u003e#137028\u003c/a\u003e from nmn3m/feature/dra-resource-pool-status\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kubernetes/api/compare/v0.35.4...v0.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/apimachinery` from 0.35.4 to 0.36.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/7af103a2a439106791220493349f8d13bc0a1efd\"\u003e\u003ccode\u003e7af103a\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.1 tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/efb7f2628b269921e5f12c4d42aece418c76789c\"\u003e\u003ccode\u003eefb7f26\u003c/code\u003e\u003c/a\u003e Merge remote-tracking branch 'origin/master' into release-1.36\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/d966e565cd271c44ba799b594ddb67987791cb80\"\u003e\u003ccode\u003ed966e56\u003c/code\u003e\u003c/a\u003e Update github.com/moby/spdystream from v0.5.0 to v0.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/79b363268543c402b68449b0cd531f8f8d0197d1\"\u003e\u003ccode\u003e79b3632\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/137864\"\u003e#137864\u003c/a\u003e from yongruilin/dv-dra-mismatch\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/a8822f7bf620eede6c3f36354cec940c3844e7a8\"\u003e\u003ccode\u003ea8822f7\u003c/code\u003e\u003c/a\u003e Add slice and map union member support with tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/7dba2d08090b9d2285266ec2492d0b6395151f50\"\u003e\u003ccode\u003e7dba2d0\u003c/code\u003e\u003c/a\u003e Use IsZero instead of IsNil for union ratcheting check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/d95710f91d61d2656298071a40a04d5343c642e5\"\u003e\u003ccode\u003ed95710f\u003c/code\u003e\u003c/a\u003e Fix union validation ratcheting when oldObj is nil\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/729062d58854ae8e9e85f5dc8d1660fb963ae483\"\u003e\u003ccode\u003e729062d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/137849\"\u003e#137849\u003c/a\u003e from bryantbiggs/deps/update-kube-openapi\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/13b12e6214bc1c2253aa3bcf8d52c2f83e767eb0\"\u003e\u003ccode\u003e13b12e6\u003c/code\u003e\u003c/a\u003e dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/27f467019a4eb99953b81708326a574524b11e8f\"\u003e\u003ccode\u003e27f4670\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/136657\"\u003e#136657\u003c/a\u003e from Jefftree/sharding-test\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kubernetes/apimachinery/compare/v0.35.4...v0.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/client-go` from 0.35.4 to 0.36.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/55ef15a9fb552182b78f7b1d0d09d618632dfe7f\"\u003e\u003ccode\u003e55ef15a\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.1 tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/f22a53e6273b1e6652107e62998997c714872f35\"\u003e\u003ccode\u003ef22a53e\u003c/code\u003e\u003c/a\u003e Merge remote-tracking branch 'origin/master' into release-1.36\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/a948641f81a43fb81beb739cb6773028e1981d86\"\u003e\u003ccode\u003ea948641\u003c/code\u003e\u003c/a\u003e Update github.com/moby/spdystream from v0.5.0 to v0.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/7e44ffcaa96165d6d77178c3aaca66d4523786b9\"\u003e\u003ccode\u003e7e44ffc\u003c/code\u003e\u003c/a\u003e Add Workload-Aware Preemption fields to Workload and PodGroup APIs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/df2d882697f9f437d53ae16b8091786250ce0812\"\u003e\u003ccode\u003edf2d882\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/client-go/issues/136989\"\u003e#136989\u003c/a\u003e from nojnhuh/podgroup-resourceclaim\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/4eece5291a474209f7fcba3cd8187ad855eeeca3\"\u003e\u003ccode\u003e4eece52\u003c/code\u003e\u003c/a\u003e Workload API: PodGroup ResourceClaims (KEP-5729)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/3d35c512076e7c95967ac4f3565c588495785796\"\u003e\u003ccode\u003e3d35c51\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/client-go/issues/137190\"\u003e#137190\u003c/a\u003e from everpeace/KEP-5491-alpha\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/04341177268fa5b2cb8a7502a36a81b87a6da2b2\"\u003e\u003ccode\u003e0434117\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/client-go/issues/137028\"\u003e#137028\u003c/a\u003e from nmn3m/feature/dra-resource-pool-status\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/ba785be0acd34a5899fe245278fb63cf9156850b\"\u003e\u003ccode\u003eba785be\u003c/code\u003e\u003c/a\u003e Drop CSR analogy, mark ObjectMeta +required,reduce limits (maxItems=500, maxL...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/4a9c8783a9ad1dd96970d83ec74138d28ae11cdb\"\u003e\u003ccode\u003e4a9c878\u003c/code\u003e\u003c/a\u003e Add ResourcePoolStatusRequest API types and generated code\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kubernetes/client-go/compare/v0.35.4...v0.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `sigs.k8s.io/controller-runtime` from 0.23.3 to 0.24.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/releases\"\u003esigs.k8s.io/controller-runtime's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.24.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[release-0.24] :bug: Fix regression in Apply typed error handling by \u003ca href=\"https://github.com/k8s-infra-cherrypick-robot\"\u003e\u003ccode\u003e@​k8s-infra-cherrypick-robot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3516\"\u003ekubernetes-sigs/controller-runtime#3516\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/compare/v0.24.0...v0.24.1\"\u003ehttps://github.com/kubernetes-sigs/controller-runtime/compare/v0.24.0...v0.24.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.24.0\u003c/h2\u003e\n\u003ch2\u003e:warning: Breaking Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Update to k8s.io/* v1.36 (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3506\"\u003e#3506\u003c/a\u003e \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3462\"\u003e#3462\u003c/a\u003e \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3486\"\u003e#3486\u003c/a\u003e \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3450\"\u003e#3450\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:bug: Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCache: Fix IndexField blocking until informer is synced (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3445\"\u003e#3445\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCache: Wait for cache sync when ReaderFailOnMissingInformer is true (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3425\"\u003e#3425\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClient: Update typed ApplyConfigurations with server response (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3475\"\u003e#3475\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFakeclient: Fix SSA status patch resource version check (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3443\"\u003e#3443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFakeclient: Fix panic when using CRs with embedded pointer structs (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3431\"\u003e#3431\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFakeclient: Fix status apply if existing object has managedFields set (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3430\"\u003e#3430\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFakeclient: Retry GenerateName on AlreadyExists collisions (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3498\"\u003e#3498\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP servers: Wire up base context into http servers (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3452\"\u003e#3452\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:seedling: Others\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBuilder/Webhooks: Remove deprecated custom path function (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3465\"\u003e#3465\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCache: Test cache reader waits for cache sync (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3434\"\u003e#3434\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCertwatcher: Deflake certwatcher tests (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3457\"\u003e#3457\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDependencies: Use forked version of btree (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3449\"\u003e#3449\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnvtest: Ensure envtest stops the whole process group (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3447\"\u003e#3447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLogging: Add missing space in zap-log-level flag description (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3492\"\u003e#3492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMisc: Adopt new(x) over ptr.To(x) and re-enable newexpr lint (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3489\"\u003e#3489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eOwners: Cleanup (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3453\"\u003e#3453\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecorder: Add logger into context for structured logging (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3454\"\u003e#3454\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecorder: Switch to \u003ccode\u003eStartLogging\u003c/code\u003e for event debug logs (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3451\"\u003e#3451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eScheme: Deprecate the scheme builder (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3461\"\u003e#3461\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSource/Kind: Improve logging for dynamic type kind source (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3494\"\u003e#3494\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eWebhooks: Reduce memory usage of default webhooks (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3463\"\u003e#3463\u003c/a\u003e \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3468\"\u003e#3468\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:seedling: CI \u0026amp; linters\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eChore: Update golangci-lint version to v2.8.0 (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3448\"\u003e#3448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eChore: Update golangci-lint version to v2.10.1 (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3470\"\u003e#3470\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eChore: Update golangci-lint version to v2.11.3 (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3482\"\u003e#3482\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMigrate away from custom GitHub action approval workflow (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3491\"\u003e#3491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRelease: Auto-create git tags for the \u003ccode\u003etools/setup-envtest\u003c/code\u003e submodule (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3476\"\u003e#3476\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:book: Additionally, there has been 1 contribution to our documentation. (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3477\"\u003e#3477\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003eDependencies\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/3be3f1bf2b2fcc6b5c9510d55c6a9972294653d0\"\u003e\u003ccode\u003e3be3f1b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3516\"\u003e#3516\u003c/a\u003e from k8s-infra-cherrypick-robot/cherry-pick-3515-to-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/0f7b33d8f5eebb1f4d1fe381ffc458ea49d83dc5\"\u003e\u003ccode\u003e0f7b33d\u003c/code\u003e\u003c/a\u003e Fix regression in Apply typed error handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/d3eaef3ab45410342c30528d1eaab982137c4d5a\"\u003e\u003ccode\u003ed3eaef3\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3475\"\u003e#3475\u003c/a\u003e from alvaroaleman/fixfix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/3296f32e58d6e578aa1932dc5584411c5f25c3db\"\u003e\u003ccode\u003e3296f32\u003c/code\u003e\u003c/a\u003e :bug: Update typed Applyconfigurations with server response\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/c8b4b9d61fbddd8924c1075ec2face3aa7a5f768\"\u003e\u003ccode\u003ec8b4b9d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3506\"\u003e#3506\u003c/a\u003e from troy0820/troy0820/update-deps-k8s\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/557c3147e26a62272c87db88e3aadda9890931f1\"\u003e\u003ccode\u003e557c314\u003c/code\u003e\u003c/a\u003e update to k8s.io v1.36.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/e4a998cc6b09afaf5f2d7f30b6a9b728f21918a3\"\u003e\u003ccode\u003ee4a998c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3499\"\u003e#3499\u003c/a\u003e from kubernetes-sigs/dependabot/github_actions/all-g...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/1a31c56032fa26cd09de18a6c64b1ba86614f4a4\"\u003e\u003ccode\u003e1a31c56\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3498\"\u003e#3498\u003c/a\u003e from vieux/fix-fake-client-generatename-retry\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/80bc294688dda063f418bb38e72089ab9f857cc0\"\u003e\u003ccode\u003e80bc294\u003c/code\u003e\u003c/a\u003e fakeclient: retry GenerateName on AlreadyExists collisions (match K8s 1.32 be...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/77b730ab1c9b09af172b67a336886558211b493a\"\u003e\u003ccode\u003e77b730a\u003c/code\u003e\u003c/a\u003e :seedling: Bump the all-github-actions group with 2 updates\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/compare/v0.23.3...v0.24.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eMost Recent Ignore Conditions Applied to This Pull Request\u003c/summary\u003e\n\n| Dependency Name | Ignore Conditions |\n| --- | --- |\n| github.com/google/go-containerregistry | [\u003e= 0.21.3.a, \u003c 0.21.4] |\n\u003c/details\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/redhat-openshift-ecosystem/openshift-preflight/pull/1471","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/redhat-openshift-ecosystem%2Fopenshift-preflight/issues/1471","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1471/packages"},{"uuid":"4514694816","node_id":"PR_kwDOFfHUDs7e7Q_Y","number":608,"state":"closed","title":"Bump the all group across 2 directories with 10 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-05-29T05:03:54.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-25T06:09:49.000Z","updated_at":"2026-05-29T05:03:56.000Z","time_to_close":341645,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"all","update_count":10,"packages":[{"name":"github.com/aws/aws-sdk-go-v2","old_version":"1.41.5","new_version":"1.41.7","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/config","old_version":"1.32.13","new_version":"1.32.18","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/service/ec2","old_version":"1.296.2","new_version":"1.304.0","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.3","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/maxbrunsfeld/counterfeiter/v6","old_version":"6.12.1","new_version":"6.12.2","repository_url":"https://github.com/maxbrunsfeld/counterfeiter"},{"name":"helm.sh/helm/v3","old_version":"3.20.1","new_version":"3.21.0","repository_url":"https://github.com/helm/helm"}],"path":null,"ecosystem":"go"},"body":"Bumps the all group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.5` | `1.41.7` |\n| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.13` | `1.32.18` |\n| [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) | `1.296.2` | `1.304.0` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.3` | `0.21.6` |\n| [github.com/maxbrunsfeld/counterfeiter/v6](https://github.com/maxbrunsfeld/counterfeiter) | `6.12.1` | `6.12.2` |\n| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.20.1` | `3.21.0` |\n\nBumps the all group with 3 updates in the /buoy directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git), [golang.org/x/mod](https://github.com/golang/mod) and [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery).\n\nUpdates `github.com/aws/aws-sdk-go-v2` from 1.41.5 to 1.41.7\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/2223642aeafb3b46ae924667ee47d31a1cf5a9d5\"\u003e\u003ccode\u003e2223642\u003c/code\u003e\u003c/a\u003e Release 2026-04-29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/04c7e460121eafa42577be08289bd0da0de091b2\"\u003e\u003ccode\u003e04c7e46\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5f5692571a7afce76e1573da3fbf2180a2c297cc\"\u003e\u003ccode\u003e5f56925\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/aac6d2b8fefd47203d3b4bd5f229ca275272ec62\"\u003e\u003ccode\u003eaac6d2b\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/bdaead7d2074e479fc56da77491fe65737413664\"\u003e\u003ccode\u003ebdaead7\u003c/code\u003e\u003c/a\u003e upgrade to smithy-go v1.25.1 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3399\"\u003e#3399\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/008e12cf64f41c37faeb705f6ce4b77471756f9f\"\u003e\u003ccode\u003e008e12c\u003c/code\u003e\u003c/a\u003e Release 2026-04-27\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ef109d91f0b772aaebc472633edf13ec0fd907ce\"\u003e\u003ccode\u003eef109d9\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/6411e6379e509956413b866481ee2362a7cdfc68\"\u003e\u003ccode\u003e6411e63\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e5bf970956db306bf7b5b1bdd8ca71e8cca766b5\"\u003e\u003ccode\u003ee5bf970\u003c/code\u003e\u003c/a\u003e Release 2026-04-24\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/bdbb88c9400c80ed2487f7b498a54c6206b5c62a\"\u003e\u003ccode\u003ebdbb88c\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/v1.41.5...v1.41.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/config` from 1.32.13 to 1.32.18\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/db9f4e546dfe2f62a6bc3bf54b9da42ebace6372\"\u003e\u003ccode\u003edb9f4e5\u003c/code\u003e\u003c/a\u003e Release 2026-05-22\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/34e7ddc9400e830a9ae226a7e3c2161e5ece4f19\"\u003e\u003ccode\u003e34e7ddc\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f9db036cf7b3b8a1ea5eb67c3d296da4b48b6e2b\"\u003e\u003ccode\u003ef9db036\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ae5eae1e3ec46433bd99496bfa6936f8f09a2e72\"\u003e\u003ccode\u003eae5eae1\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/429dbdd2a35d325aabc5757edfc9ebf09c2ad12e\"\u003e\u003ccode\u003e429dbdd\u003c/code\u003e\u003c/a\u003e Feat discover endpoint partition validation (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3410\"\u003e#3410\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ab4f5b60785064ec6346c922604d94b63d9c7299\"\u003e\u003ccode\u003eab4f5b6\u003c/code\u003e\u003c/a\u003e Release 2026-05-21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/757a09909a97a15e5a481d9839b83f15b8fdc4bc\"\u003e\u003ccode\u003e757a099\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/02c8323ee6c99be82dae3a3923616756cb164525\"\u003e\u003ccode\u003e02c8323\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f4ac954c5b3567f7918fbaa845bd05a8b211f54e\"\u003e\u003ccode\u003ef4ac954\u003c/code\u003e\u003c/a\u003e Bump smithy-go version and update imports for evenstream protocoltests (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3420\"\u003e#3420\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/6d937001e020def8b587dccbe5d803933ce57bfd\"\u003e\u003ccode\u003e6d93700\u003c/code\u003e\u003c/a\u003e Add replace for credentials dependency added on go.mod (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3419\"\u003e#3419\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.13...config/v1.32.18\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/service/ec2` from 1.296.2 to 1.304.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/db9f4e546dfe2f62a6bc3bf54b9da42ebace6372\"\u003e\u003ccode\u003edb9f4e5\u003c/code\u003e\u003c/a\u003e Release 2026-05-22\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/34e7ddc9400e830a9ae226a7e3c2161e5ece4f19\"\u003e\u003ccode\u003e34e7ddc\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f9db036cf7b3b8a1ea5eb67c3d296da4b48b6e2b\"\u003e\u003ccode\u003ef9db036\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ae5eae1e3ec46433bd99496bfa6936f8f09a2e72\"\u003e\u003ccode\u003eae5eae1\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/429dbdd2a35d325aabc5757edfc9ebf09c2ad12e\"\u003e\u003ccode\u003e429dbdd\u003c/code\u003e\u003c/a\u003e Feat discover endpoint partition validation (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3410\"\u003e#3410\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ab4f5b60785064ec6346c922604d94b63d9c7299\"\u003e\u003ccode\u003eab4f5b6\u003c/code\u003e\u003c/a\u003e Release 2026-05-21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/757a09909a97a15e5a481d9839b83f15b8fdc4bc\"\u003e\u003ccode\u003e757a099\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/02c8323ee6c99be82dae3a3923616756cb164525\"\u003e\u003ccode\u003e02c8323\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f4ac954c5b3567f7918fbaa845bd05a8b211f54e\"\u003e\u003ccode\u003ef4ac954\u003c/code\u003e\u003c/a\u003e Bump smithy-go version and update imports for evenstream protocoltests (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3420\"\u003e#3420\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/6d937001e020def8b587dccbe5d803933ce57bfd\"\u003e\u003ccode\u003e6d93700\u003c/code\u003e\u003c/a\u003e Add replace for credentials dependency added on go.mod (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3419\"\u003e#3419\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.296.2...service/ec2/v1.304.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.3 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.21.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2254\"\u003egoogle/go-containerregistry#2254\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.3...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/maxbrunsfeld/counterfeiter/v6` from 6.12.1 to 6.12.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/releases\"\u003egithub.com/maxbrunsfeld/counterfeiter/v6's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.12.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump golang.org/x/text from 0.31.0 to 0.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/349\"\u003emaxbrunsfeld/counterfeiter#349\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github.com/onsi/gomega from 1.38.2 to 1.38.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/350\"\u003emaxbrunsfeld/counterfeiter#350\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/tools from 0.39.0 to 0.40.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/348\"\u003emaxbrunsfeld/counterfeiter#348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github.com/onsi/gomega from 1.38.3 to 1.39.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/351\"\u003emaxbrunsfeld/counterfeiter#351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/tools from 0.40.0 to 0.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/353\"\u003emaxbrunsfeld/counterfeiter#353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github.com/onsi/gomega from 1.39.0 to 1.39.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/354\"\u003emaxbrunsfeld/counterfeiter#354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/text from 0.33.0 to 0.34.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/356\"\u003emaxbrunsfeld/counterfeiter#356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/tools from 0.41.0 to 0.42.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/355\"\u003emaxbrunsfeld/counterfeiter#355\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/text from 0.34.0 to 0.35.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/357\"\u003emaxbrunsfeld/counterfeiter#357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/tools from 0.42.0 to 0.43.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/358\"\u003emaxbrunsfeld/counterfeiter#358\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/compare/v6.12.1...v6.12.2\"\u003ehttps://github.com/maxbrunsfeld/counterfeiter/compare/v6.12.1...v6.12.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/4fbda3b69602620795b66f504c63e8f4671d1335\"\u003e\u003ccode\u003e4fbda3b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/358\"\u003e#358\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/golang.org/x/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/49c41c05fefceea4b07e4569c9d01b881d14bec7\"\u003e\u003ccode\u003e49c41c0\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/tools from 0.42.0 to 0.43.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/266628fb9aab0c6a434c665409c7cfd901198916\"\u003e\u003ccode\u003e266628f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/357\"\u003e#357\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/golang.org/x/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/e19e05eee34e8794f036c2da96bedec17b2f115e\"\u003e\u003ccode\u003ee19e05e\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/text from 0.34.0 to 0.35.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/46bc14382eff44b0323bea8a26d0f22b24cf1f5a\"\u003e\u003ccode\u003e46bc143\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/355\"\u003e#355\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/golang.org/x/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/2fa471e42c1e49affb8d3db2e1428a369e9a84d5\"\u003e\u003ccode\u003e2fa471e\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/tools from 0.41.0 to 0.42.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/0f165c01f6fab30bb872cf173c2609b56e796eb8\"\u003e\u003ccode\u003e0f165c0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/356\"\u003e#356\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/golang.org/x/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/807573ef71150b212ae5070207cd40e527eda58e\"\u003e\u003ccode\u003e807573e\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/text from 0.33.0 to 0.34.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/7c40434dee088f5852b1e0f52d99274b79972760\"\u003e\u003ccode\u003e7c40434\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/354\"\u003e#354\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/github.com/on...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/92c75caa6e936457bc76f506444fee900c8f27bf\"\u003e\u003ccode\u003e92c75ca\u003c/code\u003e\u003c/a\u003e Bump github.com/onsi/gomega from 1.39.0 to 1.39.1\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/compare/v6.12.1...v6.12.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `helm.sh/helm/v3` from 3.20.1 to 3.21.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/helm/helm/releases\"\u003ehelm.sh/helm/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eHelm v3.21.0 is a feature release. Users are encouraged to upgrade for the best experience.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!WARNING]\nHelm v3 is approaching end-of-life. Please update to Helm v4.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThe community keeps growing, and we'd love to see you there!\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJoin the discussion in \u003ca href=\"https://kubernetes.slack.com\"\u003eKubernetes Slack\u003c/a\u003e:\n\u003cul\u003e\n\u003cli\u003efor questions and just to hang out\u003c/li\u003e\n\u003cli\u003efor discussing PRs, code, and bugs\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eHang out at the Public Developer Call: Thursday, 9:30 Pacific via \u003ca href=\"https://zoom.us/j/696660622\"\u003eZoom\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTest, debug, and contribute charts: \u003ca href=\"https://artifacthub.io/packages/search?kind=0\"\u003eArtifactHub/packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNotable Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKubernetes client libraries to v1.36\u003c/li\u003e\n\u003cli\u003enotable changes here\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eInstallation and Upgrading\u003c/h2\u003e\n\u003cp\u003eDownload Helm v3.21.0. The common platform binaries are here:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-darwin-amd64.tar.gz\"\u003eMacOS amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-darwin-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 8bc0c1f85f8738cc3cda4a2cc73047145bcdcb1f4d9cdcc29073037bfb22fa2e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-darwin-arm64.tar.gz\"\u003eMacOS arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-darwin-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 68bfbdc022c543a2a022597b20298216877e98abe6e4a345d3ecf114d79cae5f)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-amd64.tar.gz\"\u003eLinux amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 0093eb572e3d2380f094df162ddb525e219249de88957afe24cfbb19632acd36)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-arm.tar.gz\"\u003eLinux arm\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-arm.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / d310ac387324538a37192e8e13628eb1def2596bbac6b6481ae20d8d5e3532bd)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-arm64.tar.gz\"\u003eLinux arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 8de5a0c9a47431e59fd560e91e0779c8cf9316c383da7efb84128a4c339ecb2d)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-386.tar.gz\"\u003eLinux i386\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-386.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / fc85f14c9ce7e6a48a2b19a97edbc5529ed7aa2bc10f3d2c241e1c2ef12ccd22)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-ppc64le.tar.gz\"\u003eLinux ppc64le\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-ppc64le.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / e2dced0f903acda417f879012c7e09ca461000e26a04e8f7a1cfe0dcf495f62c)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-s390x.tar.gz\"\u003eLinux s390x\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-s390x.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / a176d7460a615b8df5b1a58ecf09fcc731c7733ca4cf10116cf198575b0371b5)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-riscv64.tar.gz\"\u003eLinux riscv64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-riscv64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 4935c95c55bc5c3357143698a87185e17a39de9b6148dfd6cce0fc11859dbfeb)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-windows-amd64.zip\"\u003eWindows amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-windows-amd64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / 3ea6b8383e6c0b7ce45d06a5746313b8e9225edd88d42f4f64582ff3792d7b55)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-windows-arm64.zip\"\u003eWindows arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-windows-arm64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / 90d8c87e07267e6c71e678c9e33dd11cc121789c823ccc380de9d1dd521c8cba)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThis release was signed by \u003ca href=\"https://github.com/gjenkins8\"\u003e\u003ccode\u003e@​gjenkins8\u003c/code\u003e\u003c/a\u003e with key \u003ccode\u003eBF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739\u003c/code\u003e, which can be found at \u003ca href=\"https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739\"\u003ehttps://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739\u003c/a\u003e. Please use the attached signatures for verifying this release using gpg.\u003c/p\u003e\n\u003cp\u003eThe \u003ca href=\"https://helm.sh/docs/intro/quickstart/\"\u003eQuickstart Guide\u003c/a\u003e will get you going from there. For \u003cstrong\u003eupgrade instructions\u003c/strong\u003e or detailed installation notes, check the \u003ca href=\"https://helm.sh/docs/intro/install/\"\u003einstall guide\u003c/a\u003e. You can also use a \u003ca href=\"https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3\"\u003escript to install\u003c/a\u003e on any system with \u003ccode\u003ebash\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eWhat's Next\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e3.21.1 will contain only bug fixes.\u003c/li\u003e\n\u003cli\u003e3.22.0 is the next feature release for Kubernetes v1.37\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v3] Bump to version v3.21 e0878d41b711792be60777fd65ad23a101e6b85f (George Jenkins)\u003c/li\u003e\n\u003cli\u003efix: upgrade opentelemetry packages to patch CVEs 13d5fc4ae0e7222e1af8796ff4fa467b52208471 (Terry Howe)\u003c/li\u003e\n\u003cli\u003efix: Chart dot-name path bug 2552884e3bc1b763c3901c5ea7240b59ef6791f1 (George Jenkins)\u003c/li\u003e\n\u003cli\u003efix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow ec05dd5f0481c2de3a41a554adf3c52a6a2a9bb6 (Terry Howe)\u003c/li\u003e\n\u003cli\u003eadd image index test b0dfec5af4d7f642d8dea3b9058856541fe5017c (Pedro Tôrres)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/e0878d41b711792be60777fd65ad23a101e6b85f\"\u003e\u003ccode\u003ee0878d4\u003c/code\u003e\u003c/a\u003e [v3] Bump to version v3.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/4d4902c431129b0e6f5809e618b64dc437fc69d8\"\u003e\u003ccode\u003e4d4902c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/helm/helm/issues/32041\"\u003e#32041\u003c/a\u003e from TerryHowe/fix/upgrade-otel-cves\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/13d5fc4ae0e7222e1af8796ff4fa467b52208471\"\u003e\u003ccode\u003e13d5fc4\u003c/code\u003e\u003c/a\u003e fix: upgrade opentelemetry packages to patch CVEs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/a60cb79dfb117f22ec30833c87ab3172eba532d2\"\u003e\u003ccode\u003ea60cb79\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/d3bc8535bbc87c1b7300aee892a822372a7d4e2d\"\u003e\u003ccode\u003ed3bc853\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/helm/helm/issues/32026\"\u003e#32026\u003c/a\u003e from gjenkins8/gjenkins/code_action_pin_v3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/2552884e3bc1b763c3901c5ea7240b59ef6791f1\"\u003e\u003ccode\u003e2552884\u003c/code\u003e\u003c/a\u003e fix: Chart dot-name path bug\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/ec05dd5f0481c2de3a41a554adf3c52a6a2a9bb6\"\u003e\u003ccode\u003eec05dd5\u003c/code\u003e\u003c/a\u003e fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/6d809b20f146f8a09f74ad92080926cda0d6ae7c\"\u003e\u003ccode\u003e6d809b2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/helm/helm/issues/31883\"\u003e#31883\u003c/a\u003e from t0rr3sp3dr0/pedrotorres/backport-31776-to-v3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/b0dfec5af4d7f642d8dea3b9058856541fe5017c\"\u003e\u003ccode\u003eb0dfec5\u003c/code\u003e\u003c/a\u003e add image index test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/e629995c5d65ec2d5095ecd6d094bf85d02b3266\"\u003e\u003ccode\u003ee629995\u003c/code\u003e\u003c/a\u003e fix pulling charts from OCI indices\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/helm/helm/compare/v3.20.1...v3.21.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.17.2 to 5.19.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ev5: plumbing: transport/ssh, Shell-quote path by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2068\"\u003ego-git/go-git#2068\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, Fix relative URL resolution by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2070\"\u003ego-git/go-git#2070\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, canonical remote for relative URLs by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2074\"\u003ego-git/go-git#2074\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, error on remote without URLs by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2078\"\u003ego-git/go-git#2078\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format/idxfile, Validate offset64 indices by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2084\"\u003ego-git/go-git#2084\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: *: Reject malformed variable-length integers by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2092\"\u003ego-git/go-git#2092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format/packfile, Tighten delta validation by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2091\"\u003ego-git/go-git#2091\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Add \u003ccode\u003eworktreeFilesystem\u003c/code\u003e wrapper for worktree and hardening by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2100\"\u003ego-git/go-git#2100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: config: validate submodule names by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2082\"\u003ego-git/go-git#2082\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.19.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2111\"\u003ego-git/go-git#2111\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: Allow MkdirAll on worktree-root paths by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2117\"\u003ego-git/go-git#2117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: Stop validating symlink target paths by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2116\"\u003ego-git/go-git#2116\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format decoder input bounds and contracts by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2125\"\u003ego-git/go-git#2125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplumbing: format/packfile, cap delta chain depth in parser by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2137\"\u003ego-git/go-git#2137\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.19.0...v5.19.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.19.0...v5.19.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3c3be601aa6c0fd0d536c0d1e4f898b4c60e65fe\"\u003e\u003ccode\u003e3c3be60\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2137\"\u003e#2137\u003c/a\u003e from go-git/validate-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3fba897bd9e84b1aec170fa708b80e297b7d6cf6\"\u003e\u003ccode\u003e3fba897\u003c/code\u003e\u003c/a\u003e plumbing: format/packfile, cap delta chain depth in parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a97d6601c85e017bb64c2b0f2e3169f6ef6a6709\"\u003e\u003ccode\u003ea97d660\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2125\"\u003e#2125\u003c/a\u003e from hiddeco/v5/format-input-bounds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/aeaa125c8af8e4c4c95b574c22c5633e97fc436e\"\u003e\u003ccode\u003eaeaa125\u003c/code\u003e\u003c/a\u003e plumbing: format/objfile, require Header before Read\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1f38e171218526ea254a73187a52f0648253c1b8\"\u003e\u003ccode\u003e1f38e17\u003c/code\u003e\u003c/a\u003e plumbing: format/packfile, bound inflate size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f7545a02529e03998d6a7219140dc0e6644ad337\"\u003e\u003ccode\u003ef7545a0\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, bound nr by file size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/170b88181f385913a457a08b68c88956fb3f8e4f\"\u003e\u003ccode\u003e170b881\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2116\"\u003e#2116\u003c/a\u003e from pjbgf/symlink-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/7b6d994467f06630268904aa3c441b6de7248b31\"\u003e\u003ccode\u003e7b6d994\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2117\"\u003e#2117\u003c/a\u003e from hiddeco/v5/worktree-fs-mkdirall-root-noop\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f0709b32f8fbb87c16cd63c6762d2cd515f36541\"\u003e\u003ccode\u003ef0709b3\u003c/code\u003e\u003c/a\u003e git: Stop validating symlink target paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/776d00f11d336f26862d0f2bab987b217f3a7844\"\u003e\u003ccode\u003e776d00f\u003c/code\u003e\u003c/a\u003e git: Allow MkdirAll on worktree-root paths\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.19.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/mod` from 0.34.0 to 0.36.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/643da9ba74f1165d8cae1505d453b3de3cf21b7b\"\u003e\u003ccode\u003e643da9b\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/ccc3cdf529d1eee2a832437eb1b85240044d21cb\"\u003e\u003ccode\u003eccc3cdf\u003c/code\u003e\u003c/a\u003e zip: include 'but content has correct sum' note in TestVCS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/ab3031803214705d2c9f1102318b083e7086a155\"\u003e\u003ccode\u003eab30318\u003c/code\u003e\u003c/a\u003e zip: update zip hashes for new flate compression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/03901d351deb5bd95deb90714fb75bf8e232cb22\"\u003e\u003ccode\u003e03901d3\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/mod/compare/v0.34.0...v0.36.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.52.0 to 0.53.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a8d1fc14d9e33e1f6842ab78a0127d42cd8fff44\"\u003e\u003ccode\u003ea8d1fc1\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/056ac742146af742aa760d690269c02fa238cc7a\"\u003e\u003ccode\u003e056ac74\u003c/code\u003e\u003c/a\u003e quic: avoid depending on golang.org/x/sys/unix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/c85f61116e47b1523036c3005f8b2923b661eb64\"\u003e\u003ccode\u003ec85f611\u003c/code\u003e\u003c/a\u003e http3: add http3 package for testing in std\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/805fc81a196b95c3c00f02e135ffb8a8d5582bdf\"\u003e\u003ccode\u003e805fc81\u003c/code\u003e\u003c/a\u003e http2: add transport API tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e63b894ab3cd38a1d05396530dccde7ffa3f68d0\"\u003e\u003ccode\u003ee63b894\u003c/code\u003e\u003c/a\u003e http2: support testing via net/http.Transport.RoundTrip\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/9ee1e484e5aab0d95b3babbc6f1384d03f4f9e22\"\u003e\u003ccode\u003e9ee1e48\u003c/code\u003e\u003c/a\u003e http2/hpack: prevent HeaderField from escaping during encoding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1e71bd86e4a302b4e731bc06da6eb51679c7bd49\"\u003e\u003ccode\u003e1e71bd8\u003c/code\u003e\u003c/a\u003e http2: prevent hanging Transport due to bad SETTINGS frame\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/7bca15042b9d2bda1402cb42232a9c6ddbae6212\"\u003e\u003ccode\u003e7bca150\u003c/code\u003e\u003c/a\u003e internal/http3: respect net/http Server Shutdown context when shutting down\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/44c41bee5028537e64410b1583e8ae329ceac284\"\u003e\u003ccode\u003e44c41be\u003c/code\u003e\u003c/a\u003e internal/http3: prevent server from holding mutex when sleeping during shutdown\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/228a67a374710bff77fc490e7f538b317c34e247\"\u003e\u003ccode\u003e228a67a\u003c/code\u003e\u003c/a\u003e internal/http3: add CloseIdleConnections support in transport\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.52.0...v0.53.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/apimachinery` from 0.35.3 to 0.36.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/7af103a2a439106791220493349f8d13bc0a1efd\"\u003e\u003ccode\u003e7af103a\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.1 tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/efb7f2628b269921e5f12c4d42aece418c76789c\"\u003e\u003ccode\u003eefb7f26\u003c/code\u003e\u003c/a\u003e Merge remote-tracking branch 'origin/master' into release-1.36\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/d966e565cd271c44ba799b594ddb67987791cb80\"\u003e\u003ccode\u003ed966e56\u003c/code\u003e\u003c/a\u003e Update github.com/moby/spdystream from v0.5.0 to v0.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/79b363268543c402b68449b0cd531f8f8d0197d1\"\u003e\u003ccode\u003e79b3632\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/137864\"\u003e#137864\u003c/a\u003e from yongruilin/dv-dra-mismatch\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/a8822f7bf620eede6c3f36354cec940c3844e7a8\"\u003e\u003ccode\u003ea8822f7\u003c/code\u003e\u003c/a\u003e Add slice and map union member support with tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/7dba2d08090b9d2285266ec2492d0b6395151f50\"\u003e\u003ccode\u003e7dba2d0\u003c/code\u003e\u003c/a\u003e Use IsZero instead of IsNil for union ratcheting check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/d95710f91d61d2656298071a40a04d5343c642e5\"\u003e\u003ccode\u003ed95710f\u003c/code\u003e\u003c/a\u003e Fix union validation ratcheting when oldObj is nil\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/729062d58854ae8e9e85f5dc8d1660fb963ae483\"\u003e\u003ccode\u003e729062d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/137849\"\u003e#137849\u003c/a\u003e from bryantbiggs/deps/update-kube-openapi\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/13b12e6214bc1c2253aa3bcf8d52c2f83e767eb0\"\u003e\u003ccode\u003e13b12e6\u003c/code\u003e\u003c/a\u003e dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/27f467019a4eb99953b81708326a574524b11e8f\"\u003e\u003ccode\u003e27f4670\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/136657\"\u003e#136657\u003c/a\u003e from Jefftree/sharding-test\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kubernetes/apimachinery/compare/v0.35.3...v0.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/saschagrunert/zeitgeist/pull/608","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/saschagrunert%2Fzeitgeist/issues/608","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/608/packages"},{"uuid":"4510605317","node_id":"PR_kwDOHqP31c7eu6FE","number":6345,"state":"open","title":"chore(deps): bump the go-minor group with 34 updates","user":"dependabot[bot]","labels":["needs/kind","needs/priority","needs/area","dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-24T05:29:07.000Z","updated_at":"2026-05-24T05:29:53.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-minor","update_count":34,"packages":[{"name":"code.gitea.io/sdk/gitea","old_version":"0.22.1","new_version":"0.25.1"},{"name":"connectrpc.com/connect","old_version":"1.19.2","new_version":"1.20.0","repository_url":"https://github.com/connectrpc/connect-go"},{"name":"github.com/Azure/azure-sdk-for-go/sdk/azcore","old_version":"1.20.0","new_version":"1.21.1","repository_url":"https://github.com/Azure/azure-sdk-for-go"},{"name":"github.com/Masterminds/semver/v3","old_version":"3.4.0","new_version":"3.5.0","repository_url":"https://github.com/Masterminds/semver"},{"name":"github.com/aws/aws-sdk-go-v2/service/ecr","old_version":"1.55.4","new_version":"1.57.2","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/bmatcuk/doublestar/v4","old_version":"4.9.2","new_version":"4.10.0","repository_url":"https://github.com/bmatcuk/doublestar"},{"name":"github.com/coreos/go-oidc/v3","old_version":"3.17.0","new_version":"3.18.0","repository_url":"https://github.com/coreos/go-oidc"},{"name":"github.com/fluxcd/pkg/kustomize","old_version":"1.24.0","new_version":"1.32.0","repository_url":"https://github.com/fluxcd/pkg"},{"name":"github.com/gin-gonic/gin","old_version":"1.11.0","new_version":"1.12.0","repository_url":"https://github.com/gin-gonic/gin"},{"name":"github.com/go-openapi/runtime","old_version":"0.29.5","new_version":"0.31.0","repository_url":"https://github.com/go-openapi/runtime"},{"name":"github.com/goccy/go-yaml","old_version":"1.18.0","new_version":"1.19.2","repository_url":"https://github.com/goccy/go-yaml"},{"name":"github.com/google/go-containerregistry","old_version":"0.20.7","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/jferrl/go-githubauth","old_version":"1.5.1","new_version":"1.6.0","repository_url":"https://github.com/jferrl/go-githubauth"},{"name":"github.com/ktrysmt/go-bitbucket","old_version":"0.9.87","new_version":"0.10.0","repository_url":"https://github.com/ktrysmt/go-bitbucket"},{"name":"github.com/pelletier/go-toml/v2","old_version":"2.2.4","new_version":"2.3.1","repository_url":"https://github.com/pelletier/go-toml"},{"name":"gitlab.com/gitlab-org/api/client-go","old_version":"1.13.0","new_version":"1.46.0"},{"name":"go.uber.org/zap","old_version":"1.27.1","new_version":"1.28.0","repository_url":"https://github.com/uber-go/zap"},{"name":"golang.org/x/crypto","old_version":"0.50.0","new_version":"0.51.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/net","old_version":"0.53.0","new_version":"0.55.0","repository_url":"https://github.com/golang/net"},{"name":"golang.org/x/oauth2","old_version":"0.34.0","new_version":"0.36.0","repository_url":"https://github.com/golang/oauth2"},{"name":"golang.org/x/text","old_version":"0.36.0","new_version":"0.37.0","repository_url":"https://github.com/golang/text"},{"name":"google.golang.org/api","old_version":"0.259.0","new_version":"0.280.0","repository_url":"https://github.com/googleapis/google-api-go-client"},{"name":"google.golang.org/grpc","old_version":"1.79.3","new_version":"1.81.1","repository_url":"https://github.com/grpc/grpc-go"},{"name":"google.golang.org/protobuf","old_version":"1.36.11","new_version":"1.36.12-0.20260120151049-f2248ac996af"},{"name":"helm.sh/helm/v3","old_version":"3.19.5","new_version":"3.21.0","repository_url":"https://github.com/helm/helm"},{"name":"k8s.io/api","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/api"},{"name":"k8s.io/apiextensions-apiserver","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/apiextensions-apiserver"},{"name":"k8s.io/apimachinery","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/apimachinery"},{"name":"k8s.io/apiserver","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/apiserver"},{"name":"k8s.io/cli-runtime","old_version":"0.34.3","new_version":"0.35.1","repository_url":"https://github.com/kubernetes/cli-runtime"},{"name":"k8s.io/client-go","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/client-go"},{"name":"k8s.io/klog/v2","old_version":"2.130.1","new_version":"2.140.0","repository_url":"https://github.com/kubernetes/klog"},{"name":"k8s.io/utils","old_version":"0.0.0-20250604170112-4c0f3b243397","new_version":"0.0.0-20260210185600-b8788abfbbc2","repository_url":"https://github.com/kubernetes/utils"},{"name":"sigs.k8s.io/controller-runtime","old_version":"0.22.4","new_version":"0.24.0","repository_url":"https://github.com/kubernetes-sigs/controller-runtime"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor group with 34 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| code.gitea.io/sdk/gitea | `0.22.1` | `0.25.1` |\n| [connectrpc.com/connect](https://github.com/connectrpc/connect-go) | `1.19.2` | `1.20.0` |\n| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.20.0` | `1.21.1` |\n| [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) | `3.4.0` | `3.5.0` |\n| [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.55.4` | `1.57.2` |\n| [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) | `4.9.2` | `4.10.0` |\n| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.17.0` | `3.18.0` |\n| [github.com/fluxcd/pkg/kustomize](https://github.com/fluxcd/pkg) | `1.24.0` | `1.32.0` |\n| [github.com/gin-gonic/gin](https://github.com/gin-gonic/gin) | `1.11.0` | `1.12.0` |\n| [github.com/go-openapi/runtime](https://github.com/go-openapi/runtime) | `0.29.5` | `0.31.0` |\n| [github.com/goccy/go-yaml](https://github.com/goccy/go-yaml) | `1.18.0` | `1.19.2` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.7` | `0.21.6` |\n| [github.com/jferrl/go-githubauth](https://github.com/jferrl/go-githubauth) | `1.5.1` | `1.6.0` |\n| [github.com/ktrysmt/go-bitbucket](https://github.com/ktrysmt/go-bitbucket) | `0.9.87` | `0.10.0` |\n| [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) | `2.2.4` | `2.3.1` |\n| [gitlab.com/gitlab-org/api/client-go](https://gitlab.com/gitlab-org/api/client-go) | `1.13.0` | `1.46.0` |\n| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.1` | `1.28.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.50.0` | `0.51.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.53.0` | `0.55.0` |\n| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.34.0` | `0.36.0` |\n| [golang.org/x/text](https://github.com/golang/text) | `0.36.0` | `0.37.0` |\n| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.259.0` | `0.280.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.79.3` | `1.81.1` |\n| google.golang.org/protobuf | `1.36.11` | `1.36.12-0.20260120151049-f2248ac996af` |\n| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.19.5` | `3.21.0` |\n| [k8s.io/api](https://github.com/kubernetes/api) | `0.34.3` | `0.36.0` |\n| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.34.3` | `0.36.0` |\n| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.34.3` | `0.36.0` |\n| [k8s.io/apiserver](https://github.com/kubernetes/apiserver) | `0.34.3` | `0.36.0` |\n| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.34.3` | `0.35.1` |\n| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.34.3` | `0.36.0` |\n| [k8s.io/klog/v2](https://github.com/kubernetes/klog) | `2.130.1` | `2.140.0` |\n| [k8s.io/utils](https://github.com/kubernetes/utils) | `0.0.0-20250604170112-4c0f3b243397` | `0.0.0-20260210185600-b8788abfbbc2` |\n| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.22.4` | `0.24.0` |\n\nUpdates `code.gitea.io/sdk/gitea` from 0.22.1 to 0.25.1\n\nUpdates `connectrpc.com/connect` from 1.19.2 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/connectrpc/connect-go/releases\"\u003econnectrpc.com/connect's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eOther changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump minimum supported Go version to 1.25 by \u003ca href=\"https://github.com/jonbodner-buf\"\u003e\u003ccode\u003e@​jonbodner-buf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/922\"\u003e#922\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate Unary-Get query parameter order to match spec recommendation by \u003ca href=\"https://github.com/oliversun9\"\u003e\u003ccode\u003e@​oliversun9\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/926\"\u003e#926\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jonbodner-buf\"\u003e\u003ccode\u003e@​jonbodner-buf\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/922\"\u003e#922\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/connectrpc/connect-go/compare/v1.19.2...v1.20.0\"\u003ehttps://github.com/connectrpc/connect-go/compare/v1.19.2...v1.20.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/1291a7dcac19b00490f935dce18f44f301fc58f6\"\u003e\u003ccode\u003e1291a7d\u003c/code\u003e\u003c/a\u003e Prepare for v1.20.0 (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/927\"\u003e#927\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/6df682f19e5b957b96b5fa44ffb28705a2d7bc8c\"\u003e\u003ccode\u003e6df682f\u003c/code\u003e\u003c/a\u003e Update Unary-Get query parameter order to match spec recommendation (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/926\"\u003e#926\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/c4aac92b87026cd709cfbccdaabe8c45abef705c\"\u003e\u003ccode\u003ec4aac92\u003c/code\u003e\u003c/a\u003e Chore update buf v1.69.0 and license year (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/925\"\u003e#925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/a5a6c30f3776b06ae05a66ab3bdd2d60c46db6db\"\u003e\u003ccode\u003ea5a6c30\u003c/code\u003e\u003c/a\u003e Bump Go from v1.24 to v1.25 (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/922\"\u003e#922\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/138e2700eb60b8004363eb344031b317bf599a1f\"\u003e\u003ccode\u003e138e270\u003c/code\u003e\u003c/a\u003e Back to development (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/921\"\u003e#921\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/connectrpc/connect-go/compare/v1.19.2...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.20.0 to 1.21.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/releases\"\u003egithub.com/Azure/azure-sdk-for-go/sdk/azcore's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esdk/azcore/v1.21.1\u003c/h2\u003e\n\u003ch2\u003e1.21.1 (2026-04-16)\u003c/h2\u003e\n\u003ch3\u003eBugs Fixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue in \u003ccode\u003eResponseError.Error()\u003c/code\u003e where the request URL path was being logged unescaped.\u003c/li\u003e\n\u003cli\u003eRedact query parameters when logging errors.\u003c/li\u003e\n\u003cli\u003eFor \u003ccode\u003eruntime.JoinPaths\u003c/code\u003e, don't add a slash between root and paths when \u003ccode\u003epaths\u003c/code\u003e starts with \u003ccode\u003e?\u003c/code\u003e (query string).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgraded to Go 1.25.0.\u003c/li\u003e\n\u003cli\u003eUpgraded dependencies.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/63e4ba18204b0df554e330df8f85662e653e67ab\"\u003e\u003ccode\u003e63e4ba1\u003c/code\u003e\u003c/a\u003e Bump release date for azcore (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26613\"\u003e#26613\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/fa0312174d17ff4cb7cb0118fa80de07409841c2\"\u003e\u003ccode\u003efa03121\u003c/code\u003e\u003c/a\u003e remove bypass local dns (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26609\"\u003e#26609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/c47f9a60dd1e9be6943ff0d6a5666a0ac09f6cfa\"\u003e\u003ccode\u003ec47f9a6\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 15153 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26607\"\u003e#26607\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/88b8b5b38ecebb929a2e302df054fed1d68618b8\"\u003e\u003ccode\u003e88b8b5b\u003c/code\u003e\u003c/a\u003e Changelog for v2.2.0 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26567\"\u003e#26567\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/72ca19ae2b8b4514c4f48a5ff33495b03c08afd0\"\u003e\u003ccode\u003e72ca19a\u003c/code\u003e\u003c/a\u003e Storage STG 101 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26568\"\u003e#26568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/b64baf56c6b168d258b2a0678290ac5f9ab97938\"\u003e\u003ccode\u003eb64baf5\u003c/code\u003e\u003c/a\u003e Sync .github directory with azure-sdk-tools repository (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26600\"\u003e#26600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/ecd64dd6500a04da22107925c3ba9fbe8e636f2c\"\u003e\u003ccode\u003eecd64dd\u003c/code\u003e\u003c/a\u003e Prep azcore@v1.21.1 for release (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26596\"\u003e#26596\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/1d02f204d0146ffd7d13d5585bf3766e53c32cc5\"\u003e\u003ccode\u003e1d02f20\u003c/code\u003e\u003c/a\u003e Update copilot code review instructions and migration breaking change mitigat...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/f6e9ce3212cc9d654d349778f19065eb5d849197\"\u003e\u003ccode\u003ef6e9ce3\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 14973 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26531\"\u003e#26531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/d5a3baf11e0b743a4009efb8e84cbaee335fc0eb\"\u003e\u003ccode\u003ed5a3baf\u003c/code\u003e\u003c/a\u003e Update CODEOWNERS to remove one owner from Custom Providers (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26588\"\u003e#26588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.20.0...sdk/azcore/v1.21.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/Masterminds/semver/v3` from 3.4.0 to 3.5.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Masterminds/semver/releases\"\u003egithub.com/Masterminds/semver/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.5.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdding more prerelease tests by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/273\"\u003eMasterminds/semver#273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate constraint error messages by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/278\"\u003eMasterminds/semver#278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix edge cases by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/279\"\u003eMasterminds/semver#279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdding some checks in by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/280\"\u003eMasterminds/semver#280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdating deps by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/281\"\u003eMasterminds/semver#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github/codeql-action from 4.35.1 to 4.35.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/282\"\u003eMasterminds/semver#282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/cache from 4.2.3 to 5.0.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/283\"\u003eMasterminds/semver#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 7.0.1 to 9.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/284\"\u003eMasterminds/semver#284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdating gitignore for devcontainers by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/286\"\u003eMasterminds/semver#286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixing some quality issues by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/287\"\u003eMasterminds/semver#287\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/282\"\u003eMasterminds/semver#282\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/Masterminds/semver/compare/v3.4.0...v3.5.0\"\u003ehttps://github.com/Masterminds/semver/compare/v3.4.0...v3.5.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Masterminds/semver/blob/master/CHANGELOG.md\"\u003egithub.com/Masterminds/semver/v3's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/8b89c86cb53c57cfd5d07c13de12bc4d78954e99\"\u003e\u003ccode\u003e8b89c86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/287\"\u003e#287\u003c/a\u003e from mattfarina/fix-da-issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/29d51d0ea4bffe39173673685d0dd312447d74a7\"\u003e\u003ccode\u003e29d51d0\u003c/code\u003e\u003c/a\u003e Fixing some quality issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/87f651dbe2f616342d6408b997ad7116ba72ddf3\"\u003e\u003ccode\u003e87f651d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/286\"\u003e#286\u003c/a\u003e from mattfarina/update-devcontainer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/158a6852a7e66d99594653227d3e8c3dc6d160ca\"\u003e\u003ccode\u003e158a685\u003c/code\u003e\u003c/a\u003e Updating gitignore for devcontainers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/7e83c080cfb4455752c654805b189274a10890ab\"\u003e\u003ccode\u003e7e83c08\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/284\"\u003e#284\u003c/a\u003e from Masterminds/dependabot/github_actions/golangci/g...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/697e27f32e7419eb896e7d3ec680c65fc673166b\"\u003e\u003ccode\u003e697e27f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/283\"\u003e#283\u003c/a\u003e from Masterminds/dependabot/github_actions/actions/ca...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/1591f8e3806198f60fa4dcaf2751bfc805c7740d\"\u003e\u003ccode\u003e1591f8e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/282\"\u003e#282\u003c/a\u003e from Masterminds/dependabot/github_actions/github/cod...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/3f5ff1737a28437e536d3ec54e41919577748ae6\"\u003e\u003ccode\u003e3f5ff17\u003c/code\u003e\u003c/a\u003e Bump golangci/golangci-lint-action from 7.0.1 to 9.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/04baa3376047b6d5e79ffcc60f69332dd3e26c85\"\u003e\u003ccode\u003e04baa33\u003c/code\u003e\u003c/a\u003e Bump actions/cache from 4.2.3 to 5.0.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/45939fec77cd7d07d586b823284d11423028e9c2\"\u003e\u003ccode\u003e45939fe\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 4.35.1 to 4.35.2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Masterminds/semver/compare/v3.4.0...v3.5.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.55.4 to 1.57.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/9bd153c05150d0c3f9d45f5b9353c34df9bab5b5\"\u003e\u003ccode\u003e9bd153c\u003c/code\u003e\u003c/a\u003e Release 2025-03-04.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b967446708e597c3c22c658d8399d11accc9e1f1\"\u003e\u003ccode\u003eb967446\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/188c52a1f53d95e7f99ce0edc73059ce5d0b803c\"\u003e\u003ccode\u003e188c52a\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/defaf5c13afed6bb77e2ee4fafea2bfcd09cea88\"\u003e\u003ccode\u003edefaf5c\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/8f2dd23c2630bd2ee667a403cf8ea8611c5ce406\"\u003e\u003ccode\u003e8f2dd23\u003c/code\u003e\u003c/a\u003e add test that verifies SRA order of operations (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3025\"\u003e#3025\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/3d547b010751de5a834a749ffdaddff4bcb0d39c\"\u003e\u003ccode\u003e3d547b0\u003c/code\u003e\u003c/a\u003e Release 2025-03-04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/554a1497dc16d385e62514b10bc8adacfbd6a8d0\"\u003e\u003ccode\u003e554a149\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/3abb221732b42d61c95f5306f528cc2182d37c7a\"\u003e\u003ccode\u003e3abb221\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/95ae39d57f8d986f691754737311102335039848\"\u003e\u003ccode\u003e95ae39d\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/c62ec38df6cc8e66ecf014365d8bd15c2599bc6d\"\u003e\u003ccode\u003ec62ec38\u003c/code\u003e\u003c/a\u003e create kitchen sink test service (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3023\"\u003e#3023\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/ecr/v1.55.4...service/ssm/v1.57.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/bmatcuk/doublestar/v4` from 4.9.2 to 4.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bmatcuk/doublestar/releases\"\u003egithub.com/bmatcuk/doublestar/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eAdded WithNoHidden option\u003c/h2\u003e\n\u003cp\u003eAdded support for a \u003ccode\u003eWithNoHidden\u003c/code\u003e option to ignore hidden files in patterns that might unintentionally match them. For example, a \u003ccode\u003e.config\u003c/code\u003e directory would not be matched by \u003ccode\u003e*\u003c/code\u003e or recursed into by \u003ccode\u003e**\u003c/code\u003e, but \u003cem\u003ewould\u003c/em\u003e be matched by \u003ccode\u003e.*\u003c/code\u003e or recursed by \u003ccode\u003e.config/**\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/lukasngl\"\u003e\u003ccode\u003e@​lukasngl\u003c/code\u003e\u003c/a\u003e for the initial PR and idea!\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add WithNoHidden option to skip hidden files by \u003ca href=\"https://github.com/lukasngl\"\u003e\u003ccode\u003e@​lukasngl\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/109\"\u003ebmatcuk/doublestar#109\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lukasngl\"\u003e\u003ccode\u003e@​lukasngl\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/109\"\u003ebmatcuk/doublestar#109\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/bmatcuk/doublestar/compare/v4.9.2...v4.10.0\"\u003ehttps://github.com/bmatcuk/doublestar/compare/v4.9.2...v4.10.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/a9ad9e0ef4d6b7e4443090e9a7201d847a881711\"\u003e\u003ccode\u003ea9ad9e0\u003c/code\u003e\u003c/a\u003e allow starting test manually\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/9987c0c624376f84f44515adca73ddcdfdcdf453\"\u003e\u003ccode\u003e9987c0c\u003c/code\u003e\u003c/a\u003e update docs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/d3b2184d103391fcd0fcca6590c16367310eee65\"\u003e\u003ccode\u003ed3b2184\u003c/code\u003e\u003c/a\u003e windows support for WithNoHidden; better tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/5d6a6cd76ba3e45482d13140f332be36451f5a48\"\u003e\u003ccode\u003e5d6a6cd\u003c/code\u003e\u003c/a\u003e Merge branch 'lukasngl-feat/no-hidden'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/e8319d206e9dab8d51d41e662811cdfb9af72b24\"\u003e\u003ccode\u003ee8319d2\u003c/code\u003e\u003c/a\u003e run tests when a branch/tag is created\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/614b331133390c7682c227740c51ff65dea2de65\"\u003e\u003ccode\u003e614b331\u003c/code\u003e\u003c/a\u003e run tests when a branch/tag is created\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/df2e03fb0b91b726e0366c0d9ba1c5e580e2d0c9\"\u003e\u003ccode\u003edf2e03f\u003c/code\u003e\u003c/a\u003e feat: add WithNoHidden option to skip hidden files\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/bmatcuk/doublestar/compare/v4.9.2...v4.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/coreos/go-oidc/v3` from 3.17.0 to 3.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/coreos/go-oidc/releases\"\u003egithub.com/coreos/go-oidc/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e.github: configure dependabot by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/477\"\u003ecoreos/go-oidc#477\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e.github: update go versions in CI by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/480\"\u003ecoreos/go-oidc#480\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/478\"\u003ecoreos/go-oidc#478\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/479\"\u003ecoreos/go-oidc#479\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/da6b3bfca8af72414ee0e6e8746585ff5d206003\"\u003e\u003ccode\u003eda6b3bf\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/7f80694215d5eb5b28f851f35845439b1e1e9e5d\"\u003e\u003ccode\u003e7f80694\u003c/code\u003e\u003c/a\u003e build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/7271de57587bb756318f9819796ba846b1ba875a\"\u003e\u003ccode\u003e7271de5\u003c/code\u003e\u003c/a\u003e .github: update go versions in CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/3ccf20fdc4afab7c64881a108d6f4c17a4ecc24d\"\u003e\u003ccode\u003e3ccf20f\u003c/code\u003e\u003c/a\u003e .github: configure dependabot\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/fluxcd/pkg/kustomize` from 1.24.0 to 1.32.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/f3ad4b56adec90eb5661af565cdebec997ad4bfb\"\u003e\u003ccode\u003ef3ad4b5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/fluxcd/pkg/issues/1195\"\u003e#1195\u003c/a\u003e from fluxcd/release-main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/f35b4fd025cdee1664ca3d7aede2eb2fd594583d\"\u003e\u003ccode\u003ef35b4fd\u003c/code\u003e\u003c/a\u003e Prepare for release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/18e165c2592fb2a9633b9a80371e730d88bcab29\"\u003e\u003ccode\u003e18e165c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/fluxcd/pkg/issues/1194\"\u003e#1194\u003c/a\u003e from fluxcd/k8s-1.36\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/fe4377874a6d57593120ee524e1913ca81a5d2e5\"\u003e\u003ccode\u003efe43778\u003c/code\u003e\u003c/a\u003e Update controller-gen to v0.21.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/2498ab414d7e2abaee4131142293e520ee76b390\"\u003e\u003ccode\u003e2498ab4\u003c/code\u003e\u003c/a\u003e Update cloud auth SDKs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/b3bb0e0ff6bc2f42f23ff110baa0e7ae0f2ee685\"\u003e\u003ccode\u003eb3bb0e0\u003c/code\u003e\u003c/a\u003e Update go-git to v5.19.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/545dc4f55ab3850dca6401177c94e37ed40b5c87\"\u003e\u003ccode\u003e545dc4f\u003c/code\u003e\u003c/a\u003e Update distribution to v3.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/b23cbf9f0581b9dc5594e8659739f1bc9c870d35\"\u003e\u003ccode\u003eb23cbf9\u003c/code\u003e\u003c/a\u003e Update Kubernetes packages to 1.36\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/c6042810b61f1937c72a0e04d81d0091ca6e7dae\"\u003e\u003ccode\u003ec604281\u003c/code\u003e\u003c/a\u003e Update Go to 1.26\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/939c616718374460667e648c796487bfedfa6d98\"\u003e\u003ccode\u003e939c616\u003c/code\u003e\u003c/a\u003e ssa: Fix race condition in CRD tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/fluxcd/pkg/compare/apis/meta/v1.24.0...kustomize/v1.32.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/gin-gonic/gin` from 1.11.0 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/gin-gonic/gin/releases\"\u003egithub.com/gin-gonic/gin's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.12.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e192ac89eefc1c30f7c97ae48a9ffb1c6f1c8c8bc: feat(binding): add support for encoding.UnmarshalText in uri/query binding (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4203\"\u003e#4203\u003c/a\u003e) (\u003ca href=\"https://github.com/takanuva15\"\u003e\u003ccode\u003e@​takanuva15\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e53410d2e07054369e0960fbe2eed97e1b9966f12: feat(context): add GetError and GetErrorSlice methods for error retrieval (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4502\"\u003e#4502\u003c/a\u003e) (\u003ca href=\"https://github.com/raju-mechatronics\"\u003e\u003ccode\u003e@​raju-mechatronics\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eacc55e049e33b401e810dbd8c0d6dcb6b3ba2b05: feat(context): add Protocol Buffers support to content negotiation (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4423\"\u003e#4423\u003c/a\u003e) (\u003ca href=\"https://github.com/1911860538\"\u003e\u003ccode\u003e@​1911860538\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e38e765119241d990705169bedb5002a29ae0cbd1: feat(context): implemented Delete method (\u003ca href=\"https://github.com/Spyder01\"\u003e\u003ccode\u003e@​Spyder01\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e771dcc6476d7bc6abb9ec0235ecefa4d38fe6fb0: feat(gin): add option to use escaped path (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4420\"\u003e#4420\u003c/a\u003e) (\u003ca href=\"https://github.com/ldesauw\"\u003e\u003ccode\u003e@​ldesauw\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e4dec17afdff48e8018c83618fbbe69fceeb2b41d: feat(logger): color latency (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4146\"\u003e#4146\u003c/a\u003e) (\u003ca href=\"https://github.com/wsyqn6\"\u003e\u003ccode\u003e@​wsyqn6\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ed7776de7d444935ea4385999711bd6331a98fecb: feat(render): add bson protocol (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4145\"\u003e#4145\u003c/a\u003e) (\u003ca href=\"https://github.com/laurentcau\"\u003e\u003ccode\u003e@​laurentcau\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eb917b14ff9d189f16a7492be79d123a47806ee19: fix(binding): empty value error (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/2169\"\u003e#2169\u003c/a\u003e) (\u003ca href=\"https://github.com/guonaihong\"\u003e\u003ccode\u003e@​guonaihong\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec3d1092b3b48addf6f9cd00fe274ec3bd14650eb: fix(binding): improve empty slice/array handling in form binding (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4380\"\u003e#4380\u003c/a\u003e) (\u003ca href=\"https://github.com/1911860538\"\u003e\u003ccode\u003e@​1911860538\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e9914178584e42458ff7d23891463a880f58c9d86: fix(context): ClientIP handling for multiple X-Forwarded-For header values (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4472\"\u003e#4472\u003c/a\u003e) (\u003ca href=\"https://github.com/Nurysso\"\u003e\u003ccode\u003e@​Nurysso\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e2a794cd0b0faa7d829291375b27a3467ea972b0d: fix(debug): version mismatch (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4403\"\u003e#4403\u003c/a\u003e) (\u003ca href=\"https://github.com/zeek0x\"\u003e\u003ccode\u003e@​zeek0x\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec3d5a28ed6d3849da820195b6774d212bcc038a9: fix(gin): close os.File in RunFd to prevent resource leak (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4422\"\u003e#4422\u003c/a\u003e) (\u003ca href=\"https://github.com/1911860538\"\u003e\u003ccode\u003e@​1911860538\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e5fad976b372e381312f8de69f0969f1284d229d3: fix(gin): literal colon routes not working with engine.Handler() (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4415\"\u003e#4415\u003c/a\u003e) (\u003ca href=\"https://github.com/pawannn\"\u003e\u003ccode\u003e@​pawannn\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e63dd3e60cab89c27fb66bce1423bd268d52abad1: fix(recover): suppress http.ErrAbortHandler in recover (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4336\"\u003e#4336\u003c/a\u003e) (\u003ca href=\"https://github.com/MondayCha\"\u003e\u003ccode\u003e@​MondayCha\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e5c00df8afadd06cc5be530dde00fe6d9fa4a2e4a: fix(render): write content length in Data.Render (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4206\"\u003e#4206\u003c/a\u003e) (\u003ca href=\"https://github.com/dengaleev\"\u003e\u003ccode\u003e@​dengaleev\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e234a6d4c00cb77af9852aca0b8289745d5529b4b: fix(response): refine hijack behavior for response lifecycle (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4373\"\u003e#4373\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e472d086af2acd924cb4b9d7be0525f7d790f69bc: fix(tree): panic in findCaseInsensitivePathRec with RedirectFixedPath (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4535\"\u003e#4535\u003c/a\u003e) (\u003ca href=\"https://github.com/veeceey\"\u003e\u003ccode\u003e@​veeceey\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e8e07d37c63e5536eb25f4af4c91eabeee4011fba: fix: Correct typos, improve documentation clarity, and remove dead code (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4511\"\u003e#4511\u003c/a\u003e) (\u003ca href=\"https://github.com/mahanadh\"\u003e\u003ccode\u003e@​mahanadh\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eba093d19477b896ac89a7fc3246af23d290b8e26: chore(binding): upgrade bson dependency to mongo-driver v2 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4549\"\u003e#4549\u003c/a\u003e) (\u003ca href=\"https://github.com/BobDu\"\u003e\u003ccode\u003e@​BobDu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eb2b489dbf4826c2c630717a77fd5e42774625410: chore(context): always trust xff headers from unix socket (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/3359\"\u003e#3359\u003c/a\u003e) (\u003ca href=\"https://github.com/WeidiDeng\"\u003e\u003ccode\u003e@​WeidiDeng\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eecb3f7b5e2f3915bf1db240ed5eee572f8dbea36: chore(deps): upgrade golang.org/x/crypto to v0.45.0 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4449\"\u003e#4449\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eaf6e8b70b8261bb0c99ad094fe552ab92991620a: chore(deps): upgrade quic-go to v0.57.1 (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edb309081bc5c137b2aa15701ef53f7f19788da25: chore(logger): allow skipping query string output (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4547\"\u003e#4547\u003c/a\u003e) (\u003ca href=\"https://github.com/USA-RedDragon\"\u003e\u003ccode\u003e@​USA-RedDragon\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e26c3a628655cad2388380cb8102d6ce7d4875f3b: chore(response): prevent Flush() panic when \u003ccode\u003ehttp.Flusher\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4479\"\u003e#4479\u003c/a\u003e) (\u003ca href=\"https://github.com/Twacqwq\"\u003e\u003ccode\u003e@​Twacqwq\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e5dd833f1f26de0eb30eae47b17e05ced2482dc41: chore: bump minimum Go version to 1.24 and update workflows (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4388\"\u003e#4388\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRefactor\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e39858a0859c914bd26948fa950477e11bd8d3823: refactor(binding): use maps.Copy for cleaner map handling (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4352\"\u003e#4352\u003c/a\u003e) (\u003ca href=\"https://github.com/russcoss\"\u003e\u003ccode\u003e@​russcoss\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec0048f645ee945c4db30593afdea10123e2c30a6: refactor(context): omit the return value names (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4395\"\u003e#4395\u003c/a\u003e) (\u003ca href=\"https://github.com/wanghaolong613\"\u003e\u003ccode\u003e@​wanghaolong613\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e915e4c90d28ec4cffc6eb146e208ab5a65eac772: refactor(context): replace hardcoded localhost IPs with constants (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4481\"\u003e#4481\u003c/a\u003e) (\u003ca href=\"https://github.com/pauloappbr\"\u003e\u003ccode\u003e@​pauloappbr\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e414de60574449457f3192a7a1d5528940db2836d: refactor(context): using maps.Clone (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4333\"\u003e#4333\u003c/a\u003e) (\u003ca href=\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e59e9d4a794f12c4f9a6c7bed441b9644e5f6d99b: refactor(ginS): use sync.OnceValue to simplify engine function (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4314\"\u003e#4314\u003c/a\u003e) (\u003ca href=\"https://github.com/1911860538\"\u003e\u003ccode\u003e@​1911860538\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e3ab698dc5110af1977d57226e4995c57dd34c233: refactor(recovery): smart error comparison (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4142\"\u003e#4142\u003c/a\u003e) (\u003ca href=\"https://github.com/zeek0x\"\u003e\u003ccode\u003e@​zeek0x\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ed1a15347b1e45a8ee816193d3578a93bfd73b70f: refactor(utils): move util functions to utils.go (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4467\"\u003e#4467\u003c/a\u003e) (\u003ca href=\"https://github.com/zeek0x\"\u003e\u003ccode\u003e@​zeek0x\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ee3118cc378d263454098924ebbde7e8d1dd2e904: refactor: for loop can be modernized using range over int (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4392\"\u003e#4392\u003c/a\u003e) (\u003ca href=\"https://github.com/wanghaolong613\"\u003e\u003ccode\u003e@​wanghaolong613\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e488f8c3ffa579a8d19beb2bae95ff8ef36b3d53f: refactor: replace magic numbers with named constants in bodyAllowedForStatus (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4529\"\u003e#4529\u003c/a\u003e) (\u003ca href=\"https://github.com/veeceey\"\u003e\u003ccode\u003e@​veeceey\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e9968c4bf9d5a99edc3eee2c068a4c9160ece8915: refactor: use b.Loop() to simplify the code and improve performance (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4389\"\u003e#4389\u003c/a\u003e) (\u003ca href=\"https://github.com/reddaisyy\"\u003e\u003ccode\u003e@​reddaisyy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ea85ef5ce4d0cda8834c59c855068ed48b51192d1: refactor: use b.Loop() to simplify the code and improve performance (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4432\"\u003e#4432\u003c/a\u003e) (\u003ca href=\"https://github.com/efcking\"\u003e\u003ccode\u003e@​efcking\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBuild process updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e61b67de522a189b568aced4c5c16917c558e3387: ci(bot): increase frequency and group updates for dependencies (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4367\"\u003e#4367\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efb27ef26c2fdfe25344b4c039d8a53551f9e912c: ci(lint): refactor test assertions and linter configuration (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4436\"\u003e#4436\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e93ff771e6dbf10e432864b30f3719ac5c84a4d4a: ci(sec): improve type safety and server organization in HTTP middleware (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4437\"\u003e#4437\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ee88fc8927a52b74f55bec0351604a56ac0aa1c51: ci(sec): schedule Trivy security scans to run daily at midnight UTC (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4439\"\u003e#4439\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e5e5ff3ace496a31b138b0820136a146bfb5de0ef: ci: replace vulnerability scanning workflow with Trivy integration (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4421\"\u003e#4421\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e00900fb3e1ea9dde33985a0e4f6afec793d5e786: ci: update CI workflows and standardize Trivy config quotes (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4531\"\u003e#4531\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eae3f524974fc4f55d18c9e7fae4614503c015226: ci: update Go version support to 1.25+ across CI and docs (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4550\"\u003e#4550\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/gin-gonic/gin/blob/master/CHANGELOG.md\"\u003egithub.com/gin-gonic/gin's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eGin v1.12.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(render): add bson protocol (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4145\"\u003e#4145\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(context): add GetError and GetErrorSlice methods for error retrieval (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4502\"\u003e#4502\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(binding): add support for encoding.UnmarshalText in uri/query binding (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4203\"\u003e#4203\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(gin): add option to use escaped path (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4420\"\u003e#4420\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(context): add Protocol Buffers support to content negotiation (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4423\"\u003e#4423\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(context): implemented Delete method (\u003ca href=\"https://github.com/gin-gonic/gin/commit/38e7651\"\u003e#38e7651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(logger): color latency (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4146\"\u003e#4146\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eperf(tree): reduce allocations in findCaseInsensitivePath (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4417\"\u003e#4417\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eperf(recovery): optimize line reading in stack function (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4466\"\u003e#4466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eperf(path): replace regex with custom functions in redirectTrailingSlash (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4414\"\u003e#4414\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eperf(tree): optimize path parsing using strings.Count (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4246\"\u003e#4246\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(logger): allow skipping query string output (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4547\"\u003e#4547\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(context): always trust xff headers from unix socket (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/3359\"\u003e#3359\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(response): prevent Flush() panic when the underlying ResponseWriter does not implement \u003ccode\u003ehttp.Flusher\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4479\"\u003e#4479\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(recovery): smart error comparison (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4142\"\u003e#4142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(context): replace hardcoded localhost IPs with constants (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4481\"\u003e#4481\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(utils): move util functions to utils.go (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4467\"\u003e#4467\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(binding): use maps.Copy for cleaner map handling (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4352\"\u003e#4352\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(context): using maps.Clone (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4333\"\u003e#4333\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(ginS): use sync.OnceValue to simplify engine function (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4314\"\u003e#4314\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor: replace magic numbers with named constants in bodyAllowedForStatus (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4529\"\u003e#4529\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor: for loop can be modernized using range over int (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4392\"\u003e#4392\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(tree): panic in findCaseInsensitivePathRec with RedirectFixedPath (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4535\"\u003e#4535\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(render): write content length in Data.Render (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4206\"\u003e#4206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(context): ClientIP handling for multiple X-Forwarded-For header values (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4472\"\u003e#4472\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(binding): empty value error (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/2169\"\u003e#2169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(recover): suppress http.ErrAbortHandler in recover (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4336\"\u003e#4336\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(gin): literal colon routes not working with engine.Handler() (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4415\"\u003e#4415\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(gin): close os.File in RunFd to prevent resource leak (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4422\"\u003e#4422\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(response): refine hijack behavior for response lifecycle (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4373\"\u003e#4373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(binding): improve empty slice/array handling in form binding (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4380\"\u003e#4380\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(debug): version mismatch (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4403\"\u003e#4403\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: correct typos, improve documentation clarity, and remove dead code (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4511\"\u003e#4511\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBuild process updates / CI\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eci: update Go version support to 1.25+ across CI and docs (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4550\"\u003e#4550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(binding): upgrade bson dependency to mongo-driver v2 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4549\"\u003e#4549\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/73726dc606796a025971fe451f0aa6f1b9b847f6\"\u003e\u003ccode\u003e73726dc\u003c/code\u003e\u003c/a\u003e docs: update documentation to reflect Go version changes (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4552\"\u003e#4552\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/e292e5caa777bce70b66fe08c94cbe9cef3e2ec9\"\u003e\u003ccode\u003ee292e5c\u003c/code\u003e\u003c/a\u003e docs: document and finalize Gin v1.12.0 release (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4551\"\u003e#4551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/ae3f524974fc4f55d18c9e7fae4614503c015226\"\u003e\u003ccode\u003eae3f524\u003c/code\u003e\u003c/a\u003e ci: update Go version support to 1.25+ across CI and docs (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4550\"\u003e#4550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/38534e2bf98a06e1f62d6b24384e90b5f78699bf\"\u003e\u003ccode\u003e38534e2\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4548\"\u003e#4548\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/472d086af2acd924cb4b9d7be0525f7d790f69bc\"\u003e\u003ccode\u003e472d086\u003c/code\u003e\u003c/a\u003e fix(tree): panic in findCaseInsensitivePathRec with RedirectFixedPath (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4535\"\u003e#4535\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/fb2583442c4d9bccb75e6d26f1aa6e7c01950db6\"\u003e\u003ccode\u003efb25834\u003c/code\u003e\u003c/a\u003e test(context): use http.StatusContinue constant instead of magic number 100 (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/6f1d5fe3cdb171a08928c3c9dd3fbcfc9ee1b521\"\u003e\u003ccode\u003e6f1d5fe\u003c/code\u003e\u003c/a\u003e test(render): add comprehensive error handling tests (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4541\"\u003e#4541\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/5c00df8afadd06cc5be530dde00fe6d9fa4a2e4a\"\u003e\u003ccode\u003e5c00df8\u003c/code\u003e\u003c/a\u003e fix(render): write content length in Data.Render (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4206\"\u003e#4206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/db309081bc5c137b2aa15701ef53f7f19788da25\"\u003e\u003ccode\u003edb30908\u003c/code\u003e\u003c/a\u003e chore(logger): allow skipping query string output (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4547\"\u003e#4547\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/ba093d19477b896ac89a7fc3246af23d290b8e26\"\u003e\u003ccode\u003eba093d1\u003c/code\u003e\u003c/a\u003e chore(binding): upgrade bson dependency to mongo-driver v2 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4549\"\u003e#4549\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/gin-gonic/gin/compare/v1.11.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-openapi/runtime` from 0.29.5 to 0.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-openapi/runtime/releases\"\u003egithub.com/go-openapi/runtime's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.31.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/go-openapi/runtime/tree/v0.31.0\"\u003e0.31.0\u003c/a\u003e - 2026-05-17\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-openapi/runtime/compare/v0.30.0...v0.31.0\"\u003ehttps://github.com/go-openapi/runtime/compare/v0.30.0...v0.31.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e33 commits in this release.\u003c/p\u003e\n\u003chr /\u003e\n\u003ch3\u003e\u003c!-- raw HTML omitted --\u003eImplemented enhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(client): TLS diagnostic mode for Runtime.Trace by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/159e452fbb643b71d258f2cca8b88137450279ee\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(client): add Runtime.Trace for connection-level diagnostics by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/d966b8fa816b64de80ccf018361cc7263c63341e\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003c!-- raw HTML omitted --\u003eFixed bugs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(client): strip CR/LF from multipart filename and field name by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/5cabd7013f842d80d85a547ea761cf136699deb4\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(middleware): cap filename length on untyped formData uploads by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/0d36609aa32886db0a827883431a5600b274fc10\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: CA cert pool should be cloned not returned as pointer by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/455\"\u003e#455\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/c925891ba9edd2240e9a10abcbb2f8453a190970\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: correct spelling of \u0026quot;Organ trail\u0026quot; to \u0026quot;Oregon Trail\u0026quot; in request tests by \u003ca href=\"https://github.com/Copilot\"\u003e\u003ccode\u003e@​Copilot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/449\"\u003e#449\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/3b614c320c5f157dc502a2a4b541eb1dfb34989d\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(client/tls): correct PEM label and add Ed25519 key support by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/452\"\u003e#452\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/eaa96edc1f2811efe29a1e6d07ca1db84155f026\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003c!-- raw HTML omitted --\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edoc: fixup module layout by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/1fd10af05ff76b283c381f8a3e5b41359d17c4cb\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc: trimmed deprecated functions from examples by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/463\"\u003e#463\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/fe97e40276649c6cad129afa87e6549299ab89d8\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc: updated contributors file by \u003ca href=\"https://github.com/bot-go-openapi%5Bbot%5D\"\u003e\u003ccode\u003e@​bot-go-openapi[bot]\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/460\"\u003e#460\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/0c4edbac0f9c4bc72334f8c105ac173c9676399f\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc: advertised doc site in README.md by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/454\"\u003e#454\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/9d29f68e2bd36b26aea7286d369dc88374ce1fab\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: correct two comment typos in client/internal/request/request.go by \u003ca href=\"https://github.com/Copilot\"\u003e\u003ccode\u003e@​Copilot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/450\"\u003e#450\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/09c03d02ae2717bf36643c8559cecaf197363b31\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(compression): deprecate ContentEncoding, add CAFxX recipe by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/447\"\u003e#447\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/6244633af43ff7691c33eb68b32324114f015c1d\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(keep-alive): add a thorough keep-alive primer by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/445\"\u003e#445\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/7c678af534a79da024575aa6558299901551dde4\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003c!-- raw HTML omitted --\u003eCode quality\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edoc: godoc linting by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/465\"\u003e#465\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/74bcf736bac52ca40d65a839946e16b51c72c762\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: cleanup linter config, reformat, optimized strings replacer by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/8bf148cb896bf0e7f0c22bbd6a3501d82b900b4b\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix/example request by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/462\"\u003e#462\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/9fef4d8ebb77697229a4ff5945d5665aa64f9d9c\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(relint): relint code base by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/461\"\u003e#461\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/4b215322ce2ba88d0e8466668786d68792dca349\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc: doc site on github pages by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/448\"\u003e#448\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/1c5e3735efd166bf7aa00544b8172523c4314687\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003c!-- raw HTML omitted --\u003eTesting\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etest: fix flaky assertion on httptrace by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/456\"\u003e#456\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/1e4d68eb5e29974f2149b68c4d9c4dd6d2dc4221\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003c!-- raw HTML omitted --\u003eMiscellaneous tasks\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore: prepare release v0.31.0 by \u003ca href=\"https://github.com/bot-go-openapi%5Bbot%5D\"\u003e\u003ccode\u003e@​bot-go-openapi[bot]\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/466\"\u003e#466\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/423c407791a74d4353830e07d98375a0c5cf311b\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove binary by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/982c9d3bfa154c4c1f8c06c764ad44e90a666134\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/423c407791a74d4353830e07d98375a0c5cf311b\"\u003e\u003ccode\u003e423c407\u003c/code\u003e\u003c/a\u003e chore: prepare release v0.31.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/1fd10af05ff76b283c381f8a3e5b41359d17c4cb\"\u003e\u003ccode\u003e1fd10af\u003c/code\u003e\u003c/a\u003e doc: fixup module layout\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/74bcf736bac52ca40d65a839946e16b51c72c762\"\u003e\u003ccode\u003e74bcf73\u003c/code\u003e\u003c/a\u003e doc: godoc linting (\u003ca href=\"https://redirect.github.com/go-openapi/runtime/issues/465\"\u003e#465\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/506f3bcb4a7ea135a9742fb8f6bcc5bf666b02b8\"\u003e\u003ccode\u003e506f3bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-openapi/runtime/issues/464\"\u003e#464\u003c/a\u003e from fredbi/sec/lens3-multipart\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/8bf148cb896bf0e7f0c22bbd6a3501d82b900b4b\"\u003e\u003ccode\u003e8bf148c\u003c/code\u003e\u003c/a\u003e chore: cleanup linter config, reformat, optimized strings replacer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/fa336825535097d6b36eef67830c87ebe2970273\"\u003e\u003ccode\u003efa33682\u003c/code\u003e\u003c/a\u003e test(security): fuzz targets for BindForm parse + filename cap\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/5cabd7013f842d80d85a547ea761cf136699deb4\"\u003e\u003ccode\u003e5cabd70\u003c/code\u003e\u003c/a\u003e fix(client): strip CR/LF from multipart filename and field name\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/0d36609aa32886db0a827883431a5600b274fc10\"\u003e\u003ccode\u003e0d36609\u003c/code\u003e\u003c/a\u003e fix(middleware): cap filename length on untyped formData uploads\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/fe97e40276649c6cad129afa87e6549299ab89d8\"\u003e\u003ccode\u003efe97e40\u003c/code\u003e\u003c/a\u003e doc: trimmed deprecated functions from examples (\u003ca href=\"https://redirect.github.com/go-openapi/runtime/issues/463\"\u003e#463\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/982c9d3bfa154c4c1f8c06c764ad44e90a666134\"\u003e\u003ccode\u003e982c9d3\u003c/code\u003e\u003c/a\u003e chore: remove binary\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-openapi/runtime/compare/v0.29.5...v0.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/goccy/go-yaml` from 1.18.0 to 1.19.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/goccy/go-yaml/releases\"\u003egithub.com/goccy/go-yaml's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.19.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix anchor reference regression in nested structures by \u003ca href=\"https://github.com/linyows\"\u003e\u003ccode\u003e@​linyows\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/839\"\u003egoccy/go-yaml#839\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/linyows\"\u003e\u003ccode\u003e@​linyows\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/839\"\u003egoccy/go-yaml#839\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/goccy/go-yaml/compare/v1.19.1...v1.19.2\"\u003ehttps://github.com/goccy/go-yaml/compare/v1.19.1...v1.19.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.19.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix decoding of integer keys of map type by \u003ca href=\"https://github.com/goccy\"\u003e\u003ccode\u003e@​goccy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/829\"\u003egoccy/go-yaml#829\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport line comment for flow sequence or flow map by \u003ca href=\"https://github.com/goccy\"\u003e\u003ccode\u003e@​goccy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/834\"\u003egoccy/go-yaml#834\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/goccy/go-yaml/compare/v1.19.0...v1.19.1\"\u003ehttps://github.com/goccy/go-yaml/compare/v1.19.0...v1.19.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;feat: Dont make copies of structs for validation\u0026quot; by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/763\"\u003egoccy/go-yaml#763\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd decode option that allows specific field prefixes by \u003ca href=\"https://github.com/cpuguy83\"\u003e\u003ccode\u003e@​cpuguy83\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/795\"\u003egoccy/go-yaml#795\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNormalize CR and CRLF in multi-line strings by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/754\"\u003egoccy/go-yaml#754\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport non string map keys by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/756\"\u003egoccy/go-yaml#756\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSkip directive in path operations by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/758\"\u003egoccy/go-yaml#758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd indentation to flow values on new lines by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/759\"\u003egoccy/go-yaml#759\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd support for RawMessage, similar to json.RawMessage by \u003ca href=\"https://github.com/thanethomson\"\u003e\u003ccode\u003e@​thanethomson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/790\"\u003egoccy/go-yaml#790\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cpuguy83\"\u003e\u003ccode\u003e@​cpuguy83\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/795\"\u003egoccy/go-yaml#795\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/thanethomson\"\u003e\u003ccode\u003e@​thanethomson\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/790\"\u003egoccy/go-yaml#790\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/goccy/go-yaml/compare/v1.18.0...v1.19.0\"\u003ehttps://github.com/goccy/go-yaml/compare/v1.18.0...v1.19.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/92bc79cb5f685e999ad131473168fc45215d12d9\"\u003e\u003ccode\u003e92bc79c\u003c/code\u003e\u003c/a\u003e Fix anchor reference regression in nested structures (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/839\"\u003e#839\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/b0ab06985557a2d84913ecba6dda0dbedbd5e154\"\u003e\u003ccode\u003eb0ab069\u003c/code\u003e\u003c/a\u003e Support line comment for flow sequence or flow map (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/834\"\u003e#834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/9e98b0c753ff2b8f0b323929c9c60fe7951d0f45\"\u003e\u003ccode\u003e9e98b0c\u003c/code\u003e\u003c/a\u003e Fix decoding of integer keys of map type (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/829\"\u003e#829\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/a7b4bfbcf4a41152862ffba5cce666631bc04bb1\"\u003e\u003ccode\u003ea7b4bfb\u003c/code\u003e\u003c/a\u003e Add support for RawMessage, similar to json.RawMessage (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/790\"\u003e#790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/07c09c028744e7aac32d1b11279a401055d107f5\"\u003e\u003ccode\u003e07c09c0\u003c/code\u003e\u003c/a\u003e Add indentation to flow values on new lines (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/759\"\u003e#759\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/0040ab4161153c5b812ae51984d3967ad3dbd068\"\u003e\u003ccode\u003e0040ab4\u003c/code\u003e\u003c/a\u003e Skip directive in path operations (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/758\"\u003e#758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/7901e98f54d280a553a0d606c91a82fa89493928\"\u003e\u003ccode\u003e7901e98\u003c/code\u003e\u003c/a\u003e Support non string map keys (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/756\"\u003e#756\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/f4d13479ba3d44541a65d0dffeab5e3fa805413a\"\u003e\u003ccode\u003ef4d1347\u003c/code\u003e\u003c/a\u003e Normalize CR and CRLF in multi-line strings (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/754\"\u003e#754\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/90e852559132e85734ab0c9a48b3a912ebd3f060\"\u003e\u003ccode\u003e90e8525\u003c/code\u003e\u003c/a\u003e Add decode option that allows specific field prefixes (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/795\"\u003e#795\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/25e5d9094248e480434ca87d9119e3d9ce7ac1d7\"\u003e\u003ccode\u003e25e5d90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;feat: Dont make copies of structs for validation (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/737\"\u003e#737\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/763\"\u003e#763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/goccy/go-yaml/compare/v1.18.0...v1.19.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.20.7 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerreg...\n\n_Description has been truncated_","html_url":"https://github.com/akuity/kargo/pull/6345","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/akuity%2Fkargo/issues/6345","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/6345/packages"},{"uuid":"4505746886","node_id":"PR_kwDORsXlm87egJsd","number":36,"state":"closed","title":"chore(deps): bump the common group across 1 directory with 31 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-29T23:34:58.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-22T21:40:50.000Z","updated_at":"2026-05-29T23:35:00.000Z","time_to_close":611648,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"common","update_count":31,"packages":[{"name":"github.com/Azure/azure-sdk-for-go/sdk/azcore","old_version":"1.21.0","new_version":"1.21.1","repository_url":"https://github.com/Azure/azure-sdk-for-go"},{"name":"github.com/CycloneDX/cyclonedx-go","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/CycloneDX/cyclonedx-go"},{"name":"github.com/alicebob/miniredis/v2","old_version":"2.37.0","new_version":"2.38.0","repository_url":"https://github.com/alicebob/miniredis"},{"name":"github.com/apparentlymart/go-cidr","old_version":"1.1.0","new_version":"1.1.1","repository_url":"https://github.com/apparentlymart/go-cidr"},{"name":"github.com/containerd/containerd/v2","old_version":"2.2.2","new_version":"2.3.0","repository_url":"https://github.com/containerd/containerd"},{"name":"github.com/go-git/go-git/v5","old_version":"5.17.2","new_version":"5.19.0","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.2","new_version":"0.21.5","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/hashicorp/hc-install","old_version":"0.9.3","new_version":"0.9.5","repository_url":"https://github.com/hashicorp/hc-install"},{"name":"github.com/hashicorp/terraform-exec","old_version":"0.25.0","new_version":"0.25.2","repository_url":"https://github.com/hashicorp/terraform-exec"},{"name":"github.com/in-toto/in-toto-golang","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/in-toto/in-toto-golang"},{"name":"github.com/magefile/mage","old_version":"1.17.1","new_version":"1.17.2","repository_url":"https://github.com/magefile/mage"},{"name":"github.com/mattn/go-shellwords","old_version":"1.0.12","new_version":"1.0.13","repository_url":"https://github.com/mattn/go-shellwords"},{"name":"github.com/open-policy-agent/opa","old_version":"1.15.2","new_version":"1.16.2","repository_url":"https://github.com/open-policy-agent/opa"},{"name":"github.com/openvex/go-vex","old_version":"0.2.7","new_version":"0.2.8","repository_url":"https://github.com/openvex/go-vex"},{"name":"github.com/package-url/packageurl-go","old_version":"0.1.5","new_version":"0.1.6","repository_url":"https://github.com/package-url/packageurl-go"},{"name":"github.com/secure-systems-lab/go-securesystemslib","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/secure-systems-lab/go-securesystemslib"},{"name":"golang.org/x/crypto","old_version":"0.50.0","new_version":"0.51.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/net","old_version":"0.53.0","new_version":"0.54.0","repository_url":"https://github.com/golang/net"},{"name":"golang.org/x/vuln","old_version":"1.1.4","new_version":"1.3.0","repository_url":"https://github.com/golang/vuln"},{"name":"helm.sh/helm/v3","old_version":"3.20.2","new_version":"3.21.0","repository_url":"https://github.com/helm/helm"},{"name":"modernc.org/sqlite","old_version":"1.48.2","new_version":"1.50.1"},{"name":"github.com/invopop/jsonschema","old_version":"0.13.0","new_version":"0.14.0","repository_url":"https://github.com/invopop/jsonschema"},{"name":"github.com/nikolalohinski/gonja/v2","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/nikolalohinski/gonja"}],"path":null,"ecosystem":"go"},"body":"Bumps the common group with 23 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.21.0` | `1.21.1` |\n| [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) | `0.10.0` | `0.11.0` |\n| [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) | `2.37.0` | `2.38.0` |\n| [github.com/apparentlymart/go-cidr](https://github.com/apparentlymart/go-cidr) | `1.1.0` | `1.1.1` |\n| [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.2.2` | `2.3.0` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.17.2` | `5.19.0` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.2` | `0.21.5` |\n| [github.com/hashicorp/hc-install](https://github.com/hashicorp/hc-install) | `0.9.3` | `0.9.5` |\n| [github.com/hashicorp/terraform-exec](https://github.com/hashicorp/terraform-exec) | `0.25.0` | `0.25.2` |\n| [github.com/in-toto/in-toto-golang](https://github.com/in-toto/in-toto-golang) | `0.10.0` | `0.11.0` |\n| [github.com/magefile/mage](https://github.com/magefile/mage) | `1.17.1` | `1.17.2` |\n| [github.com/mattn/go-shellwords](https://github.com/mattn/go-shellwords) | `1.0.12` | `1.0.13` |\n| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `1.15.2` | `1.16.2` |\n| [github.com/openvex/go-vex](https://github.com/openvex/go-vex) | `0.2.7` | `0.2.8` |\n| [github.com/package-url/packageurl-go](https://github.com/package-url/packageurl-go) | `0.1.5` | `0.1.6` |\n| [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib) | `0.10.0` | `0.11.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.50.0` | `0.51.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.53.0` | `0.54.0` |\n| [golang.org/x/vuln](https://github.com/golang/vuln) | `1.1.4` | `1.3.0` |\n| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.20.2` | `3.21.0` |\n| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.48.2` | `1.50.1` |\n| [github.com/invopop/jsonschema](https://github.com/invopop/jsonschema) | `0.13.0` | `0.14.0` |\n| [github.com/nikolalohinski/gonja/v2](https://github.com/nikolalohinski/gonja) | `2.7.0` | `2.8.0` |\n\n\nUpdates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.21.0 to 1.21.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/releases\"\u003egithub.com/Azure/azure-sdk-for-go/sdk/azcore's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esdk/azcore/v1.21.1\u003c/h2\u003e\n\u003ch2\u003e1.21.1 (2026-04-16)\u003c/h2\u003e\n\u003ch3\u003eBugs Fixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue in \u003ccode\u003eResponseError.Error()\u003c/code\u003e where the request URL path was being logged unescaped.\u003c/li\u003e\n\u003cli\u003eRedact query parameters when logging errors.\u003c/li\u003e\n\u003cli\u003eFor \u003ccode\u003eruntime.JoinPaths\u003c/code\u003e, don't add a slash between root and paths when \u003ccode\u003epaths\u003c/code\u003e starts with \u003ccode\u003e?\u003c/code\u003e (query string).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgraded to Go 1.25.0.\u003c/li\u003e\n\u003cli\u003eUpgraded dependencies.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/63e4ba18204b0df554e330df8f85662e653e67ab\"\u003e\u003ccode\u003e63e4ba1\u003c/code\u003e\u003c/a\u003e Bump release date for azcore (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26613\"\u003e#26613\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/fa0312174d17ff4cb7cb0118fa80de07409841c2\"\u003e\u003ccode\u003efa03121\u003c/code\u003e\u003c/a\u003e remove bypass local dns (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26609\"\u003e#26609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/c47f9a60dd1e9be6943ff0d6a5666a0ac09f6cfa\"\u003e\u003ccode\u003ec47f9a6\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 15153 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26607\"\u003e#26607\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/88b8b5b38ecebb929a2e302df054fed1d68618b8\"\u003e\u003ccode\u003e88b8b5b\u003c/code\u003e\u003c/a\u003e Changelog for v2.2.0 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26567\"\u003e#26567\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/72ca19ae2b8b4514c4f48a5ff33495b03c08afd0\"\u003e\u003ccode\u003e72ca19a\u003c/code\u003e\u003c/a\u003e Storage STG 101 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26568\"\u003e#26568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/b64baf56c6b168d258b2a0678290ac5f9ab97938\"\u003e\u003ccode\u003eb64baf5\u003c/code\u003e\u003c/a\u003e Sync .github directory with azure-sdk-tools repository (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26600\"\u003e#26600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/ecd64dd6500a04da22107925c3ba9fbe8e636f2c\"\u003e\u003ccode\u003eecd64dd\u003c/code\u003e\u003c/a\u003e Prep azcore@v1.21.1 for release (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26596\"\u003e#26596\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/1d02f204d0146ffd7d13d5585bf3766e53c32cc5\"\u003e\u003ccode\u003e1d02f20\u003c/code\u003e\u003c/a\u003e Update copilot code review instructions and migration breaking change mitigat...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/f6e9ce3212cc9d654d349778f19065eb5d849197\"\u003e\u003ccode\u003ef6e9ce3\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 14973 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26531\"\u003e#26531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/d5a3baf11e0b743a4009efb8e84cbaee335fc0eb\"\u003e\u003ccode\u003ed5a3baf\u003c/code\u003e\u003c/a\u003e Update CODEOWNERS to remove one owner from Custom Providers (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26588\"\u003e#26588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.21.0...sdk/azcore/v1.21.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/CycloneDX/cyclonedx-go` from 0.10.0 to 0.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/releases\"\u003egithub.com/CycloneDX/cyclonedx-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eBuilding and Packaging\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e32221d4829e8ec6007896af2d7f11fd6ba13d6c5: build(deps): bump actions/setup-go from 6.2.0 to 6.4.0 (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/261\"\u003e#261\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ea42a4dd9163df91c4173d41db2cc7ed67f0db0b6: build(deps): bump gitpod/workspace-go from \u003ccode\u003e08a7c68\u003c/code\u003e to \u003ccode\u003e00059ff\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/255\"\u003e#255\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e9810ab9f48d46f134ad9a13bbabd1397cc64804e: build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.1 (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/263\"\u003e#263\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOthers\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e2cef05662cba14b4ae948b1858fee532f8adadd1: Add comprehensive support for CycloneDX 1.7 specification (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/257\"\u003e#257\u003c/a\u003e) (\u003ca href=\"https://github.com/alistair-mclean\"\u003e\u003ccode\u003e@​alistair-mclean\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e3ed34da50502f9b9d6ac9dff64df8b08e53aa2a5: Added 5 missing fields to match CycloneDX 1.6 spec: (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/256\"\u003e#256\u003c/a\u003e) (\u003ca href=\"https://github.com/alistair-mclean\"\u003e\u003ccode\u003e@​alistair-mclean\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/a42a4dd9163df91c4173d41db2cc7ed67f0db0b6\"\u003e\u003ccode\u003ea42a4dd\u003c/code\u003e\u003c/a\u003e build(deps): bump gitpod/workspace-go from \u003ccode\u003e08a7c68\u003c/code\u003e to \u003ccode\u003e00059ff\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/255\"\u003e#255\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/9810ab9f48d46f134ad9a13bbabd1397cc64804e\"\u003e\u003ccode\u003e9810ab9\u003c/code\u003e\u003c/a\u003e build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.1 (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/263\"\u003e#263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/32221d4829e8ec6007896af2d7f11fd6ba13d6c5\"\u003e\u003ccode\u003e32221d4\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-go from 6.2.0 to 6.4.0 (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/261\"\u003e#261\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/2cef05662cba14b4ae948b1858fee532f8adadd1\"\u003e\u003ccode\u003e2cef056\u003c/code\u003e\u003c/a\u003e Add comprehensive support for CycloneDX 1.7 specification (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/257\"\u003e#257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/3ed34da50502f9b9d6ac9dff64df8b08e53aa2a5\"\u003e\u003ccode\u003e3ed34da\u003c/code\u003e\u003c/a\u003e Added 5 missing fields to match CycloneDX 1.6 spec: (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/256\"\u003e#256\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/compare/v0.10.0...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/alicebob/miniredis/v2` from 2.37.0 to 2.38.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/alicebob/miniredis/releases\"\u003egithub.com/alicebob/miniredis/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eDELEX and fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eXADD TRIM (thanks \u003ca href=\"https://github.com/evan-choi\"\u003e\u003ccode\u003e@​evan-choi\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate XINFO STREAM (thanks \u003ca href=\"https://github.com/TomBailey167\"\u003e\u003ccode\u003e@​TomBailey167\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003elua fix (thanks \u003ca href=\"https://github.com/infastin\"\u003e\u003ccode\u003e@​infastin\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epartial support for DELEX\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md\"\u003egithub.com/alicebob/miniredis/v2's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.38.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eXADD TRIM (thanks \u003ca href=\"https://github.com/evan-choi\"\u003e\u003ccode\u003e@​evan-choi\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate XINFO STREAM (thanks \u003ca href=\"https://github.com/TomBailey167\"\u003e\u003ccode\u003e@​TomBailey167\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003elua fix (thanks \u003ca href=\"https://github.com/infastin\"\u003e\u003ccode\u003e@​infastin\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epartial support for DELEX\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/d67bfae4c370e8451561165eca6ddc50f056f083\"\u003e\u003ccode\u003ed67bfae\u003c/code\u003e\u003c/a\u003e update changelog for v2.38.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/2b1abd81e1c58fb6d440b4637287d3ee09f7f66a\"\u003e\u003ccode\u003e2b1abd8\u003c/code\u003e\u003c/a\u003e DELEX (partly) (\u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/442\"\u003e#442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/452dd373d138f7ad858dd6e25e2a92753f83498e\"\u003e\u003ccode\u003e452dd37\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/440\"\u003e#440\u003c/a\u003e from infastin/server-alias\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/b5b8ec2cfde407552ea028514409599dbd5e1600\"\u003e\u003ccode\u003eb5b8ec2\u003c/code\u003e\u003c/a\u003e feat: add 'server' alias to 'redis' in lua scripts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/ecc4af14f2444ea1a57d040185781fe197bdfc9d\"\u003e\u003ccode\u003eecc4af1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/439\"\u003e#439\u003c/a\u003e from TomBailey167/xinfo-stream-last-generated-id\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/4a2a33e841b359a2569fe9a35d6d46414bf40aec\"\u003e\u003ccode\u003e4a2a33e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/435\"\u003e#435\u003c/a\u003e from evan-choi/fix/xadd-equals-trim-modifier\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/d6261eff59117ccea7387f3a608caa1006b1adef\"\u003e\u003ccode\u003ed6261ef\u003c/code\u003e\u003c/a\u003e feat: add last-generated-id to XINFO STREAM response\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/f4d8aa342425de1b740a6f22a7dd230f83e3712a\"\u003e\u003ccode\u003ef4d8aa3\u003c/code\u003e\u003c/a\u003e fix: accept = trim modifier in xadd\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/alicebob/miniredis/compare/v2.37.0...v2.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/apparentlymart/go-cidr` from 1.1.0 to 1.1.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apparentlymart/go-cidr/commit/5730b04c510e662932577c247c0b194f97fb101f\"\u003e\u003ccode\u003e5730b04\u003c/code\u003e\u003c/a\u003e SubnetBig returns error for negative subnet number\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apparentlymart/go-cidr/commit/fab7bb4b664d0c94dceb4a54fab3500ffb2a2977\"\u003e\u003ccode\u003efab7bb4\u003c/code\u003e\u003c/a\u003e HostBig: Don't crash for out-of-range hostnum greater than max uint64\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apparentlymart/go-cidr/commit/e4ff799e34b9b5c2040704a175c01a6a1df7b56c\"\u003e\u003ccode\u003ee4ff799\u003c/code\u003e\u003c/a\u003e Update doc comment spacing for newer gofmt behavior\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/apparentlymart/go-cidr/compare/v1.1.0...v1.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/containerd/containerd/v2` from 2.2.2 to 2.3.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/containerd/containerd/releases\"\u003egithub.com/containerd/containerd/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003econtainerd 2.3.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the v2.3.0 release of containerd!\u003c/p\u003e\n\u003cp\u003eThe third minor release of containerd 2.x focuses on continued stability alongside\nnew features and improvements. This is the third time-based release for containerd.\u003c/p\u003e\n\u003cp\u003eStarting with containerd 2.3, the project has moved to release cadence aligned with\nthe Kubernetes release schedule, with new minor releases about every 4 months. The\ncontainerd 2.3 release is also the first annual LTS (Long Term Stable) release under\nthis new schedule, with support planned for at least two years. Direct upgrades\nbetween sequential LTS releases (e.g., 1.7 to 2.3) will be tested and supported.\u003c/p\u003e\n\u003ch3\u003eHighlights\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd transfer types for container filesystem copy (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13165\"\u003e#13165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd option to inject trace ID to logs (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13117\"\u003e#13117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePropagate OpenTelemetry traces in outgoing RPCs from plugin clients (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13113\"\u003e#13113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate plugin config migration to run on load (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12608\"\u003e#12608\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate sandbox API to include spec field (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12840\"\u003e#12840\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eContainer Runtime Interface (CRI)\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eAllow containers to use user namespaces with host networking (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12518\"\u003e#12518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eWire UpdatePodSandboxResources to Sandbox API (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13118\"\u003e#13118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUnpack images with per-layer labels for specific runtime (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12835\"\u003e#12835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePopulate ImageId field in container status (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12787\"\u003e#12787\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSet annotations parameter in CreateSandbox request (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12566\"\u003e#12566\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd background stats collector to calculate UsageNanoCores for containers and pod sandboxes (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12629\"\u003e#12629\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eImage Distribution\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eSupport zstd-wrapped EROFS layers (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13185\"\u003e#13185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd os.features support for EROFS native container images (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13091\"\u003e#13091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd EROFS layer media type (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12567\"\u003e#12567\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eImage Storage\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eAdd dmverity support to the erofs snapshotter (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12502\"\u003e#12502\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse fsmount API to avoid PAGE_SIZE limit for erofs (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12783\"\u003e#12783\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNode Resource Interface (NRI)\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003ePass container user (uid, gids) to plugins (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12769\"\u003e#12769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePass seccomp policy to plugins (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12768\"\u003e#12768\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePass any POSIX rlimits to plugins (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12765\"\u003e#12765\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePass extended container status to NRI. (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12770\"\u003e#12770\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePass injected CDI devices to plugins (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12767\"\u003e#12767\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePass linux sysctl to plugins (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12766\"\u003e#12766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse dedicated RPC calls for all pod and container life-cycle events via the NRI wire protocol (\u003ca href=\"https://redirect.github.com/containerd/nri/pull/274\"\u003econtainerd/nri#274\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd basic metrics collection for the NRI framework (\u003ca href=\"https://redirect.github.com/containerd/nri/pull/277\"\u003econtainerd/nri#277\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/containerd/containerd/blob/main/RELEASES.md\"\u003egithub.com/containerd/containerd/v2's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eVersioning and Release\u003c/h1\u003e\n\u003cp\u003eThis document details the versioning and release plan for containerd. Stability\nis a top goal for this project, and we hope that this document and the processes\nit entails will help to achieve that. It covers the release process, versioning\nnumbering, backporting, API stability and support horizons.\u003c/p\u003e\n\u003cp\u003eIf you rely on containerd, it would be good to spend time understanding the\nareas of the API that are and are not supported and how they impact your\nproject in the future.\u003c/p\u003e\n\u003cp\u003eThis document will be considered a living document. Supported timelines,\nbackport targets and API stability guarantees will be updated here as they\nchange.\u003c/p\u003e\n\u003cp\u003eIf there is something that you require or this document leaves out, please\nreach out by \u003ca href=\"https://github.com/containerd/containerd/issues\"\u003efiling an issue\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eReleases\u003c/h2\u003e\n\u003cp\u003eReleases of containerd will be versioned using dotted triples, similar to\n\u003ca href=\"http://semver.org/\"\u003eSemantic Version\u003c/a\u003e. For the purposes of this document, we\nwill refer to the respective components of this triple as\n\u003ccode\u003e\u0026lt;major\u0026gt;.\u0026lt;minor\u0026gt;.\u0026lt;patch\u0026gt;\u003c/code\u003e. The version number may have additional information,\nsuch as alpha, beta and release candidate qualifications. Such releases will be\nconsidered \u0026quot;pre-releases\u0026quot;.\u003c/p\u003e\n\u003ch3\u003eMajor and Minor Releases\u003c/h3\u003e\n\u003cp\u003eMajor and minor releases of containerd will be made from main. Releases of\ncontainerd will be marked with GPG signed tags and announced at\n\u003ca href=\"https://github.com/containerd/containerd/releases\"\u003ehttps://github.com/containerd/containerd/releases\u003c/a\u003e. The tag will be of the\nformat \u003ccode\u003ev\u0026lt;major\u0026gt;.\u0026lt;minor\u0026gt;.\u0026lt;patch\u0026gt;\u003c/code\u003e and should be made with the command \u003ccode\u003egit tag -s v\u0026lt;major\u0026gt;.\u0026lt;minor\u0026gt;.\u0026lt;patch\u0026gt;\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eAfter a minor release, a branch will be created, with the format\n\u003ccode\u003erelease/\u0026lt;major\u0026gt;.\u0026lt;minor\u0026gt;\u003c/code\u003e from the minor tag. All further patch releases will\nbe done from that branch. For example, once we release \u003ccode\u003ev1.0.0\u003c/code\u003e, a branch\n\u003ccode\u003erelease/1.0\u003c/code\u003e will be created from that tag. All future patch releases will be\ndone against that branch.\u003c/p\u003e\n\u003ch3\u003eRelease Cadence\u003c/h3\u003e\n\u003cp\u003eSince containerd v2.3 in April 2026, minor releases are provided on a time basis\nwith a cadence of 4 months. New minor releases are scheduled for April, August,\nand December of each year. This cadence is synchronized with the Kubernetes\nrelease schedule to ensure that new features in containerd can be smoothly\nadopted by new Kubernetes releases.\u003c/p\u003e\n\u003cp\u003eThe maintainers will maintain a roadmap and milestones for each release, however,\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/2976f38ccbfcda5ef1364d63d60b0a304e4bf94a\"\u003e\u003ccode\u003e2976f38\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13325\"\u003e#13325\u003c/a\u003e from dmcgowan/prepare-v2.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/77eeb2d8ea1d334cd64fc205411869ec3720f674\"\u003e\u003ccode\u003e77eeb2d\u003c/code\u003e\u003c/a\u003e Prepare release notes for v2.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/c55ada3f312a965eb9aaf12477416e8cc2c940cf\"\u003e\u003ccode\u003ec55ada3\u003c/code\u003e\u003c/a\u003e Update api to v1.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/ebf4404e39a1a11975e5bf78127e44ff2b1b3788\"\u003e\u003ccode\u003eebf4404\u003c/code\u003e\u003c/a\u003e Update release document\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/f49640ec1f78fd0b04aca64c10ffaff3dfec5b12\"\u003e\u003ccode\u003ef49640e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13321\"\u003e#13321\u003c/a\u003e from dmcgowan/remove-erofs-fsmerge-threshold\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/e3d5fe82b16cd6d05c33150f69800822a9205b0f\"\u003e\u003ccode\u003ee3d5fe8\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13322\"\u003e#13322\u003c/a\u003e from dmcgowan/prepare-api-v1.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/ee17fa123684303d6f6e083c318146d0425961d7\"\u003e\u003ccode\u003eee17fa1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13317\"\u003e#13317\u003c/a\u003e from fuweid/fix-merge-issue\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/b7f8c3510d9135ad56277140f9e5aa86eb0e9a66\"\u003e\u003ccode\u003eb7f8c35\u003c/code\u003e\u003c/a\u003e erofs: remove fsmerge threshold from snapshotter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/8f2fce4ce57fd3a5772d479d5cbee1707ef7b3b4\"\u003e\u003ccode\u003e8f2fce4\u003c/code\u003e\u003c/a\u003e Prepare release notes for v1.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/ce2955c7ce9d142e7d9f5e902037e625930033b9\"\u003e\u003ccode\u003ece2955c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13319\"\u003e#13319\u003c/a\u003e from mxpv/depr\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/containerd/containerd/compare/v2.2.2...v2.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.17.2 to 5.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bc930f4cbe095a3e1d49273655f73fcef7d41a42\"\u003e\u003ccode\u003ebc930f4\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2065\"\u003e#2065\u003c/a\u003e from go-git/commit-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/d315264343cead712aa9eb56475c2ec96f5ecef1\"\u003e\u003ccode\u003ed315264\u003c/code\u003e\u003c/a\u003e plumbing: object, Reset object before decode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6e1d34890a4dae8a0df738e531234bd60b7e9b66\"\u003e\u003ccode\u003e6e1d348\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tree handling with upstream\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e134ba34cf95ed0167e5b1df36a933d7bde9d02d\"\u003e\u003ccode\u003ee134ba3\u003c/code\u003e\u003c/a\u003e tests: Skip double checks in Git v2.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1971422f6b1bec9176061b3293306981cfff981e\"\u003e\u003ccode\u003e1971422\u003c/code\u003e\u003c/a\u003e tests: Add git conformance tests for signing verification\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a387aa8857a8fbba8e74b7f5485e9e030669ab5d\"\u003e\u003ccode\u003ea387aa8\u003c/code\u003e\u003c/a\u003e plumbing: object, Add ErrMalformedTag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f415670d906b5c6169d1fdc64f3f9f1d33eb6f9c\"\u003e\u003ccode\u003ef415670\u003c/code\u003e\u003c/a\u003e plumbing: object, Decode Tag headers via a state machine\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5b0cd38a62e2336bb5f1a2ad0eb8ac8f9e7b740e\"\u003e\u003ccode\u003e5b0cd38\u003c/code\u003e\u003c/a\u003e plumbing: object, Reject multi-signature commits at Verify\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fe8ed6223a6079d9fd84d853362a996e7df175fb\"\u003e\u003ccode\u003efe8ed62\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tag.EncodeWithoutSignature with Commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/98e337d5bdc4c0536a40ab7381b2231f7e0b15cd\"\u003e\u003ccode\u003e98e337d\u003c/code\u003e\u003c/a\u003e plumbing: object, Add support for Tag.SignatureSHA256\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.2 to 0.21.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2254\"\u003egoogle/go-containerregistry#2254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate to Go 1.26.2 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2255\"\u003egoogle/go-containerregistry#2255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2257\"\u003egoogle/go-containerregistry#2257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 in the go-deps group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2260\"\u003egoogle/go-containerregistry#2260\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.4...v0.21.5\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.4...v0.21.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.21.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ego.mod: do not make a viral minimum go version by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2237\"\u003egoogle/go-containerregistry#2237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid pruning absolute links from extracted and flattened images by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2241\"\u003egoogle/go-containerregistry#2241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump the go-deps group across 3 directories with 5 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2245\"\u003egoogle/go-containerregistry#2245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: update to go1.25.8, and use separate .go-version file by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2246\"\u003egoogle/go-containerregistry#2246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump CI go version to 1.26.1 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2242\"\u003egoogle/go-containerregistry#2242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump codecov/codecov-action from 5.5.2 to 5.5.3 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2240\"\u003egoogle/go-containerregistry#2240\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efork distribution client v3 auth-challenge as an internal package (squashed) by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2248\"\u003egoogle/go-containerregistry#2248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: validate Bearer realm URL to prevent SSRF by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2243\"\u003egoogle/go-containerregistry#2243\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erevert path traversal and symlink escape from \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2227\"\u003e#2227\u003c/a\u003e by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2250\"\u003egoogle/go-containerregistry#2250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pkg/v1/google/auth tests for arm64  by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2085\"\u003egoogle/go-containerregistry#2085\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egoreleaser: Update goreleaser config and GH action by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2253\"\u003egoogle/go-containerregistry#2253\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2243\"\u003egoogle/go-containerregistry#2243\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.3...v0.21.4\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.3...v0.21.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.21.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdds local file support to the \u003ccode\u003ecrane index\u003c/code\u003e subcommand  by \u003ca href=\"https://github.com/edwardthiele\"\u003e\u003ccode\u003e@​edwardthiele\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2223\"\u003egoogle/go-containerregistry#2223\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emigrate to github.com/moby/moby modules by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2228\"\u003egoogle/go-containerregistry#2228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump the go-deps group across 4 directories with 7 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2233\"\u003egoogle/go-containerregistry#2233\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2220\"\u003egoogle/go-containerregistry#2220\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: reject path traversal and symlink escape in Extract by \u003ca href=\"https://github.com/KevinZhao\"\u003e\u003ccode\u003e@​KevinZhao\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2227\"\u003egoogle/go-containerregistry#2227\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etarball: detect symlink cycles in extractFileFromTar by \u003ca href=\"https://github.com/vnykmshr\"\u003e\u003ccode\u003e@​vnykmshr\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2232\"\u003egoogle/go-containerregistry#2232\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebump golang to 1.25.7 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2236\"\u003egoogle/go-containerregistry#2236\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/edwardthiele\"\u003e\u003ccode\u003e@​edwardthiele\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2223\"\u003egoogle/go-containerregistry#2223\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2228\"\u003egoogle/go-containerregistry#2228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KevinZhao\"\u003e\u003ccode\u003e@​KevinZhao\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2227\"\u003egoogle/go-containerregistry#2227\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vnykmshr\"\u003e\u003ccode\u003e@​vnykmshr\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2232\"\u003egoogle/go-containerregistry#2232\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/5b80281da727dae218e1697ab8529b631b9efa64\"\u003e\u003ccode\u003e5b80281\u003c/code\u003e\u003c/a\u003e build(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 in the go-deps gro...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/b99bca24a8df1bd88afc1d299d4c0ebba0555cf8\"\u003e\u003ccode\u003eb99bca2\u003c/code\u003e\u003c/a\u003e build(deps): bump aws-actions/configure-aws-credentials (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2257\"\u003e#2257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/f8be1d442e6fc85c791e4aa50155aa8806ca8312\"\u003e\u003ccode\u003ef8be1d4\u003c/code\u003e\u003c/a\u003e update to Go 1.26.2 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2255\"\u003e#2255\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/87ad88b4a000e418add5c1bb4ae1da908cbc3b85\"\u003e\u003ccode\u003e87ad88b\u003c/code\u003e\u003c/a\u003e Bump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2254\"\u003e#2254\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e8813dd0a00e799459cae01d8a4659b9be2fd871\"\u003e\u003ccode\u003ee8813dd\u003c/code\u003e\u003c/a\u003e goreleaser: Update goreleaser config and GH action for releases (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2253\"\u003e#2253\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e90447d319233b94dcdc75a24246ccbee6d1e72a\"\u003e\u003ccode\u003ee90447d\u003c/code\u003e\u003c/a\u003e replace gcloud in binary calls in pkg/v1/google tests (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2085\"\u003e#2085\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/0d0368c2a5fa524c4765a6c0b7df4ff6d6951471\"\u003e\u003ccode\u003e0d0368c\u003c/code\u003e\u003c/a\u003e revert path traversal and symlink escape changes (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2250\"\u003e#2250\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a2f47d4202de443f68e8bafa95ddd41407327168\"\u003e\u003ccode\u003ea2f47d4\u003c/code\u003e\u003c/a\u003e transport: validate Bearer realm URL to prevent SSRF (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2243\"\u003e#2243\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/19a36cd8c44dd465a84f9d6ffea3009023f73660\"\u003e\u003ccode\u003e19a36cd\u003c/code\u003e\u003c/a\u003e fork distribution client v3 auth-challenge as an internal package (squashed) ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c612a9b20a4c533454b7fa8b39a8c8139065f0b1\"\u003e\u003ccode\u003ec612a9b\u003c/code\u003e\u003c/a\u003e Bump codecov/codecov-action from 5.5.2 to 5.5.3 in the actions group (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2240\"\u003e#2240\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/hashicorp/hc-install` from 0.9.3 to 0.9.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hashicorp/hc-install/releases\"\u003egithub.com/hashicorp/hc-install's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ego.mod: Lower compatibility constraint from 1.25.8 to 1.25.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/376\"\u003e#376\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.4\u003c/h2\u003e\n\u003cp\u003eENHANCEMENTS:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Prefer \u003ccode\u003ego.mod\u003c/code\u003e if Go versions mismatch (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/368\"\u003e#368\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBUG FIXES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate PGP pubkey to replace expired one (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/355\"\u003e#355\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/372\"\u003e#372\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.18.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/349\"\u003e#349\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/363\"\u003e#363\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/369\"\u003e#369\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/360\"\u003e#360\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.1 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/351\"\u003e#351\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/358\"\u003e#358\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/mod from 0.33.0 to 0.35.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/354\"\u003e#354\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/365\"\u003e#365\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eINTERNAL:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ego: bump to 1.25 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/357\"\u003e#357\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/2f46abfd7f9e78d5df1e17d599a6c12098432cee\"\u003e\u003ccode\u003e2f46abf\u003c/code\u003e\u003c/a\u003e Prepare for 0.9.5 release (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/377\"\u003e#377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/78781831051e592c57ee890addd7cddd03578878\"\u003e\u003ccode\u003e7878183\u003c/code\u003e\u003c/a\u003e go.mod: Keep compatibility constraint separate from build (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/376\"\u003e#376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/d5841a31c41f78fabaf2ea59e5816e6616e0f618\"\u003e\u003ccode\u003ed5841a3\u003c/code\u003e\u003c/a\u003e version: cleanup after 0.9.4 release (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/374\"\u003e#374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/13edb5e7b4b6bd1b62729e852fede0e1a5135a39\"\u003e\u003ccode\u003e13edb5e\u003c/code\u003e\u003c/a\u003e Prepare for 0.9.4 release (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/373\"\u003e#373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/8233b7ab4ae1d7e063a52f4f647a67c50af7c03c\"\u003e\u003ccode\u003e8233b7a\u003c/code\u003e\u003c/a\u003e pubkey: Replace two keys with the new one (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/372\"\u003e#372\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/99a174c773ddf5cca96008ee8b3444c88e1af75b\"\u003e\u003ccode\u003e99a174c\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/369\"\u003e#369\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/77c3fbdd247381c5b3ef58020faec881b88a6031\"\u003e\u003ccode\u003e77c3fbd\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 in the github-a...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/dbcbf5ff1d32880435f7abfba5b40c1d645b7ec9\"\u003e\u003ccode\u003edbcbf5f\u003c/code\u003e\u003c/a\u003e build: Prefer go.mod if Go versions mismatch (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/368\"\u003e#368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/ad8a98be88668e65a93d45fdfe3e174229acc6f7\"\u003e\u003ccode\u003ead8a98b\u003c/code\u003e\u003c/a\u003e build(deps): bump golang.org/x/mod from 0.34.0 to 0.35.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/365\"\u003e#365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/9a8707266a2315a7520cab7e488b90996c1dea77\"\u003e\u003ccode\u003e9a87072\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/360\"\u003e#360\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hashicorp/hc-install/compare/v0.9.3...v0.9.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/hashicorp/terraform-exec` from 0.25.0 to 0.25.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hashicorp/terraform-exec/releases\"\u003egithub.com/hashicorp/terraform-exec's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.25.2\u003c/h2\u003e\n\u003cp\u003eNOTES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ego.mod: Lower compatibility constraint from 1.25.8 to 1.25.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/hc-install from 0.9.4 to 0.9.5 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.25.1\u003c/h2\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/zclconf/go-cty from 1.17.0 to 1.18.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/574\"\u003e#574\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/573\"\u003e#573\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/576\"\u003e#576\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/hc-install from 0.9.3 to 0.9.4 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hashicorp/terraform-exec/blob/main/CHANGELOG.md\"\u003egithub.com/hashicorp/terraform-exec's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e0.25.2 (April 29, 2026)\u003c/h1\u003e\n\u003cp\u003eNOTES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ego.mod: Lower compatibility constraint from 1.25.8 to 1.25.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/hc-install from 0.9.4 to 0.9.5 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.25.1 (April 22, 2026)\u003c/h1\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/zclconf/go-cty from 1.17.0 to 1.18.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/574\"\u003e#574\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/573\"\u003e#573\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/576\"\u003e#576\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/hc-install from 0.9.3 to 0.9.4 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/56a0d8b1e947ab88cd0f7a2752495ab90e3f0b96\"\u003e\u003ccode\u003e56a0d8b\u003c/code\u003e\u003c/a\u003e v0.25.2 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/94a3afe0d3d6b0d7495b2287bdc9f6f68ce3414f\"\u003e\u003ccode\u003e94a3afe\u003c/code\u003e\u003c/a\u003e Update Changelog in preparation for 0.25.2 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/586\"\u003e#586\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/ac26db5996e0ed0b4f9a8d1d1b5ce51f4ef960e7\"\u003e\u003ccode\u003eac26db5\u003c/code\u003e\u003c/a\u003e go.mod: Keep compatibility constraint separate from build (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/e856badee6e800dad3f8f2dfdc9c0b25b0e3b938\"\u003e\u003ccode\u003ee856bad\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/hashicorp/hc-install from 0.9.4 to 0.9.5 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/5418a753fa2599ebb4e296dc22d16564e0ff54d8\"\u003e\u003ccode\u003e5418a75\u003c/code\u003e\u003c/a\u003e v0.25.1 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/c5053a65eed7ffbf6ab4aaab14a24dfc22633f92\"\u003e\u003ccode\u003ec5053a6\u003c/code\u003e\u003c/a\u003e Update Changelog in preparation for 0.25.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/580\"\u003e#580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/f5ab655f3dba9ca5f5762b47e9a983818f7bd01d\"\u003e\u003ccode\u003ef5ab655\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/hashicorp/hc-install from 0.9.3 to 0.9.4 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/f49a90a4b6c8af99b43cc3444d70f9d7f779bde7\"\u003e\u003ccode\u003ef49a90a\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/576\"\u003e#576\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/a919c3c63f65c6366f60ad89108834510459f155\"\u003e\u003ccode\u003ea919c3c\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/573\"\u003e#573\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/5b8e8921441672128aca27007f40f286a6152266\"\u003e\u003ccode\u003e5b8e892\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/574\"\u003e#574\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hashicorp/terraform-exec/compare/v0.25.0...v0.25.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/in-toto/in-toto-golang` from 0.10.0 to 0.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/in-toto/in-toto-golang/releases\"\u003egithub.com/in-toto/in-toto-golang's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): bump the all group with 2 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/453\"\u003ein-toto/in-toto-golang#453\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump the all group across 1 directory with 2 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/452\"\u003ein-toto/in-toto-golang#452\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/457\"\u003ein-toto/in-toto-golang#457\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/459\"\u003ein-toto/in-toto-golang#459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ematch: Replace ^ with ! for negation in character classes by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/462\"\u003ein-toto/in-toto-golang#462\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0\"\u003ehttps://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/36d782ffb2ca3adbffcdce1fd971c23319dd4469\"\u003e\u003ccode\u003e36d782f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/462\"\u003e#462\u003c/a\u003e from in-toto/fix-negation-character\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/4a09e3bbc44bc687577b6532e57e8a4abfa5ddf4\"\u003e\u003ccode\u003e4a09e3b\u003c/code\u003e\u003c/a\u003e match: Replace ^ with ! for negation in character classes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/c3302e8bc36e46119f7ae17c07eb879ff3507caa\"\u003e\u003ccode\u003ec3302e8\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/459\"\u003e#459\u003c/a\u003e from in-toto/dependabot/go_modules/github.com/go-jose...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/016e87efbb55c6dd8772ce227002eeb1b6e3f593\"\u003e\u003ccode\u003e016e87e\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/5b9df76e685eaa0a950ea9ba3f4a5561e87e13ad\"\u003e\u003ccode\u003e5b9df76\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/457\"\u003e#457\u003c/a\u003e from in-toto/dependabot/go_modules/google.golang.org/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/595b3fe0a13f481eb0ef898ccaff5e345e492a2f\"\u003e\u003ccode\u003e595b3fe\u003c/code\u003e\u003c/a\u003e chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/e396d248c9cf19f9e144f4e90c476af88742bf35\"\u003e\u003ccode\u003ee396d24\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/452\"\u003e#452\u003c/a\u003e from in-toto/dependabot/github_actions/all-502588e1ca\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/142b779059713332fe5c7856e98f1c564c6d6a09\"\u003e\u003ccode\u003e142b779\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/453\"\u003e#453\u003c/a\u003e from in-toto/dependabot/go_modules/all-d8ef5820aa\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/f741bcc43330554606b813fa0f8fe0c284fcdaea\"\u003e\u003ccode\u003ef741bcc\u003c/code\u003e\u003c/a\u003e chore(deps): bump the all group with 2 updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/c374dc9808137651fe8754eed363ec816cd59d2a\"\u003e\u003ccode\u003ec374dc9\u003c/code\u003e\u003c/a\u003e chore(deps): bump the all group across 1 directory with 2 updates\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/magefile/mage` from 1.17.1 to 1.17.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/magefile/mage/releases\"\u003egithub.com/magefile/mage's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.17.2 - Tab Completion\u003c/h2\u003e\n\u003ch2\u003eWhat's New\u003c/h2\u003e\n\u003cp\u003eTab completion is now available by running \u003ccode\u003emage -install \u0026lt;shell\u0026gt;\u003c/code\u003e where the currently supported shells are zsh, bash, fish, and powershell.  This was a long-requested feature that always made me nervous because it presumes a lot about your local machine... but I guess we're in for it now. Please report any issues you see.... it's rather a hard feature to test. But... it works on my machine? 😬\u003c/p\u003e\n\u003cp\u003eFixed a backtick bug in comments and \u003ccode\u003emage -l\u003c/code\u003e and \u003ccode\u003emage -h\u003c/code\u003e no longer require compiling a binary, so they're way faster now.\u003c/p\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e0953947c1673fd745a51c032aadeb3c63f9f3368 make -h no long require compiling (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/552\"\u003e#552\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e791a5b40794d4bcdd840f7e7523d886ac25b2a96 Support Tab Completion (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/551\"\u003e#551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecff82a6fab83f756a382e841029a537714bd9a02 fix bug \u003ca href=\"https://redirect.github.com/magefile/mage/issues/537\"\u003e#537\u003c/a\u003e - backticks in comments break output (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/544\"\u003e#544\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magefile/mage/commit/0953947c1673fd745a51c032aadeb3c63f9f3368\"\u003e\u003ccode\u003e0953947\u003c/code\u003e\u003c/a\u003e make -h no long require compiling (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/552\"\u003e#552\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magefile/mage/commit/791a5b40794d4bcdd840f7e7523d886ac25b2a96\"\u003e\u003ccode\u003e791a5b4\u003c/code\u003e\u003c/a\u003e Support Tab Completion (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/551\"\u003e#551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magefile/mage/commit/cff82a6fab83f756a382e841029a537714bd9a02\"\u003e\u003ccode\u003ecff82a6\u003c/code\u003e\u003c/a\u003e fix bug \u003ca href=\"https://redirect.github.com/magefile/mage/issues/537\"\u003e#537\u003c/a\u003e - backticks in comments break output (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/544\"\u003e#544\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/magefile/mage/compare/v1.17.1...v1.17.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/mattn/go-shellwords` from 1.0.12 to 1.0.13\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-shellwords/commit/fd1aa6cdc3ae8152427063af41b4c89b9a2c9742\"\u003e\u003ccode\u003efd1aa6c\u003c/code\u003e\u003c/a\u003e Run gofmt: add missing //go:build directives and trailing newlines\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-shellwords/commit/e73986e335d259042797a7b3fdcbf1fd935908aa\"\u003e\u003ccode\u003ee73986e\u003c/code\u003e\u003c/a\u003e Treat bare ')' as syntax error regardless of ParseBacktick\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-shellwords/commit/9a7880332903fa5e4ab1ca3b6a250a1efb8c6a0f\"\u003e\u003ccode\u003e9a78803\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/mattn/go-shellwords/issues/60\"\u003e#60\u003c/a\u003e from scumfrog/security-fix-cve\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-shellwords/commit/b074fa047f436778aa95c2c98617e85b28992e6b\"\u003e\u003ccode\u003eb074fa0\u003c/code\u003e\u003c/a\u003e fix: preserve parser compatibility for unmatched ')' handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-shellwords/commit/735b5e8f670e10e77a40bb2c2bbf618be9b3f9b0\"\u003e\u003ccode\u003e735b5e8\u003c/code\u003e\u003c/a\u003e Implement tests for shellwords parser functionality\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-shellwords/commit/e2951fc82d97921ba06a218a46f683441204d07b\"\u003e\u003ccode\u003ee2951fc\u003c/code\u003e\u003c/a\u003e Fix dollarQuote state management in shellwords.go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-shellwords/commit/551a1d06ad870a8ad2a82043d29da07d7036fa34\"\u003e\u003ccode\u003e551a1d0\u003c/code\u003e\u003c/a\u003e Update CI: Go 1.25/1.26 and latest GitHub Actions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-shellwords/commit/f3bbb6f7f6510c6059561a79e3f105578be4fcce\"\u003e\u003ccode\u003ef3bbb6f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/mattn/go-shellwords/issues/53\"\u003e#53\u003c/a\u003e from ndeloof/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-shellwords/commit/f6737fe5ef6a6aa549c31c4afeaf8e8305ecd408\"\u003e\u003ccode\u003ef6737fe\u003c/code\u003e\u003c/a\u003e parse \u003ccode\u003e\\t\u003c/code\u003e as TAB, not escaped \u003ccode\u003et\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mattn/go-shellwords/compare/v1.0.12...v1.0.13\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/open-policy-agent/opa` from 1.15.2 to 1.16.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-policy-agent/opa/releases\"\u003egithub.com/open-policy-agent/opa's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.16.2\u003c/h2\u003e\n\u003cp\u003eThis release updates the version of Go used to build the OPA binaries and images to 1.26.3;\naddressing \u003ca href=\"https://groups.google.com/g/golang-announce/c/qcCIEXso47M\"\u003ea number of vulnerabilities\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev1.16.1\u003c/h2\u003e\n\u003cp\u003eThis is a patch release addressing a regression in the plugin manager that may cause the service to hang on shutdown (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/8590\"\u003e#8590\u003c/a\u003e).\u003c/p\u003e\n\u003ch2\u003ev1.16.0\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!WARNING]\u003c/p\u003e\n\u003cp\u003eA regression has been found in the plugin manager, which may cause the service to hang on shutdown.\nUsers are advised to go directly to v1.16.1.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThis release contains a mix of new features, performance improvements, and bugfixes. Notably:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNew \u003ccode\u003euri.parse\u003c/code\u003e and \u003ccode\u003euri.is_valid\u003c/code\u003e built-in functions\u003c/li\u003e\n\u003cli\u003eData API Request/Response Metadata\u003c/li\u003e\n\u003cli\u003ePrometheus metrics exported via OTLP\u003c/li\u003e\n\u003cli\u003eFormatter improvements\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003e\u003cem\u003eNOTE:\u003c/em\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eIn v1.15.x, OPA was dropping logs for bundle downloads, \u003ccode\u003eprint()\u003c/code\u003e calls and other plugin-originated logs.\nUsers are advised to update, v1.16.0 fixes this bug in (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/8544\"\u003e#8544\u003c/a\u003e).\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eNew \u003ccode\u003euri.parse\u003c/code\u003e and \u003ccode\u003euri.is_valid\u003c/code\u003e built-in functions (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/h3\u003e\n\u003cp\u003eTwo new \u003ca href=\"https://www.openpolicyagent.org/docs/policy-reference/builtins\"\u003ebuilt-in functions\u003c/a\u003e have been added: \u003ccode\u003euri.parse\u003c/code\u003e for parsing a given URI, and \u003ccode\u003euri.is_valid\u003c/code\u003e for verifying the structure of a given URI.\u003c/p\u003e\n\u003ch4\u003euri.parse\u003c/h4\u003e\n\u003cp\u003eParses a URI and returns an object containing its components according to \u003ca href=\"https://www.rfc-editor.org/rfc/rfc3986.html\"\u003eRFC 3986\u003c/a\u003e. Empty components are omitted.\u003c/p\u003e\n\u003cpre lang=\"rego\"\u003e\u003ccode\u003epackage example\r\n\u003cp\u003etest_uri if {\nuri.parse(\u0026quot;\u003ca href=\"https://example.com:8080/api?q=1#top\"\u003ehttps://example.com:8080/api?q=1#top\u003c/a\u003e\u0026quot;) == {\n\u0026quot;scheme\u0026quot;: \u0026quot;https\u0026quot;,\n\u0026quot;hostname\u0026quot;: \u0026quot;example.com\u0026quot;,\n\u0026quot;port\u0026quot;: \u0026quot;8080\u0026quot;,\n\u0026quot;path\u0026quot;: \u0026quot;/api\u0026quot;,\n\u0026quot;raw_path\u0026quot;: \u0026quot;/api\u0026quot;,\n\u0026quot;raw_query\u0026quot;: \u0026quot;q=1\u0026quot;,\n\u0026quot;fragment\u0026quot;: \u0026quot;top\u0026quot;,\n}\n}\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md\"\u003egithub.com/open-policy-agent/opa's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.16.2\u003c/h2\u003e\n\u003cp\u003eThis release updates the version of Go used to build the OPA binaries and images to 1.26.3;\naddressing \u003ca href=\"https://groups.google.com/g/golang-announce/c/qcCIEXso47M\"\u003ea number of vulnerabilities\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003e1.16.1\u003c/h2\u003e\n\u003cp\u003eThis is a patch release addressing a regression (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/8590\"\u003e#8590\u003c/a\u003e) in the plugin manager that may cause the service to hang on shutdown.\u003c/p\u003e\n\u003ch2\u003e1.16.0\u003c/h2\u003e\n\u003cp\u003eThis release contains a mix of new features, performance improvements, and bugfixes. Notably:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNew \u003ccode\u003euri.parse\u003c/code\u003e and \u003ccode\u003euri.is_valid\u003c/code\u003e built-in functions\u003c/li\u003e\n\u003cli\u003eData API Request/Response Metadata\u003c/li\u003e\n\u003cli\u003ePrometheus metrics exported via OTLP\u003c/li\u003e\n\u003cli\u003eFormatter improvements\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003e\u003cem\u003eNOTE:\u003c/em\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eIn v1.15.x, OPA was dropping logs for bundle downloads, \u003ccode\u003eprint()\u003c/code\u003e calls and other plugin-originated logs.\nUsers are advised to update, v1.16.0 fixes this bug in (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/8544\"\u003e#8544\u003c/a\u003e).\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eNew \u003ccode\u003euri.parse\u003c/code\u003e and \u003ccode\u003euri.is_valid\u003c/code\u003e built-in functions (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/h3\u003e\n\u003cp\u003eTwo new \u003ca href=\"https://www.openpolicyagent.org/docs/policy-reference/builtins\"\u003ebuilt-in functions\u003c/a\u003e have been added: \u003ccode\u003euri.parse\u003c/code\u003e for parsing a given URI, and \u003ccode\u003euri.is_valid\u003c/code\u003e for verifying the structure of a given URI.\u003c/p\u003e\n\u003ch4\u003euri.parse\u003c/h4\u003e\n\u003cp\u003eParses a URI and returns an object containing its components according to \u003ca href=\"https://www.rfc-editor.org/rfc/rfc3986.html\"\u003eRFC 3986\u003c/a\u003e. Empty components are omitted.\u003c/p\u003e\n\u003cpre lang=\"rego\"\u003e\u003ccode\u003epackage example\n\u003cp\u003etest_uri if {\nuri.parse(\u0026quot;\u003ca href=\"https://example.com:8080/api?q=1#top\"\u003ehttps://example.com:8080/api?q=1#top\u003c/a\u003e\u0026quot;) == {\n\u0026quot;scheme\u0026quot;: \u0026quot;https\u0026quot;,\n\u0026quot;hostname\u0026quot;: \u0026quot;example.com\u0026quot;,\n\u0026quot;port\u0026quot;: \u0026quot;8080\u0026quot;,\n\u0026quot;path\u0026quot;: \u0026quot;/api\u0026quot;,\n\u0026quot;raw_path\u0026quot;: \u0026quot;/api\u0026quot;,\n\u0026quot;raw_query\u0026quot;: \u0026quot;q=1\u0026quot;,\n\u0026quot;fragment\u0026quot;: \u0026quot;top\u0026quot;,\n}\n}\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003ch4\u003euri.is_valid\u003c/h4\u003e\n\u003cp\u003eReturns \u003ccode\u003etrue\u003c/code\u003e if the input can be parsed as a URI, \u003ccode\u003efalse\u003c/code\u003e otherwise.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/85f6d990d19094da38e829561813e7da7fbae272\"\u003e\u003ccode\u003e85f6d99\u003c/code\u003e\u003c/a\u003e Prepare v1.16.2 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/1466714b633b056d8e04551f60457fec2f0aad99\"\u003e\u003ccode\u003e1466714\u003c/code\u003e\u003c/a\u003e build: bump go 1.26.2 -\u0026gt; 1.26.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/a72f9fa5e7c5e10a614f44dbe40700f90816d59d\"\u003e\u003ccode\u003ea72f9fa\u003c/code\u003e\u003c/a\u003e Prepare v1.16.1 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/9339812894af83578c840590bf1b9a33da472630\"\u003e\u003ccode\u003e9339812\u003c/code\u003e\u003c/a\u003e plugins: Ensure plugin status functions don't hang after manager is stopped (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/f3adf61f72b67e06115178851e3ffd7e2ef1a0cd\"\u003e\u003ccode\u003ef3adf61\u003c/code\u003e\u003c/a\u003e Release v1.16.0 (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8581\"\u003e#8581\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/c5a446f09d6377bca3dfc6d1c6ddfd7058739205\"\u003e\u003ccode\u003ec5a446f\u003c/code\u003e\u003c/a\u003e Add regression test for comparing objects with array keys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/7bc92c60755f51de00a950edfead4760b2cd8e3a\"\u003e\u003ccode\u003e7bc92c6\u003c/code\u003e\u003c/a\u003e workflow: update benchmarks notebook generation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/882d5a71171899e3f17d2b6ad16a962a587cc3a2\"\u003e\u003ccode\u003e882d5a7\u003c/code\u003e\u003c/a\u003e build(deps): bump the dependencies group across 2 directories with 9 updates ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/b33179c25828d2c0ea0801b95238616396a37ddb\"\u003e\u003ccode\u003eb33179c\u003c/code\u003e\u003c/a\u003e docs: Fix input value type in not undefined example (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8580\"\u003e#8580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/3d602ca6a35a3ddbdc456653c5e4c34de30aea7e\"\u003e\u003ccode\u003e3d602ca\u003c/code\u003e\u003c/a\u003e perf: Add CopyNonGround() methods for Array, Set, and Object (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8323\"\u003e#8323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-policy-agent/opa/compare/v1.15.2...v1.16.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/openvex/go-vex` from 0.2.7 to 0.2.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openvex/go-vex/releases\"\u003egithub.com/openvex/go-vex's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.2.8\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openvex/go-vex/commit/a340b5d7c0a6b2254962d227a36376917790e342\"\u003e\u003ccode\u003ea340b5d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/openvex/go-vex/issues/201\"\u003e#201\u003c/a\u003e from openvex/dependabot/go_modules/all-218c634111\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openvex/go-vex/commit/214cbfcd64d6fd07ab1a9d3869829a46307728e8\"\u003e\u003ccode\u003e214cbfc\u003c/code\u003e\u003c/a\u003e Bump github.com/package-url/packageurl-go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https:...\n\n_Description has been truncated_","html_url":"https://github.com/ScorpionBytes/trivy/pull/36","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ScorpionBytes%2Ftrivy/issues/36","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/36/packages"},{"uuid":"4502368989","node_id":"PR_kwDOCsUTCM7eVJft","number":10717,"state":"closed","title":"chore(deps): bump the common group across 1 directory with 22 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":6,"pull_request":true,"closed_at":"2026-05-27T05:36:39.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-22T11:51:16.000Z","updated_at":"2026-05-27T05:36:41.000Z","time_to_close":409523,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"common","update_count":22,"packages":[{"name":"github.com/Azure/azure-sdk-for-go/sdk/azcore","old_version":"1.21.0","new_version":"1.21.1","repository_url":"https://github.com/Azure/azure-sdk-for-go"},{"name":"github.com/alicebob/miniredis/v2","old_version":"2.37.0","new_version":"2.38.0","repository_url":"https://github.com/alicebob/miniredis"},{"name":"github.com/apparentlymart/go-cidr","old_version":"1.1.0","new_version":"1.1.1","repository_url":"https://github.com/apparentlymart/go-cidr"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.4","new_version":"0.21.5","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/google/jsonschema-go","old_version":"0.4.2","new_version":"0.4.3","repository_url":"https://github.com/google/jsonschema-go"},{"name":"github.com/hashicorp/hc-install","old_version":"0.9.3","new_version":"0.9.5","repository_url":"https://github.com/hashicorp/hc-install"},{"name":"github.com/hashicorp/terraform-exec","old_version":"0.25.0","new_version":"0.25.2","repository_url":"https://github.com/hashicorp/terraform-exec"},{"name":"github.com/magefile/mage","old_version":"1.17.1","new_version":"1.17.2","repository_url":"https://github.com/magefile/mage"},{"name":"github.com/nikolalohinski/gonja/v2","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/nikolalohinski/gonja"},{"name":"github.com/open-policy-agent/opa","old_version":"1.15.2","new_version":"1.16.2","repository_url":"https://github.com/open-policy-agent/opa"},{"name":"github.com/package-url/packageurl-go","old_version":"0.1.5","new_version":"0.1.6","repository_url":"https://github.com/package-url/packageurl-go"},{"name":"github.com/secure-systems-lab/go-securesystemslib","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/secure-systems-lab/go-securesystemslib"},{"name":"golang.org/x/crypto","old_version":"0.50.0","new_version":"0.51.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/mod","old_version":"0.35.0","new_version":"0.36.0","repository_url":"https://github.com/golang/mod"},{"name":"golang.org/x/net","old_version":"0.53.0","new_version":"0.54.0","repository_url":"https://github.com/golang/net"},{"name":"golang.org/x/tools","old_version":"0.44.0","new_version":"0.45.0","repository_url":"https://github.com/golang/tools"},{"name":"golang.org/x/vuln","old_version":"1.1.4","new_version":"1.3.0","repository_url":"https://github.com/golang/vuln"},{"name":"gopkg.in/ini.v1","old_version":"1.67.1","new_version":"1.67.2"},{"name":"modernc.org/sqlite","old_version":"1.48.2","new_version":"1.50.1"}],"path":null,"ecosystem":"go"},"body":"Bumps the common group with 19 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.21.0` | `1.21.1` |\n| [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) | `2.37.0` | `2.38.0` |\n| [github.com/apparentlymart/go-cidr](https://github.com/apparentlymart/go-cidr) | `1.1.0` | `1.1.1` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.4` | `0.21.5` |\n| [github.com/google/jsonschema-go](https://github.com/google/jsonschema-go) | `0.4.2` | `0.4.3` |\n| [github.com/hashicorp/hc-install](https://github.com/hashicorp/hc-install) | `0.9.3` | `0.9.5` |\n| [github.com/hashicorp/terraform-exec](https://github.com/hashicorp/terraform-exec) | `0.25.0` | `0.25.2` |\n| [github.com/magefile/mage](https://github.com/magefile/mage) | `1.17.1` | `1.17.2` |\n| [github.com/nikolalohinski/gonja/v2](https://github.com/nikolalohinski/gonja) | `2.7.0` | `2.8.0` |\n| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `1.15.2` | `1.16.2` |\n| [github.com/package-url/packageurl-go](https://github.com/package-url/packageurl-go) | `0.1.5` | `0.1.6` |\n| [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib) | `0.10.0` | `0.11.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.50.0` | `0.51.0` |\n| [golang.org/x/mod](https://github.com/golang/mod) | `0.35.0` | `0.36.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.53.0` | `0.54.0` |\n| [golang.org/x/tools](https://github.com/golang/tools) | `0.44.0` | `0.45.0` |\n| [golang.org/x/vuln](https://github.com/golang/vuln) | `1.1.4` | `1.3.0` |\n| gopkg.in/ini.v1 | `1.67.1` | `1.67.2` |\n| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.48.2` | `1.50.1` |\n\n\nUpdates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.21.0 to 1.21.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/releases\"\u003egithub.com/Azure/azure-sdk-for-go/sdk/azcore's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esdk/azcore/v1.21.1\u003c/h2\u003e\n\u003ch2\u003e1.21.1 (2026-04-16)\u003c/h2\u003e\n\u003ch3\u003eBugs Fixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue in \u003ccode\u003eResponseError.Error()\u003c/code\u003e where the request URL path was being logged unescaped.\u003c/li\u003e\n\u003cli\u003eRedact query parameters when logging errors.\u003c/li\u003e\n\u003cli\u003eFor \u003ccode\u003eruntime.JoinPaths\u003c/code\u003e, don't add a slash between root and paths when \u003ccode\u003epaths\u003c/code\u003e starts with \u003ccode\u003e?\u003c/code\u003e (query string).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgraded to Go 1.25.0.\u003c/li\u003e\n\u003cli\u003eUpgraded dependencies.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/63e4ba18204b0df554e330df8f85662e653e67ab\"\u003e\u003ccode\u003e63e4ba1\u003c/code\u003e\u003c/a\u003e Bump release date for azcore (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26613\"\u003e#26613\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/fa0312174d17ff4cb7cb0118fa80de07409841c2\"\u003e\u003ccode\u003efa03121\u003c/code\u003e\u003c/a\u003e remove bypass local dns (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26609\"\u003e#26609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/c47f9a60dd1e9be6943ff0d6a5666a0ac09f6cfa\"\u003e\u003ccode\u003ec47f9a6\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 15153 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26607\"\u003e#26607\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/88b8b5b38ecebb929a2e302df054fed1d68618b8\"\u003e\u003ccode\u003e88b8b5b\u003c/code\u003e\u003c/a\u003e Changelog for v2.2.0 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26567\"\u003e#26567\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/72ca19ae2b8b4514c4f48a5ff33495b03c08afd0\"\u003e\u003ccode\u003e72ca19a\u003c/code\u003e\u003c/a\u003e Storage STG 101 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26568\"\u003e#26568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/b64baf56c6b168d258b2a0678290ac5f9ab97938\"\u003e\u003ccode\u003eb64baf5\u003c/code\u003e\u003c/a\u003e Sync .github directory with azure-sdk-tools repository (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26600\"\u003e#26600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/ecd64dd6500a04da22107925c3ba9fbe8e636f2c\"\u003e\u003ccode\u003eecd64dd\u003c/code\u003e\u003c/a\u003e Prep azcore@v1.21.1 for release (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26596\"\u003e#26596\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/1d02f204d0146ffd7d13d5585bf3766e53c32cc5\"\u003e\u003ccode\u003e1d02f20\u003c/code\u003e\u003c/a\u003e Update copilot code review instructions and migration breaking change mitigat...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/f6e9ce3212cc9d654d349778f19065eb5d849197\"\u003e\u003ccode\u003ef6e9ce3\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 14973 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26531\"\u003e#26531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/d5a3baf11e0b743a4009efb8e84cbaee335fc0eb\"\u003e\u003ccode\u003ed5a3baf\u003c/code\u003e\u003c/a\u003e Update CODEOWNERS to remove one owner from Custom Providers (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26588\"\u003e#26588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.21.0...sdk/azcore/v1.21.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/alicebob/miniredis/v2` from 2.37.0 to 2.38.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/alicebob/miniredis/releases\"\u003egithub.com/alicebob/miniredis/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eDELEX and fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eXADD TRIM (thanks \u003ca href=\"https://github.com/evan-choi\"\u003e\u003ccode\u003e@​evan-choi\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate XINFO STREAM (thanks \u003ca href=\"https://github.com/TomBailey167\"\u003e\u003ccode\u003e@​TomBailey167\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003elua fix (thanks \u003ca href=\"https://github.com/infastin\"\u003e\u003ccode\u003e@​infastin\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epartial support for DELEX\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md\"\u003egithub.com/alicebob/miniredis/v2's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.38.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eXADD TRIM (thanks \u003ca href=\"https://github.com/evan-choi\"\u003e\u003ccode\u003e@​evan-choi\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate XINFO STREAM (thanks \u003ca href=\"https://github.com/TomBailey167\"\u003e\u003ccode\u003e@​TomBailey167\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003elua fix (thanks \u003ca href=\"https://github.com/infastin\"\u003e\u003ccode\u003e@​infastin\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epartial support for DELEX\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/d67bfae4c370e8451561165eca6ddc50f056f083\"\u003e\u003ccode\u003ed67bfae\u003c/code\u003e\u003c/a\u003e update changelog for v2.38.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/2b1abd81e1c58fb6d440b4637287d3ee09f7f66a\"\u003e\u003ccode\u003e2b1abd8\u003c/code\u003e\u003c/a\u003e DELEX (partly) (\u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/442\"\u003e#442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/452dd373d138f7ad858dd6e25e2a92753f83498e\"\u003e\u003ccode\u003e452dd37\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/440\"\u003e#440\u003c/a\u003e from infastin/server-alias\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/b5b8ec2cfde407552ea028514409599dbd5e1600\"\u003e\u003ccode\u003eb5b8ec2\u003c/code\u003e\u003c/a\u003e feat: add 'server' alias to 'redis' in lua scripts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/ecc4af14f2444ea1a57d040185781fe197bdfc9d\"\u003e\u003ccode\u003eecc4af1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/439\"\u003e#439\u003c/a\u003e from TomBailey167/xinfo-stream-last-generated-id\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/4a2a33e841b359a2569fe9a35d6d46414bf40aec\"\u003e\u003ccode\u003e4a2a33e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/435\"\u003e#435\u003c/a\u003e from evan-choi/fix/xadd-equals-trim-modifier\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/d6261eff59117ccea7387f3a608caa1006b1adef\"\u003e\u003ccode\u003ed6261ef\u003c/code\u003e\u003c/a\u003e feat: add last-generated-id to XINFO STREAM response\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/f4d8aa342425de1b740a6f22a7dd230f83e3712a\"\u003e\u003ccode\u003ef4d8aa3\u003c/code\u003e\u003c/a\u003e fix: accept = trim modifier in xadd\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/alicebob/miniredis/compare/v2.37.0...v2.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/apparentlymart/go-cidr` from 1.1.0 to 1.1.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apparentlymart/go-cidr/commit/5730b04c510e662932577c247c0b194f97fb101f\"\u003e\u003ccode\u003e5730b04\u003c/code\u003e\u003c/a\u003e SubnetBig returns error for negative subnet number\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apparentlymart/go-cidr/commit/fab7bb4b664d0c94dceb4a54fab3500ffb2a2977\"\u003e\u003ccode\u003efab7bb4\u003c/code\u003e\u003c/a\u003e HostBig: Don't crash for out-of-range hostnum greater than max uint64\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apparentlymart/go-cidr/commit/e4ff799e34b9b5c2040704a175c01a6a1df7b56c\"\u003e\u003ccode\u003ee4ff799\u003c/code\u003e\u003c/a\u003e Update doc comment spacing for newer gofmt behavior\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/apparentlymart/go-cidr/compare/v1.1.0...v1.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.4 to 0.21.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2254\"\u003egoogle/go-containerregistry#2254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate to Go 1.26.2 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2255\"\u003egoogle/go-containerregistry#2255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2257\"\u003egoogle/go-containerregistry#2257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 in the go-deps group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2260\"\u003egoogle/go-containerregistry#2260\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.4...v0.21.5\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.4...v0.21.5\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/5b80281da727dae218e1697ab8529b631b9efa64\"\u003e\u003ccode\u003e5b80281\u003c/code\u003e\u003c/a\u003e build(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 in the go-deps gro...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/b99bca24a8df1bd88afc1d299d4c0ebba0555cf8\"\u003e\u003ccode\u003eb99bca2\u003c/code\u003e\u003c/a\u003e build(deps): bump aws-actions/configure-aws-credentials (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2257\"\u003e#2257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/f8be1d442e6fc85c791e4aa50155aa8806ca8312\"\u003e\u003ccode\u003ef8be1d4\u003c/code\u003e\u003c/a\u003e update to Go 1.26.2 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2255\"\u003e#2255\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/87ad88b4a000e418add5c1bb4ae1da908cbc3b85\"\u003e\u003ccode\u003e87ad88b\u003c/code\u003e\u003c/a\u003e Bump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2254\"\u003e#2254\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.4...v0.21.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/jsonschema-go` from 0.4.2 to 0.4.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/jsonschema-go/releases\"\u003egithub.com/google/jsonschema-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.4.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eimprove anyOf errors by \u003ca href=\"https://github.com/jba\"\u003e\u003ccode\u003e@​jba\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/jsonschema-go/pull/61\"\u003egoogle/jsonschema-go#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: infer - support map with non-string key type by \u003ca href=\"https://github.com/rafaeljusto\"\u003e\u003ccode\u003e@​rafaeljusto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/jsonschema-go/pull/70\"\u003egoogle/jsonschema-go#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/jsonschema-go/compare/v0.4.2...0.4.3\"\u003ehttps://github.com/google/jsonschema-go/compare/v0.4.2...0.4.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.4.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eimprove anyOf errors by \u003ca href=\"https://github.com/jba\"\u003e\u003ccode\u003e@​jba\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/jsonschema-go/pull/61\"\u003egoogle/jsonschema-go#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: infer - support map with non-string key type by \u003ca href=\"https://github.com/rafaeljusto\"\u003e\u003ccode\u003e@​rafaeljusto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/jsonschema-go/pull/70\"\u003egoogle/jsonschema-go#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/jsonschema-go/compare/v0.4.2...v0.4.3\"\u003ehttps://github.com/google/jsonschema-go/compare/v0.4.2...v0.4.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/jsonschema-go/commit/8c4ab4f02ef64dcea5502e47a6113e8292944087\"\u003e\u003ccode\u003e8c4ab4f\u003c/code\u003e\u003c/a\u003e fix: infer - support map with non-string key type (\u003ca href=\"https://redirect.github.com/google/jsonschema-go/issues/70\"\u003e#70\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/jsonschema-go/commit/8bd57428bbbea55d718267fa5b20bbb59b4f9fbd\"\u003e\u003ccode\u003e8bd5742\u003c/code\u003e\u003c/a\u003e improve anyOf errors (\u003ca href=\"https://redirect.github.com/google/jsonschema-go/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/google/jsonschema-go/compare/v0.4.2...0.4.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/hashicorp/hc-install` from 0.9.3 to 0.9.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hashicorp/hc-install/releases\"\u003egithub.com/hashicorp/hc-install's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ego.mod: Lower compatibility constraint from 1.25.8 to 1.25.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/376\"\u003e#376\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.4\u003c/h2\u003e\n\u003cp\u003eENHANCEMENTS:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Prefer \u003ccode\u003ego.mod\u003c/code\u003e if Go versions mismatch (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/368\"\u003e#368\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBUG FIXES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate PGP pubkey to replace expired one (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/355\"\u003e#355\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/372\"\u003e#372\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.18.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/349\"\u003e#349\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/363\"\u003e#363\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/369\"\u003e#369\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/360\"\u003e#360\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.1 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/351\"\u003e#351\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/358\"\u003e#358\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/mod from 0.33.0 to 0.35.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/354\"\u003e#354\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/365\"\u003e#365\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eINTERNAL:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ego: bump to 1.25 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/357\"\u003e#357\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/2f46abfd7f9e78d5df1e17d599a6c12098432cee\"\u003e\u003ccode\u003e2f46abf\u003c/code\u003e\u003c/a\u003e Prepare for 0.9.5 release (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/377\"\u003e#377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/78781831051e592c57ee890addd7cddd03578878\"\u003e\u003ccode\u003e7878183\u003c/code\u003e\u003c/a\u003e go.mod: Keep compatibility constraint separate from build (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/376\"\u003e#376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/d5841a31c41f78fabaf2ea59e5816e6616e0f618\"\u003e\u003ccode\u003ed5841a3\u003c/code\u003e\u003c/a\u003e version: cleanup after 0.9.4 release (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/374\"\u003e#374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/13edb5e7b4b6bd1b62729e852fede0e1a5135a39\"\u003e\u003ccode\u003e13edb5e\u003c/code\u003e\u003c/a\u003e Prepare for 0.9.4 release (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/373\"\u003e#373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/8233b7ab4ae1d7e063a52f4f647a67c50af7c03c\"\u003e\u003ccode\u003e8233b7a\u003c/code\u003e\u003c/a\u003e pubkey: Replace two keys with the new one (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/372\"\u003e#372\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/99a174c773ddf5cca96008ee8b3444c88e1af75b\"\u003e\u003ccode\u003e99a174c\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/369\"\u003e#369\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/77c3fbdd247381c5b3ef58020faec881b88a6031\"\u003e\u003ccode\u003e77c3fbd\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 in the github-a...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/dbcbf5ff1d32880435f7abfba5b40c1d645b7ec9\"\u003e\u003ccode\u003edbcbf5f\u003c/code\u003e\u003c/a\u003e build: Prefer go.mod if Go versions mismatch (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/368\"\u003e#368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/ad8a98be88668e65a93d45fdfe3e174229acc6f7\"\u003e\u003ccode\u003ead8a98b\u003c/code\u003e\u003c/a\u003e build(deps): bump golang.org/x/mod from 0.34.0 to 0.35.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/365\"\u003e#365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/9a8707266a2315a7520cab7e488b90996c1dea77\"\u003e\u003ccode\u003e9a87072\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/360\"\u003e#360\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hashicorp/hc-install/compare/v0.9.3...v0.9.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/hashicorp/terraform-exec` from 0.25.0 to 0.25.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hashicorp/terraform-exec/releases\"\u003egithub.com/hashicorp/terraform-exec's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.25.2\u003c/h2\u003e\n\u003cp\u003eNOTES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ego.mod: Lower compatibility constraint from 1.25.8 to 1.25.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/hc-install from 0.9.4 to 0.9.5 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.25.1\u003c/h2\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/zclconf/go-cty from 1.17.0 to 1.18.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/574\"\u003e#574\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/573\"\u003e#573\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/576\"\u003e#576\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/hc-install from 0.9.3 to 0.9.4 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hashicorp/terraform-exec/blob/main/CHANGELOG.md\"\u003egithub.com/hashicorp/terraform-exec's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e0.25.2 (April 29, 2026)\u003c/h1\u003e\n\u003cp\u003eNOTES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ego.mod: Lower compatibility constraint from 1.25.8 to 1.25.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/hc-install from 0.9.4 to 0.9.5 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.25.1 (April 22, 2026)\u003c/h1\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/zclconf/go-cty from 1.17.0 to 1.18.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/574\"\u003e#574\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/573\"\u003e#573\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/576\"\u003e#576\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/hc-install from 0.9.3 to 0.9.4 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/56a0d8b1e947ab88cd0f7a2752495ab90e3f0b96\"\u003e\u003ccode\u003e56a0d8b\u003c/code\u003e\u003c/a\u003e v0.25.2 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/94a3afe0d3d6b0d7495b2287bdc9f6f68ce3414f\"\u003e\u003ccode\u003e94a3afe\u003c/code\u003e\u003c/a\u003e Update Changelog in preparation for 0.25.2 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/586\"\u003e#586\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/ac26db5996e0ed0b4f9a8d1d1b5ce51f4ef960e7\"\u003e\u003ccode\u003eac26db5\u003c/code\u003e\u003c/a\u003e go.mod: Keep compatibility constraint separate from build (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/e856badee6e800dad3f8f2dfdc9c0b25b0e3b938\"\u003e\u003ccode\u003ee856bad\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/hashicorp/hc-install from 0.9.4 to 0.9.5 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/5418a753fa2599ebb4e296dc22d16564e0ff54d8\"\u003e\u003ccode\u003e5418a75\u003c/code\u003e\u003c/a\u003e v0.25.1 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/c5053a65eed7ffbf6ab4aaab14a24dfc22633f92\"\u003e\u003ccode\u003ec5053a6\u003c/code\u003e\u003c/a\u003e Update Changelog in preparation for 0.25.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/580\"\u003e#580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/f5ab655f3dba9ca5f5762b47e9a983818f7bd01d\"\u003e\u003ccode\u003ef5ab655\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/hashicorp/hc-install from 0.9.3 to 0.9.4 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/f49a90a4b6c8af99b43cc3444d70f9d7f779bde7\"\u003e\u003ccode\u003ef49a90a\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/576\"\u003e#576\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/a919c3c63f65c6366f60ad89108834510459f155\"\u003e\u003ccode\u003ea919c3c\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/573\"\u003e#573\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/5b8e8921441672128aca27007f40f286a6152266\"\u003e\u003ccode\u003e5b8e892\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/574\"\u003e#574\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hashicorp/terraform-exec/compare/v0.25.0...v0.25.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/magefile/mage` from 1.17.1 to 1.17.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/magefile/mage/releases\"\u003egithub.com/magefile/mage's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.17.2 - Tab Completion\u003c/h2\u003e\n\u003ch2\u003eWhat's New\u003c/h2\u003e\n\u003cp\u003eTab completion is now available by running \u003ccode\u003emage -install \u0026lt;shell\u0026gt;\u003c/code\u003e where the currently supported shells are zsh, bash, fish, and powershell.  This was a long-requested feature that always made me nervous because it presumes a lot about your local machine... but I guess we're in for it now. Please report any issues you see.... it's rather a hard feature to test. But... it works on my machine? 😬\u003c/p\u003e\n\u003cp\u003eFixed a backtick bug in comments and \u003ccode\u003emage -l\u003c/code\u003e and \u003ccode\u003emage -h\u003c/code\u003e no longer require compiling a binary, so they're way faster now.\u003c/p\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e0953947c1673fd745a51c032aadeb3c63f9f3368 make -h no long require compiling (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/552\"\u003e#552\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e791a5b40794d4bcdd840f7e7523d886ac25b2a96 Support Tab Completion (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/551\"\u003e#551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecff82a6fab83f756a382e841029a537714bd9a02 fix bug \u003ca href=\"https://redirect.github.com/magefile/mage/issues/537\"\u003e#537\u003c/a\u003e - backticks in comments break output (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/544\"\u003e#544\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magefile/mage/commit/0953947c1673fd745a51c032aadeb3c63f9f3368\"\u003e\u003ccode\u003e0953947\u003c/code\u003e\u003c/a\u003e make -h no long require compiling (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/552\"\u003e#552\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magefile/mage/commit/791a5b40794d4bcdd840f7e7523d886ac25b2a96\"\u003e\u003ccode\u003e791a5b4\u003c/code\u003e\u003c/a\u003e Support Tab Completion (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/551\"\u003e#551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magefile/mage/commit/cff82a6fab83f756a382e841029a537714bd9a02\"\u003e\u003ccode\u003ecff82a6\u003c/code\u003e\u003c/a\u003e fix bug \u003ca href=\"https://redirect.github.com/magefile/mage/issues/537\"\u003e#537\u003c/a\u003e - backticks in comments break output (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/544\"\u003e#544\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/magefile/mage/compare/v1.17.1...v1.17.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/nikolalohinski/gonja/v2` from 2.7.0 to 2.8.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/b27ea3867188beb94e839a8c6b142379e91b6e67\"\u003e\u003ccode\u003eb27ea38\u003c/code\u003e\u003c/a\u003e fix(tests): versions test failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/2ff7da8b664f8de5ec4bb2bb22d8f0b37eb9e595\"\u003e\u003ccode\u003e2ff7da8\u003c/code\u003e\u003c/a\u003e release(v2.8.0): update global gonja.version variable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/66f0f38596474917cf39e355b2a42719935a8416\"\u003e\u003ccode\u003e66f0f38\u003c/code\u003e\u003c/a\u003e Fix legacy urlize fixture trailing newline\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/65fbe7c2da83fee00601357e71698da2c5e6d473\"\u003e\u003ccode\u003e65fbe7c\u003c/code\u003e\u003c/a\u003e Address filter review feedback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/4a4fc1d1a25ffbe1fabed79d1e7016d7d2ef853a\"\u003e\u003ccode\u003e4a4fc1d\u003c/code\u003e\u003c/a\u003e Restore JSON-style pprint output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/07d2519be6690659f9096e2eb26e696b154e6539\"\u003e\u003ccode\u003e07d2519\u003c/code\u003e\u003c/a\u003e Add scalar and text filter compatibility fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/88fdeb8996685f15929d260e0984d8489ce8fbea\"\u003e\u003ccode\u003e88fdeb8\u003c/code\u003e\u003c/a\u003e Add JSON and URL filter compatibility fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/46485f8c45cdc1d1409ee6417856ded1410feea1\"\u003e\u003ccode\u003e46485f8\u003c/code\u003e\u003c/a\u003e Add collection filter compatibility fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/4f84240b27dba45ab2745ac307dd460bcdf4933a\"\u003e\u003ccode\u003e4f84240\u003c/code\u003e\u003c/a\u003e Fast-scan plain text in lexData using strings.IndexByte\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/7b8a1a1f362f28618fcaff8711dbca839220d32b\"\u003e\u003ccode\u003e7b8a1a1\u003c/code\u003e\u003c/a\u003e Optimize parser type checks with unrolled containsType\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nikolalohinski/gonja/compare/v2.7.0...v2.8.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/open-policy-agent/opa` from 1.15.2 to 1.16.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-policy-agent/opa/releases\"\u003egithub.com/open-policy-agent/opa's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.16.2\u003c/h2\u003e\n\u003cp\u003eThis release updates the version of Go used to build the OPA binaries and images to 1.26.3;\naddressing \u003ca href=\"https://groups.google.com/g/golang-announce/c/qcCIEXso47M\"\u003ea number of vulnerabilities\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev1.16.1\u003c/h2\u003e\n\u003cp\u003eThis is a patch release addressing a regression in the plugin manager that may cause the service to hang on shutdown (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/8590\"\u003e#8590\u003c/a\u003e).\u003c/p\u003e\n\u003ch2\u003ev1.16.0\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!WARNING]\u003c/p\u003e\n\u003cp\u003eA regression has been found in the plugin manager, which may cause the service to hang on shutdown.\nUsers are advised to go directly to v1.16.1.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThis release contains a mix of new features, performance improvements, and bugfixes. Notably:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNew \u003ccode\u003euri.parse\u003c/code\u003e and \u003ccode\u003euri.is_valid\u003c/code\u003e built-in functions\u003c/li\u003e\n\u003cli\u003eData API Request/Response Metadata\u003c/li\u003e\n\u003cli\u003ePrometheus metrics exported via OTLP\u003c/li\u003e\n\u003cli\u003eFormatter improvements\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003e\u003cem\u003eNOTE:\u003c/em\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eIn v1.15.x, OPA was dropping logs for bundle downloads, \u003ccode\u003eprint()\u003c/code\u003e calls and other plugin-originated logs.\nUsers are advised to update, v1.16.0 fixes this bug in (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/8544\"\u003e#8544\u003c/a\u003e).\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eNew \u003ccode\u003euri.parse\u003c/code\u003e and \u003ccode\u003euri.is_valid\u003c/code\u003e built-in functions (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/h3\u003e\n\u003cp\u003eTwo new \u003ca href=\"https://www.openpolicyagent.org/docs/policy-reference/builtins\"\u003ebuilt-in functions\u003c/a\u003e have been added: \u003ccode\u003euri.parse\u003c/code\u003e for parsing a given URI, and \u003ccode\u003euri.is_valid\u003c/code\u003e for verifying the structure of a given URI.\u003c/p\u003e\n\u003ch4\u003euri.parse\u003c/h4\u003e\n\u003cp\u003eParses a URI and returns an object containing its components according to \u003ca href=\"https://www.rfc-editor.org/rfc/rfc3986.html\"\u003eRFC 3986\u003c/a\u003e. Empty components are omitted.\u003c/p\u003e\n\u003cpre lang=\"rego\"\u003e\u003ccode\u003epackage example\r\n\u003cp\u003etest_uri if {\nuri.parse(\u0026quot;\u003ca href=\"https://example.com:8080/api?q=1#top\"\u003ehttps://example.com:8080/api?q=1#top\u003c/a\u003e\u0026quot;) == {\n\u0026quot;scheme\u0026quot;: \u0026quot;https\u0026quot;,\n\u0026quot;hostname\u0026quot;: \u0026quot;example.com\u0026quot;,\n\u0026quot;port\u0026quot;: \u0026quot;8080\u0026quot;,\n\u0026quot;path\u0026quot;: \u0026quot;/api\u0026quot;,\n\u0026quot;raw_path\u0026quot;: \u0026quot;/api\u0026quot;,\n\u0026quot;raw_query\u0026quot;: \u0026quot;q=1\u0026quot;,\n\u0026quot;fragment\u0026quot;: \u0026quot;top\u0026quot;,\n}\n}\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md\"\u003egithub.com/open-policy-agent/opa's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.16.2\u003c/h2\u003e\n\u003cp\u003eThis release updates the version of Go used to build the OPA binaries and images to 1.26.3;\naddressing \u003ca href=\"https://groups.google.com/g/golang-announce/c/qcCIEXso47M\"\u003ea number of vulnerabilities\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003e1.16.1\u003c/h2\u003e\n\u003cp\u003eThis is a patch release addressing a regression (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/8590\"\u003e#8590\u003c/a\u003e) in the plugin manager that may cause the service to hang on shutdown.\u003c/p\u003e\n\u003ch2\u003e1.16.0\u003c/h2\u003e\n\u003cp\u003eThis release contains a mix of new features, performance improvements, and bugfixes. Notably:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNew \u003ccode\u003euri.parse\u003c/code\u003e and \u003ccode\u003euri.is_valid\u003c/code\u003e built-in functions\u003c/li\u003e\n\u003cli\u003eData API Request/Response Metadata\u003c/li\u003e\n\u003cli\u003ePrometheus metrics exported via OTLP\u003c/li\u003e\n\u003cli\u003eFormatter improvements\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003e\u003cem\u003eNOTE:\u003c/em\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eIn v1.15.x, OPA was dropping logs for bundle downloads, \u003ccode\u003eprint()\u003c/code\u003e calls and other plugin-originated logs.\nUsers are advised to update, v1.16.0 fixes this bug in (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/8544\"\u003e#8544\u003c/a\u003e).\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eNew \u003ccode\u003euri.parse\u003c/code\u003e and \u003ccode\u003euri.is_valid\u003c/code\u003e built-in functions (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/h3\u003e\n\u003cp\u003eTwo new \u003ca href=\"https://www.openpolicyagent.org/docs/policy-reference/builtins\"\u003ebuilt-in functions\u003c/a\u003e have been added: \u003ccode\u003euri.parse\u003c/code\u003e for parsing a given URI, and \u003ccode\u003euri.is_valid\u003c/code\u003e for verifying the structure of a given URI.\u003c/p\u003e\n\u003ch4\u003euri.parse\u003c/h4\u003e\n\u003cp\u003eParses a URI and returns an object containing its components according to \u003ca href=\"https://www.rfc-editor.org/rfc/rfc3986.html\"\u003eRFC 3986\u003c/a\u003e. Empty components are omitted.\u003c/p\u003e\n\u003cpre lang=\"rego\"\u003e\u003ccode\u003epackage example\n\u003cp\u003etest_uri if {\nuri.parse(\u0026quot;\u003ca href=\"https://example.com:8080/api?q=1#top\"\u003ehttps://example.com:8080/api?q=1#top\u003c/a\u003e\u0026quot;) == {\n\u0026quot;scheme\u0026quot;: \u0026quot;https\u0026quot;,\n\u0026quot;hostname\u0026quot;: \u0026quot;example.com\u0026quot;,\n\u0026quot;port\u0026quot;: \u0026quot;8080\u0026quot;,\n\u0026quot;path\u0026quot;: \u0026quot;/api\u0026quot;,\n\u0026quot;raw_path\u0026quot;: \u0026quot;/api\u0026quot;,\n\u0026quot;raw_query\u0026quot;: \u0026quot;q=1\u0026quot;,\n\u0026quot;fragment\u0026quot;: \u0026quot;top\u0026quot;,\n}\n}\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003ch4\u003euri.is_valid\u003c/h4\u003e\n\u003cp\u003eReturns \u003ccode\u003etrue\u003c/code\u003e if the input can be parsed as a URI, \u003ccode\u003efalse\u003c/code\u003e otherwise.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/85f6d990d19094da38e829561813e7da7fbae272\"\u003e\u003ccode\u003e85f6d99\u003c/code\u003e\u003c/a\u003e Prepare v1.16.2 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/1466714b633b056d8e04551f60457fec2f0aad99\"\u003e\u003ccode\u003e1466714\u003c/code\u003e\u003c/a\u003e build: bump go 1.26.2 -\u0026gt; 1.26.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/a72f9fa5e7c5e10a614f44dbe40700f90816d59d\"\u003e\u003ccode\u003ea72f9fa\u003c/code\u003e\u003c/a\u003e Prepare v1.16.1 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/9339812894af83578c840590bf1b9a33da472630\"\u003e\u003ccode\u003e9339812\u003c/code\u003e\u003c/a\u003e plugins: Ensure plugin status functions don't hang after manager is stopped (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/f3adf61f72b67e06115178851e3ffd7e2ef1a0cd\"\u003e\u003ccode\u003ef3adf61\u003c/code\u003e\u003c/a\u003e Release v1.16.0 (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8581\"\u003e#8581\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/c5a446f09d6377bca3dfc6d1c6ddfd7058739205\"\u003e\u003ccode\u003ec5a446f\u003c/code\u003e\u003c/a\u003e Add regression test for comparing objects with array keys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/7bc92c60755f51de00a950edfead4760b2cd8e3a\"\u003e\u003ccode\u003e7bc92c6\u003c/code\u003e\u003c/a\u003e workflow: update benchmarks notebook generation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/882d5a71171899e3f17d2b6ad16a962a587cc3a2\"\u003e\u003ccode\u003e882d5a7\u003c/code\u003e\u003c/a\u003e build(deps): bump the dependencies group across 2 directories with 9 updates ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/b33179c25828d2c0ea0801b95238616396a37ddb\"\u003e\u003ccode\u003eb33179c\u003c/code\u003e\u003c/a\u003e docs: Fix input value type in not undefined example (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8580\"\u003e#8580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/3d602ca6a35a3ddbdc456653c5e4c34de30aea7e\"\u003e\u003ccode\u003e3d602ca\u003c/code\u003e\u003c/a\u003e perf: Add CopyNonGround() methods for Array, Set, and Object (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8323\"\u003e#8323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-policy-agent/opa/compare/v1.15.2...v1.16.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/package-url/packageurl-go` from 0.1.5 to 0.1.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/package-url/packageurl-go/releases\"\u003egithub.com/package-url/packageurl-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.1.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize parsing and serialization performance by \u003ca href=\"https://github.com/andrew\"\u003e\u003ccode\u003e@​andrew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/package-url/packageurl-go/pull/86\"\u003epackage-url/packageurl-go#86\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andrew\"\u003e\u003ccode\u003e@​andrew\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/package-url/packageurl-go/pull/86\"\u003epackage-url/packageurl-go#86\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/package-url/packageurl-go/compare/v0.1.5...v0.1.6\"\u003ehttps://github.com/package-url/packageurl-go/compare/v0.1.5...v0.1.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/package-url/packageurl-go/commit/a74324e4e5d01ba49accd9f2f327e22206c7920d\"\u003e\u003ccode\u003ea74324e\u003c/code\u003e\u003c/a\u003e Optimize parsing and serialization performance (\u003ca href=\"https://redirect.github.com/package-url/packageurl-go/issues/86\"\u003e#86\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/package-url/packageurl-go/commit/b41f387d16428dd565a73fe18800629c8ad0338f\"\u003e\u003ccode\u003eb41f387\u003c/code\u003e\u003c/a\u003e Address review feedback and add chrome-extension validation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/package-url/packageurl-go/commit/a546cc5887560ce7b304fe8d7d95e0e2e4407a7f\"\u003e\u003ccode\u003ea546cc5\u003c/code\u003e\u003c/a\u003e Optimize parsing and serialization performance\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/package-url/packageurl-go/compare/v0.1.5...v0.1.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/secure-systems-lab/go-securesystemslib` from 0.10.0 to 0.11.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/1ce0aca0c8640e2b119fb8de53fb193759085c6a\"\u003e\u003ccode\u003e1ce0aca\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/secure-systems-lab/go-securesystemslib/issues/153\"\u003e#153\u003c/a\u003e from secure-systems-lab/context-tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/1fc070d988cb9264d424da4e149912f9b87948c1\"\u003e\u003ccode\u003e1fc070d\u003c/code\u003e\u003c/a\u003e tests: Change context.TODO to use t.Context\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/6c7f8fcef4691632d0380af75be8d13d78ef58a4\"\u003e\u003ccode\u003e6c7f8fc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/secure-systems-lab/go-securesystemslib/issues/151\"\u003e#151\u003c/a\u003e from bobcallaway/mem_optimization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/51ce6b129c32e238ce02244fc0e93400063cd84d\"\u003e\u003ccode\u003e51ce6b1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/secure-systems-lab/go-securesystemslib/issues/152\"\u003e#152\u003c/a\u003e from secure-systems-lab/dependabot/go_modules/golang....\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/d97f44dcdec28520f385e68dc568a689ce238385\"\u003e\u003ccode\u003ed97f44d\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/e06bffc452b39d9a142602af3464162900088221\"\u003e\u003ccode\u003ee06bffc\u003c/code\u003e\u003c/a\u003e reduce memory allocation of methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/08e050e38149e64cbeb02e10f713a7a4fbf3f460\"\u003e\u003ccode\u003e08e050e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/secure-systems-lab/go-securesystemslib/issues/150\"\u003e#150\u003c/a\u003e from secure-systems-lab/dependabot/github_actions/act...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/95341f8fc046949f354229c4cceb1c8669345ae4\"\u003e\u003ccode\u003e95341f8\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-go from 6.3.0 to 6.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/3999a0d0babd64336bb7977400732402b2b0be7a\"\u003e\u003ccode\u003e3999a0d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/secure-systems-lab/go-securesystemslib/issues/149\"\u003e#149\u003c/a\u003e from secure-systems-lab/dependabot/go_modules/golang....\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/f1b55fe068d377a83f3297a9bd75e4e28bb6e025\"\u003e\u003ccode\u003ef1b55fe\u003c/code\u003e\u003c/a\u003e ci: Bump Go\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/compare/v0.10.0...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/zclconf/go-cty` from 1.18.0 to 1.18.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/zclconf/go-cty/blob/main/CHANGELOG.md\"\u003egithub.com/zclconf/go-cty's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.18.1 (April 16, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estdlib: \u003ccode\u003eContainsFunc\u003c/code\u003e now allows its second argument to be null, to test whether the given collection contains any null elements.\u003c/li\u003e\n\u003cli\u003estdlib: \u003ccode\u003eMergeFunc\u003c/code\u003e no longer panics if all of its arguments are null values of the same object type with at least one attribute.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zclconf/go-cty/commit/dcb5db6917182028fab2819852b7cdc72e2b7ec9\"\u003e\u003ccode\u003edcb5db6\u003c/code\u003e\u003c/a\u003e v1.18.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zclconf/go-cty/commit/77d87c2b43bb0f181d82f3749fda4b65daebc528\"\u003e\u003ccode\u003e77d87c2\u003c/code\u003e\u003c/a\u003e stdlib: no MergeFunc crash with null values of object type\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zclconf/go-cty/commit/6854da9fb3b4bdbda7e55322e1eee4f74f1f6cf7\"\u003e\u003ccode\u003e6854da9\u003c/code\u003e\u003c/a\u003e stdlib: ContainsFunc allows testing for presence of null value\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zclconf/go-cty/commit/ddb73de64ecfb6f9ca579526607d18630301649a\"\u003e\u003ccode\u003eddb73de\u003c/code\u003e\u003c/a\u003e Begin development of v1.18.1\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/zclconf/go-cty/compare/v1.18.0...v1.18.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.50.0 to 0.51.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b8a14a8d65f88c0c79c139171f1354c69a6cdb8a\"\u003e\u003ccode\u003eb8a14a8\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/9d9d5078968ddb8a279092c665a24e7de4178778\"\u003e\u003ccode\u003e9d9d507\u003c/code\u003e\u003c/a\u003e x509roots/fallback/bundle: fix bundle test with Go 1.27+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/fd0b90d21f9ab4b5dd398e9526b570bfea86e370\"\u003e\u003ccode\u003efd0b90d\u003c/code\u003e\u003c/a\u003e acme: include Problem in OrderError.Error\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b9e53593a6073e6a786c49e9ad27956a9b77e54e\"\u003e\u003ccode\u003eb9e5359\u003c/code\u003e\u003c/a\u003e pbkdf2: turn into a wrapper for crypto/pbkdf2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/cc0e4fc1d49127130b0d00612a2eeed2ab745d40\"\u003e\u003ccode\u003ecc0e4fc\u003c/code\u003e\u003c/a\u003e hkdf: forward Extract to the standard library\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a8e9237a216b050e1b11e041863825104a6811db\"\u003e\u003ccode\u003ea8e9237\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/crypto/compare/v0.50.0...v0.51.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/mod` from 0.35.0 to 0.36.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/643da9ba74f1165d8cae1505d453b3de3cf21b7b\"\u003e\u003ccode\u003e643da9b\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/ccc3cdf529d1eee2a832437eb1b85240044d21cb\"\u003e\u003ccode\u003eccc3cdf\u003c/code\u003e\u003c/a\u003e zip: include 'but content has correct sum' note in TestVCS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/ab3031803214705d2c9f1102318b083e7086a155\"\u003e\u003ccode\u003eab30318\u003c/code\u003e\u003c/a\u003e zip: update zip hashes for new flate compression\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/mod/compare/v0.35.0...v0.36.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.53.0 to 0.54.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/b138e06246cb323f2f380c2b7f7dd91f581dd56b\"\u003e\u003ccode\u003eb138e06\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/689f70a42abd350f3a1aaa70b0d13eb9543d927a\"\u003e\u003ccode\u003e689f70a\u003c/code\u003e\u003c/a\u003e quic: fix wrong final size being used for RESET_STREAM frame\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/208f306b2f0fd008b388bee2c2644be279778e94\"\u003e\u003ccode\u003e208f306\u003c/code\u003e\u003c/a\u003e http3: increase handshake timeout\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/49810da71b9026da9e0d028a6ad8c7730c52d9c4\"\u003e\u003ccode\u003e49810da\u003c/code\u003e\u003c/a\u003e http2: enable net/http wrapping when go \u0026gt;= 1.27\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/5e11a5ab891c117eda83b4304d60dd13286c1c76\"\u003e\u003ccode\u003e5e11a5a\u003c/code\u003e\u003c/a\u003e quic: fix data race in streamForFrame\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/8c63081cd380ea768db5651941614b73472160ff\"\u003e\u003ccode\u003e8c63081\u003c/code\u003e\u003c/a\u003e http2: use empty Transport rather than DefaultTransport in http2wrap\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/fc7b466ca49cb204039630533ece4fc557eb35cd\"\u003e\u003ccode\u003efc7b466\u003c/code\u003e\u003c/a\u003e http2: add http2wrap test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/15c2cb1875fd727313dc4de909b3ee149422fbe2\"\u003e\u003ccode\u003e15c2cb1\u003c/code\u003e\u003c/a\u003e http2: avoid overflowing 32-bit int when http2wrap enabled\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/64651885c2f2d745d77af2d7af2edbf568c179af\"\u003e\u003ccode\u003e6465188\u003c/code\u003e\u003c/a\u003e http2: add wrapped Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/72f419a894cb0597dd5b6bcf119086bf2af41231\"\u003e\u003ccode\u003e72f419a\u003c/code\u003e\u003c/a\u003e http2: add wrapped ClientConn\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.53.0...v0.54.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/term` from 0.42.0 to 0.43.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/term/commit/3c3e4855f7d2eb06c3e48933554add9ec6b599b5\"\u003e\u003ccode\u003e3c3e485\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/term/compare/v0.42.0...v0.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/text` from 0.36.0 to 0.37.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/text/commit/3ef517e623a4bfc08d6457f87d73afda7af7d8e1\"\u003e\u003ccode\u003e3ef517e\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/text/compare/v0.36.0...v0.37.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/tools` from 0.44.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/2aabba0e4be44cc8f254ced118a7156d04bbc9f3\"\u003e\u003ccode\u003e2aabba0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/ef989b3f45baff2849e87f4a70d9a189be5a6959\"\u003e\u003ccode\u003eef989b3\u003c/code\u003e\u003c/a\u003e go/types/internal/play: show Info.Instances[Ident]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/21d44f2f2bb3f3a8e06e35523d14bb70cb275c89\"\u003e\u003ccode\u003e21d44f2\u003c/code\u003e\u003c/a\u003e go/analysis/passes/inline: document skipping of TestF-\u0026gt;F calls\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/ec83c2190d81a18bbd472cc1498575b168017e5d\"\u003e\u003ccode\u003eec83c21\u003c/code\u003e\u003c/a\u003e go/analysis/passes/modernize: minmax: only remove exact userdefined\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/5625353d39195f1deb9261c5ee983abbdc4a15ca\"\u003e\u003ccode\u003e5625353\u003c/code\u003e\u003c/a\u003e go/analysis/passes/modernize: improve value variable name generation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/15a3bd5d4ce0651f5cf43ea125db2110c67b257b\"\u003e\u003ccode\u003e15a3bd5\u003c/code\u003e\u003c/a\u003e gopls/internal/analysis/errorsastype: imporove example clarity\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/cd57ef8f8dd7a30ef500bfe1eef0779223cbdfc3\"\u003e\u003ccode\u003ecd57ef8\u003c/code\u003e\u003c/a\u003e go/packages: include dependency errors when CompiledGoFiles is missing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/053fdbcef55e8f977d8decc0fde2920c61eb5374\"\u003e\u003ccode\u003e053fdbc\u003c/code\u003e\u003c/a\u003e go/analysis/passes/modernize: minmax: fix pure operands only\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/bf84681c4a0185014c089cffd533e22bbeffcb49\"\u003e\u003ccode\u003ebf84681\u003c/code\u003e\u003c/a\u003e go/analysis/passes/errorsas: add example of invalid errors.As use\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/23921d1decfe5da40309ac183353c8cb38b03dfa\"\u003e\u003ccode\u003e23921d1\u003c/code\u003e\u003c/a\u003e gopls: add errorsastype analyzer\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/tools/compare/v0.44.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/vuln` from 1.1.4 to 1.3.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/0782b76014f15f24e22a438f30f308df42899ba1\"\u003e\u003ccode\u003e0782b76\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/5499630db5f896778f084a8b3720910426de5c53\"\u003e\u003ccode\u003e5499630\u003c/code\u003e\u003c/a\u003e internal/scan: exit after printing version info\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/a8075323febce35764797d66a61fa9e19a8d9797\"\u003e\u003ccode\u003ea807532\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/4ac723d6af9abfcea6ef5a6d7aec65e68b8738dd\"\u003e\u003ccode\u003e4ac723d\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/a9cf566971d512048614ae269b160fe47a1fceb3\"\u003e\u003ccode\u003ea9cf566\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.25.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/930824204a6bb5ef98fee43315ce187ccd0b7cc1\"\u003e\u003ccode\u003e9308242\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/a0d18c9179e09b31b78e3b54532c9c9a9071451e\"\u003e\u003ccode\u003ea0d18c9\u003c/code\u003e\u003c/a\u003e vuln: add codereview.cfg\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/3276fb946d41e82354ca78d7d89e532f7dd00e8f\"\u003e\u003ccode\u003e3276fb9\u003c/code\u003e\u003c/a\u003e cmd/govulncheck: remove gotypesalias.go (not needed anymore)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/ff5c0046886fb6c339f4b0c00ce6bfb119f00006\"\u003e\u003ccode\u003eff5c004\u003c/code\u003e\u003c/a\u003e internal/scan: improve error message for govulncheck\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/6698294903005319aedf73447119a0fe4d74952d\"\u003e\u003ccode\u003e6698294\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/vuln/compare/v1.1.4...v1.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `gopkg.in/ini.v1` from 1.67.1 to 1.67.2\n\nUpdates `modernc.org/sqlite` from 1.48.2 to 1.50.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md\"\u003emodernc.org/sqlite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e2026-05-21 v1.51.2:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eFileControl.FileControlDataVersion\u003c/code\u003e, a wrapper around \u003ccode\u003eSQLITE_FCNTL_DATA_VERSION\u003c/code\u003e for observing pager-cache data-version changes, including those made on the same connection. Useful as a primitive for application-level cache invalidation.\u003c/li\u003e\n\u003cli\u003eExposed via the idiomatic \u003ccode\u003edatabase/sql\u003c/code\u003e escape hatch \u003ccode\u003e(*sql.Conn).Raw()\u003c/code\u003e, consistent with the existing \u003ccode\u003eFileControlPersistWAL\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/115\"\u003e#115\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/115\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/115\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-05-10 v1.50.1:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to \u003ca href=\"https://sqlite.org/releaselog/3_53_1.html\"\u003eSQLite 3.53.1\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-04-24 v1.50.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to sqlite-vec \u003ca href=\"https://github.com/asg017/sqlite-vec/releases/tag/v0.1.9\"\u003ev0.1.9\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eIntroduce \u003ccode\u003eColumnInfo\u003c/code\u003e, enabling dynamic query builders and ORMs to retrieve underlying SQLite C-API metadata (\u003ccode\u003eOriginName\u003c/code\u003e, \u003ccode\u003eTableName\u003c/code\u003e, \u003ccode\u003eDatabaseName\u003c/code\u003e, and \u003ccode\u003eDeclType\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003eThis feature is exposed via the idiomatic \u003ccode\u003edatabase/sql\u003c/code\u003e escape hatch \u003ccode\u003e(*sql.Conn).Raw()\u003c/code\u003e, avoiding custom statement handles and keeping the standard library workflow intact.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/113\"\u003e#113\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/113\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/113\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-04-17 v1.49.0: Upgrade to \u003ca href=\"https://sqlite.org/releaselog/3_53_0.html\"\u003eSQLite 3.53.0\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e-DSQLITE_ENABLE_DBPAGE_VTAB\u003c/code\u003e to the transpilation. See \u003ca href=\"https://www.sqlite.org/dbpage.html\"\u003e\u0026quot;The SQLITE_DBPAGE Virtual Table\u0026quot;\u003c/a\u003e for details.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-04-06 v1.48.2:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFix ABI mapping mismatch in the pre-update hook trampoline that caused silent truncation of large 64-bit RowIDs.\u003c/li\u003e\n\u003cli\u003eEnsure the Go trampoline signature correctly aligns with the public \u003ccode\u003esqlite3_preupdate_hook\u003c/code\u003e C API, preventing data corruption for high-entropy keys (e.g., Snowflake IDs).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/98\"\u003e#98\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/98\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/98\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix the memory allocator used in \u003ccode\u003e(*conn).Deserialize\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eReplace \u003ccode\u003etls.Alloc\u003c/code\u003e with \u003ccode\u003esqlite3_malloc64\u003c/code\u003e to prevent internal allocator corruption. This ensures the buffer is safely owned by SQLite, which may resize or free it due to the \u003ccode\u003eSQLITE_DESERIALIZE_RESIZEABLE\u003c/code\u003e and \u003ccode\u003eSQLITE_DESERIALIZE_FREEONCLOSE\u003c/code\u003e flags.\u003c/li\u003e\n\u003cli\u003ePrevent a memory leak by properly freeing the allocated buffer if fetching the main database name fails before handing ownership to SQLite.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/100\"\u003e#100\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/100\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/100\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003e(*conn).Deserialize\u003c/code\u003e to explicitly reject \u003ccode\u003enil\u003c/code\u003e or empty byte slices.\u003c/li\u003e\n\u003cli\u003ePrevent silent database disconnection and connection pool corruption caused by SQLite's default behavior when \u003ccode\u003esqlite3_deserialize\u003c/code\u003e receives a 0-length buffer.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/101\"\u003e#101\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/101\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/101\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003ecommitHookTrampoline\u003c/code\u003e and \u003ccode\u003erollbackHookTrampoline\u003c/code\u003e signatures by removing the unused \u003ccode\u003epCsr\u003c/code\u003e parameter.\u003c/li\u003e\n\u003cli\u003eAligns internal hook callbacks accurately with the underlying SQLite C API, cleaning up the code to prevent potential future confusion or bugs.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/102\"\u003e#102\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/102\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/102\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003echeckptr\u003c/code\u003e instrumentation failures during \u003ccode\u003ego test -race\u003c/code\u003e when registering and using virtual tables (\u003ccode\u003evtab\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003eAllocate \u003ccode\u003esqlite3_module\u003c/code\u003e instances using the C allocator (\u003ccode\u003elibc.Xcalloc\u003c/code\u003e) instead of the Go heap. This ensures transpiled C code can safely perform pointer operations on the struct without tripping Go's pointer checks.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/103\"\u003e#103\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/103\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/103\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix data race on \u003ccode\u003emutex.id\u003c/code\u003e in the \u003ccode\u003emutexTry\u003c/code\u003e non-recursive path.\u003c/li\u003e\n\u003cli\u003eEnsure consistent atomic writes (\u003ccode\u003eatomic.StoreInt32\u003c/code\u003e) to prevent data races with atomic loads in \u003ccode\u003emutexHeld\u003c/code\u003e and \u003ccode\u003emutexNotheld\u003c/code\u003e during concurrent execution.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/104\"\u003e#104\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/104\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/104\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix resource leak in \u003ccode\u003e(*Backup).Commit\u003c/code\u003e where the destination connection was not closed on error.\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003edstConn\u003c/code\u003e is properly closed when \u003ccode\u003esqlite3_backup_finish\u003c/code\u003e fails, preventing file descriptor, TLS, and memory leaks.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/105\"\u003e#105\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/105\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/105\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eExec\u003c/code\u003e to fully drain rows when encountering \u003ccode\u003eSQLITE_ROW\u003c/code\u003e, preventing silent data loss in DML statements.\u003c/li\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eExec\u003c/code\u003e aborted after the first row, meaning \u003ccode\u003eINSERT\u003c/code\u003e, \u003ccode\u003eUPDATE\u003c/code\u003e, or \u003ccode\u003eDELETE\u003c/code\u003e statements with a \u003ccode\u003eRETURNING\u003c/code\u003e clause would fail to process subsequent rows. The execution path now correctly loops until \u003ccode\u003eSQLITE_DONE\u003c/code\u003e and properly respects context cancellations during the drain loop, fully aligning with native C \u003ccode\u003esqlite3_exec\u003c/code\u003e semantics.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/106\"\u003e#106\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/106\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/106\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;Shadowed err value (stmt.go)\u0026quot;.\u003c/li\u003e\n\u003cli\u003eSee [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/249\"\u003e#249\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/work_items/249\"\u003ehttps://gitlab.com/cznic/sqlite/-/work_items/249\u003c/a\u003e), thanks Emrecan BATI!\u003c/li\u003e\n\u003cli\u003eFix silent omission of virtual table savepoint callbacks by correctly setting the sqlite3_module version.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/107\"\u003e#107\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/107\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/107\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003evfsRead\u003c/code\u003e to properly handle partial and fragmented reads from \u003ccode\u003eio.Reader\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/b95ed459e063439b1b7f58db051f168832bb14b6\"\u003e\u003ccode\u003eb95ed45\u003c/code\u003e\u003c/a\u003e upgrade to SQLite 3.53.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/e220cc9b51f0ce842490194538f3c45daf2572b3\"\u003e\u003ccode\u003ee220cc9\u003c/code\u003e\u003c/a\u003e CHANGELOG.md: add !113\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/a58d5e552a64d5082bdf1488db35f27ce7536c1d\"\u003e\u003ccode\u003ea58d5e5\u003c/code\u003e\u003c/a\u003e Merge branch 'columns' into 'master'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/119d8b1c8514ceadf0a5a4aa8a9c94514b739377\"\u003e\u003ccode\u003e119d8b1\u003c/code\u003e\u003c/a\u003e add ColumnInfo, for inspecting query columns\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/c353a4f762ca821c6ebc6a17097e19e9dcec5306\"\u003e\u003ccode\u003ec353a4f\u003c/code\u003e\u003c/a\u003e upgrade to sqlite-vec v0.1.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/fe575e48232629112cce2e8bea368358e35c1616\"\u003e\u003ccode\u003efe575e4\u003c/code\u003e\u003c/a\u003e doc.go: update SQLite version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/3ccb9cab30387f2192593c4acb635e58fd6bbd5e\"\u003e\u003ccode\u003e3ccb9ca\u003c/code\u003e\u003c/a\u003e upgrade to SQLite 3.53.0\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://gitlab.com/cznic/sqlite/compare/v1.48.2...v1.50.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/aquasecurity/trivy/pull/10717","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/aquasecurity%2Ftrivy/issues/10717","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/10717/packages"},{"uuid":"4492101499","node_id":"PR_kwDOGZIwWs7dzxQF","number":529,"state":"closed","title":"chore(deps): Bump the production-dependencies group across 1 directory with 5 updates","user":"dependabot[bot]","labels":["dco-signoff: yes","release-note-none","lgtm","size/XXL"],"assignees":["jcanocan"],"locked":false,"comments_count":4,"pull_request":true,"closed_at":"2026-05-22T05:54:17.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-21T05:53:32.000Z","updated_at":"2026-05-22T05:54:19.000Z","time_to_close":86445,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): Bump","group_name":"production-dependencies","update_count":5,"packages":[{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"go.podman.io/image/v5","old_version":"5.39.2","new_version":"5.40.0","repository_url":"https://github.com/containers/container-libs"},{"name":"github.com/cyphar/filepath-securejoin","old_version":"0.5.1","new_version":"0.6.1"},{"name":"github.com/docker/cli","old_version":"29.5.0+incompatible","new_version":"29.5.1+incompatible"},{"name":"go.podman.io/storage","old_version":"1.62.0","new_version":"1.63.0"}],"path":null,"ecosystem":"go"},"body":"Bumps the production-dependencies group with 2 updates in the / directory: [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) and [go.podman.io/image/v5](https://github.com/containers/container-libs).\n\nUpdates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.podman.io/image/v5` from 5.39.2 to 5.40.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/3c2fa91fe10032693063faac91470a84523dd26a\"\u003e\u003ccode\u003e3c2fa91\u003c/code\u003e\u003c/a\u003e Bump to c/image v5.40\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/f871d195072be221537d1d7d5fd969c9a3ac9f17\"\u003e\u003ccode\u003ef871d19\u003c/code\u003e\u003c/a\u003e Bump to c/storage v1.63.0 in c/image, c/image to v5.40\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/550f62f274dbfc1523ade003f1e9384fff829f17\"\u003e\u003ccode\u003e550f62f\u003c/code\u003e\u003c/a\u003e Bump c/storage to v1.63.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/4fa186482657d75f3a09beec74090040527bc8d6\"\u003e\u003ccode\u003e4fa1864\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/816\"\u003e#816\u003c/a\u003e from alexlarsson/fix-composefs-verity\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/32704ef886484dac01d986ed459da3f632a03ce8\"\u003e\u003ccode\u003e32704ef\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/855\"\u003e#855\u003c/a\u003e from containers/renovate/github.com-docker-cli-29.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/98ff31ac75a0d58ceb4a37ff80a7be1d6d2e5ced\"\u003e\u003ccode\u003e98ff31a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/853\"\u003e#853\u003c/a\u003e from mheon/containers_conf_documentation_removals\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/3e1614595cda86809c27a8be66bbbe9e65c383ba\"\u003e\u003ccode\u003e3e16145\u003c/code\u003e\u003c/a\u003e Update module github.com/docker/cli to v29.5.1+incompatible\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/206fff340ff068bd07193556a8a254c1b59b826f\"\u003e\u003ccode\u003e206fff3\u003c/code\u003e\u003c/a\u003e Manpage: remove slirp4netns/boltdb references\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/3592bda57d2498defdf73f2d53f899267cda74d7\"\u003e\u003ccode\u003e3592bda\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/852\"\u003e#852\u003c/a\u003e from containers/renovate/github.com-onsi-gomega-1.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/f04d9c8daa467c4cae240b3ec62059df87c0c726\"\u003e\u003ccode\u003ef04d9c8\u003c/code\u003e\u003c/a\u003e Update module github.com/onsi/gomega to v1.41.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/containers/container-libs/compare/image/v5.39.2...image/v5.40.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cyphar/filepath-securejoin` from 0.5.1 to 0.6.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cyphar/filepath-securejoin/releases\"\u003egithub.com/cyphar/filepath-securejoin's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.6.0 -- \u0026quot;By the Power of Greyskull!\u0026quot;\u003c/h2\u003e\n\u003cp\u003eWhile quite small code-wise, this release marks a very key point in the\ndevelopment of filepath-securejoin.\u003c/p\u003e\n\u003cp\u003efilepath-securejoin was originally intended (back in 2017) to simply be a\nsingle-purpose library that would take some common code used in container\nruntimes (specifically, Docker's \u003ccode\u003eFollowSymlinksInScope\u003c/code\u003e) and make it more\ngeneral-purpose (with the eventual goals of it ending up in the Go stdlib).\u003c/p\u003e\n\u003cp\u003eOf course, I quickly discovered that this problem was actually far more\ncomplicated to solve when dealing with racing attackers, which lead to me\ndeveloping \u003ccode\u003eopenat2(2)\u003c/code\u003e and \u003ca href=\"https://github.com/cyphar/libpathrs\"\u003elibpathrs\u003c/a\u003e. I had originally planned for\nlibpathrs to completely replace filepath-securejoin \u0026quot;once it was ready\u0026quot; but in\nthe interim we needed to fix several race attacks in runc as part of security\nadvisories. Obviously we couldn't require the usage of a pre-0.1 Rust library\nin runc so it was necessary to port bits of libpathrs into filepath-securejoin.\n(Ironically the first prototypes of libpathrs were originally written in Go and\nthen rewritten to Rust, so the code in filepath-securejoin is actually Go code\nthat was rewritten to Rust then re-rewritten to Go.)\u003c/p\u003e\n\u003cp\u003eIt then became clear that pure-Go libraries will likely not be willing to\nrequire CGo for all of their builds, so it was necessary to accept that\nfilepath-securejoin will need to stay. As such, in v0.5.0 we provided more\npure-Go implementations of features from libpathrs but moved them into\n\u003ccode\u003epathrs-lite\u003c/code\u003e subpackage to clarify what purpose these helpers serve.\u003c/p\u003e\n\u003cp\u003eThis release finally closes the loop and makes it so that pathrs-lite can\ntransparently use libpathrs (via a \u003ccode\u003elibpathrs\u003c/code\u003e build-tag). This means that\nupstream libraries can use the pure Go version if they prefer, but downstreams\n(either downstream library users or even downstream distributions) are able to\nmigrate to libpathrs for all usages of pathrs-lite in an entire Go binary.\u003c/p\u003e\n\u003cp\u003eI should make it clear that I do not plan to port the rest of libpathrs to Go,\nas I do not wish to maintain two copies of the same codebase. pathrs-lite\nalready provides the core essentials necessary to operate on paths safely for\nmost modern systems. Users who want additional hardening or more ergonomic APIs\nare free to use \u003ca href=\"https://cyphar.com/go-pathrs\"\u003e\u003ccode\u003ecyphar.com/go-pathrs\u003c/code\u003e\u003c/a\u003e (libpathrs's Go bindings).\u003c/p\u003e\n\u003ch3\u003eBreaking\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe deprecated \u003ccode\u003eMkdirAll\u003c/code\u003e, \u003ccode\u003eMkdirAllHandle\u003c/code\u003e, \u003ccode\u003eOpenInRoot\u003c/code\u003e, \u003ccode\u003eOpenatInRoot\u003c/code\u003e and\n\u003ccode\u003eReopen\u003c/code\u003e wrappers have been removed. Please switch to using \u003ccode\u003epathrs-lite\u003c/code\u003e\ndirectly.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003epathrs-lite\u003c/code\u003e now has support for using \u003ca href=\"https://github.com/cyphar/libpathrs\"\u003elibpathrs\u003c/a\u003e as a backend.\nThis is opt-in and can be enabled at build time with the \u003ccode\u003elibpathrs\u003c/code\u003e build\ntag. The intention is to allow for downstream libraries and other projects to\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md\"\u003egithub.com/cyphar/filepath-securejoin's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[0.6.1] - 2025-11-19\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003eAt last up jumped the cunning spider, and fiercely held her fast.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eOur logic for deciding whether to use \u003ccode\u003eopenat2(2)\u003c/code\u003e or fallback to an \u003ccode\u003eO_PATH\u003c/code\u003e\nresolver would cache the result to avoid doing needless test runs of\n\u003ccode\u003eopenat2(2)\u003c/code\u003e. However, this causes issues when \u003ccode\u003epathrs-lite\u003c/code\u003e is being used by\na program that applies new seccomp-bpf filters onto itself -- if the filter\ndenies \u003ccode\u003eopenat2(2)\u003c/code\u003e then we would return that error rather than falling back\nto the \u003ccode\u003eO_PATH\u003c/code\u003e resolver. To resolve this issue, we no longer cache the\nresult if \u003ccode\u003eopenat2(2)\u003c/code\u003e was successful, only if there was an error.\u003c/li\u003e\n\u003cli\u003eA file descriptor leak in our \u003ccode\u003eopenat2\u003c/code\u003e wrapper (when doing the necessary\n\u003ccode\u003edup\u003c/code\u003e for \u003ccode\u003eRESOLVE_IN_ROOT\u003c/code\u003e) has been removed.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[0.5.2] - 2025-11-19\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u0026quot;Will you walk into my parlour?\u0026quot; said a spider to a fly.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eOur logic for deciding whether to use \u003ccode\u003eopenat2(2)\u003c/code\u003e or fallback to an \u003ccode\u003eO_PATH\u003c/code\u003e\nresolver would cache the result to avoid doing needless test runs of\n\u003ccode\u003eopenat2(2)\u003c/code\u003e. However, this causes issues when \u003ccode\u003epathrs-lite\u003c/code\u003e is being used by\na program that applies new seccomp-bpf filters onto itself -- if the filter\ndenies \u003ccode\u003eopenat2(2)\u003c/code\u003e then we would return that error rather than falling back\nto the \u003ccode\u003eO_PATH\u003c/code\u003e resolver. To resolve this issue, we no longer cache the\nresult if \u003ccode\u003eopenat2(2)\u003c/code\u003e was successful, only if there was an error.\u003c/li\u003e\n\u003cli\u003eA file descriptor leak in our \u003ccode\u003eopenat2\u003c/code\u003e wrapper (when doing the necessary\n\u003ccode\u003edup\u003c/code\u003e for \u003ccode\u003eRESOLVE_IN_ROOT\u003c/code\u003e) has been removed.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[0.6.0] - 2025-11-03\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003eBy the Power of Greyskull!\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eBreaking\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe deprecated \u003ccode\u003eMkdirAll\u003c/code\u003e, \u003ccode\u003eMkdirAllHandle\u003c/code\u003e, \u003ccode\u003eOpenInRoot\u003c/code\u003e, \u003ccode\u003eOpenatInRoot\u003c/code\u003e and\n\u003ccode\u003eReopen\u003c/code\u003e wrappers have been removed. Please switch to using \u003ccode\u003epathrs-lite\u003c/code\u003e\ndirectly.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003epathrs-lite\u003c/code\u003e now has support for using libpathrs as a backend. This is\nopt-in and can be enabled at build time with the \u003ccode\u003elibpathrs\u003c/code\u003e build tag. The\nintention is to allow for downstream libraries and other projects to make use\nof the pure-Go \u003ccode\u003egithub.com/cyphar/filepath-securejoin/pathrs-lite\u003c/code\u003e package\nand distributors can then opt-in to using \u003ccode\u003elibpathrs\u003c/code\u003e for the entire binary\nif they wish.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/9c4135bad38a4e2cda5220216000130d25b2e190\"\u003e\u003ccode\u003e9c4135b\u003c/code\u003e\u003c/a\u003e VERSION: release 0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/d952bef93f1c4090a004702917447140be865496\"\u003e\u003ccode\u003ed952bef\u003c/code\u003e\u003c/a\u003e merge v0.5.x branch into main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/deb72a4cc1a3a8a8a0833e868dfd5bd906e8e859\"\u003e\u003ccode\u003edeb72a4\u003c/code\u003e\u003c/a\u003e CHANGELOG: fix unreleased links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/336bf8f2d45b5bfc059e3530c18d0a8c2ba0022f\"\u003e\u003ccode\u003e336bf8f\u003c/code\u003e\u003c/a\u003e merge \u003ca href=\"https://redirect.github.com/cyphar/filepath-securejoin/issues/87\"\u003e#87\u003c/a\u003e into cyphar/filepath-securejoin:v0.5.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/23c6e211ca42a85f757c961e1e0f352942a15d2b\"\u003e\u003ccode\u003e23c6e21\u003c/code\u003e\u003c/a\u003e VERSION: back to development\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/6311ca883bbb2958561c6fef4f3a8e10bcb9a418\"\u003e\u003ccode\u003e6311ca8\u003c/code\u003e\u003c/a\u003e VERSION: release v0.5.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/91da803696f3cb85b11073d3c7075e0c7e3e3745\"\u003e\u003ccode\u003e91da803\u003c/code\u003e\u003c/a\u003e merge \u003ca href=\"https://redirect.github.com/cyphar/filepath-securejoin/issues/86\"\u003e#86\u003c/a\u003e into cyphar/filepath-securejoin:v0.5.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/4dbce7c85c563dcdae467b2427a85de12f707d41\"\u003e\u003ccode\u003e4dbce7c\u003c/code\u003e\u003c/a\u003e gopathrs: close the fd after dup in openat2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/1eaadd6f23dd2bb710b1030728d3475995df8fc1\"\u003e\u003ccode\u003e1eaadd6\u003c/code\u003e\u003c/a\u003e merge \u003ca href=\"https://redirect.github.com/cyphar/filepath-securejoin/issues/85\"\u003e#85\u003c/a\u003e into cyphar/filepath-securejoin:main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/c1c2a539afea30fcfdd8982c33c72e4f5dce2cbf\"\u003e\u003ccode\u003ec1c2a53\u003c/code\u003e\u003c/a\u003e gopathrs: close the fd after dup in openat2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cyphar/filepath-securejoin/compare/v0.5.1...v0.6.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/cli` from 29.5.0+incompatible to 29.5.1+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2518b52d948a0cbee071d394c03c86a3005636ba\"\u003e\u003ccode\u003e2518b52\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6991\"\u003e#6991\u003c/a\u003e from mickael-docker/docs-clarify-authz\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9f18a0a70c9228f5892594c6b56425b8bed1899f\"\u003e\u003ccode\u003e9f18a0a\u003c/code\u003e\u003c/a\u003e docs: clarify authz content type\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2944fd1daa5d54315ab8fcd874ea9cb6199c6117\"\u003e\u003ccode\u003e2944fd1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6989\"\u003e#6989\u003c/a\u003e from thaJeztah/bump_version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/c41489ac3901885bb3891aef9cfe65ca69dc4580\"\u003e\u003ccode\u003ec41489a\u003c/code\u003e\u003c/a\u003e bump VERSION to v29.5.1-dev\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/docker/cli/compare/v29.5.0...v29.5.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.podman.io/storage` from 1.62.0 to 1.63.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/550f62f274dbfc1523ade003f1e9384fff829f17\"\u003e\u003ccode\u003e550f62f\u003c/code\u003e\u003c/a\u003e Bump c/storage to v1.63.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/4fa186482657d75f3a09beec74090040527bc8d6\"\u003e\u003ccode\u003e4fa1864\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/816\"\u003e#816\u003c/a\u003e from alexlarsson/fix-composefs-verity\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/32704ef886484dac01d986ed459da3f632a03ce8\"\u003e\u003ccode\u003e32704ef\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/855\"\u003e#855\u003c/a\u003e from containers/renovate/github.com-docker-cli-29.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/98ff31ac75a0d58ceb4a37ff80a7be1d6d2e5ced\"\u003e\u003ccode\u003e98ff31a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/853\"\u003e#853\u003c/a\u003e from mheon/containers_conf_documentation_removals\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/3e1614595cda86809c27a8be66bbbe9e65c383ba\"\u003e\u003ccode\u003e3e16145\u003c/code\u003e\u003c/a\u003e Update module github.com/docker/cli to v29.5.1+incompatible\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/206fff340ff068bd07193556a8a254c1b59b826f\"\u003e\u003ccode\u003e206fff3\u003c/code\u003e\u003c/a\u003e Manpage: remove slirp4netns/boltdb references\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/3592bda57d2498defdf73f2d53f899267cda74d7\"\u003e\u003ccode\u003e3592bda\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/852\"\u003e#852\u003c/a\u003e from containers/renovate/github.com-onsi-gomega-1.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/f04d9c8daa467c4cae240b3ec62059df87c0c726\"\u003e\u003ccode\u003ef04d9c8\u003c/code\u003e\u003c/a\u003e Update module github.com/onsi/gomega to v1.41.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/21fcc1a3fc8b9fcd1d438f4647ed0aa4930f6919\"\u003e\u003ccode\u003e21fcc1a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/755\"\u003e#755\u003c/a\u003e from Honny1/pesto-support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/131c1709ef52b977694a1b355281275feea8ae92\"\u003e\u003ccode\u003e131c170\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/851\"\u003e#851\u003c/a\u003e from containers/renovate/github.com-onsi-ginkgo-v2-2.x\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/containers/container-libs/compare/storage/v1.62.0...storage/v1.63.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eMost Recent Ignore Conditions Applied to This Pull Request\u003c/summary\u003e\n\n| Dependency Name | Ignore Conditions |\n| --- | --- |\n| github.com/cyphar/filepath-securejoin | [\u003e 0.5.1] |\n\u003c/details\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/kubevirt/containerdisks/pull/529","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/kubevirt%2Fcontainerdisks/issues/529","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/529/packages"},{"uuid":"4484828122","node_id":"PR_kwDOO2nR4c7dcUaD","number":416,"state":"closed","title":"chore(deps): bump the gomod group across 1 directory with 2 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-21T02:39:48.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-20T08:58:31.000Z","updated_at":"2026-05-21T02:39:50.000Z","time_to_close":63677,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"gomod","update_count":2,"packages":[{"name":"cloud.google.com/go/storage","old_version":"1.62.1","new_version":"1.62.2","repository_url":"https://github.com/googleapis/google-cloud-go"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"}],"path":null,"ecosystem":"go"},"body":"Bumps the gomod group with 2 updates in the / directory: [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) and [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry).\n\nUpdates `cloud.google.com/go/storage` from 1.62.1 to 1.62.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/google-cloud-go/releases\"\u003ecloud.google.com/go/storage's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003estorage: v1.62.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/storage/v1.62.1...storage/v1.62.2\"\u003ev1.62.2\u003c/a\u003e (2026-05-18)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eenable open telemetry attrs (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14426\"\u003e#14426\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/74eab64d\"\u003e74eab64d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003erestore metadata operations timeout in gRPC (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14575\"\u003e#14575\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/275ff562\"\u003e275ff562\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSet default chunkRetryDeadline to 32s in NewWriterFromAppendableObject (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14458\"\u003e#14458\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/ec7c7d66\"\u003eec7c7d66\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003erefactor userProject metadata propagation in ListObjects  (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14533\"\u003e#14533\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/fbb543e3\"\u003efbb543e3\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/50a575507ac6f3bdcc926dceda45cfa4c943a637\"\u003e\u003ccode\u003e50a5755\u003c/code\u003e\u003c/a\u003e chore: librarian release pull request: 20260518T161338Z (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14610\"\u003e#14610\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/585840ff8168325dea801e13c398055692c0fe32\"\u003e\u003ccode\u003e585840f\u003c/code\u003e\u003c/a\u003e spanner: skip flaky TestIntegration_DbRemovalRecovery (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14607\"\u003e#14607\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/f8bf88faa8738e9ca6684d9e28e2f0c05ff1eda1\"\u003e\u003ccode\u003ef8bf88f\u003c/code\u003e\u003c/a\u003e test(spanner): retry query after database recreation in integration test (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14\"\u003e#14\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/9168ab887eb52ea8f4b45425f493d14ff047d3b6\"\u003e\u003ccode\u003e9168ab8\u003c/code\u003e\u003c/a\u003e chore(librariangen): tweak release preview test (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14599\"\u003e#14599\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/f8b9a93aefedc167db7c7a28140d47ef2f1e3a82\"\u003e\u003ccode\u003ef8b9a93\u003c/code\u003e\u003c/a\u003e fix(spanner/spannertest): Support UUID as a base data type (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14117\"\u003e#14117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/a42fd83b04237b9f04e54cf0de86978c97ad5a04\"\u003e\u003ccode\u003ea42fd83\u003c/code\u003e\u003c/a\u003e fix(internal/librariange): release preview support (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14588\"\u003e#14588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/d9448309a64e756a5facdfbd6ffa9d51f27c0610\"\u003e\u003ccode\u003ed944830\u003c/code\u003e\u003c/a\u003e fix(datastore): add retries to emulator (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14591\"\u003e#14591\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/c5aaedcf817fd97f9a822666e02fbb89bfcbcc60\"\u003e\u003ccode\u003ec5aaedc\u003c/code\u003e\u003c/a\u003e chore: migrate Go configuration in librarian.yaml (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14587\"\u003e#14587\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/8a0e84978507e32473aa923e525b6803defd1d3f\"\u003e\u003ccode\u003e8a0e849\u003c/code\u003e\u003c/a\u003e doc(agentplatform): Add notes and quick examples to the README\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/033f4fe394f6f1c36dd31eaebf0ac0daef7bb744\"\u003e\u003ccode\u003e033f4fe\u003c/code\u003e\u003c/a\u003e chore: librarian release pull request: 20260514T191310Z (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14589\"\u003e#14589\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/storage/v1.62.1...storage/v1.62.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/chainguard-forks/kaniko/pull/416","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/chainguard-forks%2Fkaniko/issues/416","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/416/packages"},{"uuid":"4480020746","node_id":"PR_kwDODji2kM7dM03S","number":2203,"state":"open","title":"build(deps): bump github.com/google/go-containerregistry from 0.21.5 to 0.21.6","user":"dependabot[bot]","labels":["size/M","kind/dependency-change","release-note-none"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-19T18:35:44.000Z","updated_at":"2026-05-22T06:48:36.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.21.5 to 0.21.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/shipwright-io/build/pull/2203","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/shipwright-io%2Fbuild/issues/2203","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2203/packages"},{"uuid":"4475797361","node_id":"PR_kwDOD2fr6s7c_GTP","number":3199,"state":"open","title":"build(deps): bump github.com/google/go-containerregistry from 0.21.5 to 0.21.6","user":"dependabot[bot]","labels":["size/XXL","cncf-cla: yes","ok-to-test","lgtm","release-note-none","approved"],"assignees":["saschagrunert"],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-19T08:38:00.000Z","updated_at":"2026-05-19T09:21:43.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.21.5 to 0.21.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry\u0026package-manager=go_modules\u0026previous-version=0.21.5\u0026new-version=0.21.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/kubernetes-sigs/security-profiles-operator/pull/3199","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/kubernetes-sigs%2Fsecurity-profiles-operator/issues/3199","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3199/packages"},{"uuid":"4475419334","node_id":"PR_kwDODpbtts7c94xt","number":1885,"state":"closed","title":"Bump github.com/google/go-containerregistry from 0.21.5 to 0.21.6","user":"dependabot[bot]","labels":["type:dependency-upgrade","semver:patch"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-23T02:06:56.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-19T07:41:31.000Z","updated_at":"2026-05-23T02:06:58.000Z","time_to_close":325525,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.21.5 to 0.21.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry\u0026package-manager=go_modules\u0026previous-version=0.21.5\u0026new-version=0.21.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/paketo-buildpacks/pipeline-builder/pull/1885","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/paketo-buildpacks%2Fpipeline-builder/issues/1885","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1885/packages"},{"uuid":"4473378955","node_id":"PR_kwDOEDzmas7c3ZKz","number":1675,"state":"open","title":"chore(deps): bump the all group with 2 updates","user":"dependabot[bot]","labels":["size/M","kind/misc","ok-to-test","release-note-none","dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-18T23:57:13.000Z","updated_at":"2026-05-18T23:57:25.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"all","update_count":2,"packages":[{"name":"cloud.google.com/go/storage","old_version":"1.62.1","new_version":"1.62.2","repository_url":"https://github.com/googleapis/google-cloud-go"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"}],"path":null,"ecosystem":"go"},"body":"Bumps the all group with 2 updates: [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) and [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry).\n\nUpdates `cloud.google.com/go/storage` from 1.62.1 to 1.62.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/google-cloud-go/releases\"\u003ecloud.google.com/go/storage's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003estorage: v1.62.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/storage/v1.62.1...storage/v1.62.2\"\u003ev1.62.2\u003c/a\u003e (2026-05-18)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eenable open telemetry attrs (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14426\"\u003e#14426\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/74eab64d\"\u003e74eab64d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003erestore metadata operations timeout in gRPC (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14575\"\u003e#14575\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/275ff562\"\u003e275ff562\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSet default chunkRetryDeadline to 32s in NewWriterFromAppendableObject (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14458\"\u003e#14458\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/ec7c7d66\"\u003eec7c7d66\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003erefactor userProject metadata propagation in ListObjects  (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14533\"\u003e#14533\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/fbb543e3\"\u003efbb543e3\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/50a575507ac6f3bdcc926dceda45cfa4c943a637\"\u003e\u003ccode\u003e50a5755\u003c/code\u003e\u003c/a\u003e chore: librarian release pull request: 20260518T161338Z (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14610\"\u003e#14610\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/585840ff8168325dea801e13c398055692c0fe32\"\u003e\u003ccode\u003e585840f\u003c/code\u003e\u003c/a\u003e spanner: skip flaky TestIntegration_DbRemovalRecovery (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14607\"\u003e#14607\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/f8bf88faa8738e9ca6684d9e28e2f0c05ff1eda1\"\u003e\u003ccode\u003ef8bf88f\u003c/code\u003e\u003c/a\u003e test(spanner): retry query after database recreation in integration test (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14\"\u003e#14\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/9168ab887eb52ea8f4b45425f493d14ff047d3b6\"\u003e\u003ccode\u003e9168ab8\u003c/code\u003e\u003c/a\u003e chore(librariangen): tweak release preview test (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14599\"\u003e#14599\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/f8b9a93aefedc167db7c7a28140d47ef2f1e3a82\"\u003e\u003ccode\u003ef8b9a93\u003c/code\u003e\u003c/a\u003e fix(spanner/spannertest): Support UUID as a base data type (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14117\"\u003e#14117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/a42fd83b04237b9f04e54cf0de86978c97ad5a04\"\u003e\u003ccode\u003ea42fd83\u003c/code\u003e\u003c/a\u003e fix(internal/librariange): release preview support (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14588\"\u003e#14588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/d9448309a64e756a5facdfbd6ffa9d51f27c0610\"\u003e\u003ccode\u003ed944830\u003c/code\u003e\u003c/a\u003e fix(datastore): add retries to emulator (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14591\"\u003e#14591\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/c5aaedcf817fd97f9a822666e02fbb89bfcbcc60\"\u003e\u003ccode\u003ec5aaedc\u003c/code\u003e\u003c/a\u003e chore: migrate Go configuration in librarian.yaml (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14587\"\u003e#14587\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/8a0e84978507e32473aa923e525b6803defd1d3f\"\u003e\u003ccode\u003e8a0e849\u003c/code\u003e\u003c/a\u003e doc(agentplatform): Add notes and quick examples to the README\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/033f4fe394f6f1c36dd31eaebf0ac0daef7bb744\"\u003e\u003ccode\u003e033f4fe\u003c/code\u003e\u003c/a\u003e chore: librarian release pull request: 20260514T191310Z (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14589\"\u003e#14589\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/storage/v1.62.1...storage/v1.62.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/tektoncd/chains/pull/1675","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/tektoncd%2Fchains/issues/1675","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1675/packages"},{"uuid":"4473219255","node_id":"PR_kwDOEKkK-s7c24Dr","number":813,"state":"open","title":"build(deps): bump github.com/google/go-containerregistry from 0.21.5 to 0.21.6","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-18T23:16:34.000Z","updated_at":"2026-05-18T23:16:35.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.21.5 to 0.21.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry\u0026package-manager=go_modules\u0026previous-version=0.21.5\u0026new-version=0.21.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/saschagrunert/security-profiles-operator/pull/813","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/saschagrunert%2Fsecurity-profiles-operator/issues/813","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/813/packages"}],"issue_packages":[{"old_version":"0.21.5","new_version":"0.21.6","update_type":"patch","path":null,"pr_created_at":"2026-06-08T04:56:14.000Z","version_change":"0.21.5 → 0.21.6","issue":{"uuid":"4610130261","node_id":"PR_kwDODD8zz87jwoqO","number":996,"state":"open","title":"chore(deps): Bump the gomod group with 10 updates","user":"dependabot[bot]","labels":["dco-signoff: yes","size/L","dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-08T04:56:14.000Z","updated_at":"2026-06-08T04:56:31.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): Bump","group_name":"gomod","update_count":10,"packages":[{"name":"cloud.google.com/go/storage","old_version":"1.62.1","new_version":"1.62.3","repository_url":"https://github.com/googleapis/google-cloud-go"},{"name":"github.com/aws/aws-sdk-go-v2","old_version":"1.41.7","new_version":"1.41.12","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/config","old_version":"1.32.17","new_version":"1.32.23","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/docker/cli","old_version":"29.5.2+incompatible","new_version":"29.5.3+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/sigstore/sigstore","old_version":"1.10.6","new_version":"1.10.8","repository_url":"https://github.com/sigstore/sigstore"},{"name":"github.com/sigstore/sigstore/pkg/signature/kms/aws","old_version":"1.10.6","new_version":"1.10.8","repository_url":"https://github.com/sigstore/sigstore"},{"name":"github.com/sigstore/sigstore/pkg/signature/kms/azure","old_version":"1.10.6","new_version":"1.10.8","repository_url":"https://github.com/sigstore/sigstore"},{"name":"github.com/sigstore/sigstore/pkg/signature/kms/gcp","old_version":"1.10.6","new_version":"1.10.8","repository_url":"https://github.com/sigstore/sigstore"},{"name":"github.com/sigstore/sigstore/pkg/signature/kms/hashivault","old_version":"1.10.6","new_version":"1.10.8","repository_url":"https://github.com/sigstore/sigstore"}],"path":null,"ecosystem":"go"},"body":"Bumps the gomod group with 10 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.62.1` | `1.62.3` |\n| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.7` | `1.41.12` |\n| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.17` | `1.32.23` |\n| [github.com/docker/cli](https://github.com/docker/cli) | `29.5.2+incompatible` | `29.5.3+incompatible` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.5` | `0.21.6` |\n| [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.10.6` | `1.10.8` |\n| [github.com/sigstore/sigstore/pkg/signature/kms/aws](https://github.com/sigstore/sigstore) | `1.10.6` | `1.10.8` |\n| [github.com/sigstore/sigstore/pkg/signature/kms/azure](https://github.com/sigstore/sigstore) | `1.10.6` | `1.10.8` |\n| [github.com/sigstore/sigstore/pkg/signature/kms/gcp](https://github.com/sigstore/sigstore) | `1.10.6` | `1.10.8` |\n| [github.com/sigstore/sigstore/pkg/signature/kms/hashivault](https://github.com/sigstore/sigstore) | `1.10.6` | `1.10.8` |\n\nUpdates `cloud.google.com/go/storage` from 1.62.1 to 1.62.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/google-cloud-go/releases\"\u003ecloud.google.com/go/storage's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003estorage: v1.62.3\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/storage/v1.62.2...storage/v1.62.3\"\u003ev1.62.3\u003c/a\u003e (2026-06-03)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003efix race condition during retries in gRPC writer (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14649\"\u003e#14649\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/04b6c635\"\u003e04b6c635\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eadd server closed idle connection to retriable errors (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14594\"\u003e#14594\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/20b37d65\"\u003e20b37d65\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003estorage: v1.62.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/storage/v1.62.1...storage/v1.62.2\"\u003ev1.62.2\u003c/a\u003e (2026-05-18)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eenable open telemetry attrs (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14426\"\u003e#14426\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/74eab64d\"\u003e74eab64d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003erestore metadata operations timeout in gRPC (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14575\"\u003e#14575\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/275ff562\"\u003e275ff562\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSet default chunkRetryDeadline to 32s in NewWriterFromAppendableObject (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14458\"\u003e#14458\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/ec7c7d66\"\u003eec7c7d66\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003erefactor userProject metadata propagation in ListObjects  (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14533\"\u003e#14533\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/fbb543e3\"\u003efbb543e3\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/8afd6a0bc8822cdcd6b0f90d64522a44459c39a2\"\u003e\u003ccode\u003e8afd6a0\u003c/code\u003e\u003c/a\u003e chore: librarian release pull request: 20260603T093646Z (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14699\"\u003e#14699\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/04b6c635c09de1772fcefd8a7fd5e4ffdd370b79\"\u003e\u003ccode\u003e04b6c63\u003c/code\u003e\u003c/a\u003e fix(storage): fix race condition during retries in gRPC writer (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14649\"\u003e#14649\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/20b37d65d56d4b5e7b8d43b1f6b2ddefcd8944be\"\u003e\u003ccode\u003e20b37d6\u003c/code\u003e\u003c/a\u003e fix(storage): add server closed idle connection to retriable errors (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14594\"\u003e#14594\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/50a575507ac6f3bdcc926dceda45cfa4c943a637\"\u003e\u003ccode\u003e50a5755\u003c/code\u003e\u003c/a\u003e chore: librarian release pull request: 20260518T161338Z (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14610\"\u003e#14610\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/585840ff8168325dea801e13c398055692c0fe32\"\u003e\u003ccode\u003e585840f\u003c/code\u003e\u003c/a\u003e spanner: skip flaky TestIntegration_DbRemovalRecovery (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14607\"\u003e#14607\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/f8bf88faa8738e9ca6684d9e28e2f0c05ff1eda1\"\u003e\u003ccode\u003ef8bf88f\u003c/code\u003e\u003c/a\u003e test(spanner): retry query after database recreation in integration test (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14\"\u003e#14\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/9168ab887eb52ea8f4b45425f493d14ff047d3b6\"\u003e\u003ccode\u003e9168ab8\u003c/code\u003e\u003c/a\u003e chore(librariangen): tweak release preview test (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14599\"\u003e#14599\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/f8b9a93aefedc167db7c7a28140d47ef2f1e3a82\"\u003e\u003ccode\u003ef8b9a93\u003c/code\u003e\u003c/a\u003e fix(spanner/spannertest): Support UUID as a base data type (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14117\"\u003e#14117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/a42fd83b04237b9f04e54cf0de86978c97ad5a04\"\u003e\u003ccode\u003ea42fd83\u003c/code\u003e\u003c/a\u003e fix(internal/librariange): release preview support (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14588\"\u003e#14588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/d9448309a64e756a5facdfbd6ffa9d51f27c0610\"\u003e\u003ccode\u003ed944830\u003c/code\u003e\u003c/a\u003e fix(datastore): add retries to emulator (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14591\"\u003e#14591\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/storage/v1.62.1...storage/v1.62.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2` from 1.41.7 to 1.41.12\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7146c2b4007293f0acc9b2e8b92ffa7a30841df0\"\u003e\u003ccode\u003e7146c2b\u003c/code\u003e\u003c/a\u003e Release 2026-06-04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5aef2fd8a4027ecf34eb5e32a28ff4a955b353d6\"\u003e\u003ccode\u003e5aef2fd\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f94c04478d36a4ffb777221761459fb4b1d20cba\"\u003e\u003ccode\u003ef94c044\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f00b205128286d6431115dd078da3c36197999f4\"\u003e\u003ccode\u003ef00b205\u003c/code\u003e\u003c/a\u003e bump to smithy-go v1.27.1 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3434\"\u003e#3434\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/c4ad7dee6ebd9a3e1c7ee208f77e4ac8532b17c9\"\u003e\u003ccode\u003ec4ad7de\u003c/code\u003e\u003c/a\u003e drop service/internal/benchmark (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3433\"\u003e#3433\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/91eca463daf932474778dc4a984c41ecfcd9dc3c\"\u003e\u003ccode\u003e91eca46\u003c/code\u003e\u003c/a\u003e Release 2026-06-03.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e9d9e156c352b4956ed0b3d57614467d1f79c62b\"\u003e\u003ccode\u003ee9d9e15\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/def6a3a4bb06c199a4843c501d84730d8235cab4\"\u003e\u003ccode\u003edef6a3a\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/fa369bd7bb9576e85ac094a43a15e8372a3d0129\"\u003e\u003ccode\u003efa369bd\u003c/code\u003e\u003c/a\u003e Release 2026-06-03\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/960ee4dc8380a46ded94f3976e073242d42bf8ed\"\u003e\u003ccode\u003e960ee4d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/v1.41.7...v1.41.12\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/config` from 1.32.17 to 1.32.23\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7146c2b4007293f0acc9b2e8b92ffa7a30841df0\"\u003e\u003ccode\u003e7146c2b\u003c/code\u003e\u003c/a\u003e Release 2026-06-04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5aef2fd8a4027ecf34eb5e32a28ff4a955b353d6\"\u003e\u003ccode\u003e5aef2fd\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f94c04478d36a4ffb777221761459fb4b1d20cba\"\u003e\u003ccode\u003ef94c044\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f00b205128286d6431115dd078da3c36197999f4\"\u003e\u003ccode\u003ef00b205\u003c/code\u003e\u003c/a\u003e bump to smithy-go v1.27.1 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3434\"\u003e#3434\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/c4ad7dee6ebd9a3e1c7ee208f77e4ac8532b17c9\"\u003e\u003ccode\u003ec4ad7de\u003c/code\u003e\u003c/a\u003e drop service/internal/benchmark (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3433\"\u003e#3433\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/91eca463daf932474778dc4a984c41ecfcd9dc3c\"\u003e\u003ccode\u003e91eca46\u003c/code\u003e\u003c/a\u003e Release 2026-06-03.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e9d9e156c352b4956ed0b3d57614467d1f79c62b\"\u003e\u003ccode\u003ee9d9e15\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/def6a3a4bb06c199a4843c501d84730d8235cab4\"\u003e\u003ccode\u003edef6a3a\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/fa369bd7bb9576e85ac094a43a15e8372a3d0129\"\u003e\u003ccode\u003efa369bd\u003c/code\u003e\u003c/a\u003e Release 2026-06-03\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/960ee4dc8380a46ded94f3976e073242d42bf8ed\"\u003e\u003ccode\u003e960ee4d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.17...config/v1.32.23\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/cli` from 29.5.2+incompatible to 29.5.3+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/d1c06ef6b41d88d76866aea43c246cd7c63d04fa\"\u003e\u003ccode\u003ed1c06ef\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7022\"\u003e#7022\u003c/a\u003e from mickael-docker/docs-request-field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/7dd053b1d1d66bec5f793d090dba7e81240afadd\"\u003e\u003ccode\u003e7dd053b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7003\"\u003e#7003\u003c/a\u003e from thaJeztah/logs_links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/37c3d316cc76fa9ad27e3897fa7e60c5a3b66d1f\"\u003e\u003ccode\u003e37c3d31\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7024\"\u003e#7024\u003c/a\u003e from thaJeztah/add_zizmor\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/45f10f226e8e6eba41064a7819bec986ac850288\"\u003e\u003ccode\u003e45f10f2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7025\"\u003e#7025\u003c/a\u003e from vvoland/update-go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/b458dc9e81e732fdaa66dac672db36ff28d6b6c5\"\u003e\u003ccode\u003eb458dc9\u003c/code\u003e\u003c/a\u003e update to go1.26.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1953194bd5a44b1a991eea79c4f0aacfb6c74aab\"\u003e\u003ccode\u003e1953194\u003c/code\u003e\u003c/a\u003e gha: apply zizmor fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/ac0419ea90d1177eb11655a5ee9795126e8deb7a\"\u003e\u003ccode\u003eac0419e\u003c/code\u003e\u003c/a\u003e gha: add zizmor workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1aa0416b8a5973bc5f605a42d13f1926ab01f2ac\"\u003e\u003ccode\u003e1aa0416\u003c/code\u003e\u003c/a\u003e docs: recommend default deny and clarify requesturi field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/3a8595298407d5ab67d0ed13d57819dddf561d98\"\u003e\u003ccode\u003e3a85952\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7020\"\u003e#7020\u003c/a\u003e from thaJeztah/full_semver\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/8d3fbdf5707f6cd6b3157eef5aeba8af2f436f9d\"\u003e\u003ccode\u003e8d3fbdf\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7019\"\u003e#7019\u003c/a\u003e from thaJeztah/dependabot_labels\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v29.5.2...v29.5.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore` from 1.10.6 to 1.10.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.8\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport standard PKCS#8 encrypted private key decryption in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2333\"\u003esigstore/sigstore#2333\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.10.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd functional options to DSSE to improve memory usage, validation in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2326\"\u003esigstore/sigstore#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExtend PEM private key unmarshalling to support legacy format in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2332\"\u003esigstore/sigstore#2332\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/c761681120b37d9c4b1410cf5720571582ab090a\"\u003e\u003ccode\u003ec761681\u003c/code\u003e\u003c/a\u003e Support standard PKCS#8 encrypted private key decryption (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2333\"\u003e#2333\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/005faf920b7c695a89b68cf226f95d88a468deb8\"\u003e\u003ccode\u003e005faf9\u003c/code\u003e\u003c/a\u003e Extend PEM private key unmarshalling to support legacy format (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2332\"\u003e#2332\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/e70e4ed4219b8017e5462886cd1c06df23e8b3cf\"\u003e\u003ccode\u003ee70e4ed\u003c/code\u003e\u003c/a\u003e add functional options to DSSE to improve memory usage, validation (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2326\"\u003e#2326\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/899684dc4056768cda4f2523842cd90de4edbfcf\"\u003e\u003ccode\u003e899684d\u003c/code\u003e\u003c/a\u003e build(deps): Bump github.com/letsencrypt/boulder (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2307\"\u003e#2307\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/181dc40b3141c75dde47e3871b2174e3dcfda9e0\"\u003e\u003ccode\u003e181dc40\u003c/code\u003e\u003c/a\u003e build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2308\"\u003e#2308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2c141a745b811348a0dbea4447e0c8b2f3092d2f\"\u003e\u003ccode\u003e2c141a7\u003c/code\u003e\u003c/a\u003e build(deps): Bump golangci/golangci-lint-action in the all group (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/b6c02147eb2755eb8ff78ec96c97835d3742821d\"\u003e\u003ccode\u003eb6c0214\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2ff50c9b56fecfa71e05edd7aa5e258d45c78a47\"\u003e\u003ccode\u003e2ff50c9\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/dependency-review-action from 4.8.3 to 5.0.0 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2330\"\u003e#2330\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/d0204c36ab40cfc854fa3689f7f472a98c83fea2\"\u003e\u003ccode\u003ed0204c3\u003c/code\u003e\u003c/a\u003e build(deps): Bump hashicorp/vault from 1.21.4 to 2.0.1 in /test/e2e (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/afdf89749d49660ba76eb59a410352e4e33225cb\"\u003e\u003ccode\u003eafdf897\u003c/code\u003e\u003c/a\u003e build(deps): Bump google.golang.org/grpc in /pkg/signature/kms/gcp (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2312\"\u003e#2312\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore/pkg/signature/kms/aws` from 1.10.6 to 1.10.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore/pkg/signature/kms/aws's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.8\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport standard PKCS#8 encrypted private key decryption in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2333\"\u003esigstore/sigstore#2333\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.10.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd functional options to DSSE to improve memory usage, validation in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2326\"\u003esigstore/sigstore#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExtend PEM private key unmarshalling to support legacy format in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2332\"\u003esigstore/sigstore#2332\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/c761681120b37d9c4b1410cf5720571582ab090a\"\u003e\u003ccode\u003ec761681\u003c/code\u003e\u003c/a\u003e Support standard PKCS#8 encrypted private key decryption (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2333\"\u003e#2333\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/005faf920b7c695a89b68cf226f95d88a468deb8\"\u003e\u003ccode\u003e005faf9\u003c/code\u003e\u003c/a\u003e Extend PEM private key unmarshalling to support legacy format (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2332\"\u003e#2332\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/e70e4ed4219b8017e5462886cd1c06df23e8b3cf\"\u003e\u003ccode\u003ee70e4ed\u003c/code\u003e\u003c/a\u003e add functional options to DSSE to improve memory usage, validation (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2326\"\u003e#2326\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/899684dc4056768cda4f2523842cd90de4edbfcf\"\u003e\u003ccode\u003e899684d\u003c/code\u003e\u003c/a\u003e build(deps): Bump github.com/letsencrypt/boulder (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2307\"\u003e#2307\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/181dc40b3141c75dde47e3871b2174e3dcfda9e0\"\u003e\u003ccode\u003e181dc40\u003c/code\u003e\u003c/a\u003e build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2308\"\u003e#2308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2c141a745b811348a0dbea4447e0c8b2f3092d2f\"\u003e\u003ccode\u003e2c141a7\u003c/code\u003e\u003c/a\u003e build(deps): Bump golangci/golangci-lint-action in the all group (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/b6c02147eb2755eb8ff78ec96c97835d3742821d\"\u003e\u003ccode\u003eb6c0214\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2ff50c9b56fecfa71e05edd7aa5e258d45c78a47\"\u003e\u003ccode\u003e2ff50c9\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/dependency-review-action from 4.8.3 to 5.0.0 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2330\"\u003e#2330\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/d0204c36ab40cfc854fa3689f7f472a98c83fea2\"\u003e\u003ccode\u003ed0204c3\u003c/code\u003e\u003c/a\u003e build(deps): Bump hashicorp/vault from 1.21.4 to 2.0.1 in /test/e2e (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/afdf89749d49660ba76eb59a410352e4e33225cb\"\u003e\u003ccode\u003eafdf897\u003c/code\u003e\u003c/a\u003e build(deps): Bump google.golang.org/grpc in /pkg/signature/kms/gcp (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2312\"\u003e#2312\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore/pkg/signature/kms/azure` from 1.10.6 to 1.10.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore/pkg/signature/kms/azure's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.8\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport standard PKCS#8 encrypted private key decryption in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2333\"\u003esigstore/sigstore#2333\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.10.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd functional options to DSSE to improve memory usage, validation in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2326\"\u003esigstore/sigstore#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExtend PEM private key unmarshalling to support legacy format in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2332\"\u003esigstore/sigstore#2332\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/c761681120b37d9c4b1410cf5720571582ab090a\"\u003e\u003ccode\u003ec761681\u003c/code\u003e\u003c/a\u003e Support standard PKCS#8 encrypted private key decryption (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2333\"\u003e#2333\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/005faf920b7c695a89b68cf226f95d88a468deb8\"\u003e\u003ccode\u003e005faf9\u003c/code\u003e\u003c/a\u003e Extend PEM private key unmarshalling to support legacy format (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2332\"\u003e#2332\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/e70e4ed4219b8017e5462886cd1c06df23e8b3cf\"\u003e\u003ccode\u003ee70e4ed\u003c/code\u003e\u003c/a\u003e add functional options to DSSE to improve memory usage, validation (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2326\"\u003e#2326\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/899684dc4056768cda4f2523842cd90de4edbfcf\"\u003e\u003ccode\u003e899684d\u003c/code\u003e\u003c/a\u003e build(deps): Bump github.com/letsencrypt/boulder (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2307\"\u003e#2307\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/181dc40b3141c75dde47e3871b2174e3dcfda9e0\"\u003e\u003ccode\u003e181dc40\u003c/code\u003e\u003c/a\u003e build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2308\"\u003e#2308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2c141a745b811348a0dbea4447e0c8b2f3092d2f\"\u003e\u003ccode\u003e2c141a7\u003c/code\u003e\u003c/a\u003e build(deps): Bump golangci/golangci-lint-action in the all group (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/b6c02147eb2755eb8ff78ec96c97835d3742821d\"\u003e\u003ccode\u003eb6c0214\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2ff50c9b56fecfa71e05edd7aa5e258d45c78a47\"\u003e\u003ccode\u003e2ff50c9\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/dependency-review-action from 4.8.3 to 5.0.0 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2330\"\u003e#2330\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/d0204c36ab40cfc854fa3689f7f472a98c83fea2\"\u003e\u003ccode\u003ed0204c3\u003c/code\u003e\u003c/a\u003e build(deps): Bump hashicorp/vault from 1.21.4 to 2.0.1 in /test/e2e (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/afdf89749d49660ba76eb59a410352e4e33225cb\"\u003e\u003ccode\u003eafdf897\u003c/code\u003e\u003c/a\u003e build(deps): Bump google.golang.org/grpc in /pkg/signature/kms/gcp (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2312\"\u003e#2312\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore/pkg/signature/kms/gcp` from 1.10.6 to 1.10.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore/pkg/signature/kms/gcp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.8\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport standard PKCS#8 encrypted private key decryption in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2333\"\u003esigstore/sigstore#2333\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.10.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd functional options to DSSE to improve memory usage, validation in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2326\"\u003esigstore/sigstore#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExtend PEM private key unmarshalling to support legacy format in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2332\"\u003esigstore/sigstore#2332\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/c761681120b37d9c4b1410cf5720571582ab090a\"\u003e\u003ccode\u003ec761681\u003c/code\u003e\u003c/a\u003e Support standard PKCS#8 encrypted private key decryption (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2333\"\u003e#2333\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/005faf920b7c695a89b68cf226f95d88a468deb8\"\u003e\u003ccode\u003e005faf9\u003c/code\u003e\u003c/a\u003e Extend PEM private key unmarshalling to support legacy format (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2332\"\u003e#2332\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/e70e4ed4219b8017e5462886cd1c06df23e8b3cf\"\u003e\u003ccode\u003ee70e4ed\u003c/code\u003e\u003c/a\u003e add functional options to DSSE to improve memory usage, validation (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2326\"\u003e#2326\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/899684dc4056768cda4f2523842cd90de4edbfcf\"\u003e\u003ccode\u003e899684d\u003c/code\u003e\u003c/a\u003e build(deps): Bump github.com/letsencrypt/boulder (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2307\"\u003e#2307\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/181dc40b3141c75dde47e3871b2174e3dcfda9e0\"\u003e\u003ccode\u003e181dc40\u003c/code\u003e\u003c/a\u003e build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2308\"\u003e#2308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2c141a745b811348a0dbea4447e0c8b2f3092d2f\"\u003e\u003ccode\u003e2c141a7\u003c/code\u003e\u003c/a\u003e build(deps): Bump golangci/golangci-lint-action in the all group (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/b6c02147eb2755eb8ff78ec96c97835d3742821d\"\u003e\u003ccode\u003eb6c0214\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2ff50c9b56fecfa71e05edd7aa5e258d45c78a47\"\u003e\u003ccode\u003e2ff50c9\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/dependency-review-action from 4.8.3 to 5.0.0 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2330\"\u003e#2330\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/d0204c36ab40cfc854fa3689f7f472a98c83fea2\"\u003e\u003ccode\u003ed0204c3\u003c/code\u003e\u003c/a\u003e build(deps): Bump hashicorp/vault from 1.21.4 to 2.0.1 in /test/e2e (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/afdf89749d49660ba76eb59a410352e4e33225cb\"\u003e\u003ccode\u003eafdf897\u003c/code\u003e\u003c/a\u003e build(deps): Bump google.golang.org/grpc in /pkg/signature/kms/gcp (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2312\"\u003e#2312\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore/pkg/signature/kms/hashivault` from 1.10.6 to 1.10.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore/pkg/signature/kms/hashivault's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.8\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport standard PKCS#8 encrypted private key decryption in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2333\"\u003esigstore/sigstore#2333\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.7...v1.10.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.10.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd functional options to DSSE to improve memory usage, validation in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2326\"\u003esigstore/sigstore#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExtend PEM private key unmarshalling to support legacy format in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2332\"\u003esigstore/sigstore#2332\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.7\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/c761681120b37d9c4b1410cf5720571582ab090a\"\u003e\u003ccode\u003ec761681\u003c/code\u003e\u003c/a\u003e Support standard PKCS#8 encrypted private key decryption (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2333\"\u003e#2333\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/005faf920b7c695a89b68cf226f95d88a468deb8\"\u003e\u003ccode\u003e005faf9\u003c/code\u003e\u003c/a\u003e Extend PEM private key unmarshalling to support legacy format (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2332\"\u003e#2332\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/e70e4ed4219b8017e5462886cd1c06df23e8b3cf\"\u003e\u003ccode\u003ee70e4ed\u003c/code\u003e\u003c/a\u003e add functional options to DSSE to improve memory usage, validation (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2326\"\u003e#2326\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/899684dc4056768cda4f2523842cd90de4edbfcf\"\u003e\u003ccode\u003e899684d\u003c/code\u003e\u003c/a\u003e build(deps): Bump github.com/letsencrypt/boulder (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2307\"\u003e#2307\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/181dc40b3141c75dde47e3871b2174e3dcfda9e0\"\u003e\u003ccode\u003e181dc40\u003c/code\u003e\u003c/a\u003e build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2308\"\u003e#2308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2c141a745b811348a0dbea4447e0c8b2f3092d2f\"\u003e\u003ccode\u003e2c141a7\u003c/code\u003e\u003c/a\u003e build(deps): Bump golangci/golangci-lint-action in the all group (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/b6c02147eb2755eb8ff78ec96c97835d3742821d\"\u003e\u003ccode\u003eb6c0214\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/2ff50c9b56fecfa71e05edd7aa5e258d45c78a47\"\u003e\u003ccode\u003e2ff50c9\u003c/code\u003e\u003c/a\u003e build(deps): Bump actions/dependency-review-action from 4.8.3 to 5.0.0 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2330\"\u003e#2330\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/d0204c36ab40cfc854fa3689f7f472a98c83fea2\"\u003e\u003ccode\u003ed0204c3\u003c/code\u003e\u003c/a\u003e build(deps): Bump hashicorp/vault from 1.21.4 to 2.0.1 in /test/e2e (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/afdf89749d49660ba76eb59a410352e4e33225cb\"\u003e\u003ccode\u003eafdf897\u003c/code\u003e\u003c/a\u003e build(deps): Bump google.golang.org/grpc in /pkg/signature/kms/gcp (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2312\"\u003e#2312\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.6...v1.10.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/falcosecurity/falcoctl/pull/996","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/falcosecurity%2Ffalcoctl/issues/996","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/996/packages"}},{"old_version":"0.21.3","new_version":"0.21.6","update_type":"patch","path":null,"pr_created_at":"2026-06-05T04:48:36.000Z","version_change":"0.21.3 → 0.21.6","issue":{"uuid":"4594283367","node_id":"PR_kwDOFfHUDs7i9pLA","number":613,"state":"open","title":"Bump the all group across 2 directories with 10 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-05T04:48:36.000Z","updated_at":"2026-06-09T06:01:47.955Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"all","update_count":10,"packages":[{"name":"github.com/aws/aws-sdk-go-v2","old_version":"1.41.5","new_version":"1.41.12","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/config","old_version":"1.32.13","new_version":"1.32.23","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/service/ec2","old_version":"1.296.2","new_version":"1.305.2","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.3","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/maxbrunsfeld/counterfeiter/v6","old_version":"6.12.1","new_version":"6.12.2","repository_url":"https://github.com/maxbrunsfeld/counterfeiter"},{"name":"helm.sh/helm/v3","old_version":"3.20.1","new_version":"3.21.0","repository_url":"https://github.com/helm/helm"}],"path":null,"ecosystem":"go"},"body":"Bumps the all group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.5` | `1.41.12` |\n| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.13` | `1.32.23` |\n| [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) | `1.296.2` | `1.305.2` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.3` | `0.21.6` |\n| [github.com/maxbrunsfeld/counterfeiter/v6](https://github.com/maxbrunsfeld/counterfeiter) | `6.12.1` | `6.12.2` |\n| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.20.1` | `3.21.0` |\n\nBumps the all group with 3 updates in the /buoy directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git), [golang.org/x/mod](https://github.com/golang/mod) and [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery).\n\nUpdates `github.com/aws/aws-sdk-go-v2` from 1.41.5 to 1.41.12\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7146c2b4007293f0acc9b2e8b92ffa7a30841df0\"\u003e\u003ccode\u003e7146c2b\u003c/code\u003e\u003c/a\u003e Release 2026-06-04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5aef2fd8a4027ecf34eb5e32a28ff4a955b353d6\"\u003e\u003ccode\u003e5aef2fd\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f94c04478d36a4ffb777221761459fb4b1d20cba\"\u003e\u003ccode\u003ef94c044\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f00b205128286d6431115dd078da3c36197999f4\"\u003e\u003ccode\u003ef00b205\u003c/code\u003e\u003c/a\u003e bump to smithy-go v1.27.1 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3434\"\u003e#3434\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/c4ad7dee6ebd9a3e1c7ee208f77e4ac8532b17c9\"\u003e\u003ccode\u003ec4ad7de\u003c/code\u003e\u003c/a\u003e drop service/internal/benchmark (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3433\"\u003e#3433\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/91eca463daf932474778dc4a984c41ecfcd9dc3c\"\u003e\u003ccode\u003e91eca46\u003c/code\u003e\u003c/a\u003e Release 2026-06-03.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e9d9e156c352b4956ed0b3d57614467d1f79c62b\"\u003e\u003ccode\u003ee9d9e15\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/def6a3a4bb06c199a4843c501d84730d8235cab4\"\u003e\u003ccode\u003edef6a3a\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/fa369bd7bb9576e85ac094a43a15e8372a3d0129\"\u003e\u003ccode\u003efa369bd\u003c/code\u003e\u003c/a\u003e Release 2026-06-03\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/960ee4dc8380a46ded94f3976e073242d42bf8ed\"\u003e\u003ccode\u003e960ee4d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/v1.41.5...v1.41.12\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/config` from 1.32.13 to 1.32.23\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7146c2b4007293f0acc9b2e8b92ffa7a30841df0\"\u003e\u003ccode\u003e7146c2b\u003c/code\u003e\u003c/a\u003e Release 2026-06-04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5aef2fd8a4027ecf34eb5e32a28ff4a955b353d6\"\u003e\u003ccode\u003e5aef2fd\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f94c04478d36a4ffb777221761459fb4b1d20cba\"\u003e\u003ccode\u003ef94c044\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f00b205128286d6431115dd078da3c36197999f4\"\u003e\u003ccode\u003ef00b205\u003c/code\u003e\u003c/a\u003e bump to smithy-go v1.27.1 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3434\"\u003e#3434\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/c4ad7dee6ebd9a3e1c7ee208f77e4ac8532b17c9\"\u003e\u003ccode\u003ec4ad7de\u003c/code\u003e\u003c/a\u003e drop service/internal/benchmark (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3433\"\u003e#3433\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/91eca463daf932474778dc4a984c41ecfcd9dc3c\"\u003e\u003ccode\u003e91eca46\u003c/code\u003e\u003c/a\u003e Release 2026-06-03.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e9d9e156c352b4956ed0b3d57614467d1f79c62b\"\u003e\u003ccode\u003ee9d9e15\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/def6a3a4bb06c199a4843c501d84730d8235cab4\"\u003e\u003ccode\u003edef6a3a\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/fa369bd7bb9576e85ac094a43a15e8372a3d0129\"\u003e\u003ccode\u003efa369bd\u003c/code\u003e\u003c/a\u003e Release 2026-06-03\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/960ee4dc8380a46ded94f3976e073242d42bf8ed\"\u003e\u003ccode\u003e960ee4d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.13...config/v1.32.23\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/service/ec2` from 1.296.2 to 1.305.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7146c2b4007293f0acc9b2e8b92ffa7a30841df0\"\u003e\u003ccode\u003e7146c2b\u003c/code\u003e\u003c/a\u003e Release 2026-06-04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5aef2fd8a4027ecf34eb5e32a28ff4a955b353d6\"\u003e\u003ccode\u003e5aef2fd\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f94c04478d36a4ffb777221761459fb4b1d20cba\"\u003e\u003ccode\u003ef94c044\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f00b205128286d6431115dd078da3c36197999f4\"\u003e\u003ccode\u003ef00b205\u003c/code\u003e\u003c/a\u003e bump to smithy-go v1.27.1 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3434\"\u003e#3434\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/c4ad7dee6ebd9a3e1c7ee208f77e4ac8532b17c9\"\u003e\u003ccode\u003ec4ad7de\u003c/code\u003e\u003c/a\u003e drop service/internal/benchmark (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3433\"\u003e#3433\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/91eca463daf932474778dc4a984c41ecfcd9dc3c\"\u003e\u003ccode\u003e91eca46\u003c/code\u003e\u003c/a\u003e Release 2026-06-03.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e9d9e156c352b4956ed0b3d57614467d1f79c62b\"\u003e\u003ccode\u003ee9d9e15\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/def6a3a4bb06c199a4843c501d84730d8235cab4\"\u003e\u003ccode\u003edef6a3a\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/fa369bd7bb9576e85ac094a43a15e8372a3d0129\"\u003e\u003ccode\u003efa369bd\u003c/code\u003e\u003c/a\u003e Release 2026-06-03\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/960ee4dc8380a46ded94f3976e073242d42bf8ed\"\u003e\u003ccode\u003e960ee4d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.296.2...service/ec2/v1.305.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.3 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.21.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2254\"\u003egoogle/go-containerregistry#2254\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.3...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/maxbrunsfeld/counterfeiter/v6` from 6.12.1 to 6.12.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/releases\"\u003egithub.com/maxbrunsfeld/counterfeiter/v6's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.12.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump golang.org/x/text from 0.31.0 to 0.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/349\"\u003emaxbrunsfeld/counterfeiter#349\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github.com/onsi/gomega from 1.38.2 to 1.38.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/350\"\u003emaxbrunsfeld/counterfeiter#350\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/tools from 0.39.0 to 0.40.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/348\"\u003emaxbrunsfeld/counterfeiter#348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github.com/onsi/gomega from 1.38.3 to 1.39.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/351\"\u003emaxbrunsfeld/counterfeiter#351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/tools from 0.40.0 to 0.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/353\"\u003emaxbrunsfeld/counterfeiter#353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github.com/onsi/gomega from 1.39.0 to 1.39.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/354\"\u003emaxbrunsfeld/counterfeiter#354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/text from 0.33.0 to 0.34.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/356\"\u003emaxbrunsfeld/counterfeiter#356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/tools from 0.41.0 to 0.42.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/355\"\u003emaxbrunsfeld/counterfeiter#355\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/text from 0.34.0 to 0.35.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/357\"\u003emaxbrunsfeld/counterfeiter#357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/tools from 0.42.0 to 0.43.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/358\"\u003emaxbrunsfeld/counterfeiter#358\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/compare/v6.12.1...v6.12.2\"\u003ehttps://github.com/maxbrunsfeld/counterfeiter/compare/v6.12.1...v6.12.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/4fbda3b69602620795b66f504c63e8f4671d1335\"\u003e\u003ccode\u003e4fbda3b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/358\"\u003e#358\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/golang.org/x/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/49c41c05fefceea4b07e4569c9d01b881d14bec7\"\u003e\u003ccode\u003e49c41c0\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/tools from 0.42.0 to 0.43.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/266628fb9aab0c6a434c665409c7cfd901198916\"\u003e\u003ccode\u003e266628f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/357\"\u003e#357\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/golang.org/x/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/e19e05eee34e8794f036c2da96bedec17b2f115e\"\u003e\u003ccode\u003ee19e05e\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/text from 0.34.0 to 0.35.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/46bc14382eff44b0323bea8a26d0f22b24cf1f5a\"\u003e\u003ccode\u003e46bc143\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/355\"\u003e#355\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/golang.org/x/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/2fa471e42c1e49affb8d3db2e1428a369e9a84d5\"\u003e\u003ccode\u003e2fa471e\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/tools from 0.41.0 to 0.42.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/0f165c01f6fab30bb872cf173c2609b56e796eb8\"\u003e\u003ccode\u003e0f165c0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/356\"\u003e#356\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/golang.org/x/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/807573ef71150b212ae5070207cd40e527eda58e\"\u003e\u003ccode\u003e807573e\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/text from 0.33.0 to 0.34.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/7c40434dee088f5852b1e0f52d99274b79972760\"\u003e\u003ccode\u003e7c40434\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/354\"\u003e#354\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/github.com/on...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/92c75caa6e936457bc76f506444fee900c8f27bf\"\u003e\u003ccode\u003e92c75ca\u003c/code\u003e\u003c/a\u003e Bump github.com/onsi/gomega from 1.39.0 to 1.39.1\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/compare/v6.12.1...v6.12.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `helm.sh/helm/v3` from 3.20.1 to 3.21.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/helm/helm/releases\"\u003ehelm.sh/helm/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eHelm v3.21.0 is a feature release. Users are encouraged to upgrade for the best experience.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!WARNING]\nHelm v3 is approaching end-of-life. Please update to Helm v4.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThe community keeps growing, and we'd love to see you there!\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJoin the discussion in \u003ca href=\"https://kubernetes.slack.com\"\u003eKubernetes Slack\u003c/a\u003e:\n\u003cul\u003e\n\u003cli\u003efor questions and just to hang out\u003c/li\u003e\n\u003cli\u003efor discussing PRs, code, and bugs\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eHang out at the Public Developer Call: Thursday, 9:30 Pacific via \u003ca href=\"https://zoom.us/j/696660622\"\u003eZoom\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTest, debug, and contribute charts: \u003ca href=\"https://artifacthub.io/packages/search?kind=0\"\u003eArtifactHub/packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNotable Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKubernetes client libraries to v1.36\u003c/li\u003e\n\u003cli\u003enotable changes here\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eInstallation and Upgrading\u003c/h2\u003e\n\u003cp\u003eDownload Helm v3.21.0. The common platform binaries are here:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-darwin-amd64.tar.gz\"\u003eMacOS amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-darwin-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 8bc0c1f85f8738cc3cda4a2cc73047145bcdcb1f4d9cdcc29073037bfb22fa2e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-darwin-arm64.tar.gz\"\u003eMacOS arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-darwin-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 68bfbdc022c543a2a022597b20298216877e98abe6e4a345d3ecf114d79cae5f)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-amd64.tar.gz\"\u003eLinux amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 0093eb572e3d2380f094df162ddb525e219249de88957afe24cfbb19632acd36)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-arm.tar.gz\"\u003eLinux arm\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-arm.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / d310ac387324538a37192e8e13628eb1def2596bbac6b6481ae20d8d5e3532bd)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-arm64.tar.gz\"\u003eLinux arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 8de5a0c9a47431e59fd560e91e0779c8cf9316c383da7efb84128a4c339ecb2d)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-386.tar.gz\"\u003eLinux i386\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-386.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / fc85f14c9ce7e6a48a2b19a97edbc5529ed7aa2bc10f3d2c241e1c2ef12ccd22)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-ppc64le.tar.gz\"\u003eLinux ppc64le\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-ppc64le.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / e2dced0f903acda417f879012c7e09ca461000e26a04e8f7a1cfe0dcf495f62c)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-s390x.tar.gz\"\u003eLinux s390x\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-s390x.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / a176d7460a615b8df5b1a58ecf09fcc731c7733ca4cf10116cf198575b0371b5)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-riscv64.tar.gz\"\u003eLinux riscv64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-riscv64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 4935c95c55bc5c3357143698a87185e17a39de9b6148dfd6cce0fc11859dbfeb)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-windows-amd64.zip\"\u003eWindows amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-windows-amd64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / 3ea6b8383e6c0b7ce45d06a5746313b8e9225edd88d42f4f64582ff3792d7b55)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-windows-arm64.zip\"\u003eWindows arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-windows-arm64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / 90d8c87e07267e6c71e678c9e33dd11cc121789c823ccc380de9d1dd521c8cba)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThis release was signed by \u003ca href=\"https://github.com/gjenkins8\"\u003e\u003ccode\u003e@​gjenkins8\u003c/code\u003e\u003c/a\u003e with key \u003ccode\u003eBF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739\u003c/code\u003e, which can be found at \u003ca href=\"https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739\"\u003ehttps://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739\u003c/a\u003e. Please use the attached signatures for verifying this release using gpg.\u003c/p\u003e\n\u003cp\u003eThe \u003ca href=\"https://helm.sh/docs/intro/quickstart/\"\u003eQuickstart Guide\u003c/a\u003e will get you going from there. For \u003cstrong\u003eupgrade instructions\u003c/strong\u003e or detailed installation notes, check the \u003ca href=\"https://helm.sh/docs/intro/install/\"\u003einstall guide\u003c/a\u003e. You can also use a \u003ca href=\"https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3\"\u003escript to install\u003c/a\u003e on any system with \u003ccode\u003ebash\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eWhat's Next\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e3.21.1 will contain only bug fixes.\u003c/li\u003e\n\u003cli\u003e3.22.0 is the next feature release for Kubernetes v1.37\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v3] Bump to version v3.21 e0878d41b711792be60777fd65ad23a101e6b85f (George Jenkins)\u003c/li\u003e\n\u003cli\u003efix: upgrade opentelemetry packages to patch CVEs 13d5fc4ae0e7222e1af8796ff4fa467b52208471 (Terry Howe)\u003c/li\u003e\n\u003cli\u003efix: Chart dot-name path bug 2552884e3bc1b763c3901c5ea7240b59ef6791f1 (George Jenkins)\u003c/li\u003e\n\u003cli\u003efix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow ec05dd5f0481c2de3a41a554adf3c52a6a2a9bb6 (Terry Howe)\u003c/li\u003e\n\u003cli\u003eadd image index test b0dfec5af4d7f642d8dea3b9058856541fe5017c (Pedro Tôrres)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/e0878d41b711792be60777fd65ad23a101e6b85f\"\u003e\u003ccode\u003ee0878d4\u003c/code\u003e\u003c/a\u003e [v3] Bump to version v3.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/4d4902c431129b0e6f5809e618b64dc437fc69d8\"\u003e\u003ccode\u003e4d4902c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/helm/helm/issues/32041\"\u003e#32041\u003c/a\u003e from TerryHowe/fix/upgrade-otel-cves\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/13d5fc4ae0e7222e1af8796ff4fa467b52208471\"\u003e\u003ccode\u003e13d5fc4\u003c/code\u003e\u003c/a\u003e fix: upgrade opentelemetry packages to patch CVEs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/a60cb79dfb117f22ec30833c87ab3172eba532d2\"\u003e\u003ccode\u003ea60cb79\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/d3bc8535bbc87c1b7300aee892a822372a7d4e2d\"\u003e\u003ccode\u003ed3bc853\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/helm/helm/issues/32026\"\u003e#32026\u003c/a\u003e from gjenkins8/gjenkins/code_action_pin_v3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/2552884e3bc1b763c3901c5ea7240b59ef6791f1\"\u003e\u003ccode\u003e2552884\u003c/code\u003e\u003c/a\u003e fix: Chart dot-name path bug\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/ec05dd5f0481c2de3a41a554adf3c52a6a2a9bb6\"\u003e\u003ccode\u003eec05dd5\u003c/code\u003e\u003c/a\u003e fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/6d809b20f146f8a09f74ad92080926cda0d6ae7c\"\u003e\u003ccode\u003e6d809b2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/helm/helm/issues/31883\"\u003e#31883\u003c/a\u003e from t0rr3sp3dr0/pedrotorres/backport-31776-to-v3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/b0dfec5af4d7f642d8dea3b9058856541fe5017c\"\u003e\u003ccode\u003eb0dfec5\u003c/code\u003e\u003c/a\u003e add image index test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/e629995c5d65ec2d5095ecd6d094bf85d02b3266\"\u003e\u003ccode\u003ee629995\u003c/code\u003e\u003c/a\u003e fix pulling charts from OCI indices\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/helm/helm/compare/v3.20.1...v3.21.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.17.2 to 5.19.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ev5: plumbing: transport/ssh, Shell-quote path by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2068\"\u003ego-git/go-git#2068\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, Fix relative URL resolution by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2070\"\u003ego-git/go-git#2070\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, canonical remote for relative URLs by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2074\"\u003ego-git/go-git#2074\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, error on remote without URLs by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2078\"\u003ego-git/go-git#2078\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format/idxfile, Validate offset64 indices by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2084\"\u003ego-git/go-git#2084\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: *: Reject malformed variable-length integers by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2092\"\u003ego-git/go-git#2092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format/packfile, Tighten delta validation by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2091\"\u003ego-git/go-git#2091\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Add \u003ccode\u003eworktreeFilesystem\u003c/code\u003e wrapper for worktree and hardening by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2100\"\u003ego-git/go-git#2100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: config: validate submodule names by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2082\"\u003ego-git/go-git#2082\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.19.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2111\"\u003ego-git/go-git#2111\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: Allow MkdirAll on worktree-root paths by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2117\"\u003ego-git/go-git#2117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: Stop validating symlink target paths by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2116\"\u003ego-git/go-git#2116\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format decoder input bounds and contracts by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2125\"\u003ego-git/go-git#2125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplumbing: format/packfile, cap delta chain depth in parser by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2137\"\u003ego-git/go-git#2137\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.19.0...v5.19.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.19.0...v5.19.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3c3be601aa6c0fd0d536c0d1e4f898b4c60e65fe\"\u003e\u003ccode\u003e3c3be60\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2137\"\u003e#2137\u003c/a\u003e from go-git/validate-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3fba897bd9e84b1aec170fa708b80e297b7d6cf6\"\u003e\u003ccode\u003e3fba897\u003c/code\u003e\u003c/a\u003e plumbing: format/packfile, cap delta chain depth in parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a97d6601c85e017bb64c2b0f2e3169f6ef6a6709\"\u003e\u003ccode\u003ea97d660\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2125\"\u003e#2125\u003c/a\u003e from hiddeco/v5/format-input-bounds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/aeaa125c8af8e4c4c95b574c22c5633e97fc436e\"\u003e\u003ccode\u003eaeaa125\u003c/code\u003e\u003c/a\u003e plumbing: format/objfile, require Header before Read\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1f38e171218526ea254a73187a52f0648253c1b8\"\u003e\u003ccode\u003e1f38e17\u003c/code\u003e\u003c/a\u003e plumbing: format/packfile, bound inflate size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f7545a02529e03998d6a7219140dc0e6644ad337\"\u003e\u003ccode\u003ef7545a0\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, bound nr by file size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/170b88181f385913a457a08b68c88956fb3f8e4f\"\u003e\u003ccode\u003e170b881\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2116\"\u003e#2116\u003c/a\u003e from pjbgf/symlink-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/7b6d994467f06630268904aa3c441b6de7248b31\"\u003e\u003ccode\u003e7b6d994\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2117\"\u003e#2117\u003c/a\u003e from hiddeco/v5/worktree-fs-mkdirall-root-noop\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f0709b32f8fbb87c16cd63c6762d2cd515f36541\"\u003e\u003ccode\u003ef0709b3\u003c/code\u003e\u003c/a\u003e git: Stop validating symlink target paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/776d00f11d336f26862d0f2bab987b217f3a7844\"\u003e\u003ccode\u003e776d00f\u003c/code\u003e\u003c/a\u003e git: Allow MkdirAll on worktree-root paths\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.19.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/mod` from 0.34.0 to 0.36.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/643da9ba74f1165d8cae1505d453b3de3cf21b7b\"\u003e\u003ccode\u003e643da9b\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/ccc3cdf529d1eee2a832437eb1b85240044d21cb\"\u003e\u003ccode\u003eccc3cdf\u003c/code\u003e\u003c/a\u003e zip: include 'but content has correct sum' note in TestVCS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/ab3031803214705d2c9f1102318b083e7086a155\"\u003e\u003ccode\u003eab30318\u003c/code\u003e\u003c/a\u003e zip: update zip hashes for new flate compression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/03901d351deb5bd95deb90714fb75bf8e232cb22\"\u003e\u003ccode\u003e03901d3\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/mod/compare/v0.34.0...v0.36.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.52.0 to 0.53.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a8d1fc14d9e33e1f6842ab78a0127d42cd8fff44\"\u003e\u003ccode\u003ea8d1fc1\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/056ac742146af742aa760d690269c02fa238cc7a\"\u003e\u003ccode\u003e056ac74\u003c/code\u003e\u003c/a\u003e quic: avoid depending on golang.org/x/sys/unix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/c85f61116e47b1523036c3005f8b2923b661eb64\"\u003e\u003ccode\u003ec85f611\u003c/code\u003e\u003c/a\u003e http3: add http3 package for testing in std\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/805fc81a196b95c3c00f02e135ffb8a8d5582bdf\"\u003e\u003ccode\u003e805fc81\u003c/code\u003e\u003c/a\u003e http2: add transport API tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e63b894ab3cd38a1d05396530dccde7ffa3f68d0\"\u003e\u003ccode\u003ee63b894\u003c/code\u003e\u003c/a\u003e http2: support testing via net/http.Transport.RoundTrip\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/9ee1e484e5aab0d95b3babbc6f1384d03f4f9e22\"\u003e\u003ccode\u003e9ee1e48\u003c/code\u003e\u003c/a\u003e http2/hpack: prevent HeaderField from escaping during encoding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1e71bd86e4a302b4e731bc06da6eb51679c7bd49\"\u003e\u003ccode\u003e1e71bd8\u003c/code\u003e\u003c/a\u003e http2: prevent hanging Transport due to bad SETTINGS frame\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/7bca15042b9d2bda1402cb42232a9c6ddbae6212\"\u003e\u003ccode\u003e7bca150\u003c/code\u003e\u003c/a\u003e internal/http3: respect net/http Server Shutdown context when shutting down\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/44c41bee5028537e64410b1583e8ae329ceac284\"\u003e\u003ccode\u003e44c41be\u003c/code\u003e\u003c/a\u003e internal/http3: prevent server from holding mutex when sleeping during shutdown\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/228a67a374710bff77fc490e7f538b317c34e247\"\u003e\u003ccode\u003e228a67a\u003c/code\u003e\u003c/a\u003e internal/http3: add CloseIdleConnections support in transport\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.52.0...v0.53.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/apimachinery` from 0.35.3 to 0.36.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/7af103a2a439106791220493349f8d13bc0a1efd\"\u003e\u003ccode\u003e7af103a\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.1 tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/efb7f2628b269921e5f12c4d42aece418c76789c\"\u003e\u003ccode\u003eefb7f26\u003c/code\u003e\u003c/a\u003e Merge remote-tracking branch 'origin/master' into release-1.36\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/d966e565cd271c44ba799b594ddb67987791cb80\"\u003e\u003ccode\u003ed966e56\u003c/code\u003e\u003c/a\u003e Update github.com/moby/spdystream from v0.5.0 to v0.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/79b363268543c402b68449b0cd531f8f8d0197d1\"\u003e\u003ccode\u003e79b3632\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/137864\"\u003e#137864\u003c/a\u003e from yongruilin/dv-dra-mismatch\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/a8822f7bf620eede6c3f36354cec940c3844e7a8\"\u003e\u003ccode\u003ea8822f7\u003c/code\u003e\u003c/a\u003e Add slice and map union member support with tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/7dba2d08090b9d2285266ec2492d0b6395151f50\"\u003e\u003ccode\u003e7dba2d0\u003c/code\u003e\u003c/a\u003e Use IsZero instead of IsNil for union ratcheting check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/d95710f91d61d2656298071a40a04d5343c642e5\"\u003e\u003ccode\u003ed95710f\u003c/code\u003e\u003c/a\u003e Fix union validation ratcheting when oldObj is nil\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/729062d58854ae8e9e85f5dc8d1660fb963ae483\"\u003e\u003ccode\u003e729062d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/137849\"\u003e#137849\u003c/a\u003e from bryantbiggs/deps/update-kube-openapi\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/13b12e6214bc1c2253aa3bcf8d52c2f83e767eb0\"\u003e\u003ccode\u003e13b12e6\u003c/code\u003e\u003c/a\u003e dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/27f467019a4eb99953b81708326a574524b11e8f\"\u003e\u003ccode\u003e27f4670\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/136657\"\u003e#136657\u003c/a\u003e from Jefftree/sharding-test\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kubernetes/apimachinery/compare/v0.35.3...v0.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/saschagrunert/zeitgeist/pull/613","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/saschagrunert%2Fzeitgeist/issues/613","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/613/packages"}},{"old_version":"0.21.5","new_version":"0.21.6","update_type":"patch","path":null,"pr_created_at":"2026-06-01T06:03:14.000Z","version_change":"0.21.5 → 0.21.6","issue":{"uuid":"4560742060","node_id":"PR_kwDOEQW51M7hPc3T","number":2117,"state":"closed","title":"update: bump the gomod-packages group across 1 directory with 14 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-09T03:23:41.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-01T06:03:14.000Z","updated_at":"2026-06-09T03:23:43.000Z","time_to_close":681627,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"update: bump","group_name":"gomod-packages","update_count":14,"packages":[{"name":"github.com/alicebob/miniredis/v2","old_version":"2.37.0","new_version":"2.38.0","repository_url":"https://github.com/alicebob/miniredis"},{"name":"github.com/docker/cli","old_version":"29.4.3+incompatible","new_version":"29.5.3+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/go-playground/validator/v10","old_version":"10.30.2","new_version":"10.30.3","repository_url":"https://github.com/go-playground/validator"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/redis/go-redis/v9","old_version":"9.19.0","new_version":"9.20.0","repository_url":"https://github.com/redis/go-redis"},{"name":"github.com/sigstore/rekor","old_version":"1.5.1","new_version":"1.5.2","repository_url":"https://github.com/sigstore/rekor"},{"name":"k8s.io/api","old_version":"0.36.0","new_version":"0.36.1","repository_url":"https://github.com/kubernetes/api"},{"name":"k8s.io/client-go","old_version":"0.36.0","new_version":"0.36.1","repository_url":"https://github.com/kubernetes/client-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the gomod-packages group with 8 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) | `2.37.0` | `2.38.0` |\n| [github.com/docker/cli](https://github.com/docker/cli) | `29.4.3+incompatible` | `29.5.3+incompatible` |\n| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.30.2` | `10.30.3` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.5` | `0.21.6` |\n| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.19.0` | `9.20.0` |\n| [github.com/sigstore/rekor](https://github.com/sigstore/rekor) | `1.5.1` | `1.5.2` |\n| [k8s.io/api](https://github.com/kubernetes/api) | `0.36.0` | `0.36.1` |\n| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.0` | `0.36.1` |\n\n\nUpdates `github.com/alicebob/miniredis/v2` from 2.37.0 to 2.38.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/alicebob/miniredis/releases\"\u003egithub.com/alicebob/miniredis/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eDELEX and fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eXADD TRIM (thanks \u003ca href=\"https://github.com/evan-choi\"\u003e\u003ccode\u003e@​evan-choi\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate XINFO STREAM (thanks \u003ca href=\"https://github.com/TomBailey167\"\u003e\u003ccode\u003e@​TomBailey167\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003elua fix (thanks \u003ca href=\"https://github.com/infastin\"\u003e\u003ccode\u003e@​infastin\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epartial support for DELEX\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md\"\u003egithub.com/alicebob/miniredis/v2's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.38.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eXADD TRIM (thanks \u003ca href=\"https://github.com/evan-choi\"\u003e\u003ccode\u003e@​evan-choi\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate XINFO STREAM (thanks \u003ca href=\"https://github.com/TomBailey167\"\u003e\u003ccode\u003e@​TomBailey167\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003elua fix (thanks \u003ca href=\"https://github.com/infastin\"\u003e\u003ccode\u003e@​infastin\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epartial support for DELEX\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/d67bfae4c370e8451561165eca6ddc50f056f083\"\u003e\u003ccode\u003ed67bfae\u003c/code\u003e\u003c/a\u003e update changelog for v2.38.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/2b1abd81e1c58fb6d440b4637287d3ee09f7f66a\"\u003e\u003ccode\u003e2b1abd8\u003c/code\u003e\u003c/a\u003e DELEX (partly) (\u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/442\"\u003e#442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/452dd373d138f7ad858dd6e25e2a92753f83498e\"\u003e\u003ccode\u003e452dd37\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/440\"\u003e#440\u003c/a\u003e from infastin/server-alias\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/b5b8ec2cfde407552ea028514409599dbd5e1600\"\u003e\u003ccode\u003eb5b8ec2\u003c/code\u003e\u003c/a\u003e feat: add 'server' alias to 'redis' in lua scripts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/ecc4af14f2444ea1a57d040185781fe197bdfc9d\"\u003e\u003ccode\u003eecc4af1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/439\"\u003e#439\u003c/a\u003e from TomBailey167/xinfo-stream-last-generated-id\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/4a2a33e841b359a2569fe9a35d6d46414bf40aec\"\u003e\u003ccode\u003e4a2a33e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/435\"\u003e#435\u003c/a\u003e from evan-choi/fix/xadd-equals-trim-modifier\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/d6261eff59117ccea7387f3a608caa1006b1adef\"\u003e\u003ccode\u003ed6261ef\u003c/code\u003e\u003c/a\u003e feat: add last-generated-id to XINFO STREAM response\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/f4d8aa342425de1b740a6f22a7dd230f83e3712a\"\u003e\u003ccode\u003ef4d8aa3\u003c/code\u003e\u003c/a\u003e fix: accept = trim modifier in xadd\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/alicebob/miniredis/compare/v2.37.0...v2.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/cli` from 29.4.3+incompatible to 29.5.3+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/d1c06ef6b41d88d76866aea43c246cd7c63d04fa\"\u003e\u003ccode\u003ed1c06ef\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7022\"\u003e#7022\u003c/a\u003e from mickael-docker/docs-request-field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/7dd053b1d1d66bec5f793d090dba7e81240afadd\"\u003e\u003ccode\u003e7dd053b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7003\"\u003e#7003\u003c/a\u003e from thaJeztah/logs_links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/37c3d316cc76fa9ad27e3897fa7e60c5a3b66d1f\"\u003e\u003ccode\u003e37c3d31\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7024\"\u003e#7024\u003c/a\u003e from thaJeztah/add_zizmor\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/45f10f226e8e6eba41064a7819bec986ac850288\"\u003e\u003ccode\u003e45f10f2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7025\"\u003e#7025\u003c/a\u003e from vvoland/update-go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/b458dc9e81e732fdaa66dac672db36ff28d6b6c5\"\u003e\u003ccode\u003eb458dc9\u003c/code\u003e\u003c/a\u003e update to go1.26.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1953194bd5a44b1a991eea79c4f0aacfb6c74aab\"\u003e\u003ccode\u003e1953194\u003c/code\u003e\u003c/a\u003e gha: apply zizmor fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/ac0419ea90d1177eb11655a5ee9795126e8deb7a\"\u003e\u003ccode\u003eac0419e\u003c/code\u003e\u003c/a\u003e gha: add zizmor workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1aa0416b8a5973bc5f605a42d13f1926ab01f2ac\"\u003e\u003ccode\u003e1aa0416\u003c/code\u003e\u003c/a\u003e docs: recommend default deny and clarify requesturi field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/3a8595298407d5ab67d0ed13d57819dddf561d98\"\u003e\u003ccode\u003e3a85952\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7020\"\u003e#7020\u003c/a\u003e from thaJeztah/full_semver\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/8d3fbdf5707f6cd6b3157eef5aeba8af2f436f9d\"\u003e\u003ccode\u003e8d3fbdf\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/7019\"\u003e#7019\u003c/a\u003e from thaJeztah/dependabot_labels\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v29.4.3...v29.5.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-playground/validator/v10` from 10.30.2 to 10.30.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-playground/validator/releases\"\u003egithub.com/go-playground/validator/v10's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev10.30.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix/issue 1550 UUID case insensitive by \u003ca href=\"https://github.com/leo-jp-edwards\"\u003e\u003ccode\u003e@​leo-jp-edwards\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1551\"\u003ego-playground/validator#1551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFeat: Add NoneOf Validation by \u003ca href=\"https://github.com/Carmen-Shannon\"\u003e\u003ccode\u003e@​Carmen-Shannon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1554\"\u003ego-playground/validator#1554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd bcp47_strict_language_tag validator by \u003ca href=\"https://github.com/bfabio\"\u003e\u003ccode\u003e@​bfabio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1489\"\u003ego-playground/validator#1489\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1558\"\u003ego-playground/validator#1558\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1559\"\u003ego-playground/validator#1559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd CLAUDE.md with repo guidance for Claude Code by \u003ca href=\"https://github.com/deankarn\"\u003e\u003ccode\u003e@​deankarn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1564\"\u003ego-playground/validator#1564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce build size with dead code elimination by \u003ca href=\"https://github.com/zemzale\"\u003e\u003ccode\u003e@​zemzale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1542\"\u003ego-playground/validator#1542\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactored out detectFileMIMEType, matchesMIMEType logic for reuse. Added standalone isMIMEType validator for flexibility by \u003ca href=\"https://github.com/dapzthelegend\"\u003e\u003ccode\u003e@​dapzthelegend\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1544\"\u003ego-playground/validator#1544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(translations): add timezone support for en and ja locales by \u003ca href=\"https://github.com/dedyf5\"\u003e\u003ccode\u003e@​dedyf5\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1566\"\u003ego-playground/validator#1566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: use errors.As in README and translations example by \u003ca href=\"https://github.com/eyupcanakman\"\u003e\u003ccode\u003e@​eyupcanakman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1563\"\u003ego-playground/validator#1563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: fix typos by \u003ca href=\"https://github.com/rymiyamoto\"\u003e\u003ccode\u003e@​rymiyamoto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1568\"\u003ego-playground/validator#1568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add origin validator for web origin URLs by \u003ca href=\"https://github.com/ahmedkamalio\"\u003e\u003ccode\u003e@​ahmedkamalio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1565\"\u003ego-playground/validator#1565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject hostnames with trailing hyphen in RFC 952 validator by \u003ca href=\"https://github.com/ahmedkamalio\"\u003e\u003ccode\u003e@​ahmedkamalio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1569\"\u003ego-playground/validator#1569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(lint): correctly disable govet inline analyzer \u0026amp; deprecated gomodguard by \u003ca href=\"https://github.com/nodivbyzero\"\u003e\u003ccode\u003e@​nodivbyzero\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1574\"\u003ego-playground/validator#1574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1572\"\u003ego-playground/validator#1572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1571\"\u003ego-playground/validator#1571\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(cron): anchor regex and accept full cron syntax by \u003ca href=\"https://github.com/ahmedkamalio\"\u003e\u003ccode\u003e@​ahmedkamalio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1577\"\u003ego-playground/validator#1577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1580\"\u003ego-playground/validator#1580\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: omit blank tag names from namespace by \u003ca href=\"https://github.com/abemedia\"\u003e\u003ccode\u003e@​abemedia\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1567\"\u003ego-playground/validator#1567\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(docs): correct ripemd160 tag name in README validation table by \u003ca href=\"https://github.com/napoleonbot\"\u003e\u003ccode\u003e@​napoleonbot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1582\"\u003ego-playground/validator#1582\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/leo-jp-edwards\"\u003e\u003ccode\u003e@​leo-jp-edwards\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1551\"\u003ego-playground/validator#1551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Carmen-Shannon\"\u003e\u003ccode\u003e@​Carmen-Shannon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1554\"\u003ego-playground/validator#1554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dapzthelegend\"\u003e\u003ccode\u003e@​dapzthelegend\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1544\"\u003ego-playground/validator#1544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dedyf5\"\u003e\u003ccode\u003e@​dedyf5\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1566\"\u003ego-playground/validator#1566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eyupcanakman\"\u003e\u003ccode\u003e@​eyupcanakman\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1563\"\u003ego-playground/validator#1563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rymiyamoto\"\u003e\u003ccode\u003e@​rymiyamoto\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1568\"\u003ego-playground/validator#1568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/abemedia\"\u003e\u003ccode\u003e@​abemedia\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1567\"\u003ego-playground/validator#1567\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/napoleonbot\"\u003e\u003ccode\u003e@​napoleonbot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-playground/validator/pull/1582\"\u003ego-playground/validator#1582\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-playground/validator/compare/v10.30.2...v10.30.3\"\u003ehttps://github.com/go-playground/validator/compare/v10.30.2...v10.30.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/ac4c1bab0d4aa957466faa1948af28130767e43a\"\u003e\u003ccode\u003eac4c1ba\u003c/code\u003e\u003c/a\u003e fix(docs): correct ripemd160 tag name in README validation table (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1582\"\u003e#1582\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/feacb34d4fa5bd263392bcd03d5348a94ca28870\"\u003e\u003ccode\u003efeacb34\u003c/code\u003e\u003c/a\u003e feat: omit blank tag names from namespace (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1567\"\u003e#1567\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/5ed0a7ea9ac87c2409326e1d88f34678658b84e0\"\u003e\u003ccode\u003e5ed0a7e\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1580\"\u003e#1580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/0364541fa467027703223b3d0cace07a667c8302\"\u003e\u003ccode\u003e0364541\u003c/code\u003e\u003c/a\u003e fix(cron): anchor regex and accept full cron syntax (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1577\"\u003e#1577\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/8eb2659789a33bda9262ce62eed2d714539dc8c5\"\u003e\u003ccode\u003e8eb2659\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1571\"\u003e#1571\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/f7e1721521360af7958fe59e9c34ba0813f25bf8\"\u003e\u003ccode\u003ef7e1721\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1572\"\u003e#1572\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/cf37fce7a1a5dee2810a085ae39aec5c78e7cd8a\"\u003e\u003ccode\u003ecf37fce\u003c/code\u003e\u003c/a\u003e fix(lint): correctly disable govet inline analyzer \u0026amp; deprecated gomodguard (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/7c334e52092ad1224f0a2eed6bc77408374048b7\"\u003e\u003ccode\u003e7c334e5\u003c/code\u003e\u003c/a\u003e fix: reject hostnames with trailing hyphen in RFC 952 validator (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1569\"\u003e#1569\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/6bcb7bcaf6a99f8d6cf16cc8d062ad8c47950901\"\u003e\u003ccode\u003e6bcb7bc\u003c/code\u003e\u003c/a\u003e feat: add origin validator for web origin URLs (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1565\"\u003e#1565\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-playground/validator/commit/6fd2fa82069c9aede1882d703c0e7ee2660bc4d9\"\u003e\u003ccode\u003e6fd2fa8\u003c/code\u003e\u003c/a\u003e docs: fix typos (\u003ca href=\"https://redirect.github.com/go-playground/validator/issues/1568\"\u003e#1568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-playground/validator/compare/v10.30.2...v10.30.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/redis/go-redis/v9` from 9.19.0 to 9.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/go-redis/releases\"\u003egithub.com/redis/go-redis/v9's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e9.20.0\u003c/h2\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRedis 8.8 Support\u003c/h3\u003e\n\u003cp\u003eThis release adds support for \u003cstrong\u003eRedis 8.8\u003c/strong\u003e. The README's supported-versions list now includes Redis 8.8 alongside 8.0/8.2/8.4, and CI exercises the \u003ccode\u003e8.8\u003c/code\u003e client-libs-test image across the full suite (Makefile, build workflow, doctests, run-tests action, and docker-compose).\u003c/p\u003e\n\u003cp\u003eCoverage for the new commands that ship in the 8.x line, rounded out in this release:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eAR*\u003c/code\u003e array data type\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3813\"\u003e#3813\u003c/a\u003e) — new array data structure, exposed via the \u003ccode\u003eArrayCmdable\u003c/code\u003e interface (see the experimental-features highlight below).\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eINCREX\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3816\"\u003e#3816\u003c/a\u003e) — atomic increment with expiration in a single round-trip.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXNACK\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3790\"\u003e#3790\u003c/a\u003e) — explicit negative-acknowledge of pending stream entries.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXAUTOCLAIM\u003c/code\u003e PEL deletes\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3798\"\u003e#3798\u003c/a\u003e) — \u003ccode\u003eXAUTOCLAIM\u003c/code\u003e/\u003ccode\u003eXAUTOCLAIMJUSTID\u003c/code\u003e now return the list of deleted message IDs from the pending entries list.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eTS.RANGE\u003c/code\u003e multiple aggregators\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3791\"\u003e#3791\u003c/a\u003e) — \u003ccode\u003eTS.RANGE\u003c/code\u003e/\u003ccode\u003eTS.REVRANGE\u003c/code\u003e/\u003ccode\u003eTS.MRANGE\u003c/code\u003e/\u003ccode\u003eTS.MREVRANGE\u003c/code\u003e accept multiple aggregators in a single call.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eZ(UNION|INTER|DIFF)\u003c/code\u003e \u003ccode\u003eCOUNT\u003c/code\u003e aggregator\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3802\"\u003e#3802\u003c/a\u003e) — \u003ccode\u003eCOUNT\u003c/code\u003e reducer for sorted-set set operations.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eJSON.SET FPHA\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3797\"\u003e#3797\u003c/a\u003e) — new \u003ccode\u003eFPHA\u003c/code\u003e argument that specifies the floating-point type for homogeneous FP arrays.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCI image bump (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3814\"\u003e#3814\u003c/a\u003e) by \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e. Command coverage contributions by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Khukharr\"\u003e\u003ccode\u003e@​Khukharr\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eStable RESP3 for RediSearch (\u003ccode\u003eUnstableResp3\u003c/code\u003e deprecated)\u003c/h3\u003e\n\u003cp\u003e\u003ccode\u003eFT.SEARCH\u003c/code\u003e, \u003ccode\u003eFT.AGGREGATE\u003c/code\u003e, \u003ccode\u003eFT.INFO\u003c/code\u003e, \u003ccode\u003eFT.SPELLCHECK\u003c/code\u003e, and \u003ccode\u003eFT.SYNDUMP\u003c/code\u003e now parse RESP3 (map) responses into the same typed result objects as RESP2 — \u003ccode\u003eVal()\u003c/code\u003e and \u003ccode\u003eResult()\u003c/code\u003e work uniformly on both protocols, no flag required. Previously, RESP3 search responses required \u003ccode\u003eUnstableResp3: true\u003c/code\u003e and were returned as opaque maps accessible only via \u003ccode\u003eRawResult()\u003c/code\u003e / \u003ccode\u003eRawVal()\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eAs a result, the \u003ccode\u003eUnstableResp3\u003c/code\u003e option is now a \u003cstrong\u003eno-op\u003c/strong\u003e across every options struct (\u003ccode\u003eOptions\u003c/code\u003e, \u003ccode\u003eClusterOptions\u003c/code\u003e, \u003ccode\u003eUniversalOptions\u003c/code\u003e, \u003ccode\u003eFailoverOptions\u003c/code\u003e, \u003ccode\u003eRingOptions\u003c/code\u003e) and has been marked \u003ccode\u003e// Deprecated:\u003c/code\u003e. The field is retained for backwards compatibility — existing code that sets \u003ccode\u003eUnstableResp3: true\u003c/code\u003e will continue to compile and behave identically — but it will be removed in a future release and new code should not set it. \u003ccode\u003eRawResult()\u003c/code\u003e / \u003ccode\u003eRawVal()\u003c/code\u003e continue to work for callers that prefer the raw RESP payload.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3741\"\u003e#3741\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eExperimental Array Data Structure Commands\u003c/h3\u003e\n\u003cp\u003eAdds an experimental \u003ccode\u003eArrayCmdable\u003c/code\u003e interface with the \u003ccode\u003eAR*\u003c/code\u003e command family (\u003ccode\u003eARSet\u003c/code\u003e, \u003ccode\u003eARGet\u003c/code\u003e, \u003ccode\u003eARGetRange\u003c/code\u003e, \u003ccode\u003eARMSet\u003c/code\u003e, \u003ccode\u003eARMGet\u003c/code\u003e, \u003ccode\u003eARDel\u003c/code\u003e, \u003ccode\u003eARDelRange\u003c/code\u003e, \u003ccode\u003eARScan\u003c/code\u003e, \u003ccode\u003eARSeek\u003c/code\u003e, \u003ccode\u003eARNext\u003c/code\u003e, \u003ccode\u003eARLastItems\u003c/code\u003e, \u003ccode\u003eARGrep\u003c/code\u003e, \u003ccode\u003eARGrepWithValues\u003c/code\u003e, \u003ccode\u003eARInfo\u003c/code\u003e/\u003ccode\u003eARInfoFull\u003c/code\u003e, and typed reducers \u003ccode\u003eAROpSum\u003c/code\u003e/\u003ccode\u003eAROpMin\u003c/code\u003e/\u003ccode\u003eAROpMax\u003c/code\u003e/\u003ccode\u003eAROpAnd\u003c/code\u003e/\u003ccode\u003eAROpOr\u003c/code\u003e/\u003ccode\u003eAROpXor\u003c/code\u003e/\u003ccode\u003eAROpMatch\u003c/code\u003e/\u003ccode\u003eAROpUsed\u003c/code\u003e) for working with Redis 8.8's new array data type. \u003cstrong\u003eAPI is experimental and may change in a future release.\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3813\"\u003e#3813\u003c/a\u003e) by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e✨ New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRESP3 search parser\u003c/strong\u003e: First-class RESP3 parsing for \u003ccode\u003eFT.SEARCH\u003c/code\u003e/\u003ccode\u003eFT.AGGREGATE\u003c/code\u003e/\u003ccode\u003eFT.INFO\u003c/code\u003e/\u003ccode\u003eFT.SPELLCHECK\u003c/code\u003e/\u003ccode\u003eFT.SYNDUMP\u003c/code\u003e responses with backwards compatibility for RESP2 (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3741\"\u003e#3741\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eINCREX\u003c/strong\u003e: New \u003ccode\u003eINCREX\u003c/code\u003e command support — atomic increment with expiration (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3816\"\u003e#3816\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eXNACK\u003c/strong\u003e: Client support for the \u003ccode\u003eXNACK\u003c/code\u003e stream command for explicitly negative-acknowledging pending entries (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3790\"\u003e#3790\u003c/a\u003e) by \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTS range multiple aggregators\u003c/strong\u003e: \u003ccode\u003eTS.RANGE\u003c/code\u003e/\u003ccode\u003eTS.REVRANGE\u003c/code\u003e/\u003ccode\u003eTS.MRANGE\u003c/code\u003e/\u003ccode\u003eTS.MREVRANGE\u003c/code\u003e now accept multiple aggregators in a single call (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3791\"\u003e#3791\u003c/a\u003e) by \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXAutoClaim\u003c/code\u003e deleted IDs\u003c/strong\u003e: \u003ccode\u003eXAUTOCLAIM\u003c/code\u003e/\u003ccode\u003eXAUTOCLAIMJUSTID\u003c/code\u003e now return the list of deleted message IDs from the PEL (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3798\"\u003e#3798\u003c/a\u003e) by \u003ca href=\"https://github.com/Khukharr\"\u003e\u003ccode\u003e@​Khukharr\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eJSON.SET FPHA\u003c/code\u003e\u003c/strong\u003e: \u003ccode\u003eJSON.SET\u003c/code\u003e accepts a new \u003ccode\u003eFPHA\u003c/code\u003e argument that specifies the floating-point type for homogeneous floating-point arrays (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3797\"\u003e#3797\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSorted-set union/intersection COUNT\u003c/strong\u003e: \u003ccode\u003eZUNION\u003c/code\u003e/\u003ccode\u003eZINTER\u003c/code\u003e/\u003ccode\u003eZDIFF\u003c/code\u003e aggregator now supports \u003ccode\u003eCOUNT\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3802\"\u003e#3802\u003c/a\u003e) by \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eFT.HYBRID\u003c/code\u003e vector validation\u003c/strong\u003e: Validates hybrid-search vector input types and adds proper typed vector parameters (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3756\"\u003e#3756\u003c/a\u003e) by \u003ca href=\"https://github.com/DengY11\"\u003e\u003ccode\u003e@​DengY11\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eCluster pool wait stats\u003c/strong\u003e: \u003ccode\u003eClusterClient.PoolStats()\u003c/code\u003e now accumulates \u003ccode\u003eWaitCount\u003c/code\u003e and \u003ccode\u003eWaitDurationNs\u003c/code\u003e across all node pools (previously always zero) (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3809\"\u003e#3809\u003c/a\u003e) by \u003ca href=\"https://github.com/LINKIWI\"\u003e\u003ccode\u003e@​LINKIWI\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eTLS-only Cluster PubSub\u003c/strong\u003e: \u003ccode\u003eCLUSTER SLOTS\u003c/code\u003e port-0 entries now fall back to the origin endpoint's port, fixing \u003ccode\u003edial tcp \u0026lt;ip\u0026gt;:0: connection refused\u003c/code\u003e on TLS-only clusters started with \u003ccode\u003e--port 0 --tls-port \u0026lt;port\u0026gt;\u003c/code\u003e (fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3726\"\u003e#3726\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3828\"\u003e#3828\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSharded PubSub reconnect routing\u003c/strong\u003e: \u003ccode\u003ePubSub.conn()\u003c/code\u003e now passes both regular (\u003ccode\u003ec.channels\u003c/code\u003e) and sharded (\u003ccode\u003ec.schannels\u003c/code\u003e) channels into the per-PubSub \u003ccode\u003enewConn\u003c/code\u003e closure. Previously, \u003ccode\u003eClusterClient.SSubscribe\u003c/code\u003e-only PubSubs reconnected to a random node (because the routing closure saw an empty channel list), the \u003ccode\u003eSSUBSCRIBE\u003c/code\u003e was sent to the wrong shard, and the resulting \u003ccode\u003eMOVED\u003c/code\u003e reply was silently dropped (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3829\"\u003e#3829\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eClusterClient \u003ccode\u003eWatch\u003c/code\u003e retry\u003c/strong\u003e: User errors returned from a \u003ccode\u003eWatch\u003c/code\u003e callback are no longer subjected to cluster-retry classification; transient cluster errors still retry, but a callback returning e.g. \u003ccode\u003enet.ErrClosed\u003c/code\u003e short-circuits immediately (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3821\"\u003e#3821\u003c/a\u003e) by \u003ca href=\"https://github.com/obiyang\"\u003e\u003ccode\u003e@​obiyang\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md\"\u003egithub.com/redis/go-redis/v9's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e9.20.0 (2026-05-28)\u003c/h1\u003e\n\u003ch2\u003e🚀 Highlights\u003c/h2\u003e\n\u003ch3\u003eRedis 8.8 Support\u003c/h3\u003e\n\u003cp\u003eThis release adds support for \u003cstrong\u003eRedis 8.8\u003c/strong\u003e. The README's supported-versions list now includes Redis 8.8 alongside 8.0/8.2/8.4, and CI exercises the \u003ccode\u003e8.8-rc1\u003c/code\u003e client-libs-test image across the full suite (Makefile, build workflow, doctests, run-tests action, and docker-compose).\u003c/p\u003e\n\u003cp\u003eCoverage for the new commands that ship in the 8.x line, rounded out in this release:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eAR*\u003c/code\u003e array data type\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3813\"\u003e#3813\u003c/a\u003e) — new array data structure, exposed via the \u003ccode\u003eArrayCmdable\u003c/code\u003e interface (see the experimental-features highlight below).\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eINCREX\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3816\"\u003e#3816\u003c/a\u003e) — atomic increment with expiration in a single round-trip.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXNACK\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3790\"\u003e#3790\u003c/a\u003e) — explicit negative-acknowledge of pending stream entries.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXAUTOCLAIM\u003c/code\u003e PEL deletes\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3798\"\u003e#3798\u003c/a\u003e) — \u003ccode\u003eXAUTOCLAIM\u003c/code\u003e/\u003ccode\u003eXAUTOCLAIMJUSTID\u003c/code\u003e now return the list of deleted message IDs from the pending entries list.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eTS.RANGE\u003c/code\u003e multiple aggregators\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3791\"\u003e#3791\u003c/a\u003e) — \u003ccode\u003eTS.RANGE\u003c/code\u003e/\u003ccode\u003eTS.REVRANGE\u003c/code\u003e/\u003ccode\u003eTS.MRANGE\u003c/code\u003e/\u003ccode\u003eTS.MREVRANGE\u003c/code\u003e accept multiple aggregators in a single call.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eZ(UNION|INTER|DIFF)\u003c/code\u003e \u003ccode\u003eCOUNT\u003c/code\u003e aggregator\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3802\"\u003e#3802\u003c/a\u003e) — \u003ccode\u003eCOUNT\u003c/code\u003e reducer for sorted-set set operations.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eJSON.SET FPHA\u003c/code\u003e\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3797\"\u003e#3797\u003c/a\u003e) — new \u003ccode\u003eFPHA\u003c/code\u003e argument that specifies the floating-point type for homogeneous FP arrays.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCI image bump (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3814\"\u003e#3814\u003c/a\u003e) by \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e. Command coverage contributions by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Khukharr\"\u003e\u003ccode\u003e@​Khukharr\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eStable RESP3 for RediSearch (\u003ccode\u003eUnstableResp3\u003c/code\u003e deprecated)\u003c/h3\u003e\n\u003cp\u003e\u003ccode\u003eFT.SEARCH\u003c/code\u003e, \u003ccode\u003eFT.AGGREGATE\u003c/code\u003e, \u003ccode\u003eFT.INFO\u003c/code\u003e, \u003ccode\u003eFT.SPELLCHECK\u003c/code\u003e, and \u003ccode\u003eFT.SYNDUMP\u003c/code\u003e now parse RESP3 (map) responses into the same typed result objects as RESP2 — \u003ccode\u003eVal()\u003c/code\u003e and \u003ccode\u003eResult()\u003c/code\u003e work uniformly on both protocols, no flag required. Previously, RESP3 search responses required \u003ccode\u003eUnstableResp3: true\u003c/code\u003e and were returned as opaque maps accessible only via \u003ccode\u003eRawResult()\u003c/code\u003e / \u003ccode\u003eRawVal()\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eAs a result, the \u003ccode\u003eUnstableResp3\u003c/code\u003e option is now a \u003cstrong\u003eno-op\u003c/strong\u003e across every options struct (\u003ccode\u003eOptions\u003c/code\u003e, \u003ccode\u003eClusterOptions\u003c/code\u003e, \u003ccode\u003eUniversalOptions\u003c/code\u003e, \u003ccode\u003eFailoverOptions\u003c/code\u003e, \u003ccode\u003eRingOptions\u003c/code\u003e) and has been marked \u003ccode\u003e// Deprecated:\u003c/code\u003e. The field is retained for backwards compatibility — existing code that sets \u003ccode\u003eUnstableResp3: true\u003c/code\u003e will continue to compile and behave identically — but it will be removed in a future release and new code should not set it. \u003ccode\u003eRawResult()\u003c/code\u003e / \u003ccode\u003eRawVal()\u003c/code\u003e continue to work for callers that prefer the raw RESP payload.\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3741\"\u003e#3741\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eExperimental Array Data Structure Commands\u003c/h3\u003e\n\u003cp\u003eAdds an experimental \u003ccode\u003eArrayCmdable\u003c/code\u003e interface with the \u003ccode\u003eAR*\u003c/code\u003e command family (\u003ccode\u003eARSet\u003c/code\u003e, \u003ccode\u003eARGet\u003c/code\u003e, \u003ccode\u003eARGetRange\u003c/code\u003e, \u003ccode\u003eARMSet\u003c/code\u003e, \u003ccode\u003eARMGet\u003c/code\u003e, \u003ccode\u003eARDel\u003c/code\u003e, \u003ccode\u003eARDelRange\u003c/code\u003e, \u003ccode\u003eARScan\u003c/code\u003e, \u003ccode\u003eARSeek\u003c/code\u003e, \u003ccode\u003eARNext\u003c/code\u003e, \u003ccode\u003eARLastItems\u003c/code\u003e, \u003ccode\u003eARGrep\u003c/code\u003e, \u003ccode\u003eARGrepWithValues\u003c/code\u003e, \u003ccode\u003eARInfo\u003c/code\u003e/\u003ccode\u003eARInfoFull\u003c/code\u003e, and typed reducers \u003ccode\u003eAROpSum\u003c/code\u003e/\u003ccode\u003eAROpMin\u003c/code\u003e/\u003ccode\u003eAROpMax\u003c/code\u003e/\u003ccode\u003eAROpAnd\u003c/code\u003e/\u003ccode\u003eAROpOr\u003c/code\u003e/\u003ccode\u003eAROpXor\u003c/code\u003e/\u003ccode\u003eAROpMatch\u003c/code\u003e/\u003ccode\u003eAROpUsed\u003c/code\u003e) for working with Redis 8.8's new array data type. \u003cstrong\u003eAPI is experimental and may change in a future release.\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e(\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3813\"\u003e#3813\u003c/a\u003e) by \u003ca href=\"https://github.com/cxljs\"\u003e\u003ccode\u003e@​cxljs\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e✨ New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRESP3 search parser\u003c/strong\u003e: First-class RESP3 parsing for \u003ccode\u003eFT.SEARCH\u003c/code\u003e/\u003ccode\u003eFT.AGGREGATE\u003c/code\u003e/\u003ccode\u003eFT.INFO\u003c/code\u003e/\u003ccode\u003eFT.SPELLCHECK\u003c/code\u003e/\u003ccode\u003eFT.SYNDUMP\u003c/code\u003e responses with backwards compatibility for RESP2 (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3741\"\u003e#3741\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eINCREX\u003c/strong\u003e: New \u003ccode\u003eINCREX\u003c/code\u003e command support — atomic increment with expiration (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3816\"\u003e#3816\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eXNACK\u003c/strong\u003e: Client support for the \u003ccode\u003eXNACK\u003c/code\u003e stream command for explicitly negative-acknowledging pending entries (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3790\"\u003e#3790\u003c/a\u003e) by \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTS range multiple aggregators\u003c/strong\u003e: \u003ccode\u003eTS.RANGE\u003c/code\u003e/\u003ccode\u003eTS.REVRANGE\u003c/code\u003e/\u003ccode\u003eTS.MRANGE\u003c/code\u003e/\u003ccode\u003eTS.MREVRANGE\u003c/code\u003e now accept multiple aggregators in a single call (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3791\"\u003e#3791\u003c/a\u003e) by \u003ca href=\"https://github.com/elena-kolevska\"\u003e\u003ccode\u003e@​elena-kolevska\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eXAutoClaim\u003c/code\u003e deleted IDs\u003c/strong\u003e: \u003ccode\u003eXAUTOCLAIM\u003c/code\u003e/\u003ccode\u003eXAUTOCLAIMJUSTID\u003c/code\u003e now return the list of deleted message IDs from the PEL (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3798\"\u003e#3798\u003c/a\u003e) by \u003ca href=\"https://github.com/Khukharr\"\u003e\u003ccode\u003e@​Khukharr\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eJSON.SET FPHA\u003c/code\u003e\u003c/strong\u003e: \u003ccode\u003eJSON.SET\u003c/code\u003e accepts a new \u003ccode\u003eFPHA\u003c/code\u003e argument that specifies the floating-point type for homogeneous floating-point arrays (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3797\"\u003e#3797\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSorted-set union/intersection COUNT\u003c/strong\u003e: \u003ccode\u003eZUNION\u003c/code\u003e/\u003ccode\u003eZINTER\u003c/code\u003e/\u003ccode\u003eZDIFF\u003c/code\u003e aggregator now supports \u003ccode\u003eCOUNT\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3802\"\u003e#3802\u003c/a\u003e) by \u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eFT.HYBRID\u003c/code\u003e vector validation\u003c/strong\u003e: Validates hybrid-search vector input types and adds proper typed vector parameters (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3756\"\u003e#3756\u003c/a\u003e) by \u003ca href=\"https://github.com/DengY11\"\u003e\u003ccode\u003e@​DengY11\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eCluster pool wait stats\u003c/strong\u003e: \u003ccode\u003eClusterClient.PoolStats()\u003c/code\u003e now accumulates \u003ccode\u003eWaitCount\u003c/code\u003e and \u003ccode\u003eWaitDurationNs\u003c/code\u003e across all node pools (previously always zero) (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3809\"\u003e#3809\u003c/a\u003e) by \u003ca href=\"https://github.com/LINKIWI\"\u003e\u003ccode\u003e@​LINKIWI\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eTLS-only Cluster PubSub\u003c/strong\u003e: \u003ccode\u003eCLUSTER SLOTS\u003c/code\u003e port-0 entries now fall back to the origin endpoint's port, fixing \u003ccode\u003edial tcp \u0026lt;ip\u0026gt;:0: connection refused\u003c/code\u003e on TLS-only clusters started with \u003ccode\u003e--port 0 --tls-port \u0026lt;port\u0026gt;\u003c/code\u003e (fixes \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3726\"\u003e#3726\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3828\"\u003e#3828\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSharded PubSub reconnect routing\u003c/strong\u003e: \u003ccode\u003ePubSub.conn()\u003c/code\u003e now passes both regular (\u003ccode\u003ec.channels\u003c/code\u003e) and sharded (\u003ccode\u003ec.schannels\u003c/code\u003e) channels into the per-PubSub \u003ccode\u003enewConn\u003c/code\u003e closure. Previously, \u003ccode\u003eClusterClient.SSubscribe\u003c/code\u003e-only PubSubs reconnected to a random node (because the routing closure saw an empty channel list), the \u003ccode\u003eSSUBSCRIBE\u003c/code\u003e was sent to the wrong shard, and the resulting \u003ccode\u003eMOVED\u003c/code\u003e reply was silently dropped (\u003ca href=\"https://redirect.github.com/redis/go-redis/pull/3829\"\u003e#3829\u003c/a\u003e) by \u003ca href=\"https://github.com/ndyakov\"\u003e\u003ccode\u003e@​ndyakov\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/7d05dd3b7ce12a7b8c7923f73da0fede3bfa7c03\"\u003e\u003ccode\u003e7d05dd3\u003c/code\u003e\u003c/a\u003e chore(release): v9.20.0 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3832\"\u003e#3832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/97568827124c58f1338d78b9535edc0eb9435453\"\u003e\u003ccode\u003e9756882\u003c/code\u003e\u003c/a\u003e fix(test): make waitForSentinelClusterStable robust to disconnected r… (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3830\"\u003e#3830\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/875ce21e4862a7913edb5308b16869141ce5e833\"\u003e\u003ccode\u003e875ce21\u003c/code\u003e\u003c/a\u003e fix(sentinel): do not close sentinel when replica list is empty (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3795\"\u003e#3795\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/8a027f21ba2686511e1a6a159f0c6888f11d48e7\"\u003e\u003ccode\u003e8a027f2\u003c/code\u003e\u003c/a\u003e chore(ci): add govulncheck workflow (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3779\"\u003e#3779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/d8407df30af7eba2c24280791fed4b8bd3e62c97\"\u003e\u003ccode\u003ed8407df\u003c/code\u003e\u003c/a\u003e fix(pubsub): include shard channels in newConn routing list (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3829\"\u003e#3829\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/6af9bdc84ba25303f2b9dd9949055ee6224c6d96\"\u003e\u003ccode\u003e6af9bdc\u003c/code\u003e\u003c/a\u003e fix(cluster): fall back to origin port when CLUSTER SLOTS reports port 0 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3828\"\u003e#3828\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/fa5aa8c4d26a0983f16ebc537696150d80bfc8f0\"\u003e\u003ccode\u003efa5aa8c\u003c/code\u003e\u003c/a\u003e chore(doc): Update README and CI image. (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3822\"\u003e#3822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/fdcc6f9221e6d447b1c1a50d946c74d8db51cda3\"\u003e\u003ccode\u003efdcc6f9\u003c/code\u003e\u003c/a\u003e refactor(keyPos): Enhance key position retrieval with CommandInfo caching (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3\"\u003e#3\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/68a8bc1e8457d796d35cae34435529cd6e56a762\"\u003e\u003ccode\u003e68a8bc1\u003c/code\u003e\u003c/a\u003e fix(sentinel): close non-winning sentinel clients in MasterAddr concurrent pr...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/00bf6d3edc1f50cce7a81d6a11a580cb060fce56\"\u003e\u003ccode\u003e00bf6d3\u003c/code\u003e\u003c/a\u003e fix: avoid retrying ClusterClient Watch callback errors (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3821\"\u003e#3821\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/redis/go-redis/compare/v9.19.0...v9.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/rekor` from 1.5.1 to 1.5.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/rekor/releases\"\u003egithub.com/sigstore/rekor's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.5.2\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e759b98e2a7c39ea9779b6a51299c5f0f987f8802 alpine: Enforce max size limit on decompression (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2831\"\u003e#2831\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec7e77ee26edd8631dd417166907093a9f13b85e5 Support restricting kinds on insertion (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2814\"\u003e#2814\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ea10818a8778dcb58eb582d00ffda4b2c86bf190b fix(trillianclient): strip dns:/// scheme from TLS ServerName in gRPC dial (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2812\"\u003e#2812\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e8a2f3a2dd023b81ad8b63e2f365676ec438dc9fa add checks to ensure returned entries match client inputs to rekor-cli (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2799\"\u003e#2799\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e0e88bac01d1173b8b2cbc8ed790106441573bbdb add nil pointer check to resolve fuzzing crash (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2807\"\u003e#2807\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e93da954478a2ffb1821d4904a80d9a5cbe268324 client: surface last-response details after retries are exhausted (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2796\"\u003e#2796\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e4d67ecd8ec810bc6af9761ad10ebd2ac899cfdbd Fix internal error detail leakage in 500 responses (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2801\"\u003e#2801\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eb34ca94fc01405cb50acb956cc181d57382a6b2d add defensive check to ensure tid is in config ahead of getting client (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2795\"\u003e#2795\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e656c832ab90feef91f5dcc751ae1cb851c73f4bd restapi: include inactiveShards in the homepage total count (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2797\"\u003e#2797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eThanks for all contributors!\u003c/h3\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/3b75cd9c9a101bae26eecf1ad261d94aba247ee9\"\u003e\u003ccode\u003e3b75cd9\u003c/code\u003e\u003c/a\u003e build(deps): Bump the all group across 1 directory with 7 updates (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2829\"\u003e#2829\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/759b98e2a7c39ea9779b6a51299c5f0f987f8802\"\u003e\u003ccode\u003e759b98e\u003c/code\u003e\u003c/a\u003e alpine: Enforce max size limit on decompression (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2831\"\u003e#2831\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/c7e77ee26edd8631dd417166907093a9f13b85e5\"\u003e\u003ccode\u003ec7e77ee\u003c/code\u003e\u003c/a\u003e Support restricting kinds on insertion (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2814\"\u003e#2814\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/a10818a8778dcb58eb582d00ffda4b2c86bf190b\"\u003e\u003ccode\u003ea10818a\u003c/code\u003e\u003c/a\u003e fix(trillianclient): strip dns:/// scheme from TLS ServerName in gRPC dial (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/c31f3fc8141e61ee2af5dcc4e8a0f9988231b12e\"\u003e\u003ccode\u003ec31f3fc\u003c/code\u003e\u003c/a\u003e build(deps): Bump cloud.google.com/go/profiler from 0.4.3 to 0.6.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/f2a9fb018c17329072f2ac2da426723ad18a89e7\"\u003e\u003ccode\u003ef2a9fb0\u003c/code\u003e\u003c/a\u003e build(deps): Bump go.uber.org/zap from 1.27.1 to 1.28.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/e3ba2484923513670a5617a40584a16ff2530e98\"\u003e\u003ccode\u003ee3ba248\u003c/code\u003e\u003c/a\u003e build(deps): Bump golang in the all group across 1 directory\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/62e5ddd8cad078321d0851b0eaac6332eea87d65\"\u003e\u003ccode\u003e62e5ddd\u003c/code\u003e\u003c/a\u003e build(deps): Bump github.com/go-openapi/swag from 0.25.5 to 0.26.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/f4f91d5ca10c7be17121ade17a0f6431865f12f6\"\u003e\u003ccode\u003ef4f91d5\u003c/code\u003e\u003c/a\u003e build(deps): Bump github.com/tink-crypto/tink-go-awskms/v2 to v3 (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2827\"\u003e#2827\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/rekor/commit/9bc540f214712dfa4b891cca828382855ada227a\"\u003e\u003ccode\u003e9bc540f\u003c/code\u003e\u003c/a\u003e build(deps): Bump google.com/cloudsdktool/google-cloud-cli (\u003ca href=\"https://redirect.github.com/sigstore/rekor/issues/2820\"\u003e#2820\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sigstore/rekor/compare/v1.5.1...v1.5.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore` from 1.10.5 to 1.10.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: remove leftover Go template syntax from success page by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2324\"\u003esigstore/sigstore#2324\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/311895e7870187320e47337734a9c321c0a8819c\"\u003e\u003ccode\u003e311895e\u003c/code\u003e\u003c/a\u003e fix: remove leftover Go template syntax from success page (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2324\"\u003e#2324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore/pkg/signature/kms/aws` from 1.10.5 to 1.10.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore/pkg/signature/kms/aws's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: remove leftover Go template syntax from success page by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2324\"\u003esigstore/sigstore#2324\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/311895e7870187320e47337734a9c321c0a8819c\"\u003e\u003ccode\u003e311895e\u003c/code\u003e\u003c/a\u003e fix: remove leftover Go template syntax from success page (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2324\"\u003e#2324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore/pkg/signature/kms/azure` from 1.10.5 to 1.10.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore/pkg/signature/kms/azure's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: remove leftover Go template syntax from success page by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2324\"\u003esigstore/sigstore#2324\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/311895e7870187320e47337734a9c321c0a8819c\"\u003e\u003ccode\u003e311895e\u003c/code\u003e\u003c/a\u003e fix: remove leftover Go template syntax from success page (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2324\"\u003e#2324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore/pkg/signature/kms/gcp` from 1.10.5 to 1.10.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore/pkg/signature/kms/gcp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: remove leftover Go template syntax from success page by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2324\"\u003esigstore/sigstore#2324\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/311895e7870187320e47337734a9c321c0a8819c\"\u003e\u003ccode\u003e311895e\u003c/code\u003e\u003c/a\u003e fix: remove leftover Go template syntax from success page (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2324\"\u003e#2324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/sigstore/sigstore/pkg/signature/kms/hashivault` from 1.10.5 to 1.10.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore/releases\"\u003egithub.com/sigstore/sigstore/pkg/signature/kms/hashivault's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: remove leftover Go template syntax from success page by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/sigstore/sigstore/pull/2324\"\u003esigstore/sigstore#2324\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ehttps://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore/commit/311895e7870187320e47337734a9c321c0a8819c\"\u003e\u003ccode\u003e311895e\u003c/code\u003e\u003c/a\u003e fix: remove leftover Go template syntax from success page (\u003ca href=\"https://redirect.github.com/sigstore/sigstore/issues/2324\"\u003e#2324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/sigstore/sigstore/compare/v1.10.5...v1.10.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/api` from 0.36.0 to 0.36.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/25001c854943b552769cd32eacd0bef7467c0eea\"\u003e\u003ccode\u003e25001c8\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.1 tag\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kubernetes/api/compare/v0.36.0...v0.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/apimachinery` from 0.36.0 to 0.36.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/7af103a2a439106791220493349f8d13bc0a1efd\"\u003e\u003ccode\u003e7af103a\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.1 tag\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kubernetes/apimachinery/compare/v0.36.0...v0.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/client-go` from 0.36.0 to 0.36.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/55ef15a9fb552182b78f7b1d0d09d618632dfe7f\"\u003e\u003ccode\u003e55ef15a\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.1 tag\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kubernetes/client-go/compare/v0.36.0...v0.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e","html_url":"https://github.com/sse-secure-systems/connaisseur/pull/2117","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sse-secure-systems%2Fconnaisseur/issues/2117","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2117/packages"}},{"old_version":"0.20.7","new_version":"0.21.6","update_type":"minor","path":null,"pr_created_at":"2026-05-31T05:31:31.000Z","version_change":"0.20.7 → 0.21.6","issue":{"uuid":"4556671768","node_id":"PR_kwDOHqP31c7hDDs-","number":6389,"state":"open","title":"chore(deps): bump the go-minor group with 30 updates","user":"dependabot[bot]","labels":["needs/kind","needs/priority","needs/area","dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-31T05:31:31.000Z","updated_at":"2026-05-31T05:31:41.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-minor","update_count":30,"packages":[{"name":"code.gitea.io/sdk/gitea","old_version":"0.22.1","new_version":"0.25.1"},{"name":"github.com/Azure/azure-sdk-for-go/sdk/azcore","old_version":"1.20.0","new_version":"1.21.1","repository_url":"https://github.com/Azure/azure-sdk-for-go"},{"name":"github.com/Masterminds/semver/v3","old_version":"3.4.0","new_version":"3.5.0","repository_url":"https://github.com/Masterminds/semver"},{"name":"github.com/aws/aws-sdk-go-v2/service/ecr","old_version":"1.55.4","new_version":"1.57.4","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/bmatcuk/doublestar/v4","old_version":"4.9.2","new_version":"4.10.0","repository_url":"https://github.com/bmatcuk/doublestar"},{"name":"github.com/coreos/go-oidc/v3","old_version":"3.17.0","new_version":"3.18.0","repository_url":"https://github.com/coreos/go-oidc"},{"name":"github.com/fluxcd/pkg/kustomize","old_version":"1.24.0","new_version":"1.32.0","repository_url":"https://github.com/fluxcd/pkg"},{"name":"github.com/gin-gonic/gin","old_version":"1.11.0","new_version":"1.12.0","repository_url":"https://github.com/gin-gonic/gin"},{"name":"github.com/go-openapi/runtime","old_version":"0.31.0","new_version":"0.32.2","repository_url":"https://github.com/go-openapi/runtime"},{"name":"github.com/goccy/go-yaml","old_version":"1.18.0","new_version":"1.19.2","repository_url":"https://github.com/goccy/go-yaml"},{"name":"github.com/google/go-containerregistry","old_version":"0.20.7","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/jferrl/go-githubauth","old_version":"1.5.1","new_version":"1.6.0","repository_url":"https://github.com/jferrl/go-githubauth"},{"name":"github.com/pelletier/go-toml/v2","old_version":"2.2.4","new_version":"2.3.1","repository_url":"https://github.com/pelletier/go-toml"},{"name":"gitlab.com/gitlab-org/api/client-go","old_version":"1.13.0","new_version":"1.46.0"},{"name":"go.uber.org/zap","old_version":"1.27.1","new_version":"1.28.0","repository_url":"https://github.com/uber-go/zap"},{"name":"golang.org/x/crypto","old_version":"0.51.0","new_version":"0.52.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/oauth2","old_version":"0.34.0","new_version":"0.36.0","repository_url":"https://github.com/golang/oauth2"},{"name":"google.golang.org/api","old_version":"0.259.0","new_version":"0.282.0","repository_url":"https://github.com/googleapis/google-api-go-client"},{"name":"google.golang.org/grpc","old_version":"1.79.3","new_version":"1.81.1","repository_url":"https://github.com/grpc/grpc-go"},{"name":"google.golang.org/protobuf","old_version":"1.36.11","new_version":"1.36.12-0.20260120151049-f2248ac996af"},{"name":"helm.sh/helm/v3","old_version":"3.19.5","new_version":"3.21.0","repository_url":"https://github.com/helm/helm"},{"name":"k8s.io/api","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/api"},{"name":"k8s.io/apiextensions-apiserver","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/apiextensions-apiserver"},{"name":"k8s.io/apimachinery","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/apimachinery"},{"name":"k8s.io/apiserver","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/apiserver"},{"name":"k8s.io/cli-runtime","old_version":"0.34.3","new_version":"0.35.1","repository_url":"https://github.com/kubernetes/cli-runtime"},{"name":"k8s.io/client-go","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/client-go"},{"name":"k8s.io/klog/v2","old_version":"2.130.1","new_version":"2.140.0","repository_url":"https://github.com/kubernetes/klog"},{"name":"k8s.io/utils","old_version":"0.0.0-20250604170112-4c0f3b243397","new_version":"0.0.0-20260210185600-b8788abfbbc2","repository_url":"https://github.com/kubernetes/utils"},{"name":"sigs.k8s.io/controller-runtime","old_version":"0.22.4","new_version":"0.24.0","repository_url":"https://github.com/kubernetes-sigs/controller-runtime"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor group with 30 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| code.gitea.io/sdk/gitea | `0.22.1` | `0.25.1` |\n| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.20.0` | `1.21.1` |\n| [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) | `3.4.0` | `3.5.0` |\n| [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.55.4` | `1.57.4` |\n| [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) | `4.9.2` | `4.10.0` |\n| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.17.0` | `3.18.0` |\n| [github.com/fluxcd/pkg/kustomize](https://github.com/fluxcd/pkg) | `1.24.0` | `1.32.0` |\n| [github.com/gin-gonic/gin](https://github.com/gin-gonic/gin) | `1.11.0` | `1.12.0` |\n| [github.com/go-openapi/runtime](https://github.com/go-openapi/runtime) | `0.31.0` | `0.32.2` |\n| [github.com/goccy/go-yaml](https://github.com/goccy/go-yaml) | `1.18.0` | `1.19.2` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.7` | `0.21.6` |\n| [github.com/jferrl/go-githubauth](https://github.com/jferrl/go-githubauth) | `1.5.1` | `1.6.0` |\n| [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) | `2.2.4` | `2.3.1` |\n| [gitlab.com/gitlab-org/api/client-go](https://gitlab.com/gitlab-org/api/client-go) | `1.13.0` | `1.46.0` |\n| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.1` | `1.28.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.51.0` | `0.52.0` |\n| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.34.0` | `0.36.0` |\n| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.259.0` | `0.282.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.79.3` | `1.81.1` |\n| google.golang.org/protobuf | `1.36.11` | `1.36.12-0.20260120151049-f2248ac996af` |\n| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.19.5` | `3.21.0` |\n| [k8s.io/api](https://github.com/kubernetes/api) | `0.34.3` | `0.36.0` |\n| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.34.3` | `0.36.0` |\n| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.34.3` | `0.36.0` |\n| [k8s.io/apiserver](https://github.com/kubernetes/apiserver) | `0.34.3` | `0.36.0` |\n| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.34.3` | `0.35.1` |\n| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.34.3` | `0.36.0` |\n| [k8s.io/klog/v2](https://github.com/kubernetes/klog) | `2.130.1` | `2.140.0` |\n| [k8s.io/utils](https://github.com/kubernetes/utils) | `0.0.0-20250604170112-4c0f3b243397` | `0.0.0-20260210185600-b8788abfbbc2` |\n| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.22.4` | `0.24.0` |\n\nUpdates `code.gitea.io/sdk/gitea` from 0.22.1 to 0.25.1\n\nUpdates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.20.0 to 1.21.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/63e4ba18204b0df554e330df8f85662e653e67ab\"\u003e\u003ccode\u003e63e4ba1\u003c/code\u003e\u003c/a\u003e Bump release date for azcore (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26613\"\u003e#26613\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/fa0312174d17ff4cb7cb0118fa80de07409841c2\"\u003e\u003ccode\u003efa03121\u003c/code\u003e\u003c/a\u003e remove bypass local dns (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26609\"\u003e#26609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/c47f9a60dd1e9be6943ff0d6a5666a0ac09f6cfa\"\u003e\u003ccode\u003ec47f9a6\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 15153 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26607\"\u003e#26607\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/88b8b5b38ecebb929a2e302df054fed1d68618b8\"\u003e\u003ccode\u003e88b8b5b\u003c/code\u003e\u003c/a\u003e Changelog for v2.2.0 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26567\"\u003e#26567\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/72ca19ae2b8b4514c4f48a5ff33495b03c08afd0\"\u003e\u003ccode\u003e72ca19a\u003c/code\u003e\u003c/a\u003e Storage STG 101 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26568\"\u003e#26568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/b64baf56c6b168d258b2a0678290ac5f9ab97938\"\u003e\u003ccode\u003eb64baf5\u003c/code\u003e\u003c/a\u003e Sync .github directory with azure-sdk-tools repository (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26600\"\u003e#26600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/ecd64dd6500a04da22107925c3ba9fbe8e636f2c\"\u003e\u003ccode\u003eecd64dd\u003c/code\u003e\u003c/a\u003e Prep azcore@v1.21.1 for release (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26596\"\u003e#26596\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/1d02f204d0146ffd7d13d5585bf3766e53c32cc5\"\u003e\u003ccode\u003e1d02f20\u003c/code\u003e\u003c/a\u003e Update copilot code review instructions and migration breaking change mitigat...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/f6e9ce3212cc9d654d349778f19065eb5d849197\"\u003e\u003ccode\u003ef6e9ce3\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 14973 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26531\"\u003e#26531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/d5a3baf11e0b743a4009efb8e84cbaee335fc0eb\"\u003e\u003ccode\u003ed5a3baf\u003c/code\u003e\u003c/a\u003e Update CODEOWNERS to remove one owner from Custom Providers (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26588\"\u003e#26588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.20.0...sdk/azcore/v1.21.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/Masterminds/semver/v3` from 3.4.0 to 3.5.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Masterminds/semver/releases\"\u003egithub.com/Masterminds/semver/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.5.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdding more prerelease tests by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/273\"\u003eMasterminds/semver#273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate constraint error messages by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/278\"\u003eMasterminds/semver#278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix edge cases by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/279\"\u003eMasterminds/semver#279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdding some checks in by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/280\"\u003eMasterminds/semver#280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdating deps by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/281\"\u003eMasterminds/semver#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github/codeql-action from 4.35.1 to 4.35.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/282\"\u003eMasterminds/semver#282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/cache from 4.2.3 to 5.0.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/283\"\u003eMasterminds/semver#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 7.0.1 to 9.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/284\"\u003eMasterminds/semver#284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdating gitignore for devcontainers by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/286\"\u003eMasterminds/semver#286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixing some quality issues by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/287\"\u003eMasterminds/semver#287\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/282\"\u003eMasterminds/semver#282\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/Masterminds/semver/compare/v3.4.0...v3.5.0\"\u003ehttps://github.com/Masterminds/semver/compare/v3.4.0...v3.5.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Masterminds/semver/blob/master/CHANGELOG.md\"\u003egithub.com/Masterminds/semver/v3's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/8b89c86cb53c57cfd5d07c13de12bc4d78954e99\"\u003e\u003ccode\u003e8b89c86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/287\"\u003e#287\u003c/a\u003e from mattfarina/fix-da-issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/29d51d0ea4bffe39173673685d0dd312447d74a7\"\u003e\u003ccode\u003e29d51d0\u003c/code\u003e\u003c/a\u003e Fixing some quality issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/87f651dbe2f616342d6408b997ad7116ba72ddf3\"\u003e\u003ccode\u003e87f651d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/286\"\u003e#286\u003c/a\u003e from mattfarina/update-devcontainer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/158a6852a7e66d99594653227d3e8c3dc6d160ca\"\u003e\u003ccode\u003e158a685\u003c/code\u003e\u003c/a\u003e Updating gitignore for devcontainers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/7e83c080cfb4455752c654805b189274a10890ab\"\u003e\u003ccode\u003e7e83c08\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/284\"\u003e#284\u003c/a\u003e from Masterminds/dependabot/github_actions/golangci/g...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/697e27f32e7419eb896e7d3ec680c65fc673166b\"\u003e\u003ccode\u003e697e27f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/283\"\u003e#283\u003c/a\u003e from Masterminds/dependabot/github_actions/actions/ca...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/1591f8e3806198f60fa4dcaf2751bfc805c7740d\"\u003e\u003ccode\u003e1591f8e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/282\"\u003e#282\u003c/a\u003e from Masterminds/dependabot/github_actions/github/cod...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/3f5ff1737a28437e536d3ec54e41919577748ae6\"\u003e\u003ccode\u003e3f5ff17\u003c/code\u003e\u003c/a\u003e Bump golangci/golangci-lint-action from 7.0.1 to 9.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/04baa3376047b6d5e79ffcc60f69332dd3e26c85\"\u003e\u003ccode\u003e04baa33\u003c/code\u003e\u003c/a\u003e Bump actions/cache from 4.2.3 to 5.0.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/45939fec77cd7d07d586b823284d11423028e9c2\"\u003e\u003ccode\u003e45939fe\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 4.35.1 to 4.35.2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Masterminds/semver/compare/v3.4.0...v3.5.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.55.4 to 1.57.4\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5841d3ae2cfd6e6113ca61b71d69131b84932f4c\"\u003e\u003ccode\u003e5841d3a\u003c/code\u003e\u003c/a\u003e Release 2026-05-29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/16ac80d79c282366cae312281b3df925af4e9bf1\"\u003e\u003ccode\u003e16ac80d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/167926f8aca7228f2dd1bed73707505875aafef4\"\u003e\u003ccode\u003e167926f\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/a0fce13e18c6bff397ad77fac4cde4ab3f3b93e0\"\u003e\u003ccode\u003ea0fce13\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/223c0057211950899e0117dc027cc299a1dac664\"\u003e\u003ccode\u003e223c005\u003c/code\u003e\u003c/a\u003e update to smithy-go v1.26.0 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3426\"\u003e#3426\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/74c501189a40c9b937432a1b2a4cacffc851ea76\"\u003e\u003ccode\u003e74c5011\u003c/code\u003e\u003c/a\u003e Release 2026-05-28\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7d82651329a86064a9026f6219cff72921fa74da\"\u003e\u003ccode\u003e7d82651\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/79c63d9289784de4914143b7bff67157aa6a2a90\"\u003e\u003ccode\u003e79c63d9\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b15b3b873ad5c294d0c010fb1cc56ecb583d1618\"\u003e\u003ccode\u003eb15b3b8\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/090e46936630944917cfd6a0990ea3fd6391475b\"\u003e\u003ccode\u003e090e469\u003c/code\u003e\u003c/a\u003e Feat tmv2 parity (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3424\"\u003e#3424\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/ecr/v1.55.4...service/ecr/v1.57.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/bmatcuk/doublestar/v4` from 4.9.2 to 4.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bmatcuk/doublestar/releases\"\u003egithub.com/bmatcuk/doublestar/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eAdded WithNoHidden option\u003c/h2\u003e\n\u003cp\u003eAdded support for a \u003ccode\u003eWithNoHidden\u003c/code\u003e option to ignore hidden files in patterns that might unintentionally match them. For example, a \u003ccode\u003e.config\u003c/code\u003e directory would not be matched by \u003ccode\u003e*\u003c/code\u003e or recursed into by \u003ccode\u003e**\u003c/code\u003e, but \u003cem\u003ewould\u003c/em\u003e be matched by \u003ccode\u003e.*\u003c/code\u003e or recursed by \u003ccode\u003e.config/**\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/lukasngl\"\u003e\u003ccode\u003e@​lukasngl\u003c/code\u003e\u003c/a\u003e for the initial PR and idea!\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add WithNoHidden option to skip hidden files by \u003ca href=\"https://github.com/lukasngl\"\u003e\u003ccode\u003e@​lukasngl\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/109\"\u003ebmatcuk/doublestar#109\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lukasngl\"\u003e\u003ccode\u003e@​lukasngl\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/109\"\u003ebmatcuk/doublestar#109\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/bmatcuk/doublestar/compare/v4.9.2...v4.10.0\"\u003ehttps://github.com/bmatcuk/doublestar/compare/v4.9.2...v4.10.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/a9ad9e0ef4d6b7e4443090e9a7201d847a881711\"\u003e\u003ccode\u003ea9ad9e0\u003c/code\u003e\u003c/a\u003e allow starting test manually\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/9987c0c624376f84f44515adca73ddcdfdcdf453\"\u003e\u003ccode\u003e9987c0c\u003c/code\u003e\u003c/a\u003e update docs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/d3b2184d103391fcd0fcca6590c16367310eee65\"\u003e\u003ccode\u003ed3b2184\u003c/code\u003e\u003c/a\u003e windows support for WithNoHidden; better tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/5d6a6cd76ba3e45482d13140f332be36451f5a48\"\u003e\u003ccode\u003e5d6a6cd\u003c/code\u003e\u003c/a\u003e Merge branch 'lukasngl-feat/no-hidden'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/e8319d206e9dab8d51d41e662811cdfb9af72b24\"\u003e\u003ccode\u003ee8319d2\u003c/code\u003e\u003c/a\u003e run tests when a branch/tag is created\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/614b331133390c7682c227740c51ff65dea2de65\"\u003e\u003ccode\u003e614b331\u003c/code\u003e\u003c/a\u003e run tests when a branch/tag is created\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/df2e03fb0b91b726e0366c0d9ba1c5e580e2d0c9\"\u003e\u003ccode\u003edf2e03f\u003c/code\u003e\u003c/a\u003e feat: add WithNoHidden option to skip hidden files\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/bmatcuk/doublestar/compare/v4.9.2...v4.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/coreos/go-oidc/v3` from 3.17.0 to 3.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/coreos/go-oidc/releases\"\u003egithub.com/coreos/go-oidc/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e.github: configure dependabot by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/477\"\u003ecoreos/go-oidc#477\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e.github: update go versions in CI by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/480\"\u003ecoreos/go-oidc#480\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/478\"\u003ecoreos/go-oidc#478\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/479\"\u003ecoreos/go-oidc#479\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/da6b3bfca8af72414ee0e6e8746585ff5d206003\"\u003e\u003ccode\u003eda6b3bf\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/7f80694215d5eb5b28f851f35845439b1e1e9e5d\"\u003e\u003ccode\u003e7f80694\u003c/code\u003e\u003c/a\u003e build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/7271de57587bb756318f9819796ba846b1ba875a\"\u003e\u003ccode\u003e7271de5\u003c/code\u003e\u003c/a\u003e .github: update go versions in CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/3ccf20fdc4afab7c64881a108d6f4c17a4ecc24d\"\u003e\u003ccode\u003e3ccf20f\u003c/code\u003e\u003c/a\u003e .github: configure dependabot\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/fluxcd/pkg/kustomize` from 1.24.0 to 1.32.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/f3ad4b56adec90eb5661af565cdebec997ad4bfb\"\u003e\u003ccode\u003ef3ad4b5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/fluxcd/pkg/issues/1195\"\u003e#1195\u003c/a\u003e from fluxcd/release-main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/f35b4fd025cdee1664ca3d7aede2eb2fd594583d\"\u003e\u003ccode\u003ef35b4fd\u003c/code\u003e\u003c/a\u003e Prepare for release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/18e165c2592fb2a9633b9a80371e730d88bcab29\"\u003e\u003ccode\u003e18e165c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/fluxcd/pkg/issues/1194\"\u003e#1194\u003c/a\u003e from fluxcd/k8s-1.36\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/fe4377874a6d57593120ee524e1913ca81a5d2e5\"\u003e\u003ccode\u003efe43778\u003c/code\u003e\u003c/a\u003e Update controller-gen to v0.21.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/2498ab414d7e2abaee4131142293e520ee76b390\"\u003e\u003ccode\u003e2498ab4\u003c/code\u003e\u003c/a\u003e Update cloud auth SDKs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/b3bb0e0ff6bc2f42f23ff110baa0e7ae0f2ee685\"\u003e\u003ccode\u003eb3bb0e0\u003c/code\u003e\u003c/a\u003e Update go-git to v5.19.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/545dc4f55ab3850dca6401177c94e37ed40b5c87\"\u003e\u003ccode\u003e545dc4f\u003c/code\u003e\u003c/a\u003e Update distribution to v3.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/b23cbf9f0581b9dc5594e8659739f1bc9c870d35\"\u003e\u003ccode\u003eb23cbf9\u003c/code\u003e\u003c/a\u003e Update Kubernetes packages to 1.36\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/c6042810b61f1937c72a0e04d81d0091ca6e7dae\"\u003e\u003ccode\u003ec604281\u003c/code\u003e\u003c/a\u003e Update Go to 1.26\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/939c616718374460667e648c796487bfedfa6d98\"\u003e\u003ccode\u003e939c616\u003c/code\u003e\u003c/a\u003e ssa: Fix race condition in CRD tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/fluxcd/pkg/compare/apis/meta/v1.24.0...kustomize/v1.32.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/gin-gonic/gin` from 1.11.0 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/gin-gonic/gin/releases\"\u003egithub.com/gin-gonic/gin's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.12.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e192ac89eefc1c30f7c97ae48a9ffb1c6f1c8c8bc: feat(binding): add support for encoding.UnmarshalText in uri/query binding (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4203\"\u003e#4203\u003c/a\u003e) (\u003ca href=\"https://github.com/takanuva15\"\u003e\u003ccode\u003e@​takanuva15\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e53410d2e07054369e0960fbe2eed97e1b9966f12: feat(context): add GetError and GetErrorSlice methods for error retrieval (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4502\"\u003e#4502\u003c/a\u003e) (\u003ca href=\"https://github.com/raju-mechatronics\"\u003e\u003ccode\u003e@​raju-mechatronics\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eacc55e049e33b401e810dbd8c0d6dcb6b3ba2b05: feat(context): add Protocol Buffers support to content negotiation (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4423\"\u003e#4423\u003c/a\u003e) (\u003ca href=\"https://github.com/1911860538\"\u003e\u003ccode\u003e@​1911860538\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e38e765119241d990705169bedb5002a29ae0cbd1: feat(context): implemented Delete method (\u003ca href=\"https://github.com/Spyder01\"\u003e\u003ccode\u003e@​Spyder01\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e771dcc6476d7bc6abb9ec0235ecefa4d38fe6fb0: feat(gin): add option to use escaped path (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4420\"\u003e#4420\u003c/a\u003e) (\u003ca href=\"https://github.com/ldesauw\"\u003e\u003ccode\u003e@​ldesauw\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e4dec17afdff48e8018c83618fbbe69fceeb2b41d: feat(logger): color latency (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4146\"\u003e#4146\u003c/a\u003e) (\u003ca href=\"https://github.com/wsyqn6\"\u003e\u003ccode\u003e@​wsyqn6\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ed7776de7d444935ea4385999711bd6331a98fecb: feat(render): add bson protocol (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4145\"\u003e#4145\u003c/a\u003e) (\u003ca href=\"https://github.com/laurentcau\"\u003e\u003ccode\u003e@​laurentcau\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eb917b14ff9d189f16a7492be79d123a47806ee19: fix(binding): empty value error (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/2169\"\u003e#2169\u003c/a\u003e) (\u003ca href=\"https://github.com/guonaihong\"\u003e\u003ccode\u003e@​guonaihong\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec3d1092b3b48addf6f9cd00fe274ec3bd14650eb: fix(binding): improve empty slice/array handling in form binding (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4380\"\u003e#4380\u003c/a\u003e) (\u003ca href=\"https://github.com/1911860538\"\u003e\u003ccode\u003e@​1911860538\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e9914178584e42458ff7d23891463a880f58c9d86: fix(context): ClientIP handling for multiple X-Forwarded-For header values (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4472\"\u003e#4472\u003c/a\u003e) (\u003ca href=\"https://github.com/Nurysso\"\u003e\u003ccode\u003e@​Nurysso\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e2a794cd0b0faa7d829291375b27a3467ea972b0d: fix(debug): version mismatch (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4403\"\u003e#4403\u003c/a\u003e) (\u003ca href=\"https://github.com/zeek0x\"\u003e\u003ccode\u003e@​zeek0x\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec3d5a28ed6d3849da820195b6774d212bcc038a9: fix(gin): close os.File in RunFd to prevent resource leak (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4422\"\u003e#4422\u003c/a\u003e) (\u003ca href=\"https://github.com/1911860538\"\u003e\u003ccode\u003e@​1911860538\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e5fad976b372e381312f8de69f0969f1284d229d3: fix(gin): literal colon routes not working with engine.Handler() (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4415\"\u003e#4415\u003c/a\u003e) (\u003ca href=\"https://github.com/pawannn\"\u003e\u003ccode\u003e@​pawannn\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e63dd3e60cab89c27fb66bce1423bd268d52abad1: fix(recover): suppress http.ErrAbortHandler in recover (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4336\"\u003e#4336\u003c/a\u003e) (\u003ca href=\"https://github.com/MondayCha\"\u003e\u003ccode\u003e@​MondayCha\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e5c00df8afadd06cc5be530dde00fe6d9fa4a2e4a: fix(render): write content length in Data.Render (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4206\"\u003e#4206\u003c/a\u003e) (\u003ca href=\"https://github.com/dengaleev\"\u003e\u003ccode\u003e@​dengaleev\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e234a6d4c00cb77af9852aca0b8289745d5529b4b: fix(response): refine hijack behavior for response lifecycle (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4373\"\u003e#4373\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e472d086af2acd924cb4b9d7be0525f7d790f69bc: fix(tree): panic in findCaseInsensitivePathRec with RedirectFixedPath (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4535\"\u003e#4535\u003c/a\u003e) (\u003ca href=\"https://github.com/veeceey\"\u003e\u003ccode\u003e@​veeceey\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e8e07d37c63e5536eb25f4af4c91eabeee4011fba: fix: Correct typos, improve documentation clarity, and remove dead code (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4511\"\u003e#4511\u003c/a\u003e) (\u003ca href=\"https://github.com/mahanadh\"\u003e\u003ccode\u003e@​mahanadh\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eba093d19477b896ac89a7fc3246af23d290b8e26: chore(binding): upgrade bson dependency to mongo-driver v2 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4549\"\u003e#4549\u003c/a\u003e) (\u003ca href=\"https://github.com/BobDu\"\u003e\u003ccode\u003e@​BobDu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eb2b489dbf4826c2c630717a77fd5e42774625410: chore(context): always trust xff headers from unix socket (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/3359\"\u003e#3359\u003c/a\u003e) (\u003ca href=\"https://github.com/WeidiDeng\"\u003e\u003ccode\u003e@​WeidiDeng\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eecb3f7b5e2f3915bf1db240ed5eee572f8dbea36: chore(deps): upgrade golang.org/x/crypto to v0.45.0 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4449\"\u003e#4449\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eaf6e8b70b8261bb0c99ad094fe552ab92991620a: chore(deps): upgrade quic-go to v0.57.1 (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edb309081bc5c137b2aa15701ef53f7f19788da25: chore(logger): allow skipping query string output (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4547\"\u003e#4547\u003c/a\u003e) (\u003ca href=\"https://github.com/USA-RedDragon\"\u003e\u003ccode\u003e@​USA-RedDragon\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e26c3a628655cad2388380cb8102d6ce7d4875f3b: chore(response): prevent Flush() panic when \u003ccode\u003ehttp.Flusher\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4479\"\u003e#4479\u003c/a\u003e) (\u003ca href=\"https://github.com/Twacqwq\"\u003e\u003ccode\u003e@​Twacqwq\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e5dd833f1f26de0eb30eae47b17e05ced2482dc41: chore: bump minimum Go version to 1.24 and update workflows (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4388\"\u003e#4388\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRefactor\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e39858a0859c914bd26948fa950477e11bd8d3823: refactor(binding): use maps.Copy for cleaner map handling (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4352\"\u003e#4352\u003c/a\u003e) (\u003ca href=\"https://github.com/russcoss\"\u003e\u003ccode\u003e@​russcoss\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec0048f645ee945c4db30593afdea10123e2c30a6: refactor(context): omit the return value names (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4395\"\u003e#4395\u003c/a\u003e) (\u003ca href=\"https://github.com/wanghaolong613\"\u003e\u003ccode\u003e@​wanghaolong613\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e915e4c90d28ec4cffc6eb146e208ab5a65eac772: refactor(context): replace hardcoded localhost IPs with constants (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4481\"\u003e#4481\u003c/a\u003e) (\u003ca href=\"https://github.com/pauloappbr\"\u003e\u003ccode\u003e@​pauloappbr\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e414de60574449457f3192a7a1d5528940db2836d: refactor(context): using maps.Clone (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4333\"\u003e#4333\u003c/a\u003e) (\u003ca href=\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e59e9d4a794f12c4f9a6c7bed441b9644e5f6d99b: refactor(ginS): use sync.OnceValue to simplify engine function (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4314\"\u003e#4314\u003c/a\u003e) (\u003ca href=\"https://github.com/1911860538\"\u003e\u003ccode\u003e@​1911860538\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e3ab698dc5110af1977d57226e4995c57dd34c233: refactor(recovery): smart error comparison (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4142\"\u003e#4142\u003c/a\u003e) (\u003ca href=\"https://github.com/zeek0x\"\u003e\u003ccode\u003e@​zeek0x\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ed1a15347b1e45a8ee816193d3578a93bfd73b70f: refactor(utils): move util functions to utils.go (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4467\"\u003e#4467\u003c/a\u003e) (\u003ca href=\"https://github.com/zeek0x\"\u003e\u003ccode\u003e@​zeek0x\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ee3118cc378d263454098924ebbde7e8d1dd2e904: refactor: for loop can be modernized using range over int (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4392\"\u003e#4392\u003c/a\u003e) (\u003ca href=\"https://github.com/wanghaolong613\"\u003e\u003ccode\u003e@​wanghaolong613\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e488f8c3ffa579a8d19beb2bae95ff8ef36b3d53f: refactor: replace magic numbers with named constants in bodyAllowedForStatus (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4529\"\u003e#4529\u003c/a\u003e) (\u003ca href=\"https://github.com/veeceey\"\u003e\u003ccode\u003e@​veeceey\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e9968c4bf9d5a99edc3eee2c068a4c9160ece8915: refactor: use b.Loop() to simplify the code and improve performance (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4389\"\u003e#4389\u003c/a\u003e) (\u003ca href=\"https://github.com/reddaisyy\"\u003e\u003ccode\u003e@​reddaisyy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ea85ef5ce4d0cda8834c59c855068ed48b51192d1: refactor: use b.Loop() to simplify the code and improve performance (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4432\"\u003e#4432\u003c/a\u003e) (\u003ca href=\"https://github.com/efcking\"\u003e\u003ccode\u003e@​efcking\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBuild process updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e61b67de522a189b568aced4c5c16917c558e3387: ci(bot): increase frequency and group updates for dependencies (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4367\"\u003e#4367\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efb27ef26c2fdfe25344b4c039d8a53551f9e912c: ci(lint): refactor test assertions and linter configuration (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4436\"\u003e#4436\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e93ff771e6dbf10e432864b30f3719ac5c84a4d4a: ci(sec): improve type safety and server organization in HTTP middleware (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4437\"\u003e#4437\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ee88fc8927a52b74f55bec0351604a56ac0aa1c51: ci(sec): schedule Trivy security scans to run daily at midnight UTC (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4439\"\u003e#4439\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e5e5ff3ace496a31b138b0820136a146bfb5de0ef: ci: replace vulnerability scanning workflow with Trivy integration (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4421\"\u003e#4421\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e00900fb3e1ea9dde33985a0e4f6afec793d5e786: ci: update CI workflows and standardize Trivy config quotes (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4531\"\u003e#4531\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eae3f524974fc4f55d18c9e7fae4614503c015226: ci: update Go version support to 1.25+ across CI and docs (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4550\"\u003e#4550\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/gin-gonic/gin/blob/master/CHANGELOG.md\"\u003egithub.com/gin-gonic/gin's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eGin v1.12.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(render): add bson protocol (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4145\"\u003e#4145\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(context): add GetError and GetErrorSlice methods for error retrieval (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4502\"\u003e#4502\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(binding): add support for encoding.UnmarshalText in uri/query binding (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4203\"\u003e#4203\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(gin): add option to use escaped path (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4420\"\u003e#4420\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(context): add Protocol Buffers support to content negotiation (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4423\"\u003e#4423\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(context): implemented Delete method (\u003ca href=\"https://github.com/gin-gonic/gin/commit/38e7651\"\u003e#38e7651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(logger): color latency (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4146\"\u003e#4146\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eperf(tree): reduce allocations in findCaseInsensitivePath (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4417\"\u003e#4417\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eperf(recovery): optimize line reading in stack function (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4466\"\u003e#4466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eperf(path): replace regex with custom functions in redirectTrailingSlash (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4414\"\u003e#4414\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eperf(tree): optimize path parsing using strings.Count (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4246\"\u003e#4246\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(logger): allow skipping query string output (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4547\"\u003e#4547\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(context): always trust xff headers from unix socket (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/3359\"\u003e#3359\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(response): prevent Flush() panic when the underlying ResponseWriter does not implement \u003ccode\u003ehttp.Flusher\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4479\"\u003e#4479\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(recovery): smart error comparison (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4142\"\u003e#4142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(context): replace hardcoded localhost IPs with constants (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4481\"\u003e#4481\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(utils): move util functions to utils.go (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4467\"\u003e#4467\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(binding): use maps.Copy for cleaner map handling (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4352\"\u003e#4352\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(context): using maps.Clone (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4333\"\u003e#4333\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(ginS): use sync.OnceValue to simplify engine function (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4314\"\u003e#4314\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor: replace magic numbers with named constants in bodyAllowedForStatus (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4529\"\u003e#4529\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor: for loop can be modernized using range over int (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4392\"\u003e#4392\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(tree): panic in findCaseInsensitivePathRec with RedirectFixedPath (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4535\"\u003e#4535\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(render): write content length in Data.Render (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4206\"\u003e#4206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(context): ClientIP handling for multiple X-Forwarded-For header values (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4472\"\u003e#4472\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(binding): empty value error (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/2169\"\u003e#2169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(recover): suppress http.ErrAbortHandler in recover (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4336\"\u003e#4336\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(gin): literal colon routes not working with engine.Handler() (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4415\"\u003e#4415\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(gin): close os.File in RunFd to prevent resource leak (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4422\"\u003e#4422\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(response): refine hijack behavior for response lifecycle (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4373\"\u003e#4373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(binding): improve empty slice/array handling in form binding (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4380\"\u003e#4380\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(debug): version mismatch (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4403\"\u003e#4403\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: correct typos, improve documentation clarity, and remove dead code (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4511\"\u003e#4511\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBuild process updates / CI\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eci: update Go version support to 1.25+ across CI and docs (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4550\"\u003e#4550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(binding): upgrade bson dependency to mongo-driver v2 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4549\"\u003e#4549\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/73726dc606796a025971fe451f0aa6f1b9b847f6\"\u003e\u003ccode\u003e73726dc\u003c/code\u003e\u003c/a\u003e docs: update documentation to reflect Go version changes (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4552\"\u003e#4552\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/e292e5caa777bce70b66fe08c94cbe9cef3e2ec9\"\u003e\u003ccode\u003ee292e5c\u003c/code\u003e\u003c/a\u003e docs: document and finalize Gin v1.12.0 release (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4551\"\u003e#4551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/ae3f524974fc4f55d18c9e7fae4614503c015226\"\u003e\u003ccode\u003eae3f524\u003c/code\u003e\u003c/a\u003e ci: update Go version support to 1.25+ across CI and docs (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4550\"\u003e#4550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/38534e2bf98a06e1f62d6b24384e90b5f78699bf\"\u003e\u003ccode\u003e38534e2\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4548\"\u003e#4548\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/472d086af2acd924cb4b9d7be0525f7d790f69bc\"\u003e\u003ccode\u003e472d086\u003c/code\u003e\u003c/a\u003e fix(tree): panic in findCaseInsensitivePathRec with RedirectFixedPath (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4535\"\u003e#4535\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/fb2583442c4d9bccb75e6d26f1aa6e7c01950db6\"\u003e\u003ccode\u003efb25834\u003c/code\u003e\u003c/a\u003e test(context): use http.StatusContinue constant instead of magic number 100 (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/6f1d5fe3cdb171a08928c3c9dd3fbcfc9ee1b521\"\u003e\u003ccode\u003e6f1d5fe\u003c/code\u003e\u003c/a\u003e test(render): add comprehensive error handling tests (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4541\"\u003e#4541\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/5c00df8afadd06cc5be530dde00fe6d9fa4a2e4a\"\u003e\u003ccode\u003e5c00df8\u003c/code\u003e\u003c/a\u003e fix(render): write content length in Data.Render (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4206\"\u003e#4206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/db309081bc5c137b2aa15701ef53f7f19788da25\"\u003e\u003ccode\u003edb30908\u003c/code\u003e\u003c/a\u003e chore(logger): allow skipping query string output (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4547\"\u003e#4547\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/ba093d19477b896ac89a7fc3246af23d290b8e26\"\u003e\u003ccode\u003eba093d1\u003c/code\u003e\u003c/a\u003e chore(binding): upgrade bson dependency to mongo-driver v2 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4549\"\u003e#4549\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/gin-gonic/gin/compare/v1.11.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-openapi/runtime` from 0.31.0 to 0.32.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-openapi/runtime/releases\"\u003egithub.com/go-openapi/runtime's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.32.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/go-openapi/runtime/tree/v0.32.2\"\u003e0.32.2\u003c/a\u003e - 2026-05-27\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-openapi/runtime/compare/v0.32.1...v0.32.2\"\u003ehttps://github.com/go-openapi/runtime/compare/v0.32.1...v0.32.2\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e2 commits in this release.\u003c/p\u003e\n\u003chr /\u003e\n\u003ch3\u003e\u003c!-- raw HTML omitted --\u003eFixed bugs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(client): added a guard to avoid the client to panic by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/474\"\u003e#474\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/10b4d12b0cd87e2f815d599da4fe4dd193860402\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003c!-- raw HTML omitted --\u003eMiscellaneous tasks\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore: prepare release v0.32.2 by \u003ca href=\"https://github.com/bot-go-openapi%5Bbot%5D\"\u003e\u003ccode\u003e@​bot-go-openapi[bot]\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/475\"\u003e#475\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/a357ecf20e27c31a91eab863273f0d8b4a226f27\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003ePeople who contributed to this release\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/go-openapi/runtime\"\u003eruntime\u003c/a\u003e license terms\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/go-openapi/runtime/?tab=Apache-2.0-1-ov-file#readme\"\u003e\u003cimg src=\"http://img.shields.io/badge/license-Apache%20v2-orange.svg\" alt=\"License\" /\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch1\u003ePer-module changes\u003c/h1\u003e\n\u003chr /\u003e\n\u003ch2\u003eclient-middleware/opentracing (0.32.2)\u003c/h2\u003e\n\u003ch3\u003e\u003c!-- raw HTML omitted --\u003eMiscellaneous tasks\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore: prepare release v0.32.2 by \u003ca href=\"https://github.com/bot-go-openapi%5Bbot%5D\"\u003e\u003ccode\u003e@​bot-go-openapi[bot]\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/475\"\u003e#475\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/a357ecf20e27c31a91eab863273f0d8b4a226f27\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.32.1\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/a357ecf20e27c31a91eab863273f0d8b4a226f27\"\u003e\u003ccode\u003ea357ecf\u003c/code\u003e\u003c/a\u003e chore: prepare release v0.32.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/10b4d12b0cd87e2f815d599da4fe4dd193860402\"\u003e\u003ccode\u003e10b4d12\u003c/code\u003e\u003c/a\u003e fix(client): added a guard to avoid the client to panic (\u003ca href=\"https://redirect.github.com/go-openapi/runtime/issues/474\"\u003e#474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/ea80e5aacea5c4beb4e0149c16bfedafeb712ade\"\u003e\u003ccode\u003eea80e5a\u003c/code\u003e\u003c/a\u003e chore: prepare release v0.32.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/01f5c5554ca086b21e2edeb501df8d1ea3442e89\"\u003e\u003ccode\u003e01f5c55\u003c/code\u003e\u003c/a\u003e doc: documented SkipAuth feature with build tag (\u003ca href=\"https://redirect.github.com/go-openapi/runtime/issues/472\"\u003e#472\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/af192a9fb1651707e247f9a61b98f4bd033e86b1\"\u003e\u003ccode\u003eaf192a9\u003c/code\u003e\u003c/a\u003e refactor(client): promote ContextualTransport to runtime package (\u003ca href=\"https://redirect.github.com/go-openapi/runtime/issues/471\"\u003e#471\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/100221960271f64b93bda18c4710deaffec71fba\"\u003e\u003ccode\u003e1002219\u003c/code\u003e\u003c/a\u003e chore: prepare release v0.32.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/c1e2e2cb180aa5f374faa5ac74868eab49f53eb3\"\u003e\u003ccode\u003ec1e2e2c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-openapi/runtime/issues/469\"\u003e#469\u003c/a\u003e from fredbi/fix/3113-file-urlencoded\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/584ff89d96ca40fb1fc2dafb11d1a778b10eac75\"\u003e\u003ccode\u003e584ff89\u003c/code\u003e\u003c/a\u003e ci: add unsafe-skipauth tagged-build workflow with coverage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/4042690b6876ac18d04c0803d55aefcd86948472\"\u003e\u003ccode\u003e4042690\u003c/code\u003e\u003c/a\u003e feat(middleware): build-tag-gated SetSkipAuth for dev-mode auth bypass\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/cd748fa92d58a2758a07a632ea5905e5f76126ba\"\u003e\u003ccode\u003ecd748fa\u003c/code\u003e\u003c/a\u003e refactor(client/otel): pivot OpenTelemetry transport to SubmitContext\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-openapi/runtime/compare/v0.31.0...v0.32.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/goccy/go-yaml` from 1.18.0 to 1.19.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/goccy/go-yaml/releases\"\u003egithub.com/goccy/go-yaml's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.19.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix anchor reference regression in nested structures by \u003ca href=\"https://github.com/linyows\"\u003e\u003ccode\u003e@​linyows\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/839\"\u003egoccy/go-yaml#839\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/linyows\"\u003e\u003ccode\u003e@​linyows\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/839\"\u003egoccy/go-yaml#839\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/goccy/go-yaml/compare/v1.19.1...v1.19.2\"\u003ehttps://github.com/goccy/go-yaml/compare/v1.19.1...v1.19.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.19.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix decoding of integer keys of map type by \u003ca href=\"https://github.com/goccy\"\u003e\u003ccode\u003e@​goccy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/829\"\u003egoccy/go-yaml#829\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport line comment for flow sequence or flow map by \u003ca href=\"https://github.com/goccy\"\u003e\u003ccode\u003e@​goccy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/834\"\u003egoccy/go-yaml#834\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/goccy/go-yaml/compare/v1.19.0...v1.19.1\"\u003ehttps://github.com/goccy/go-yaml/compare/v1.19.0...v1.19.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;feat: Dont make copies of structs for validation\u0026quot; by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/763\"\u003egoccy/go-yaml#763\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd decode option that allows specific field prefixes by \u003ca href=\"https://github.com/cpuguy83\"\u003e\u003ccode\u003e@​cpuguy83\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/795\"\u003egoccy/go-yaml#795\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNormalize CR and CRLF in multi-line strings by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/754\"\u003egoccy/go-yaml#754\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport non string map keys by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/756\"\u003egoccy/go-yaml#756\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSkip directive in path operations by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/758\"\u003egoccy/go-yaml#758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd indentation to flow values on new lines by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/759\"\u003egoccy/go-yaml#759\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd support for RawMessage, similar to json.RawMessage by \u003ca href=\"https://github.com/thanethomson\"\u003e\u003ccode\u003e@​thanethomson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/790\"\u003egoccy/go-yaml#790\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cpuguy83\"\u003e\u003ccode\u003e@​cpuguy83\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/795\"\u003egoccy/go-yaml#795\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/thanethomson\"\u003e\u003ccode\u003e@​thanethomson\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/790\"\u003egoccy/go-yaml#790\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/goccy/go-yaml/compare/v1.18.0...v1.19.0\"\u003ehttps://github.com/goccy/go-yaml/compare/v1.18.0...v1.19.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/92bc79cb5f685e999ad131473168fc45215d12d9\"\u003e\u003ccode\u003e92bc79c\u003c/code\u003e\u003c/a\u003e Fix anchor reference regression in nested structures (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/839\"\u003e#839\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/b0ab06985557a2d84913ecba6dda0dbedbd5e154\"\u003e\u003ccode\u003eb0ab069\u003c/code\u003e\u003c/a\u003e Support line comment for flow sequence or flow map (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/834\"\u003e#834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/9e98b0c753ff2b8f0b323929c9c60fe7951d0f45\"\u003e\u003ccode\u003e9e98b0c\u003c/code\u003e\u003c/a\u003e Fix decoding of integer keys of map type (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/829\"\u003e#829\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/a7b4bfbcf4a41152862ffba5cce666631bc04bb1\"\u003e\u003ccode\u003ea7b4bfb\u003c/code\u003e\u003c/a\u003e Add support for RawMessage, similar to json.RawMessage (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/790\"\u003e#790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/07c09c028744e7aac32d1b11279a401055d107f5\"\u003e\u003ccode\u003e07c09c0\u003c/code\u003e\u003c/a\u003e Add indentation to flow values on new lines (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/759\"\u003e#759\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/0040ab4161153c5b812ae51984d3967ad3dbd068\"\u003e\u003ccode\u003e0040ab4\u003c/code\u003e\u003c/a\u003e Skip directive in path operations (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/758\"\u003e#758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/7901e98f54d280a553a0d606c91a82fa89493928\"\u003e\u003ccode\u003e7901e98\u003c/code\u003e\u003c/a\u003e Support non string map keys (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/756\"\u003e#756\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/f4d13479ba3d44541a65d0dffeab5e3fa805413a\"\u003e\u003ccode\u003ef4d1347\u003c/code\u003e\u003c/a\u003e Normalize CR and CRLF in multi-line strings (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/754\"\u003e#754\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/90e852559132e85734ab0c9a48b3a912ebd3f060\"\u003e\u003ccode\u003e90e8525\u003c/code\u003e\u003c/a\u003e Add decode option that allows specific field prefixes (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/795\"\u003e#795\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/25e5d9094248e480434ca87d9119e3d9ce7ac1d7\"\u003e\u003ccode\u003e25e5d90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;feat: Dont make copies of structs for validation (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/737\"\u003e#737\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/763\"\u003e#763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/goccy/go-yaml/compare/v1.18.0...v1.19.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.20.7 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.21.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2254\"\u003egoogle/go-containerregistry#2254\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jferrl/go-githubauth` from 1.5.1 to 1.6.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jferrl/go-githubauth/releases\"\u003egithub.com/jferrl/go-githubauth's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.6.0\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003ch3\u003eExternal key store support for GitHub App JWTs\u003c/h3\u003e\n\u003cp\u003eAdded \u003ccode\u003eNewApplicationTokenSourceFromSigner\u003c/code\u003e which accepts any \u003ccode\u003ecrypto.Signer\u003c/code\u003e with an RSA public key. Enables signing via AWS KMS, GCP KMS, Azure Key Vault, HashiCorp Vault Transit, PKCS#11 HSMs, or ssh-agent — the private key never touches process memory. Validates at construction that the signer's public key is \u003ccode\u003e*rsa.PublicKey\u003c/code\u003e (GitHub requires RS256).\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003esi...\n\n_Description has been truncated_","html_url":"https://github.com/akuity/kargo/pull/6389","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/akuity%2Fkargo/issues/6389","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/6389/packages"}},{"old_version":"0.21.5","new_version":"0.21.6","update_type":"patch","path":null,"pr_created_at":"2026-05-29T22:55:57.000Z","version_change":"0.21.5 → 0.21.6","issue":{"uuid":"4552121993","node_id":"PR_kwDOD5cBa87g1Nx-","number":608,"state":"closed","title":"chore(deps): bump the go-minor-patch group across 1 directory with 7 updates","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-29T22:56:07.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-29T22:55:57.000Z","updated_at":"2026-05-29T22:56:10.000Z","time_to_close":10,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-minor-patch","update_count":7,"packages":[{"name":"github.com/containerd/containerd/v2","old_version":"2.3.0","new_version":"2.3.1","repository_url":"https://github.com/containerd/containerd"},{"name":"github.com/docker/cli","old_version":"29.4.3+incompatible","new_version":"29.5.2+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/docker/go-connections","old_version":"0.6.0","new_version":"0.7.0","repository_url":"https://github.com/docker/go-connections"},{"name":"github.com/go-test/deep","old_version":"1.0.8","new_version":"1.1.1","repository_url":"https://github.com/go-test/deep"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"golang.org/x/crypto","old_version":"0.50.0","new_version":"0.52.0","repository_url":"https://github.com/golang/crypto"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor-patch group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.3.0` | `2.3.1` |\n| [github.com/docker/cli](https://github.com/docker/cli) | `29.4.3+incompatible` | `29.5.2+incompatible` |\n| [github.com/docker/go-connections](https://github.com/docker/go-connections) | `0.6.0` | `0.7.0` |\n| [github.com/go-test/deep](https://github.com/go-test/deep) | `1.0.8` | `1.1.1` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.5` | `0.21.6` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.50.0` | `0.52.0` |\n\n\nUpdates `github.com/containerd/containerd/v2` from 2.3.0 to 2.3.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/containerd/containerd/releases\"\u003egithub.com/containerd/containerd/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003econtainerd 2.3.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v2.3.1 release of containerd!\u003c/p\u003e\n\u003cp\u003eThe first patch release for containerd 2.3 contains various fixes and improvements.\u003c/p\u003e\n\u003ch3\u003eSecurity Updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/security/advisories/GHSA-fqw6-gf59-qr4w\"\u003e\u003cstrong\u003eCVE-2026-46680\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eHighlights\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bug where failed gRPC plugins were not tolerated when starting listeners (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13390\"\u003e#13390\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eImage Storage\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure metadata and mount plugin boltdb files are closed on server shutdown (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13379\"\u003e#13379\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eRuntime\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix handling of out-of-range USER values in OCI spec to avoid unexpected username/group lookups (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13447\"\u003e#13447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix sandbox task API endpoints for non-runc runtimes and deprecate task fields in Runc options (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13422\"\u003e#13422\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eApply hardening to default seccomp socket policy by blocking AF_ALG (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13409\"\u003e#13409\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eSnapshotters\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eDisable overlayfs \u0026quot;rebase\u0026quot; capability when running in user namespace (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13394\"\u003e#13394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix transfer plugin error when EROFS differ is configured but mkfs.erofs is unavailable (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13364\"\u003e#13364\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/containerd/containerd/issues\"\u003ehttps://github.com/containerd/containerd/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMaksym Pavlenko\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eDerek McGowan\u003c/li\u003e\n\u003cli\u003ePaweł Gronowski\u003c/li\u003e\n\u003cli\u003eBrian Goff\u003c/li\u003e\n\u003cli\u003eAustin Vazquez\u003c/li\u003e\n\u003cli\u003eLEI WANG\u003c/li\u003e\n\u003cli\u003eSamuel Karp\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare release notes for v2.3.1 (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13405\"\u003e#13405\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/58af9651939577f81969b387b6b2e2aed45ead7d\"\u003e\u003ccode\u003e58af96519\u003c/code\u003e\u003c/a\u003e Prepare release notes for v2.3.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/8f0b3ca83015873d643db246202b63b8384f14fd\"\u003e\u003ccode\u003e8f0b3ca83\u003c/code\u003e\u003c/a\u003e Update api to v1.11.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eoci: return explicit error for out-of-range USER values (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13447\"\u003e#13447\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/64b425cf570b3b8dd1d4cc46da7c1fce65c6651a\"\u003e\u003ccode\u003e64b425c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13405\"\u003e#13405\u003c/a\u003e from AkihiroSuda/prepare-release-2.3.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/58af9651939577f81969b387b6b2e2aed45ead7d\"\u003e\u003ccode\u003e58af965\u003c/code\u003e\u003c/a\u003e Prepare release notes for v2.3.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/8f0b3ca83015873d643db246202b63b8384f14fd\"\u003e\u003ccode\u003e8f0b3ca\u003c/code\u003e\u003c/a\u003e Update api to v1.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/9f8f4538dea6960e9f53a8f0caba11531fcc095c\"\u003e\u003ccode\u003e9f8f453\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13447\"\u003e#13447\u003c/a\u003e from samuelkarp/oci-withuser-errrange-2.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/f822a911ab2b7c73e30bc0f36ea319642c9711b1\"\u003e\u003ccode\u003ef822a91\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13444\"\u003e#13444\u003c/a\u003e from dmcgowan/prepare-api-v1.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/da7aef299c57cc1f290700ade8fa0a5fec69a462\"\u003e\u003ccode\u003eda7aef2\u003c/code\u003e\u003c/a\u003e Prepare release notes for api/v1.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/a50a704094cf72710ccfa4944a642ef4e7ec9d2c\"\u003e\u003ccode\u003ea50a704\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13422\"\u003e#13422\u003c/a\u003e from k8s-infra-cherrypick-robot/cherry-pick-13360-t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/5282d4e09d3bc8b0957780caa7a4644fac7c86a7\"\u003e\u003ccode\u003e5282d4e\u003c/code\u003e\u003c/a\u003e Wire task address and version fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/e44f5f9ec610d95a712d230e8a19ae516e0a26ac\"\u003e\u003ccode\u003ee44f5f9\u003c/code\u003e\u003c/a\u003e protos: include task API address to CreateTaskRequest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/85f22f7afa3af5aa5083cc7ae50c3b58a35b8849\"\u003e\u003ccode\u003e85f22f7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13409\"\u003e#13409\u003c/a\u003e from k8s-infra-cherrypick-robot/cherry-pick-13327-t...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/containerd/containerd/compare/v2.3.0...v2.3.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/cli` from 29.4.3+incompatible to 29.5.2+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/79eb04c7d8e1d73247cb7fe011eecc645063e0f0\"\u003e\u003ccode\u003e79eb04c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/3173\"\u003e#3173\u003c/a\u003e from rene-hermenau/patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1a3048fe6ca313e50ea70ae34e3e0917a1987a0a\"\u003e\u003ccode\u003e1a3048f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6997\"\u003e#6997\u003c/a\u003e from vvoland/gha-fix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9177c7fc6b11fcef52d2bcacdbf72681fdab6821\"\u003e\u003ccode\u003e9177c7f\u003c/code\u003e\u003c/a\u003e gha: Port validate milestones from Moby\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/77cb1567643b34da4390216e61f8f53c80e59d36\"\u003e\u003ccode\u003e77cb156\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6994\"\u003e#6994\u003c/a\u003e from thaJeztah/bump_buildx\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/382a92daa8c5721fda7e6011629cfbdc70fa0633\"\u003e\u003ccode\u003e382a92d\u003c/code\u003e\u003c/a\u003e Dockerfile: update buildx to v0.34.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/5c0919a947be11e0e07fd1cfd7949700255a50a4\"\u003e\u003ccode\u003e5c0919a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6995\"\u003e#6995\u003c/a\u003e from thaJeztah/bump_version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/a68dd7a4fbfe34bc3a057cf532abda740f6f0ad3\"\u003e\u003ccode\u003ea68dd7a\u003c/code\u003e\u003c/a\u003e bump VERSION to v29.5.2-dev\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2518b52d948a0cbee071d394c03c86a3005636ba\"\u003e\u003ccode\u003e2518b52\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6991\"\u003e#6991\u003c/a\u003e from mickael-docker/docs-clarify-authz\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9f18a0a70c9228f5892594c6b56425b8bed1899f\"\u003e\u003ccode\u003e9f18a0a\u003c/code\u003e\u003c/a\u003e docs: clarify authz content type\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2944fd1daa5d54315ab8fcd874ea9cb6199c6117\"\u003e\u003ccode\u003e2944fd1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6989\"\u003e#6989\u003c/a\u003e from thaJeztah/bump_version\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v29.4.3...v29.5.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/go-connections` from 0.6.0 to 0.7.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/7997b0f0ac81b5b26ad7d3d2c02ca2e8fbc6c7d9\"\u003e\u003ccode\u003e7997b0f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/go-connections/issues/156\"\u003e#156\u003c/a\u003e from thaJeztah/bump_go_winio\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/329724ad4d0a0ae91c392b41a47df3d7c6475a7f\"\u003e\u003ccode\u003e329724a\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/Microsoft/go-winio v0.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/161dc9bf709385ed22c1c9665d5ef45fc333ce7e\"\u003e\u003ccode\u003e161dc9b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/go-connections/issues/155\"\u003e#155\u003c/a\u003e from thaJeztah/pin_actions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/b115e42ee9f98b5f9de19a2054ae54483e84226d\"\u003e\u003ccode\u003eb115e42\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/go-connections/issues/154\"\u003e#154\u003c/a\u003e from thaJeztah/fix_non_linux_tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/4c35b2ac042020d513569f7578c52177d2b1a03e\"\u003e\u003ccode\u003e4c35b2a\u003c/code\u003e\u003c/a\u003e ci: pin actions to sha\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/b4454a660b5f65feff1ae967957eae3293c85bec\"\u003e\u003ccode\u003eb4454a6\u003c/code\u003e\u003c/a\u003e tlsconfig: make root pool tests deterministic across platforms\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/0819711a9938706b2f8af55cdec923fe8e71ccb4\"\u003e\u003ccode\u003e0819711\u003c/code\u003e\u003c/a\u003e tlsconfig: certPool: pass options as argument\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/03296353c218966349e11c41430ffd4abdff93c3\"\u003e\u003ccode\u003e0329635\u003c/code\u003e\u003c/a\u003e tlsconfig: rename some vars that shadowed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/894d811275c2f782172ae739d170bcaad295f188\"\u003e\u003ccode\u003e894d811\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/go-connections/issues/150\"\u003e#150\u003c/a\u003e from thaJeztah/deprecate_SystemCertPool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/go-connections/commit/0a1293ab5fa588c0498e1447e1d53ce95c6f3315\"\u003e\u003ccode\u003e0a1293a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/go-connections/issues/153\"\u003e#153\u003c/a\u003e from thaJeztah/chachacha\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/go-connections/compare/v0.6.0...v0.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-test/deep` from 1.0.8 to 1.1.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-test/deep/releases\"\u003egithub.com/go-test/deep's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix copy pasta error in TestNilMapsAreEmpty by \u003ca href=\"https://github.com/bartleyg\"\u003e\u003ccode\u003e@​bartleyg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-test/deep/pull/58\"\u003ego-test/deep#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd an option to consider nil pointers to be equivalent to zero values by \u003ca href=\"https://github.com/seveas\"\u003e\u003ccode\u003e@​seveas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-test/deep/pull/61\"\u003ego-test/deep#61\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bartleyg\"\u003e\u003ccode\u003e@​bartleyg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-test/deep/pull/58\"\u003ego-test/deep#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/seveas\"\u003e\u003ccode\u003e@​seveas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-test/deep/pull/61\"\u003ego-test/deep#61\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-test/deep/compare/v1.1.0...v1.1.1\"\u003ehttps://github.com/go-test/deep/compare/v1.1.0...v1.1.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.1.0\u003c/h2\u003e\n\u003cp\u003eNew minor release, v1.1, that adds support for \u003cem\u003eoptional\u003c/em\u003e flags.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImplment issue 28 with FLAG_IGNORE_SLICE_ORDER by \u003ca href=\"https://github.com/daniel-nichter\"\u003e\u003ccode\u003e@​daniel-nichter\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-test/deep/pull/56\"\u003ego-test/deep#56\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-test/deep/compare/v1.0.9...v1.1.0\"\u003ehttps://github.com/go-test/deep/compare/v1.0.9...v1.1.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.0.9\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove Travis CI, use GitHub Actinos instead by \u003ca href=\"https://github.com/daniel-nichter\"\u003e\u003ccode\u003e@​daniel-nichter\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-test/deep/pull/53\"\u003ego-test/deep#53\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix issue 45: don't try to call Error method on unexported field by \u003ca href=\"https://github.com/daniel-nichter\"\u003e\u003ccode\u003e@​daniel-nichter\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-test/deep/pull/54\"\u003ego-test/deep#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd CompareFunctions (issue 46) by \u003ca href=\"https://github.com/daniel-nichter\"\u003e\u003ccode\u003e@​daniel-nichter\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-test/deep/pull/55\"\u003ego-test/deep#55\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-test/deep/compare/v1.0.8...v1.0.9\"\u003ehttps://github.com/go-test/deep/compare/v1.0.8...v1.0.9\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-test/deep/blob/master/CHANGES.md\"\u003egithub.com/go-test/deep's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.1 released 2024-06-23\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eNilPointersAreZero\u003c/code\u003e option: causes a nil pointer to be equal to a zero value (PR \u003ca href=\"https://redirect.github.com/go-test/deep/issues/61\"\u003e#61\u003c/a\u003e) (\u003ca href=\"https://github.com/seveas\"\u003e\u003ccode\u003e@​seveas\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdated test matrix to go1.22, go1.21, and go1.20\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.0 released 2022-12-09\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd optional flags: \u003ccode\u003eEqual(a, b, flags..)\u003c/code\u003e and \u003ccode\u003eFLAG_IGNORE_SLICE_ORDER\u003c/code\u003e (issue \u003ca href=\"https://redirect.github.com/go-test/deep/issues/28\"\u003e#28\u003c/a\u003e, PR \u003ca href=\"https://redirect.github.com/go-test/deep/issues/56\"\u003e#56\u003c/a\u003e) (\u003ca href=\"https://github.com/alenkacz\"\u003e\u003ccode\u003e@​alenkacz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch2\u003ev1.0.9 released 2022-12-09\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed issue \u003ca href=\"https://redirect.github.com/go-test/deep/issues/45\"\u003e#45\u003c/a\u003e: Panic when comparing errors in unexported fields (PR \u003ca href=\"https://redirect.github.com/go-test/deep/issues/54\"\u003e#54\u003c/a\u003e) (\u003ca href=\"https://github.com/seveas\"\u003e\u003ccode\u003e@​seveas\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed issue \u003ca href=\"https://redirect.github.com/go-test/deep/issues/46\"\u003e#46\u003c/a\u003e: Functions are handled differently from reflect.DeepEqual (PR \u003ca href=\"https://redirect.github.com/go-test/deep/issues/55\"\u003e#55\u003c/a\u003e) (\u003ca href=\"https://github.com/countcb\"\u003e\u003ccode\u003e@​countcb\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdated test matrix to go1.17, go1.18, and go1.19 and moved testing to GitHub Actions\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/9e863ff5cf900f95c7e8a5e8248300939257744b\"\u003e\u003ccode\u003e9e863ff\u003c/code\u003e\u003c/a\u003e Release v1.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/dc5b2f649f19df10b41b5f6ad46f62bc22d60341\"\u003e\u003ccode\u003edc5b2f6\u003c/code\u003e\u003c/a\u003e Update SECURITY.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/185886dcdbd18eef2db9c45ad3250df9c723776d\"\u003e\u003ccode\u003e185886d\u003c/code\u003e\u003c/a\u003e Restore 100% test coverage (NilPointersAreZero case)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/47ae1b86a22d8f95d90795f0803d1b1cb50c824d\"\u003e\u003ccode\u003e47ae1b8\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-test/deep/issues/61\"\u003e#61\u003c/a\u003e from seveas/nil-pointers-are-zero\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/93c35acf4ad7e9428d206384fc891d0d93e732a4\"\u003e\u003ccode\u003e93c35ac\u003c/code\u003e\u003c/a\u003e Merge branch 'master' into nil-pointers-are-zero\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/2982c5cd7f0df7e1fc742be1c9647b4a93a4b69f\"\u003e\u003ccode\u003e2982c5c\u003c/code\u003e\u003c/a\u003e Update test matrix to latest 3 Go versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/2b8252e0e2927def6d2e4b3da423773b7da0c593\"\u003e\u003ccode\u003e2b8252e\u003c/code\u003e\u003c/a\u003e Add an option to consider nil pointers to be equivalent to zero values\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/95fb3b12750bb129d99591610527cbb1512565c9\"\u003e\u003ccode\u003e95fb3b1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-test/deep/issues/58\"\u003e#58\u003c/a\u003e from bartleyg/patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/1127c8410de31c10a9ee65a3130cb9999222f888\"\u003e\u003ccode\u003e1127c84\u003c/code\u003e\u003c/a\u003e fix copy pasta test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-test/deep/commit/7ff4e92ca97b8da0d9584639f74080f9a62fd2f0\"\u003e\u003ccode\u003e7ff4e92\u003c/code\u003e\u003c/a\u003e Update changelog for v1.1.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-test/deep/compare/v1.0.8...v1.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/moby/moby/client` from 0.4.0 to 0.4.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/moby/releases\"\u003egithub.com/moby/moby/client's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eclient/v0.4.1\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclient: fix \u003ccode\u003eImagePullResponse.Wait\u003c/code\u003e, \u003ccode\u003eImagePushResponse.Wait\u003c/code\u003e not returning an error if pull/push errors happend during the pull operation. \u003ca href=\"https://redirect.github.com/moby/moby/pull/52305\"\u003emoby/moby#52305\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edaemon, client: diskUsage: explicitly exclude \u0026quot;-1\u0026quot; for containers. \u003ca href=\"https://redirect.github.com/moby/moby/pull/52309\"\u003emoby/moby#52309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego.mod: add back replace rules. \u003ca href=\"https://redirect.github.com/moby/moby/pull/52325\"\u003emoby/moby#52325\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evendor: github.com/docker/go-connections v0.7.0. \u003ca href=\"https://redirect.github.com/moby/moby/pull/51311\"\u003emoby/moby#51311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evendor: github.com/moby/moby/api v1.54.2. \u003ca href=\"https://redirect.github.com/moby/moby/pull/52416\"\u003emoby/moby#52416\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/moby/blob/v0.4.1/CHANGELOG.md\"\u003egithub.com/moby/moby/client's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.4.1 (2013-06-17)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemote Api: Add flag to enable cross domain requests\u003c/li\u003e\n\u003cli\u003eRemote Api/Client: Add images and containers sizes in docker ps and docker images\u003c/li\u003e\n\u003cli\u003eRuntime: Configure dns configuration host-wide with 'docker -d -dns'\u003c/li\u003e\n\u003cli\u003eRuntime: Detect faulty DNS configuration and replace it with a public default\u003c/li\u003e\n\u003cli\u003eRuntime: allow docker run \u003c!-- raw HTML omitted --\u003e:\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eRuntime: you can now specify public port (ex: -p 80:4500)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cul\u003e\n\u003cli\u003eClient: allow multiple params in inspect\u003c/li\u003e\n\u003cli\u003eClient: Print the container id before the hijack in \u003ccode\u003edocker run\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eRegistry: add regexp check on repo's name\u003c/li\u003e\n\u003cli\u003eRegistry: Move auth to the client\u003c/li\u003e\n\u003cli\u003eRuntime: improved image removal to garbage-collect unreferenced parents\u003c/li\u003e\n\u003cli\u003eVagrantfile: Add the rest api port to vagrantfile's port_forward\u003c/li\u003e\n\u003cli\u003eUpgrade to Go 1.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003cul\u003e\n\u003cli\u003eBuilder: don't ignore last line in Dockerfile when it doesn't end with \\n\u003c/li\u003e\n\u003cli\u003eRegistry: Remove login check on pull\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/7b6f50772cc7003fede23e74f70f8dc76b96a434\"\u003e\u003ccode\u003e7b6f507\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/moby/issues/912\"\u003e#912\u003c/a\u003e from dotcloud/bump_0.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/6e2c32eb9a86c65c55d9097e58a5ad5c9a950e66\"\u003e\u003ccode\u003e6e2c32e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/moby/issues/911\"\u003e#911\u003c/a\u003e from dotcloud/add_port_redirection_doc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/22b0a38df51acd9f96ae1a82f8a5b86640b5f3b5\"\u003e\u003ccode\u003e22b0a38\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/moby/issues/897\"\u003e#897\u003c/a\u003e from dotcloud/fix-overlapping-add\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/cb58e63fc54fb3f1c620c8372269a8e308e43bee\"\u003e\u003ccode\u003ecb58e63\u003c/code\u003e\u003c/a\u003e Typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/862659875335c953bf6974af4cace397c7ec3902\"\u003e\u003ccode\u003e8626598\u003c/code\u003e\u003c/a\u003e Added content to port redirect doc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/36231345f17e6fdb08b0f756c4872294d4745048\"\u003e\u003ccode\u003e3623134\u003c/code\u003e\u003c/a\u003e add port redirection doc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/e8f001d45157f2f645e415543d7c3e7bf832c665\"\u003e\u003ccode\u003ee8f001d\u003c/code\u003e\u003c/a\u003e Bumped version to 0.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/389db5f5987e927bf2f8f90ea536fec3a95ac1cb\"\u003e\u003ccode\u003e389db5f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/moby/issues/887\"\u003e#887\u003c/a\u003e from dotcloud/761-packaging-dockerbuilder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/6746c385bd7938e1bbcf588a27651de63a2de04a\"\u003e\u003ccode\u003e6746c38\u003c/code\u003e\u003c/a\u003e FIXMEs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/commit/30f604517a5ddc15b3e9f6e9d42f4c7569c1627f\"\u003e\u003ccode\u003e30f6045\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/moby/issues/895\"\u003e#895\u003c/a\u003e from dotcloud/build-fixes\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/moby/compare/v0.4.0...v0.4.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.50.0 to 0.52.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a1c0d9929856c8aba2b31f079340f00578eda803\"\u003e\u003ccode\u003ea1c0d99\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/3c7c86938f4541c333d506f719388d9c42d4763d\"\u003e\u003ccode\u003e3c7c869\u003c/code\u003e\u003c/a\u003e ssh: fix deadlock on unexpected channel responses\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/533fb3f7e4a5ae23f69d1837cd851d35ff5b76ce\"\u003e\u003ccode\u003e533fb3f\u003c/code\u003e\u003c/a\u003e ssh: fix source-address critical option bypass\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/abbc44d451a6f9236a2bbd26cbcd4d0fec473da3\"\u003e\u003ccode\u003eabbc44d\u003c/code\u003e\u003c/a\u003e ssh: fix incorrect operator order\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e052873987615dc96fe67607a9a6adb76311344f\"\u003e\u003ccode\u003ee052873\u003c/code\u003e\u003c/a\u003e ssh: fix infinite loop on large channel writes due to integer overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b61cf853a89d82cad68da5e12a6beca2116f8456\"\u003e\u003ccode\u003eb61cf85\u003c/code\u003e\u003c/a\u003e ssh: enforce user presence verification for security keys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/9c2cd33e8d96a96133fd6ff732510ebba539c2bd\"\u003e\u003ccode\u003e9c2cd33\u003c/code\u003e\u003c/a\u003e ssh: enforce strict limits on DSA key parameters\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/890731877d85f71cfdc9554e7a27fec4684fc4c4\"\u003e\u003ccode\u003e8907318\u003c/code\u003e\u003c/a\u003e ssh: reject RSA keys with excessively large moduli\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/ffd87b4878fa98ca2908ec534e1a410bf095a35e\"\u003e\u003ccode\u003effd87b4\u003c/code\u003e\u003c/a\u003e ssh: fix panic when authority callbacks are nil\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e7a7384ecbc8d519f6f4c11b36fa9d761fc8946\"\u003e\u003ccode\u003e4e7a738\u003c/code\u003e\u003c/a\u003e ssh: fix deadlock on unexpected global responses\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.50.0...v0.52.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/anchore/stereoscope/pull/608","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fstereoscope/issues/608","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/608/packages"}},{"old_version":"0.21.4","new_version":"0.21.6","update_type":"patch","path":null,"pr_created_at":"2026-05-28T21:03:15.000Z","version_change":"0.21.4 → 0.21.6","issue":{"uuid":"4543804226","node_id":"PR_kwDOHI_2wc7gZ-IG","number":1292,"state":"closed","title":"chore: bump the engine group across 1 directory with 50 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-12T01:24:26.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-28T21:03:15.000Z","updated_at":"2026-06-12T01:24:28.000Z","time_to_close":1225271,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore: bump","group_name":"engine","update_count":50,"packages":[{"name":"charm.land/lipgloss/v2","old_version":"2.0.2","new_version":"2.0.3","repository_url":"https://github.com/charmbracelet/lipgloss"},{"name":"cloud.google.com/go/secretmanager","old_version":"1.16.0","new_version":"1.20.0","repository_url":"https://github.com/googleapis/google-cloud-go"},{"name":"github.com/1password/onepassword-sdk-go","old_version":"0.3.1","new_version":"0.4.0","repository_url":"https://github.com/1password/onepassword-sdk-go"},{"name":"github.com/99designs/gqlgen","old_version":"0.17.89","new_version":"0.17.90","repository_url":"https://github.com/99designs/gqlgen"},{"name":"github.com/alecthomas/chroma/v2","old_version":"2.23.1","new_version":"2.26.1","repository_url":"https://github.com/alecthomas/chroma"},{"name":"github.com/anthropics/anthropic-sdk-go","old_version":"1.30.0","new_version":"1.46.0","repository_url":"https://github.com/anthropics/anthropic-sdk-go"},{"name":"github.com/aws/aws-sdk-go-v2","old_version":"1.41.5","new_version":"1.41.9","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/config","old_version":"1.32.14","new_version":"1.32.20","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/service/secretsmanager","old_version":"1.41.5","new_version":"1.41.9","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/service/ssm","old_version":"1.68.4","new_version":"1.68.8","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/containerd/containerd/api","old_version":"1.10.0","new_version":"1.11.1","repository_url":"https://github.com/containerd/containerd"},{"name":"github.com/containerd/containerd/v2","old_version":"2.2.3","new_version":"2.3.1","repository_url":"https://github.com/containerd/containerd"},{"name":"github.com/containerd/fuse-overlayfs-snapshotter/v2","old_version":"2.1.2","new_version":"2.1.7","repository_url":"https://github.com/containerd/fuse-overlayfs-snapshotter"},{"name":"github.com/containerd/typeurl/v2","old_version":"2.2.3","new_version":"2.3.0","repository_url":"https://github.com/containerd/typeurl"},{"name":"github.com/docker/cli","old_version":"29.3.1+incompatible","new_version":"29.5.2+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/docker/go-connections","old_version":"0.6.0","new_version":"0.7.0","repository_url":"https://github.com/docker/go-connections"},{"name":"github.com/go-git/go-git/v5","old_version":"5.17.2","new_version":"5.19.1","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.4","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/goproxy/goproxy","old_version":"0.26.0","new_version":"0.26.1","repository_url":"https://github.com/goproxy/goproxy"},{"name":"github.com/in-toto/in-toto-golang","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/in-toto/in-toto-golang"},{"name":"github.com/invopop/jsonschema","old_version":"0.13.0","new_version":"0.14.0","repository_url":"https://github.com/invopop/jsonschema"},{"name":"github.com/jackpal/gateway","old_version":"1.1.1","new_version":"1.2.0","repository_url":"https://github.com/jackpal/gateway"},{"name":"github.com/mark3labs/mcp-go","old_version":"0.47.0","new_version":"0.54.1","repository_url":"https://github.com/mark3labs/mcp-go"},{"name":"github.com/moby/go-archive","old_version":"0.1.0","new_version":"0.2.0","repository_url":"https://github.com/moby/go-archive"},{"name":"github.com/modelcontextprotocol/go-sdk","old_version":"1.4.1","new_version":"1.6.1","repository_url":"https://github.com/modelcontextprotocol/go-sdk"},{"name":"github.com/opencontainers/selinux","old_version":"1.13.1","new_version":"1.15.1","repository_url":"https://github.com/opencontainers/selinux"},{"name":"github.com/package-url/packageurl-go","old_version":"0.1.5","new_version":"0.1.6","repository_url":"https://github.com/package-url/packageurl-go"},{"name":"github.com/tidwall/gjson","old_version":"1.18.0","new_version":"1.19.0","repository_url":"https://github.com/tidwall/gjson"},{"name":"golang.org/x/sys","old_version":"0.44.0","new_version":"0.45.0","repository_url":"https://github.com/golang/sys"},{"name":"google.golang.org/genai","old_version":"1.52.1","new_version":"1.58.0","repository_url":"https://github.com/googleapis/go-genai"},{"name":"google.golang.org/grpc","old_version":"1.80.0","new_version":"1.81.1","repository_url":"https://github.com/grpc/grpc-go"},{"name":"modernc.org/sqlite","old_version":"1.48.1","new_version":"1.51.0"}],"path":null,"ecosystem":"go"},"body":"Bumps the engine group with 32 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [charm.land/lipgloss/v2](https://github.com/charmbracelet/lipgloss) | `2.0.2` | `2.0.3` |\n| [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) | `1.16.0` | `1.20.0` |\n| [github.com/1password/onepassword-sdk-go](https://github.com/1password/onepassword-sdk-go) | `0.3.1` | `0.4.0` |\n| [github.com/99designs/gqlgen](https://github.com/99designs/gqlgen) | `0.17.89` | `0.17.90` |\n| [github.com/alecthomas/chroma/v2](https://github.com/alecthomas/chroma) | `2.23.1` | `2.26.1` |\n| [github.com/anthropics/anthropic-sdk-go](https://github.com/anthropics/anthropic-sdk-go) | `1.30.0` | `1.46.0` |\n| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.5` | `1.41.9` |\n| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.14` | `1.32.20` |\n| [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2) | `1.41.5` | `1.41.9` |\n| [github.com/aws/aws-sdk-go-v2/service/ssm](https://github.com/aws/aws-sdk-go-v2) | `1.68.4` | `1.68.8` |\n| [github.com/containerd/containerd/api](https://github.com/containerd/containerd) | `1.10.0` | `1.11.1` |\n| [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.2.3` | `2.3.1` |\n| [github.com/containerd/fuse-overlayfs-snapshotter/v2](https://github.com/containerd/fuse-overlayfs-snapshotter) | `2.1.2` | `2.1.7` |\n| [github.com/containerd/typeurl/v2](https://github.com/containerd/typeurl) | `2.2.3` | `2.3.0` |\n| [github.com/docker/cli](https://github.com/docker/cli) | `29.3.1+incompatible` | `29.5.2+incompatible` |\n| [github.com/docker/go-connections](https://github.com/docker/go-connections) | `0.6.0` | `0.7.0` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.17.2` | `5.19.1` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.4` | `0.21.6` |\n| [github.com/goproxy/goproxy](https://github.com/goproxy/goproxy) | `0.26.0` | `0.26.1` |\n| [github.com/in-toto/in-toto-golang](https://github.com/in-toto/in-toto-golang) | `0.10.0` | `0.11.0` |\n| [github.com/invopop/jsonschema](https://github.com/invopop/jsonschema) | `0.13.0` | `0.14.0` |\n| [github.com/jackpal/gateway](https://github.com/jackpal/gateway) | `1.1.1` | `1.2.0` |\n| [github.com/mark3labs/mcp-go](https://github.com/mark3labs/mcp-go) | `0.47.0` | `0.54.1` |\n| [github.com/moby/go-archive](https://github.com/moby/go-archive) | `0.1.0` | `0.2.0` |\n| [github.com/modelcontextprotocol/go-sdk](https://github.com/modelcontextprotocol/go-sdk) | `1.4.1` | `1.6.1` |\n| [github.com/opencontainers/selinux](https://github.com/opencontainers/selinux) | `1.13.1` | `1.15.1` |\n| [github.com/package-url/packageurl-go](https://github.com/package-url/packageurl-go) | `0.1.5` | `0.1.6` |\n| [github.com/tidwall/gjson](https://github.com/tidwall/gjson) | `1.18.0` | `1.19.0` |\n| [golang.org/x/sys](https://github.com/golang/sys) | `0.44.0` | `0.45.0` |\n| [google.golang.org/genai](https://github.com/googleapis/go-genai) | `1.52.1` | `1.58.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.80.0` | `1.81.1` |\n| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.48.1` | `1.51.0` |\n\n\nUpdates `charm.land/lipgloss/v2` from 2.0.2 to 2.0.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/charmbracelet/lipgloss/releases\"\u003echarm.land/lipgloss/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.0.3\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e472d718e2314596549bee2c0c8ccf8beea5f25ae: fix: Avoid background color query hang (\u003ca href=\"https://redirect.github.com/charmbracelet/lipgloss/issues/636\"\u003e#636\u003c/a\u003e) (\u003ca href=\"https://github.com/jedevc\"\u003e\u003ccode\u003e@​jedevc\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e9e39a0ad4f4fc779d620f17783cee3494da6ae29: docs: fix README typo (\u003ca href=\"https://redirect.github.com/charmbracelet/lipgloss/issues/629\"\u003e#629\u003c/a\u003e) (\u003ca href=\"https://github.com/Rohan5commit\"\u003e\u003ccode\u003e@​Rohan5commit\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecd93a9f5d2e3cb151da83150db29751d92585d23: docs: fix tree comment typo (\u003ca href=\"https://redirect.github.com/charmbracelet/lipgloss/issues/634\"\u003e#634\u003c/a\u003e) (\u003ca href=\"https://github.com/Rohan5commit\"\u003e\u003ccode\u003e@​Rohan5commit\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003cp\u003eThoughts? Questions? We love hearing from you. Feel free to reach out on \u003ca href=\"https://x.com/charmcli\"\u003eX\u003c/a\u003e, \u003ca href=\"https://charm.land/discord\"\u003eDiscord\u003c/a\u003e, \u003ca href=\"https://charm.land/slack\"\u003eSlack\u003c/a\u003e, \u003ca href=\"https://mastodon.social/@charmcli\"\u003eThe Fediverse\u003c/a\u003e, \u003ca href=\"https://bsky.app/profile/charm.land\"\u003eBluesky\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/charmbracelet/lipgloss/commit/472d718e2314596549bee2c0c8ccf8beea5f25ae\"\u003e\u003ccode\u003e472d718\u003c/code\u003e\u003c/a\u003e fix: Avoid background color query hang (\u003ca href=\"https://redirect.github.com/charmbracelet/lipgloss/issues/636\"\u003e#636\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/charmbracelet/lipgloss/commit/89fafbaf3ea3523e6afa6b82fde91fc41fefe45a\"\u003e\u003ccode\u003e89fafba\u003c/code\u003e\u003c/a\u003e chore: bump x/ansi to v0.11.7 to fix width calculation bug\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/charmbracelet/lipgloss/commit/d6d41e14fc7231f118013f5e5a05a9eb8224d7ea\"\u003e\u003ccode\u003ed6d41e1\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/sys in the all group (\u003ca href=\"https://redirect.github.com/charmbracelet/lipgloss/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/charmbracelet/lipgloss/commit/23a1bb1ed311e489eadb6c8f3cf53e20cfcc9338\"\u003e\u003ccode\u003e23a1bb1\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/lucasb-eyer/go-colorful in the all group (\u003ca href=\"https://redirect.github.com/charmbracelet/lipgloss/issues/640\"\u003e#640\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/charmbracelet/lipgloss/commit/cd93a9f5d2e3cb151da83150db29751d92585d23\"\u003e\u003ccode\u003ecd93a9f\u003c/code\u003e\u003c/a\u003e docs: fix tree comment typo (\u003ca href=\"https://redirect.github.com/charmbracelet/lipgloss/issues/634\"\u003e#634\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/charmbracelet/lipgloss/commit/25c5fb25df7b44558aa3678aa21f0a678e499602\"\u003e\u003ccode\u003e25c5fb2\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/charmbracelet/colorprofile in the all group (\u003ca href=\"https://redirect.github.com/charmbracelet/lipgloss/issues/630\"\u003e#630\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/charmbracelet/lipgloss/commit/9e39a0ad4f4fc779d620f17783cee3494da6ae29\"\u003e\u003ccode\u003e9e39a0a\u003c/code\u003e\u003c/a\u003e docs: fix README typo (\u003ca href=\"https://redirect.github.com/charmbracelet/lipgloss/issues/629\"\u003e#629\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/charmbracelet/lipgloss/compare/v2.0.2...v2.0.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `cloud.google.com/go/secretmanager` from 1.16.0 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/google-cloud-go/releases\"\u003ecloud.google.com/go/secretmanager's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eworkflows: v1.19.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/workflows/v1.18.0...workflows/v1.19.0\"\u003ev1.19.0\u003c/a\u003e (2026-05-07)\u003c/h2\u003e\n\u003ch2\u003estoragetransfer: v1.18.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/storagetransfer/v1.17.0...storagetransfer/v1.18.0\"\u003ev1.18.0\u003c/a\u003e (2026-05-07)\u003c/h2\u003e\n\u003ch2\u003eservicedirectory: v1.17.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/servicedirectory/v1.16.0...servicedirectory/v1.17.0\"\u003ev1.17.0\u003c/a\u003e (2026-05-07)\u003c/h2\u003e\n\u003ch2\u003etranslate: v1.17.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/translate/v1.16.0...translate/v1.17.0\"\u003ev1.17.0\u003c/a\u003e (2026-05-07)\u003c/h2\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md\"\u003ecloud.google.com/go/secretmanager's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/documentai/v1.19.0...documentai/v1.20.0\"\u003e1.20.0\u003c/a\u003e (2023-06-20)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edocumentai:\u003c/strong\u003e Add StyleInfo to document.proto (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/b726d413166faa8c84c0a09c6019ff50f3249b9d\"\u003eb726d41\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocumentai:\u003c/strong\u003e Add StyleInfo to document.proto (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/b726d413166faa8c84c0a09c6019ff50f3249b9d\"\u003eb726d41\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edocumentai:\u003c/strong\u003e REST query UpdateMask bug (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/df52820b0e7721954809a8aa8700b93c5662dc9b\"\u003edf52820\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/documentai/v1.18.1...documentai/v1.19.0\"\u003e1.19.0\u003c/a\u003e (2023-05-30)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edocumentai:\u003c/strong\u003e Update all direct dependencies (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/b340d030f2b52a4ce48846ce63984b28583abde6\"\u003eb340d03\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/documentai/v1.18.0...documentai/v1.18.1\"\u003e1.18.1\u003c/a\u003e (2023-05-08)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edocumentai:\u003c/strong\u003e Update grpc to v1.55.0 (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/1147ce02a990276ca4f8ab7a1ab65c14da4450ef\"\u003e1147ce0\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/documentai/v1.17.0...documentai/v1.18.0\"\u003e1.18.0\u003c/a\u003e (2023-03-22)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edocumentai:\u003c/strong\u003e Add ImportProcessorVersion in v1beta3 (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/c967961ed95750e173af0193ec8d0974471f43ff\"\u003ec967961\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/documentai/v1.16.0...documentai/v1.17.0\"\u003e1.17.0\u003c/a\u003e (2023-03-15)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edocumentai:\u003c/strong\u003e Added hints.language_hints field in OcrConfig (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/7522\"\u003e#7522\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/b2c40c3df916691b82f1b384eac5bc953960960a\"\u003eb2c40c3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/47bb902e48695e5f0c46f7bee00d72ae5f794e1e\"\u003e\u003ccode\u003e47bb902\u003c/code\u003e\u003c/a\u003e chore: release main (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/10988\"\u003e#10988\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/2b8ca4b4127ce3025c7a21cc7247510e07cc5625\"\u003e\u003ccode\u003e2b8ca4b\u003c/code\u003e\u003c/a\u003e chore: add Protobuf warning to release notes (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/11025\"\u003e#11025\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/8bb87d56af1cba736e0fe243979723e747e5e11e\"\u003e\u003ccode\u003e8bb87d5\u003c/code\u003e\u003c/a\u003e chore: update google.golang.org/api to v0.203.0 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/11022\"\u003e#11022\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/d40fbff9c1984aeed0224a4ac93eb95c5af17126\"\u003e\u003ccode\u003ed40fbff\u003c/code\u003e\u003c/a\u003e fix(storage): Skip only specific transport tests. (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/11016\"\u003e#11016\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/ff06fc220a2457e57c9e904c9aae1ab7a283521f\"\u003e\u003ccode\u003eff06fc2\u003c/code\u003e\u003c/a\u003e fix: Fix default service account tests on GCE. (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/11021\"\u003e#11021\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/6071167b8020c2190109035451a45aed28cc0061\"\u003e\u003ccode\u003e6071167\u003c/code\u003e\u003c/a\u003e feat(alloydb): add new PSC instance configuration setting and output the PSC ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/15eacb97ec27d3869cd554d6983433fbf82d0b4a\"\u003e\u003ccode\u003e15eacb9\u003c/code\u003e\u003c/a\u003e chore: update SA used for tests (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/e78389d1cf8ea4af49bfef76a36a08cb5f484b95\"\u003e\u003ccode\u003ee78389d\u003c/code\u003e\u003c/a\u003e chore: fix doc publish creds (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/11019\"\u003e#11019\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/1d7ee9f526fdb4d8e2210cc41030effe2c8d36e7\"\u003e\u003ccode\u003e1d7ee9f\u003c/code\u003e\u003c/a\u003e chore(main): release auth 0.9.9 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/11003\"\u003e#11003\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/6e69d2e85849002bad227ea5bebcde9199605bef\"\u003e\u003ccode\u003e6e69d2e\u003c/code\u003e\u003c/a\u003e feat(texttospeech): add brand voice lite, which lets you clone a voice with j...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/kms/v1.16.0...dlp/v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/1password/onepassword-sdk-go` from 0.3.1 to 0.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/1password/onepassword-sdk-go/releases\"\u003egithub.com/1password/onepassword-sdk-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 0.4.0\u003c/h2\u003e\n\u003ch1\u003e1Password Go SDK v0.4.0\u003c/h1\u003e\n\u003ch2\u003eNEW\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDesktop App integration:\u003c/strong\u003e The SDK can now authenticate via an authorization prompt from the 1Password app.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eVault CRUDL:\u003c/strong\u003e You can now fully manage 1Password vaults with the SDK, including creating, reading, updating, deleting and listing.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eVault group permission management operations:\u003c/strong\u003e You can now grant, update and revoke group access to vaults using \u003ccode\u003egrantGroupPermissions\u003c/code\u003e, \u003ccode\u003eupdateGroupPermissions\u003c/code\u003e, and \u003ccode\u003erevokeGroupPermissions\u003c/code\u003e functions.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eItem batch management:\u003c/strong\u003e You can now retrieve, create, update and delete items in batch, enabling more scalable item management.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 0.4.0-beta.2\u003c/h2\u003e\n\u003ch1\u003e1Password Go SDK v0.4.0-beta.2\u003c/h1\u003e\n\u003ch2\u003eNEW\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eVault group permission management operations:\u003c/strong\u003e You can now grant, update and revoke group access to vaults using \u003ccode\u003eGrantGroupPermissions\u003c/code\u003e, \u003ccode\u003eUpdateGroupPermissions\u003c/code\u003e, and \u003ccode\u003eRevokeGroupPermissions\u003c/code\u003e functions.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDesktop App integration on Windows:\u003c/strong\u003e The SDK can now authenticate via an authorization prompt from the 1Password app on Windows as well. Now all major desktop OSs support this feature.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFIXED\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eVault listing with additional parameters:\u003c/strong\u003e \u003ccode\u003eVaults().List\u003c/code\u003e no longer errors when additional parameters are provided.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHandling locked 1Password app state:\u003c/strong\u003e When the 1Password app gets locked after the SDK client is authenticated, it will now automatically re-authenticate.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 0.4.0-beta.1\u003c/h2\u003e\n\u003ch1\u003e1Password Go SDK v0.4.0-beta.1\u003c/h1\u003e\n\u003ch2\u003eNEW\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eThe SDK can now authenticate with the Desktop App.\u003c/li\u003e\n\u003cli\u003eVault \u003ccode\u003eGet\u003c/code\u003e, \u003ccode\u003eGetOverview\u003c/code\u003e as well as new options for vault \u003ccode\u003eList\u003c/code\u003e are now available.\u003c/li\u003e\n\u003cli\u003eItem batch operations are now available.\u003c/li\u003e\n\u003cli\u003eThe Groups API has been introduced.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/d0f8afa3413b85fd22bac5e6ab2fbee550c17169\"\u003e\u003ccode\u003ed0f8afa\u003c/code\u003e\u003c/a\u003e Update notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/6e24bc3f15761bedb052cf63b3fede06439b933d\"\u003e\u003ccode\u003e6e24bc3\u003c/code\u003e\u003c/a\u003e Release v0.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/ee80f4c52f796b3aceff5fc46f756d2ce32d34a5\"\u003e\u003ccode\u003eee80f4c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/1password/onepassword-sdk-go/issues/249\"\u003e#249\u003c/a\u003e from 1Password/morgan/add-vault-group-operations-exam...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/2a46d8e1314c8682c74dd1d5808cd2f7c2d06f1a\"\u003e\u003ccode\u003e2a46d8e\u003c/code\u003e\u003c/a\u003e removed vault crudl operations from service account examples\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/26c7319f6830091ce71619ea7af83cf7076825ee\"\u003e\u003ccode\u003e26c7319\u003c/code\u003e\u003c/a\u003e formatted variable names. Removed create vault example from service account t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/8d5d8a64f2defd9689baca68e4a1ca5a7121ac9a\"\u003e\u003ccode\u003e8d5d8a6\u003c/code\u003e\u003c/a\u003e reverted import change so it's contained within docs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/b99ef4609ab857371790e56447776617a9836327\"\u003e\u003ccode\u003eb99ef46\u003c/code\u003e\u003c/a\u003e Merge branch 'main' into morgan/add-vault-group-operations-examples\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/47716edd199fbb239175a8c6386f335245a2d620\"\u003e\u003ccode\u003e47716ed\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/1password/onepassword-sdk-go/issues/251\"\u003e#251\u003c/a\u003e from 1Password/beta\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/5e5ee00644599b84681f0618292f6da272e4d0e2\"\u003e\u003ccode\u003e5e5ee00\u003c/code\u003e\u003c/a\u003e removed group functionality from service account example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/1Password/onepassword-sdk-go/commit/35aa35cf03c08b29886b62d7a11dadf7c2582a05\"\u003e\u003ccode\u003e35aa35c\u003c/code\u003e\u003c/a\u003e fixed golangca lint error\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/1password/onepassword-sdk-go/compare/v0.3.1...v0.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/99designs/gqlgen` from 0.17.89 to 0.17.90\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/99designs/gqlgen/releases\"\u003egithub.com/99designs/gqlgen's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.17.90\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: add locations to resolver error responses by \u003ca href=\"https://github.com/florinel-chis\"\u003e\u003ccode\u003e@​florinel-chis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4090\"\u003e99designs/gqlgen#4090\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: return 500 instead of 422 for panic recovery by \u003ca href=\"https://github.com/PavelStefanov\"\u003e\u003ccode\u003e@​PavelStefanov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4098\"\u003e99designs/gqlgen#4098\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove use_light_mode_prefetch docs by \u003ca href=\"https://github.com/henrywoody\"\u003e\u003ccode\u003e@​henrywoody\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4101\"\u003e99designs/gqlgen#4101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: fix modernize lint issues by \u003ca href=\"https://github.com/alexandear\"\u003e\u003ccode\u003e@​alexandear\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4111\"\u003e99designs/gqlgen#4111\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFeature/field requested condition by \u003ca href=\"https://github.com/parkerroan\"\u003e\u003ccode\u003e@​parkerroan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4113\"\u003e99designs/gqlgen#4113\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBugfix/4102 input object dir with arg by \u003ca href=\"https://github.com/parkerroan\"\u003e\u003ccode\u003e@​parkerroan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4112\"\u003e99designs/gqlgen#4112\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix panic in transport on null body by \u003ca href=\"https://github.com/jeolted\"\u003e\u003ccode\u003e@​jeolted\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4115\"\u003e99designs/gqlgen#4115\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix gosec G115 integer overflow in generated atomic.AddInt32 call by \u003ca href=\"https://github.com/3rg0n\"\u003e\u003ccode\u003e@​3rg0n\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4120\"\u003e99designs/gqlgen#4120\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: deduplicate Child field context switches and scalar fieldContex… by \u003ca href=\"https://github.com/syssam\"\u003e\u003ccode\u003e@​syssam\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4086\"\u003e99designs/gqlgen#4086\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix: directive-only schema files break \u003ccode\u003efollow-schema\u003c/code\u003e code generation by \u003ca href=\"https://github.com/StevenACoffman\"\u003e\u003ccode\u003e@​StevenACoffman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4141\"\u003e99designs/gqlgen#4141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate gqlparser to v2.5.33 see \u003ca href=\"https://github.com/vektah/gqlparser/releases/tag/v2_5_33\"\u003ehttps://github.com/vektah/gqlparser/releases/tag/v2_5_33\u003c/a\u003e by \u003ca href=\"https://github.com/StevenACoffman\"\u003e\u003ccode\u003e@​StevenACoffman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4142\"\u003e99designs/gqlgen#4142\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce template logic: Part 1 ECDot by \u003ca href=\"https://github.com/StevenACoffman\"\u003e\u003ccode\u003e@​StevenACoffman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4144\"\u003e99designs/gqlgen#4144\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce Template Logic Part 2 by \u003ca href=\"https://github.com/StevenACoffman\"\u003e\u003ccode\u003e@​StevenACoffman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4145\"\u003e99designs/gqlgen#4145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePart 3 - reduce template logic: Unify ProcessArgField and ProcessArgFieldWithEC by \u003ca href=\"https://github.com/StevenACoffman\"\u003e\u003ccode\u003e@​StevenACoffman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4146\"\u003e99designs/gqlgen#4146\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump the npm_and_yarn group across 1 directory with 1 update by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4099\"\u003e99designs/gqlgen#4099\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump vitest from 4.0.18 to 4.1.0 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4078\"\u003e99designs/gqlgen#4078\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/urfave/cli/v3 from 3.7.0 to 3.8.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4103\"\u003e99designs/gqlgen#4103\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump graphql-ws from 6.0.7 to 6.0.8 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4104\"\u003e99designs/gqlgen#4104\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump mikepenz/action-junit-report from 6.3.1 to 6.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4110\"\u003e99designs/gqlgen#4110\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump graphql from 16.13.1 to 16.13.2 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4106\"\u003e99designs/gqlgen#4106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump typescript from 5.9.3 to 6.0.2 in /_examples/chat by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4108\"\u003e99designs/gqlgen#4108\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump typescript from 5.9.3 to 6.0.2 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4105\"\u003e99designs/gqlgen#4105\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 6.3.0 to 6.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4109\"\u003e99designs/gqlgen#4109\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump vitest from 4.1.1 to 4.1.2 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4107\"\u003e99designs/gqlgen#4107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump dawidd6/action-download-artifact from 19 to 20 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4116\"\u003e99designs/gqlgen#4116\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/text from 0.34.0 to 0.35.0 in /_examples by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4075\"\u003e99designs/gqlgen#4075\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump the npm_and_yarn group across 1 directory with 2 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4118\"\u003e99designs/gqlgen#4118\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump vitest from 4.1.2 to 4.1.4 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4125\"\u003e99designs/gqlgen#4125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump \u003ccode\u003e@​apollo/client\u003c/code\u003e from 4.1.6 to 4.1.7 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4126\"\u003e99designs/gqlgen#4126\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4127\"\u003e99designs/gqlgen#4127\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0 in /_examples by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4124\"\u003e99designs/gqlgen#4124\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/jackc/pgx/v5 from 5.7.4 to 5.9.0 in /_examples/mini-habr-with-subscriptions in the go_modules group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4128\"\u003e99designs/gqlgen#4128\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2 in /_examples/mini-habr-with-subscriptions in the go_modules group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4139\"\u003e99designs/gqlgen#4139\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump robherley/go-test-action from 0.7.1 to 1.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4137\"\u003e99designs/gqlgen#4137\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4136\"\u003e99designs/gqlgen#4136\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump \u003ccode\u003e@​graphql-codegen/introspection\u003c/code\u003e from 5.0.1 to 5.0.2 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4134\"\u003e99designs/gqlgen#4134\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump \u003ccode\u003e@​graphql-codegen/cli\u003c/code\u003e from 6.2.1 to 6.3.1 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4135\"\u003e99designs/gqlgen#4135\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump urql from 5.0.1 to 5.0.2 in /integration by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4133\"\u003e99designs/gqlgen#4133\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/PuerkitoBio/goquery from 1.11.0 to 1.12.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4076\"\u003e99designs/gqlgen#4076\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/tools from 0.42.0 to 0.44.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4122\"\u003e99designs/gqlgen#4122\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4123\"\u003e99designs/gqlgen#4123\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/mattn/go-isatty from 0.0.20 to 0.0.21 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4130\"\u003e99designs/gqlgen#4130\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump postcss from 8.5.9 to 8.5.10 in /integration in the npm_and_yarn group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4143\"\u003e99designs/gqlgen#4143\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/florinel-chis\"\u003e\u003ccode\u003e@​florinel-chis\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4090\"\u003e99designs/gqlgen#4090\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PavelStefanov\"\u003e\u003ccode\u003e@​PavelStefanov\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4098\"\u003e99designs/gqlgen#4098\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/henrywoody\"\u003e\u003ccode\u003e@​henrywoody\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/99designs/gqlgen/pull/4101\"\u003e99designs/gqlgen#4101\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/0945c8330037e838af683851b40983ede8df60d5\"\u003e\u003ccode\u003e0945c83\u003c/code\u003e\u003c/a\u003e release v0.17.90\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/4a2c5d8022a73f2aefbe9d608f3932eef9ff9562\"\u003e\u003ccode\u003e4a2c5d8\u003c/code\u003e\u003c/a\u003e Part 3 - reduce template logic (\u003ca href=\"https://redirect.github.com/99designs/gqlgen/issues/4146\"\u003e#4146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/8b08751435cfe3c80a1de5319b58eaf8f6b5d31e\"\u003e\u003ccode\u003e8b08751\u003c/code\u003e\u003c/a\u003e Reduce Template Logic Part 2 (\u003ca href=\"https://redirect.github.com/99designs/gqlgen/issues/4145\"\u003e#4145\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/8c35336ad3a074f07ee1578d32f9011772780ab8\"\u003e\u003ccode\u003e8c35336\u003c/code\u003e\u003c/a\u003e Reduce template logic: Part 1 ECDot (\u003ca href=\"https://redirect.github.com/99designs/gqlgen/issues/4144\"\u003e#4144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/bdeb6efa2bfffecce889d5fcc1da8605d75461ef\"\u003e\u003ccode\u003ebdeb6ef\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump postcss (\u003ca href=\"https://redirect.github.com/99designs/gqlgen/issues/4143\"\u003e#4143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/6e8a0482c5ef35b757321afdb1f5ab42954ad1a7\"\u003e\u003ccode\u003e6e8a048\u003c/code\u003e\u003c/a\u003e Update gqlparser to v2.5.33 see \u003ca href=\"https://github.com/vektah/gqlparser/releases/\"\u003ehttps://github.com/vektah/gqlparser/releases/\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/e3f5362536a60f15e5973840f5d1b7cd43d5f7cc\"\u003e\u003ccode\u003ee3f5362\u003c/code\u003e\u003c/a\u003e Revise PR \u003ca href=\"https://redirect.github.com/99designs/gqlgen/issues/4121\"\u003e#4121\u003c/a\u003e from \u003ca href=\"https://github.com/toga4\"\u003e\u003ccode\u003e@​toga4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/99designs/gqlgen/issues/4141\"\u003e#4141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/3ab446064e85efeda6de5e5a9c014ff3e1c0ffe0\"\u003e\u003ccode\u003e3ab4460\u003c/code\u003e\u003c/a\u003e feat: deduplicate Child field context switches and scalar fieldContex… (\u003ca href=\"https://redirect.github.com/99designs/gqlgen/issues/4086\"\u003e#4086\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/2d63840966b8a2e3704f8ddb6445015854158b39\"\u003e\u003ccode\u003e2d63840\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/mattn/go-isatty from 0.0.20 to 0.0.21 (\u003ca href=\"https://redirect.github.com/99designs/gqlgen/issues/4130\"\u003e#4130\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/99designs/gqlgen/commit/39d244a30d330c3605f3cb3ade0c7c3e95d6067d\"\u003e\u003ccode\u003e39d244a\u003c/code\u003e\u003c/a\u003e Fix go.sum\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/99designs/gqlgen/compare/v0.17.89...v0.17.90\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/alecthomas/chroma/v2` from 2.23.1 to 2.26.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/alecthomas/chroma/releases\"\u003egithub.com/alecthomas/chroma/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.26.1\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e56c7702 fix: downgrade go.mod version to 1.25\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.26.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ea4d3f60 feat(chromad): use style counterparts for theme switching\u003c/li\u003e\n\u003cli\u003ece159e6 chore: migrate to new bit format\u003c/li\u003e\n\u003cli\u003e180ea9f perf(colour): replace Sprintf/ParseUint round-trip in NewColour with direct bit arithmetic (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1274\"\u003e#1274\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e68a08b0 docs: how to support dynamic theme switching\u003c/li\u003e\n\u003cli\u003e6fb9d92 feat(html): tag output with style mode\u003c/li\u003e\n\u003cli\u003ea71fea3 feat(styles): add light/dark mode support\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.25.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ec3826f0 chore: go mod tidy\u003c/li\u003e\n\u003cli\u003efb5bc39 fix: emit HTTP body tokens without Coalesce\u003c/li\u003e\n\u003cli\u003ea3c2946 Improve Nu file detection (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1260\"\u003e#1260\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ee841b1a chore(deps): update all non-major dependencies (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1272\"\u003e#1272\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e3ed2db8 Add Gemfile.lock lexer (\u0026amp; ruby improvements) (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1269\"\u003e#1269\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e41fb546 Add YAML+Jinja lexer (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1268\"\u003e#1268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ee99b881 chore(deps): update all non-major dependencies (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1263\"\u003e#1263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ee67dd2f (Markless) Fix parse issue for embed directives without options (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1266\"\u003e#1266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edffa370 fix(go): tokenize trailing // as comment instead of consuming next line (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1265\"\u003e#1265\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e1cf1560 chore: upgrade to github.com/dlclark/regexp2/v2\u003c/li\u003e\n\u003cli\u003e2cbcf7b chore: upgrade golangci-lint\u003c/li\u003e\n\u003cli\u003e786675b chore(deps): update all non-major dependencies (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1257\"\u003e#1257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e235590c feat: add JSONL support to JSON lexer (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1262\"\u003e#1262\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ef9b5c97 fix(dart): match single-line comments without trailing newline (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1225\"\u003e#1225\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1261\"\u003e#1261\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e097f8e9 Mention Arturo in README (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1256\"\u003e#1256\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ed46ce60 feat(markdown): highlight frontmatter and comments (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1245\"\u003e#1245\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ef786b2a feat(lexers): add support for LilyPond (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1255\"\u003e#1255\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e0a02b98 chore(deps): update actions/checkout digest to de0fac2 (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1212\"\u003e#1212\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec55009e Fix AGENTS.md referencing a non-existent scripts directory (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1231\"\u003e#1231\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec5e763e Improve protobuf lexer (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1253\"\u003e#1253\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e113cd0e Add Arturo lexer (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1232\"\u003e#1232\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e4498d71 chore(deps): update dependency binaryen to v129 (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1238\"\u003e#1238\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e885f912 Added f4 to \u0026quot;Projects using Chroma\u0026quot; list (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1242\"\u003e#1242\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec42c9ef Update java lexer (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1254\"\u003e#1254\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.24.1\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ed2a3784 fix: fallback bug\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.24.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e0b841ee chore: go mod tidy\u003c/li\u003e\n\u003cli\u003e10fcb68 chore(deps): update ubuntu docker tag to v26 (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1251\"\u003e#1251\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e2218de6 chore(deps): update all non-major dependencies (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1236\"\u003e#1236\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e2099887 Update Solarized Light to use correct background color (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1250\"\u003e#1250\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/56c7702e16f3bf78b335c57cdd5af8f8b493f1c6\"\u003e\u003ccode\u003e56c7702\u003c/code\u003e\u003c/a\u003e fix: downgrade go.mod version to 1.25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/a4d3f60813272352474a6ecda93270487d20a9ee\"\u003e\u003ccode\u003ea4d3f60\u003c/code\u003e\u003c/a\u003e feat(chromad): use style counterparts for theme switching\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/ce159e61b0d7234beba95e25e25464ea90324d1f\"\u003e\u003ccode\u003ece159e6\u003c/code\u003e\u003c/a\u003e chore: migrate to new bit format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/180ea9f54dce4c7b7241944110fc0e01bffae913\"\u003e\u003ccode\u003e180ea9f\u003c/code\u003e\u003c/a\u003e perf(colour): replace Sprintf/ParseUint round-trip in NewColour with direct b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/68a08b0f9a1f4edeaadd0ef9fbbc2945b5a02adf\"\u003e\u003ccode\u003e68a08b0\u003c/code\u003e\u003c/a\u003e docs: how to support dynamic theme switching\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/6fb9d920b575be857c7322f79699fd92e3645e2f\"\u003e\u003ccode\u003e6fb9d92\u003c/code\u003e\u003c/a\u003e feat(html): tag output with style mode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/a71fea34358d2b9f75c0d5be2002a5293633116d\"\u003e\u003ccode\u003ea71fea3\u003c/code\u003e\u003c/a\u003e feat(styles): add light/dark mode support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/c3826f007cb719dfba2e331ee356c9f0d521dbad\"\u003e\u003ccode\u003ec3826f0\u003c/code\u003e\u003c/a\u003e chore: go mod tidy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/fb5bc39d407d3d39fb71f010683a2d4b6211da2f\"\u003e\u003ccode\u003efb5bc39\u003c/code\u003e\u003c/a\u003e fix: emit HTTP body tokens without Coalesce\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alecthomas/chroma/commit/a3c2946ab1b0af692b2087b9f54e70f87a7b0295\"\u003e\u003ccode\u003ea3c2946\u003c/code\u003e\u003c/a\u003e Improve Nu file detection (\u003ca href=\"https://redirect.github.com/alecthomas/chroma/issues/1260\"\u003e#1260\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/alecthomas/chroma/compare/v2.23.1...v2.26.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/anthropics/anthropic-sdk-go` from 1.30.0 to 1.46.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/releases\"\u003egithub.com/anthropics/anthropic-sdk-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.46.0\u003c/h2\u003e\n\u003ch2\u003e1.46.0 (2026-05-28)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.45.0...v1.46.0\"\u003ev1.45.0...v1.46.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e Add support for claude-opus-4-8, mid-conversation system blocks, and usage.output_tokens_details (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/4cd860b8bd5365709f7f86466f449797a5f01875\"\u003e4cd860b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport custom file size caps (\u003ca href=\"https://redirect.github.com/anthropics/anthropic-sdk-go/issues/876\"\u003e#876\u003c/a\u003e) (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/99634e85815be2215a8beb05f2deeec895133b3b\"\u003e99634e8\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eexamples:\u003c/strong\u003e rename managed-agents private-sandbox-worker to self-hosted-sandbox-worker (\u003ca href=\"https://redirect.github.com/anthropics/anthropic-sdk-go/issues/873\"\u003e#873\u003c/a\u003e) (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/07d3e461f094d40a1bcf25fa8cefee7a90835193\"\u003e07d3e46\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ereplace literal newlines (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/cbb7ea55b131f492753ce9fdcfc73df2847daafd\"\u003ecbb7ea5\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.45.0\u003c/h2\u003e\n\u003ch2\u003e1.45.0 (2026-05-21)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.44.1...v1.45.0\"\u003ev1.44.1...v1.45.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e Add support for thinking-token-count beta for estimated tokens in thinking block deltas when streaming (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/dedeb6d263a651d63c95bd360befbd53dd26ec12\"\u003ededeb6d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.44.1\u003c/h2\u003e\n\u003ch2\u003e1.44.1 (2026-05-19)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.44.0...v1.44.1\"\u003ev1.44.0...v1.44.1\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003erunner:\u003c/strong\u003e skip tool calls SessionToolRunner does not own (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/93afc65f2f1b811d760f2e5149e13dd5eb328f79\"\u003e93afc65\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.44.0\u003c/h2\u003e\n\u003ch2\u003e1.44.0 (2026-05-19)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.43.0...v1.44.0\"\u003ev1.43.0...v1.44.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e Add support for self-hosted sandboxes in CMA with sandbox helpers (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/34354c43f329852a88682bb6665a1453754d61be\"\u003e34354c4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.43.0\u003c/h2\u003e\n\u003ch2\u003e1.43.0 (2026-05-13)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/blob/main/CHANGELOG.md\"\u003egithub.com/anthropics/anthropic-sdk-go's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.46.0 (2026-05-28)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.45.0...v1.46.0\"\u003ev1.45.0...v1.46.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e Add support for claude-opus-4-8, mid-conversation system blocks, and usage.output_tokens_details (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/4cd860b8bd5365709f7f86466f449797a5f01875\"\u003e4cd860b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport custom file size caps (\u003ca href=\"https://redirect.github.com/anthropics/anthropic-sdk-go/issues/876\"\u003e#876\u003c/a\u003e) (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/99634e85815be2215a8beb05f2deeec895133b3b\"\u003e99634e8\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eexamples:\u003c/strong\u003e rename managed-agents private-sandbox-worker to self-hosted-sandbox-worker (\u003ca href=\"https://redirect.github.com/anthropics/anthropic-sdk-go/issues/873\"\u003e#873\u003c/a\u003e) (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/07d3e461f094d40a1bcf25fa8cefee7a90835193\"\u003e07d3e46\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ereplace literal newlines (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/cbb7ea55b131f492753ce9fdcfc73df2847daafd\"\u003ecbb7ea5\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.45.0 (2026-05-21)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.44.1...v1.45.0\"\u003ev1.44.1...v1.45.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e Add support for thinking-token-count beta for estimated tokens in thinking block deltas when streaming (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/dedeb6d263a651d63c95bd360befbd53dd26ec12\"\u003ededeb6d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.44.1 (2026-05-19)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.44.0...v1.44.1\"\u003ev1.44.0...v1.44.1\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003erunner:\u003c/strong\u003e skip tool calls SessionToolRunner does not own (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/93afc65f2f1b811d760f2e5149e13dd5eb328f79\"\u003e93afc65\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.44.0 (2026-05-19)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.43.0...v1.44.0\"\u003ev1.43.0...v1.44.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e Add support for self-hosted sandboxes in CMA with sandbox helpers (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/34354c43f329852a88682bb6665a1453754d61be\"\u003e34354c4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.43.0 (2026-05-13)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.42.0...v1.43.0\"\u003ev1.42.0...v1.43.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e Add BetaManagedAgentsSearchResultBlock types (\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/498fafcadd46be3a53e24ca2e7c40d00da6361bd\"\u003e498fafc\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/058d85cd7e656f5fe972591bcf841c99564581e9\"\u003e\u003ccode\u003e058d85c\u003c/code\u003e\u003c/a\u003e release: 1.46.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/5c328bc227a82cc46b273924a398d6fabc689410\"\u003e\u003ccode\u003e5c328bc\u003c/code\u003e\u003c/a\u003e feat(api): Add support for claude-opus-4-8, mid-conversation system blocks, a...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/9df7ac07d30e17ce37712e0c083294a597058054\"\u003e\u003ccode\u003e9df7ac0\u003c/code\u003e\u003c/a\u003e docs: replace literal newlines\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/d8020e0a73623855636de14c65a183fcc12f516f\"\u003e\u003ccode\u003ed8020e0\u003c/code\u003e\u003c/a\u003e ci: run breaking change detection on every branch (\u003ca href=\"https://redirect.github.com/anthropics/anthropic-sdk-go/issues/803\"\u003e#803\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/c9bae2d86565b73cab7c4b6b7b0066a1697d4968\"\u003e\u003ccode\u003ec9bae2d\u003c/code\u003e\u003c/a\u003e feat: support custom file size caps (\u003ca href=\"https://redirect.github.com/anthropics/anthropic-sdk-go/issues/876\"\u003e#876\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/816a9c6e9488edfab819a31d955e128ab57bede0\"\u003e\u003ccode\u003e816a9c6\u003c/code\u003e\u003c/a\u003e codegen metadata\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/ec37441e01163d327f42b3eea6e9955e686b5e72\"\u003e\u003ccode\u003eec37441\u003c/code\u003e\u003c/a\u003e chore(examples): rename managed-agents private-sandbox-worker to self-hosted-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/88310ccdb19419fb6c8b0fd2e99f1e3d8c74041e\"\u003e\u003ccode\u003e88310cc\u003c/code\u003e\u003c/a\u003e release: 1.45.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/4eb28e321282db071753c97d3223b092db9108d1\"\u003e\u003ccode\u003e4eb28e3\u003c/code\u003e\u003c/a\u003e feat(api): Add support for thinking-token-count beta for estimated tokens in ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/commit/d138190aeae5568972430f9a6204875aa04097fc\"\u003e\u003ccode\u003ed138190\u003c/code\u003e\u003c/a\u003e release: 1.44.1\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/anthropics/anthropic-sdk-go/compare/v1.30.0...v1.46.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2` from 1.41.5 to 1.41.9\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5841d3ae2cfd6e6113ca61b71d69131b84932f4c\"\u003e\u003ccode\u003e5841d3a\u003c/code\u003e\u003c/a\u003e Release 2026-05-29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/16ac80d79c282366cae312281b3df925af4e9bf1\"\u003e\u003ccode\u003e16ac80d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/167926f8aca7228f2dd1bed73707505875aafef4\"\u003e\u003ccode\u003e167926f\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/a0fce13e18c6bff397ad77fac4cde4ab3f3b93e0\"\u003e\u003ccode\u003ea0fce13\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/223c0057211950899e0117dc027cc299a1dac664\"\u003e\u003ccode\u003e223c005\u003c/code\u003e\u003c/a\u003e update to smithy-go v1.26.0 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3426\"\u003e#3426\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/74c501189a40c9b937432a1b2a4cacffc851ea76\"\u003e\u003ccode\u003e74c5011\u003c/code\u003e\u003c/a\u003e Release 2026-05-28\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7d82651329a86064a9026f6219cff72921fa74da\"\u003e\u003ccode\u003e7d82651\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/79c63d9289784de4914143b7bff67157aa6a2a90\"\u003e\u003ccode\u003e79c63d9\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b15b3b873ad5c294d0c010fb1cc56ecb583d1618\"\u003e\u003ccode\u003eb15b3b8\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/090e46936630944917cfd6a0990ea3fd6391475b\"\u003e\u003ccode\u003e090e469\u003c/code\u003e\u003c/a\u003e Feat tmv2 parity (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3424\"\u003e#3424\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/v1.41.5...v1.41.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/config` from 1.32.14 to 1.32.20\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5841d3ae2cfd6e6113ca61b71d69131b84932f4c\"\u003e\u003ccode\u003e5841d3a\u003c/code\u003e\u003c/a\u003e Release 2026-05-29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/16ac80d79c282366cae312281b3df925af4e9bf1\"\u003e\u003ccode\u003e16ac80d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/167926f8aca7228f2dd1bed73707505875aafef4\"\u003e\u003ccode\u003e167926f\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/a0fce13e18c6bff397ad77fac4cde4ab3f3b93e0\"\u003e\u003ccode\u003ea0fce13\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/223c0057211950899e0117dc027cc299a1dac664\"\u003e\u003ccode\u003e223c005\u003c/code\u003e\u003c/a\u003e update to smithy-go v1.26.0 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3426\"\u003e#3426\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/74c501189a40c9b937432a1b2a4cacffc851ea76\"\u003e\u003ccode\u003e74c5011\u003c/code\u003e\u003c/a\u003e Release 2026-05-28\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7d82651329a86064a9026f6219cff72921fa74da\"\u003e\u003ccode\u003e7d82651\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/79c63d9289784de4914143b7bff67157aa6a2a90\"\u003e\u003ccode\u003e79c63d9\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b15b3b873ad5c294d0c010fb1cc56ecb583d1618\"\u003e\u003ccode\u003eb15b3b8\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/090e46936630944917cfd6a0990ea3fd6391475b\"\u003e\u003ccode\u003e090e469\u003c/code\u003e\u003c/a\u003e Feat tmv2 parity (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3424\"\u003e#3424\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.14...config/v1.32.20\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/service/secretsmanager` from 1.41.5 to 1.41.9\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5841d3ae2cfd6e6113ca61b71d69131b84932f4c\"\u003e\u003ccode\u003e5841d3a\u003c/code\u003e\u003c/a\u003e Release 2026-05-29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/16ac80d79c282366cae312281b3df925af4e9bf1\"\u003e\u003ccode\u003e16ac80d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/167926f8aca7228f2dd1bed73707505875aafef4\"\u003e\u003ccode\u003e167926f\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/a0fce13e18c6bff397ad77fac4cde4ab3f3b93e0\"\u003e\u003ccode\u003ea0fce13\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/223c0057211950899e0117dc027cc299a1dac664\"\u003e\u003ccode\u003e223c005\u003c/code\u003e\u003c/a\u003e update to smithy-go v1.26.0 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3426\"\u003e#3426\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/74c501189a40c9b937432a1b2a4cacffc851ea76\"\u003e\u003ccode\u003e74c5011\u003c/code\u003e\u003c/a\u003e Release 2026-05-28\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7d82651329a86064a9026f6219cff72921fa74da\"\u003e\u003ccode\u003e7d82651\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/79c63d9289784de4914143b7bff67157aa6a2a90\"\u003e\u003ccode\u003e79c63d9\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b15b3b873ad5c294d0c010fb1cc56ecb583d1618\"\u003e\u003ccode\u003eb15b3b8\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/090e46936630944917cfd6a0990ea3fd6391475b\"\u003e\u003ccode\u003e090e469\u003c/code\u003e\u003c/a\u003e Feat tmv2 parity (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3424\"\u003e#3424\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/v1.41.5...v1.41.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/service/ssm` from 1.68.4 to 1.68.8\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5841d3ae2cfd6e6113ca61b71d69131b84932f4c\"\u003e\u003ccode\u003e5841d3a\u003c/code\u003e\u003c/a\u003e Release 2026-05-29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/16ac80d79c282366cae312281b3df925af4e9bf1\"\u003e\u003ccode\u003e16ac80d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/167926f8aca7228f2dd1bed73707505875aafef4\"\u003e\u003ccode\u003e167926f\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/a0fce13e18c6bff397ad77fac4cde4ab3f3b93e0\"\u003e\u003ccode\u003ea0fce13\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/223c0057211950899e0117dc027cc299a1dac664\"\u003e\u003ccode\u003e223c005\u003c/code\u003e\u003c/a\u003e update to smithy-go v1.26.0 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3426\"\u003e#3426\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/74c501189a40c9b937432a1b2a4cacffc851ea76\"\u003e\u003ccode\u003e74c5011\u003c/code\u003e\u003c/a\u003e Release 2026-05-28\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/7d82651329a86064a9026f6219cff72921fa74da\"\u003e\u003ccode\u003e7d82651\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/79c63d9289784de4914143b7bff67157aa6a2a90\"\u003e\u003ccode\u003e79c63d9\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b15b3b873ad5c294d0c010fb1cc56ecb583d1618\"\u003e\u003ccode\u003eb15b3b8\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/090e46936630944917cfd6a0990ea3fd6391475b\"\u003e\u003ccode\u003e090e469\u003c/code\u003e\u003c/a\u003e Feat tmv2 parity (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3424\"\u003e#3424\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/ssm/v1.68.4...service/ssm/v1.68.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/smithy-go` from 1.24.2 to 1.26.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/smithy-go/releases\"\u003egithub.com/aws/smithy-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.25.0\u003c/h2\u003e\n\u003ch1\u003eRelease (2026-04-15)\u003c/h1\u003e\n\u003ch2\u003eGeneral Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDependency Update\u003c/strong\u003e: Updated to the latest SDK module versions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eModule Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egithub.com/aws/smithy-go\u003c/code\u003e: v1.25.0\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eFeature\u003c/strong\u003e: Add support for endpointBdd trait\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/smithy-go/blob/main/CHANGELOG.md\"\u003egithub.com/aws/smithy-go's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eRelease (2026-05-27)\u003c/h1\u003e\n\u003ch2\u003eGeneral Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDependency Update\u003c/strong\u003e: Updated to the latest SDK module versions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eModule Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egithub.com/aws/smithy-go\u003c/code\u003e: v1.26.0\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eFeature\u003c/strong\u003e: Add StringSlice to endpoint rulesfn.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eRelease (2026-04-23)\u003c/h1\u003e\n\u003ch2\u003eGeneral Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDependency Update\u003c/strong\u003e: Updated to the latest SDK module versions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eModule Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egithub.com/aws/smithy-go\u003c/code\u003e: v1.25.1\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBug Fix\u003c/strong\u003e: Fixed a memory leak in the LRU cache implementation used by some AWS services.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eRelease (2026-04-15)\u003c/h1\u003e\n\u003ch2\u003eGeneral Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDependency Update\u003c/strong\u003e: Updated to the latest SDK module versions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eModule Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egithub.com/aws/smithy-go\u003c/code\u003e: v1.25.0\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eFeature\u003c/strong\u003e: Add support for endpointBdd trait\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eRelease (2026-04-02)\u003c/h1\u003e\n\u003ch2\u003eGeneral Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDependency Update\u003c/strong\u003e: Updated to the latest SDK module versions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eModule Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egithub.com/aws/smithy-go\u003c/code\u003e: v1.24.3\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBug Fix\u003c/strong\u003e: Add additional sigv4 configuration.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003egithub.com/aws/smithy-go/aws-http-auth\u003c/code\u003e: \u003ca href=\"https://github.com/aws/smithy-go/blob/main/aws-http-auth/CHANGELOG.md#v113-2026-04-02\"\u003ev1.1.3\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBug Fix\u003c/strong\u003e: Add additional sigv4 configuration.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eRelease (2026-02-27)\u003c/h1\u003e\n\u003ch2\u003eGeneral Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDependency Update\u003c/strong\u003e: Bump minimum go version to 1.24.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eRelease (2026-02-20)\u003c/h1\u003e\n\u003ch2\u003eGeneral Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDependency Update\u003c/strong\u003e: Updated to the latest SDK module versions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eModule Highlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egithub.com/aws/smithy-go\u003c/code\u003e: v1.24.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/45ed8311108fa4d204aa8ad3f5264442568c6b01\"\u003e\u003ccode\u003e45ed831\u003c/code\u003e\u003c/a\u003e Release 2026-05-27\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/36699a9ad5bb1f4054d69de11e573003ec6c2865\"\u003e\u003ccode\u003e36699a9\u003c/code\u003e\u003c/a\u003e handle vars in auth scheme id tmpl (\u003ca href=\"https://redirect.github.com/aws/smithy-go/issues/667\"\u003e#667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/b81ddf73b3738ec93447b59aa920666f7154ae36\"\u003e\u003ccode\u003eb81ddf7\u003c/code\u003e\u003c/a\u003e Use GoDependency to add SDK dependencies on codegen instead of relying on go ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/999a54bb7359cf5740b9c23ca52220c5777b486d\"\u003e\u003ccode\u003e999a54b\u003c/code\u003e\u003c/a\u003e add event stream test generator (\u003ca href=\"https://redirect.github.com/aws/smithy-go/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/22e6cf7f8d19a35512b84cfb3f72e4e77ab29592\"\u003e\u003ccode\u003e22e6cf7\u003c/code\u003e\u003c/a\u003e Expand JMESPath truthy check by allowing bare collections to be evaluated (\u003ca href=\"https://redirect.github.com/aws/smithy-go/issues/654\"\u003e#654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/e094f45e716e33a1b950cf8bbe804790bf87f965\"\u003e\u003ccode\u003ee094f45\u003c/code\u003e\u003c/a\u003e Release 2026-04-23\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/214d45be3be5188c4d2fd9cf744c21f8b3dfbabc\"\u003e\u003ccode\u003e214d45b\u003c/code\u003e\u003c/a\u003e changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/3477da0b4dbf31de58ac375fe5abe5d268280824\"\u003e\u003ccode\u003e3477da0\u003c/code\u003e\u003c/a\u003e fix lrucache memory leak on existing item put (\u003ca href=\"https://redirect.github.com/aws/smithy-go/issues/652\"\u003e#652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/0d0b4d00f2430e62a790203b89fd76dceb4ae213\"\u003e\u003ccode\u003e0d0b4d0\u003c/code\u003e\u003c/a\u003e Bump Smithy version to 1.69.0 (\u003ca href=\"https://redirect.github.com/aws/smithy-go/issues/650\"\u003e#650\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/smithy-go/commit/be5e5ef0d73560eac9d71df7995b0eaffb9a8d71\"\u003e\u003ccode\u003ebe5e5ef\u003c/code\u003e\u003c/a\u003e check \u003ca href=\"https://github.com/enum\"\u003e\u003ccode\u003e@​enum\u003c/code\u003e\u003c/a\u003e on strings for cbor (\u003ca href=\"https://redirect.github.com/aws/smithy-go/issues/649\"\u003e#649\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/smithy-go/compare/v1.24.2...v1.26.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/containerd/containerd/api` from 1.10.0 to 1.11.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/containerd/containerd/releases\"\u003egithub.com/containerd/containerd/api's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003econtainerd API 1.11.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the api/v1.11.1 release of containerd!\u003c/p\u003e\n\u003cp\u003eThe first patch release for the containerd 1.11 API includes a fix\nin the task endpoints for non-runc shims.\u003c/p\u003e\n\u003ch3\u003eHighlights\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix sandbox task API endpoints for non-runc runtimes (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13422\"\u003e#13422\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/containerd/containerd/issues\"\u003ehttps://github.com/containerd/containerd/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDerek McGowan\u003c/li\u003e\n\u003cli\u003eMaksym Pavlenko\u003c/li\u003e\n\u003cli\u003eSamuel Karp\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare release notes for api/v1.11.1 (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13444\"\u003e#13444\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/da7aef299c57cc1f290700ade8fa0a5fec69a462\"\u003e\u003ccode\u003eda7aef299\u003c/code\u003e\u003c/a\u003e Prepare release notes for api/v1.11.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eFix sandbox task API endpoints for non-runc runtimes (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13422\"\u003e#13422\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/e44f5f9ec610d95a712d230e8a19ae516e0a26ac\"\u003e\u003ccode\u003ee44f5f9ec\u003c/code\u003e\u003c/a\u003e protos: include task API address to CreateTaskRequest\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cp\u003eThis release has no dependency changes\u003c/p\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/containerd/containerd/releases/tag/api/v1.11.0\"\u003eapi/v1.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003econtainerd API 1.11.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the api/v1.11.0 release of containerd!\u003c/p\u003e\n\u003cp\u003eThe 12th release for the containerd 1.x API aligns with the containerd 2.3 release.\u003c/p\u003e\n\u003ch3\u003eHighlights\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd transfer types for container filesystem copy (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13165\"\u003e#13165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate sandbox API to include spec field (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12840\"\u003e#12840\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eImage Distribution\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eAdd os.features support for EROFS native container images (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13091\"\u003e#13091\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/f822a911ab2b7c73e30bc0f36ea319642c9711b1\"\u003e\u003ccode\u003ef822a91\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13444\"\u003e#13444\u003c/a\u003e from dmcgowan/prepare-api-v1.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/da7aef299c57cc1f290700ade8fa0a5fec69a462\"\u003e\u003ccode\u003eda7aef2\u003c/code\u003e\u003c/a\u003e Prepare release notes for api/v1.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/a50a704094cf72710ccfa4944a642ef4e7ec9d2c\"\u003e\u003ccode\u003ea50a704\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13422\"\u003e#13422\u003c/a\u003e from k8s-infra-cherrypick-robot/cherry-pick-13360-t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/5282d4e09d3bc8b0957780caa7a4644fac7c86a7\"\u003e\u003ccode\u003e5282d4e\u003c/code\u003e\u003c/a\u003e Wire task address and version fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/e44f5f9ec610d95a712d230e8a19ae516e0a26ac\"\u003e\u003ccode\u003ee44f5f9\u003c/code\u003e\u003c/a\u003e protos: include task API address to CreateTaskRequest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/85f22f7afa3af5aa5083cc7ae50c3b58a35b8849\"\u003e\u003ccode\u003e85f22f7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13409\"\u003e#13409\u003c/a\u003e from k8s-infra-cherrypick-robot/cherry-pick-13327-t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/4d80a31bf637bc15e83e50a15941bf5bb0cb3988\"\u003e\u003ccode\u003e4d80a31\u003c/code\u003e\u003c/a\u003e seccomp: Block AF_ALG in default socket policy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/2ed0d97b6e58def34684a1bffc2ab6931182f221\"\u003e\u003ccode\u003e2ed0d97\u003c/code\u003e\u003c/a\u003e seccomp: Document socket rule scope and socketcall limitation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/2315484b7e7a5b53e73ad3b143c780ec7612420b\"\u003e\u003ccode\u003e2315484\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13390\"\u003e#13390\u003c/a\u003e from k8s-infra-cherrypick-robot/cherry-pick-13363-t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/1ad3402b855b77eb3800f74c87ff78736edf72d2\"\u003e\u003ccode\u003e1ad3402\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13394\"\u003e#13394\u003c/a\u003e from k8s-infra-cherrypick-robot/cherry-pick-13389-t...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/containerd/containerd/compare/api/v1.10.0...api/v1.11.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/containerd/containerd/v2` from 2.2.3 to 2.3.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/containerd/containerd/releases\"\u003egithub.com/containerd/containerd/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003econtainerd 2.3.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v2.3.1 release of containerd!\u003c/p\u003e\n\u003cp\u003eThe first patch ...\n\n_Description has been truncated_","html_url":"https://github.com/sipsma/dagger/pull/1292","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sipsma%2Fdagger/issues/1292","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1292/packages"}},{"old_version":"0.21.5","new_version":"0.21.6","update_type":"patch","path":null,"pr_created_at":"2026-05-28T09:09:13.000Z","version_change":"0.21.5 → 0.21.6","issue":{"uuid":"4539162287","node_id":"PR_kwDOFu-Xms7gKsQp","number":263,"state":"closed","title":"chore(deps): bump the others group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-01T00:06:48.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-28T09:09:13.000Z","updated_at":"2026-06-01T00:06:49.000Z","time_to_close":313055,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"others","update_count":8,"packages":[{"name":"github.com/Azure/azure-sdk-for-go/sdk/storage/azblob","old_version":"1.6.4","new_version":"1.7.0","repository_url":"https://github.com/Azure/azure-sdk-for-go"},{"name":"github.com/CycloneDX/cyclonedx-go","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/CycloneDX/cyclonedx-go"},{"name":"github.com/aws/aws-sdk-go-v2/config","old_version":"1.32.17","new_version":"1.32.18","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/package-url/packageurl-go","old_version":"0.1.5","new_version":"0.1.6","repository_url":"https://github.com/package-url/packageurl-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the others group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/Azure/azure-sdk-for-go/sdk/storage/azblob](https://github.com/Azure/azure-sdk-for-go) | `1.6.4` | `1.7.0` |\n| [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) | `0.10.0` | `0.11.0` |\n| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.17` | `1.32.18` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.5` | `0.21.6` |\n| [github.com/package-url/packageurl-go](https://github.com/package-url/packageurl-go) | `0.1.5` | `0.1.6` |\n\n\nUpdates `github.com/Azure/azure-sdk-for-go/sdk/storage/azblob` from 1.6.4 to 1.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/releases\"\u003egithub.com/Azure/azure-sdk-for-go/sdk/storage/azblob's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esdk/storage/azblob/v1.7.0\u003c/h2\u003e\n\u003ch2\u003e1.7.0 (2026-05-14)\u003c/h2\u003e\n\u003ch3\u003eFeatures Added\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIncludes all features from \u003ccode\u003e1.7.0-beta.1\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/624babab3d2e3a95628afa61d1474a035cc7d094\"\u003e\u003ccode\u003e624baba\u003c/code\u003e\u003c/a\u003e bump azcore version number\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/ce7217c3f5f5a2f88f3a5d1ded48da338f3d8d06\"\u003e\u003ccode\u003ece7217c\u003c/code\u003e\u003c/a\u003e Prep for azcore v1.7.0 release (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/21149\"\u003e#21149\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/62a8079d41783914d9a5f585bcdb6f6b91223e5c\"\u003e\u003ccode\u003e62a8079\u003c/code\u003e\u003c/a\u003e Add support for shallow cloning azcore.Client instances (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/21065\"\u003e#21065\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/21098\"\u003e#21098\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/47286b065b0e3aa7d367fb20212aad3a143e6343\"\u003e\u003ccode\u003e47286b0\u003c/code\u003e\u003c/a\u003e Add flag to enable skipping of dependency checks (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/21146\"\u003e#21146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/ee762d4420eb57051cdebe55e55b107dae4f6bfc\"\u003e\u003ccode\u003eee762d4\u003c/code\u003e\u003c/a\u003e Fix populating module name in telemetry policy (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/20967\"\u003e#20967\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/20971\"\u003e#20971\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/02431759c00a99a31e159e9905c392b8f430c897\"\u003e\u003ccode\u003e0243175\u003c/code\u003e\u003c/a\u003e Prep azcore v1.6.1 for release (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/20961\"\u003e#20961\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/9c9d62a1d612cf1f9e6902ddd3c538abd90b955c\"\u003e\u003ccode\u003e9c9d62a\u003c/code\u003e\u003c/a\u003e Increment package version after release of azcore (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/20740\"\u003e#20740\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/36f766d2feba70f64bed923c23b57602998e16c8\"\u003e\u003ccode\u003e36f766d\u003c/code\u003e\u003c/a\u003e add sdk/resourcemanager/cosmos/armcosmos live test (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/20705\"\u003e#20705\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/c005ed6159fdf2104077694b5f89e7063a0cc586\"\u003e\u003ccode\u003ec005ed6\u003c/code\u003e\u003c/a\u003e sdk/resourcemanager/network/armnetwork live test (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/20331\"\u003e#20331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/5fa7df4852a100f4a7502d5064ae54b0aceb8260\"\u003e\u003ccode\u003e5fa7df4\u003c/code\u003e\u003c/a\u003e add sdk/resourcemanager/compute/armcompute live test (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/20048\"\u003e#20048\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/compare/sdk/storage/azblob/v1.6.4...sdk/azcore/v1.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/CycloneDX/cyclonedx-go` from 0.10.0 to 0.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/releases\"\u003egithub.com/CycloneDX/cyclonedx-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eBuilding and Packaging\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e32221d4829e8ec6007896af2d7f11fd6ba13d6c5: build(deps): bump actions/setup-go from 6.2.0 to 6.4.0 (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/261\"\u003e#261\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ea42a4dd9163df91c4173d41db2cc7ed67f0db0b6: build(deps): bump gitpod/workspace-go from \u003ccode\u003e08a7c68\u003c/code\u003e to \u003ccode\u003e00059ff\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/255\"\u003e#255\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e9810ab9f48d46f134ad9a13bbabd1397cc64804e: build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.1 (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/263\"\u003e#263\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOthers\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e2cef05662cba14b4ae948b1858fee532f8adadd1: Add comprehensive support for CycloneDX 1.7 specification (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/257\"\u003e#257\u003c/a\u003e) (\u003ca href=\"https://github.com/alistair-mclean\"\u003e\u003ccode\u003e@​alistair-mclean\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e3ed34da50502f9b9d6ac9dff64df8b08e53aa2a5: Added 5 missing fields to match CycloneDX 1.6 spec: (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/256\"\u003e#256\u003c/a\u003e) (\u003ca href=\"https://github.com/alistair-mclean\"\u003e\u003ccode\u003e@​alistair-mclean\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/a42a4dd9163df91c4173d41db2cc7ed67f0db0b6\"\u003e\u003ccode\u003ea42a4dd\u003c/code\u003e\u003c/a\u003e build(deps): bump gitpod/workspace-go from \u003ccode\u003e08a7c68\u003c/code\u003e to \u003ccode\u003e00059ff\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/255\"\u003e#255\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/9810ab9f48d46f134ad9a13bbabd1397cc64804e\"\u003e\u003ccode\u003e9810ab9\u003c/code\u003e\u003c/a\u003e build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.1 (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/263\"\u003e#263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/32221d4829e8ec6007896af2d7f11fd6ba13d6c5\"\u003e\u003ccode\u003e32221d4\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-go from 6.2.0 to 6.4.0 (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/261\"\u003e#261\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/2cef05662cba14b4ae948b1858fee532f8adadd1\"\u003e\u003ccode\u003e2cef056\u003c/code\u003e\u003c/a\u003e Add comprehensive support for CycloneDX 1.7 specification (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/257\"\u003e#257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/3ed34da50502f9b9d6ac9dff64df8b08e53aa2a5\"\u003e\u003ccode\u003e3ed34da\u003c/code\u003e\u003c/a\u003e Added 5 missing fields to match CycloneDX 1.6 spec: (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/256\"\u003e#256\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/compare/v0.10.0...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/config` from 1.32.17 to 1.32.18\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/db9f4e546dfe2f62a6bc3bf54b9da42ebace6372\"\u003e\u003ccode\u003edb9f4e5\u003c/code\u003e\u003c/a\u003e Release 2026-05-22\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/34e7ddc9400e830a9ae226a7e3c2161e5ece4f19\"\u003e\u003ccode\u003e34e7ddc\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f9db036cf7b3b8a1ea5eb67c3d296da4b48b6e2b\"\u003e\u003ccode\u003ef9db036\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ae5eae1e3ec46433bd99496bfa6936f8f09a2e72\"\u003e\u003ccode\u003eae5eae1\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/429dbdd2a35d325aabc5757edfc9ebf09c2ad12e\"\u003e\u003ccode\u003e429dbdd\u003c/code\u003e\u003c/a\u003e Feat discover endpoint partition validation (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3410\"\u003e#3410\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ab4f5b60785064ec6346c922604d94b63d9c7299\"\u003e\u003ccode\u003eab4f5b6\u003c/code\u003e\u003c/a\u003e Release 2026-05-21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/757a09909a97a15e5a481d9839b83f15b8fdc4bc\"\u003e\u003ccode\u003e757a099\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/02c8323ee6c99be82dae3a3923616756cb164525\"\u003e\u003ccode\u003e02c8323\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f4ac954c5b3567f7918fbaa845bd05a8b211f54e\"\u003e\u003ccode\u003ef4ac954\u003c/code\u003e\u003c/a\u003e Bump smithy-go version and update imports for evenstream protocoltests (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3420\"\u003e#3420\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/6d937001e020def8b587dccbe5d803933ce57bfd\"\u003e\u003ccode\u003e6d93700\u003c/code\u003e\u003c/a\u003e Add replace for credentials dependency added on go.mod (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3419\"\u003e#3419\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.17...config/v1.32.18\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.16 to 1.19.17\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/db9f4e546dfe2f62a6bc3bf54b9da42ebace6372\"\u003e\u003ccode\u003edb9f4e5\u003c/code\u003e\u003c/a\u003e Release 2026-05-22\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/34e7ddc9400e830a9ae226a7e3c2161e5ece4f19\"\u003e\u003ccode\u003e34e7ddc\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f9db036cf7b3b8a1ea5eb67c3d296da4b48b6e2b\"\u003e\u003ccode\u003ef9db036\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ae5eae1e3ec46433bd99496bfa6936f8f09a2e72\"\u003e\u003ccode\u003eae5eae1\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/429dbdd2a35d325aabc5757edfc9ebf09c2ad12e\"\u003e\u003ccode\u003e429dbdd\u003c/code\u003e\u003c/a\u003e Feat discover endpoint partition validation (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3410\"\u003e#3410\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ab4f5b60785064ec6346c922604d94b63d9c7299\"\u003e\u003ccode\u003eab4f5b6\u003c/code\u003e\u003c/a\u003e Release 2026-05-21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/757a09909a97a15e5a481d9839b83f15b8fdc4bc\"\u003e\u003ccode\u003e757a099\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/02c8323ee6c99be82dae3a3923616756cb164525\"\u003e\u003ccode\u003e02c8323\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f4ac954c5b3567f7918fbaa845bd05a8b211f54e\"\u003e\u003ccode\u003ef4ac954\u003c/code\u003e\u003c/a\u003e Bump smithy-go version and update imports for evenstream protocoltests (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3420\"\u003e#3420\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/6d937001e020def8b587dccbe5d803933ce57bfd\"\u003e\u003ccode\u003e6d93700\u003c/code\u003e\u003c/a\u003e Add replace for credentials dependency added on go.mod (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3419\"\u003e#3419\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/credentials/v1.19.16...credentials/v1.19.17\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/package-url/packageurl-go` from 0.1.5 to 0.1.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/package-url/packageurl-go/releases\"\u003egithub.com/package-url/packageurl-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.1.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize parsing and serialization performance by \u003ca href=\"https://github.com/andrew\"\u003e\u003ccode\u003e@​andrew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/package-url/packageurl-go/pull/86\"\u003epackage-url/packageurl-go#86\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andrew\"\u003e\u003ccode\u003e@​andrew\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/package-url/packageurl-go/pull/86\"\u003epackage-url/packageurl-go#86\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/package-url/packageurl-go/compare/v0.1.5...v0.1.6\"\u003ehttps://github.com/package-url/packageurl-go/compare/v0.1.5...v0.1.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/package-url/packageurl-go/commit/a74324e4e5d01ba49accd9f2f327e22206c7920d\"\u003e\u003ccode\u003ea74324e\u003c/code\u003e\u003c/a\u003e Optimize parsing and serialization performance (\u003ca href=\"https://redirect.github.com/package-url/packageurl-go/issues/86\"\u003e#86\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/package-url/packageurl-go/commit/b41f387d16428dd565a73fe18800629c8ad0338f\"\u003e\u003ccode\u003eb41f387\u003c/code\u003e\u003c/a\u003e Address review feedback and add chrome-extension validation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/package-url/packageurl-go/commit/a546cc5887560ce7b304fe8d7d95e0e2e4407a7f\"\u003e\u003ccode\u003ea546cc5\u003c/code\u003e\u003c/a\u003e Optimize parsing and serialization performance\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/package-url/packageurl-go/compare/v0.1.5...v0.1.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/term` from 0.42.0 to 0.43.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/term/commit/3c3e4855f7d2eb06c3e48933554add9ec6b599b5\"\u003e\u003ccode\u003e3c3e485\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/term/compare/v0.42.0...v0.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/text` from 0.36.0 to 0.37.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/text/commit/3ef517e623a4bfc08d6457f87d73afda7af7d8e1\"\u003e\u003ccode\u003e3ef517e\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/text/compare/v0.36.0...v0.37.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/bruto001/vuls/pull/263","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/bruto001%2Fvuls/issues/263","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/263/packages"}},{"old_version":"0.21.5","new_version":"0.21.6","update_type":"patch","path":null,"pr_created_at":"2026-05-28T01:27:57.000Z","version_change":"0.21.5 → 0.21.6","issue":{"uuid":"4536955261","node_id":"PR_kwDOKrhEtM7gDjw2","number":3201,"state":"open","title":"Bump github.com/google/go-containerregistry from 0.21.5 to 0.21.6","user":"dependabot[bot]","labels":["dependencies","pr/no-changelog","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-28T01:27:57.000Z","updated_at":"2026-05-28T08:43:08.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.21.5 to 0.21.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/openbao/openbao/pull/3201","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/openbao%2Fopenbao/issues/3201","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3201/packages"}},{"old_version":"0.21.5","new_version":"0.21.6","update_type":"patch","path":null,"pr_created_at":"2026-05-26T03:48:56.000Z","version_change":"0.21.5 → 0.21.6","issue":{"uuid":"4521186678","node_id":"PR_kwDOFhQNG87fQTvN","number":1471,"state":"open","title":"build(deps): bump the prod-dependencies group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["needs-rebase","ok-to-test","dependencies","go"],"assignees":[],"locked":false,"comments_count":13,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-26T03:48:56.000Z","updated_at":"2026-06-03T22:27:55.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"prod-dependencies","update_count":8,"packages":[{"name":"github.com/docker/cli","old_version":"29.4.1+incompatible","new_version":"29.5.1+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/onsi/ginkgo/v2","old_version":"2.28.1","new_version":"2.29.0","repository_url":"https://github.com/onsi/ginkgo"},{"name":"k8s.io/api","old_version":"0.35.4","new_version":"0.36.1","repository_url":"https://github.com/kubernetes/api"},{"name":"k8s.io/client-go","old_version":"0.35.4","new_version":"0.36.1","repository_url":"https://github.com/kubernetes/client-go"},{"name":"sigs.k8s.io/controller-runtime","old_version":"0.23.3","new_version":"0.24.1","repository_url":"https://github.com/kubernetes-sigs/controller-runtime"}],"path":null,"ecosystem":"go"},"body":"Bumps the prod-dependencies group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/docker/cli](https://github.com/docker/cli) | `29.4.1+incompatible` | `29.5.1+incompatible` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.5` | `0.21.6` |\n| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.28.1` | `2.29.0` |\n| [k8s.io/api](https://github.com/kubernetes/api) | `0.35.4` | `0.36.1` |\n| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.35.4` | `0.36.1` |\n| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.23.3` | `0.24.1` |\n\n\nUpdates `github.com/docker/cli` from 29.4.1+incompatible to 29.5.1+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2518b52d948a0cbee071d394c03c86a3005636ba\"\u003e\u003ccode\u003e2518b52\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6991\"\u003e#6991\u003c/a\u003e from mickael-docker/docs-clarify-authz\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9f18a0a70c9228f5892594c6b56425b8bed1899f\"\u003e\u003ccode\u003e9f18a0a\u003c/code\u003e\u003c/a\u003e docs: clarify authz content type\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2944fd1daa5d54315ab8fcd874ea9cb6199c6117\"\u003e\u003ccode\u003e2944fd1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6989\"\u003e#6989\u003c/a\u003e from thaJeztah/bump_version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/c41489ac3901885bb3891aef9cfe65ca69dc4580\"\u003e\u003ccode\u003ec41489a\u003c/code\u003e\u003c/a\u003e bump VERSION to v29.5.1-dev\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/98f14649600f05480629d5c481878b1e1bcb7c17\"\u003e\u003ccode\u003e98f1464\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6988\"\u003e#6988\u003c/a\u003e from thaJeztah/make_shell\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/50712c932660e7859d692b5aed45ad321beced1a\"\u003e\u003ccode\u003e50712c9\u003c/code\u003e\u003c/a\u003e README: simplify instructions for using dev container\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/653dc8f03d161677a8648758cdf0af8b150780bc\"\u003e\u003ccode\u003e653dc8f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6485\"\u003e#6485\u003c/a\u003e from paulchen5/6484-update-pull-request-template\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/13945822d4ba2119b867ee2cf215506c8b9f9817\"\u003e\u003ccode\u003e1394582\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6987\"\u003e#6987\u003c/a\u003e from thaJeztah/contributing_links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/f99747b9e0bee5623a13655439e7a34b696e8617\"\u003e\u003ccode\u003ef99747b\u003c/code\u003e\u003c/a\u003e docs: fix stale links in CONTRIBUTING.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/ddac061db783a24d75b24cabc74793f6924d4724\"\u003e\u003ccode\u003eddac061\u003c/code\u003e\u003c/a\u003e PR template: remove outdated contributing guide link\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v29.4.1...v29.5.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/onsi/ginkgo/v2` from 2.28.1 to 2.29.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/ginkgo/releases\"\u003egithub.com/onsi/ginkgo/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.29.0\u003c/h2\u003e\n\u003ch2\u003e2.29.0\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003eGinkgoHelperGo\u003c/code\u003e makes it easier to write test helpers that need to run in goroutines.  Specifically, it makes managing the failure state and capturing failure panics correctly straightforward.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eginkgo outline\u003c/code\u003e now includes entries defined in \u003ccode\u003eDescribeTableSubtree\u003c/code\u003e\u003c/p\u003e\n\u003ch2\u003ev2.28.3\u003c/h2\u003e\n\u003ch2\u003e2.28.3\u003c/h2\u003e\n\u003ch3\u003eMaintenance\u003c/h3\u003e\n\u003cp\u003eBump all dependencies\u003c/p\u003e\n\u003ch2\u003ev2.28.2\u003c/h2\u003e\n\u003ch2\u003e2.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd ArtifactDir() to support Go 1.26 testing.TB interface [f3a36b6]\u003c/li\u003e\n\u003cli\u003eImplement shell completion [94151c8]\u003c/li\u003e\n\u003cli\u003eAdd asan CLI option mirroring msan implementation [4d21dbb]\u003c/li\u003e\n\u003cli\u003eBump uri from 1.0.3 to 1.0.4 in /docs (\u003ca href=\"https://redirect.github.com/onsi/ginkgo/issues/1630\"\u003e#1630\u003c/a\u003e) [c102161]\u003c/li\u003e\n\u003cli\u003efix aspect ratio [9619647]\u003c/li\u003e\n\u003cli\u003eupdate logos [5779304]\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md\"\u003egithub.com/onsi/ginkgo/v2's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.29.0\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003eGinkgoHelperGo\u003c/code\u003e makes it easier to write test helpers that need to run in goroutines.  Specifically, it makes managing the failure state and capturing failure panics correctly straightforward.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eginkgo outline\u003c/code\u003e now includes entries defined in \u003ccode\u003eDescribeTableSubtree\u003c/code\u003e\u003c/p\u003e\n\u003ch2\u003e2.28.3\u003c/h2\u003e\n\u003ch3\u003eMaintenance\u003c/h3\u003e\n\u003cp\u003eBump all dependencies\u003c/p\u003e\n\u003ch2\u003e2.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd ArtifactDir() to support Go 1.26 testing.TB interface [f3a36b6]\u003c/li\u003e\n\u003cli\u003eImplement shell completion [94151c8]\u003c/li\u003e\n\u003cli\u003eAdd asan CLI option mirroring msan implementation [4d21dbb]\u003c/li\u003e\n\u003cli\u003eBump uri from 1.0.3 to 1.0.4 in /docs (\u003ca href=\"https://redirect.github.com/onsi/ginkgo/issues/1630\"\u003e#1630\u003c/a\u003e) [c102161]\u003c/li\u003e\n\u003cli\u003efix aspect ratio [9619647]\u003c/li\u003e\n\u003cli\u003eupdate logos [5779304]\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/04b5bcbe4eee911a1baf506eda1e7e811c978937\"\u003e\u003ccode\u003e04b5bcb\u003c/code\u003e\u003c/a\u003e v2.29.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/124232a4531c77a7f31a036e0150e06fa78b2af8\"\u003e\u003ccode\u003e124232a\u003c/code\u003e\u003c/a\u003e docs: GinkgoHelperGo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/ad9cee80bdfda573e94f1b05f2bd4afa1a2fe815\"\u003e\u003ccode\u003ead9cee8\u003c/code\u003e\u003c/a\u003e feat: GinkgoHelperGo, with integration tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/9e56a0a2a090eb83af696381161bdb996c69bcac\"\u003e\u003ccode\u003e9e56a0a\u003c/code\u003e\u003c/a\u003e chore: refactor devcontainer for better maintenance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/3d235a96ac05d9e855048c66528d2fdbfb9101f7\"\u003e\u003ccode\u003e3d235a9\u003c/code\u003e\u003c/a\u003e chore: ignore internal/tmp_*/ integration suite temporary dirs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/782666ae83c2bc804f28b1333bf91a21b093d946\"\u003e\u003ccode\u003e782666a\u003c/code\u003e\u003c/a\u003e feat: devcontainer configuration with local pkgsite and GH pages\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/009dd04de2d18f00c3c812d2caab713a165a1f7c\"\u003e\u003ccode\u003e009dd04\u003c/code\u003e\u003c/a\u003e Support DescribeTableSubtree in ginkgo outline\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/5de9c152e440036fef089e065449ecaae64264f9\"\u003e\u003ccode\u003e5de9c15\u003c/code\u003e\u003c/a\u003e v2.28.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/7e2fa191179736dde68165bc101e99c4980fe124\"\u003e\u003ccode\u003e7e2fa19\u003c/code\u003e\u003c/a\u003e bump dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/1a819128ddbbcc39f57ac8716943d82c4bd6ef6f\"\u003e\u003ccode\u003e1a81912\u003c/code\u003e\u003c/a\u003e v2.28.2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/onsi/ginkgo/compare/v2.28.1...v2.29.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/onsi/gomega` from 1.39.1 to 1.40.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/gomega/releases\"\u003egithub.com/onsi/gomega's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.40.0\u003c/h2\u003e\n\u003ch2\u003e1.40.0\u003c/h2\u003e\n\u003cp\u003eWe're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega.  It is a limitation of the go mod toolchain that \u003cem\u003etest\u003c/em\u003e subdependencies of your project's direct dependencies get pulled in as \u003cem\u003eindirect\u003c/em\u003e dependencies.  In the case of Gomega, this ends up pulling in all of Ginkgo into your \u003ccode\u003ego.mod\u003c/code\u003e even if you are only using Gomega (Gomega uses Ginkgo for its own tests).\u003c/p\u003e\n\u003cp\u003eGoing forward, releases will strip out all tests, tidy up the \u003ccode\u003ego.mod\u003c/code\u003e and then push this stripped down version to a new \u003ccode\u003emaster-lite\u003c/code\u003e branch.  These stripped-down versions will receive the \u003ccode\u003evx.y.z\u003c/code\u003e git tag and will be picked up by the go toolchain.\u003c/p\u003e\n\u003cp\u003ePlease open an issue if this new release process causes unexpected changes for your projects.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/gomega/blob/master/CHANGELOG.md\"\u003egithub.com/onsi/gomega's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.40.0\u003c/h2\u003e\n\u003cp\u003eWe're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega.  It is a limitation of the go mod toolchain that \u003cem\u003etest\u003c/em\u003e subdependencies of your project's direct dependencies get pulled in as \u003cem\u003eindirect\u003c/em\u003e dependencies.  In the case of Gomega, this ends up pulling in all of Ginkgo into your \u003ccode\u003ego.mod\u003c/code\u003e even if you are only using Gomega (Gomega uses Ginkgo for its own tests).\u003c/p\u003e\n\u003cp\u003eGoing forward, releases will strip out all tests, tidy up the \u003ccode\u003ego.mod\u003c/code\u003e and then push this stripped down version to a new \u003ccode\u003emaster-lite\u003c/code\u003e branch.  These stripped-down versions will receive the \u003ccode\u003evx.y.z\u003c/code\u003e git tag and will be picked up by the go toolchain.\u003c/p\u003e\n\u003cp\u003ePlease open an issue if this new release process causes unexpected changes for your projects.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/87ee9d3caabba627e5951958be800828b85f0370\"\u003e\u003ccode\u003e87ee9d3\u003c/code\u003e\u003c/a\u003e v1.40.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/ea660274df4319411eea463c942d1d3a56e6c2e6\"\u003e\u003ccode\u003eea66027\u003c/code\u003e\u003c/a\u003e v1.40.0 (full)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/e3fd789576a5f5b9a35847683804349bb4bbc761\"\u003e\u003ccode\u003ee3fd789\u003c/code\u003e\u003c/a\u003e update docs to reflect new versioning strategy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/7d4ee309b2c28ab1854424f70c99a173650ab2f6\"\u003e\u003ccode\u003e7d4ee30\u003c/code\u003e\u003c/a\u003e first push to master-lite\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/e4a82d1a2de91721bb249fe9532c4d9211920363\"\u003e\u003ccode\u003ee4a82d1\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 3 to 4 (\u003ca href=\"https://redirect.github.com/onsi/gomega/issues/875\"\u003e#875\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/af627234340a2e1d40074d6e6860a1b41dc03204\"\u003e\u003ccode\u003eaf62723\u003c/code\u003e\u003c/a\u003e Bump rexml from 3.4.0 to 3.4.2 in /docs (\u003ca href=\"https://redirect.github.com/onsi/gomega/issues/870\"\u003e#870\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/e1642211b3906ab5456d9d3ed7cfd9edd11f2d63\"\u003e\u003ccode\u003ee164221\u003c/code\u003e\u003c/a\u003e Bump github.com/onsi/ginkgo/v2 from 2.28.0 to 2.28.1 (\u003ca href=\"https://redirect.github.com/onsi/gomega/issues/895\"\u003e#895\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/334a282f9d59760a3e737e5b61400a3162997803\"\u003e\u003ccode\u003e334a282\u003c/code\u003e\u003c/a\u003e Bump faraday from 2.12.2 to 2.14.1 in /docs (\u003ca href=\"https://redirect.github.com/onsi/gomega/issues/896\"\u003e#896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/onsi/gomega/compare/v1.39.1...v1.40.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/api` from 0.35.4 to 0.36.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/25001c854943b552769cd32eacd0bef7467c0eea\"\u003e\u003ccode\u003e25001c8\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.1 tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/879d3962091a3578f73c31a82c619e7a7bdfdd12\"\u003e\u003ccode\u003e879d396\u003c/code\u003e\u003c/a\u003e Merge remote-tracking branch 'origin/master' into release-1.36\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/030d81f63ea13f09388aee12e9c39b8d7ce9e841\"\u003e\u003ccode\u003e030d81f\u003c/code\u003e\u003c/a\u003e Update github.com/moby/spdystream from v0.5.0 to v0.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/aef6eb6922295161de2f7c1b9a496677938f8b20\"\u003e\u003ccode\u003eaef6eb6\u003c/code\u003e\u003c/a\u003e Add granular authorization for DRA ResourceClaim status updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/91061ea648b73ce8944e1c1ff2c1e99d6bacdb54\"\u003e\u003ccode\u003e91061ea\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/api/issues/136589\"\u003e#136589\u003c/a\u003e from tosi3k/preemption-mode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/e6b81e28967d56d57aa665d6b28cc7a807423f1f\"\u003e\u003ccode\u003ee6b81e2\u003c/code\u003e\u003c/a\u003e Add Workload-Aware Preemption fields to Workload and PodGroup APIs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/f8fce2ea6d494ed13df7d57d84e4b30b5ad5c8a3\"\u003e\u003ccode\u003ef8fce2e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/api/issues/136989\"\u003e#136989\u003c/a\u003e from nojnhuh/podgroup-resourceclaim\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/b928f5ee0f7878ef903e95ab771f1a55ed867c54\"\u003e\u003ccode\u003eb928f5e\u003c/code\u003e\u003c/a\u003e Workload API: PodGroup ResourceClaims (KEP-5729)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/61bd78e724dd0616b1cd7f6cd802f41a32400d73\"\u003e\u003ccode\u003e61bd78e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/api/issues/137190\"\u003e#137190\u003c/a\u003e from everpeace/KEP-5491-alpha\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/api/commit/6bf46eb598a71fec3182b4d598734c6a364e7cca\"\u003e\u003ccode\u003e6bf46eb\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/api/issues/137028\"\u003e#137028\u003c/a\u003e from nmn3m/feature/dra-resource-pool-status\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kubernetes/api/compare/v0.35.4...v0.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/apimachinery` from 0.35.4 to 0.36.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/7af103a2a439106791220493349f8d13bc0a1efd\"\u003e\u003ccode\u003e7af103a\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.1 tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/efb7f2628b269921e5f12c4d42aece418c76789c\"\u003e\u003ccode\u003eefb7f26\u003c/code\u003e\u003c/a\u003e Merge remote-tracking branch 'origin/master' into release-1.36\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/d966e565cd271c44ba799b594ddb67987791cb80\"\u003e\u003ccode\u003ed966e56\u003c/code\u003e\u003c/a\u003e Update github.com/moby/spdystream from v0.5.0 to v0.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/79b363268543c402b68449b0cd531f8f8d0197d1\"\u003e\u003ccode\u003e79b3632\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/137864\"\u003e#137864\u003c/a\u003e from yongruilin/dv-dra-mismatch\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/a8822f7bf620eede6c3f36354cec940c3844e7a8\"\u003e\u003ccode\u003ea8822f7\u003c/code\u003e\u003c/a\u003e Add slice and map union member support with tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/7dba2d08090b9d2285266ec2492d0b6395151f50\"\u003e\u003ccode\u003e7dba2d0\u003c/code\u003e\u003c/a\u003e Use IsZero instead of IsNil for union ratcheting check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/d95710f91d61d2656298071a40a04d5343c642e5\"\u003e\u003ccode\u003ed95710f\u003c/code\u003e\u003c/a\u003e Fix union validation ratcheting when oldObj is nil\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/729062d58854ae8e9e85f5dc8d1660fb963ae483\"\u003e\u003ccode\u003e729062d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/137849\"\u003e#137849\u003c/a\u003e from bryantbiggs/deps/update-kube-openapi\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/13b12e6214bc1c2253aa3bcf8d52c2f83e767eb0\"\u003e\u003ccode\u003e13b12e6\u003c/code\u003e\u003c/a\u003e dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/27f467019a4eb99953b81708326a574524b11e8f\"\u003e\u003ccode\u003e27f4670\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/136657\"\u003e#136657\u003c/a\u003e from Jefftree/sharding-test\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kubernetes/apimachinery/compare/v0.35.4...v0.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/client-go` from 0.35.4 to 0.36.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/55ef15a9fb552182b78f7b1d0d09d618632dfe7f\"\u003e\u003ccode\u003e55ef15a\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.1 tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/f22a53e6273b1e6652107e62998997c714872f35\"\u003e\u003ccode\u003ef22a53e\u003c/code\u003e\u003c/a\u003e Merge remote-tracking branch 'origin/master' into release-1.36\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/a948641f81a43fb81beb739cb6773028e1981d86\"\u003e\u003ccode\u003ea948641\u003c/code\u003e\u003c/a\u003e Update github.com/moby/spdystream from v0.5.0 to v0.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/7e44ffcaa96165d6d77178c3aaca66d4523786b9\"\u003e\u003ccode\u003e7e44ffc\u003c/code\u003e\u003c/a\u003e Add Workload-Aware Preemption fields to Workload and PodGroup APIs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/df2d882697f9f437d53ae16b8091786250ce0812\"\u003e\u003ccode\u003edf2d882\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/client-go/issues/136989\"\u003e#136989\u003c/a\u003e from nojnhuh/podgroup-resourceclaim\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/4eece5291a474209f7fcba3cd8187ad855eeeca3\"\u003e\u003ccode\u003e4eece52\u003c/code\u003e\u003c/a\u003e Workload API: PodGroup ResourceClaims (KEP-5729)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/3d35c512076e7c95967ac4f3565c588495785796\"\u003e\u003ccode\u003e3d35c51\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/client-go/issues/137190\"\u003e#137190\u003c/a\u003e from everpeace/KEP-5491-alpha\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/04341177268fa5b2cb8a7502a36a81b87a6da2b2\"\u003e\u003ccode\u003e0434117\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/client-go/issues/137028\"\u003e#137028\u003c/a\u003e from nmn3m/feature/dra-resource-pool-status\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/ba785be0acd34a5899fe245278fb63cf9156850b\"\u003e\u003ccode\u003eba785be\u003c/code\u003e\u003c/a\u003e Drop CSR analogy, mark ObjectMeta +required,reduce limits (maxItems=500, maxL...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/client-go/commit/4a9c8783a9ad1dd96970d83ec74138d28ae11cdb\"\u003e\u003ccode\u003e4a9c878\u003c/code\u003e\u003c/a\u003e Add ResourcePoolStatusRequest API types and generated code\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kubernetes/client-go/compare/v0.35.4...v0.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `sigs.k8s.io/controller-runtime` from 0.23.3 to 0.24.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/releases\"\u003esigs.k8s.io/controller-runtime's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.24.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[release-0.24] :bug: Fix regression in Apply typed error handling by \u003ca href=\"https://github.com/k8s-infra-cherrypick-robot\"\u003e\u003ccode\u003e@​k8s-infra-cherrypick-robot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3516\"\u003ekubernetes-sigs/controller-runtime#3516\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/compare/v0.24.0...v0.24.1\"\u003ehttps://github.com/kubernetes-sigs/controller-runtime/compare/v0.24.0...v0.24.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.24.0\u003c/h2\u003e\n\u003ch2\u003e:warning: Breaking Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Update to k8s.io/* v1.36 (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3506\"\u003e#3506\u003c/a\u003e \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3462\"\u003e#3462\u003c/a\u003e \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3486\"\u003e#3486\u003c/a\u003e \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3450\"\u003e#3450\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:bug: Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCache: Fix IndexField blocking until informer is synced (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3445\"\u003e#3445\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCache: Wait for cache sync when ReaderFailOnMissingInformer is true (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3425\"\u003e#3425\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClient: Update typed ApplyConfigurations with server response (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3475\"\u003e#3475\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFakeclient: Fix SSA status patch resource version check (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3443\"\u003e#3443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFakeclient: Fix panic when using CRs with embedded pointer structs (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3431\"\u003e#3431\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFakeclient: Fix status apply if existing object has managedFields set (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3430\"\u003e#3430\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFakeclient: Retry GenerateName on AlreadyExists collisions (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3498\"\u003e#3498\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP servers: Wire up base context into http servers (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3452\"\u003e#3452\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:seedling: Others\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBuilder/Webhooks: Remove deprecated custom path function (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3465\"\u003e#3465\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCache: Test cache reader waits for cache sync (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3434\"\u003e#3434\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCertwatcher: Deflake certwatcher tests (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3457\"\u003e#3457\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDependencies: Use forked version of btree (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3449\"\u003e#3449\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnvtest: Ensure envtest stops the whole process group (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3447\"\u003e#3447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLogging: Add missing space in zap-log-level flag description (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3492\"\u003e#3492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMisc: Adopt new(x) over ptr.To(x) and re-enable newexpr lint (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3489\"\u003e#3489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eOwners: Cleanup (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3453\"\u003e#3453\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecorder: Add logger into context for structured logging (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3454\"\u003e#3454\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecorder: Switch to \u003ccode\u003eStartLogging\u003c/code\u003e for event debug logs (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3451\"\u003e#3451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eScheme: Deprecate the scheme builder (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3461\"\u003e#3461\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSource/Kind: Improve logging for dynamic type kind source (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3494\"\u003e#3494\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eWebhooks: Reduce memory usage of default webhooks (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3463\"\u003e#3463\u003c/a\u003e \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3468\"\u003e#3468\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:seedling: CI \u0026amp; linters\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eChore: Update golangci-lint version to v2.8.0 (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3448\"\u003e#3448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eChore: Update golangci-lint version to v2.10.1 (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3470\"\u003e#3470\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eChore: Update golangci-lint version to v2.11.3 (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3482\"\u003e#3482\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMigrate away from custom GitHub action approval workflow (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3491\"\u003e#3491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRelease: Auto-create git tags for the \u003ccode\u003etools/setup-envtest\u003c/code\u003e submodule (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3476\"\u003e#3476\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:book: Additionally, there has been 1 contribution to our documentation. (\u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3477\"\u003e#3477\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003eDependencies\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/3be3f1bf2b2fcc6b5c9510d55c6a9972294653d0\"\u003e\u003ccode\u003e3be3f1b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3516\"\u003e#3516\u003c/a\u003e from k8s-infra-cherrypick-robot/cherry-pick-3515-to-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/0f7b33d8f5eebb1f4d1fe381ffc458ea49d83dc5\"\u003e\u003ccode\u003e0f7b33d\u003c/code\u003e\u003c/a\u003e Fix regression in Apply typed error handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/d3eaef3ab45410342c30528d1eaab982137c4d5a\"\u003e\u003ccode\u003ed3eaef3\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3475\"\u003e#3475\u003c/a\u003e from alvaroaleman/fixfix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/3296f32e58d6e578aa1932dc5584411c5f25c3db\"\u003e\u003ccode\u003e3296f32\u003c/code\u003e\u003c/a\u003e :bug: Update typed Applyconfigurations with server response\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/c8b4b9d61fbddd8924c1075ec2face3aa7a5f768\"\u003e\u003ccode\u003ec8b4b9d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3506\"\u003e#3506\u003c/a\u003e from troy0820/troy0820/update-deps-k8s\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/557c3147e26a62272c87db88e3aadda9890931f1\"\u003e\u003ccode\u003e557c314\u003c/code\u003e\u003c/a\u003e update to k8s.io v1.36.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/e4a998cc6b09afaf5f2d7f30b6a9b728f21918a3\"\u003e\u003ccode\u003ee4a998c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3499\"\u003e#3499\u003c/a\u003e from kubernetes-sigs/dependabot/github_actions/all-g...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/1a31c56032fa26cd09de18a6c64b1ba86614f4a4\"\u003e\u003ccode\u003e1a31c56\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3498\"\u003e#3498\u003c/a\u003e from vieux/fix-fake-client-generatename-retry\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/80bc294688dda063f418bb38e72089ab9f857cc0\"\u003e\u003ccode\u003e80bc294\u003c/code\u003e\u003c/a\u003e fakeclient: retry GenerateName on AlreadyExists collisions (match K8s 1.32 be...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/commit/77b730ab1c9b09af172b67a336886558211b493a\"\u003e\u003ccode\u003e77b730a\u003c/code\u003e\u003c/a\u003e :seedling: Bump the all-github-actions group with 2 updates\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kubernetes-sigs/controller-runtime/compare/v0.23.3...v0.24.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eMost Recent Ignore Conditions Applied to This Pull Request\u003c/summary\u003e\n\n| Dependency Name | Ignore Conditions |\n| --- | --- |\n| github.com/google/go-containerregistry | [\u003e= 0.21.3.a, \u003c 0.21.4] |\n\u003c/details\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/redhat-openshift-ecosystem/openshift-preflight/pull/1471","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/redhat-openshift-ecosystem%2Fopenshift-preflight/issues/1471","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1471/packages"}},{"old_version":"0.21.3","new_version":"0.21.6","update_type":"patch","path":null,"pr_created_at":"2026-05-25T06:09:49.000Z","version_change":"0.21.3 → 0.21.6","issue":{"uuid":"4514694816","node_id":"PR_kwDOFfHUDs7e7Q_Y","number":608,"state":"closed","title":"Bump the all group across 2 directories with 10 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-05-29T05:03:54.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-25T06:09:49.000Z","updated_at":"2026-05-29T05:03:56.000Z","time_to_close":341645,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"all","update_count":10,"packages":[{"name":"github.com/aws/aws-sdk-go-v2","old_version":"1.41.5","new_version":"1.41.7","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/config","old_version":"1.32.13","new_version":"1.32.18","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/aws/aws-sdk-go-v2/service/ec2","old_version":"1.296.2","new_version":"1.304.0","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.3","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/maxbrunsfeld/counterfeiter/v6","old_version":"6.12.1","new_version":"6.12.2","repository_url":"https://github.com/maxbrunsfeld/counterfeiter"},{"name":"helm.sh/helm/v3","old_version":"3.20.1","new_version":"3.21.0","repository_url":"https://github.com/helm/helm"}],"path":null,"ecosystem":"go"},"body":"Bumps the all group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.5` | `1.41.7` |\n| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.13` | `1.32.18` |\n| [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) | `1.296.2` | `1.304.0` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.3` | `0.21.6` |\n| [github.com/maxbrunsfeld/counterfeiter/v6](https://github.com/maxbrunsfeld/counterfeiter) | `6.12.1` | `6.12.2` |\n| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.20.1` | `3.21.0` |\n\nBumps the all group with 3 updates in the /buoy directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git), [golang.org/x/mod](https://github.com/golang/mod) and [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery).\n\nUpdates `github.com/aws/aws-sdk-go-v2` from 1.41.5 to 1.41.7\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/2223642aeafb3b46ae924667ee47d31a1cf5a9d5\"\u003e\u003ccode\u003e2223642\u003c/code\u003e\u003c/a\u003e Release 2026-04-29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/04c7e460121eafa42577be08289bd0da0de091b2\"\u003e\u003ccode\u003e04c7e46\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5f5692571a7afce76e1573da3fbf2180a2c297cc\"\u003e\u003ccode\u003e5f56925\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/aac6d2b8fefd47203d3b4bd5f229ca275272ec62\"\u003e\u003ccode\u003eaac6d2b\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/bdaead7d2074e479fc56da77491fe65737413664\"\u003e\u003ccode\u003ebdaead7\u003c/code\u003e\u003c/a\u003e upgrade to smithy-go v1.25.1 (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3399\"\u003e#3399\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/008e12cf64f41c37faeb705f6ce4b77471756f9f\"\u003e\u003ccode\u003e008e12c\u003c/code\u003e\u003c/a\u003e Release 2026-04-27\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ef109d91f0b772aaebc472633edf13ec0fd907ce\"\u003e\u003ccode\u003eef109d9\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/6411e6379e509956413b866481ee2362a7cdfc68\"\u003e\u003ccode\u003e6411e63\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e5bf970956db306bf7b5b1bdd8ca71e8cca766b5\"\u003e\u003ccode\u003ee5bf970\u003c/code\u003e\u003c/a\u003e Release 2026-04-24\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/bdbb88c9400c80ed2487f7b498a54c6206b5c62a\"\u003e\u003ccode\u003ebdbb88c\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/v1.41.5...v1.41.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/config` from 1.32.13 to 1.32.18\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/db9f4e546dfe2f62a6bc3bf54b9da42ebace6372\"\u003e\u003ccode\u003edb9f4e5\u003c/code\u003e\u003c/a\u003e Release 2026-05-22\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/34e7ddc9400e830a9ae226a7e3c2161e5ece4f19\"\u003e\u003ccode\u003e34e7ddc\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f9db036cf7b3b8a1ea5eb67c3d296da4b48b6e2b\"\u003e\u003ccode\u003ef9db036\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ae5eae1e3ec46433bd99496bfa6936f8f09a2e72\"\u003e\u003ccode\u003eae5eae1\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/429dbdd2a35d325aabc5757edfc9ebf09c2ad12e\"\u003e\u003ccode\u003e429dbdd\u003c/code\u003e\u003c/a\u003e Feat discover endpoint partition validation (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3410\"\u003e#3410\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ab4f5b60785064ec6346c922604d94b63d9c7299\"\u003e\u003ccode\u003eab4f5b6\u003c/code\u003e\u003c/a\u003e Release 2026-05-21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/757a09909a97a15e5a481d9839b83f15b8fdc4bc\"\u003e\u003ccode\u003e757a099\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/02c8323ee6c99be82dae3a3923616756cb164525\"\u003e\u003ccode\u003e02c8323\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f4ac954c5b3567f7918fbaa845bd05a8b211f54e\"\u003e\u003ccode\u003ef4ac954\u003c/code\u003e\u003c/a\u003e Bump smithy-go version and update imports for evenstream protocoltests (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3420\"\u003e#3420\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/6d937001e020def8b587dccbe5d803933ce57bfd\"\u003e\u003ccode\u003e6d93700\u003c/code\u003e\u003c/a\u003e Add replace for credentials dependency added on go.mod (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3419\"\u003e#3419\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.13...config/v1.32.18\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/service/ec2` from 1.296.2 to 1.304.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/db9f4e546dfe2f62a6bc3bf54b9da42ebace6372\"\u003e\u003ccode\u003edb9f4e5\u003c/code\u003e\u003c/a\u003e Release 2026-05-22\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/34e7ddc9400e830a9ae226a7e3c2161e5ece4f19\"\u003e\u003ccode\u003e34e7ddc\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f9db036cf7b3b8a1ea5eb67c3d296da4b48b6e2b\"\u003e\u003ccode\u003ef9db036\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ae5eae1e3ec46433bd99496bfa6936f8f09a2e72\"\u003e\u003ccode\u003eae5eae1\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/429dbdd2a35d325aabc5757edfc9ebf09c2ad12e\"\u003e\u003ccode\u003e429dbdd\u003c/code\u003e\u003c/a\u003e Feat discover endpoint partition validation (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3410\"\u003e#3410\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ab4f5b60785064ec6346c922604d94b63d9c7299\"\u003e\u003ccode\u003eab4f5b6\u003c/code\u003e\u003c/a\u003e Release 2026-05-21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/757a09909a97a15e5a481d9839b83f15b8fdc4bc\"\u003e\u003ccode\u003e757a099\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/02c8323ee6c99be82dae3a3923616756cb164525\"\u003e\u003ccode\u003e02c8323\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f4ac954c5b3567f7918fbaa845bd05a8b211f54e\"\u003e\u003ccode\u003ef4ac954\u003c/code\u003e\u003c/a\u003e Bump smithy-go version and update imports for evenstream protocoltests (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3420\"\u003e#3420\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/6d937001e020def8b587dccbe5d803933ce57bfd\"\u003e\u003ccode\u003e6d93700\u003c/code\u003e\u003c/a\u003e Add replace for credentials dependency added on go.mod (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3419\"\u003e#3419\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.296.2...service/ec2/v1.304.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.3 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.21.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2254\"\u003egoogle/go-containerregistry#2254\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.3...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/maxbrunsfeld/counterfeiter/v6` from 6.12.1 to 6.12.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/releases\"\u003egithub.com/maxbrunsfeld/counterfeiter/v6's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.12.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump golang.org/x/text from 0.31.0 to 0.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/349\"\u003emaxbrunsfeld/counterfeiter#349\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github.com/onsi/gomega from 1.38.2 to 1.38.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/350\"\u003emaxbrunsfeld/counterfeiter#350\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/tools from 0.39.0 to 0.40.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/348\"\u003emaxbrunsfeld/counterfeiter#348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github.com/onsi/gomega from 1.38.3 to 1.39.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/351\"\u003emaxbrunsfeld/counterfeiter#351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/tools from 0.40.0 to 0.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/353\"\u003emaxbrunsfeld/counterfeiter#353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github.com/onsi/gomega from 1.39.0 to 1.39.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/354\"\u003emaxbrunsfeld/counterfeiter#354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/text from 0.33.0 to 0.34.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/356\"\u003emaxbrunsfeld/counterfeiter#356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/tools from 0.41.0 to 0.42.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/355\"\u003emaxbrunsfeld/counterfeiter#355\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/text from 0.34.0 to 0.35.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/357\"\u003emaxbrunsfeld/counterfeiter#357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/tools from 0.42.0 to 0.43.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/pull/358\"\u003emaxbrunsfeld/counterfeiter#358\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/compare/v6.12.1...v6.12.2\"\u003ehttps://github.com/maxbrunsfeld/counterfeiter/compare/v6.12.1...v6.12.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/4fbda3b69602620795b66f504c63e8f4671d1335\"\u003e\u003ccode\u003e4fbda3b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/358\"\u003e#358\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/golang.org/x/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/49c41c05fefceea4b07e4569c9d01b881d14bec7\"\u003e\u003ccode\u003e49c41c0\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/tools from 0.42.0 to 0.43.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/266628fb9aab0c6a434c665409c7cfd901198916\"\u003e\u003ccode\u003e266628f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/357\"\u003e#357\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/golang.org/x/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/e19e05eee34e8794f036c2da96bedec17b2f115e\"\u003e\u003ccode\u003ee19e05e\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/text from 0.34.0 to 0.35.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/46bc14382eff44b0323bea8a26d0f22b24cf1f5a\"\u003e\u003ccode\u003e46bc143\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/355\"\u003e#355\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/golang.org/x/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/2fa471e42c1e49affb8d3db2e1428a369e9a84d5\"\u003e\u003ccode\u003e2fa471e\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/tools from 0.41.0 to 0.42.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/0f165c01f6fab30bb872cf173c2609b56e796eb8\"\u003e\u003ccode\u003e0f165c0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/356\"\u003e#356\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/golang.org/x/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/807573ef71150b212ae5070207cd40e527eda58e\"\u003e\u003ccode\u003e807573e\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/text from 0.33.0 to 0.34.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/7c40434dee088f5852b1e0f52d99274b79972760\"\u003e\u003ccode\u003e7c40434\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/maxbrunsfeld/counterfeiter/issues/354\"\u003e#354\u003c/a\u003e from maxbrunsfeld/dependabot/go_modules/github.com/on...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/commit/92c75caa6e936457bc76f506444fee900c8f27bf\"\u003e\u003ccode\u003e92c75ca\u003c/code\u003e\u003c/a\u003e Bump github.com/onsi/gomega from 1.39.0 to 1.39.1\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/maxbrunsfeld/counterfeiter/compare/v6.12.1...v6.12.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `helm.sh/helm/v3` from 3.20.1 to 3.21.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/helm/helm/releases\"\u003ehelm.sh/helm/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eHelm v3.21.0 is a feature release. Users are encouraged to upgrade for the best experience.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!WARNING]\nHelm v3 is approaching end-of-life. Please update to Helm v4.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThe community keeps growing, and we'd love to see you there!\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJoin the discussion in \u003ca href=\"https://kubernetes.slack.com\"\u003eKubernetes Slack\u003c/a\u003e:\n\u003cul\u003e\n\u003cli\u003efor questions and just to hang out\u003c/li\u003e\n\u003cli\u003efor discussing PRs, code, and bugs\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eHang out at the Public Developer Call: Thursday, 9:30 Pacific via \u003ca href=\"https://zoom.us/j/696660622\"\u003eZoom\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTest, debug, and contribute charts: \u003ca href=\"https://artifacthub.io/packages/search?kind=0\"\u003eArtifactHub/packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNotable Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKubernetes client libraries to v1.36\u003c/li\u003e\n\u003cli\u003enotable changes here\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eInstallation and Upgrading\u003c/h2\u003e\n\u003cp\u003eDownload Helm v3.21.0. The common platform binaries are here:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-darwin-amd64.tar.gz\"\u003eMacOS amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-darwin-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 8bc0c1f85f8738cc3cda4a2cc73047145bcdcb1f4d9cdcc29073037bfb22fa2e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-darwin-arm64.tar.gz\"\u003eMacOS arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-darwin-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 68bfbdc022c543a2a022597b20298216877e98abe6e4a345d3ecf114d79cae5f)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-amd64.tar.gz\"\u003eLinux amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 0093eb572e3d2380f094df162ddb525e219249de88957afe24cfbb19632acd36)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-arm.tar.gz\"\u003eLinux arm\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-arm.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / d310ac387324538a37192e8e13628eb1def2596bbac6b6481ae20d8d5e3532bd)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-arm64.tar.gz\"\u003eLinux arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 8de5a0c9a47431e59fd560e91e0779c8cf9316c383da7efb84128a4c339ecb2d)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-386.tar.gz\"\u003eLinux i386\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-386.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / fc85f14c9ce7e6a48a2b19a97edbc5529ed7aa2bc10f3d2c241e1c2ef12ccd22)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-ppc64le.tar.gz\"\u003eLinux ppc64le\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-ppc64le.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / e2dced0f903acda417f879012c7e09ca461000e26a04e8f7a1cfe0dcf495f62c)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-s390x.tar.gz\"\u003eLinux s390x\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-s390x.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / a176d7460a615b8df5b1a58ecf09fcc731c7733ca4cf10116cf198575b0371b5)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-riscv64.tar.gz\"\u003eLinux riscv64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-linux-riscv64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 4935c95c55bc5c3357143698a87185e17a39de9b6148dfd6cce0fc11859dbfeb)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-windows-amd64.zip\"\u003eWindows amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-windows-amd64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / 3ea6b8383e6c0b7ce45d06a5746313b8e9225edd88d42f4f64582ff3792d7b55)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.21.0-windows-arm64.zip\"\u003eWindows arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.21.0-windows-arm64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / 90d8c87e07267e6c71e678c9e33dd11cc121789c823ccc380de9d1dd521c8cba)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThis release was signed by \u003ca href=\"https://github.com/gjenkins8\"\u003e\u003ccode\u003e@​gjenkins8\u003c/code\u003e\u003c/a\u003e with key \u003ccode\u003eBF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739\u003c/code\u003e, which can be found at \u003ca href=\"https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739\"\u003ehttps://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739\u003c/a\u003e. Please use the attached signatures for verifying this release using gpg.\u003c/p\u003e\n\u003cp\u003eThe \u003ca href=\"https://helm.sh/docs/intro/quickstart/\"\u003eQuickstart Guide\u003c/a\u003e will get you going from there. For \u003cstrong\u003eupgrade instructions\u003c/strong\u003e or detailed installation notes, check the \u003ca href=\"https://helm.sh/docs/intro/install/\"\u003einstall guide\u003c/a\u003e. You can also use a \u003ca href=\"https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3\"\u003escript to install\u003c/a\u003e on any system with \u003ccode\u003ebash\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eWhat's Next\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e3.21.1 will contain only bug fixes.\u003c/li\u003e\n\u003cli\u003e3.22.0 is the next feature release for Kubernetes v1.37\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v3] Bump to version v3.21 e0878d41b711792be60777fd65ad23a101e6b85f (George Jenkins)\u003c/li\u003e\n\u003cli\u003efix: upgrade opentelemetry packages to patch CVEs 13d5fc4ae0e7222e1af8796ff4fa467b52208471 (Terry Howe)\u003c/li\u003e\n\u003cli\u003efix: Chart dot-name path bug 2552884e3bc1b763c3901c5ea7240b59ef6791f1 (George Jenkins)\u003c/li\u003e\n\u003cli\u003efix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow ec05dd5f0481c2de3a41a554adf3c52a6a2a9bb6 (Terry Howe)\u003c/li\u003e\n\u003cli\u003eadd image index test b0dfec5af4d7f642d8dea3b9058856541fe5017c (Pedro Tôrres)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/e0878d41b711792be60777fd65ad23a101e6b85f\"\u003e\u003ccode\u003ee0878d4\u003c/code\u003e\u003c/a\u003e [v3] Bump to version v3.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/4d4902c431129b0e6f5809e618b64dc437fc69d8\"\u003e\u003ccode\u003e4d4902c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/helm/helm/issues/32041\"\u003e#32041\u003c/a\u003e from TerryHowe/fix/upgrade-otel-cves\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/13d5fc4ae0e7222e1af8796ff4fa467b52208471\"\u003e\u003ccode\u003e13d5fc4\u003c/code\u003e\u003c/a\u003e fix: upgrade opentelemetry packages to patch CVEs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/a60cb79dfb117f22ec30833c87ab3172eba532d2\"\u003e\u003ccode\u003ea60cb79\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/d3bc8535bbc87c1b7300aee892a822372a7d4e2d\"\u003e\u003ccode\u003ed3bc853\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/helm/helm/issues/32026\"\u003e#32026\u003c/a\u003e from gjenkins8/gjenkins/code_action_pin_v3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/2552884e3bc1b763c3901c5ea7240b59ef6791f1\"\u003e\u003ccode\u003e2552884\u003c/code\u003e\u003c/a\u003e fix: Chart dot-name path bug\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/ec05dd5f0481c2de3a41a554adf3c52a6a2a9bb6\"\u003e\u003ccode\u003eec05dd5\u003c/code\u003e\u003c/a\u003e fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/6d809b20f146f8a09f74ad92080926cda0d6ae7c\"\u003e\u003ccode\u003e6d809b2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/helm/helm/issues/31883\"\u003e#31883\u003c/a\u003e from t0rr3sp3dr0/pedrotorres/backport-31776-to-v3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/b0dfec5af4d7f642d8dea3b9058856541fe5017c\"\u003e\u003ccode\u003eb0dfec5\u003c/code\u003e\u003c/a\u003e add image index test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/e629995c5d65ec2d5095ecd6d094bf85d02b3266\"\u003e\u003ccode\u003ee629995\u003c/code\u003e\u003c/a\u003e fix pulling charts from OCI indices\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/helm/helm/compare/v3.20.1...v3.21.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.17.2 to 5.19.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ev5: plumbing: transport/ssh, Shell-quote path by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2068\"\u003ego-git/go-git#2068\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, Fix relative URL resolution by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2070\"\u003ego-git/go-git#2070\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, canonical remote for relative URLs by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2074\"\u003ego-git/go-git#2074\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, error on remote without URLs by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2078\"\u003ego-git/go-git#2078\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format/idxfile, Validate offset64 indices by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2084\"\u003ego-git/go-git#2084\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: *: Reject malformed variable-length integers by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2092\"\u003ego-git/go-git#2092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format/packfile, Tighten delta validation by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2091\"\u003ego-git/go-git#2091\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Add \u003ccode\u003eworktreeFilesystem\u003c/code\u003e wrapper for worktree and hardening by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2100\"\u003ego-git/go-git#2100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: config: validate submodule names by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2082\"\u003ego-git/go-git#2082\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.19.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2111\"\u003ego-git/go-git#2111\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: Allow MkdirAll on worktree-root paths by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2117\"\u003ego-git/go-git#2117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: Stop validating symlink target paths by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2116\"\u003ego-git/go-git#2116\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format decoder input bounds and contracts by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2125\"\u003ego-git/go-git#2125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplumbing: format/packfile, cap delta chain depth in parser by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2137\"\u003ego-git/go-git#2137\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.19.0...v5.19.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.19.0...v5.19.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3c3be601aa6c0fd0d536c0d1e4f898b4c60e65fe\"\u003e\u003ccode\u003e3c3be60\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2137\"\u003e#2137\u003c/a\u003e from go-git/validate-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3fba897bd9e84b1aec170fa708b80e297b7d6cf6\"\u003e\u003ccode\u003e3fba897\u003c/code\u003e\u003c/a\u003e plumbing: format/packfile, cap delta chain depth in parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a97d6601c85e017bb64c2b0f2e3169f6ef6a6709\"\u003e\u003ccode\u003ea97d660\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2125\"\u003e#2125\u003c/a\u003e from hiddeco/v5/format-input-bounds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/aeaa125c8af8e4c4c95b574c22c5633e97fc436e\"\u003e\u003ccode\u003eaeaa125\u003c/code\u003e\u003c/a\u003e plumbing: format/objfile, require Header before Read\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1f38e171218526ea254a73187a52f0648253c1b8\"\u003e\u003ccode\u003e1f38e17\u003c/code\u003e\u003c/a\u003e plumbing: format/packfile, bound inflate size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f7545a02529e03998d6a7219140dc0e6644ad337\"\u003e\u003ccode\u003ef7545a0\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, bound nr by file size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/170b88181f385913a457a08b68c88956fb3f8e4f\"\u003e\u003ccode\u003e170b881\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2116\"\u003e#2116\u003c/a\u003e from pjbgf/symlink-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/7b6d994467f06630268904aa3c441b6de7248b31\"\u003e\u003ccode\u003e7b6d994\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2117\"\u003e#2117\u003c/a\u003e from hiddeco/v5/worktree-fs-mkdirall-root-noop\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f0709b32f8fbb87c16cd63c6762d2cd515f36541\"\u003e\u003ccode\u003ef0709b3\u003c/code\u003e\u003c/a\u003e git: Stop validating symlink target paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/776d00f11d336f26862d0f2bab987b217f3a7844\"\u003e\u003ccode\u003e776d00f\u003c/code\u003e\u003c/a\u003e git: Allow MkdirAll on worktree-root paths\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.19.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/mod` from 0.34.0 to 0.36.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/643da9ba74f1165d8cae1505d453b3de3cf21b7b\"\u003e\u003ccode\u003e643da9b\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/ccc3cdf529d1eee2a832437eb1b85240044d21cb\"\u003e\u003ccode\u003eccc3cdf\u003c/code\u003e\u003c/a\u003e zip: include 'but content has correct sum' note in TestVCS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/ab3031803214705d2c9f1102318b083e7086a155\"\u003e\u003ccode\u003eab30318\u003c/code\u003e\u003c/a\u003e zip: update zip hashes for new flate compression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/03901d351deb5bd95deb90714fb75bf8e232cb22\"\u003e\u003ccode\u003e03901d3\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/mod/compare/v0.34.0...v0.36.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.52.0 to 0.53.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/a8d1fc14d9e33e1f6842ab78a0127d42cd8fff44\"\u003e\u003ccode\u003ea8d1fc1\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/056ac742146af742aa760d690269c02fa238cc7a\"\u003e\u003ccode\u003e056ac74\u003c/code\u003e\u003c/a\u003e quic: avoid depending on golang.org/x/sys/unix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/c85f61116e47b1523036c3005f8b2923b661eb64\"\u003e\u003ccode\u003ec85f611\u003c/code\u003e\u003c/a\u003e http3: add http3 package for testing in std\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/805fc81a196b95c3c00f02e135ffb8a8d5582bdf\"\u003e\u003ccode\u003e805fc81\u003c/code\u003e\u003c/a\u003e http2: add transport API tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e63b894ab3cd38a1d05396530dccde7ffa3f68d0\"\u003e\u003ccode\u003ee63b894\u003c/code\u003e\u003c/a\u003e http2: support testing via net/http.Transport.RoundTrip\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/9ee1e484e5aab0d95b3babbc6f1384d03f4f9e22\"\u003e\u003ccode\u003e9ee1e48\u003c/code\u003e\u003c/a\u003e http2/hpack: prevent HeaderField from escaping during encoding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1e71bd86e4a302b4e731bc06da6eb51679c7bd49\"\u003e\u003ccode\u003e1e71bd8\u003c/code\u003e\u003c/a\u003e http2: prevent hanging Transport due to bad SETTINGS frame\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/7bca15042b9d2bda1402cb42232a9c6ddbae6212\"\u003e\u003ccode\u003e7bca150\u003c/code\u003e\u003c/a\u003e internal/http3: respect net/http Server Shutdown context when shutting down\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/44c41bee5028537e64410b1583e8ae329ceac284\"\u003e\u003ccode\u003e44c41be\u003c/code\u003e\u003c/a\u003e internal/http3: prevent server from holding mutex when sleeping during shutdown\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/228a67a374710bff77fc490e7f538b317c34e247\"\u003e\u003ccode\u003e228a67a\u003c/code\u003e\u003c/a\u003e internal/http3: add CloseIdleConnections support in transport\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.52.0...v0.53.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `k8s.io/apimachinery` from 0.35.3 to 0.36.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/7af103a2a439106791220493349f8d13bc0a1efd\"\u003e\u003ccode\u003e7af103a\u003c/code\u003e\u003c/a\u003e Update dependencies to v0.36.1 tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/efb7f2628b269921e5f12c4d42aece418c76789c\"\u003e\u003ccode\u003eefb7f26\u003c/code\u003e\u003c/a\u003e Merge remote-tracking branch 'origin/master' into release-1.36\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/d966e565cd271c44ba799b594ddb67987791cb80\"\u003e\u003ccode\u003ed966e56\u003c/code\u003e\u003c/a\u003e Update github.com/moby/spdystream from v0.5.0 to v0.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/79b363268543c402b68449b0cd531f8f8d0197d1\"\u003e\u003ccode\u003e79b3632\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/137864\"\u003e#137864\u003c/a\u003e from yongruilin/dv-dra-mismatch\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/a8822f7bf620eede6c3f36354cec940c3844e7a8\"\u003e\u003ccode\u003ea8822f7\u003c/code\u003e\u003c/a\u003e Add slice and map union member support with tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/7dba2d08090b9d2285266ec2492d0b6395151f50\"\u003e\u003ccode\u003e7dba2d0\u003c/code\u003e\u003c/a\u003e Use IsZero instead of IsNil for union ratcheting check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/d95710f91d61d2656298071a40a04d5343c642e5\"\u003e\u003ccode\u003ed95710f\u003c/code\u003e\u003c/a\u003e Fix union validation ratcheting when oldObj is nil\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/729062d58854ae8e9e85f5dc8d1660fb963ae483\"\u003e\u003ccode\u003e729062d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/137849\"\u003e#137849\u003c/a\u003e from bryantbiggs/deps/update-kube-openapi\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/13b12e6214bc1c2253aa3bcf8d52c2f83e767eb0\"\u003e\u003ccode\u003e13b12e6\u003c/code\u003e\u003c/a\u003e dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kubernetes/apimachinery/commit/27f467019a4eb99953b81708326a574524b11e8f\"\u003e\u003ccode\u003e27f4670\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kubernetes/apimachinery/issues/136657\"\u003e#136657\u003c/a\u003e from Jefftree/sharding-test\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kubernetes/apimachinery/compare/v0.35.3...v0.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/saschagrunert/zeitgeist/pull/608","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/saschagrunert%2Fzeitgeist/issues/608","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/608/packages"}},{"old_version":"0.20.7","new_version":"0.21.6","update_type":"minor","path":null,"pr_created_at":"2026-05-24T05:29:07.000Z","version_change":"0.20.7 → 0.21.6","issue":{"uuid":"4510605317","node_id":"PR_kwDOHqP31c7eu6FE","number":6345,"state":"open","title":"chore(deps): bump the go-minor group with 34 updates","user":"dependabot[bot]","labels":["needs/kind","needs/priority","needs/area","dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-24T05:29:07.000Z","updated_at":"2026-05-24T05:29:53.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-minor","update_count":34,"packages":[{"name":"code.gitea.io/sdk/gitea","old_version":"0.22.1","new_version":"0.25.1"},{"name":"connectrpc.com/connect","old_version":"1.19.2","new_version":"1.20.0","repository_url":"https://github.com/connectrpc/connect-go"},{"name":"github.com/Azure/azure-sdk-for-go/sdk/azcore","old_version":"1.20.0","new_version":"1.21.1","repository_url":"https://github.com/Azure/azure-sdk-for-go"},{"name":"github.com/Masterminds/semver/v3","old_version":"3.4.0","new_version":"3.5.0","repository_url":"https://github.com/Masterminds/semver"},{"name":"github.com/aws/aws-sdk-go-v2/service/ecr","old_version":"1.55.4","new_version":"1.57.2","repository_url":"https://github.com/aws/aws-sdk-go-v2"},{"name":"github.com/bmatcuk/doublestar/v4","old_version":"4.9.2","new_version":"4.10.0","repository_url":"https://github.com/bmatcuk/doublestar"},{"name":"github.com/coreos/go-oidc/v3","old_version":"3.17.0","new_version":"3.18.0","repository_url":"https://github.com/coreos/go-oidc"},{"name":"github.com/fluxcd/pkg/kustomize","old_version":"1.24.0","new_version":"1.32.0","repository_url":"https://github.com/fluxcd/pkg"},{"name":"github.com/gin-gonic/gin","old_version":"1.11.0","new_version":"1.12.0","repository_url":"https://github.com/gin-gonic/gin"},{"name":"github.com/go-openapi/runtime","old_version":"0.29.5","new_version":"0.31.0","repository_url":"https://github.com/go-openapi/runtime"},{"name":"github.com/goccy/go-yaml","old_version":"1.18.0","new_version":"1.19.2","repository_url":"https://github.com/goccy/go-yaml"},{"name":"github.com/google/go-containerregistry","old_version":"0.20.7","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/jferrl/go-githubauth","old_version":"1.5.1","new_version":"1.6.0","repository_url":"https://github.com/jferrl/go-githubauth"},{"name":"github.com/ktrysmt/go-bitbucket","old_version":"0.9.87","new_version":"0.10.0","repository_url":"https://github.com/ktrysmt/go-bitbucket"},{"name":"github.com/pelletier/go-toml/v2","old_version":"2.2.4","new_version":"2.3.1","repository_url":"https://github.com/pelletier/go-toml"},{"name":"gitlab.com/gitlab-org/api/client-go","old_version":"1.13.0","new_version":"1.46.0"},{"name":"go.uber.org/zap","old_version":"1.27.1","new_version":"1.28.0","repository_url":"https://github.com/uber-go/zap"},{"name":"golang.org/x/crypto","old_version":"0.50.0","new_version":"0.51.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/net","old_version":"0.53.0","new_version":"0.55.0","repository_url":"https://github.com/golang/net"},{"name":"golang.org/x/oauth2","old_version":"0.34.0","new_version":"0.36.0","repository_url":"https://github.com/golang/oauth2"},{"name":"golang.org/x/text","old_version":"0.36.0","new_version":"0.37.0","repository_url":"https://github.com/golang/text"},{"name":"google.golang.org/api","old_version":"0.259.0","new_version":"0.280.0","repository_url":"https://github.com/googleapis/google-api-go-client"},{"name":"google.golang.org/grpc","old_version":"1.79.3","new_version":"1.81.1","repository_url":"https://github.com/grpc/grpc-go"},{"name":"google.golang.org/protobuf","old_version":"1.36.11","new_version":"1.36.12-0.20260120151049-f2248ac996af"},{"name":"helm.sh/helm/v3","old_version":"3.19.5","new_version":"3.21.0","repository_url":"https://github.com/helm/helm"},{"name":"k8s.io/api","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/api"},{"name":"k8s.io/apiextensions-apiserver","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/apiextensions-apiserver"},{"name":"k8s.io/apimachinery","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/apimachinery"},{"name":"k8s.io/apiserver","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/apiserver"},{"name":"k8s.io/cli-runtime","old_version":"0.34.3","new_version":"0.35.1","repository_url":"https://github.com/kubernetes/cli-runtime"},{"name":"k8s.io/client-go","old_version":"0.34.3","new_version":"0.36.0","repository_url":"https://github.com/kubernetes/client-go"},{"name":"k8s.io/klog/v2","old_version":"2.130.1","new_version":"2.140.0","repository_url":"https://github.com/kubernetes/klog"},{"name":"k8s.io/utils","old_version":"0.0.0-20250604170112-4c0f3b243397","new_version":"0.0.0-20260210185600-b8788abfbbc2","repository_url":"https://github.com/kubernetes/utils"},{"name":"sigs.k8s.io/controller-runtime","old_version":"0.22.4","new_version":"0.24.0","repository_url":"https://github.com/kubernetes-sigs/controller-runtime"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor group with 34 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| code.gitea.io/sdk/gitea | `0.22.1` | `0.25.1` |\n| [connectrpc.com/connect](https://github.com/connectrpc/connect-go) | `1.19.2` | `1.20.0` |\n| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.20.0` | `1.21.1` |\n| [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) | `3.4.0` | `3.5.0` |\n| [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.55.4` | `1.57.2` |\n| [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) | `4.9.2` | `4.10.0` |\n| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.17.0` | `3.18.0` |\n| [github.com/fluxcd/pkg/kustomize](https://github.com/fluxcd/pkg) | `1.24.0` | `1.32.0` |\n| [github.com/gin-gonic/gin](https://github.com/gin-gonic/gin) | `1.11.0` | `1.12.0` |\n| [github.com/go-openapi/runtime](https://github.com/go-openapi/runtime) | `0.29.5` | `0.31.0` |\n| [github.com/goccy/go-yaml](https://github.com/goccy/go-yaml) | `1.18.0` | `1.19.2` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.7` | `0.21.6` |\n| [github.com/jferrl/go-githubauth](https://github.com/jferrl/go-githubauth) | `1.5.1` | `1.6.0` |\n| [github.com/ktrysmt/go-bitbucket](https://github.com/ktrysmt/go-bitbucket) | `0.9.87` | `0.10.0` |\n| [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) | `2.2.4` | `2.3.1` |\n| [gitlab.com/gitlab-org/api/client-go](https://gitlab.com/gitlab-org/api/client-go) | `1.13.0` | `1.46.0` |\n| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.1` | `1.28.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.50.0` | `0.51.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.53.0` | `0.55.0` |\n| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.34.0` | `0.36.0` |\n| [golang.org/x/text](https://github.com/golang/text) | `0.36.0` | `0.37.0` |\n| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.259.0` | `0.280.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.79.3` | `1.81.1` |\n| google.golang.org/protobuf | `1.36.11` | `1.36.12-0.20260120151049-f2248ac996af` |\n| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.19.5` | `3.21.0` |\n| [k8s.io/api](https://github.com/kubernetes/api) | `0.34.3` | `0.36.0` |\n| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.34.3` | `0.36.0` |\n| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.34.3` | `0.36.0` |\n| [k8s.io/apiserver](https://github.com/kubernetes/apiserver) | `0.34.3` | `0.36.0` |\n| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.34.3` | `0.35.1` |\n| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.34.3` | `0.36.0` |\n| [k8s.io/klog/v2](https://github.com/kubernetes/klog) | `2.130.1` | `2.140.0` |\n| [k8s.io/utils](https://github.com/kubernetes/utils) | `0.0.0-20250604170112-4c0f3b243397` | `0.0.0-20260210185600-b8788abfbbc2` |\n| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.22.4` | `0.24.0` |\n\nUpdates `code.gitea.io/sdk/gitea` from 0.22.1 to 0.25.1\n\nUpdates `connectrpc.com/connect` from 1.19.2 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/connectrpc/connect-go/releases\"\u003econnectrpc.com/connect's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eOther changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump minimum supported Go version to 1.25 by \u003ca href=\"https://github.com/jonbodner-buf\"\u003e\u003ccode\u003e@​jonbodner-buf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/922\"\u003e#922\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate Unary-Get query parameter order to match spec recommendation by \u003ca href=\"https://github.com/oliversun9\"\u003e\u003ccode\u003e@​oliversun9\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/926\"\u003e#926\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jonbodner-buf\"\u003e\u003ccode\u003e@​jonbodner-buf\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/922\"\u003e#922\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/connectrpc/connect-go/compare/v1.19.2...v1.20.0\"\u003ehttps://github.com/connectrpc/connect-go/compare/v1.19.2...v1.20.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/1291a7dcac19b00490f935dce18f44f301fc58f6\"\u003e\u003ccode\u003e1291a7d\u003c/code\u003e\u003c/a\u003e Prepare for v1.20.0 (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/927\"\u003e#927\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/6df682f19e5b957b96b5fa44ffb28705a2d7bc8c\"\u003e\u003ccode\u003e6df682f\u003c/code\u003e\u003c/a\u003e Update Unary-Get query parameter order to match spec recommendation (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/926\"\u003e#926\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/c4aac92b87026cd709cfbccdaabe8c45abef705c\"\u003e\u003ccode\u003ec4aac92\u003c/code\u003e\u003c/a\u003e Chore update buf v1.69.0 and license year (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/925\"\u003e#925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/a5a6c30f3776b06ae05a66ab3bdd2d60c46db6db\"\u003e\u003ccode\u003ea5a6c30\u003c/code\u003e\u003c/a\u003e Bump Go from v1.24 to v1.25 (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/922\"\u003e#922\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/connectrpc/connect-go/commit/138e2700eb60b8004363eb344031b317bf599a1f\"\u003e\u003ccode\u003e138e270\u003c/code\u003e\u003c/a\u003e Back to development (\u003ca href=\"https://redirect.github.com/connectrpc/connect-go/issues/921\"\u003e#921\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/connectrpc/connect-go/compare/v1.19.2...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.20.0 to 1.21.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/releases\"\u003egithub.com/Azure/azure-sdk-for-go/sdk/azcore's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esdk/azcore/v1.21.1\u003c/h2\u003e\n\u003ch2\u003e1.21.1 (2026-04-16)\u003c/h2\u003e\n\u003ch3\u003eBugs Fixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue in \u003ccode\u003eResponseError.Error()\u003c/code\u003e where the request URL path was being logged unescaped.\u003c/li\u003e\n\u003cli\u003eRedact query parameters when logging errors.\u003c/li\u003e\n\u003cli\u003eFor \u003ccode\u003eruntime.JoinPaths\u003c/code\u003e, don't add a slash between root and paths when \u003ccode\u003epaths\u003c/code\u003e starts with \u003ccode\u003e?\u003c/code\u003e (query string).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgraded to Go 1.25.0.\u003c/li\u003e\n\u003cli\u003eUpgraded dependencies.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/63e4ba18204b0df554e330df8f85662e653e67ab\"\u003e\u003ccode\u003e63e4ba1\u003c/code\u003e\u003c/a\u003e Bump release date for azcore (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26613\"\u003e#26613\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/fa0312174d17ff4cb7cb0118fa80de07409841c2\"\u003e\u003ccode\u003efa03121\u003c/code\u003e\u003c/a\u003e remove bypass local dns (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26609\"\u003e#26609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/c47f9a60dd1e9be6943ff0d6a5666a0ac09f6cfa\"\u003e\u003ccode\u003ec47f9a6\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 15153 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26607\"\u003e#26607\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/88b8b5b38ecebb929a2e302df054fed1d68618b8\"\u003e\u003ccode\u003e88b8b5b\u003c/code\u003e\u003c/a\u003e Changelog for v2.2.0 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26567\"\u003e#26567\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/72ca19ae2b8b4514c4f48a5ff33495b03c08afd0\"\u003e\u003ccode\u003e72ca19a\u003c/code\u003e\u003c/a\u003e Storage STG 101 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26568\"\u003e#26568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/b64baf56c6b168d258b2a0678290ac5f9ab97938\"\u003e\u003ccode\u003eb64baf5\u003c/code\u003e\u003c/a\u003e Sync .github directory with azure-sdk-tools repository (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26600\"\u003e#26600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/ecd64dd6500a04da22107925c3ba9fbe8e636f2c\"\u003e\u003ccode\u003eecd64dd\u003c/code\u003e\u003c/a\u003e Prep azcore@v1.21.1 for release (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26596\"\u003e#26596\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/1d02f204d0146ffd7d13d5585bf3766e53c32cc5\"\u003e\u003ccode\u003e1d02f20\u003c/code\u003e\u003c/a\u003e Update copilot code review instructions and migration breaking change mitigat...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/f6e9ce3212cc9d654d349778f19065eb5d849197\"\u003e\u003ccode\u003ef6e9ce3\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 14973 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26531\"\u003e#26531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/d5a3baf11e0b743a4009efb8e84cbaee335fc0eb\"\u003e\u003ccode\u003ed5a3baf\u003c/code\u003e\u003c/a\u003e Update CODEOWNERS to remove one owner from Custom Providers (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26588\"\u003e#26588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.20.0...sdk/azcore/v1.21.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/Masterminds/semver/v3` from 3.4.0 to 3.5.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Masterminds/semver/releases\"\u003egithub.com/Masterminds/semver/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.5.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdding more prerelease tests by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/273\"\u003eMasterminds/semver#273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate constraint error messages by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/278\"\u003eMasterminds/semver#278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix edge cases by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/279\"\u003eMasterminds/semver#279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdding some checks in by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/280\"\u003eMasterminds/semver#280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdating deps by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/281\"\u003eMasterminds/semver#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github/codeql-action from 4.35.1 to 4.35.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/282\"\u003eMasterminds/semver#282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/cache from 4.2.3 to 5.0.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/283\"\u003eMasterminds/semver#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 7.0.1 to 9.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/284\"\u003eMasterminds/semver#284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdating gitignore for devcontainers by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/286\"\u003eMasterminds/semver#286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixing some quality issues by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/287\"\u003eMasterminds/semver#287\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/Masterminds/semver/pull/282\"\u003eMasterminds/semver#282\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/Masterminds/semver/compare/v3.4.0...v3.5.0\"\u003ehttps://github.com/Masterminds/semver/compare/v3.4.0...v3.5.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Masterminds/semver/blob/master/CHANGELOG.md\"\u003egithub.com/Masterminds/semver/v3's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/8b89c86cb53c57cfd5d07c13de12bc4d78954e99\"\u003e\u003ccode\u003e8b89c86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/287\"\u003e#287\u003c/a\u003e from mattfarina/fix-da-issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/29d51d0ea4bffe39173673685d0dd312447d74a7\"\u003e\u003ccode\u003e29d51d0\u003c/code\u003e\u003c/a\u003e Fixing some quality issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/87f651dbe2f616342d6408b997ad7116ba72ddf3\"\u003e\u003ccode\u003e87f651d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/286\"\u003e#286\u003c/a\u003e from mattfarina/update-devcontainer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/158a6852a7e66d99594653227d3e8c3dc6d160ca\"\u003e\u003ccode\u003e158a685\u003c/code\u003e\u003c/a\u003e Updating gitignore for devcontainers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/7e83c080cfb4455752c654805b189274a10890ab\"\u003e\u003ccode\u003e7e83c08\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/284\"\u003e#284\u003c/a\u003e from Masterminds/dependabot/github_actions/golangci/g...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/697e27f32e7419eb896e7d3ec680c65fc673166b\"\u003e\u003ccode\u003e697e27f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/283\"\u003e#283\u003c/a\u003e from Masterminds/dependabot/github_actions/actions/ca...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/1591f8e3806198f60fa4dcaf2751bfc805c7740d\"\u003e\u003ccode\u003e1591f8e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/semver/issues/282\"\u003e#282\u003c/a\u003e from Masterminds/dependabot/github_actions/github/cod...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/3f5ff1737a28437e536d3ec54e41919577748ae6\"\u003e\u003ccode\u003e3f5ff17\u003c/code\u003e\u003c/a\u003e Bump golangci/golangci-lint-action from 7.0.1 to 9.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/04baa3376047b6d5e79ffcc60f69332dd3e26c85\"\u003e\u003ccode\u003e04baa33\u003c/code\u003e\u003c/a\u003e Bump actions/cache from 4.2.3 to 5.0.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/semver/commit/45939fec77cd7d07d586b823284d11423028e9c2\"\u003e\u003ccode\u003e45939fe\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 4.35.1 to 4.35.2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Masterminds/semver/compare/v3.4.0...v3.5.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.55.4 to 1.57.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/9bd153c05150d0c3f9d45f5b9353c34df9bab5b5\"\u003e\u003ccode\u003e9bd153c\u003c/code\u003e\u003c/a\u003e Release 2025-03-04.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b967446708e597c3c22c658d8399d11accc9e1f1\"\u003e\u003ccode\u003eb967446\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/188c52a1f53d95e7f99ce0edc73059ce5d0b803c\"\u003e\u003ccode\u003e188c52a\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/defaf5c13afed6bb77e2ee4fafea2bfcd09cea88\"\u003e\u003ccode\u003edefaf5c\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/8f2dd23c2630bd2ee667a403cf8ea8611c5ce406\"\u003e\u003ccode\u003e8f2dd23\u003c/code\u003e\u003c/a\u003e add test that verifies SRA order of operations (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3025\"\u003e#3025\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/3d547b010751de5a834a749ffdaddff4bcb0d39c\"\u003e\u003ccode\u003e3d547b0\u003c/code\u003e\u003c/a\u003e Release 2025-03-04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/554a1497dc16d385e62514b10bc8adacfbd6a8d0\"\u003e\u003ccode\u003e554a149\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/3abb221732b42d61c95f5306f528cc2182d37c7a\"\u003e\u003ccode\u003e3abb221\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/95ae39d57f8d986f691754737311102335039848\"\u003e\u003ccode\u003e95ae39d\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/c62ec38df6cc8e66ecf014365d8bd15c2599bc6d\"\u003e\u003ccode\u003ec62ec38\u003c/code\u003e\u003c/a\u003e create kitchen sink test service (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/3023\"\u003e#3023\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/ecr/v1.55.4...service/ssm/v1.57.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/bmatcuk/doublestar/v4` from 4.9.2 to 4.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bmatcuk/doublestar/releases\"\u003egithub.com/bmatcuk/doublestar/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eAdded WithNoHidden option\u003c/h2\u003e\n\u003cp\u003eAdded support for a \u003ccode\u003eWithNoHidden\u003c/code\u003e option to ignore hidden files in patterns that might unintentionally match them. For example, a \u003ccode\u003e.config\u003c/code\u003e directory would not be matched by \u003ccode\u003e*\u003c/code\u003e or recursed into by \u003ccode\u003e**\u003c/code\u003e, but \u003cem\u003ewould\u003c/em\u003e be matched by \u003ccode\u003e.*\u003c/code\u003e or recursed by \u003ccode\u003e.config/**\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/lukasngl\"\u003e\u003ccode\u003e@​lukasngl\u003c/code\u003e\u003c/a\u003e for the initial PR and idea!\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add WithNoHidden option to skip hidden files by \u003ca href=\"https://github.com/lukasngl\"\u003e\u003ccode\u003e@​lukasngl\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/109\"\u003ebmatcuk/doublestar#109\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lukasngl\"\u003e\u003ccode\u003e@​lukasngl\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/109\"\u003ebmatcuk/doublestar#109\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/bmatcuk/doublestar/compare/v4.9.2...v4.10.0\"\u003ehttps://github.com/bmatcuk/doublestar/compare/v4.9.2...v4.10.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/a9ad9e0ef4d6b7e4443090e9a7201d847a881711\"\u003e\u003ccode\u003ea9ad9e0\u003c/code\u003e\u003c/a\u003e allow starting test manually\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/9987c0c624376f84f44515adca73ddcdfdcdf453\"\u003e\u003ccode\u003e9987c0c\u003c/code\u003e\u003c/a\u003e update docs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/d3b2184d103391fcd0fcca6590c16367310eee65\"\u003e\u003ccode\u003ed3b2184\u003c/code\u003e\u003c/a\u003e windows support for WithNoHidden; better tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/5d6a6cd76ba3e45482d13140f332be36451f5a48\"\u003e\u003ccode\u003e5d6a6cd\u003c/code\u003e\u003c/a\u003e Merge branch 'lukasngl-feat/no-hidden'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/e8319d206e9dab8d51d41e662811cdfb9af72b24\"\u003e\u003ccode\u003ee8319d2\u003c/code\u003e\u003c/a\u003e run tests when a branch/tag is created\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/614b331133390c7682c227740c51ff65dea2de65\"\u003e\u003ccode\u003e614b331\u003c/code\u003e\u003c/a\u003e run tests when a branch/tag is created\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/df2e03fb0b91b726e0366c0d9ba1c5e580e2d0c9\"\u003e\u003ccode\u003edf2e03f\u003c/code\u003e\u003c/a\u003e feat: add WithNoHidden option to skip hidden files\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/bmatcuk/doublestar/compare/v4.9.2...v4.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/coreos/go-oidc/v3` from 3.17.0 to 3.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/coreos/go-oidc/releases\"\u003egithub.com/coreos/go-oidc/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e.github: configure dependabot by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/477\"\u003ecoreos/go-oidc#477\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e.github: update go versions in CI by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/480\"\u003ecoreos/go-oidc#480\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/478\"\u003ecoreos/go-oidc#478\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/479\"\u003ecoreos/go-oidc#479\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/da6b3bfca8af72414ee0e6e8746585ff5d206003\"\u003e\u003ccode\u003eda6b3bf\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/7f80694215d5eb5b28f851f35845439b1e1e9e5d\"\u003e\u003ccode\u003e7f80694\u003c/code\u003e\u003c/a\u003e build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/7271de57587bb756318f9819796ba846b1ba875a\"\u003e\u003ccode\u003e7271de5\u003c/code\u003e\u003c/a\u003e .github: update go versions in CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/3ccf20fdc4afab7c64881a108d6f4c17a4ecc24d\"\u003e\u003ccode\u003e3ccf20f\u003c/code\u003e\u003c/a\u003e .github: configure dependabot\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/fluxcd/pkg/kustomize` from 1.24.0 to 1.32.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/f3ad4b56adec90eb5661af565cdebec997ad4bfb\"\u003e\u003ccode\u003ef3ad4b5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/fluxcd/pkg/issues/1195\"\u003e#1195\u003c/a\u003e from fluxcd/release-main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/f35b4fd025cdee1664ca3d7aede2eb2fd594583d\"\u003e\u003ccode\u003ef35b4fd\u003c/code\u003e\u003c/a\u003e Prepare for release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/18e165c2592fb2a9633b9a80371e730d88bcab29\"\u003e\u003ccode\u003e18e165c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/fluxcd/pkg/issues/1194\"\u003e#1194\u003c/a\u003e from fluxcd/k8s-1.36\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/fe4377874a6d57593120ee524e1913ca81a5d2e5\"\u003e\u003ccode\u003efe43778\u003c/code\u003e\u003c/a\u003e Update controller-gen to v0.21.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/2498ab414d7e2abaee4131142293e520ee76b390\"\u003e\u003ccode\u003e2498ab4\u003c/code\u003e\u003c/a\u003e Update cloud auth SDKs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/b3bb0e0ff6bc2f42f23ff110baa0e7ae0f2ee685\"\u003e\u003ccode\u003eb3bb0e0\u003c/code\u003e\u003c/a\u003e Update go-git to v5.19.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/545dc4f55ab3850dca6401177c94e37ed40b5c87\"\u003e\u003ccode\u003e545dc4f\u003c/code\u003e\u003c/a\u003e Update distribution to v3.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/b23cbf9f0581b9dc5594e8659739f1bc9c870d35\"\u003e\u003ccode\u003eb23cbf9\u003c/code\u003e\u003c/a\u003e Update Kubernetes packages to 1.36\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/c6042810b61f1937c72a0e04d81d0091ca6e7dae\"\u003e\u003ccode\u003ec604281\u003c/code\u003e\u003c/a\u003e Update Go to 1.26\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fluxcd/pkg/commit/939c616718374460667e648c796487bfedfa6d98\"\u003e\u003ccode\u003e939c616\u003c/code\u003e\u003c/a\u003e ssa: Fix race condition in CRD tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/fluxcd/pkg/compare/apis/meta/v1.24.0...kustomize/v1.32.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/gin-gonic/gin` from 1.11.0 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/gin-gonic/gin/releases\"\u003egithub.com/gin-gonic/gin's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.12.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e192ac89eefc1c30f7c97ae48a9ffb1c6f1c8c8bc: feat(binding): add support for encoding.UnmarshalText in uri/query binding (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4203\"\u003e#4203\u003c/a\u003e) (\u003ca href=\"https://github.com/takanuva15\"\u003e\u003ccode\u003e@​takanuva15\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e53410d2e07054369e0960fbe2eed97e1b9966f12: feat(context): add GetError and GetErrorSlice methods for error retrieval (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4502\"\u003e#4502\u003c/a\u003e) (\u003ca href=\"https://github.com/raju-mechatronics\"\u003e\u003ccode\u003e@​raju-mechatronics\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eacc55e049e33b401e810dbd8c0d6dcb6b3ba2b05: feat(context): add Protocol Buffers support to content negotiation (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4423\"\u003e#4423\u003c/a\u003e) (\u003ca href=\"https://github.com/1911860538\"\u003e\u003ccode\u003e@​1911860538\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e38e765119241d990705169bedb5002a29ae0cbd1: feat(context): implemented Delete method (\u003ca href=\"https://github.com/Spyder01\"\u003e\u003ccode\u003e@​Spyder01\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e771dcc6476d7bc6abb9ec0235ecefa4d38fe6fb0: feat(gin): add option to use escaped path (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4420\"\u003e#4420\u003c/a\u003e) (\u003ca href=\"https://github.com/ldesauw\"\u003e\u003ccode\u003e@​ldesauw\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e4dec17afdff48e8018c83618fbbe69fceeb2b41d: feat(logger): color latency (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4146\"\u003e#4146\u003c/a\u003e) (\u003ca href=\"https://github.com/wsyqn6\"\u003e\u003ccode\u003e@​wsyqn6\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ed7776de7d444935ea4385999711bd6331a98fecb: feat(render): add bson protocol (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4145\"\u003e#4145\u003c/a\u003e) (\u003ca href=\"https://github.com/laurentcau\"\u003e\u003ccode\u003e@​laurentcau\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eb917b14ff9d189f16a7492be79d123a47806ee19: fix(binding): empty value error (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/2169\"\u003e#2169\u003c/a\u003e) (\u003ca href=\"https://github.com/guonaihong\"\u003e\u003ccode\u003e@​guonaihong\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec3d1092b3b48addf6f9cd00fe274ec3bd14650eb: fix(binding): improve empty slice/array handling in form binding (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4380\"\u003e#4380\u003c/a\u003e) (\u003ca href=\"https://github.com/1911860538\"\u003e\u003ccode\u003e@​1911860538\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e9914178584e42458ff7d23891463a880f58c9d86: fix(context): ClientIP handling for multiple X-Forwarded-For header values (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4472\"\u003e#4472\u003c/a\u003e) (\u003ca href=\"https://github.com/Nurysso\"\u003e\u003ccode\u003e@​Nurysso\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e2a794cd0b0faa7d829291375b27a3467ea972b0d: fix(debug): version mismatch (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4403\"\u003e#4403\u003c/a\u003e) (\u003ca href=\"https://github.com/zeek0x\"\u003e\u003ccode\u003e@​zeek0x\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec3d5a28ed6d3849da820195b6774d212bcc038a9: fix(gin): close os.File in RunFd to prevent resource leak (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4422\"\u003e#4422\u003c/a\u003e) (\u003ca href=\"https://github.com/1911860538\"\u003e\u003ccode\u003e@​1911860538\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e5fad976b372e381312f8de69f0969f1284d229d3: fix(gin): literal colon routes not working with engine.Handler() (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4415\"\u003e#4415\u003c/a\u003e) (\u003ca href=\"https://github.com/pawannn\"\u003e\u003ccode\u003e@​pawannn\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e63dd3e60cab89c27fb66bce1423bd268d52abad1: fix(recover): suppress http.ErrAbortHandler in recover (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4336\"\u003e#4336\u003c/a\u003e) (\u003ca href=\"https://github.com/MondayCha\"\u003e\u003ccode\u003e@​MondayCha\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e5c00df8afadd06cc5be530dde00fe6d9fa4a2e4a: fix(render): write content length in Data.Render (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4206\"\u003e#4206\u003c/a\u003e) (\u003ca href=\"https://github.com/dengaleev\"\u003e\u003ccode\u003e@​dengaleev\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e234a6d4c00cb77af9852aca0b8289745d5529b4b: fix(response): refine hijack behavior for response lifecycle (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4373\"\u003e#4373\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e472d086af2acd924cb4b9d7be0525f7d790f69bc: fix(tree): panic in findCaseInsensitivePathRec with RedirectFixedPath (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4535\"\u003e#4535\u003c/a\u003e) (\u003ca href=\"https://github.com/veeceey\"\u003e\u003ccode\u003e@​veeceey\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e8e07d37c63e5536eb25f4af4c91eabeee4011fba: fix: Correct typos, improve documentation clarity, and remove dead code (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4511\"\u003e#4511\u003c/a\u003e) (\u003ca href=\"https://github.com/mahanadh\"\u003e\u003ccode\u003e@​mahanadh\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eba093d19477b896ac89a7fc3246af23d290b8e26: chore(binding): upgrade bson dependency to mongo-driver v2 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4549\"\u003e#4549\u003c/a\u003e) (\u003ca href=\"https://github.com/BobDu\"\u003e\u003ccode\u003e@​BobDu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eb2b489dbf4826c2c630717a77fd5e42774625410: chore(context): always trust xff headers from unix socket (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/3359\"\u003e#3359\u003c/a\u003e) (\u003ca href=\"https://github.com/WeidiDeng\"\u003e\u003ccode\u003e@​WeidiDeng\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eecb3f7b5e2f3915bf1db240ed5eee572f8dbea36: chore(deps): upgrade golang.org/x/crypto to v0.45.0 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4449\"\u003e#4449\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eaf6e8b70b8261bb0c99ad094fe552ab92991620a: chore(deps): upgrade quic-go to v0.57.1 (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edb309081bc5c137b2aa15701ef53f7f19788da25: chore(logger): allow skipping query string output (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4547\"\u003e#4547\u003c/a\u003e) (\u003ca href=\"https://github.com/USA-RedDragon\"\u003e\u003ccode\u003e@​USA-RedDragon\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e26c3a628655cad2388380cb8102d6ce7d4875f3b: chore(response): prevent Flush() panic when \u003ccode\u003ehttp.Flusher\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4479\"\u003e#4479\u003c/a\u003e) (\u003ca href=\"https://github.com/Twacqwq\"\u003e\u003ccode\u003e@​Twacqwq\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e5dd833f1f26de0eb30eae47b17e05ced2482dc41: chore: bump minimum Go version to 1.24 and update workflows (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4388\"\u003e#4388\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRefactor\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e39858a0859c914bd26948fa950477e11bd8d3823: refactor(binding): use maps.Copy for cleaner map handling (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4352\"\u003e#4352\u003c/a\u003e) (\u003ca href=\"https://github.com/russcoss\"\u003e\u003ccode\u003e@​russcoss\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec0048f645ee945c4db30593afdea10123e2c30a6: refactor(context): omit the return value names (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4395\"\u003e#4395\u003c/a\u003e) (\u003ca href=\"https://github.com/wanghaolong613\"\u003e\u003ccode\u003e@​wanghaolong613\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e915e4c90d28ec4cffc6eb146e208ab5a65eac772: refactor(context): replace hardcoded localhost IPs with constants (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4481\"\u003e#4481\u003c/a\u003e) (\u003ca href=\"https://github.com/pauloappbr\"\u003e\u003ccode\u003e@​pauloappbr\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e414de60574449457f3192a7a1d5528940db2836d: refactor(context): using maps.Clone (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4333\"\u003e#4333\u003c/a\u003e) (\u003ca href=\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e59e9d4a794f12c4f9a6c7bed441b9644e5f6d99b: refactor(ginS): use sync.OnceValue to simplify engine function (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4314\"\u003e#4314\u003c/a\u003e) (\u003ca href=\"https://github.com/1911860538\"\u003e\u003ccode\u003e@​1911860538\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e3ab698dc5110af1977d57226e4995c57dd34c233: refactor(recovery): smart error comparison (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4142\"\u003e#4142\u003c/a\u003e) (\u003ca href=\"https://github.com/zeek0x\"\u003e\u003ccode\u003e@​zeek0x\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ed1a15347b1e45a8ee816193d3578a93bfd73b70f: refactor(utils): move util functions to utils.go (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4467\"\u003e#4467\u003c/a\u003e) (\u003ca href=\"https://github.com/zeek0x\"\u003e\u003ccode\u003e@​zeek0x\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ee3118cc378d263454098924ebbde7e8d1dd2e904: refactor: for loop can be modernized using range over int (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4392\"\u003e#4392\u003c/a\u003e) (\u003ca href=\"https://github.com/wanghaolong613\"\u003e\u003ccode\u003e@​wanghaolong613\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e488f8c3ffa579a8d19beb2bae95ff8ef36b3d53f: refactor: replace magic numbers with named constants in bodyAllowedForStatus (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4529\"\u003e#4529\u003c/a\u003e) (\u003ca href=\"https://github.com/veeceey\"\u003e\u003ccode\u003e@​veeceey\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e9968c4bf9d5a99edc3eee2c068a4c9160ece8915: refactor: use b.Loop() to simplify the code and improve performance (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4389\"\u003e#4389\u003c/a\u003e) (\u003ca href=\"https://github.com/reddaisyy\"\u003e\u003ccode\u003e@​reddaisyy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ea85ef5ce4d0cda8834c59c855068ed48b51192d1: refactor: use b.Loop() to simplify the code and improve performance (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4432\"\u003e#4432\u003c/a\u003e) (\u003ca href=\"https://github.com/efcking\"\u003e\u003ccode\u003e@​efcking\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBuild process updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e61b67de522a189b568aced4c5c16917c558e3387: ci(bot): increase frequency and group updates for dependencies (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4367\"\u003e#4367\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efb27ef26c2fdfe25344b4c039d8a53551f9e912c: ci(lint): refactor test assertions and linter configuration (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4436\"\u003e#4436\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e93ff771e6dbf10e432864b30f3719ac5c84a4d4a: ci(sec): improve type safety and server organization in HTTP middleware (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4437\"\u003e#4437\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ee88fc8927a52b74f55bec0351604a56ac0aa1c51: ci(sec): schedule Trivy security scans to run daily at midnight UTC (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4439\"\u003e#4439\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e5e5ff3ace496a31b138b0820136a146bfb5de0ef: ci: replace vulnerability scanning workflow with Trivy integration (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4421\"\u003e#4421\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e00900fb3e1ea9dde33985a0e4f6afec793d5e786: ci: update CI workflows and standardize Trivy config quotes (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4531\"\u003e#4531\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eae3f524974fc4f55d18c9e7fae4614503c015226: ci: update Go version support to 1.25+ across CI and docs (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4550\"\u003e#4550\u003c/a\u003e) (\u003ca href=\"https://github.com/appleboy\"\u003e\u003ccode\u003e@​appleboy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/gin-gonic/gin/blob/master/CHANGELOG.md\"\u003egithub.com/gin-gonic/gin's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eGin v1.12.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(render): add bson protocol (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4145\"\u003e#4145\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(context): add GetError and GetErrorSlice methods for error retrieval (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4502\"\u003e#4502\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(binding): add support for encoding.UnmarshalText in uri/query binding (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4203\"\u003e#4203\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(gin): add option to use escaped path (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4420\"\u003e#4420\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(context): add Protocol Buffers support to content negotiation (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4423\"\u003e#4423\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(context): implemented Delete method (\u003ca href=\"https://github.com/gin-gonic/gin/commit/38e7651\"\u003e#38e7651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(logger): color latency (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4146\"\u003e#4146\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eperf(tree): reduce allocations in findCaseInsensitivePath (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4417\"\u003e#4417\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eperf(recovery): optimize line reading in stack function (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4466\"\u003e#4466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eperf(path): replace regex with custom functions in redirectTrailingSlash (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4414\"\u003e#4414\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eperf(tree): optimize path parsing using strings.Count (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4246\"\u003e#4246\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(logger): allow skipping query string output (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4547\"\u003e#4547\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(context): always trust xff headers from unix socket (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/3359\"\u003e#3359\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(response): prevent Flush() panic when the underlying ResponseWriter does not implement \u003ccode\u003ehttp.Flusher\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4479\"\u003e#4479\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(recovery): smart error comparison (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4142\"\u003e#4142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(context): replace hardcoded localhost IPs with constants (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4481\"\u003e#4481\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(utils): move util functions to utils.go (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4467\"\u003e#4467\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(binding): use maps.Copy for cleaner map handling (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4352\"\u003e#4352\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(context): using maps.Clone (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4333\"\u003e#4333\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(ginS): use sync.OnceValue to simplify engine function (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4314\"\u003e#4314\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor: replace magic numbers with named constants in bodyAllowedForStatus (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4529\"\u003e#4529\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor: for loop can be modernized using range over int (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4392\"\u003e#4392\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(tree): panic in findCaseInsensitivePathRec with RedirectFixedPath (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4535\"\u003e#4535\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(render): write content length in Data.Render (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4206\"\u003e#4206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(context): ClientIP handling for multiple X-Forwarded-For header values (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4472\"\u003e#4472\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(binding): empty value error (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/2169\"\u003e#2169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(recover): suppress http.ErrAbortHandler in recover (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4336\"\u003e#4336\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(gin): literal colon routes not working with engine.Handler() (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4415\"\u003e#4415\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(gin): close os.File in RunFd to prevent resource leak (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4422\"\u003e#4422\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(response): refine hijack behavior for response lifecycle (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4373\"\u003e#4373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(binding): improve empty slice/array handling in form binding (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4380\"\u003e#4380\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(debug): version mismatch (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4403\"\u003e#4403\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: correct typos, improve documentation clarity, and remove dead code (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4511\"\u003e#4511\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBuild process updates / CI\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eci: update Go version support to 1.25+ across CI and docs (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4550\"\u003e#4550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(binding): upgrade bson dependency to mongo-driver v2 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/pull/4549\"\u003e#4549\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/73726dc606796a025971fe451f0aa6f1b9b847f6\"\u003e\u003ccode\u003e73726dc\u003c/code\u003e\u003c/a\u003e docs: update documentation to reflect Go version changes (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4552\"\u003e#4552\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/e292e5caa777bce70b66fe08c94cbe9cef3e2ec9\"\u003e\u003ccode\u003ee292e5c\u003c/code\u003e\u003c/a\u003e docs: document and finalize Gin v1.12.0 release (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4551\"\u003e#4551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/ae3f524974fc4f55d18c9e7fae4614503c015226\"\u003e\u003ccode\u003eae3f524\u003c/code\u003e\u003c/a\u003e ci: update Go version support to 1.25+ across CI and docs (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4550\"\u003e#4550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/38534e2bf98a06e1f62d6b24384e90b5f78699bf\"\u003e\u003ccode\u003e38534e2\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4548\"\u003e#4548\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/472d086af2acd924cb4b9d7be0525f7d790f69bc\"\u003e\u003ccode\u003e472d086\u003c/code\u003e\u003c/a\u003e fix(tree): panic in findCaseInsensitivePathRec with RedirectFixedPath (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4535\"\u003e#4535\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/fb2583442c4d9bccb75e6d26f1aa6e7c01950db6\"\u003e\u003ccode\u003efb25834\u003c/code\u003e\u003c/a\u003e test(context): use http.StatusContinue constant instead of magic number 100 (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/6f1d5fe3cdb171a08928c3c9dd3fbcfc9ee1b521\"\u003e\u003ccode\u003e6f1d5fe\u003c/code\u003e\u003c/a\u003e test(render): add comprehensive error handling tests (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4541\"\u003e#4541\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/5c00df8afadd06cc5be530dde00fe6d9fa4a2e4a\"\u003e\u003ccode\u003e5c00df8\u003c/code\u003e\u003c/a\u003e fix(render): write content length in Data.Render (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4206\"\u003e#4206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/db309081bc5c137b2aa15701ef53f7f19788da25\"\u003e\u003ccode\u003edb30908\u003c/code\u003e\u003c/a\u003e chore(logger): allow skipping query string output (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4547\"\u003e#4547\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gin-gonic/gin/commit/ba093d19477b896ac89a7fc3246af23d290b8e26\"\u003e\u003ccode\u003eba093d1\u003c/code\u003e\u003c/a\u003e chore(binding): upgrade bson dependency to mongo-driver v2 (\u003ca href=\"https://redirect.github.com/gin-gonic/gin/issues/4549\"\u003e#4549\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/gin-gonic/gin/compare/v1.11.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-openapi/runtime` from 0.29.5 to 0.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-openapi/runtime/releases\"\u003egithub.com/go-openapi/runtime's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.31.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/go-openapi/runtime/tree/v0.31.0\"\u003e0.31.0\u003c/a\u003e - 2026-05-17\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-openapi/runtime/compare/v0.30.0...v0.31.0\"\u003ehttps://github.com/go-openapi/runtime/compare/v0.30.0...v0.31.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e33 commits in this release.\u003c/p\u003e\n\u003chr /\u003e\n\u003ch3\u003e\u003c!-- raw HTML omitted --\u003eImplemented enhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(client): TLS diagnostic mode for Runtime.Trace by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/159e452fbb643b71d258f2cca8b88137450279ee\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(client): add Runtime.Trace for connection-level diagnostics by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/d966b8fa816b64de80ccf018361cc7263c63341e\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003c!-- raw HTML omitted --\u003eFixed bugs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(client): strip CR/LF from multipart filename and field name by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/5cabd7013f842d80d85a547ea761cf136699deb4\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(middleware): cap filename length on untyped formData uploads by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/0d36609aa32886db0a827883431a5600b274fc10\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: CA cert pool should be cloned not returned as pointer by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/455\"\u003e#455\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/c925891ba9edd2240e9a10abcbb2f8453a190970\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: correct spelling of \u0026quot;Organ trail\u0026quot; to \u0026quot;Oregon Trail\u0026quot; in request tests by \u003ca href=\"https://github.com/Copilot\"\u003e\u003ccode\u003e@​Copilot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/449\"\u003e#449\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/3b614c320c5f157dc502a2a4b541eb1dfb34989d\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(client/tls): correct PEM label and add Ed25519 key support by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/452\"\u003e#452\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/eaa96edc1f2811efe29a1e6d07ca1db84155f026\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003c!-- raw HTML omitted --\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edoc: fixup module layout by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/1fd10af05ff76b283c381f8a3e5b41359d17c4cb\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc: trimmed deprecated functions from examples by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/463\"\u003e#463\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/fe97e40276649c6cad129afa87e6549299ab89d8\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc: updated contributors file by \u003ca href=\"https://github.com/bot-go-openapi%5Bbot%5D\"\u003e\u003ccode\u003e@​bot-go-openapi[bot]\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/460\"\u003e#460\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/0c4edbac0f9c4bc72334f8c105ac173c9676399f\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc: advertised doc site in README.md by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/454\"\u003e#454\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/9d29f68e2bd36b26aea7286d369dc88374ce1fab\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: correct two comment typos in client/internal/request/request.go by \u003ca href=\"https://github.com/Copilot\"\u003e\u003ccode\u003e@​Copilot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/450\"\u003e#450\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/09c03d02ae2717bf36643c8559cecaf197363b31\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(compression): deprecate ContentEncoding, add CAFxX recipe by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/447\"\u003e#447\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/6244633af43ff7691c33eb68b32324114f015c1d\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(keep-alive): add a thorough keep-alive primer by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/445\"\u003e#445\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/7c678af534a79da024575aa6558299901551dde4\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003c!-- raw HTML omitted --\u003eCode quality\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edoc: godoc linting by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/465\"\u003e#465\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/74bcf736bac52ca40d65a839946e16b51c72c762\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: cleanup linter config, reformat, optimized strings replacer by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/8bf148cb896bf0e7f0c22bbd6a3501d82b900b4b\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix/example request by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/462\"\u003e#462\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/9fef4d8ebb77697229a4ff5945d5665aa64f9d9c\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(relint): relint code base by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/461\"\u003e#461\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/4b215322ce2ba88d0e8466668786d68792dca349\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc: doc site on github pages by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/448\"\u003e#448\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/1c5e3735efd166bf7aa00544b8172523c4314687\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003c!-- raw HTML omitted --\u003eTesting\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etest: fix flaky assertion on httptrace by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/456\"\u003e#456\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/1e4d68eb5e29974f2149b68c4d9c4dd6d2dc4221\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003c!-- raw HTML omitted --\u003eMiscellaneous tasks\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore: prepare release v0.31.0 by \u003ca href=\"https://github.com/bot-go-openapi%5Bbot%5D\"\u003e\u003ccode\u003e@​bot-go-openapi[bot]\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-openapi/runtime/pull/466\"\u003e#466\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/423c407791a74d4353830e07d98375a0c5cf311b\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove binary by \u003ca href=\"https://github.com/fredbi\"\u003e\u003ccode\u003e@​fredbi\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/go-openapi/runtime/commit/982c9d3bfa154c4c1f8c06c764ad44e90a666134\"\u003e...\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/423c407791a74d4353830e07d98375a0c5cf311b\"\u003e\u003ccode\u003e423c407\u003c/code\u003e\u003c/a\u003e chore: prepare release v0.31.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/1fd10af05ff76b283c381f8a3e5b41359d17c4cb\"\u003e\u003ccode\u003e1fd10af\u003c/code\u003e\u003c/a\u003e doc: fixup module layout\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/74bcf736bac52ca40d65a839946e16b51c72c762\"\u003e\u003ccode\u003e74bcf73\u003c/code\u003e\u003c/a\u003e doc: godoc linting (\u003ca href=\"https://redirect.github.com/go-openapi/runtime/issues/465\"\u003e#465\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/506f3bcb4a7ea135a9742fb8f6bcc5bf666b02b8\"\u003e\u003ccode\u003e506f3bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-openapi/runtime/issues/464\"\u003e#464\u003c/a\u003e from fredbi/sec/lens3-multipart\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/8bf148cb896bf0e7f0c22bbd6a3501d82b900b4b\"\u003e\u003ccode\u003e8bf148c\u003c/code\u003e\u003c/a\u003e chore: cleanup linter config, reformat, optimized strings replacer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/fa336825535097d6b36eef67830c87ebe2970273\"\u003e\u003ccode\u003efa33682\u003c/code\u003e\u003c/a\u003e test(security): fuzz targets for BindForm parse + filename cap\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/5cabd7013f842d80d85a547ea761cf136699deb4\"\u003e\u003ccode\u003e5cabd70\u003c/code\u003e\u003c/a\u003e fix(client): strip CR/LF from multipart filename and field name\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/0d36609aa32886db0a827883431a5600b274fc10\"\u003e\u003ccode\u003e0d36609\u003c/code\u003e\u003c/a\u003e fix(middleware): cap filename length on untyped formData uploads\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/fe97e40276649c6cad129afa87e6549299ab89d8\"\u003e\u003ccode\u003efe97e40\u003c/code\u003e\u003c/a\u003e doc: trimmed deprecated functions from examples (\u003ca href=\"https://redirect.github.com/go-openapi/runtime/issues/463\"\u003e#463\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-openapi/runtime/commit/982c9d3bfa154c4c1f8c06c764ad44e90a666134\"\u003e\u003ccode\u003e982c9d3\u003c/code\u003e\u003c/a\u003e chore: remove binary\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-openapi/runtime/compare/v0.29.5...v0.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/goccy/go-yaml` from 1.18.0 to 1.19.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/goccy/go-yaml/releases\"\u003egithub.com/goccy/go-yaml's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.19.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix anchor reference regression in nested structures by \u003ca href=\"https://github.com/linyows\"\u003e\u003ccode\u003e@​linyows\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/839\"\u003egoccy/go-yaml#839\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/linyows\"\u003e\u003ccode\u003e@​linyows\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/839\"\u003egoccy/go-yaml#839\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/goccy/go-yaml/compare/v1.19.1...v1.19.2\"\u003ehttps://github.com/goccy/go-yaml/compare/v1.19.1...v1.19.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.19.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix decoding of integer keys of map type by \u003ca href=\"https://github.com/goccy\"\u003e\u003ccode\u003e@​goccy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/829\"\u003egoccy/go-yaml#829\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport line comment for flow sequence or flow map by \u003ca href=\"https://github.com/goccy\"\u003e\u003ccode\u003e@​goccy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/834\"\u003egoccy/go-yaml#834\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/goccy/go-yaml/compare/v1.19.0...v1.19.1\"\u003ehttps://github.com/goccy/go-yaml/compare/v1.19.0...v1.19.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;feat: Dont make copies of structs for validation\u0026quot; by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/763\"\u003egoccy/go-yaml#763\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd decode option that allows specific field prefixes by \u003ca href=\"https://github.com/cpuguy83\"\u003e\u003ccode\u003e@​cpuguy83\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/795\"\u003egoccy/go-yaml#795\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNormalize CR and CRLF in multi-line strings by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/754\"\u003egoccy/go-yaml#754\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport non string map keys by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/756\"\u003egoccy/go-yaml#756\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSkip directive in path operations by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/758\"\u003egoccy/go-yaml#758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd indentation to flow values on new lines by \u003ca href=\"https://github.com/shuheiktgw\"\u003e\u003ccode\u003e@​shuheiktgw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/759\"\u003egoccy/go-yaml#759\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd support for RawMessage, similar to json.RawMessage by \u003ca href=\"https://github.com/thanethomson\"\u003e\u003ccode\u003e@​thanethomson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/790\"\u003egoccy/go-yaml#790\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cpuguy83\"\u003e\u003ccode\u003e@​cpuguy83\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/795\"\u003egoccy/go-yaml#795\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/thanethomson\"\u003e\u003ccode\u003e@​thanethomson\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/goccy/go-yaml/pull/790\"\u003egoccy/go-yaml#790\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/goccy/go-yaml/compare/v1.18.0...v1.19.0\"\u003ehttps://github.com/goccy/go-yaml/compare/v1.18.0...v1.19.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/92bc79cb5f685e999ad131473168fc45215d12d9\"\u003e\u003ccode\u003e92bc79c\u003c/code\u003e\u003c/a\u003e Fix anchor reference regression in nested structures (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/839\"\u003e#839\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/b0ab06985557a2d84913ecba6dda0dbedbd5e154\"\u003e\u003ccode\u003eb0ab069\u003c/code\u003e\u003c/a\u003e Support line comment for flow sequence or flow map (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/834\"\u003e#834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/9e98b0c753ff2b8f0b323929c9c60fe7951d0f45\"\u003e\u003ccode\u003e9e98b0c\u003c/code\u003e\u003c/a\u003e Fix decoding of integer keys of map type (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/829\"\u003e#829\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/a7b4bfbcf4a41152862ffba5cce666631bc04bb1\"\u003e\u003ccode\u003ea7b4bfb\u003c/code\u003e\u003c/a\u003e Add support for RawMessage, similar to json.RawMessage (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/790\"\u003e#790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/07c09c028744e7aac32d1b11279a401055d107f5\"\u003e\u003ccode\u003e07c09c0\u003c/code\u003e\u003c/a\u003e Add indentation to flow values on new lines (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/759\"\u003e#759\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/0040ab4161153c5b812ae51984d3967ad3dbd068\"\u003e\u003ccode\u003e0040ab4\u003c/code\u003e\u003c/a\u003e Skip directive in path operations (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/758\"\u003e#758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/7901e98f54d280a553a0d606c91a82fa89493928\"\u003e\u003ccode\u003e7901e98\u003c/code\u003e\u003c/a\u003e Support non string map keys (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/756\"\u003e#756\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/f4d13479ba3d44541a65d0dffeab5e3fa805413a\"\u003e\u003ccode\u003ef4d1347\u003c/code\u003e\u003c/a\u003e Normalize CR and CRLF in multi-line strings (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/754\"\u003e#754\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/90e852559132e85734ab0c9a48b3a912ebd3f060\"\u003e\u003ccode\u003e90e8525\u003c/code\u003e\u003c/a\u003e Add decode option that allows specific field prefixes (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/795\"\u003e#795\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/goccy/go-yaml/commit/25e5d9094248e480434ca87d9119e3d9ce7ac1d7\"\u003e\u003ccode\u003e25e5d90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;feat: Dont make copies of structs for validation (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/737\"\u003e#737\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/goccy/go-yaml/issues/763\"\u003e#763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/goccy/go-yaml/compare/v1.18.0...v1.19.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.20.7 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerreg...\n\n_Description has been truncated_","html_url":"https://github.com/akuity/kargo/pull/6345","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/akuity%2Fkargo/issues/6345","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/6345/packages"}},{"old_version":"0.21.2","new_version":"0.21.5","update_type":"patch","path":null,"pr_created_at":"2026-05-22T21:40:50.000Z","version_change":"0.21.2 → 0.21.5","issue":{"uuid":"4505746886","node_id":"PR_kwDORsXlm87egJsd","number":36,"state":"closed","title":"chore(deps): bump the common group across 1 directory with 31 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-29T23:34:58.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-22T21:40:50.000Z","updated_at":"2026-05-29T23:35:00.000Z","time_to_close":611648,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"common","update_count":31,"packages":[{"name":"github.com/Azure/azure-sdk-for-go/sdk/azcore","old_version":"1.21.0","new_version":"1.21.1","repository_url":"https://github.com/Azure/azure-sdk-for-go"},{"name":"github.com/CycloneDX/cyclonedx-go","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/CycloneDX/cyclonedx-go"},{"name":"github.com/alicebob/miniredis/v2","old_version":"2.37.0","new_version":"2.38.0","repository_url":"https://github.com/alicebob/miniredis"},{"name":"github.com/apparentlymart/go-cidr","old_version":"1.1.0","new_version":"1.1.1","repository_url":"https://github.com/apparentlymart/go-cidr"},{"name":"github.com/containerd/containerd/v2","old_version":"2.2.2","new_version":"2.3.0","repository_url":"https://github.com/containerd/containerd"},{"name":"github.com/go-git/go-git/v5","old_version":"5.17.2","new_version":"5.19.0","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.2","new_version":"0.21.5","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/hashicorp/hc-install","old_version":"0.9.3","new_version":"0.9.5","repository_url":"https://github.com/hashicorp/hc-install"},{"name":"github.com/hashicorp/terraform-exec","old_version":"0.25.0","new_version":"0.25.2","repository_url":"https://github.com/hashicorp/terraform-exec"},{"name":"github.com/in-toto/in-toto-golang","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/in-toto/in-toto-golang"},{"name":"github.com/magefile/mage","old_version":"1.17.1","new_version":"1.17.2","repository_url":"https://github.com/magefile/mage"},{"name":"github.com/mattn/go-shellwords","old_version":"1.0.12","new_version":"1.0.13","repository_url":"https://github.com/mattn/go-shellwords"},{"name":"github.com/open-policy-agent/opa","old_version":"1.15.2","new_version":"1.16.2","repository_url":"https://github.com/open-policy-agent/opa"},{"name":"github.com/openvex/go-vex","old_version":"0.2.7","new_version":"0.2.8","repository_url":"https://github.com/openvex/go-vex"},{"name":"github.com/package-url/packageurl-go","old_version":"0.1.5","new_version":"0.1.6","repository_url":"https://github.com/package-url/packageurl-go"},{"name":"github.com/secure-systems-lab/go-securesystemslib","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/secure-systems-lab/go-securesystemslib"},{"name":"golang.org/x/crypto","old_version":"0.50.0","new_version":"0.51.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/net","old_version":"0.53.0","new_version":"0.54.0","repository_url":"https://github.com/golang/net"},{"name":"golang.org/x/vuln","old_version":"1.1.4","new_version":"1.3.0","repository_url":"https://github.com/golang/vuln"},{"name":"helm.sh/helm/v3","old_version":"3.20.2","new_version":"3.21.0","repository_url":"https://github.com/helm/helm"},{"name":"modernc.org/sqlite","old_version":"1.48.2","new_version":"1.50.1"},{"name":"github.com/invopop/jsonschema","old_version":"0.13.0","new_version":"0.14.0","repository_url":"https://github.com/invopop/jsonschema"},{"name":"github.com/nikolalohinski/gonja/v2","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/nikolalohinski/gonja"}],"path":null,"ecosystem":"go"},"body":"Bumps the common group with 23 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.21.0` | `1.21.1` |\n| [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) | `0.10.0` | `0.11.0` |\n| [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) | `2.37.0` | `2.38.0` |\n| [github.com/apparentlymart/go-cidr](https://github.com/apparentlymart/go-cidr) | `1.1.0` | `1.1.1` |\n| [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.2.2` | `2.3.0` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.17.2` | `5.19.0` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.2` | `0.21.5` |\n| [github.com/hashicorp/hc-install](https://github.com/hashicorp/hc-install) | `0.9.3` | `0.9.5` |\n| [github.com/hashicorp/terraform-exec](https://github.com/hashicorp/terraform-exec) | `0.25.0` | `0.25.2` |\n| [github.com/in-toto/in-toto-golang](https://github.com/in-toto/in-toto-golang) | `0.10.0` | `0.11.0` |\n| [github.com/magefile/mage](https://github.com/magefile/mage) | `1.17.1` | `1.17.2` |\n| [github.com/mattn/go-shellwords](https://github.com/mattn/go-shellwords) | `1.0.12` | `1.0.13` |\n| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `1.15.2` | `1.16.2` |\n| [github.com/openvex/go-vex](https://github.com/openvex/go-vex) | `0.2.7` | `0.2.8` |\n| [github.com/package-url/packageurl-go](https://github.com/package-url/packageurl-go) | `0.1.5` | `0.1.6` |\n| [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib) | `0.10.0` | `0.11.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.50.0` | `0.51.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.53.0` | `0.54.0` |\n| [golang.org/x/vuln](https://github.com/golang/vuln) | `1.1.4` | `1.3.0` |\n| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.20.2` | `3.21.0` |\n| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.48.2` | `1.50.1` |\n| [github.com/invopop/jsonschema](https://github.com/invopop/jsonschema) | `0.13.0` | `0.14.0` |\n| [github.com/nikolalohinski/gonja/v2](https://github.com/nikolalohinski/gonja) | `2.7.0` | `2.8.0` |\n\n\nUpdates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.21.0 to 1.21.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/releases\"\u003egithub.com/Azure/azure-sdk-for-go/sdk/azcore's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esdk/azcore/v1.21.1\u003c/h2\u003e\n\u003ch2\u003e1.21.1 (2026-04-16)\u003c/h2\u003e\n\u003ch3\u003eBugs Fixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue in \u003ccode\u003eResponseError.Error()\u003c/code\u003e where the request URL path was being logged unescaped.\u003c/li\u003e\n\u003cli\u003eRedact query parameters when logging errors.\u003c/li\u003e\n\u003cli\u003eFor \u003ccode\u003eruntime.JoinPaths\u003c/code\u003e, don't add a slash between root and paths when \u003ccode\u003epaths\u003c/code\u003e starts with \u003ccode\u003e?\u003c/code\u003e (query string).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgraded to Go 1.25.0.\u003c/li\u003e\n\u003cli\u003eUpgraded dependencies.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/63e4ba18204b0df554e330df8f85662e653e67ab\"\u003e\u003ccode\u003e63e4ba1\u003c/code\u003e\u003c/a\u003e Bump release date for azcore (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26613\"\u003e#26613\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/fa0312174d17ff4cb7cb0118fa80de07409841c2\"\u003e\u003ccode\u003efa03121\u003c/code\u003e\u003c/a\u003e remove bypass local dns (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26609\"\u003e#26609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/c47f9a60dd1e9be6943ff0d6a5666a0ac09f6cfa\"\u003e\u003ccode\u003ec47f9a6\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 15153 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26607\"\u003e#26607\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/88b8b5b38ecebb929a2e302df054fed1d68618b8\"\u003e\u003ccode\u003e88b8b5b\u003c/code\u003e\u003c/a\u003e Changelog for v2.2.0 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26567\"\u003e#26567\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/72ca19ae2b8b4514c4f48a5ff33495b03c08afd0\"\u003e\u003ccode\u003e72ca19a\u003c/code\u003e\u003c/a\u003e Storage STG 101 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26568\"\u003e#26568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/b64baf56c6b168d258b2a0678290ac5f9ab97938\"\u003e\u003ccode\u003eb64baf5\u003c/code\u003e\u003c/a\u003e Sync .github directory with azure-sdk-tools repository (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26600\"\u003e#26600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/ecd64dd6500a04da22107925c3ba9fbe8e636f2c\"\u003e\u003ccode\u003eecd64dd\u003c/code\u003e\u003c/a\u003e Prep azcore@v1.21.1 for release (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26596\"\u003e#26596\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/1d02f204d0146ffd7d13d5585bf3766e53c32cc5\"\u003e\u003ccode\u003e1d02f20\u003c/code\u003e\u003c/a\u003e Update copilot code review instructions and migration breaking change mitigat...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/f6e9ce3212cc9d654d349778f19065eb5d849197\"\u003e\u003ccode\u003ef6e9ce3\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 14973 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26531\"\u003e#26531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/d5a3baf11e0b743a4009efb8e84cbaee335fc0eb\"\u003e\u003ccode\u003ed5a3baf\u003c/code\u003e\u003c/a\u003e Update CODEOWNERS to remove one owner from Custom Providers (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26588\"\u003e#26588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.21.0...sdk/azcore/v1.21.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/CycloneDX/cyclonedx-go` from 0.10.0 to 0.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/releases\"\u003egithub.com/CycloneDX/cyclonedx-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eBuilding and Packaging\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e32221d4829e8ec6007896af2d7f11fd6ba13d6c5: build(deps): bump actions/setup-go from 6.2.0 to 6.4.0 (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/261\"\u003e#261\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ea42a4dd9163df91c4173d41db2cc7ed67f0db0b6: build(deps): bump gitpod/workspace-go from \u003ccode\u003e08a7c68\u003c/code\u003e to \u003ccode\u003e00059ff\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/255\"\u003e#255\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e9810ab9f48d46f134ad9a13bbabd1397cc64804e: build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.1 (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/263\"\u003e#263\u003c/a\u003e) (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOthers\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e2cef05662cba14b4ae948b1858fee532f8adadd1: Add comprehensive support for CycloneDX 1.7 specification (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/257\"\u003e#257\u003c/a\u003e) (\u003ca href=\"https://github.com/alistair-mclean\"\u003e\u003ccode\u003e@​alistair-mclean\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e3ed34da50502f9b9d6ac9dff64df8b08e53aa2a5: Added 5 missing fields to match CycloneDX 1.6 spec: (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/256\"\u003e#256\u003c/a\u003e) (\u003ca href=\"https://github.com/alistair-mclean\"\u003e\u003ccode\u003e@​alistair-mclean\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/a42a4dd9163df91c4173d41db2cc7ed67f0db0b6\"\u003e\u003ccode\u003ea42a4dd\u003c/code\u003e\u003c/a\u003e build(deps): bump gitpod/workspace-go from \u003ccode\u003e08a7c68\u003c/code\u003e to \u003ccode\u003e00059ff\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/255\"\u003e#255\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/9810ab9f48d46f134ad9a13bbabd1397cc64804e\"\u003e\u003ccode\u003e9810ab9\u003c/code\u003e\u003c/a\u003e build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.1 (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/263\"\u003e#263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/32221d4829e8ec6007896af2d7f11fd6ba13d6c5\"\u003e\u003ccode\u003e32221d4\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-go from 6.2.0 to 6.4.0 (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/261\"\u003e#261\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/2cef05662cba14b4ae948b1858fee532f8adadd1\"\u003e\u003ccode\u003e2cef056\u003c/code\u003e\u003c/a\u003e Add comprehensive support for CycloneDX 1.7 specification (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/257\"\u003e#257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/3ed34da50502f9b9d6ac9dff64df8b08e53aa2a5\"\u003e\u003ccode\u003e3ed34da\u003c/code\u003e\u003c/a\u003e Added 5 missing fields to match CycloneDX 1.6 spec: (\u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/256\"\u003e#256\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/compare/v0.10.0...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/alicebob/miniredis/v2` from 2.37.0 to 2.38.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/alicebob/miniredis/releases\"\u003egithub.com/alicebob/miniredis/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eDELEX and fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eXADD TRIM (thanks \u003ca href=\"https://github.com/evan-choi\"\u003e\u003ccode\u003e@​evan-choi\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate XINFO STREAM (thanks \u003ca href=\"https://github.com/TomBailey167\"\u003e\u003ccode\u003e@​TomBailey167\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003elua fix (thanks \u003ca href=\"https://github.com/infastin\"\u003e\u003ccode\u003e@​infastin\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epartial support for DELEX\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md\"\u003egithub.com/alicebob/miniredis/v2's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.38.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eXADD TRIM (thanks \u003ca href=\"https://github.com/evan-choi\"\u003e\u003ccode\u003e@​evan-choi\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate XINFO STREAM (thanks \u003ca href=\"https://github.com/TomBailey167\"\u003e\u003ccode\u003e@​TomBailey167\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003elua fix (thanks \u003ca href=\"https://github.com/infastin\"\u003e\u003ccode\u003e@​infastin\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epartial support for DELEX\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/d67bfae4c370e8451561165eca6ddc50f056f083\"\u003e\u003ccode\u003ed67bfae\u003c/code\u003e\u003c/a\u003e update changelog for v2.38.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/2b1abd81e1c58fb6d440b4637287d3ee09f7f66a\"\u003e\u003ccode\u003e2b1abd8\u003c/code\u003e\u003c/a\u003e DELEX (partly) (\u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/442\"\u003e#442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/452dd373d138f7ad858dd6e25e2a92753f83498e\"\u003e\u003ccode\u003e452dd37\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/440\"\u003e#440\u003c/a\u003e from infastin/server-alias\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/b5b8ec2cfde407552ea028514409599dbd5e1600\"\u003e\u003ccode\u003eb5b8ec2\u003c/code\u003e\u003c/a\u003e feat: add 'server' alias to 'redis' in lua scripts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/ecc4af14f2444ea1a57d040185781fe197bdfc9d\"\u003e\u003ccode\u003eecc4af1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/439\"\u003e#439\u003c/a\u003e from TomBailey167/xinfo-stream-last-generated-id\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/4a2a33e841b359a2569fe9a35d6d46414bf40aec\"\u003e\u003ccode\u003e4a2a33e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/435\"\u003e#435\u003c/a\u003e from evan-choi/fix/xadd-equals-trim-modifier\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/d6261eff59117ccea7387f3a608caa1006b1adef\"\u003e\u003ccode\u003ed6261ef\u003c/code\u003e\u003c/a\u003e feat: add last-generated-id to XINFO STREAM response\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/f4d8aa342425de1b740a6f22a7dd230f83e3712a\"\u003e\u003ccode\u003ef4d8aa3\u003c/code\u003e\u003c/a\u003e fix: accept = trim modifier in xadd\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/alicebob/miniredis/compare/v2.37.0...v2.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/apparentlymart/go-cidr` from 1.1.0 to 1.1.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apparentlymart/go-cidr/commit/5730b04c510e662932577c247c0b194f97fb101f\"\u003e\u003ccode\u003e5730b04\u003c/code\u003e\u003c/a\u003e SubnetBig returns error for negative subnet number\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apparentlymart/go-cidr/commit/fab7bb4b664d0c94dceb4a54fab3500ffb2a2977\"\u003e\u003ccode\u003efab7bb4\u003c/code\u003e\u003c/a\u003e HostBig: Don't crash for out-of-range hostnum greater than max uint64\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apparentlymart/go-cidr/commit/e4ff799e34b9b5c2040704a175c01a6a1df7b56c\"\u003e\u003ccode\u003ee4ff799\u003c/code\u003e\u003c/a\u003e Update doc comment spacing for newer gofmt behavior\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/apparentlymart/go-cidr/compare/v1.1.0...v1.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/containerd/containerd/v2` from 2.2.2 to 2.3.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/containerd/containerd/releases\"\u003egithub.com/containerd/containerd/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003econtainerd 2.3.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the v2.3.0 release of containerd!\u003c/p\u003e\n\u003cp\u003eThe third minor release of containerd 2.x focuses on continued stability alongside\nnew features and improvements. This is the third time-based release for containerd.\u003c/p\u003e\n\u003cp\u003eStarting with containerd 2.3, the project has moved to release cadence aligned with\nthe Kubernetes release schedule, with new minor releases about every 4 months. The\ncontainerd 2.3 release is also the first annual LTS (Long Term Stable) release under\nthis new schedule, with support planned for at least two years. Direct upgrades\nbetween sequential LTS releases (e.g., 1.7 to 2.3) will be tested and supported.\u003c/p\u003e\n\u003ch3\u003eHighlights\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd transfer types for container filesystem copy (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13165\"\u003e#13165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd option to inject trace ID to logs (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13117\"\u003e#13117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePropagate OpenTelemetry traces in outgoing RPCs from plugin clients (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13113\"\u003e#13113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate plugin config migration to run on load (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12608\"\u003e#12608\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate sandbox API to include spec field (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12840\"\u003e#12840\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eContainer Runtime Interface (CRI)\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eAllow containers to use user namespaces with host networking (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12518\"\u003e#12518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eWire UpdatePodSandboxResources to Sandbox API (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13118\"\u003e#13118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUnpack images with per-layer labels for specific runtime (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12835\"\u003e#12835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePopulate ImageId field in container status (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12787\"\u003e#12787\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSet annotations parameter in CreateSandbox request (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12566\"\u003e#12566\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd background stats collector to calculate UsageNanoCores for containers and pod sandboxes (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12629\"\u003e#12629\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eImage Distribution\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eSupport zstd-wrapped EROFS layers (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13185\"\u003e#13185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd os.features support for EROFS native container images (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/13091\"\u003e#13091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd EROFS layer media type (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12567\"\u003e#12567\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eImage Storage\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eAdd dmverity support to the erofs snapshotter (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12502\"\u003e#12502\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse fsmount API to avoid PAGE_SIZE limit for erofs (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12783\"\u003e#12783\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNode Resource Interface (NRI)\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003ePass container user (uid, gids) to plugins (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12769\"\u003e#12769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePass seccomp policy to plugins (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12768\"\u003e#12768\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePass any POSIX rlimits to plugins (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12765\"\u003e#12765\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePass extended container status to NRI. (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12770\"\u003e#12770\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePass injected CDI devices to plugins (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12767\"\u003e#12767\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePass linux sysctl to plugins (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12766\"\u003e#12766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse dedicated RPC calls for all pod and container life-cycle events via the NRI wire protocol (\u003ca href=\"https://redirect.github.com/containerd/nri/pull/274\"\u003econtainerd/nri#274\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd basic metrics collection for the NRI framework (\u003ca href=\"https://redirect.github.com/containerd/nri/pull/277\"\u003econtainerd/nri#277\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/containerd/containerd/blob/main/RELEASES.md\"\u003egithub.com/containerd/containerd/v2's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eVersioning and Release\u003c/h1\u003e\n\u003cp\u003eThis document details the versioning and release plan for containerd. Stability\nis a top goal for this project, and we hope that this document and the processes\nit entails will help to achieve that. It covers the release process, versioning\nnumbering, backporting, API stability and support horizons.\u003c/p\u003e\n\u003cp\u003eIf you rely on containerd, it would be good to spend time understanding the\nareas of the API that are and are not supported and how they impact your\nproject in the future.\u003c/p\u003e\n\u003cp\u003eThis document will be considered a living document. Supported timelines,\nbackport targets and API stability guarantees will be updated here as they\nchange.\u003c/p\u003e\n\u003cp\u003eIf there is something that you require or this document leaves out, please\nreach out by \u003ca href=\"https://github.com/containerd/containerd/issues\"\u003efiling an issue\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eReleases\u003c/h2\u003e\n\u003cp\u003eReleases of containerd will be versioned using dotted triples, similar to\n\u003ca href=\"http://semver.org/\"\u003eSemantic Version\u003c/a\u003e. For the purposes of this document, we\nwill refer to the respective components of this triple as\n\u003ccode\u003e\u0026lt;major\u0026gt;.\u0026lt;minor\u0026gt;.\u0026lt;patch\u0026gt;\u003c/code\u003e. The version number may have additional information,\nsuch as alpha, beta and release candidate qualifications. Such releases will be\nconsidered \u0026quot;pre-releases\u0026quot;.\u003c/p\u003e\n\u003ch3\u003eMajor and Minor Releases\u003c/h3\u003e\n\u003cp\u003eMajor and minor releases of containerd will be made from main. Releases of\ncontainerd will be marked with GPG signed tags and announced at\n\u003ca href=\"https://github.com/containerd/containerd/releases\"\u003ehttps://github.com/containerd/containerd/releases\u003c/a\u003e. The tag will be of the\nformat \u003ccode\u003ev\u0026lt;major\u0026gt;.\u0026lt;minor\u0026gt;.\u0026lt;patch\u0026gt;\u003c/code\u003e and should be made with the command \u003ccode\u003egit tag -s v\u0026lt;major\u0026gt;.\u0026lt;minor\u0026gt;.\u0026lt;patch\u0026gt;\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eAfter a minor release, a branch will be created, with the format\n\u003ccode\u003erelease/\u0026lt;major\u0026gt;.\u0026lt;minor\u0026gt;\u003c/code\u003e from the minor tag. All further patch releases will\nbe done from that branch. For example, once we release \u003ccode\u003ev1.0.0\u003c/code\u003e, a branch\n\u003ccode\u003erelease/1.0\u003c/code\u003e will be created from that tag. All future patch releases will be\ndone against that branch.\u003c/p\u003e\n\u003ch3\u003eRelease Cadence\u003c/h3\u003e\n\u003cp\u003eSince containerd v2.3 in April 2026, minor releases are provided on a time basis\nwith a cadence of 4 months. New minor releases are scheduled for April, August,\nand December of each year. This cadence is synchronized with the Kubernetes\nrelease schedule to ensure that new features in containerd can be smoothly\nadopted by new Kubernetes releases.\u003c/p\u003e\n\u003cp\u003eThe maintainers will maintain a roadmap and milestones for each release, however,\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/2976f38ccbfcda5ef1364d63d60b0a304e4bf94a\"\u003e\u003ccode\u003e2976f38\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13325\"\u003e#13325\u003c/a\u003e from dmcgowan/prepare-v2.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/77eeb2d8ea1d334cd64fc205411869ec3720f674\"\u003e\u003ccode\u003e77eeb2d\u003c/code\u003e\u003c/a\u003e Prepare release notes for v2.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/c55ada3f312a965eb9aaf12477416e8cc2c940cf\"\u003e\u003ccode\u003ec55ada3\u003c/code\u003e\u003c/a\u003e Update api to v1.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/ebf4404e39a1a11975e5bf78127e44ff2b1b3788\"\u003e\u003ccode\u003eebf4404\u003c/code\u003e\u003c/a\u003e Update release document\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/f49640ec1f78fd0b04aca64c10ffaff3dfec5b12\"\u003e\u003ccode\u003ef49640e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13321\"\u003e#13321\u003c/a\u003e from dmcgowan/remove-erofs-fsmerge-threshold\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/e3d5fe82b16cd6d05c33150f69800822a9205b0f\"\u003e\u003ccode\u003ee3d5fe8\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13322\"\u003e#13322\u003c/a\u003e from dmcgowan/prepare-api-v1.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/ee17fa123684303d6f6e083c318146d0425961d7\"\u003e\u003ccode\u003eee17fa1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13317\"\u003e#13317\u003c/a\u003e from fuweid/fix-merge-issue\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/b7f8c3510d9135ad56277140f9e5aa86eb0e9a66\"\u003e\u003ccode\u003eb7f8c35\u003c/code\u003e\u003c/a\u003e erofs: remove fsmerge threshold from snapshotter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/8f2fce4ce57fd3a5772d479d5cbee1707ef7b3b4\"\u003e\u003ccode\u003e8f2fce4\u003c/code\u003e\u003c/a\u003e Prepare release notes for v1.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/ce2955c7ce9d142e7d9f5e902037e625930033b9\"\u003e\u003ccode\u003ece2955c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/13319\"\u003e#13319\u003c/a\u003e from mxpv/depr\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/containerd/containerd/compare/v2.2.2...v2.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.17.2 to 5.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bc930f4cbe095a3e1d49273655f73fcef7d41a42\"\u003e\u003ccode\u003ebc930f4\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2065\"\u003e#2065\u003c/a\u003e from go-git/commit-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/d315264343cead712aa9eb56475c2ec96f5ecef1\"\u003e\u003ccode\u003ed315264\u003c/code\u003e\u003c/a\u003e plumbing: object, Reset object before decode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6e1d34890a4dae8a0df738e531234bd60b7e9b66\"\u003e\u003ccode\u003e6e1d348\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tree handling with upstream\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e134ba34cf95ed0167e5b1df36a933d7bde9d02d\"\u003e\u003ccode\u003ee134ba3\u003c/code\u003e\u003c/a\u003e tests: Skip double checks in Git v2.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1971422f6b1bec9176061b3293306981cfff981e\"\u003e\u003ccode\u003e1971422\u003c/code\u003e\u003c/a\u003e tests: Add git conformance tests for signing verification\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a387aa8857a8fbba8e74b7f5485e9e030669ab5d\"\u003e\u003ccode\u003ea387aa8\u003c/code\u003e\u003c/a\u003e plumbing: object, Add ErrMalformedTag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f415670d906b5c6169d1fdc64f3f9f1d33eb6f9c\"\u003e\u003ccode\u003ef415670\u003c/code\u003e\u003c/a\u003e plumbing: object, Decode Tag headers via a state machine\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5b0cd38a62e2336bb5f1a2ad0eb8ac8f9e7b740e\"\u003e\u003ccode\u003e5b0cd38\u003c/code\u003e\u003c/a\u003e plumbing: object, Reject multi-signature commits at Verify\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fe8ed6223a6079d9fd84d853362a996e7df175fb\"\u003e\u003ccode\u003efe8ed62\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tag.EncodeWithoutSignature with Commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/98e337d5bdc4c0536a40ab7381b2231f7e0b15cd\"\u003e\u003ccode\u003e98e337d\u003c/code\u003e\u003c/a\u003e plumbing: object, Add support for Tag.SignatureSHA256\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.2 to 0.21.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2254\"\u003egoogle/go-containerregistry#2254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate to Go 1.26.2 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2255\"\u003egoogle/go-containerregistry#2255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2257\"\u003egoogle/go-containerregistry#2257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 in the go-deps group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2260\"\u003egoogle/go-containerregistry#2260\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.4...v0.21.5\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.4...v0.21.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.21.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ego.mod: do not make a viral minimum go version by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2237\"\u003egoogle/go-containerregistry#2237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid pruning absolute links from extracted and flattened images by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2241\"\u003egoogle/go-containerregistry#2241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump the go-deps group across 3 directories with 5 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2245\"\u003egoogle/go-containerregistry#2245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: update to go1.25.8, and use separate .go-version file by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2246\"\u003egoogle/go-containerregistry#2246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump CI go version to 1.26.1 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2242\"\u003egoogle/go-containerregistry#2242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump codecov/codecov-action from 5.5.2 to 5.5.3 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2240\"\u003egoogle/go-containerregistry#2240\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efork distribution client v3 auth-challenge as an internal package (squashed) by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2248\"\u003egoogle/go-containerregistry#2248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: validate Bearer realm URL to prevent SSRF by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2243\"\u003egoogle/go-containerregistry#2243\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erevert path traversal and symlink escape from \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2227\"\u003e#2227\u003c/a\u003e by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2250\"\u003egoogle/go-containerregistry#2250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pkg/v1/google/auth tests for arm64  by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2085\"\u003egoogle/go-containerregistry#2085\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egoreleaser: Update goreleaser config and GH action by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2253\"\u003egoogle/go-containerregistry#2253\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2243\"\u003egoogle/go-containerregistry#2243\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.3...v0.21.4\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.3...v0.21.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.21.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdds local file support to the \u003ccode\u003ecrane index\u003c/code\u003e subcommand  by \u003ca href=\"https://github.com/edwardthiele\"\u003e\u003ccode\u003e@​edwardthiele\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2223\"\u003egoogle/go-containerregistry#2223\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emigrate to github.com/moby/moby modules by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2228\"\u003egoogle/go-containerregistry#2228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump the go-deps group across 4 directories with 7 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2233\"\u003egoogle/go-containerregistry#2233\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2220\"\u003egoogle/go-containerregistry#2220\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: reject path traversal and symlink escape in Extract by \u003ca href=\"https://github.com/KevinZhao\"\u003e\u003ccode\u003e@​KevinZhao\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2227\"\u003egoogle/go-containerregistry#2227\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etarball: detect symlink cycles in extractFileFromTar by \u003ca href=\"https://github.com/vnykmshr\"\u003e\u003ccode\u003e@​vnykmshr\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2232\"\u003egoogle/go-containerregistry#2232\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebump golang to 1.25.7 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2236\"\u003egoogle/go-containerregistry#2236\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/edwardthiele\"\u003e\u003ccode\u003e@​edwardthiele\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2223\"\u003egoogle/go-containerregistry#2223\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2228\"\u003egoogle/go-containerregistry#2228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KevinZhao\"\u003e\u003ccode\u003e@​KevinZhao\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2227\"\u003egoogle/go-containerregistry#2227\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vnykmshr\"\u003e\u003ccode\u003e@​vnykmshr\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2232\"\u003egoogle/go-containerregistry#2232\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/5b80281da727dae218e1697ab8529b631b9efa64\"\u003e\u003ccode\u003e5b80281\u003c/code\u003e\u003c/a\u003e build(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 in the go-deps gro...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/b99bca24a8df1bd88afc1d299d4c0ebba0555cf8\"\u003e\u003ccode\u003eb99bca2\u003c/code\u003e\u003c/a\u003e build(deps): bump aws-actions/configure-aws-credentials (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2257\"\u003e#2257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/f8be1d442e6fc85c791e4aa50155aa8806ca8312\"\u003e\u003ccode\u003ef8be1d4\u003c/code\u003e\u003c/a\u003e update to Go 1.26.2 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2255\"\u003e#2255\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/87ad88b4a000e418add5c1bb4ae1da908cbc3b85\"\u003e\u003ccode\u003e87ad88b\u003c/code\u003e\u003c/a\u003e Bump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2254\"\u003e#2254\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e8813dd0a00e799459cae01d8a4659b9be2fd871\"\u003e\u003ccode\u003ee8813dd\u003c/code\u003e\u003c/a\u003e goreleaser: Update goreleaser config and GH action for releases (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2253\"\u003e#2253\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e90447d319233b94dcdc75a24246ccbee6d1e72a\"\u003e\u003ccode\u003ee90447d\u003c/code\u003e\u003c/a\u003e replace gcloud in binary calls in pkg/v1/google tests (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2085\"\u003e#2085\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/0d0368c2a5fa524c4765a6c0b7df4ff6d6951471\"\u003e\u003ccode\u003e0d0368c\u003c/code\u003e\u003c/a\u003e revert path traversal and symlink escape changes (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2250\"\u003e#2250\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a2f47d4202de443f68e8bafa95ddd41407327168\"\u003e\u003ccode\u003ea2f47d4\u003c/code\u003e\u003c/a\u003e transport: validate Bearer realm URL to prevent SSRF (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2243\"\u003e#2243\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/19a36cd8c44dd465a84f9d6ffea3009023f73660\"\u003e\u003ccode\u003e19a36cd\u003c/code\u003e\u003c/a\u003e fork distribution client v3 auth-challenge as an internal package (squashed) ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c612a9b20a4c533454b7fa8b39a8c8139065f0b1\"\u003e\u003ccode\u003ec612a9b\u003c/code\u003e\u003c/a\u003e Bump codecov/codecov-action from 5.5.2 to 5.5.3 in the actions group (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2240\"\u003e#2240\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/hashicorp/hc-install` from 0.9.3 to 0.9.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hashicorp/hc-install/releases\"\u003egithub.com/hashicorp/hc-install's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ego.mod: Lower compatibility constraint from 1.25.8 to 1.25.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/376\"\u003e#376\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.4\u003c/h2\u003e\n\u003cp\u003eENHANCEMENTS:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Prefer \u003ccode\u003ego.mod\u003c/code\u003e if Go versions mismatch (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/368\"\u003e#368\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBUG FIXES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate PGP pubkey to replace expired one (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/355\"\u003e#355\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/372\"\u003e#372\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.18.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/349\"\u003e#349\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/363\"\u003e#363\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/369\"\u003e#369\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/360\"\u003e#360\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.1 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/351\"\u003e#351\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/358\"\u003e#358\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/mod from 0.33.0 to 0.35.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/354\"\u003e#354\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/365\"\u003e#365\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eINTERNAL:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ego: bump to 1.25 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/357\"\u003e#357\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/2f46abfd7f9e78d5df1e17d599a6c12098432cee\"\u003e\u003ccode\u003e2f46abf\u003c/code\u003e\u003c/a\u003e Prepare for 0.9.5 release (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/377\"\u003e#377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/78781831051e592c57ee890addd7cddd03578878\"\u003e\u003ccode\u003e7878183\u003c/code\u003e\u003c/a\u003e go.mod: Keep compatibility constraint separate from build (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/376\"\u003e#376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/d5841a31c41f78fabaf2ea59e5816e6616e0f618\"\u003e\u003ccode\u003ed5841a3\u003c/code\u003e\u003c/a\u003e version: cleanup after 0.9.4 release (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/374\"\u003e#374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/13edb5e7b4b6bd1b62729e852fede0e1a5135a39\"\u003e\u003ccode\u003e13edb5e\u003c/code\u003e\u003c/a\u003e Prepare for 0.9.4 release (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/373\"\u003e#373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/8233b7ab4ae1d7e063a52f4f647a67c50af7c03c\"\u003e\u003ccode\u003e8233b7a\u003c/code\u003e\u003c/a\u003e pubkey: Replace two keys with the new one (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/372\"\u003e#372\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/99a174c773ddf5cca96008ee8b3444c88e1af75b\"\u003e\u003ccode\u003e99a174c\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/369\"\u003e#369\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/77c3fbdd247381c5b3ef58020faec881b88a6031\"\u003e\u003ccode\u003e77c3fbd\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 in the github-a...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/dbcbf5ff1d32880435f7abfba5b40c1d645b7ec9\"\u003e\u003ccode\u003edbcbf5f\u003c/code\u003e\u003c/a\u003e build: Prefer go.mod if Go versions mismatch (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/368\"\u003e#368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/ad8a98be88668e65a93d45fdfe3e174229acc6f7\"\u003e\u003ccode\u003ead8a98b\u003c/code\u003e\u003c/a\u003e build(deps): bump golang.org/x/mod from 0.34.0 to 0.35.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/365\"\u003e#365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/9a8707266a2315a7520cab7e488b90996c1dea77\"\u003e\u003ccode\u003e9a87072\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/360\"\u003e#360\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hashicorp/hc-install/compare/v0.9.3...v0.9.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/hashicorp/terraform-exec` from 0.25.0 to 0.25.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hashicorp/terraform-exec/releases\"\u003egithub.com/hashicorp/terraform-exec's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.25.2\u003c/h2\u003e\n\u003cp\u003eNOTES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ego.mod: Lower compatibility constraint from 1.25.8 to 1.25.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/hc-install from 0.9.4 to 0.9.5 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.25.1\u003c/h2\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/zclconf/go-cty from 1.17.0 to 1.18.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/574\"\u003e#574\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/573\"\u003e#573\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/576\"\u003e#576\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/hc-install from 0.9.3 to 0.9.4 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hashicorp/terraform-exec/blob/main/CHANGELOG.md\"\u003egithub.com/hashicorp/terraform-exec's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e0.25.2 (April 29, 2026)\u003c/h1\u003e\n\u003cp\u003eNOTES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ego.mod: Lower compatibility constraint from 1.25.8 to 1.25.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/hc-install from 0.9.4 to 0.9.5 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.25.1 (April 22, 2026)\u003c/h1\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/zclconf/go-cty from 1.17.0 to 1.18.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/574\"\u003e#574\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/573\"\u003e#573\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/576\"\u003e#576\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/hc-install from 0.9.3 to 0.9.4 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/56a0d8b1e947ab88cd0f7a2752495ab90e3f0b96\"\u003e\u003ccode\u003e56a0d8b\u003c/code\u003e\u003c/a\u003e v0.25.2 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/94a3afe0d3d6b0d7495b2287bdc9f6f68ce3414f\"\u003e\u003ccode\u003e94a3afe\u003c/code\u003e\u003c/a\u003e Update Changelog in preparation for 0.25.2 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/586\"\u003e#586\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/ac26db5996e0ed0b4f9a8d1d1b5ce51f4ef960e7\"\u003e\u003ccode\u003eac26db5\u003c/code\u003e\u003c/a\u003e go.mod: Keep compatibility constraint separate from build (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/e856badee6e800dad3f8f2dfdc9c0b25b0e3b938\"\u003e\u003ccode\u003ee856bad\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/hashicorp/hc-install from 0.9.4 to 0.9.5 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/5418a753fa2599ebb4e296dc22d16564e0ff54d8\"\u003e\u003ccode\u003e5418a75\u003c/code\u003e\u003c/a\u003e v0.25.1 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/c5053a65eed7ffbf6ab4aaab14a24dfc22633f92\"\u003e\u003ccode\u003ec5053a6\u003c/code\u003e\u003c/a\u003e Update Changelog in preparation for 0.25.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/580\"\u003e#580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/f5ab655f3dba9ca5f5762b47e9a983818f7bd01d\"\u003e\u003ccode\u003ef5ab655\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/hashicorp/hc-install from 0.9.3 to 0.9.4 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/f49a90a4b6c8af99b43cc3444d70f9d7f779bde7\"\u003e\u003ccode\u003ef49a90a\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/576\"\u003e#576\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/a919c3c63f65c6366f60ad89108834510459f155\"\u003e\u003ccode\u003ea919c3c\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/573\"\u003e#573\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/5b8e8921441672128aca27007f40f286a6152266\"\u003e\u003ccode\u003e5b8e892\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/574\"\u003e#574\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hashicorp/terraform-exec/compare/v0.25.0...v0.25.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/in-toto/in-toto-golang` from 0.10.0 to 0.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/in-toto/in-toto-golang/releases\"\u003egithub.com/in-toto/in-toto-golang's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): bump the all group with 2 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/453\"\u003ein-toto/in-toto-golang#453\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump the all group across 1 directory with 2 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/452\"\u003ein-toto/in-toto-golang#452\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/457\"\u003ein-toto/in-toto-golang#457\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/459\"\u003ein-toto/in-toto-golang#459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ematch: Replace ^ with ! for negation in character classes by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/462\"\u003ein-toto/in-toto-golang#462\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0\"\u003ehttps://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/36d782ffb2ca3adbffcdce1fd971c23319dd4469\"\u003e\u003ccode\u003e36d782f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/462\"\u003e#462\u003c/a\u003e from in-toto/fix-negation-character\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/4a09e3bbc44bc687577b6532e57e8a4abfa5ddf4\"\u003e\u003ccode\u003e4a09e3b\u003c/code\u003e\u003c/a\u003e match: Replace ^ with ! for negation in character classes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/c3302e8bc36e46119f7ae17c07eb879ff3507caa\"\u003e\u003ccode\u003ec3302e8\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/459\"\u003e#459\u003c/a\u003e from in-toto/dependabot/go_modules/github.com/go-jose...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/016e87efbb55c6dd8772ce227002eeb1b6e3f593\"\u003e\u003ccode\u003e016e87e\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/5b9df76e685eaa0a950ea9ba3f4a5561e87e13ad\"\u003e\u003ccode\u003e5b9df76\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/457\"\u003e#457\u003c/a\u003e from in-toto/dependabot/go_modules/google.golang.org/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/595b3fe0a13f481eb0ef898ccaff5e345e492a2f\"\u003e\u003ccode\u003e595b3fe\u003c/code\u003e\u003c/a\u003e chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/e396d248c9cf19f9e144f4e90c476af88742bf35\"\u003e\u003ccode\u003ee396d24\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/452\"\u003e#452\u003c/a\u003e from in-toto/dependabot/github_actions/all-502588e1ca\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/142b779059713332fe5c7856e98f1c564c6d6a09\"\u003e\u003ccode\u003e142b779\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/453\"\u003e#453\u003c/a\u003e from in-toto/dependabot/go_modules/all-d8ef5820aa\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/f741bcc43330554606b813fa0f8fe0c284fcdaea\"\u003e\u003ccode\u003ef741bcc\u003c/code\u003e\u003c/a\u003e chore(deps): bump the all group with 2 updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/c374dc9808137651fe8754eed363ec816cd59d2a\"\u003e\u003ccode\u003ec374dc9\u003c/code\u003e\u003c/a\u003e chore(deps): bump the all group across 1 directory with 2 updates\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/magefile/mage` from 1.17.1 to 1.17.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/magefile/mage/releases\"\u003egithub.com/magefile/mage's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.17.2 - Tab Completion\u003c/h2\u003e\n\u003ch2\u003eWhat's New\u003c/h2\u003e\n\u003cp\u003eTab completion is now available by running \u003ccode\u003emage -install \u0026lt;shell\u0026gt;\u003c/code\u003e where the currently supported shells are zsh, bash, fish, and powershell.  This was a long-requested feature that always made me nervous because it presumes a lot about your local machine... but I guess we're in for it now. Please report any issues you see.... it's rather a hard feature to test. But... it works on my machine? 😬\u003c/p\u003e\n\u003cp\u003eFixed a backtick bug in comments and \u003ccode\u003emage -l\u003c/code\u003e and \u003ccode\u003emage -h\u003c/code\u003e no longer require compiling a binary, so they're way faster now.\u003c/p\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e0953947c1673fd745a51c032aadeb3c63f9f3368 make -h no long require compiling (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/552\"\u003e#552\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e791a5b40794d4bcdd840f7e7523d886ac25b2a96 Support Tab Completion (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/551\"\u003e#551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecff82a6fab83f756a382e841029a537714bd9a02 fix bug \u003ca href=\"https://redirect.github.com/magefile/mage/issues/537\"\u003e#537\u003c/a\u003e - backticks in comments break output (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/544\"\u003e#544\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magefile/mage/commit/0953947c1673fd745a51c032aadeb3c63f9f3368\"\u003e\u003ccode\u003e0953947\u003c/code\u003e\u003c/a\u003e make -h no long require compiling (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/552\"\u003e#552\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magefile/mage/commit/791a5b40794d4bcdd840f7e7523d886ac25b2a96\"\u003e\u003ccode\u003e791a5b4\u003c/code\u003e\u003c/a\u003e Support Tab Completion (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/551\"\u003e#551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magefile/mage/commit/cff82a6fab83f756a382e841029a537714bd9a02\"\u003e\u003ccode\u003ecff82a6\u003c/code\u003e\u003c/a\u003e fix bug \u003ca href=\"https://redirect.github.com/magefile/mage/issues/537\"\u003e#537\u003c/a\u003e - backticks in comments break output (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/544\"\u003e#544\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/magefile/mage/compare/v1.17.1...v1.17.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/mattn/go-shellwords` from 1.0.12 to 1.0.13\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-shellwords/commit/fd1aa6cdc3ae8152427063af41b4c89b9a2c9742\"\u003e\u003ccode\u003efd1aa6c\u003c/code\u003e\u003c/a\u003e Run gofmt: add missing //go:build directives and trailing newlines\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-shellwords/commit/e73986e335d259042797a7b3fdcbf1fd935908aa\"\u003e\u003ccode\u003ee73986e\u003c/code\u003e\u003c/a\u003e Treat bare ')' as syntax error regardless of ParseBacktick\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-shellwords/commit/9a7880332903fa5e4ab1ca3b6a250a1efb8c6a0f\"\u003e\u003ccode\u003e9a78803\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/mattn/go-shellwords/issues/60\"\u003e#60\u003c/a\u003e from scumfrog/security-fix-cve\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-shellwords/commit/b074fa047f436778aa95c2c98617e85b28992e6b\"\u003e\u003ccode\u003eb074fa0\u003c/code\u003e\u003c/a\u003e fix: preserve parser compatibility for unmatched ')' handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-shellwords/commit/735b5e8f670e10e77a40bb2c2bbf618be9b3f9b0\"\u003e\u003ccode\u003e735b5e8\u003c/code\u003e\u003c/a\u003e Implement tests for shellwords parser functionality\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-shellwords/commit/e2951fc82d97921ba06a218a46f683441204d07b\"\u003e\u003ccode\u003ee2951fc\u003c/code\u003e\u003c/a\u003e Fix dollarQuote state management in shellwords.go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-shellwords/commit/551a1d06ad870a8ad2a82043d29da07d7036fa34\"\u003e\u003ccode\u003e551a1d0\u003c/code\u003e\u003c/a\u003e Update CI: Go 1.25/1.26 and latest GitHub Actions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-shellwords/commit/f3bbb6f7f6510c6059561a79e3f105578be4fcce\"\u003e\u003ccode\u003ef3bbb6f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/mattn/go-shellwords/issues/53\"\u003e#53\u003c/a\u003e from ndeloof/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-shellwords/commit/f6737fe5ef6a6aa549c31c4afeaf8e8305ecd408\"\u003e\u003ccode\u003ef6737fe\u003c/code\u003e\u003c/a\u003e parse \u003ccode\u003e\\t\u003c/code\u003e as TAB, not escaped \u003ccode\u003et\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mattn/go-shellwords/compare/v1.0.12...v1.0.13\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/open-policy-agent/opa` from 1.15.2 to 1.16.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-policy-agent/opa/releases\"\u003egithub.com/open-policy-agent/opa's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.16.2\u003c/h2\u003e\n\u003cp\u003eThis release updates the version of Go used to build the OPA binaries and images to 1.26.3;\naddressing \u003ca href=\"https://groups.google.com/g/golang-announce/c/qcCIEXso47M\"\u003ea number of vulnerabilities\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev1.16.1\u003c/h2\u003e\n\u003cp\u003eThis is a patch release addressing a regression in the plugin manager that may cause the service to hang on shutdown (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/8590\"\u003e#8590\u003c/a\u003e).\u003c/p\u003e\n\u003ch2\u003ev1.16.0\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!WARNING]\u003c/p\u003e\n\u003cp\u003eA regression has been found in the plugin manager, which may cause the service to hang on shutdown.\nUsers are advised to go directly to v1.16.1.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThis release contains a mix of new features, performance improvements, and bugfixes. Notably:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNew \u003ccode\u003euri.parse\u003c/code\u003e and \u003ccode\u003euri.is_valid\u003c/code\u003e built-in functions\u003c/li\u003e\n\u003cli\u003eData API Request/Response Metadata\u003c/li\u003e\n\u003cli\u003ePrometheus metrics exported via OTLP\u003c/li\u003e\n\u003cli\u003eFormatter improvements\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003e\u003cem\u003eNOTE:\u003c/em\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eIn v1.15.x, OPA was dropping logs for bundle downloads, \u003ccode\u003eprint()\u003c/code\u003e calls and other plugin-originated logs.\nUsers are advised to update, v1.16.0 fixes this bug in (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/8544\"\u003e#8544\u003c/a\u003e).\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eNew \u003ccode\u003euri.parse\u003c/code\u003e and \u003ccode\u003euri.is_valid\u003c/code\u003e built-in functions (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/h3\u003e\n\u003cp\u003eTwo new \u003ca href=\"https://www.openpolicyagent.org/docs/policy-reference/builtins\"\u003ebuilt-in functions\u003c/a\u003e have been added: \u003ccode\u003euri.parse\u003c/code\u003e for parsing a given URI, and \u003ccode\u003euri.is_valid\u003c/code\u003e for verifying the structure of a given URI.\u003c/p\u003e\n\u003ch4\u003euri.parse\u003c/h4\u003e\n\u003cp\u003eParses a URI and returns an object containing its components according to \u003ca href=\"https://www.rfc-editor.org/rfc/rfc3986.html\"\u003eRFC 3986\u003c/a\u003e. Empty components are omitted.\u003c/p\u003e\n\u003cpre lang=\"rego\"\u003e\u003ccode\u003epackage example\r\n\u003cp\u003etest_uri if {\nuri.parse(\u0026quot;\u003ca href=\"https://example.com:8080/api?q=1#top\"\u003ehttps://example.com:8080/api?q=1#top\u003c/a\u003e\u0026quot;) == {\n\u0026quot;scheme\u0026quot;: \u0026quot;https\u0026quot;,\n\u0026quot;hostname\u0026quot;: \u0026quot;example.com\u0026quot;,\n\u0026quot;port\u0026quot;: \u0026quot;8080\u0026quot;,\n\u0026quot;path\u0026quot;: \u0026quot;/api\u0026quot;,\n\u0026quot;raw_path\u0026quot;: \u0026quot;/api\u0026quot;,\n\u0026quot;raw_query\u0026quot;: \u0026quot;q=1\u0026quot;,\n\u0026quot;fragment\u0026quot;: \u0026quot;top\u0026quot;,\n}\n}\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md\"\u003egithub.com/open-policy-agent/opa's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.16.2\u003c/h2\u003e\n\u003cp\u003eThis release updates the version of Go used to build the OPA binaries and images to 1.26.3;\naddressing \u003ca href=\"https://groups.google.com/g/golang-announce/c/qcCIEXso47M\"\u003ea number of vulnerabilities\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003e1.16.1\u003c/h2\u003e\n\u003cp\u003eThis is a patch release addressing a regression (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/8590\"\u003e#8590\u003c/a\u003e) in the plugin manager that may cause the service to hang on shutdown.\u003c/p\u003e\n\u003ch2\u003e1.16.0\u003c/h2\u003e\n\u003cp\u003eThis release contains a mix of new features, performance improvements, and bugfixes. Notably:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNew \u003ccode\u003euri.parse\u003c/code\u003e and \u003ccode\u003euri.is_valid\u003c/code\u003e built-in functions\u003c/li\u003e\n\u003cli\u003eData API Request/Response Metadata\u003c/li\u003e\n\u003cli\u003ePrometheus metrics exported via OTLP\u003c/li\u003e\n\u003cli\u003eFormatter improvements\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003e\u003cem\u003eNOTE:\u003c/em\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eIn v1.15.x, OPA was dropping logs for bundle downloads, \u003ccode\u003eprint()\u003c/code\u003e calls and other plugin-originated logs.\nUsers are advised to update, v1.16.0 fixes this bug in (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/8544\"\u003e#8544\u003c/a\u003e).\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eNew \u003ccode\u003euri.parse\u003c/code\u003e and \u003ccode\u003euri.is_valid\u003c/code\u003e built-in functions (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/h3\u003e\n\u003cp\u003eTwo new \u003ca href=\"https://www.openpolicyagent.org/docs/policy-reference/builtins\"\u003ebuilt-in functions\u003c/a\u003e have been added: \u003ccode\u003euri.parse\u003c/code\u003e for parsing a given URI, and \u003ccode\u003euri.is_valid\u003c/code\u003e for verifying the structure of a given URI.\u003c/p\u003e\n\u003ch4\u003euri.parse\u003c/h4\u003e\n\u003cp\u003eParses a URI and returns an object containing its components according to \u003ca href=\"https://www.rfc-editor.org/rfc/rfc3986.html\"\u003eRFC 3986\u003c/a\u003e. Empty components are omitted.\u003c/p\u003e\n\u003cpre lang=\"rego\"\u003e\u003ccode\u003epackage example\n\u003cp\u003etest_uri if {\nuri.parse(\u0026quot;\u003ca href=\"https://example.com:8080/api?q=1#top\"\u003ehttps://example.com:8080/api?q=1#top\u003c/a\u003e\u0026quot;) == {\n\u0026quot;scheme\u0026quot;: \u0026quot;https\u0026quot;,\n\u0026quot;hostname\u0026quot;: \u0026quot;example.com\u0026quot;,\n\u0026quot;port\u0026quot;: \u0026quot;8080\u0026quot;,\n\u0026quot;path\u0026quot;: \u0026quot;/api\u0026quot;,\n\u0026quot;raw_path\u0026quot;: \u0026quot;/api\u0026quot;,\n\u0026quot;raw_query\u0026quot;: \u0026quot;q=1\u0026quot;,\n\u0026quot;fragment\u0026quot;: \u0026quot;top\u0026quot;,\n}\n}\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003ch4\u003euri.is_valid\u003c/h4\u003e\n\u003cp\u003eReturns \u003ccode\u003etrue\u003c/code\u003e if the input can be parsed as a URI, \u003ccode\u003efalse\u003c/code\u003e otherwise.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/85f6d990d19094da38e829561813e7da7fbae272\"\u003e\u003ccode\u003e85f6d99\u003c/code\u003e\u003c/a\u003e Prepare v1.16.2 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/1466714b633b056d8e04551f60457fec2f0aad99\"\u003e\u003ccode\u003e1466714\u003c/code\u003e\u003c/a\u003e build: bump go 1.26.2 -\u0026gt; 1.26.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/a72f9fa5e7c5e10a614f44dbe40700f90816d59d\"\u003e\u003ccode\u003ea72f9fa\u003c/code\u003e\u003c/a\u003e Prepare v1.16.1 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/9339812894af83578c840590bf1b9a33da472630\"\u003e\u003ccode\u003e9339812\u003c/code\u003e\u003c/a\u003e plugins: Ensure plugin status functions don't hang after manager is stopped (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/f3adf61f72b67e06115178851e3ffd7e2ef1a0cd\"\u003e\u003ccode\u003ef3adf61\u003c/code\u003e\u003c/a\u003e Release v1.16.0 (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8581\"\u003e#8581\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/c5a446f09d6377bca3dfc6d1c6ddfd7058739205\"\u003e\u003ccode\u003ec5a446f\u003c/code\u003e\u003c/a\u003e Add regression test for comparing objects with array keys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/7bc92c60755f51de00a950edfead4760b2cd8e3a\"\u003e\u003ccode\u003e7bc92c6\u003c/code\u003e\u003c/a\u003e workflow: update benchmarks notebook generation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/882d5a71171899e3f17d2b6ad16a962a587cc3a2\"\u003e\u003ccode\u003e882d5a7\u003c/code\u003e\u003c/a\u003e build(deps): bump the dependencies group across 2 directories with 9 updates ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/b33179c25828d2c0ea0801b95238616396a37ddb\"\u003e\u003ccode\u003eb33179c\u003c/code\u003e\u003c/a\u003e docs: Fix input value type in not undefined example (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8580\"\u003e#8580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/3d602ca6a35a3ddbdc456653c5e4c34de30aea7e\"\u003e\u003ccode\u003e3d602ca\u003c/code\u003e\u003c/a\u003e perf: Add CopyNonGround() methods for Array, Set, and Object (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8323\"\u003e#8323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-policy-agent/opa/compare/v1.15.2...v1.16.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/openvex/go-vex` from 0.2.7 to 0.2.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openvex/go-vex/releases\"\u003egithub.com/openvex/go-vex's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.2.8\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openvex/go-vex/commit/a340b5d7c0a6b2254962d227a36376917790e342\"\u003e\u003ccode\u003ea340b5d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/openvex/go-vex/issues/201\"\u003e#201\u003c/a\u003e from openvex/dependabot/go_modules/all-218c634111\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openvex/go-vex/commit/214cbfcd64d6fd07ab1a9d3869829a46307728e8\"\u003e\u003ccode\u003e214cbfc\u003c/code\u003e\u003c/a\u003e Bump github.com/package-url/packageurl-go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https:...\n\n_Description has been truncated_","html_url":"https://github.com/ScorpionBytes/trivy/pull/36","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ScorpionBytes%2Ftrivy/issues/36","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/36/packages"}},{"old_version":"0.21.4","new_version":"0.21.5","update_type":"patch","path":null,"pr_created_at":"2026-05-22T11:51:16.000Z","version_change":"0.21.4 → 0.21.5","issue":{"uuid":"4502368989","node_id":"PR_kwDOCsUTCM7eVJft","number":10717,"state":"closed","title":"chore(deps): bump the common group across 1 directory with 22 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":6,"pull_request":true,"closed_at":"2026-05-27T05:36:39.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-22T11:51:16.000Z","updated_at":"2026-05-27T05:36:41.000Z","time_to_close":409523,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"common","update_count":22,"packages":[{"name":"github.com/Azure/azure-sdk-for-go/sdk/azcore","old_version":"1.21.0","new_version":"1.21.1","repository_url":"https://github.com/Azure/azure-sdk-for-go"},{"name":"github.com/alicebob/miniredis/v2","old_version":"2.37.0","new_version":"2.38.0","repository_url":"https://github.com/alicebob/miniredis"},{"name":"github.com/apparentlymart/go-cidr","old_version":"1.1.0","new_version":"1.1.1","repository_url":"https://github.com/apparentlymart/go-cidr"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.4","new_version":"0.21.5","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/google/jsonschema-go","old_version":"0.4.2","new_version":"0.4.3","repository_url":"https://github.com/google/jsonschema-go"},{"name":"github.com/hashicorp/hc-install","old_version":"0.9.3","new_version":"0.9.5","repository_url":"https://github.com/hashicorp/hc-install"},{"name":"github.com/hashicorp/terraform-exec","old_version":"0.25.0","new_version":"0.25.2","repository_url":"https://github.com/hashicorp/terraform-exec"},{"name":"github.com/magefile/mage","old_version":"1.17.1","new_version":"1.17.2","repository_url":"https://github.com/magefile/mage"},{"name":"github.com/nikolalohinski/gonja/v2","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/nikolalohinski/gonja"},{"name":"github.com/open-policy-agent/opa","old_version":"1.15.2","new_version":"1.16.2","repository_url":"https://github.com/open-policy-agent/opa"},{"name":"github.com/package-url/packageurl-go","old_version":"0.1.5","new_version":"0.1.6","repository_url":"https://github.com/package-url/packageurl-go"},{"name":"github.com/secure-systems-lab/go-securesystemslib","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/secure-systems-lab/go-securesystemslib"},{"name":"golang.org/x/crypto","old_version":"0.50.0","new_version":"0.51.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/mod","old_version":"0.35.0","new_version":"0.36.0","repository_url":"https://github.com/golang/mod"},{"name":"golang.org/x/net","old_version":"0.53.0","new_version":"0.54.0","repository_url":"https://github.com/golang/net"},{"name":"golang.org/x/tools","old_version":"0.44.0","new_version":"0.45.0","repository_url":"https://github.com/golang/tools"},{"name":"golang.org/x/vuln","old_version":"1.1.4","new_version":"1.3.0","repository_url":"https://github.com/golang/vuln"},{"name":"gopkg.in/ini.v1","old_version":"1.67.1","new_version":"1.67.2"},{"name":"modernc.org/sqlite","old_version":"1.48.2","new_version":"1.50.1"}],"path":null,"ecosystem":"go"},"body":"Bumps the common group with 19 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.21.0` | `1.21.1` |\n| [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) | `2.37.0` | `2.38.0` |\n| [github.com/apparentlymart/go-cidr](https://github.com/apparentlymart/go-cidr) | `1.1.0` | `1.1.1` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.4` | `0.21.5` |\n| [github.com/google/jsonschema-go](https://github.com/google/jsonschema-go) | `0.4.2` | `0.4.3` |\n| [github.com/hashicorp/hc-install](https://github.com/hashicorp/hc-install) | `0.9.3` | `0.9.5` |\n| [github.com/hashicorp/terraform-exec](https://github.com/hashicorp/terraform-exec) | `0.25.0` | `0.25.2` |\n| [github.com/magefile/mage](https://github.com/magefile/mage) | `1.17.1` | `1.17.2` |\n| [github.com/nikolalohinski/gonja/v2](https://github.com/nikolalohinski/gonja) | `2.7.0` | `2.8.0` |\n| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `1.15.2` | `1.16.2` |\n| [github.com/package-url/packageurl-go](https://github.com/package-url/packageurl-go) | `0.1.5` | `0.1.6` |\n| [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib) | `0.10.0` | `0.11.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.50.0` | `0.51.0` |\n| [golang.org/x/mod](https://github.com/golang/mod) | `0.35.0` | `0.36.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.53.0` | `0.54.0` |\n| [golang.org/x/tools](https://github.com/golang/tools) | `0.44.0` | `0.45.0` |\n| [golang.org/x/vuln](https://github.com/golang/vuln) | `1.1.4` | `1.3.0` |\n| gopkg.in/ini.v1 | `1.67.1` | `1.67.2` |\n| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.48.2` | `1.50.1` |\n\n\nUpdates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.21.0 to 1.21.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/releases\"\u003egithub.com/Azure/azure-sdk-for-go/sdk/azcore's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esdk/azcore/v1.21.1\u003c/h2\u003e\n\u003ch2\u003e1.21.1 (2026-04-16)\u003c/h2\u003e\n\u003ch3\u003eBugs Fixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue in \u003ccode\u003eResponseError.Error()\u003c/code\u003e where the request URL path was being logged unescaped.\u003c/li\u003e\n\u003cli\u003eRedact query parameters when logging errors.\u003c/li\u003e\n\u003cli\u003eFor \u003ccode\u003eruntime.JoinPaths\u003c/code\u003e, don't add a slash between root and paths when \u003ccode\u003epaths\u003c/code\u003e starts with \u003ccode\u003e?\u003c/code\u003e (query string).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgraded to Go 1.25.0.\u003c/li\u003e\n\u003cli\u003eUpgraded dependencies.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/63e4ba18204b0df554e330df8f85662e653e67ab\"\u003e\u003ccode\u003e63e4ba1\u003c/code\u003e\u003c/a\u003e Bump release date for azcore (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26613\"\u003e#26613\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/fa0312174d17ff4cb7cb0118fa80de07409841c2\"\u003e\u003ccode\u003efa03121\u003c/code\u003e\u003c/a\u003e remove bypass local dns (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26609\"\u003e#26609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/c47f9a60dd1e9be6943ff0d6a5666a0ac09f6cfa\"\u003e\u003ccode\u003ec47f9a6\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 15153 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26607\"\u003e#26607\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/88b8b5b38ecebb929a2e302df054fed1d68618b8\"\u003e\u003ccode\u003e88b8b5b\u003c/code\u003e\u003c/a\u003e Changelog for v2.2.0 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26567\"\u003e#26567\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/72ca19ae2b8b4514c4f48a5ff33495b03c08afd0\"\u003e\u003ccode\u003e72ca19a\u003c/code\u003e\u003c/a\u003e Storage STG 101 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26568\"\u003e#26568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/b64baf56c6b168d258b2a0678290ac5f9ab97938\"\u003e\u003ccode\u003eb64baf5\u003c/code\u003e\u003c/a\u003e Sync .github directory with azure-sdk-tools repository (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26600\"\u003e#26600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/ecd64dd6500a04da22107925c3ba9fbe8e636f2c\"\u003e\u003ccode\u003eecd64dd\u003c/code\u003e\u003c/a\u003e Prep azcore@v1.21.1 for release (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26596\"\u003e#26596\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/1d02f204d0146ffd7d13d5585bf3766e53c32cc5\"\u003e\u003ccode\u003e1d02f20\u003c/code\u003e\u003c/a\u003e Update copilot code review instructions and migration breaking change mitigat...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/f6e9ce3212cc9d654d349778f19065eb5d849197\"\u003e\u003ccode\u003ef6e9ce3\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 14973 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26531\"\u003e#26531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/d5a3baf11e0b743a4009efb8e84cbaee335fc0eb\"\u003e\u003ccode\u003ed5a3baf\u003c/code\u003e\u003c/a\u003e Update CODEOWNERS to remove one owner from Custom Providers (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/26588\"\u003e#26588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.21.0...sdk/azcore/v1.21.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/alicebob/miniredis/v2` from 2.37.0 to 2.38.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/alicebob/miniredis/releases\"\u003egithub.com/alicebob/miniredis/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eDELEX and fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eXADD TRIM (thanks \u003ca href=\"https://github.com/evan-choi\"\u003e\u003ccode\u003e@​evan-choi\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate XINFO STREAM (thanks \u003ca href=\"https://github.com/TomBailey167\"\u003e\u003ccode\u003e@​TomBailey167\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003elua fix (thanks \u003ca href=\"https://github.com/infastin\"\u003e\u003ccode\u003e@​infastin\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epartial support for DELEX\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md\"\u003egithub.com/alicebob/miniredis/v2's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.38.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eXADD TRIM (thanks \u003ca href=\"https://github.com/evan-choi\"\u003e\u003ccode\u003e@​evan-choi\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate XINFO STREAM (thanks \u003ca href=\"https://github.com/TomBailey167\"\u003e\u003ccode\u003e@​TomBailey167\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003elua fix (thanks \u003ca href=\"https://github.com/infastin\"\u003e\u003ccode\u003e@​infastin\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epartial support for DELEX\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/d67bfae4c370e8451561165eca6ddc50f056f083\"\u003e\u003ccode\u003ed67bfae\u003c/code\u003e\u003c/a\u003e update changelog for v2.38.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/2b1abd81e1c58fb6d440b4637287d3ee09f7f66a\"\u003e\u003ccode\u003e2b1abd8\u003c/code\u003e\u003c/a\u003e DELEX (partly) (\u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/442\"\u003e#442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/452dd373d138f7ad858dd6e25e2a92753f83498e\"\u003e\u003ccode\u003e452dd37\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/440\"\u003e#440\u003c/a\u003e from infastin/server-alias\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/b5b8ec2cfde407552ea028514409599dbd5e1600\"\u003e\u003ccode\u003eb5b8ec2\u003c/code\u003e\u003c/a\u003e feat: add 'server' alias to 'redis' in lua scripts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/ecc4af14f2444ea1a57d040185781fe197bdfc9d\"\u003e\u003ccode\u003eecc4af1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/439\"\u003e#439\u003c/a\u003e from TomBailey167/xinfo-stream-last-generated-id\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/4a2a33e841b359a2569fe9a35d6d46414bf40aec\"\u003e\u003ccode\u003e4a2a33e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/alicebob/miniredis/issues/435\"\u003e#435\u003c/a\u003e from evan-choi/fix/xadd-equals-trim-modifier\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/d6261eff59117ccea7387f3a608caa1006b1adef\"\u003e\u003ccode\u003ed6261ef\u003c/code\u003e\u003c/a\u003e feat: add last-generated-id to XINFO STREAM response\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alicebob/miniredis/commit/f4d8aa342425de1b740a6f22a7dd230f83e3712a\"\u003e\u003ccode\u003ef4d8aa3\u003c/code\u003e\u003c/a\u003e fix: accept = trim modifier in xadd\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/alicebob/miniredis/compare/v2.37.0...v2.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/apparentlymart/go-cidr` from 1.1.0 to 1.1.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apparentlymart/go-cidr/commit/5730b04c510e662932577c247c0b194f97fb101f\"\u003e\u003ccode\u003e5730b04\u003c/code\u003e\u003c/a\u003e SubnetBig returns error for negative subnet number\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apparentlymart/go-cidr/commit/fab7bb4b664d0c94dceb4a54fab3500ffb2a2977\"\u003e\u003ccode\u003efab7bb4\u003c/code\u003e\u003c/a\u003e HostBig: Don't crash for out-of-range hostnum greater than max uint64\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apparentlymart/go-cidr/commit/e4ff799e34b9b5c2040704a175c01a6a1df7b56c\"\u003e\u003ccode\u003ee4ff799\u003c/code\u003e\u003c/a\u003e Update doc comment spacing for newer gofmt behavior\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/apparentlymart/go-cidr/compare/v1.1.0...v1.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.4 to 0.21.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2254\"\u003egoogle/go-containerregistry#2254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate to Go 1.26.2 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2255\"\u003egoogle/go-containerregistry#2255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2257\"\u003egoogle/go-containerregistry#2257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 in the go-deps group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2260\"\u003egoogle/go-containerregistry#2260\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.4...v0.21.5\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.4...v0.21.5\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/5b80281da727dae218e1697ab8529b631b9efa64\"\u003e\u003ccode\u003e5b80281\u003c/code\u003e\u003c/a\u003e build(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 in the go-deps gro...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/b99bca24a8df1bd88afc1d299d4c0ebba0555cf8\"\u003e\u003ccode\u003eb99bca2\u003c/code\u003e\u003c/a\u003e build(deps): bump aws-actions/configure-aws-credentials (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2257\"\u003e#2257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/f8be1d442e6fc85c791e4aa50155aa8806ca8312\"\u003e\u003ccode\u003ef8be1d4\u003c/code\u003e\u003c/a\u003e update to Go 1.26.2 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2255\"\u003e#2255\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/87ad88b4a000e418add5c1bb4ae1da908cbc3b85\"\u003e\u003ccode\u003e87ad88b\u003c/code\u003e\u003c/a\u003e Bump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2254\"\u003e#2254\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.4...v0.21.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/jsonschema-go` from 0.4.2 to 0.4.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/jsonschema-go/releases\"\u003egithub.com/google/jsonschema-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.4.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eimprove anyOf errors by \u003ca href=\"https://github.com/jba\"\u003e\u003ccode\u003e@​jba\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/jsonschema-go/pull/61\"\u003egoogle/jsonschema-go#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: infer - support map with non-string key type by \u003ca href=\"https://github.com/rafaeljusto\"\u003e\u003ccode\u003e@​rafaeljusto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/jsonschema-go/pull/70\"\u003egoogle/jsonschema-go#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/jsonschema-go/compare/v0.4.2...0.4.3\"\u003ehttps://github.com/google/jsonschema-go/compare/v0.4.2...0.4.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.4.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eimprove anyOf errors by \u003ca href=\"https://github.com/jba\"\u003e\u003ccode\u003e@​jba\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/jsonschema-go/pull/61\"\u003egoogle/jsonschema-go#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: infer - support map with non-string key type by \u003ca href=\"https://github.com/rafaeljusto\"\u003e\u003ccode\u003e@​rafaeljusto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/jsonschema-go/pull/70\"\u003egoogle/jsonschema-go#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/jsonschema-go/compare/v0.4.2...v0.4.3\"\u003ehttps://github.com/google/jsonschema-go/compare/v0.4.2...v0.4.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/jsonschema-go/commit/8c4ab4f02ef64dcea5502e47a6113e8292944087\"\u003e\u003ccode\u003e8c4ab4f\u003c/code\u003e\u003c/a\u003e fix: infer - support map with non-string key type (\u003ca href=\"https://redirect.github.com/google/jsonschema-go/issues/70\"\u003e#70\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/jsonschema-go/commit/8bd57428bbbea55d718267fa5b20bbb59b4f9fbd\"\u003e\u003ccode\u003e8bd5742\u003c/code\u003e\u003c/a\u003e improve anyOf errors (\u003ca href=\"https://redirect.github.com/google/jsonschema-go/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/google/jsonschema-go/compare/v0.4.2...0.4.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/hashicorp/hc-install` from 0.9.3 to 0.9.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hashicorp/hc-install/releases\"\u003egithub.com/hashicorp/hc-install's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ego.mod: Lower compatibility constraint from 1.25.8 to 1.25.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/376\"\u003e#376\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.4\u003c/h2\u003e\n\u003cp\u003eENHANCEMENTS:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Prefer \u003ccode\u003ego.mod\u003c/code\u003e if Go versions mismatch (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/368\"\u003e#368\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBUG FIXES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate PGP pubkey to replace expired one (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/355\"\u003e#355\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/372\"\u003e#372\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.18.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/349\"\u003e#349\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/363\"\u003e#363\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/369\"\u003e#369\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/360\"\u003e#360\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.1 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/351\"\u003e#351\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/358\"\u003e#358\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/mod from 0.33.0 to 0.35.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/354\"\u003e#354\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/365\"\u003e#365\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eINTERNAL:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ego: bump to 1.25 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/pull/357\"\u003e#357\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/2f46abfd7f9e78d5df1e17d599a6c12098432cee\"\u003e\u003ccode\u003e2f46abf\u003c/code\u003e\u003c/a\u003e Prepare for 0.9.5 release (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/377\"\u003e#377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/78781831051e592c57ee890addd7cddd03578878\"\u003e\u003ccode\u003e7878183\u003c/code\u003e\u003c/a\u003e go.mod: Keep compatibility constraint separate from build (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/376\"\u003e#376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/d5841a31c41f78fabaf2ea59e5816e6616e0f618\"\u003e\u003ccode\u003ed5841a3\u003c/code\u003e\u003c/a\u003e version: cleanup after 0.9.4 release (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/374\"\u003e#374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/13edb5e7b4b6bd1b62729e852fede0e1a5135a39\"\u003e\u003ccode\u003e13edb5e\u003c/code\u003e\u003c/a\u003e Prepare for 0.9.4 release (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/373\"\u003e#373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/8233b7ab4ae1d7e063a52f4f647a67c50af7c03c\"\u003e\u003ccode\u003e8233b7a\u003c/code\u003e\u003c/a\u003e pubkey: Replace two keys with the new one (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/372\"\u003e#372\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/99a174c773ddf5cca96008ee8b3444c88e1af75b\"\u003e\u003ccode\u003e99a174c\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/369\"\u003e#369\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/77c3fbdd247381c5b3ef58020faec881b88a6031\"\u003e\u003ccode\u003e77c3fbd\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 in the github-a...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/dbcbf5ff1d32880435f7abfba5b40c1d645b7ec9\"\u003e\u003ccode\u003edbcbf5f\u003c/code\u003e\u003c/a\u003e build: Prefer go.mod if Go versions mismatch (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/368\"\u003e#368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/ad8a98be88668e65a93d45fdfe3e174229acc6f7\"\u003e\u003ccode\u003ead8a98b\u003c/code\u003e\u003c/a\u003e build(deps): bump golang.org/x/mod from 0.34.0 to 0.35.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/365\"\u003e#365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/hc-install/commit/9a8707266a2315a7520cab7e488b90996c1dea77\"\u003e\u003ccode\u003e9a87072\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/hc-install/issues/360\"\u003e#360\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hashicorp/hc-install/compare/v0.9.3...v0.9.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/hashicorp/terraform-exec` from 0.25.0 to 0.25.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hashicorp/terraform-exec/releases\"\u003egithub.com/hashicorp/terraform-exec's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.25.2\u003c/h2\u003e\n\u003cp\u003eNOTES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ego.mod: Lower compatibility constraint from 1.25.8 to 1.25.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/hc-install from 0.9.4 to 0.9.5 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.25.1\u003c/h2\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/zclconf/go-cty from 1.17.0 to 1.18.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/574\"\u003e#574\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/573\"\u003e#573\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/576\"\u003e#576\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/hc-install from 0.9.3 to 0.9.4 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hashicorp/terraform-exec/blob/main/CHANGELOG.md\"\u003egithub.com/hashicorp/terraform-exec's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e0.25.2 (April 29, 2026)\u003c/h1\u003e\n\u003cp\u003eNOTES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ego.mod: Lower compatibility constraint from 1.25.8 to 1.25.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/hc-install from 0.9.4 to 0.9.5 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.25.1 (April 22, 2026)\u003c/h1\u003e\n\u003cp\u003eDEPENDENCIES:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/zclconf/go-cty from 1.17.0 to 1.18.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/574\"\u003e#574\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/573\"\u003e#573\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/576\"\u003e#576\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/hashicorp/hc-install from 0.9.3 to 0.9.4 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/pull/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/56a0d8b1e947ab88cd0f7a2752495ab90e3f0b96\"\u003e\u003ccode\u003e56a0d8b\u003c/code\u003e\u003c/a\u003e v0.25.2 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/94a3afe0d3d6b0d7495b2287bdc9f6f68ce3414f\"\u003e\u003ccode\u003e94a3afe\u003c/code\u003e\u003c/a\u003e Update Changelog in preparation for 0.25.2 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/586\"\u003e#586\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/ac26db5996e0ed0b4f9a8d1d1b5ce51f4ef960e7\"\u003e\u003ccode\u003eac26db5\u003c/code\u003e\u003c/a\u003e go.mod: Keep compatibility constraint separate from build (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/e856badee6e800dad3f8f2dfdc9c0b25b0e3b938\"\u003e\u003ccode\u003ee856bad\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/hashicorp/hc-install from 0.9.4 to 0.9.5 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/5418a753fa2599ebb4e296dc22d16564e0ff54d8\"\u003e\u003ccode\u003e5418a75\u003c/code\u003e\u003c/a\u003e v0.25.1 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/c5053a65eed7ffbf6ab4aaab14a24dfc22633f92\"\u003e\u003ccode\u003ec5053a6\u003c/code\u003e\u003c/a\u003e Update Changelog in preparation for 0.25.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/580\"\u003e#580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/f5ab655f3dba9ca5f5762b47e9a983818f7bd01d\"\u003e\u003ccode\u003ef5ab655\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/hashicorp/hc-install from 0.9.3 to 0.9.4 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/f49a90a4b6c8af99b43cc3444d70f9d7f779bde7\"\u003e\u003ccode\u003ef49a90a\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/576\"\u003e#576\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/a919c3c63f65c6366f60ad89108834510459f155\"\u003e\u003ccode\u003ea919c3c\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/573\"\u003e#573\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/terraform-exec/commit/5b8e8921441672128aca27007f40f286a6152266\"\u003e\u003ccode\u003e5b8e892\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 (\u003ca href=\"https://redirect.github.com/hashicorp/terraform-exec/issues/574\"\u003e#574\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hashicorp/terraform-exec/compare/v0.25.0...v0.25.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/magefile/mage` from 1.17.1 to 1.17.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/magefile/mage/releases\"\u003egithub.com/magefile/mage's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.17.2 - Tab Completion\u003c/h2\u003e\n\u003ch2\u003eWhat's New\u003c/h2\u003e\n\u003cp\u003eTab completion is now available by running \u003ccode\u003emage -install \u0026lt;shell\u0026gt;\u003c/code\u003e where the currently supported shells are zsh, bash, fish, and powershell.  This was a long-requested feature that always made me nervous because it presumes a lot about your local machine... but I guess we're in for it now. Please report any issues you see.... it's rather a hard feature to test. But... it works on my machine? 😬\u003c/p\u003e\n\u003cp\u003eFixed a backtick bug in comments and \u003ccode\u003emage -l\u003c/code\u003e and \u003ccode\u003emage -h\u003c/code\u003e no longer require compiling a binary, so they're way faster now.\u003c/p\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e0953947c1673fd745a51c032aadeb3c63f9f3368 make -h no long require compiling (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/552\"\u003e#552\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e791a5b40794d4bcdd840f7e7523d886ac25b2a96 Support Tab Completion (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/551\"\u003e#551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecff82a6fab83f756a382e841029a537714bd9a02 fix bug \u003ca href=\"https://redirect.github.com/magefile/mage/issues/537\"\u003e#537\u003c/a\u003e - backticks in comments break output (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/544\"\u003e#544\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magefile/mage/commit/0953947c1673fd745a51c032aadeb3c63f9f3368\"\u003e\u003ccode\u003e0953947\u003c/code\u003e\u003c/a\u003e make -h no long require compiling (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/552\"\u003e#552\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magefile/mage/commit/791a5b40794d4bcdd840f7e7523d886ac25b2a96\"\u003e\u003ccode\u003e791a5b4\u003c/code\u003e\u003c/a\u003e Support Tab Completion (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/551\"\u003e#551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magefile/mage/commit/cff82a6fab83f756a382e841029a537714bd9a02\"\u003e\u003ccode\u003ecff82a6\u003c/code\u003e\u003c/a\u003e fix bug \u003ca href=\"https://redirect.github.com/magefile/mage/issues/537\"\u003e#537\u003c/a\u003e - backticks in comments break output (\u003ca href=\"https://redirect.github.com/magefile/mage/issues/544\"\u003e#544\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/magefile/mage/compare/v1.17.1...v1.17.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/nikolalohinski/gonja/v2` from 2.7.0 to 2.8.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/b27ea3867188beb94e839a8c6b142379e91b6e67\"\u003e\u003ccode\u003eb27ea38\u003c/code\u003e\u003c/a\u003e fix(tests): versions test failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/2ff7da8b664f8de5ec4bb2bb22d8f0b37eb9e595\"\u003e\u003ccode\u003e2ff7da8\u003c/code\u003e\u003c/a\u003e release(v2.8.0): update global gonja.version variable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/66f0f38596474917cf39e355b2a42719935a8416\"\u003e\u003ccode\u003e66f0f38\u003c/code\u003e\u003c/a\u003e Fix legacy urlize fixture trailing newline\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/65fbe7c2da83fee00601357e71698da2c5e6d473\"\u003e\u003ccode\u003e65fbe7c\u003c/code\u003e\u003c/a\u003e Address filter review feedback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/4a4fc1d1a25ffbe1fabed79d1e7016d7d2ef853a\"\u003e\u003ccode\u003e4a4fc1d\u003c/code\u003e\u003c/a\u003e Restore JSON-style pprint output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/07d2519be6690659f9096e2eb26e696b154e6539\"\u003e\u003ccode\u003e07d2519\u003c/code\u003e\u003c/a\u003e Add scalar and text filter compatibility fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/88fdeb8996685f15929d260e0984d8489ce8fbea\"\u003e\u003ccode\u003e88fdeb8\u003c/code\u003e\u003c/a\u003e Add JSON and URL filter compatibility fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/46485f8c45cdc1d1409ee6417856ded1410feea1\"\u003e\u003ccode\u003e46485f8\u003c/code\u003e\u003c/a\u003e Add collection filter compatibility fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/4f84240b27dba45ab2745ac307dd460bcdf4933a\"\u003e\u003ccode\u003e4f84240\u003c/code\u003e\u003c/a\u003e Fast-scan plain text in lexData using strings.IndexByte\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NikolaLohinski/gonja/commit/7b8a1a1f362f28618fcaff8711dbca839220d32b\"\u003e\u003ccode\u003e7b8a1a1\u003c/code\u003e\u003c/a\u003e Optimize parser type checks with unrolled containsType\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nikolalohinski/gonja/compare/v2.7.0...v2.8.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/open-policy-agent/opa` from 1.15.2 to 1.16.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-policy-agent/opa/releases\"\u003egithub.com/open-policy-agent/opa's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.16.2\u003c/h2\u003e\n\u003cp\u003eThis release updates the version of Go used to build the OPA binaries and images to 1.26.3;\naddressing \u003ca href=\"https://groups.google.com/g/golang-announce/c/qcCIEXso47M\"\u003ea number of vulnerabilities\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev1.16.1\u003c/h2\u003e\n\u003cp\u003eThis is a patch release addressing a regression in the plugin manager that may cause the service to hang on shutdown (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/8590\"\u003e#8590\u003c/a\u003e).\u003c/p\u003e\n\u003ch2\u003ev1.16.0\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!WARNING]\u003c/p\u003e\n\u003cp\u003eA regression has been found in the plugin manager, which may cause the service to hang on shutdown.\nUsers are advised to go directly to v1.16.1.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThis release contains a mix of new features, performance improvements, and bugfixes. Notably:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNew \u003ccode\u003euri.parse\u003c/code\u003e and \u003ccode\u003euri.is_valid\u003c/code\u003e built-in functions\u003c/li\u003e\n\u003cli\u003eData API Request/Response Metadata\u003c/li\u003e\n\u003cli\u003ePrometheus metrics exported via OTLP\u003c/li\u003e\n\u003cli\u003eFormatter improvements\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003e\u003cem\u003eNOTE:\u003c/em\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eIn v1.15.x, OPA was dropping logs for bundle downloads, \u003ccode\u003eprint()\u003c/code\u003e calls and other plugin-originated logs.\nUsers are advised to update, v1.16.0 fixes this bug in (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/8544\"\u003e#8544\u003c/a\u003e).\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eNew \u003ccode\u003euri.parse\u003c/code\u003e and \u003ccode\u003euri.is_valid\u003c/code\u003e built-in functions (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/h3\u003e\n\u003cp\u003eTwo new \u003ca href=\"https://www.openpolicyagent.org/docs/policy-reference/builtins\"\u003ebuilt-in functions\u003c/a\u003e have been added: \u003ccode\u003euri.parse\u003c/code\u003e for parsing a given URI, and \u003ccode\u003euri.is_valid\u003c/code\u003e for verifying the structure of a given URI.\u003c/p\u003e\n\u003ch4\u003euri.parse\u003c/h4\u003e\n\u003cp\u003eParses a URI and returns an object containing its components according to \u003ca href=\"https://www.rfc-editor.org/rfc/rfc3986.html\"\u003eRFC 3986\u003c/a\u003e. Empty components are omitted.\u003c/p\u003e\n\u003cpre lang=\"rego\"\u003e\u003ccode\u003epackage example\r\n\u003cp\u003etest_uri if {\nuri.parse(\u0026quot;\u003ca href=\"https://example.com:8080/api?q=1#top\"\u003ehttps://example.com:8080/api?q=1#top\u003c/a\u003e\u0026quot;) == {\n\u0026quot;scheme\u0026quot;: \u0026quot;https\u0026quot;,\n\u0026quot;hostname\u0026quot;: \u0026quot;example.com\u0026quot;,\n\u0026quot;port\u0026quot;: \u0026quot;8080\u0026quot;,\n\u0026quot;path\u0026quot;: \u0026quot;/api\u0026quot;,\n\u0026quot;raw_path\u0026quot;: \u0026quot;/api\u0026quot;,\n\u0026quot;raw_query\u0026quot;: \u0026quot;q=1\u0026quot;,\n\u0026quot;fragment\u0026quot;: \u0026quot;top\u0026quot;,\n}\n}\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md\"\u003egithub.com/open-policy-agent/opa's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.16.2\u003c/h2\u003e\n\u003cp\u003eThis release updates the version of Go used to build the OPA binaries and images to 1.26.3;\naddressing \u003ca href=\"https://groups.google.com/g/golang-announce/c/qcCIEXso47M\"\u003ea number of vulnerabilities\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003e1.16.1\u003c/h2\u003e\n\u003cp\u003eThis is a patch release addressing a regression (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/8590\"\u003e#8590\u003c/a\u003e) in the plugin manager that may cause the service to hang on shutdown.\u003c/p\u003e\n\u003ch2\u003e1.16.0\u003c/h2\u003e\n\u003cp\u003eThis release contains a mix of new features, performance improvements, and bugfixes. Notably:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNew \u003ccode\u003euri.parse\u003c/code\u003e and \u003ccode\u003euri.is_valid\u003c/code\u003e built-in functions\u003c/li\u003e\n\u003cli\u003eData API Request/Response Metadata\u003c/li\u003e\n\u003cli\u003ePrometheus metrics exported via OTLP\u003c/li\u003e\n\u003cli\u003eFormatter improvements\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003e\u003cem\u003eNOTE:\u003c/em\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eIn v1.15.x, OPA was dropping logs for bundle downloads, \u003ccode\u003eprint()\u003c/code\u003e calls and other plugin-originated logs.\nUsers are advised to update, v1.16.0 fixes this bug in (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/8544\"\u003e#8544\u003c/a\u003e).\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eNew \u003ccode\u003euri.parse\u003c/code\u003e and \u003ccode\u003euri.is_valid\u003c/code\u003e built-in functions (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8263\"\u003e#8263\u003c/a\u003e)\u003c/h3\u003e\n\u003cp\u003eTwo new \u003ca href=\"https://www.openpolicyagent.org/docs/policy-reference/builtins\"\u003ebuilt-in functions\u003c/a\u003e have been added: \u003ccode\u003euri.parse\u003c/code\u003e for parsing a given URI, and \u003ccode\u003euri.is_valid\u003c/code\u003e for verifying the structure of a given URI.\u003c/p\u003e\n\u003ch4\u003euri.parse\u003c/h4\u003e\n\u003cp\u003eParses a URI and returns an object containing its components according to \u003ca href=\"https://www.rfc-editor.org/rfc/rfc3986.html\"\u003eRFC 3986\u003c/a\u003e. Empty components are omitted.\u003c/p\u003e\n\u003cpre lang=\"rego\"\u003e\u003ccode\u003epackage example\n\u003cp\u003etest_uri if {\nuri.parse(\u0026quot;\u003ca href=\"https://example.com:8080/api?q=1#top\"\u003ehttps://example.com:8080/api?q=1#top\u003c/a\u003e\u0026quot;) == {\n\u0026quot;scheme\u0026quot;: \u0026quot;https\u0026quot;,\n\u0026quot;hostname\u0026quot;: \u0026quot;example.com\u0026quot;,\n\u0026quot;port\u0026quot;: \u0026quot;8080\u0026quot;,\n\u0026quot;path\u0026quot;: \u0026quot;/api\u0026quot;,\n\u0026quot;raw_path\u0026quot;: \u0026quot;/api\u0026quot;,\n\u0026quot;raw_query\u0026quot;: \u0026quot;q=1\u0026quot;,\n\u0026quot;fragment\u0026quot;: \u0026quot;top\u0026quot;,\n}\n}\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003ch4\u003euri.is_valid\u003c/h4\u003e\n\u003cp\u003eReturns \u003ccode\u003etrue\u003c/code\u003e if the input can be parsed as a URI, \u003ccode\u003efalse\u003c/code\u003e otherwise.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/85f6d990d19094da38e829561813e7da7fbae272\"\u003e\u003ccode\u003e85f6d99\u003c/code\u003e\u003c/a\u003e Prepare v1.16.2 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/1466714b633b056d8e04551f60457fec2f0aad99\"\u003e\u003ccode\u003e1466714\u003c/code\u003e\u003c/a\u003e build: bump go 1.26.2 -\u0026gt; 1.26.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/a72f9fa5e7c5e10a614f44dbe40700f90816d59d\"\u003e\u003ccode\u003ea72f9fa\u003c/code\u003e\u003c/a\u003e Prepare v1.16.1 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/9339812894af83578c840590bf1b9a33da472630\"\u003e\u003ccode\u003e9339812\u003c/code\u003e\u003c/a\u003e plugins: Ensure plugin status functions don't hang after manager is stopped (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/f3adf61f72b67e06115178851e3ffd7e2ef1a0cd\"\u003e\u003ccode\u003ef3adf61\u003c/code\u003e\u003c/a\u003e Release v1.16.0 (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8581\"\u003e#8581\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/c5a446f09d6377bca3dfc6d1c6ddfd7058739205\"\u003e\u003ccode\u003ec5a446f\u003c/code\u003e\u003c/a\u003e Add regression test for comparing objects with array keys\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/7bc92c60755f51de00a950edfead4760b2cd8e3a\"\u003e\u003ccode\u003e7bc92c6\u003c/code\u003e\u003c/a\u003e workflow: update benchmarks notebook generation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/882d5a71171899e3f17d2b6ad16a962a587cc3a2\"\u003e\u003ccode\u003e882d5a7\u003c/code\u003e\u003c/a\u003e build(deps): bump the dependencies group across 2 directories with 9 updates ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/b33179c25828d2c0ea0801b95238616396a37ddb\"\u003e\u003ccode\u003eb33179c\u003c/code\u003e\u003c/a\u003e docs: Fix input value type in not undefined example (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8580\"\u003e#8580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/3d602ca6a35a3ddbdc456653c5e4c34de30aea7e\"\u003e\u003ccode\u003e3d602ca\u003c/code\u003e\u003c/a\u003e perf: Add CopyNonGround() methods for Array, Set, and Object (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/8323\"\u003e#8323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-policy-agent/opa/compare/v1.15.2...v1.16.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/package-url/packageurl-go` from 0.1.5 to 0.1.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/package-url/packageurl-go/releases\"\u003egithub.com/package-url/packageurl-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.1.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize parsing and serialization performance by \u003ca href=\"https://github.com/andrew\"\u003e\u003ccode\u003e@​andrew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/package-url/packageurl-go/pull/86\"\u003epackage-url/packageurl-go#86\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andrew\"\u003e\u003ccode\u003e@​andrew\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/package-url/packageurl-go/pull/86\"\u003epackage-url/packageurl-go#86\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/package-url/packageurl-go/compare/v0.1.5...v0.1.6\"\u003ehttps://github.com/package-url/packageurl-go/compare/v0.1.5...v0.1.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/package-url/packageurl-go/commit/a74324e4e5d01ba49accd9f2f327e22206c7920d\"\u003e\u003ccode\u003ea74324e\u003c/code\u003e\u003c/a\u003e Optimize parsing and serialization performance (\u003ca href=\"https://redirect.github.com/package-url/packageurl-go/issues/86\"\u003e#86\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/package-url/packageurl-go/commit/b41f387d16428dd565a73fe18800629c8ad0338f\"\u003e\u003ccode\u003eb41f387\u003c/code\u003e\u003c/a\u003e Address review feedback and add chrome-extension validation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/package-url/packageurl-go/commit/a546cc5887560ce7b304fe8d7d95e0e2e4407a7f\"\u003e\u003ccode\u003ea546cc5\u003c/code\u003e\u003c/a\u003e Optimize parsing and serialization performance\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/package-url/packageurl-go/compare/v0.1.5...v0.1.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/secure-systems-lab/go-securesystemslib` from 0.10.0 to 0.11.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/1ce0aca0c8640e2b119fb8de53fb193759085c6a\"\u003e\u003ccode\u003e1ce0aca\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/secure-systems-lab/go-securesystemslib/issues/153\"\u003e#153\u003c/a\u003e from secure-systems-lab/context-tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/1fc070d988cb9264d424da4e149912f9b87948c1\"\u003e\u003ccode\u003e1fc070d\u003c/code\u003e\u003c/a\u003e tests: Change context.TODO to use t.Context\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/6c7f8fcef4691632d0380af75be8d13d78ef58a4\"\u003e\u003ccode\u003e6c7f8fc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/secure-systems-lab/go-securesystemslib/issues/151\"\u003e#151\u003c/a\u003e from bobcallaway/mem_optimization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/51ce6b129c32e238ce02244fc0e93400063cd84d\"\u003e\u003ccode\u003e51ce6b1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/secure-systems-lab/go-securesystemslib/issues/152\"\u003e#152\u003c/a\u003e from secure-systems-lab/dependabot/go_modules/golang....\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/d97f44dcdec28520f385e68dc568a689ce238385\"\u003e\u003ccode\u003ed97f44d\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/e06bffc452b39d9a142602af3464162900088221\"\u003e\u003ccode\u003ee06bffc\u003c/code\u003e\u003c/a\u003e reduce memory allocation of methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/08e050e38149e64cbeb02e10f713a7a4fbf3f460\"\u003e\u003ccode\u003e08e050e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/secure-systems-lab/go-securesystemslib/issues/150\"\u003e#150\u003c/a\u003e from secure-systems-lab/dependabot/github_actions/act...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/95341f8fc046949f354229c4cceb1c8669345ae4\"\u003e\u003ccode\u003e95341f8\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-go from 6.3.0 to 6.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/3999a0d0babd64336bb7977400732402b2b0be7a\"\u003e\u003ccode\u003e3999a0d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/secure-systems-lab/go-securesystemslib/issues/149\"\u003e#149\u003c/a\u003e from secure-systems-lab/dependabot/go_modules/golang....\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/commit/f1b55fe068d377a83f3297a9bd75e4e28bb6e025\"\u003e\u003ccode\u003ef1b55fe\u003c/code\u003e\u003c/a\u003e ci: Bump Go\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/secure-systems-lab/go-securesystemslib/compare/v0.10.0...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/zclconf/go-cty` from 1.18.0 to 1.18.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/zclconf/go-cty/blob/main/CHANGELOG.md\"\u003egithub.com/zclconf/go-cty's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.18.1 (April 16, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estdlib: \u003ccode\u003eContainsFunc\u003c/code\u003e now allows its second argument to be null, to test whether the given collection contains any null elements.\u003c/li\u003e\n\u003cli\u003estdlib: \u003ccode\u003eMergeFunc\u003c/code\u003e no longer panics if all of its arguments are null values of the same object type with at least one attribute.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zclconf/go-cty/commit/dcb5db6917182028fab2819852b7cdc72e2b7ec9\"\u003e\u003ccode\u003edcb5db6\u003c/code\u003e\u003c/a\u003e v1.18.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zclconf/go-cty/commit/77d87c2b43bb0f181d82f3749fda4b65daebc528\"\u003e\u003ccode\u003e77d87c2\u003c/code\u003e\u003c/a\u003e stdlib: no MergeFunc crash with null values of object type\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zclconf/go-cty/commit/6854da9fb3b4bdbda7e55322e1eee4f74f1f6cf7\"\u003e\u003ccode\u003e6854da9\u003c/code\u003e\u003c/a\u003e stdlib: ContainsFunc allows testing for presence of null value\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zclconf/go-cty/commit/ddb73de64ecfb6f9ca579526607d18630301649a\"\u003e\u003ccode\u003eddb73de\u003c/code\u003e\u003c/a\u003e Begin development of v1.18.1\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/zclconf/go-cty/compare/v1.18.0...v1.18.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.50.0 to 0.51.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b8a14a8d65f88c0c79c139171f1354c69a6cdb8a\"\u003e\u003ccode\u003eb8a14a8\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/9d9d5078968ddb8a279092c665a24e7de4178778\"\u003e\u003ccode\u003e9d9d507\u003c/code\u003e\u003c/a\u003e x509roots/fallback/bundle: fix bundle test with Go 1.27+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/fd0b90d21f9ab4b5dd398e9526b570bfea86e370\"\u003e\u003ccode\u003efd0b90d\u003c/code\u003e\u003c/a\u003e acme: include Problem in OrderError.Error\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b9e53593a6073e6a786c49e9ad27956a9b77e54e\"\u003e\u003ccode\u003eb9e5359\u003c/code\u003e\u003c/a\u003e pbkdf2: turn into a wrapper for crypto/pbkdf2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/cc0e4fc1d49127130b0d00612a2eeed2ab745d40\"\u003e\u003ccode\u003ecc0e4fc\u003c/code\u003e\u003c/a\u003e hkdf: forward Extract to the standard library\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a8e9237a216b050e1b11e041863825104a6811db\"\u003e\u003ccode\u003ea8e9237\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/crypto/compare/v0.50.0...v0.51.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/mod` from 0.35.0 to 0.36.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/643da9ba74f1165d8cae1505d453b3de3cf21b7b\"\u003e\u003ccode\u003e643da9b\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/ccc3cdf529d1eee2a832437eb1b85240044d21cb\"\u003e\u003ccode\u003eccc3cdf\u003c/code\u003e\u003c/a\u003e zip: include 'but content has correct sum' note in TestVCS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/mod/commit/ab3031803214705d2c9f1102318b083e7086a155\"\u003e\u003ccode\u003eab30318\u003c/code\u003e\u003c/a\u003e zip: update zip hashes for new flate compression\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/mod/compare/v0.35.0...v0.36.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.53.0 to 0.54.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/b138e06246cb323f2f380c2b7f7dd91f581dd56b\"\u003e\u003ccode\u003eb138e06\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/689f70a42abd350f3a1aaa70b0d13eb9543d927a\"\u003e\u003ccode\u003e689f70a\u003c/code\u003e\u003c/a\u003e quic: fix wrong final size being used for RESET_STREAM frame\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/208f306b2f0fd008b388bee2c2644be279778e94\"\u003e\u003ccode\u003e208f306\u003c/code\u003e\u003c/a\u003e http3: increase handshake timeout\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/49810da71b9026da9e0d028a6ad8c7730c52d9c4\"\u003e\u003ccode\u003e49810da\u003c/code\u003e\u003c/a\u003e http2: enable net/http wrapping when go \u0026gt;= 1.27\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/5e11a5ab891c117eda83b4304d60dd13286c1c76\"\u003e\u003ccode\u003e5e11a5a\u003c/code\u003e\u003c/a\u003e quic: fix data race in streamForFrame\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/8c63081cd380ea768db5651941614b73472160ff\"\u003e\u003ccode\u003e8c63081\u003c/code\u003e\u003c/a\u003e http2: use empty Transport rather than DefaultTransport in http2wrap\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/fc7b466ca49cb204039630533ece4fc557eb35cd\"\u003e\u003ccode\u003efc7b466\u003c/code\u003e\u003c/a\u003e http2: add http2wrap test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/15c2cb1875fd727313dc4de909b3ee149422fbe2\"\u003e\u003ccode\u003e15c2cb1\u003c/code\u003e\u003c/a\u003e http2: avoid overflowing 32-bit int when http2wrap enabled\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/64651885c2f2d745d77af2d7af2edbf568c179af\"\u003e\u003ccode\u003e6465188\u003c/code\u003e\u003c/a\u003e http2: add wrapped Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/72f419a894cb0597dd5b6bcf119086bf2af41231\"\u003e\u003ccode\u003e72f419a\u003c/code\u003e\u003c/a\u003e http2: add wrapped ClientConn\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.53.0...v0.54.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/term` from 0.42.0 to 0.43.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/term/commit/3c3e4855f7d2eb06c3e48933554add9ec6b599b5\"\u003e\u003ccode\u003e3c3e485\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/term/compare/v0.42.0...v0.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/text` from 0.36.0 to 0.37.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/text/commit/3ef517e623a4bfc08d6457f87d73afda7af7d8e1\"\u003e\u003ccode\u003e3ef517e\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/text/compare/v0.36.0...v0.37.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/tools` from 0.44.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/2aabba0e4be44cc8f254ced118a7156d04bbc9f3\"\u003e\u003ccode\u003e2aabba0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/ef989b3f45baff2849e87f4a70d9a189be5a6959\"\u003e\u003ccode\u003eef989b3\u003c/code\u003e\u003c/a\u003e go/types/internal/play: show Info.Instances[Ident]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/21d44f2f2bb3f3a8e06e35523d14bb70cb275c89\"\u003e\u003ccode\u003e21d44f2\u003c/code\u003e\u003c/a\u003e go/analysis/passes/inline: document skipping of TestF-\u0026gt;F calls\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/ec83c2190d81a18bbd472cc1498575b168017e5d\"\u003e\u003ccode\u003eec83c21\u003c/code\u003e\u003c/a\u003e go/analysis/passes/modernize: minmax: only remove exact userdefined\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/5625353d39195f1deb9261c5ee983abbdc4a15ca\"\u003e\u003ccode\u003e5625353\u003c/code\u003e\u003c/a\u003e go/analysis/passes/modernize: improve value variable name generation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/15a3bd5d4ce0651f5cf43ea125db2110c67b257b\"\u003e\u003ccode\u003e15a3bd5\u003c/code\u003e\u003c/a\u003e gopls/internal/analysis/errorsastype: imporove example clarity\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/cd57ef8f8dd7a30ef500bfe1eef0779223cbdfc3\"\u003e\u003ccode\u003ecd57ef8\u003c/code\u003e\u003c/a\u003e go/packages: include dependency errors when CompiledGoFiles is missing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/053fdbcef55e8f977d8decc0fde2920c61eb5374\"\u003e\u003ccode\u003e053fdbc\u003c/code\u003e\u003c/a\u003e go/analysis/passes/modernize: minmax: fix pure operands only\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/bf84681c4a0185014c089cffd533e22bbeffcb49\"\u003e\u003ccode\u003ebf84681\u003c/code\u003e\u003c/a\u003e go/analysis/passes/errorsas: add example of invalid errors.As use\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/tools/commit/23921d1decfe5da40309ac183353c8cb38b03dfa\"\u003e\u003ccode\u003e23921d1\u003c/code\u003e\u003c/a\u003e gopls: add errorsastype analyzer\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/tools/compare/v0.44.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/vuln` from 1.1.4 to 1.3.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/0782b76014f15f24e22a438f30f308df42899ba1\"\u003e\u003ccode\u003e0782b76\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/5499630db5f896778f084a8b3720910426de5c53\"\u003e\u003ccode\u003e5499630\u003c/code\u003e\u003c/a\u003e internal/scan: exit after printing version info\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/a8075323febce35764797d66a61fa9e19a8d9797\"\u003e\u003ccode\u003ea807532\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/4ac723d6af9abfcea6ef5a6d7aec65e68b8738dd\"\u003e\u003ccode\u003e4ac723d\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/a9cf566971d512048614ae269b160fe47a1fceb3\"\u003e\u003ccode\u003ea9cf566\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.25.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/930824204a6bb5ef98fee43315ce187ccd0b7cc1\"\u003e\u003ccode\u003e9308242\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/a0d18c9179e09b31b78e3b54532c9c9a9071451e\"\u003e\u003ccode\u003ea0d18c9\u003c/code\u003e\u003c/a\u003e vuln: add codereview.cfg\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/3276fb946d41e82354ca78d7d89e532f7dd00e8f\"\u003e\u003ccode\u003e3276fb9\u003c/code\u003e\u003c/a\u003e cmd/govulncheck: remove gotypesalias.go (not needed anymore)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/ff5c0046886fb6c339f4b0c00ce6bfb119f00006\"\u003e\u003ccode\u003eff5c004\u003c/code\u003e\u003c/a\u003e internal/scan: improve error message for govulncheck\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/vuln/commit/6698294903005319aedf73447119a0fe4d74952d\"\u003e\u003ccode\u003e6698294\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/vuln/compare/v1.1.4...v1.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `gopkg.in/ini.v1` from 1.67.1 to 1.67.2\n\nUpdates `modernc.org/sqlite` from 1.48.2 to 1.50.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md\"\u003emodernc.org/sqlite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e2026-05-21 v1.51.2:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eFileControl.FileControlDataVersion\u003c/code\u003e, a wrapper around \u003ccode\u003eSQLITE_FCNTL_DATA_VERSION\u003c/code\u003e for observing pager-cache data-version changes, including those made on the same connection. Useful as a primitive for application-level cache invalidation.\u003c/li\u003e\n\u003cli\u003eExposed via the idiomatic \u003ccode\u003edatabase/sql\u003c/code\u003e escape hatch \u003ccode\u003e(*sql.Conn).Raw()\u003c/code\u003e, consistent with the existing \u003ccode\u003eFileControlPersistWAL\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/115\"\u003e#115\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/115\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/115\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-05-10 v1.50.1:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to \u003ca href=\"https://sqlite.org/releaselog/3_53_1.html\"\u003eSQLite 3.53.1\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-04-24 v1.50.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to sqlite-vec \u003ca href=\"https://github.com/asg017/sqlite-vec/releases/tag/v0.1.9\"\u003ev0.1.9\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eIntroduce \u003ccode\u003eColumnInfo\u003c/code\u003e, enabling dynamic query builders and ORMs to retrieve underlying SQLite C-API metadata (\u003ccode\u003eOriginName\u003c/code\u003e, \u003ccode\u003eTableName\u003c/code\u003e, \u003ccode\u003eDatabaseName\u003c/code\u003e, and \u003ccode\u003eDeclType\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003eThis feature is exposed via the idiomatic \u003ccode\u003edatabase/sql\u003c/code\u003e escape hatch \u003ccode\u003e(*sql.Conn).Raw()\u003c/code\u003e, avoiding custom statement handles and keeping the standard library workflow intact.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/113\"\u003e#113\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/113\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/113\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-04-17 v1.49.0: Upgrade to \u003ca href=\"https://sqlite.org/releaselog/3_53_0.html\"\u003eSQLite 3.53.0\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e-DSQLITE_ENABLE_DBPAGE_VTAB\u003c/code\u003e to the transpilation. See \u003ca href=\"https://www.sqlite.org/dbpage.html\"\u003e\u0026quot;The SQLITE_DBPAGE Virtual Table\u0026quot;\u003c/a\u003e for details.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-04-06 v1.48.2:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFix ABI mapping mismatch in the pre-update hook trampoline that caused silent truncation of large 64-bit RowIDs.\u003c/li\u003e\n\u003cli\u003eEnsure the Go trampoline signature correctly aligns with the public \u003ccode\u003esqlite3_preupdate_hook\u003c/code\u003e C API, preventing data corruption for high-entropy keys (e.g., Snowflake IDs).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/98\"\u003e#98\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/98\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/98\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix the memory allocator used in \u003ccode\u003e(*conn).Deserialize\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eReplace \u003ccode\u003etls.Alloc\u003c/code\u003e with \u003ccode\u003esqlite3_malloc64\u003c/code\u003e to prevent internal allocator corruption. This ensures the buffer is safely owned by SQLite, which may resize or free it due to the \u003ccode\u003eSQLITE_DESERIALIZE_RESIZEABLE\u003c/code\u003e and \u003ccode\u003eSQLITE_DESERIALIZE_FREEONCLOSE\u003c/code\u003e flags.\u003c/li\u003e\n\u003cli\u003ePrevent a memory leak by properly freeing the allocated buffer if fetching the main database name fails before handing ownership to SQLite.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/100\"\u003e#100\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/100\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/100\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003e(*conn).Deserialize\u003c/code\u003e to explicitly reject \u003ccode\u003enil\u003c/code\u003e or empty byte slices.\u003c/li\u003e\n\u003cli\u003ePrevent silent database disconnection and connection pool corruption caused by SQLite's default behavior when \u003ccode\u003esqlite3_deserialize\u003c/code\u003e receives a 0-length buffer.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/101\"\u003e#101\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/101\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/101\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003ecommitHookTrampoline\u003c/code\u003e and \u003ccode\u003erollbackHookTrampoline\u003c/code\u003e signatures by removing the unused \u003ccode\u003epCsr\u003c/code\u003e parameter.\u003c/li\u003e\n\u003cli\u003eAligns internal hook callbacks accurately with the underlying SQLite C API, cleaning up the code to prevent potential future confusion or bugs.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/102\"\u003e#102\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/102\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/102\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003echeckptr\u003c/code\u003e instrumentation failures during \u003ccode\u003ego test -race\u003c/code\u003e when registering and using virtual tables (\u003ccode\u003evtab\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003eAllocate \u003ccode\u003esqlite3_module\u003c/code\u003e instances using the C allocator (\u003ccode\u003elibc.Xcalloc\u003c/code\u003e) instead of the Go heap. This ensures transpiled C code can safely perform pointer operations on the struct without tripping Go's pointer checks.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/103\"\u003e#103\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/103\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/103\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix data race on \u003ccode\u003emutex.id\u003c/code\u003e in the \u003ccode\u003emutexTry\u003c/code\u003e non-recursive path.\u003c/li\u003e\n\u003cli\u003eEnsure consistent atomic writes (\u003ccode\u003eatomic.StoreInt32\u003c/code\u003e) to prevent data races with atomic loads in \u003ccode\u003emutexHeld\u003c/code\u003e and \u003ccode\u003emutexNotheld\u003c/code\u003e during concurrent execution.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/104\"\u003e#104\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/104\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/104\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix resource leak in \u003ccode\u003e(*Backup).Commit\u003c/code\u003e where the destination connection was not closed on error.\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003edstConn\u003c/code\u003e is properly closed when \u003ccode\u003esqlite3_backup_finish\u003c/code\u003e fails, preventing file descriptor, TLS, and memory leaks.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/105\"\u003e#105\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/105\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/105\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eExec\u003c/code\u003e to fully drain rows when encountering \u003ccode\u003eSQLITE_ROW\u003c/code\u003e, preventing silent data loss in DML statements.\u003c/li\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eExec\u003c/code\u003e aborted after the first row, meaning \u003ccode\u003eINSERT\u003c/code\u003e, \u003ccode\u003eUPDATE\u003c/code\u003e, or \u003ccode\u003eDELETE\u003c/code\u003e statements with a \u003ccode\u003eRETURNING\u003c/code\u003e clause would fail to process subsequent rows. The execution path now correctly loops until \u003ccode\u003eSQLITE_DONE\u003c/code\u003e and properly respects context cancellations during the drain loop, fully aligning with native C \u003ccode\u003esqlite3_exec\u003c/code\u003e semantics.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/106\"\u003e#106\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/106\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/106\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;Shadowed err value (stmt.go)\u0026quot;.\u003c/li\u003e\n\u003cli\u003eSee [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/249\"\u003e#249\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/work_items/249\"\u003ehttps://gitlab.com/cznic/sqlite/-/work_items/249\u003c/a\u003e), thanks Emrecan BATI!\u003c/li\u003e\n\u003cli\u003eFix silent omission of virtual table savepoint callbacks by correctly setting the sqlite3_module version.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/107\"\u003e#107\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/107\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/107\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003evfsRead\u003c/code\u003e to properly handle partial and fragmented reads from \u003ccode\u003eio.Reader\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/b95ed459e063439b1b7f58db051f168832bb14b6\"\u003e\u003ccode\u003eb95ed45\u003c/code\u003e\u003c/a\u003e upgrade to SQLite 3.53.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/e220cc9b51f0ce842490194538f3c45daf2572b3\"\u003e\u003ccode\u003ee220cc9\u003c/code\u003e\u003c/a\u003e CHANGELOG.md: add !113\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/a58d5e552a64d5082bdf1488db35f27ce7536c1d\"\u003e\u003ccode\u003ea58d5e5\u003c/code\u003e\u003c/a\u003e Merge branch 'columns' into 'master'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/119d8b1c8514ceadf0a5a4aa8a9c94514b739377\"\u003e\u003ccode\u003e119d8b1\u003c/code\u003e\u003c/a\u003e add ColumnInfo, for inspecting query columns\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/c353a4f762ca821c6ebc6a17097e19e9dcec5306\"\u003e\u003ccode\u003ec353a4f\u003c/code\u003e\u003c/a\u003e upgrade to sqlite-vec v0.1.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/fe575e48232629112cce2e8bea368358e35c1616\"\u003e\u003ccode\u003efe575e4\u003c/code\u003e\u003c/a\u003e doc.go: update SQLite version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/3ccb9cab30387f2192593c4acb635e58fd6bbd5e\"\u003e\u003ccode\u003e3ccb9ca\u003c/code\u003e\u003c/a\u003e upgrade to SQLite 3.53.0\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://gitlab.com/cznic/sqlite/compare/v1.48.2...v1.50.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/aquasecurity/trivy/pull/10717","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/aquasecurity%2Ftrivy/issues/10717","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/10717/packages"}},{"old_version":"0.21.5","new_version":"0.21.6","update_type":"patch","path":null,"pr_created_at":"2026-05-21T05:53:32.000Z","version_change":"0.21.5 → 0.21.6","issue":{"uuid":"4492101499","node_id":"PR_kwDOGZIwWs7dzxQF","number":529,"state":"closed","title":"chore(deps): Bump the production-dependencies group across 1 directory with 5 updates","user":"dependabot[bot]","labels":["dco-signoff: yes","release-note-none","lgtm","size/XXL"],"assignees":["jcanocan"],"locked":false,"comments_count":4,"pull_request":true,"closed_at":"2026-05-22T05:54:17.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-21T05:53:32.000Z","updated_at":"2026-05-22T05:54:19.000Z","time_to_close":86445,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): Bump","group_name":"production-dependencies","update_count":5,"packages":[{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"},{"name":"go.podman.io/image/v5","old_version":"5.39.2","new_version":"5.40.0","repository_url":"https://github.com/containers/container-libs"},{"name":"github.com/cyphar/filepath-securejoin","old_version":"0.5.1","new_version":"0.6.1"},{"name":"github.com/docker/cli","old_version":"29.5.0+incompatible","new_version":"29.5.1+incompatible"},{"name":"go.podman.io/storage","old_version":"1.62.0","new_version":"1.63.0"}],"path":null,"ecosystem":"go"},"body":"Bumps the production-dependencies group with 2 updates in the / directory: [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) and [go.podman.io/image/v5](https://github.com/containers/container-libs).\n\nUpdates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.podman.io/image/v5` from 5.39.2 to 5.40.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/3c2fa91fe10032693063faac91470a84523dd26a\"\u003e\u003ccode\u003e3c2fa91\u003c/code\u003e\u003c/a\u003e Bump to c/image v5.40\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/f871d195072be221537d1d7d5fd969c9a3ac9f17\"\u003e\u003ccode\u003ef871d19\u003c/code\u003e\u003c/a\u003e Bump to c/storage v1.63.0 in c/image, c/image to v5.40\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/550f62f274dbfc1523ade003f1e9384fff829f17\"\u003e\u003ccode\u003e550f62f\u003c/code\u003e\u003c/a\u003e Bump c/storage to v1.63.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/4fa186482657d75f3a09beec74090040527bc8d6\"\u003e\u003ccode\u003e4fa1864\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/816\"\u003e#816\u003c/a\u003e from alexlarsson/fix-composefs-verity\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/32704ef886484dac01d986ed459da3f632a03ce8\"\u003e\u003ccode\u003e32704ef\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/855\"\u003e#855\u003c/a\u003e from containers/renovate/github.com-docker-cli-29.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/98ff31ac75a0d58ceb4a37ff80a7be1d6d2e5ced\"\u003e\u003ccode\u003e98ff31a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/853\"\u003e#853\u003c/a\u003e from mheon/containers_conf_documentation_removals\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/3e1614595cda86809c27a8be66bbbe9e65c383ba\"\u003e\u003ccode\u003e3e16145\u003c/code\u003e\u003c/a\u003e Update module github.com/docker/cli to v29.5.1+incompatible\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/206fff340ff068bd07193556a8a254c1b59b826f\"\u003e\u003ccode\u003e206fff3\u003c/code\u003e\u003c/a\u003e Manpage: remove slirp4netns/boltdb references\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/3592bda57d2498defdf73f2d53f899267cda74d7\"\u003e\u003ccode\u003e3592bda\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/852\"\u003e#852\u003c/a\u003e from containers/renovate/github.com-onsi-gomega-1.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/f04d9c8daa467c4cae240b3ec62059df87c0c726\"\u003e\u003ccode\u003ef04d9c8\u003c/code\u003e\u003c/a\u003e Update module github.com/onsi/gomega to v1.41.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/containers/container-libs/compare/image/v5.39.2...image/v5.40.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cyphar/filepath-securejoin` from 0.5.1 to 0.6.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cyphar/filepath-securejoin/releases\"\u003egithub.com/cyphar/filepath-securejoin's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.6.0 -- \u0026quot;By the Power of Greyskull!\u0026quot;\u003c/h2\u003e\n\u003cp\u003eWhile quite small code-wise, this release marks a very key point in the\ndevelopment of filepath-securejoin.\u003c/p\u003e\n\u003cp\u003efilepath-securejoin was originally intended (back in 2017) to simply be a\nsingle-purpose library that would take some common code used in container\nruntimes (specifically, Docker's \u003ccode\u003eFollowSymlinksInScope\u003c/code\u003e) and make it more\ngeneral-purpose (with the eventual goals of it ending up in the Go stdlib).\u003c/p\u003e\n\u003cp\u003eOf course, I quickly discovered that this problem was actually far more\ncomplicated to solve when dealing with racing attackers, which lead to me\ndeveloping \u003ccode\u003eopenat2(2)\u003c/code\u003e and \u003ca href=\"https://github.com/cyphar/libpathrs\"\u003elibpathrs\u003c/a\u003e. I had originally planned for\nlibpathrs to completely replace filepath-securejoin \u0026quot;once it was ready\u0026quot; but in\nthe interim we needed to fix several race attacks in runc as part of security\nadvisories. Obviously we couldn't require the usage of a pre-0.1 Rust library\nin runc so it was necessary to port bits of libpathrs into filepath-securejoin.\n(Ironically the first prototypes of libpathrs were originally written in Go and\nthen rewritten to Rust, so the code in filepath-securejoin is actually Go code\nthat was rewritten to Rust then re-rewritten to Go.)\u003c/p\u003e\n\u003cp\u003eIt then became clear that pure-Go libraries will likely not be willing to\nrequire CGo for all of their builds, so it was necessary to accept that\nfilepath-securejoin will need to stay. As such, in v0.5.0 we provided more\npure-Go implementations of features from libpathrs but moved them into\n\u003ccode\u003epathrs-lite\u003c/code\u003e subpackage to clarify what purpose these helpers serve.\u003c/p\u003e\n\u003cp\u003eThis release finally closes the loop and makes it so that pathrs-lite can\ntransparently use libpathrs (via a \u003ccode\u003elibpathrs\u003c/code\u003e build-tag). This means that\nupstream libraries can use the pure Go version if they prefer, but downstreams\n(either downstream library users or even downstream distributions) are able to\nmigrate to libpathrs for all usages of pathrs-lite in an entire Go binary.\u003c/p\u003e\n\u003cp\u003eI should make it clear that I do not plan to port the rest of libpathrs to Go,\nas I do not wish to maintain two copies of the same codebase. pathrs-lite\nalready provides the core essentials necessary to operate on paths safely for\nmost modern systems. Users who want additional hardening or more ergonomic APIs\nare free to use \u003ca href=\"https://cyphar.com/go-pathrs\"\u003e\u003ccode\u003ecyphar.com/go-pathrs\u003c/code\u003e\u003c/a\u003e (libpathrs's Go bindings).\u003c/p\u003e\n\u003ch3\u003eBreaking\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe deprecated \u003ccode\u003eMkdirAll\u003c/code\u003e, \u003ccode\u003eMkdirAllHandle\u003c/code\u003e, \u003ccode\u003eOpenInRoot\u003c/code\u003e, \u003ccode\u003eOpenatInRoot\u003c/code\u003e and\n\u003ccode\u003eReopen\u003c/code\u003e wrappers have been removed. Please switch to using \u003ccode\u003epathrs-lite\u003c/code\u003e\ndirectly.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003epathrs-lite\u003c/code\u003e now has support for using \u003ca href=\"https://github.com/cyphar/libpathrs\"\u003elibpathrs\u003c/a\u003e as a backend.\nThis is opt-in and can be enabled at build time with the \u003ccode\u003elibpathrs\u003c/code\u003e build\ntag. The intention is to allow for downstream libraries and other projects to\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md\"\u003egithub.com/cyphar/filepath-securejoin's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[0.6.1] - 2025-11-19\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003eAt last up jumped the cunning spider, and fiercely held her fast.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eOur logic for deciding whether to use \u003ccode\u003eopenat2(2)\u003c/code\u003e or fallback to an \u003ccode\u003eO_PATH\u003c/code\u003e\nresolver would cache the result to avoid doing needless test runs of\n\u003ccode\u003eopenat2(2)\u003c/code\u003e. However, this causes issues when \u003ccode\u003epathrs-lite\u003c/code\u003e is being used by\na program that applies new seccomp-bpf filters onto itself -- if the filter\ndenies \u003ccode\u003eopenat2(2)\u003c/code\u003e then we would return that error rather than falling back\nto the \u003ccode\u003eO_PATH\u003c/code\u003e resolver. To resolve this issue, we no longer cache the\nresult if \u003ccode\u003eopenat2(2)\u003c/code\u003e was successful, only if there was an error.\u003c/li\u003e\n\u003cli\u003eA file descriptor leak in our \u003ccode\u003eopenat2\u003c/code\u003e wrapper (when doing the necessary\n\u003ccode\u003edup\u003c/code\u003e for \u003ccode\u003eRESOLVE_IN_ROOT\u003c/code\u003e) has been removed.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[0.5.2] - 2025-11-19\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u0026quot;Will you walk into my parlour?\u0026quot; said a spider to a fly.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eOur logic for deciding whether to use \u003ccode\u003eopenat2(2)\u003c/code\u003e or fallback to an \u003ccode\u003eO_PATH\u003c/code\u003e\nresolver would cache the result to avoid doing needless test runs of\n\u003ccode\u003eopenat2(2)\u003c/code\u003e. However, this causes issues when \u003ccode\u003epathrs-lite\u003c/code\u003e is being used by\na program that applies new seccomp-bpf filters onto itself -- if the filter\ndenies \u003ccode\u003eopenat2(2)\u003c/code\u003e then we would return that error rather than falling back\nto the \u003ccode\u003eO_PATH\u003c/code\u003e resolver. To resolve this issue, we no longer cache the\nresult if \u003ccode\u003eopenat2(2)\u003c/code\u003e was successful, only if there was an error.\u003c/li\u003e\n\u003cli\u003eA file descriptor leak in our \u003ccode\u003eopenat2\u003c/code\u003e wrapper (when doing the necessary\n\u003ccode\u003edup\u003c/code\u003e for \u003ccode\u003eRESOLVE_IN_ROOT\u003c/code\u003e) has been removed.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[0.6.0] - 2025-11-03\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003eBy the Power of Greyskull!\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eBreaking\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe deprecated \u003ccode\u003eMkdirAll\u003c/code\u003e, \u003ccode\u003eMkdirAllHandle\u003c/code\u003e, \u003ccode\u003eOpenInRoot\u003c/code\u003e, \u003ccode\u003eOpenatInRoot\u003c/code\u003e and\n\u003ccode\u003eReopen\u003c/code\u003e wrappers have been removed. Please switch to using \u003ccode\u003epathrs-lite\u003c/code\u003e\ndirectly.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003epathrs-lite\u003c/code\u003e now has support for using libpathrs as a backend. This is\nopt-in and can be enabled at build time with the \u003ccode\u003elibpathrs\u003c/code\u003e build tag. The\nintention is to allow for downstream libraries and other projects to make use\nof the pure-Go \u003ccode\u003egithub.com/cyphar/filepath-securejoin/pathrs-lite\u003c/code\u003e package\nand distributors can then opt-in to using \u003ccode\u003elibpathrs\u003c/code\u003e for the entire binary\nif they wish.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/9c4135bad38a4e2cda5220216000130d25b2e190\"\u003e\u003ccode\u003e9c4135b\u003c/code\u003e\u003c/a\u003e VERSION: release 0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/d952bef93f1c4090a004702917447140be865496\"\u003e\u003ccode\u003ed952bef\u003c/code\u003e\u003c/a\u003e merge v0.5.x branch into main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/deb72a4cc1a3a8a8a0833e868dfd5bd906e8e859\"\u003e\u003ccode\u003edeb72a4\u003c/code\u003e\u003c/a\u003e CHANGELOG: fix unreleased links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/336bf8f2d45b5bfc059e3530c18d0a8c2ba0022f\"\u003e\u003ccode\u003e336bf8f\u003c/code\u003e\u003c/a\u003e merge \u003ca href=\"https://redirect.github.com/cyphar/filepath-securejoin/issues/87\"\u003e#87\u003c/a\u003e into cyphar/filepath-securejoin:v0.5.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/23c6e211ca42a85f757c961e1e0f352942a15d2b\"\u003e\u003ccode\u003e23c6e21\u003c/code\u003e\u003c/a\u003e VERSION: back to development\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/6311ca883bbb2958561c6fef4f3a8e10bcb9a418\"\u003e\u003ccode\u003e6311ca8\u003c/code\u003e\u003c/a\u003e VERSION: release v0.5.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/91da803696f3cb85b11073d3c7075e0c7e3e3745\"\u003e\u003ccode\u003e91da803\u003c/code\u003e\u003c/a\u003e merge \u003ca href=\"https://redirect.github.com/cyphar/filepath-securejoin/issues/86\"\u003e#86\u003c/a\u003e into cyphar/filepath-securejoin:v0.5.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/4dbce7c85c563dcdae467b2427a85de12f707d41\"\u003e\u003ccode\u003e4dbce7c\u003c/code\u003e\u003c/a\u003e gopathrs: close the fd after dup in openat2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/1eaadd6f23dd2bb710b1030728d3475995df8fc1\"\u003e\u003ccode\u003e1eaadd6\u003c/code\u003e\u003c/a\u003e merge \u003ca href=\"https://redirect.github.com/cyphar/filepath-securejoin/issues/85\"\u003e#85\u003c/a\u003e into cyphar/filepath-securejoin:main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cyphar/filepath-securejoin/commit/c1c2a539afea30fcfdd8982c33c72e4f5dce2cbf\"\u003e\u003ccode\u003ec1c2a53\u003c/code\u003e\u003c/a\u003e gopathrs: close the fd after dup in openat2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cyphar/filepath-securejoin/compare/v0.5.1...v0.6.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/cli` from 29.5.0+incompatible to 29.5.1+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2518b52d948a0cbee071d394c03c86a3005636ba\"\u003e\u003ccode\u003e2518b52\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6991\"\u003e#6991\u003c/a\u003e from mickael-docker/docs-clarify-authz\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9f18a0a70c9228f5892594c6b56425b8bed1899f\"\u003e\u003ccode\u003e9f18a0a\u003c/code\u003e\u003c/a\u003e docs: clarify authz content type\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2944fd1daa5d54315ab8fcd874ea9cb6199c6117\"\u003e\u003ccode\u003e2944fd1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6989\"\u003e#6989\u003c/a\u003e from thaJeztah/bump_version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/c41489ac3901885bb3891aef9cfe65ca69dc4580\"\u003e\u003ccode\u003ec41489a\u003c/code\u003e\u003c/a\u003e bump VERSION to v29.5.1-dev\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/docker/cli/compare/v29.5.0...v29.5.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.podman.io/storage` from 1.62.0 to 1.63.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/550f62f274dbfc1523ade003f1e9384fff829f17\"\u003e\u003ccode\u003e550f62f\u003c/code\u003e\u003c/a\u003e Bump c/storage to v1.63.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/4fa186482657d75f3a09beec74090040527bc8d6\"\u003e\u003ccode\u003e4fa1864\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/816\"\u003e#816\u003c/a\u003e from alexlarsson/fix-composefs-verity\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/32704ef886484dac01d986ed459da3f632a03ce8\"\u003e\u003ccode\u003e32704ef\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/855\"\u003e#855\u003c/a\u003e from containers/renovate/github.com-docker-cli-29.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/98ff31ac75a0d58ceb4a37ff80a7be1d6d2e5ced\"\u003e\u003ccode\u003e98ff31a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/853\"\u003e#853\u003c/a\u003e from mheon/containers_conf_documentation_removals\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/3e1614595cda86809c27a8be66bbbe9e65c383ba\"\u003e\u003ccode\u003e3e16145\u003c/code\u003e\u003c/a\u003e Update module github.com/docker/cli to v29.5.1+incompatible\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/206fff340ff068bd07193556a8a254c1b59b826f\"\u003e\u003ccode\u003e206fff3\u003c/code\u003e\u003c/a\u003e Manpage: remove slirp4netns/boltdb references\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/3592bda57d2498defdf73f2d53f899267cda74d7\"\u003e\u003ccode\u003e3592bda\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/852\"\u003e#852\u003c/a\u003e from containers/renovate/github.com-onsi-gomega-1.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/f04d9c8daa467c4cae240b3ec62059df87c0c726\"\u003e\u003ccode\u003ef04d9c8\u003c/code\u003e\u003c/a\u003e Update module github.com/onsi/gomega to v1.41.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/21fcc1a3fc8b9fcd1d438f4647ed0aa4930f6919\"\u003e\u003ccode\u003e21fcc1a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/755\"\u003e#755\u003c/a\u003e from Honny1/pesto-support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containers/container-libs/commit/131c1709ef52b977694a1b355281275feea8ae92\"\u003e\u003ccode\u003e131c170\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containers/container-libs/issues/851\"\u003e#851\u003c/a\u003e from containers/renovate/github.com-onsi-ginkgo-v2-2.x\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/containers/container-libs/compare/storage/v1.62.0...storage/v1.63.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eMost Recent Ignore Conditions Applied to This Pull Request\u003c/summary\u003e\n\n| Dependency Name | Ignore Conditions |\n| --- | --- |\n| github.com/cyphar/filepath-securejoin | [\u003e 0.5.1] |\n\u003c/details\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/kubevirt/containerdisks/pull/529","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/kubevirt%2Fcontainerdisks/issues/529","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/529/packages"}},{"old_version":"0.21.5","new_version":"0.21.6","update_type":"patch","path":null,"pr_created_at":"2026-05-20T08:58:31.000Z","version_change":"0.21.5 → 0.21.6","issue":{"uuid":"4484828122","node_id":"PR_kwDOO2nR4c7dcUaD","number":416,"state":"closed","title":"chore(deps): bump the gomod group across 1 directory with 2 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-21T02:39:48.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-20T08:58:31.000Z","updated_at":"2026-05-21T02:39:50.000Z","time_to_close":63677,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"gomod","update_count":2,"packages":[{"name":"cloud.google.com/go/storage","old_version":"1.62.1","new_version":"1.62.2","repository_url":"https://github.com/googleapis/google-cloud-go"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"}],"path":null,"ecosystem":"go"},"body":"Bumps the gomod group with 2 updates in the / directory: [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) and [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry).\n\nUpdates `cloud.google.com/go/storage` from 1.62.1 to 1.62.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/google-cloud-go/releases\"\u003ecloud.google.com/go/storage's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003estorage: v1.62.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/storage/v1.62.1...storage/v1.62.2\"\u003ev1.62.2\u003c/a\u003e (2026-05-18)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eenable open telemetry attrs (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14426\"\u003e#14426\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/74eab64d\"\u003e74eab64d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003erestore metadata operations timeout in gRPC (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14575\"\u003e#14575\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/275ff562\"\u003e275ff562\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSet default chunkRetryDeadline to 32s in NewWriterFromAppendableObject (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14458\"\u003e#14458\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/ec7c7d66\"\u003eec7c7d66\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003erefactor userProject metadata propagation in ListObjects  (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14533\"\u003e#14533\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/fbb543e3\"\u003efbb543e3\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/50a575507ac6f3bdcc926dceda45cfa4c943a637\"\u003e\u003ccode\u003e50a5755\u003c/code\u003e\u003c/a\u003e chore: librarian release pull request: 20260518T161338Z (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14610\"\u003e#14610\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/585840ff8168325dea801e13c398055692c0fe32\"\u003e\u003ccode\u003e585840f\u003c/code\u003e\u003c/a\u003e spanner: skip flaky TestIntegration_DbRemovalRecovery (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14607\"\u003e#14607\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/f8bf88faa8738e9ca6684d9e28e2f0c05ff1eda1\"\u003e\u003ccode\u003ef8bf88f\u003c/code\u003e\u003c/a\u003e test(spanner): retry query after database recreation in integration test (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14\"\u003e#14\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/9168ab887eb52ea8f4b45425f493d14ff047d3b6\"\u003e\u003ccode\u003e9168ab8\u003c/code\u003e\u003c/a\u003e chore(librariangen): tweak release preview test (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14599\"\u003e#14599\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/f8b9a93aefedc167db7c7a28140d47ef2f1e3a82\"\u003e\u003ccode\u003ef8b9a93\u003c/code\u003e\u003c/a\u003e fix(spanner/spannertest): Support UUID as a base data type (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14117\"\u003e#14117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/a42fd83b04237b9f04e54cf0de86978c97ad5a04\"\u003e\u003ccode\u003ea42fd83\u003c/code\u003e\u003c/a\u003e fix(internal/librariange): release preview support (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14588\"\u003e#14588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/d9448309a64e756a5facdfbd6ffa9d51f27c0610\"\u003e\u003ccode\u003ed944830\u003c/code\u003e\u003c/a\u003e fix(datastore): add retries to emulator (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14591\"\u003e#14591\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/c5aaedcf817fd97f9a822666e02fbb89bfcbcc60\"\u003e\u003ccode\u003ec5aaedc\u003c/code\u003e\u003c/a\u003e chore: migrate Go configuration in librarian.yaml (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14587\"\u003e#14587\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/8a0e84978507e32473aa923e525b6803defd1d3f\"\u003e\u003ccode\u003e8a0e849\u003c/code\u003e\u003c/a\u003e doc(agentplatform): Add notes and quick examples to the README\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/033f4fe394f6f1c36dd31eaebf0ac0daef7bb744\"\u003e\u003ccode\u003e033f4fe\u003c/code\u003e\u003c/a\u003e chore: librarian release pull request: 20260514T191310Z (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14589\"\u003e#14589\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/storage/v1.62.1...storage/v1.62.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/chainguard-forks/kaniko/pull/416","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/chainguard-forks%2Fkaniko/issues/416","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/416/packages"}},{"old_version":"0.21.5","new_version":"0.21.6","update_type":"patch","path":null,"pr_created_at":"2026-05-19T18:35:44.000Z","version_change":"0.21.5 → 0.21.6","issue":{"uuid":"4480020746","node_id":"PR_kwDODji2kM7dM03S","number":2203,"state":"open","title":"build(deps): bump github.com/google/go-containerregistry from 0.21.5 to 0.21.6","user":"dependabot[bot]","labels":["size/M","kind/dependency-change","release-note-none"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-19T18:35:44.000Z","updated_at":"2026-05-22T06:48:36.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.21.5 to 0.21.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/shipwright-io/build/pull/2203","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/shipwright-io%2Fbuild/issues/2203","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2203/packages"}},{"old_version":"0.21.5","new_version":"0.21.6","update_type":"patch","path":null,"pr_created_at":"2026-05-19T08:38:00.000Z","version_change":"0.21.5 → 0.21.6","issue":{"uuid":"4475797361","node_id":"PR_kwDOD2fr6s7c_GTP","number":3199,"state":"open","title":"build(deps): bump github.com/google/go-containerregistry from 0.21.5 to 0.21.6","user":"dependabot[bot]","labels":["size/XXL","cncf-cla: yes","ok-to-test","lgtm","release-note-none","approved"],"assignees":["saschagrunert"],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-19T08:38:00.000Z","updated_at":"2026-05-19T09:21:43.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.21.5 to 0.21.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry\u0026package-manager=go_modules\u0026previous-version=0.21.5\u0026new-version=0.21.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/kubernetes-sigs/security-profiles-operator/pull/3199","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/kubernetes-sigs%2Fsecurity-profiles-operator/issues/3199","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3199/packages"}},{"old_version":"0.21.5","new_version":"0.21.6","update_type":"patch","path":null,"pr_created_at":"2026-05-19T07:41:31.000Z","version_change":"0.21.5 → 0.21.6","issue":{"uuid":"4475419334","node_id":"PR_kwDODpbtts7c94xt","number":1885,"state":"closed","title":"Bump github.com/google/go-containerregistry from 0.21.5 to 0.21.6","user":"dependabot[bot]","labels":["type:dependency-upgrade","semver:patch"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-23T02:06:56.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-19T07:41:31.000Z","updated_at":"2026-05-23T02:06:58.000Z","time_to_close":325525,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.21.5 to 0.21.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry\u0026package-manager=go_modules\u0026previous-version=0.21.5\u0026new-version=0.21.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/paketo-buildpacks/pipeline-builder/pull/1885","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/paketo-buildpacks%2Fpipeline-builder/issues/1885","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1885/packages"}},{"old_version":"0.21.5","new_version":"0.21.6","update_type":"patch","path":null,"pr_created_at":"2026-05-18T23:57:13.000Z","version_change":"0.21.5 → 0.21.6","issue":{"uuid":"4473378955","node_id":"PR_kwDOEDzmas7c3ZKz","number":1675,"state":"open","title":"chore(deps): bump the all group with 2 updates","user":"dependabot[bot]","labels":["size/M","kind/misc","ok-to-test","release-note-none","dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-18T23:57:13.000Z","updated_at":"2026-05-18T23:57:25.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"all","update_count":2,"packages":[{"name":"cloud.google.com/go/storage","old_version":"1.62.1","new_version":"1.62.2","repository_url":"https://github.com/googleapis/google-cloud-go"},{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"}],"path":null,"ecosystem":"go"},"body":"Bumps the all group with 2 updates: [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) and [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry).\n\nUpdates `cloud.google.com/go/storage` from 1.62.1 to 1.62.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/google-cloud-go/releases\"\u003ecloud.google.com/go/storage's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003estorage: v1.62.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/storage/v1.62.1...storage/v1.62.2\"\u003ev1.62.2\u003c/a\u003e (2026-05-18)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eenable open telemetry attrs (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14426\"\u003e#14426\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/74eab64d\"\u003e74eab64d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003erestore metadata operations timeout in gRPC (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14575\"\u003e#14575\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/275ff562\"\u003e275ff562\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSet default chunkRetryDeadline to 32s in NewWriterFromAppendableObject (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14458\"\u003e#14458\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/ec7c7d66\"\u003eec7c7d66\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003erefactor userProject metadata propagation in ListObjects  (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14533\"\u003e#14533\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/fbb543e3\"\u003efbb543e3\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/50a575507ac6f3bdcc926dceda45cfa4c943a637\"\u003e\u003ccode\u003e50a5755\u003c/code\u003e\u003c/a\u003e chore: librarian release pull request: 20260518T161338Z (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14610\"\u003e#14610\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/585840ff8168325dea801e13c398055692c0fe32\"\u003e\u003ccode\u003e585840f\u003c/code\u003e\u003c/a\u003e spanner: skip flaky TestIntegration_DbRemovalRecovery (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14607\"\u003e#14607\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/f8bf88faa8738e9ca6684d9e28e2f0c05ff1eda1\"\u003e\u003ccode\u003ef8bf88f\u003c/code\u003e\u003c/a\u003e test(spanner): retry query after database recreation in integration test (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14\"\u003e#14\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/9168ab887eb52ea8f4b45425f493d14ff047d3b6\"\u003e\u003ccode\u003e9168ab8\u003c/code\u003e\u003c/a\u003e chore(librariangen): tweak release preview test (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14599\"\u003e#14599\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/f8b9a93aefedc167db7c7a28140d47ef2f1e3a82\"\u003e\u003ccode\u003ef8b9a93\u003c/code\u003e\u003c/a\u003e fix(spanner/spannertest): Support UUID as a base data type (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14117\"\u003e#14117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/a42fd83b04237b9f04e54cf0de86978c97ad5a04\"\u003e\u003ccode\u003ea42fd83\u003c/code\u003e\u003c/a\u003e fix(internal/librariange): release preview support (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14588\"\u003e#14588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/d9448309a64e756a5facdfbd6ffa9d51f27c0610\"\u003e\u003ccode\u003ed944830\u003c/code\u003e\u003c/a\u003e fix(datastore): add retries to emulator (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14591\"\u003e#14591\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/c5aaedcf817fd97f9a822666e02fbb89bfcbcc60\"\u003e\u003ccode\u003ec5aaedc\u003c/code\u003e\u003c/a\u003e chore: migrate Go configuration in librarian.yaml (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14587\"\u003e#14587\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/8a0e84978507e32473aa923e525b6803defd1d3f\"\u003e\u003ccode\u003e8a0e849\u003c/code\u003e\u003c/a\u003e doc(agentplatform): Add notes and quick examples to the README\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-go/commit/033f4fe394f6f1c36dd31eaebf0ac0daef7bb744\"\u003e\u003ccode\u003e033f4fe\u003c/code\u003e\u003c/a\u003e chore: librarian release pull request: 20260514T191310Z (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-go/issues/14589\"\u003e#14589\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/googleapis/google-cloud-go/compare/storage/v1.62.1...storage/v1.62.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/tektoncd/chains/pull/1675","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/tektoncd%2Fchains/issues/1675","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1675/packages"}},{"old_version":"0.21.5","new_version":"0.21.6","update_type":"patch","path":null,"pr_created_at":"2026-05-18T23:16:34.000Z","version_change":"0.21.5 → 0.21.6","issue":{"uuid":"4473219255","node_id":"PR_kwDOEKkK-s7c24Dr","number":813,"state":"open","title":"build(deps): bump github.com/google/go-containerregistry from 0.21.5 to 0.21.6","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-18T23:16:34.000Z","updated_at":"2026-05-18T23:16:35.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/google/go-containerregistry","old_version":"0.21.5","new_version":"0.21.6","repository_url":"https://github.com/google/go-containerregistry"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.21.5 to 0.21.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update dependencies to use new azure sdk components by \u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: restore resp.Body in retryError so CheckError can parse it by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: return 202 Accepted for PATCH chunk uploads by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2265\"\u003egoogle/go-containerregistry#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow OCI distribution spec for artifactType and annotations by \u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactions: attach Codecov token to coverage tests on main by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2270\"\u003egoogle/go-containerregistry#2270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: use DeleteScope (with \u0026quot;delete\u0026quot; action) for manifest deletion by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2266\"\u003egoogle/go-containerregistry#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: limit concurrent layer pulls by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/registry: reject corrupt disk blobs by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2272\"\u003egoogle/go-containerregistry#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: close layer readers during export by \u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2277\"\u003egoogle/go-containerregistry#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecrane/flatten: preserve image media type when flattening by \u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2267\"\u003egoogle/go-containerregistry#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2273\"\u003egoogle/go-containerregistry#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2278\"\u003egoogle/go-containerregistry#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2280\"\u003egoogle/go-containerregistry#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace go-homedir with os.UserHomeDir by \u003ca href=\"https://github.com/jammie-jelly\"\u003e\u003ccode\u003e@​jammie-jelly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2282\"\u003egoogle/go-containerregistry#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/name: only treat .localhost as non-HTTPS, not .local by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by \u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(mutate): add Extract round-trip test for filesystem object preservation by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2283\"\u003egoogle/go-containerregistry#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexperiments: remove deprecated support for estargz by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2288\"\u003egoogle/go-containerregistry#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2289\"\u003egoogle/go-containerregistry#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: limit HTTP response body reads to prevent OOM by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2296\"\u003egoogle/go-containerregistry#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump the go-deps group across 3 directories with 6 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2297\"\u003egoogle/go-containerregistry#2297\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: block redirects from token server to private/link-local addresses (SSRF fix) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2292\"\u003egoogle/go-containerregistry#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by \u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate: skip non-layer layers by \u003ca href=\"https://github.com/imjasonh\"\u003e\u003ccode\u003e@​imjasonh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2298\"\u003egoogle/go-containerregistry#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2293\"\u003egoogle/go-containerregistry#2293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: block SSRF via private-IP Location headers in blob uploads by \u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mutate): preserve config blob and layers for non-Docker OCI artifacts by \u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2286\"\u003egoogle/go-containerregistry#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve per-occurrence layer identity in mutate.Image.Layers() by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: retry HTTP 429 (Too Many Requests) by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2301\"\u003egoogle/go-containerregistry#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: allow bearer realm at same host:port as registry by \u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2302\"\u003egoogle/go-containerregistry#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate go version to 1.26.3 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2300\"\u003egoogle/go-containerregistry#2300\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gaganhr94\"\u003e\u003ccode\u003e@​gaganhr94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2262\"\u003egoogle/go-containerregistry#2262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alliasgher\"\u003e\u003ccode\u003e@​alliasgher\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2264\"\u003egoogle/go-containerregistry#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malt3\"\u003e\u003ccode\u003e@​malt3\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2269\"\u003egoogle/go-containerregistry#2269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gnix0\"\u003e\u003ccode\u003e@​gnix0\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2271\"\u003egoogle/go-containerregistry#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blackwell-systems\"\u003e\u003ccode\u003e@​blackwell-systems\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2281\"\u003egoogle/go-containerregistry#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/marwan9696\"\u003e\u003ccode\u003e@​marwan9696\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2285\"\u003egoogle/go-containerregistry#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anishesg\"\u003e\u003ccode\u003e@​anishesg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2279\"\u003egoogle/go-containerregistry#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adilburaksen\"\u003e\u003ccode\u003e@​adilburaksen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2295\"\u003egoogle/go-containerregistry#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/iahsanGill\"\u003e\u003ccode\u003e@​iahsanGill\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2299\"\u003egoogle/go-containerregistry#2299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf\"\u003e\u003ccode\u003e53f7e39\u003c/code\u003e\u003c/a\u003e Update go version to 1.26.3 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/bf87c3bfe4cc3218ac0baa364545d72729d2906d\"\u003e\u003ccode\u003ebf87c3b\u003c/code\u003e\u003c/a\u003e transport: allow bearer realm at same host:port as registry (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2302\"\u003e#2302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c55facddfbd7fc3d648c6fdda9860b350b013a76\"\u003e\u003ccode\u003ec55facd\u003c/code\u003e\u003c/a\u003e transport: retry HTTP 429 (Too Many Requests) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/68a569e4a0eb927d36ccb0fcdf4578425c03b5a2\"\u003e\u003ccode\u003e68a569e\u003c/code\u003e\u003c/a\u003e fix: preserve per-occurrence layer identity in Layers() (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/35b354b436879457221028f05a580fe1c0deccbc\"\u003e\u003ccode\u003e35b354b\u003c/code\u003e\u003c/a\u003e fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e5983f2a67ec46b76984ce6de85de08a44eee955\"\u003e\u003ccode\u003ee5983f2\u003c/code\u003e\u003c/a\u003e remote: block SSRF via private-IP Location headers in blob uploads (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/6dad820da7de0d619f1127c46914f2eaf58e3b46\"\u003e\u003ccode\u003e6dad820\u003c/code\u003e\u003c/a\u003e remote: validate foreign layer URLs to prevent SSRF (fixes \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2259\"\u003e#2259\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2293\"\u003e#2293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/78bdf1b7e2105cdfcd8f23509992c78357ce16ed\"\u003e\u003ccode\u003e78bdf1b\u003c/code\u003e\u003c/a\u003e validate: skip non-layer layers (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c29d91cdc394cb288270f4dd04a31f81054946f4\"\u003e\u003ccode\u003ec29d91c\u003c/code\u003e\u003c/a\u003e pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a70d75a6915ed3137792206dac4bca21d1924959\"\u003e\u003ccode\u003ea70d75a\u003c/code\u003e\u003c/a\u003e transport: block redirects from token server to private/link-local addresses ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.5...v0.21.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry\u0026package-manager=go_modules\u0026previous-version=0.21.5\u0026new-version=0.21.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/saschagrunert/security-profiles-operator/pull/813","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/saschagrunert%2Fsecurity-profiles-operator/issues/813","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/813/packages"}}]}