{"id":1048,"name":"github.com/moby/buildkit","ecosystem":"go","repository_url":"https://github.com/moby/buildkit","issues_count":608,"created_at":"2025-06-06T15:01:39.946Z","updated_at":"2025-06-06T15:01:39.946Z","purl":"pkg:golang/github.com/moby/buildkit","metadata":{"id":3493171,"name":"github.com/moby/buildkit","ecosystem":"go","description":"","homepage":"https://github.com/moby/buildkit","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/moby/buildkit","keywords_array":[],"namespace":"github.com/moby","versions_count":106,"first_release_published_at":"2018-10-12T01:19:25.000Z","latest_release_published_at":"2025-05-19T14:35:04.000Z","latest_release_number":"v0.22.0","last_synced_at":"2025-06-05T22:01:26.591Z","created_at":"2022-04-10T19:15:00.045Z","updated_at":"2025-06-05T22:01:26.591Z","registry_url":"https://pkg.go.dev/github.com/moby/buildkit","install_command":"go get github.com/moby/buildkit","documentation_url":"https://pkg.go.dev/github.com/moby/buildkit#section-documentation","metadata":{},"repo_metadata":{"uuid":"92969352","full_name":"moby/buildkit","owner":"moby","description":"concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit","archived":false,"fork":false,"pushed_at":"2023-03-17T19:46:24.000Z","size":35055,"stargazers_count":6499,"open_issues_count":608,"forks_count":904,"subscribers_count":113,"default_branch":"master","last_synced_at":"2023-03-17T21:10:49.605Z","etag":null,"topics":["builder","buildkit","cloud-native","containers","docker","dockerfile","go","golang","oci","oci-image"],"latest_commit_sha":null,"homepage":"https://github.com/moby/moby/issues/34227","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"logo_url":null,"metadata":{"files":{"readme":"README.md","changelog":null,"contributing":".github/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-05-31T17:04:10.000Z","updated_at":"2023-03-17T19:56:01.000Z","dependencies_parsed_at":"2022-07-13T18:21:08.800Z","dependency_job_id":null,"html_url":"https://github.com/moby/buildkit","commit_stats":null,"repository_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moby%2Fbuildkit","tags_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moby%2Fbuildkit/tags","manifests_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moby%2Fbuildkit/manifests","owner_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/moby","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":108921946,"host_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names"},"owner_record":{"login":"moby","name":"Moby","uuid":"27259197","kind":"organization","description":"An open framework to assemble specialized container systems without reinventing the wheel.","email":null,"website":"https://mobyproject.org/","location":null,"twitter":null,"company":null,"avatar_url":"https://avatars.githubusercontent.com/u/27259197?v=4","repositories_count":26,"last_synced_at":"2023-02-19T18:02:28.288Z","metadata":{"has_sponsors_listing":false},"owner_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/moby"},"tags":[{"name":"v0.11.0","sha":"830288a71f447b46ad44ad5f7bd45148ec450d44","kind":"commit","published_at":"2023-01-09T22:18:43.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.11.0","html_url":"https://github.com/moby/buildkit/releases/tag/v0.11.0"},{"name":"dockerfile/1.5.0-labs","sha":"830288a71f447b46ad44ad5f7bd45148ec450d44","kind":"commit","published_at":"2023-01-09T22:18:43.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.5.0-labs","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.5.0-labs"},{"name":"dockerfile/1.5.0","sha":"830288a71f447b46ad44ad5f7bd45148ec450d44","kind":"commit","published_at":"2023-01-09T22:18:43.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.5.0","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.5.0"},{"name":"dockerfile/1.5.0-rc3-labs","sha":"d83d496f44069c78c65747aae520e54fe0785deb","kind":"commit","published_at":"2023-01-06T19:50:17.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.5.0-rc3-labs","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.5.0-rc3-labs"},{"name":"v0.11.0-rc4","sha":"d83d496f44069c78c65747aae520e54fe0785deb","kind":"commit","published_at":"2023-01-06T19:50:17.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.11.0-rc4","html_url":"https://github.com/moby/buildkit/releases/tag/v0.11.0-rc4"},{"name":"dockerfile/1.5.0-rc3","sha":"d83d496f44069c78c65747aae520e54fe0785deb","kind":"commit","published_at":"2023-01-06T19:50:17.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.5.0-rc3","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.5.0-rc3"},{"name":"v0.11.0-rc3","sha":"4b220de5058abfd01ff619c9d2ff6b09a049bea0","kind":"commit","published_at":"2022-12-16T00:15:13.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.11.0-rc3","html_url":"https://github.com/moby/buildkit/releases/tag/v0.11.0-rc3"},{"name":"dockerfile/1.5.0-labs-rc2","sha":"a489366c7c793b96817994fa4c8195f2cbecd64a","kind":"commit","published_at":"2022-12-13T23:08:23.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.5.0-labs-rc2","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.5.0-labs-rc2"},{"name":"dockerfile/1.5.0-rc2","sha":"a489366c7c793b96817994fa4c8195f2cbecd64a","kind":"commit","published_at":"2022-12-13T23:08:23.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.5.0-rc2","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.5.0-rc2"},{"name":"v0.11.0-rc2","sha":"a489366c7c793b96817994fa4c8195f2cbecd64a","kind":"commit","published_at":"2022-12-13T23:08:23.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.11.0-rc2","html_url":"https://github.com/moby/buildkit/releases/tag/v0.11.0-rc2"},{"name":"dockerfile/1.5.0-rc2-labs","sha":"a489366c7c793b96817994fa4c8195f2cbecd64a","kind":"commit","published_at":"2022-12-13T23:08:23.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.5.0-rc2-labs","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.5.0-rc2-labs"},{"name":"dockerfile/1.5.0-rc1","sha":"e8dac6c052dd208dee98b3eabec7c6d22c9a6f20","kind":"commit","published_at":"2022-11-24T00:02:40.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.5.0-rc1","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.5.0-rc1"},{"name":"dockerfile/1.5.0-rc1-labs","sha":"e8dac6c052dd208dee98b3eabec7c6d22c9a6f20","kind":"commit","published_at":"2022-11-24T00:02:40.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.5.0-rc1-labs","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.5.0-rc1-labs"},{"name":"dockerfile/1.5.0-labs-rc1","sha":"e8dac6c052dd208dee98b3eabec7c6d22c9a6f20","kind":"commit","published_at":"2022-11-24T00:02:40.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.5.0-labs-rc1","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.5.0-labs-rc1"},{"name":"v0.11.0-rc1","sha":"e8dac6c052dd208dee98b3eabec7c6d22c9a6f20","kind":"commit","published_at":"2022-11-24T00:02:40.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.11.0-rc1","html_url":"https://github.com/moby/buildkit/releases/tag/v0.11.0-rc1"},{"name":"v0.10.6","sha":"0c9b5aeb269c740650786ba77d882b0259415ec7","kind":"commit","published_at":"2022-11-10T20:08:12.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.10.6","html_url":"https://github.com/moby/buildkit/releases/tag/v0.10.6"},{"name":"v0.10.5","sha":"bc26045116045516ff2427201abd299043eaf8f7","kind":"commit","published_at":"2022-10-18T15:53:21.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.10.5","html_url":"https://github.com/moby/buildkit/releases/tag/v0.10.5"},{"name":"dockerfile/1.4.3-labs","sha":"a2ba6869363812a210fcc3ded6926757ab780b5f","kind":"commit","published_at":"2022-08-22T20:01:41.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.4.3-labs","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.4.3-labs"},{"name":"v0.10.4","sha":"a2ba6869363812a210fcc3ded6926757ab780b5f","kind":"commit","published_at":"2022-08-22T20:01:41.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.10.4","html_url":"https://github.com/moby/buildkit/releases/tag/v0.10.4"},{"name":"dockerfile/1.4.3","sha":"a2ba6869363812a210fcc3ded6926757ab780b5f","kind":"commit","published_at":"2022-08-22T20:01:41.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.4.3","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.4.3"},{"name":"v0.10.3","sha":"c8d25d9a103b70dc300a4fd55e7e576472284e31","kind":"commit","published_at":"2022-05-06T07:53:18.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.10.3","html_url":"https://github.com/moby/buildkit/releases/tag/v0.10.3"},{"name":"dockerfile/1.4.2-labs","sha":"c8d25d9a103b70dc300a4fd55e7e576472284e31","kind":"commit","published_at":"2022-05-06T07:53:18.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.4.2-labs","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.4.2-labs"},{"name":"dockerfile/1.4.2","sha":"c8d25d9a103b70dc300a4fd55e7e576472284e31","kind":"commit","published_at":"2022-05-06T07:53:18.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.4.2","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.4.2"},{"name":"v0.10.2","sha":"9d2c9b25145ff021f91374408be710938297ba24","kind":"commit","published_at":"2022-04-27T06:02:18.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.10.2","html_url":"https://github.com/moby/buildkit/releases/tag/v0.10.2"},{"name":"dockerfile/1.4.1-labs","sha":"5bc9c7b15891eecab8d1e0c34ed62a0177c45ae7","kind":"commit","published_at":"2022-04-07T17:37:40.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.4.1-labs","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.4.1-labs"},{"name":"v0.10.1","sha":"5bc9c7b15891eecab8d1e0c34ed62a0177c45ae7","kind":"commit","published_at":"2022-04-07T17:37:40.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.10.1","html_url":"https://github.com/moby/buildkit/releases/tag/v0.10.1"},{"name":"dockerfile/1.4.1","sha":"5bc9c7b15891eecab8d1e0c34ed62a0177c45ae7","kind":"commit","published_at":"2022-04-07T17:37:40.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.4.1","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.4.1"},{"name":"dockerfile/1.4.0-labs","sha":"068cf686a7e5c3254244d0acc54636f4f393611e","kind":"commit","published_at":"2022-03-09T18:22:16.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.4.0-labs","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.4.0-labs"},{"name":"v0.10.0","sha":"068cf686a7e5c3254244d0acc54636f4f393611e","kind":"commit","published_at":"2022-03-09T18:22:16.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.10.0","html_url":"https://github.com/moby/buildkit/releases/tag/v0.10.0"},{"name":"dockerfile/1.4.0","sha":"068cf686a7e5c3254244d0acc54636f4f393611e","kind":"commit","published_at":"2022-03-09T18:22:16.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.4.0","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.4.0"},{"name":"v0.10.0-rc2","sha":"9ff8e772303bd3737971068ff1ab7770afd8dd58","kind":"commit","published_at":"2022-02-25T20:08:20.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.10.0-rc2","html_url":"https://github.com/moby/buildkit/releases/tag/v0.10.0-rc2"},{"name":"dockerfile/1.4.0-labs-rc2","sha":"9ff8e772303bd3737971068ff1ab7770afd8dd58","kind":"commit","published_at":"2022-02-25T20:08:20.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.4.0-labs-rc2","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.4.0-labs-rc2"},{"name":"dockerfile/1.4.0-rc2","sha":"9ff8e772303bd3737971068ff1ab7770afd8dd58","kind":"commit","published_at":"2022-02-25T20:08:20.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.4.0-rc2","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.4.0-rc2"},{"name":"dockerfile/1.4.0-labs-rc1","sha":"1fbdce1d0576bc2786be6d7a0df108a110a6623b","kind":"commit","published_at":"2022-02-14T22:31:04.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.4.0-labs-rc1","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.4.0-labs-rc1"},{"name":"v0.10.0-rc1","sha":"1fbdce1d0576bc2786be6d7a0df108a110a6623b","kind":"commit","published_at":"2022-02-14T22:31:04.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.10.0-rc1","html_url":"https://github.com/moby/buildkit/releases/tag/v0.10.0-rc1"},{"name":"dockerfile/1.4.0-rc1","sha":"1fbdce1d0576bc2786be6d7a0df108a110a6623b","kind":"commit","published_at":"2022-02-14T22:31:04.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.4.0-rc1","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.4.0-rc1"},{"name":"v0.9.3","sha":"8d2625494a6a3d413e3d875a2ff7dd9b1ed1b1a9","kind":"commit","published_at":"2021-11-18T00:29:10.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.9.3","html_url":"https://github.com/moby/buildkit/releases/tag/v0.9.3"},{"name":"v0.9.2","sha":"a14b4e097ae1dc7514c5febd6d75f742a166ea75","kind":"commit","published_at":"2021-11-02T18:38:34.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.9.2","html_url":"https://github.com/moby/buildkit/releases/tag/v0.9.2"},{"name":"dockerfile/1.3.1","sha":"966bcf4aa3ef397a9d6025fade18f2d59a5bf29d","kind":"commit","published_at":"2021-10-04T19:22:02.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.3.1","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.3.1"},{"name":"v0.9.1","sha":"966bcf4aa3ef397a9d6025fade18f2d59a5bf29d","kind":"commit","published_at":"2021-10-04T19:22:02.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.9.1","html_url":"https://github.com/moby/buildkit/releases/tag/v0.9.1"},{"name":"dockerfile/1.3.1-labs","sha":"966bcf4aa3ef397a9d6025fade18f2d59a5bf29d","kind":"commit","published_at":"2021-10-04T19:22:02.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.3.1-labs","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.3.1-labs"},{"name":"dockerfile/1.3.0","sha":"c8bb937807d405d92be91f06ce2629e6202ac7a9","kind":"commit","published_at":"2021-07-16T03:11:23.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.3.0","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.3.0"},{"name":"dockerfile/1.3.0-labs","sha":"c8bb937807d405d92be91f06ce2629e6202ac7a9","kind":"commit","published_at":"2021-07-16T03:11:23.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.3.0-labs","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.3.0-labs"},{"name":"v0.9.0","sha":"c8bb937807d405d92be91f06ce2629e6202ac7a9","kind":"commit","published_at":"2021-07-16T03:11:23.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.9.0","html_url":"https://github.com/moby/buildkit/releases/tag/v0.9.0"},{"name":"v0.9.0-rc2","sha":"c8bb937807d405d92be91f06ce2629e6202ac7a9","kind":"commit","published_at":"2021-07-16T03:11:23.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.9.0-rc2","html_url":"https://github.com/moby/buildkit/releases/tag/v0.9.0-rc2"},{"name":"v0.9.0-rc1","sha":"64dd6d55209057e336d34cf55d7c4b5a06d6ae56","kind":"commit","published_at":"2021-07-07T17:54:40.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.9.0-rc1","html_url":"https://github.com/moby/buildkit/releases/tag/v0.9.0-rc1"},{"name":"dockerfile/1.3.0-rc1-labs","sha":"64dd6d55209057e336d34cf55d7c4b5a06d6ae56","kind":"commit","published_at":"2021-07-07T17:54:40.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.3.0-rc1-labs","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.3.0-rc1-labs"},{"name":"dockerfile/1.3.0-rc1","sha":"64dd6d55209057e336d34cf55d7c4b5a06d6ae56","kind":"commit","published_at":"2021-07-07T17:54:40.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.3.0-rc1","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.3.0-rc1"},{"name":"v0.8.3","sha":"81c2cbd8a418918d62b71e347a00034189eea455","kind":"commit","published_at":"2021-04-22T23:59:02.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.8.3","html_url":"https://github.com/moby/buildkit/releases/tag/v0.8.3"},{"name":"v0.8.2","sha":"9065b18ba4633c75862befca8188de4338d9f94a","kind":"commit","published_at":"2021-02-25T00:59:50.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.8.2","html_url":"https://github.com/moby/buildkit/releases/tag/v0.8.2"},{"name":"v0.8.1","sha":"8142d66b5ebde79846b869fba30d9d30633e74aa","kind":"commit","published_at":"2020-12-15T01:55:07.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.8.1","html_url":"https://github.com/moby/buildkit/releases/tag/v0.8.1"},{"name":"dockerfile/1.2.1-labs","sha":"bf5e780c5e125bb97942ead83ff3c20705e8e8c9","kind":"commit","published_at":"2020-12-11T07:04:15.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.2.1-labs","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.2.1-labs"},{"name":"dockerfile/1.2.1","sha":"bf5e780c5e125bb97942ead83ff3c20705e8e8c9","kind":"commit","published_at":"2020-12-11T07:04:15.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.2.1","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.2.1"},{"name":"dockerfile/1.2.0-labs","sha":"15b978ca8920de704cbeb4df9cb2c9f47d66b4e4","kind":"commit","published_at":"2020-12-03T03:04:41.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.2.0-labs","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.2.0-labs"},{"name":"dockerfile/1.2.0","sha":"15b978ca8920de704cbeb4df9cb2c9f47d66b4e4","kind":"commit","published_at":"2020-12-03T03:04:41.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.2.0","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.2.0"},{"name":"v0.8.0","sha":"73fe4736135645a342abc7b587bba0994cccf0f9","kind":"commit","published_at":"2020-12-03T01:36:53.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.8.0","html_url":"https://github.com/moby/buildkit/releases/tag/v0.8.0"},{"name":"v0.8.0-rc3","sha":"600e2db7f7a45a3020447b94504d064700980df2","kind":"commit","published_at":"2020-11-26T07:46:12.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.8.0-rc3","html_url":"https://github.com/moby/buildkit/releases/tag/v0.8.0-rc3"},{"name":"v0.8.0-rc2","sha":"fcb87e6b8ccf3631a65799cc56caa76f9117816e","kind":"commit","published_at":"2020-11-19T04:30:42.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.8.0-rc2","html_url":"https://github.com/moby/buildkit/releases/tag/v0.8.0-rc2"},{"name":"dockerfile/1.2.0-rc1-labs","sha":"6b9513025a81d38079ee4e49853453a99d981d14","kind":"commit","published_at":"2020-11-18T02:05:30.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.2.0-rc1-labs","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.2.0-rc1-labs"},{"name":"dockerfile/1.2.0-rc1","sha":"6b9513025a81d38079ee4e49853453a99d981d14","kind":"commit","published_at":"2020-11-18T02:05:30.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.2.0-rc1","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.2.0-rc1"},{"name":"v0.8.0-rc1","sha":"6b9513025a81d38079ee4e49853453a99d981d14","kind":"commit","published_at":"2020-11-18T02:05:30.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.8.0-rc1","html_url":"https://github.com/moby/buildkit/releases/tag/v0.8.0-rc1"},{"name":"v0.7.2","sha":"22e230744171b4442101731951bbbecf97796ea5","kind":"commit","published_at":"2020-07-27T06:03:52.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.7.2","html_url":"https://github.com/moby/buildkit/releases/tag/v0.7.2"},{"name":"dockerfile/1.1.7","sha":"ddd175c5a2cc24530ea8ff427887c22939ca4289","kind":"commit","published_at":"2020-04-16T01:29:33.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.1.7","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.1.7"},{"name":"v0.7.1","sha":"ddd175c5a2cc24530ea8ff427887c22939ca4289","kind":"commit","published_at":"2020-04-16T01:29:33.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.7.1","html_url":"https://github.com/moby/buildkit/releases/tag/v0.7.1"},{"name":"dockerfile/1.1.7-experimental","sha":"ddd175c5a2cc24530ea8ff427887c22939ca4289","kind":"commit","published_at":"2020-04-16T01:29:33.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.1.7-experimental","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.1.7-experimental"},{"name":"v0.7.0","sha":"c60a1eb215d795a12e43ceff6a5ed67ce1ad958d","kind":"commit","published_at":"2020-03-25T20:43:00.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.7.0","html_url":"https://github.com/moby/buildkit/releases/tag/v0.7.0"},{"name":"dockerfile/1.1.6","sha":"c60a1eb215d795a12e43ceff6a5ed67ce1ad958d","kind":"commit","published_at":"2020-03-25T20:43:00.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.1.6","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.1.6"},{"name":"dockerfile/1.1.6-experimental","sha":"c60a1eb215d795a12e43ceff6a5ed67ce1ad958d","kind":"commit","published_at":"2020-03-25T20:43:00.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.1.6-experimental","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.1.6-experimental"},{"name":"v0.7.0-rc1","sha":"b9ef26d15f37c3a4133b5225f1d94e86a0df00d5","kind":"commit","published_at":"2020-03-12T00:34:11.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.7.0-rc1","html_url":"https://github.com/moby/buildkit/releases/tag/v0.7.0-rc1"},{"name":"dockerfile/1.1.6-rc1","sha":"b9ef26d15f37c3a4133b5225f1d94e86a0df00d5","kind":"commit","published_at":"2020-03-12T00:34:11.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.1.6-rc1","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.1.6-rc1"},{"name":"dockerfile/1.1.6-rc1-experimental","sha":"b9ef26d15f37c3a4133b5225f1d94e86a0df00d5","kind":"commit","published_at":"2020-03-12T00:34:11.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.1.6-rc1-experimental","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.1.6-rc1-experimental"},{"name":"v0.6.4","sha":"ebcef1f69af0bbca077efa9a960a481e579a0e89","kind":"commit","published_at":"2020-02-21T20:57:52.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.6.4","html_url":"https://github.com/moby/buildkit/releases/tag/v0.6.4"},{"name":"dockerfile/1.1.5-experimental","sha":"ebcef1f69af0bbca077efa9a960a481e579a0e89","kind":"commit","published_at":"2020-02-21T20:57:52.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.1.5-experimental","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.1.5-experimental"},{"name":"dockerfile/1.1.5","sha":"ebcef1f69af0bbca077efa9a960a481e579a0e89","kind":"commit","published_at":"2020-02-21T20:57:52.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.1.5","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.1.5"},{"name":"v0.6.3","sha":"928f3b480d7460aacb401f68610058ffdb549aca","kind":"commit","published_at":"2019-11-13T02:09:14.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.6.3","html_url":"https://github.com/moby/buildkit/releases/tag/v0.6.3"},{"name":"dockerfile/1.1.4-experimental","sha":"928f3b480d7460aacb401f68610058ffdb549aca","kind":"commit","published_at":"2019-11-13T02:09:14.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.1.4-experimental","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.1.4-experimental"},{"name":"dockerfile/1.1.4","sha":"928f3b480d7460aacb401f68610058ffdb549aca","kind":"commit","published_at":"2019-11-13T02:09:14.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.1.4","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.1.4"},{"name":"v0.6.2","sha":"ae10b292fefb00e0fbf9fecd1419c5f252e58895","kind":"commit","published_at":"2019-09-21T00:20:54.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.6.2","html_url":"https://github.com/moby/buildkit/releases/tag/v0.6.2"},{"name":"v0.6.1","sha":"be0d75f074e7a4b0f5b5877c719213a3f5057e60","kind":"commit","published_at":"2019-08-15T00:41:23.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.6.1","html_url":"https://github.com/moby/buildkit/releases/tag/v0.6.1"},{"name":"dockerfile/1.1.3","sha":"48f4a9b00ea7b1c7cac22cee76156cb13790406b","kind":"commit","published_at":"2019-08-14T21:10:52.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.1.3","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.1.3"},{"name":"dockerfile/1.1.3-experimental","sha":"48f4a9b00ea7b1c7cac22cee76156cb13790406b","kind":"commit","published_at":"2019-08-14T21:10:52.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.1.3-experimental","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.1.3-experimental"},{"name":"dockerfile/1.1.2","sha":"f2d98ca16c87c30bd4a88ca416498cf8a5a96824","kind":"commit","published_at":"2019-07-31T18:00:50.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.1.2","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.1.2"},{"name":"dockerfile/1.1.2-experimental","sha":"f2d98ca16c87c30bd4a88ca416498cf8a5a96824","kind":"commit","published_at":"2019-07-31T18:00:50.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.1.2-experimental","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.1.2-experimental"},{"name":"v0.6.0","sha":"f2d98ca16c87c30bd4a88ca416498cf8a5a96824","kind":"commit","published_at":"2019-07-31T18:00:50.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.6.0","html_url":"https://github.com/moby/buildkit/releases/tag/v0.6.0"},{"name":"v0.5.1","sha":"646fc0af6d283397b9e47cd0a18779e9d0376e0e","kind":"commit","published_at":"2019-05-09T05:19:53.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.5.1","html_url":"https://github.com/moby/buildkit/releases/tag/v0.5.1"},{"name":"dockerfile/1.1.1","sha":"89851c6c69bca875dd64b5e9d5d6ec60ff437d74","kind":"commit","published_at":"2019-04-27T16:55:44.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.1.1","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.1.1"},{"name":"dockerfile/1.1.1-experimental","sha":"89851c6c69bca875dd64b5e9d5d6ec60ff437d74","kind":"commit","published_at":"2019-04-27T16:55:44.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.1.1-experimental","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.1.1-experimental"},{"name":"dockerfile/1.1.0-experimental","sha":"8c0fa8fdec187d8f259a349d2da16dc2dc5f144a","kind":"commit","published_at":"2019-04-27T00:08:12.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.1.0-experimental","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.1.0-experimental"},{"name":"v0.5.0","sha":"8c0fa8fdec187d8f259a349d2da16dc2dc5f144a","kind":"commit","published_at":"2019-04-27T00:08:12.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.5.0","html_url":"https://github.com/moby/buildkit/releases/tag/v0.5.0"},{"name":"dockerfile/1.1.0","sha":"8c0fa8fdec187d8f259a349d2da16dc2dc5f144a","kind":"commit","published_at":"2019-04-27T00:08:12.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.1.0","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.1.0"},{"name":"v0.4.0","sha":"c35410878ab9070498c66f6c67d3e8bc3b92241f","kind":"commit","published_at":"2019-03-14T03:55:16.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.4.0","html_url":"https://github.com/moby/buildkit/releases/tag/v0.4.0"},{"name":"dockerfile/1.0.2-experimental","sha":"8d6eaf6e39b6d77debf7757d76a512a9ef71e087","kind":"commit","published_at":"2019-02-11T15:39:31.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.0.2-experimental","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.0.2-experimental"},{"name":"dockerfile/1.0.1","sha":"41759a49c0f4c257f4af6fe2c2379c70ca0246c2","kind":"commit","published_at":"2018-12-11T10:30:13.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.0.1","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.0.1"},{"name":"dockerfile/1.0.1-experimental","sha":"41759a49c0f4c257f4af6fe2c2379c70ca0246c2","kind":"commit","published_at":"2018-12-11T10:30:13.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.0.1-experimental","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.0.1-experimental"},{"name":"v0.3.3","sha":"8cf9bec86a7f11fe6591804aee152c8e8a7a8a0d","kind":"commit","published_at":"2018-11-21T03:35:10.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.3.3","html_url":"https://github.com/moby/buildkit/releases/tag/v0.3.3"},{"name":"dockerfile/1.0.0","sha":"c3a857e3fca0a5cadd44ffd886a977559841aeaa","kind":"commit","published_at":"2018-11-07T08:18:47.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.0.0","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.0.0"},{"name":"dockerfile/1.0.0-experimental","sha":"c3a857e3fca0a5cadd44ffd886a977559841aeaa","kind":"commit","published_at":"2018-11-07T08:18:47.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/1.0.0-experimental","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/1.0.0-experimental"},{"name":"v0.3.2","sha":"fba893e789edf99105ca215e8ff6e8c46829daf2","kind":"commit","published_at":"2018-10-31T05:48:25.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/v0.3.2","html_url":"https://github.com/moby/buildkit/releases/tag/v0.3.2"},{"name":"dockerfile/0.9.0-experimental","sha":"91cd9b404341736621db1946a718c74123e54fa8","kind":"commit","published_at":"2018-10-30T17:51:12.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/0.9.0-experimental","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/0.9.0-experimental"},{"name":"dockerfile/0.9.0","sha":"91cd9b404341736621db1946a718c74123e54fa8","kind":"commit","published_at":"2018-10-30T17:51:12.000Z","download_url":"https://codeload.github.com/moby/buildkit/tar.gz/dockerfile/0.9.0","html_url":"https://github.com/moby/buildkit/releases/tag/dockerfile/0.9.0"}]},"repo_metadata_updated_at":"2023-03-21T18:38:08.399Z","dependent_packages_count":896,"downloads":null,"downloads_period":null,"dependent_repos_count":1163,"rankings":{"downloads":null,"dependent_repos_count":0.22824326314239435,"dependent_packages_count":0.143416825500196,"stargazers_count":0.8164285373557795,"forks_count":0.8963511040472741,"docker_downloads_count":0.032146938470759764,"average":0.4233173337032808},"purl":"pkg:golang/github.com/moby/buildkit","advisories":[{"uuid":"GSA_kwCzR0hTQS00djk4LTdxbXctcnFyOM4AA4-r","url":"https://github.com/advisories/GHSA-4v98-7qmw-rqr8","title":"BuildKit vulnerable to possible host system access from mount stub cleaner","description":"### Impact\nA malicious BuildKit frontend or Dockerfile using `RUN --mount` could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system.\n\n### Patches\nThe issue has been fixed in v0.12.5\n\n### Workarounds\nAvoid using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing `RUN --mount` feature.\n\n### References\n\n","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2024-01-31T22:43:26.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8","https://github.com/moby/buildkit/pull/4603","https://nvd.nist.gov/vuln/detail/CVE-2024-23652","https://github.com/moby/buildkit/releases/tag/v0.12.5","https://github.com/advisories/GHSA-4v98-7qmw-rqr8"],"source_kind":"github","identifiers":["GHSA-4v98-7qmw-rqr8","CVE-2024-23652"],"repository_url":"https://github.com/moby/buildkit","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"0.12.5","vulnerable_version_range":"\u003c 0.12.5"}],"ecosystem":"go","package_name":"github.com/moby/buildkit"}],"created_at":"2024-01-31T23:04:35.111Z","updated_at":"2025-05-22T01:11:39.708Z","epss_percentage":0.05082,"epss_percentile":0.8925},{"uuid":"GSA_kwCzR0hTQS1nYzg5LTdnY3ItanhxY84AAx-b","url":"https://github.com/advisories/GHSA-gc89-7gcr-jxqc","title":"Buildkit credentials inlined to Git URLs could end up in provenance attestation","description":"When the user sends a build request that contains a Git URL that contains credentials and the build creates a provenance attestation describing that build, these credentials could be visible from the provenance attestation.\n\nGit URL can be passed in two ways:\n\n1) Invoking build directly from a URL with credentials.\n\n```\nbuildctl build --frontend dockerfile.v0 --context https://\u003ccredentials\u003e@url/repo.git\n```\n\nEquivalent in `docker buildx` would be\n\n```\ndocker buildx build https://\u003ccredentials\u003e@url/repo.git\n```\n\n2) If the client sends additional VCS info hint parameters on builds from a local source. Usually, that would mean reading the origin URL from `.git/config` file. \n\nThanks to Oscar Alberto Tovar for discovering the issue.\n\n### Impact\nWhen a build is performed under specific conditions where credentials were passed to BuildKit they may be visible to everyone who has access to provenance attestation.\n\nProvenance attestations and VCS info hints were added in version v0.11.0. Previous versions are not vulnerable.\n\nIn v0.10, when building directly from Git URL, the same URL could be visible in `BuildInfo` structure that is a predecessor of Provenance attestations. Previous versions are not vulnerable.\n\nNote: [Docker Build-push Github action](https://github.com/docker/build-push-action) builds from Git URLs by default but **is not** affected by this issue even when working with private repositories because the credentials are passed [with build secrets](https://github.com/docker/build-push-action/blob/v4.0.0/src/context.ts#L203) and not with URLs.\n\n### Patches\nBug is fixed in v0.11.4 . \n\n### Workarounds\nIt is recommended to pass credentials with build secrets when building directly from Git URL as a more secure alternative than modifying the URL.\n\nIn Docker Buildx, VCS info hint can be disabled by setting `BUILDX_GIT_INFO=0`. `buildctl` does not set VCS hints based on `.git` directory, and values would need to be passed manually with `--opt`.\n\n\n### References\n- Inline credentials in URLs deprecated in RFC3986 https://www.rfc-editor.org/rfc/rfc3986#section-3.2.1\n\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-03-07T20:09:44.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc","https://nvd.nist.gov/vuln/detail/CVE-2023-26054","https://github.com/moby/buildkit/commit/75123c696506bdbca1ed69906479e200f1b62604","https://www.rfc-editor.org/rfc/rfc3986#section-3.2.1","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/","https://github.com/advisories/GHSA-gc89-7gcr-jxqc"],"source_kind":"github","identifiers":["GHSA-gc89-7gcr-jxqc","CVE-2023-26054"],"repository_url":"https://github.com/moby/buildkit","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"0.11.4","vulnerable_version_range":"\u003e= 0.10.0, \u003c 0.11.4"}],"ecosystem":"go","package_name":"github.com/moby/buildkit"}],"created_at":"2023-03-07T21:03:12.260Z","updated_at":"2023-09-20T17:38:43.000Z","epss_percentage":0.00785,"epss_percentile":0.72601},{"uuid":"GSA_kwCzR0hTQS1tM3I2LWg3d3YtN3h4ds4AA4-s","url":"https://github.com/advisories/GHSA-m3r6-h7wv-7xxv","title":"BuildKit vulnerable to possible race condition with accessing subpaths from cache mounts","description":"### Impact\nTwo malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container.\n\n### Patches\nThe issue has been fixed in v0.12.5\n\n### Workarounds\nAvoid using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with `--mount=type=cache,source=...` options.\n\n### References\nhttps://www.openwall.com/lists/oss-security/2019/05/28/1\n","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-01-31T22:43:32.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/moby/buildkit/security/advisories/GHSA-m3r6-h7wv-7xxv","https://github.com/moby/buildkit/pull/4604","https://nvd.nist.gov/vuln/detail/CVE-2024-23651","https://github.com/moby/buildkit/releases/tag/v0.12.5","https://github.com/advisories/GHSA-m3r6-h7wv-7xxv"],"source_kind":"github","identifiers":["GHSA-m3r6-h7wv-7xxv","CVE-2024-23651"],"repository_url":"https://github.com/moby/buildkit","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"0.12.5","vulnerable_version_range":"\u003c 0.12.5"}],"ecosystem":"go","package_name":"github.com/moby/buildkit"}],"created_at":"2024-01-31T23:04:35.082Z","updated_at":"2025-05-22T01:11:39.688Z","epss_percentage":0.00357,"epss_percentile":0.57153},{"uuid":"GSA_kwCzR0hTQS05cDI2LTY5OHItdzRoeM4AA4-t","url":"https://github.com/advisories/GHSA-9p26-698r-w4hx","title":"BuildKit vulnerable to possible panic when incorrect parameters sent from frontend","description":"### Impact\nA malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.\n\n### Patches\nThe issue has been fixed in v0.12.5\n\n### Workarounds\nAvoid using BuildKit frontends from untrusted sources. A frontend image is usually specified as the `#syntax` line on your Dockerfile, or with `--frontend` flag when using `buildctl build` command. \n\n### References\n\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-01-31T22:43:54.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx","https://github.com/moby/buildkit/pull/4601","https://nvd.nist.gov/vuln/detail/CVE-2024-23650","https://github.com/moby/buildkit/releases/tag/v0.12.5","https://github.com/moby/buildkit/commit/481d9c45f473c58537f39694a38d7995cc656987","https://github.com/moby/buildkit/commit/7718bd5c3dc8fc5cd246a30cc41766e7a53c043c","https://github.com/moby/buildkit/commit/83edaef59d545b93e2750f1f85675a3764593fee","https://github.com/moby/buildkit/commit/96663dd35bf3787d7efb1ee7fd9ac7fe533582ae","https://github.com/moby/buildkit/commit/e1924dc32da35bfb0bfdbb9d0fc7bca25e552330","https://github.com/advisories/GHSA-9p26-698r-w4hx"],"source_kind":"github","identifiers":["GHSA-9p26-698r-w4hx","CVE-2024-23650"],"repository_url":"https://github.com/moby/buildkit","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"0.12.5","vulnerable_version_range":"\u003c 0.12.5"}],"ecosystem":"go","package_name":"github.com/moby/buildkit"}],"created_at":"2024-01-31T23:04:35.063Z","updated_at":"2024-03-04T18:43:35.000Z","epss_percentage":0.00081,"epss_percentile":0.2487},{"uuid":"GSA_kwCzR0hTQS13cjZ2LTlmNzUtdmgyZ84AA4-q","url":"https://github.com/advisories/GHSA-wr6v-9f75-vh2g","title":"Buildkit's interactive containers API does not validate entitlements check","description":"### Impact\nIn addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request.\n\n### Patches\nThe issue has been fixed in v0.12.5 .\n\n### Workarounds\nAvoid using BuildKit frontends from untrusted sources. A frontend image is usually specified as the `#syntax` line on your Dockerfile, or with `--frontend` flag when using `buildctl build` command.\n\n### References\n\n","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2024-01-31T22:43:20.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/moby/buildkit/security/advisories/GHSA-wr6v-9f75-vh2g","https://github.com/moby/buildkit/pull/4602","https://nvd.nist.gov/vuln/detail/CVE-2024-23653","https://github.com/moby/buildkit/releases/tag/v0.12.5","https://github.com/moby/buildkit/commit/5026d95aa3336e97cfe46e3764f52d08bac7a10e","https://github.com/moby/buildkit/commit/92cc595cfb12891d4b3ae476e067c74250e4b71e","https://github.com/advisories/GHSA-wr6v-9f75-vh2g"],"source_kind":"github","identifiers":["GHSA-wr6v-9f75-vh2g","CVE-2024-23653"],"repository_url":"https://github.com/moby/buildkit","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"0.12.5","vulnerable_version_range":"\u003c 0.12.5"}],"ecosystem":"go","package_name":"github.com/moby/buildkit"}],"created_at":"2024-01-31T23:04:35.131Z","updated_at":"2024-05-20T22:06:08.000Z","epss_percentage":0.0672,"epss_percentile":0.9073}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/moby/buildkit","docker_dependents_count":3052,"docker_downloads_count":11595787778,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/moby/buildkit","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/moby/buildkit/dependencies","status":null,"funding_links":[],"critical":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmoby%2Fbuildkit/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmoby%2Fbuildkit/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmoby%2Fbuildkit/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmoby%2Fbuildkit/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1882879,"maintainers_count":0,"namespaces_count":723926,"keywords_count":97872,"github":"golang","metadata":{"funded_packages_count":39346},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-06-06T05:22:27.920Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},"unique_repositories_count":137,"unique_repositories_count_past_30_days":3,"recent_issues":[{"uuid":"4888259091","node_id":"PR_kwDOTHVfOs7xztin","number":34,"state":"closed","title":"build(deps): bump the go_modules group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-07-15T00:49:41.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-15T00:49:26.000Z","updated_at":"2026-07-15T00:49:42.000Z","time_to_close":15,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"go_modules","update_count":8,"packages":[{"name":"helm.sh/helm/v3","old_version":"3.19.0","new_version":"3.20.2","repository_url":"https://github.com/helm/helm"},{"name":"github.com/moby/buildkit","old_version":"0.20.2","new_version":"0.28.1","repository_url":"https://github.com/moby/buildkit"},{"name":"go.opentelemetry.io/otel","old_version":"1.39.0","new_version":"1.41.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"google.golang.org/grpc","old_version":"1.78.0","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"github.com/go-git/go-billy/v5","old_version":"5.8.0","new_version":"5.9.0","repository_url":"https://github.com/go-git/go-billy"},{"name":"github.com/go-git/go-git/v5","old_version":"5.17.1","new_version":"5.19.1","repository_url":"https://github.com/go-git/go-git"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.19.0` | `3.20.2` |\n| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.20.2` | `0.28.1` |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.39.0` | `1.41.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.78.0` | `1.79.3` |\n| [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.8.0` | `5.9.0` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.17.1` | `5.19.1` |\n\n\nUpdates `helm.sh/helm/v3` from 3.19.0 to 3.20.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/helm/helm/releases\"\u003ehelm.sh/helm/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eHelm v3.20.2\u003c/h2\u003e\n\u003ch2\u003ev3.20.2\u003c/h2\u003e\n\u003cp\u003eHelm v3.20.2 is a security patch release. Users are encouraged to upgrade for the best experience.\u003c/p\u003e\n\u003cp\u003eThe community keeps growing, and we'd love to see you there!\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJoin the discussion in \u003ca href=\"https://kubernetes.slack.com\"\u003eKubernetes Slack\u003c/a\u003e:\n\u003cul\u003e\n\u003cli\u003efor questions and just to hang out\u003c/li\u003e\n\u003cli\u003efor discussing PRs, code, and bugs\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eHang out at the Public Developer Call: Thursday, 9:30 Pacific via \u003ca href=\"https://zoom.us/j/696660622\"\u003eZoom\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTest, debug, and contribute charts: \u003ca href=\"https://artifacthub.io/packages/search?kind=0\"\u003eArtifactHub/packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/security/advisories/GHSA-hr2v-4r36-88hr\"\u003eGHSA-hr2v-4r36-88hr\u003c/a\u003e Helm Chart extraction output directory collapse via \u003ccode\u003eChart.yaml\u003c/code\u003e name dot-segment\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eInstallation and Upgrading\u003c/h2\u003e\n\u003cp\u003eDownload Helm v3.20.2. The common platform binaries are here:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-darwin-amd64.tar.gz\"\u003eMacOS amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-darwin-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 7de04301f28b902a74f6286ed941cadc86ee5e6a9086a18f2ccf1f548e99d618)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-darwin-arm64.tar.gz\"\u003eMacOS arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-darwin-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 139c794c22f16b579d08ddd3008c8038b9bb2814f35b5bcca91f50a1f458978d)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-amd64.tar.gz\"\u003eLinux amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 258e830a9e613c8a7a302d6059b4bb3b9758f2f3e1bb8ea0d707ce10a9a72fea)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-arm.tar.gz\"\u003eLinux arm\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-arm.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / a8a614c740399ff1ef32bcea6be6e4523f17e3376f9cf55c192cc48c8f2d1f19)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-arm64.tar.gz\"\u003eLinux arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 5ea2d6bc2cda3f8edf985e028809f5a9278f404fb8ab24044de9b7cb9b79a691)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-386.tar.gz\"\u003eLinux i386\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-386.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 88e4c1834307cdbc9f3b80920e1a383e4ba50bb488fb0be1b1fbd4918bb6ae73)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-ppc64le.tar.gz\"\u003eLinux ppc64le\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-ppc64le.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 98bb26a2f3c0b0c1a50db3181dff192554e0c204a07427d98d6b01e259f23cbe)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-s390x.tar.gz\"\u003eLinux s390x\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-s390x.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 584dd77ef8096d6ef939a1822f72840e749fc8311b2b13ae94df5f786862a56b)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-riscv64.tar.gz\"\u003eLinux riscv64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-riscv64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 957391d0710d72678acd09959b5dc77888cd007a78a4b99944d3b2fc7e1895ca)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-windows-amd64.zip\"\u003eWindows amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-windows-amd64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / 24e8e5b71bab4ee17e6f989931ecf4fb144f9916cbe9990c0b6b2ec7b925c454)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-windows-arm64.zip\"\u003eWindows arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-windows-arm64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / 7c940a73a6882f50b69aec3282549da4a49917669db18fc503db930fb74b9789)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThe \u003ca href=\"https://helm.sh/docs/intro/quickstart/\"\u003eQuickstart Guide\u003c/a\u003e will get you going from there. For \u003cstrong\u003eupgrade instructions\u003c/strong\u003e or detailed installation notes, check the \u003ca href=\"https://helm.sh/docs/intro/install/\"\u003einstall guide\u003c/a\u003e. You can also use a \u003ca href=\"https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3\"\u003escript to install\u003c/a\u003e on any system with \u003ccode\u003ebash\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eWhat's Next\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e4.1.5 and 3.20.3 are the next patch (bug fix) releases and will be on April 8, 2026\u003c/li\u003e\n\u003cli\u003e4.2.0 and 3.21.0 are the next minor (feature) releases and will be on May 13, 2026\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: Chart dot-name path bug 8fb76d6ab555577e98e23b7500009537a471feee (George Jenkins)\u003c/li\u003e\n\u003cli\u003efix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow 3a8927e275c50cecde273872dad2a5576bd46375 (Terry Howe)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eHelm v3.20.1 is a patch release. Users are encouraged to upgrade for the best experience.\u003c/p\u003e\n\u003cp\u003eThe community keeps growing, and we'd love to see you there!\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJoin the discussion in \u003ca href=\"https://kubernetes.slack.com\"\u003eKubernetes Slack\u003c/a\u003e:\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/8fb76d6ab555577e98e23b7500009537a471feee\"\u003e\u003ccode\u003e8fb76d6\u003c/code\u003e\u003c/a\u003e fix: Chart dot-name path bug\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/3a8927e275c50cecde273872dad2a5576bd46375\"\u003e\u003ccode\u003e3a8927e\u003c/code\u003e\u003c/a\u003e fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/a2369ca71c0ef633bf6e4fccd66d634eb379b371\"\u003e\u003ccode\u003ea2369ca\u003c/code\u003e\u003c/a\u003e chore(deps): bump the k8s-io group with 7 updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/90e10564f7ae746a153f3a03006e7061a54ad490\"\u003e\u003ccode\u003e90e1056\u003c/code\u003e\u003c/a\u003e add image index test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/911f2e908ae40b01ca95b857e94b8894043f64fd\"\u003e\u003ccode\u003e911f2e9\u003c/code\u003e\u003c/a\u003e fix pulling charts from OCI indices\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/76dad33fb1a2b6451920429b4f5f2dd575ea71bb\"\u003e\u003ccode\u003e76dad33\u003c/code\u003e\u003c/a\u003e Remove refactorring changes from coalesce_test.go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/45c12f71407b6054a37d3e425d5293ee79a1ab37\"\u003e\u003ccode\u003e45c12f7\u003c/code\u003e\u003c/a\u003e Fix import\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/26c6f19f967941dbe53bfb5e52d419b3b3e46075\"\u003e\u003ccode\u003e26c6f19\u003c/code\u003e\u003c/a\u003e Update pkg/chart/common/util/coalesce_test.go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/09f5129d49a14c9336cea6f33adf5f52889915ef\"\u003e\u003ccode\u003e09f5129\u003c/code\u003e\u003c/a\u003e Fix lint warning\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/417deb2b6b7504357b0f580b76f5eed1bb8a5270\"\u003e\u003ccode\u003e417deb2\u003c/code\u003e\u003c/a\u003e Preserve nil values in chart already\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/helm/helm/compare/v3.19.0...v3.20.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/containerd/containerd` from 1.7.29 to 1.7.30\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/containerd/containerd/releases\"\u003egithub.com/containerd/containerd's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003econtainerd 1.7.30\u003c/h2\u003e\n\u003cp\u003eWelcome to the v1.7.30 release of containerd!\u003c/p\u003e\n\u003cp\u003eThe thirtieth patch release for containerd 1.7 contains various fixes\nand updates.\u003c/p\u003e\n\u003ch3\u003eHighlights\u003c/h3\u003e\n\u003ch4\u003eContainer Runtime Interface (CRI)\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eFix NRI dropping requested CDI devices silently\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12650\"\u003e#12650\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRedact all query parameters in CRI error logs\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12551\"\u003e#12551\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eRuntime\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eUpdate runc binary to v1.3.4\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12619\"\u003e#12619\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/containerd/containerd/issues\"\u003ehttps://github.com/containerd/containerd/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDerek McGowan\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eAustin Vazquez\u003c/li\u003e\n\u003cli\u003eMike Brown\u003c/li\u003e\n\u003cli\u003eWei Fu\u003c/li\u003e\n\u003cli\u003eAndrey Noskov\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eDavanum Srinivas\u003c/li\u003e\n\u003cli\u003eJin Dong\u003c/li\u003e\n\u003cli\u003eKrisztian Litkey\u003c/li\u003e\n\u003cli\u003eMaksym Pavlenko\u003c/li\u003e\n\u003cli\u003ePaweł Gronowski\u003c/li\u003e\n\u003cli\u003ePhil Estes\u003c/li\u003e\n\u003cli\u003eSamuel Karp\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare release notes for v1.7.30 (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12652\"\u003e#12652\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/3d0ca6d2e7ba597bf0423e5f5f49e47b81c1e7a0\"\u003e\u003ccode\u003e3d0ca6d2e\u003c/code\u003e\u003c/a\u003e Prepare release notes for v1.7.30\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eFix NRI dropping requested CDI devices silently (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12650\"\u003e#12650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/0bc74f47e708bd843e676c5a8617f0498ea6459a\"\u003e\u003ccode\u003e0bc74f47e\u003c/code\u003e\u003c/a\u003e cri,nri: don't drop requested CDI devices silently.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003escript/setup/install-cni: install CNI plugins v1.9.0 (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12660\"\u003e#12660\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/7db16b5627a550caf05d9a902e16cb0d04bf1ee1\"\u003e\u003ccode\u003e7db16b562\u003c/code\u003e\u003c/a\u003e script/setup/install-cni: install CNI plugins v1.9.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003ego.mod: golang.org/x/crypto v0.45.0 (drop support for Go 1.23) (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12640\"\u003e#12640\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/bca897b4739fef9b6a34c54ac6050d1621e53f92\"\u003e\u003ccode\u003ebca897b47\u003c/code\u003e\u003c/a\u003e go.mod: golang.org/x/crypto v0.45.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/37cbd2224e674c317e25b03bbf4ab5a9ed644a5d\"\u003e\u003ccode\u003e37cbd2224\u003c/code\u003e\u003c/a\u003e CI: drop Go 1.23\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/71c1c8666c6a999cc8c319160b6b2ea38c4a2c9e\"\u003e\u003ccode\u003e71c1c86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/12652\"\u003e#12652\u003c/a\u003e from dmcgowan/prepare-1.7.30\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/3d0ca6d2e7ba597bf0423e5f5f49e47b81c1e7a0\"\u003e\u003ccode\u003e3d0ca6d\u003c/code\u003e\u003c/a\u003e Prepare release notes for v1.7.30\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/a8ce78b8eb3e4b5c6eca0cc4d5a5706288bc5184\"\u003e\u003ccode\u003ea8ce78b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/12650\"\u003e#12650\u003c/a\u003e from klihub/fixes/1.7.x/nri-cdi-device-injection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/ba2b3a20c5101cabe91768d9360b1f0b7055f492\"\u003e\u003ccode\u003eba2b3a2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/12660\"\u003e#12660\u003c/a\u003e from AkihiroSuda/cni-1.9.0-1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/0bc74f47e708bd843e676c5a8617f0498ea6459a\"\u003e\u003ccode\u003e0bc74f4\u003c/code\u003e\u003c/a\u003e cri,nri: don't drop requested CDI devices silently.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/7db16b5627a550caf05d9a902e16cb0d04bf1ee1\"\u003e\u003ccode\u003e7db16b5\u003c/code\u003e\u003c/a\u003e script/setup/install-cni: install CNI plugins v1.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/3b655c21e08e51cbd81d353cdcfc7a1d722ea322\"\u003e\u003ccode\u003e3b655c2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/12640\"\u003e#12640\u003c/a\u003e from AkihiroSuda/dev-1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/bca897b4739fef9b6a34c54ac6050d1621e53f92\"\u003e\u003ccode\u003ebca897b\u003c/code\u003e\u003c/a\u003e go.mod: golang.org/x/crypto v0.45.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/37cbd2224e674c317e25b03bbf4ab5a9ed644a5d\"\u003e\u003ccode\u003e37cbd22\u003c/code\u003e\u003c/a\u003e CI: drop Go 1.23\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/ee49d1747c357cd45119750d4db464f957f4d793\"\u003e\u003ccode\u003eee49d17\u003c/code\u003e\u003c/a\u003e Update Go requirements in BUILDING\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/containerd/containerd/compare/v1.7.29...v1.7.30\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/moby/buildkit` from 0.20.2 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.28.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix insufficient validation of Git URL \u003ccode\u003e#ref:subdir\u003c/code\u003e fragments that could allow access to restricted files outside the checked-out repository root. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg\"\u003eGHSA-4vrq-3vrq-g6gg\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a vulnerability where an untrusted custom frontend could cause files to be written outside the BuildKit state directory. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj\"\u003eGHSA-4c29-8rgm-jvjj\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a panic when processing invalid \u003ccode\u003e.dockerignore\u003c/code\u003e patterns during \u003ccode\u003eCOPY\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/patternmatcher/issues/9\"\u003emoby/patternmatcher#9\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/moby/patternmatcher\u003c/strong\u003e  v0.6.0 -\u0026gt; v0.6.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.28.0\"\u003ev0.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.28.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.28.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.28.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eAmr Mahdi\u003c/li\u003e\n\u003cli\u003eDan Duvall\u003c/li\u003e\n\u003cli\u003eDavid Karlsson\u003c/li\u003e\n\u003cli\u003eJonas Geiler\u003c/li\u003e\n\u003cli\u003eKevin L.\u003c/li\u003e\n\u003cli\u003ersteube\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8\"\u003e\u003ccode\u003e45b038c\u003c/code\u003e\u003c/a\u003e git: normalize and validate subdir paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f5462c216098af766f97ea4cb328e65c6d8f7256\"\u003e\u003ccode\u003ef5462c2\u003c/code\u003e\u003c/a\u003e git: harden ref arg handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/71577a5da7a2b3ab75a90c2cfedfda0c27d1ef40\"\u003e\u003ccode\u003e71577a5\u003c/code\u003e\u003c/a\u003e source: extract SafeFileName into shared pathutil package\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df4378316f3b000403d097551a8139a700bd823d\"\u003e\u003ccode\u003edf43783\u003c/code\u003e\u003c/a\u003e source/http: use os.Root for saved file operations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/9ce6f62aca0653657047ee613cdef22f38b31244\"\u003e\u003ccode\u003e9ce6f62\u003c/code\u003e\u003c/a\u003e source/http: sanitize downloaded filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4\"\u003e\u003ccode\u003e099cf80\u003c/code\u003e\u003c/a\u003e executor: validate container IDs centrally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/2642113bbc9d969d223c37aaabca4b50613fddf9\"\u003e\u003ccode\u003e2642113\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e from thaJeztah/0.28_backport_bump_patternmatcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/802da78332d9f2c6c9d856c1648ab52c701076fa\"\u003e\u003ccode\u003e802da78\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/patternmatcher v0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/5245d869d85d9c98f986b600584c332a3b001986\"\u003e\u003ccode\u003e5245d86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6551\"\u003e#6551\u003c/a\u003e from tonistiigi/v0.28-cherry-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/90ee5deef6c6efcb82358eb48d76235191196db1\"\u003e\u003ccode\u003e90ee5de\u003c/code\u003e\u003c/a\u003e vendor: update x/net to v0.51.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.20.2...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.39.0 to 1.41.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.40.0/0.62.0/0.16.0] 2026-02-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eAlwaysRecord\u003c/code\u003e sampler in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724\"\u003e#7724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to all synchronous instrument interfaces (\u003ccode\u003eFloat64Counter\u003c/code\u003e, \u003ccode\u003eFloat64UpDownCounter\u003c/code\u003e, \u003ccode\u003eFloat64Histogram\u003c/code\u003e, \u003ccode\u003eFloat64Gauge\u003c/code\u003e, \u003ccode\u003eInt64Counter\u003c/code\u003e, \u003ccode\u003eInt64UpDownCounter\u003c/code\u003e, \u003ccode\u003eInt64Histogram\u003c/code\u003e, \u003ccode\u003eInt64Gauge\u003c/code\u003e,) in \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e.\nThis stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763\"\u003e#7763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.39.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0.\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783\"\u003e#7783\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789\"\u003e#7789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eHistogramReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e by 4x. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443\"\u003e#7443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eFixedSizeReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447\"\u003e#7447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474\"\u003e#7474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent synchronous gauge measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478\"\u003e#7478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492\"\u003e#7492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eExporter\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e ignores metrics with the scope \u003ccode\u003ego.opentelemetry.io/contrib/bridges/prometheus\u003c/code\u003e.\nThis prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688\"\u003e#7688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent exponential histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702\"\u003e#7702\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bad log message when key-value pairs are dropped because of key duplication in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eDroppedAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not count the non-attribute key-value pairs dropped because of key duplication. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eSetAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not log that attributes are dropped when they are actually not dropped. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to correctly handle HTTP/2 \u003ccode\u003eGOAWAY\u003c/code\u003e frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794\"\u003e#7794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003eioreg\u003c/code\u003e command on Darwin (macOS). (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818\"\u003e#7818\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.78.0 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream` from 1.6.8 to 1.7.14\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/676a8b1bf0174c8763e19d99b68b988e67e2d398\"\u003e\u003ccode\u003e676a8b1\u003c/code\u003e\u003c/a\u003e Release 2025-01-24\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/1737386a85235b72e9676ed261b72cddb61355df\"\u003e\u003ccode\u003e1737386\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/3bc09da29fb3dd079526f7ed141520f69245e445\"\u003e\u003ccode\u003e3bc09da\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/cb98deef60318ce9a61cda159ebfb0166d88539b\"\u003e\u003ccode\u003ecb98dee\u003c/code\u003e\u003c/a\u003e Fix flex checksum validation cfg (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2981\"\u003e#2981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/9c764018fe28b27912a0b976614d9e806e3f8268\"\u003e\u003ccode\u003e9c76401\u003c/code\u003e\u003c/a\u003e fix bad changelog type\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ed8a3caa0df9ce36a5b60aebeee201187098d205\"\u003e\u003ccode\u003eed8a3ca\u003c/code\u003e\u003c/a\u003e Reduce fmt.Sprintf allocations in query encoding (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2919\"\u003e#2919\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/d5773a9a070873393eb2e7eed37bd647e12e1267\"\u003e\u003ccode\u003ed5773a9\u003c/code\u003e\u003c/a\u003e Add FixUnmarshalIndividualSetValues option to DecoderOptions of dynamodb (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2896\"\u003e#2896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/58e23dc0311cec940749e34ddfc542dbb00ff7a3\"\u003e\u003ccode\u003e58e23dc\u003c/code\u003e\u003c/a\u003e fix codegen test failing in main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/640d919419375c1bb9041ffa6dd024b60243a1ed\"\u003e\u003ccode\u003e640d919\u003c/code\u003e\u003c/a\u003e fix broken jmespath waiters in cloudwatch and autoscaling (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2984\"\u003e#2984\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/613a6cfc607af8470ceec5b7391f9231fa1f98dd\"\u003e\u003ccode\u003e613a6cf\u003c/code\u003e\u003c/a\u003e Optimize/directory traversal (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2970\"\u003e#2970\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/rum/v1.6.8...service/eksauth/v1.7.14\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-billy/v5` from 5.8.0 to 5.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-billy/releases\"\u003egithub.com/go-git/go-billy/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.9.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse path.Clean instead of filepath.Clean in iofs.Open by \u003ca href=\"https://github.com/puerco\"\u003e\u003ccode\u003e@​puerco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/197\"\u003ego-git/go-billy#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate ChrootOS in favour of BoundOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/201\"\u003ego-git/go-billy#201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneral Improvements by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/203\"\u003ego-git/go-billy#203\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eosfs: ChrootOS eval baseDir on creation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/205\"\u003ego-git/go-billy#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun go-git tests as part of integration tests by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/206\"\u003ego-git/go-billy#206\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/237e529bb8de61704047f71a5ab1c8e6676492f1\"\u003e\u003ccode\u003e237e529\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/206\"\u003e#206\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/04edb394b39979b5cbdec30ded6abdcb9f7786c5\"\u003e\u003ccode\u003e04edb39\u003c/code\u003e\u003c/a\u003e build: Add go-git integration test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/d8efefd33b2e8eeea1030e317bb0d71c5e918270\"\u003e\u003ccode\u003ed8efefd\u003c/code\u003e\u003c/a\u003e osfs: preserve empty ChrootOS base\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/07f2a0bf50e42d438d1d9d263c3c8a22598985b8\"\u003e\u003ccode\u003e07f2a0b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/205\"\u003e#205\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/25207c8468f1af656953cb5db7030aad5df1fe99\"\u003e\u003ccode\u003e25207c8\u003c/code\u003e\u003c/a\u003e build: Bump Go versions in workflows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2fda229d9ac0cb5ba654ebc824cfbb90248f82d9\"\u003e\u003ccode\u003e2fda229\u003c/code\u003e\u003c/a\u003e osfs: ChrootOS eval baseDir on creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/427b27f32f22de11498a682c65cd5060a01ec168\"\u003e\u003ccode\u003e427b27f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/203\"\u003e#203\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/7d5a23ece03edc171c1f63c8fa73f84c8428bf17\"\u003e\u003ccode\u003e7d5a23e\u003c/code\u003e\u003c/a\u003e chroot: Reject symlink loops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2c2287a233d2ee1e6cdce8956141f6d10505f3bf\"\u003e\u003ccode\u003e2c2287a\u003c/code\u003e\u003c/a\u003e util: avoid following symlinks in RemoveAll fallback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/cbd88e9a9a2d7fe1065bbe083d8bf0c5fd7290de\"\u003e\u003ccode\u003ecbd88e9\u003c/code\u003e\u003c/a\u003e Fix mount path handling\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.17.1 to 5.19.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ev5: plumbing: transport/ssh, Shell-quote path by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2068\"\u003ego-git/go-git#2068\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, Fix relative URL resolution by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2070\"\u003ego-git/go-git#2070\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, canonical remote for relative URLs by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2074\"\u003ego-git/go-git#2074\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, error on remote without URLs by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2078\"\u003ego-git/go-git#2078\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format/idxfile, Validate offset64 indices by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2084\"\u003ego-git/go-git#2084\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: *: Reject malformed variable-length integers by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2092\"\u003ego-git/go-git#2092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format/packfile, Tighten delta validation by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2091\"\u003ego-git/go-git#2091\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Add \u003ccode\u003eworktreeFilesystem\u003c/code\u003e wrapper for worktree and hardening by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2100\"\u003ego-git/go-git#2100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: config: validate submodule names by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2082\"\u003ego-git/go-git#2082\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.19.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2111\"\u003ego-git/go-git#2111\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: Allow MkdirAll on worktree-root paths by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2117\"\u003ego-git/go-git#2117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: Stop validating symlink target paths by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2116\"\u003ego-git/go-git#2116\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format decoder input bounds and contracts by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2125\"\u003ego-git/go-git#2125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplumbing: format/packfile, cap delta chain depth in parser by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2137\"\u003ego-git/go-git#2137\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.19.0...v5.19.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.19.0...v5.19.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3c3be601aa6c0fd0d536c0d1e4f898b4c60e65fe\"\u003e\u003ccode\u003e3c3be60\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2137\"\u003e#2137\u003c/a\u003e from go-git/validate-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3fba897bd9e84b1aec170fa708b80e297b7d6cf6\"\u003e\u003ccode\u003e3fba897\u003c/code\u003e\u003c/a\u003e plumbing: format/packfile, cap delta chain depth in parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a97d6601c85e017bb64c2b0f2e3169f6ef6a6709\"\u003e\u003ccode\u003ea97d660\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2125\"\u003e#2125\u003c/a\u003e from hiddeco/v5/format-input-bounds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/aeaa125c8af8e4c4c95b574c22c5633e97fc436e\"\u003e\u003ccode\u003eaeaa125\u003c/code\u003e\u003c/a\u003e plumbing: format/objfile, require Header before Read\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1f38e171218526ea254a73187a52f0648253c1b8\"\u003e\u003ccode\u003e1f38e17\u003c/code\u003e\u003c/a\u003e plumbing: format/packfile, bound inflate size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f7545a02529e03998d6a7219140dc0e6644ad337\"\u003e\u003ccode\u003ef7545a0\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, bound nr by file size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/170b88181f385913a457a08b68c88956fb3f8e4f\"\u003e\u003ccode\u003e170b881\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2116\"\u003e#2116\u003c/a\u003e from pjbgf/symlink-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/7b6d994467f06630268904aa3c441b6de7248b31\"\u003e\u003ccode\u003e7b6d994\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2117\"\u003e#2117\u003c/a\u003e from hiddeco/v5/worktree-fs-mkdirall-root-noop\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f0709b32f8fbb87c16cd63c6762d2cd515f36541\"\u003e\u003ccode\u003ef0709b3\u003c/code\u003e\u003c/a\u003e git: Stop validating symlink target paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/776d00f11d336f26862d0f2bab987b217f3a7844\"\u003e\u003ccode\u003e776d00f\u003c/code\u003e\u003c/a\u003e git: Allow MkdirAll on worktree-root paths\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.19.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/leandro4979-hub/tailscale/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/leandro4979-hub/tailscale/pull/34","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/leandro4979-hub%2Ftailscale/issues/34","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/34/packages"},{"uuid":"4789278883","node_id":"PR_kwDOSPcun87s3V7F","number":14,"state":"closed","title":"build(deps): bump github.com/moby/buildkit from 0.31.0 to 0.31.1","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-07-10T16:37:57.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-01T21:17:38.000Z","updated_at":"2026-07-10T16:37:59.000Z","time_to_close":760819,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/moby/buildkit","old_version":"0.31.0","new_version":"0.31.1","repository_url":"https://github.com/moby/buildkit"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.31.0 to 0.31.1.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.31.1\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.31.1\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.31.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003eThis is a security patch release with two low severity security fixes.\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCustom frontend could bypass Seccomp/AppArmor restrictions \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6\"\u003ehttps://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePossible runtime DoS via unbounded group parsing \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\"\u003ehttps://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cp\u003eThis release has no dependency changes\u003c/p\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.31.0\"\u003ev0.31.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/673b7e0196de0cac83308274b88aaed97a91af74\"\u003e\u003ccode\u003e673b7e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6896\"\u003e#6896\u003c/a\u003e from tonistiigi/v0.31.1-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/81ce1c60967ff15dd80190895106d3cb8f188deb\"\u003e\u003ccode\u003e81ce1c6\u003c/code\u003e\u003c/a\u003e ci: tolerate empty test matrix includes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/69a3924648e485acb3faad3081e03a8554431255\"\u003e\u003ccode\u003e69a3924\u003c/code\u003e\u003c/a\u003e user: limit size of parsed passwd/group files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/3ea6dd0ce7d269cdb8aa23348718e2c1bf64f109\"\u003e\u003ccode\u003e3ea6dd0\u003c/code\u003e\u003c/a\u003e security: validate exec security modes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.31.0...v0.31.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit\u0026package-manager=go_modules\u0026previous-version=0.31.0\u0026new-version=0.31.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/CodeLinaro-mirror/yocto-mirrors_github_docker_compose/pull/14","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/CodeLinaro-mirror%2Fyocto-mirrors_github_docker_compose/issues/14","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/14/packages"},{"uuid":"4770295386","node_id":"PR_kwDOFo8pVM7r4-FN","number":34,"state":"open","title":"deps(deps): bump github.com/moby/buildkit from 0.30.0 to 0.31.1","user":"dependabot[bot]","labels":["bug","dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-29T17:34:25.000Z","updated_at":"2026-06-29T17:35:12.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps)","packages":[{"name":"github.com/moby/buildkit","old_version":"0.30.0","new_version":"0.31.1","repository_url":"https://github.com/moby/buildkit"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.30.0 to 0.31.1.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.31.1\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.31.1\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.31.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003eThis is a security patch release with two low severity security fixes.\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCustom frontend could bypass Seccomp/AppArmor restrictions \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6\"\u003ehttps://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePossible runtime DoS via unbounded group parsing \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\"\u003ehttps://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cp\u003eThis release has no dependency changes\u003c/p\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.31.0\"\u003ev0.31.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.31.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.31.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.31.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eBjorn Neergaard\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eBryce Gibson\u003c/li\u003e\n\u003cli\u003eAva Barron\u003c/li\u003e\n\u003cli\u003eBrian Goff\u003c/li\u003e\n\u003cli\u003eJiří Moravčík\u003c/li\u003e\n\u003cli\u003eZRHann\u003c/li\u003e\n\u003cli\u003eKevin NZUGUEM\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/673b7e0196de0cac83308274b88aaed97a91af74\"\u003e\u003ccode\u003e673b7e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6896\"\u003e#6896\u003c/a\u003e from tonistiigi/v0.31.1-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/81ce1c60967ff15dd80190895106d3cb8f188deb\"\u003e\u003ccode\u003e81ce1c6\u003c/code\u003e\u003c/a\u003e ci: tolerate empty test matrix includes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/69a3924648e485acb3faad3081e03a8554431255\"\u003e\u003ccode\u003e69a3924\u003c/code\u003e\u003c/a\u003e user: limit size of parsed passwd/group files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/3ea6dd0ce7d269cdb8aa23348718e2c1bf64f109\"\u003e\u003ccode\u003e3ea6dd0\u003c/code\u003e\u003c/a\u003e security: validate exec security modes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c411f0ac55a2c56d3d68b7d92d257538d5d6f464\"\u003e\u003ccode\u003ec411f0a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6876\"\u003e#6876\u003c/a\u003e from thaJeztah/bump_runc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f292e5c39accd1e3f8ee40dbb9a4abf1029a241b\"\u003e\u003ccode\u003ef292e5c\u003c/code\u003e\u003c/a\u003e Dockerfile: update runc binary to v1.3.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/d31ba4a7e79d1de97793201e7f012925ba7d6eeb\"\u003e\u003ccode\u003ed31ba4a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6867\"\u003e#6867\u003c/a\u003e from okhowang/fix/platforms-data-race\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e819928cc9919aa5e333c2ba17f362d46f9fae8d\"\u003e\u003ccode\u003ee819928\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6869\"\u003e#6869\u003c/a\u003e from crazy-max/update-policy-helpers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e4d0dbaf3f6aeaa4d8e6d7461d73ce434decf610\"\u003e\u003ccode\u003ee4d0dba\u003c/code\u003e\u003c/a\u003e chore: update generated files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c13539bb3d37f50379032dd5dda7b7c85cb072cb\"\u003e\u003ccode\u003ec13539b\u003c/code\u003e\u003c/a\u003e vendor: update policy-helpers to d5411a945cfc\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.30.0...v0.31.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit\u0026package-manager=go_modules\u0026previous-version=0.30.0\u0026new-version=0.31.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/jimschubert/docked/pull/34","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/jimschubert%2Fdocked/issues/34","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/34/packages"},{"uuid":"4744913640","node_id":"PR_kwDOBGvVPc7qnM64","number":60700,"state":"open","title":"Bump github.com/moby/buildkit from 0.31.0 to 0.31.1 in the all-dependencies group across 1 directory","user":"dependabot[bot]","labels":["size/XS","release-notes-none"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-25T14:54:44.000Z","updated_at":"2026-06-25T15:30:43.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/moby/buildkit","old_version":"0.31.0","new_version":"0.31.1","repository_url":"https://github.com/moby/buildkit"}],"path":"the all-dependencies group across 1 directory","ecosystem":"go"},"body":"Bumps the all-dependencies group with 1 update in the / directory: [github.com/moby/buildkit](https://github.com/moby/buildkit).\n\nUpdates `github.com/moby/buildkit` from 0.31.0 to 0.31.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.31.1\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.31.1\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.31.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003eThis is a security patch release with two low severity security fixes.\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCustom frontend could bypass Seccomp/AppArmor restrictions \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6\"\u003ehttps://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePossible runtime DoS via unbounded group parsing \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\"\u003ehttps://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cp\u003eThis release has no dependency changes\u003c/p\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.31.0\"\u003ev0.31.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/673b7e0196de0cac83308274b88aaed97a91af74\"\u003e\u003ccode\u003e673b7e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6896\"\u003e#6896\u003c/a\u003e from tonistiigi/v0.31.1-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/81ce1c60967ff15dd80190895106d3cb8f188deb\"\u003e\u003ccode\u003e81ce1c6\u003c/code\u003e\u003c/a\u003e ci: tolerate empty test matrix includes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/69a3924648e485acb3faad3081e03a8554431255\"\u003e\u003ccode\u003e69a3924\u003c/code\u003e\u003c/a\u003e user: limit size of parsed passwd/group files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/3ea6dd0ce7d269cdb8aa23348718e2c1bf64f109\"\u003e\u003ccode\u003e3ea6dd0\u003c/code\u003e\u003c/a\u003e security: validate exec security modes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.31.0...v0.31.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit\u0026package-manager=go_modules\u0026previous-version=0.31.0\u0026new-version=0.31.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/istio/istio/pull/60700","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/istio%2Fistio/issues/60700","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/60700/packages"},{"uuid":"4744853134","node_id":"PR_kwDOFbZN3c7qnAMg","number":4204,"state":"closed","title":"chore(deps): bump github.com/moby/buildkit from 0.31.0 to 0.31.1 in the moby group","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-26T07:03:11.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-25T14:46:35.000Z","updated_at":"2026-06-26T07:03:13.000Z","time_to_close":58596,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/moby/buildkit","old_version":"0.31.0","new_version":"0.31.1","repository_url":"https://github.com/moby/buildkit"}],"path":"the moby group","ecosystem":"go"},"body":"Bumps the moby group with 1 update: [github.com/moby/buildkit](https://github.com/moby/buildkit).\n\nUpdates `github.com/moby/buildkit` from 0.31.0 to 0.31.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.31.1\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.31.1\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.31.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003eThis is a security patch release with two low severity security fixes.\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCustom frontend could bypass Seccomp/AppArmor restrictions \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6\"\u003ehttps://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePossible runtime DoS via unbounded group parsing \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\"\u003ehttps://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cp\u003eThis release has no dependency changes\u003c/p\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.31.0\"\u003ev0.31.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/673b7e0196de0cac83308274b88aaed97a91af74\"\u003e\u003ccode\u003e673b7e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6896\"\u003e#6896\u003c/a\u003e from tonistiigi/v0.31.1-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/81ce1c60967ff15dd80190895106d3cb8f188deb\"\u003e\u003ccode\u003e81ce1c6\u003c/code\u003e\u003c/a\u003e ci: tolerate empty test matrix includes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/69a3924648e485acb3faad3081e03a8554431255\"\u003e\u003ccode\u003e69a3924\u003c/code\u003e\u003c/a\u003e user: limit size of parsed passwd/group files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/3ea6dd0ce7d269cdb8aa23348718e2c1bf64f109\"\u003e\u003ccode\u003e3ea6dd0\u003c/code\u003e\u003c/a\u003e security: validate exec security modes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.31.0...v0.31.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit\u0026package-manager=go_modules\u0026previous-version=0.31.0\u0026new-version=0.31.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/sylabs/singularity/pull/4204","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sylabs%2Fsingularity/issues/4204","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4204/packages"},{"uuid":"4689563881","node_id":"PR_kwDOKvtQQ87ny2qD","number":433,"state":"closed","title":"chore(deps): bump github.com/moby/buildkit from 0.29.0 to 0.31.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-25T05:42:47.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-18T05:42:58.000Z","updated_at":"2026-06-25T05:42:48.000Z","time_to_close":604789,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/moby/buildkit","old_version":"0.29.0","new_version":"0.31.0","repository_url":"https://github.com/moby/buildkit"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.29.0 to 0.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.31.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.31.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.31.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eBjorn Neergaard\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eBryce Gibson\u003c/li\u003e\n\u003cli\u003eAva Barron\u003c/li\u003e\n\u003cli\u003eBrian Goff\u003c/li\u003e\n\u003cli\u003eJiří Moravčík\u003c/li\u003e\n\u003cli\u003eZRHann\u003c/li\u003e\n\u003cli\u003eKevin NZUGUEM\u003c/li\u003e\n\u003cli\u003eMaya Chen\u003c/li\u003e\n\u003cli\u003eNatnael Gebremariam\u003c/li\u003e\n\u003cli\u003eSai Kiran Maggidi\u003c/li\u003e\n\u003cli\u003eokhowang(王沛文)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuilt-in Dockerfile frontend has been updated to v1.25.0 \u003ca href=\"https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.25.0\"\u003echangelog\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExec steps now support a network proxy feature where all container traffic will be routed through an HTTP proxy server. This allows capturing the network traffic for inspection in build progress and provenance attestation. Source policies can define the requests that build containers are allowed to make and the ones that should be blocked. Network proxy can be enabled for the whole BuildKit daemon or enabled on a per-build basis. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6858\"\u003e#6858\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6816\"\u003e#6816\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6740\"\u003e#6740\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6863\"\u003e#6863\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe local exporter now supports a \u003ccode\u003emode=delete\u003c/code\u003e attribute which will replace the destination directory with the contents of the build result instead of merging it. Similar to the \u003ccode\u003e--delete\u003c/code\u003e flag in rsync. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6561\"\u003e#6561\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6864\"\u003e#6864\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLLB APIs now support per-step resource limits for CPU and memory. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6569\"\u003e#6569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLLB APIs support a new Passthrough operation that allows defining dependency build graph branches that are required to be built but do not add any outputs to the final result. The \u003ccode\u003estate.Requires()\u003c/code\u003e client helper can be used to define such dependencies in the build graph. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6829\"\u003e#6829\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAll image results now default to using OCI media types. Previously this was applied based on whether annotations or attestations were needed. \u003ccode\u003eoci-mediatypes=false\u003c/code\u003e can be used for legacy Docker media types. This change raises the compatibility version of BuildKit v0.31.0 to 30. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6824\"\u003e#6824\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLocal cache exporter now supports the \u003ccode\u003ereset\u003c/code\u003e option to clear the unreferenced existing cache. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6612\"\u003e#6612\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe local build result outputs now use a new implementation with better security guarantees in case the destination directory is mutated externally during the transfer. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6561\"\u003e#6561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNew build metrics about build counts and durations have been added to the OTEL provider. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6736\"\u003e#6736\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eParallel request limits for registry connections can now be set via configuration file. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6776\"\u003e#6776\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIn special modes where the client does not expose the session connection to transfer credentials, builds can now still fall back to anonymous registry auth instead of erroring. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6760\"\u003e#6760\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEmbedded binfmt emulators in the release image have been updated to QEMU v10.2.3. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6846\"\u003e#6846\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRunc container runtime has been updated to v1.3.6\u003c/li\u003e\n\u003cli\u003eCreated attestations now use in-toto v1 statement format. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6823\"\u003e#6823\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDue to the upgraded CLI library, the internal \u003ccode\u003ebuildctl\u003c/code\u003e completion scripts flag \u003ccode\u003e--generate-bash-completion\u003c/code\u003e is no longer supported and has been replaced with \u003ccode\u003e--generate-shell-completion\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6848\"\u003e#6848\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix an issue in default GC policy rules where the first rule for prioritizing releasing cache mounts and local sources did not apply. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6856\"\u003e#6856\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix an issue where parent directories could be created with incorrect permissions due to system umask when using BuildKit embedded in Dockerd. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6828\"\u003e#6828\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible segfault from race condition when HTTP server returned 401 error. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6791\"\u003e#6791\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix source policy exact match rules losing the destination value during conversion. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6861\"\u003e#6861\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c411f0ac55a2c56d3d68b7d92d257538d5d6f464\"\u003e\u003ccode\u003ec411f0a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6876\"\u003e#6876\u003c/a\u003e from thaJeztah/bump_runc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f292e5c39accd1e3f8ee40dbb9a4abf1029a241b\"\u003e\u003ccode\u003ef292e5c\u003c/code\u003e\u003c/a\u003e Dockerfile: update runc binary to v1.3.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/d31ba4a7e79d1de97793201e7f012925ba7d6eeb\"\u003e\u003ccode\u003ed31ba4a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6867\"\u003e#6867\u003c/a\u003e from okhowang/fix/platforms-data-race\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e819928cc9919aa5e333c2ba17f362d46f9fae8d\"\u003e\u003ccode\u003ee819928\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6869\"\u003e#6869\u003c/a\u003e from crazy-max/update-policy-helpers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e4d0dbaf3f6aeaa4d8e6d7461d73ce434decf610\"\u003e\u003ccode\u003ee4d0dba\u003c/code\u003e\u003c/a\u003e chore: update generated files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c13539bb3d37f50379032dd5dda7b7c85cb072cb\"\u003e\u003ccode\u003ec13539b\u003c/code\u003e\u003c/a\u003e vendor: update policy-helpers to d5411a945cfc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f4f035cd32e36346d26f3c56cc2ed426fb57e208\"\u003e\u003ccode\u003ef4f035c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6864\"\u003e#6864\u003c/a\u003e from crazy-max/mode-delete-old-daemon\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e26b5d452426db42cf4caa0f22ea432103a040e5\"\u003e\u003ccode\u003ee26b5d4\u003c/code\u003e\u003c/a\u003e fix: add mutex to protect Worker.Platforms from data race\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/91760189a858197a9161bb28fc6eebde93889e5d\"\u003e\u003ccode\u003e9176018\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6861\"\u003e#6861\u003c/a\u003e from ZRHann/fix-sourcepolicy-exact-convert\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/128c3228fab4d7c8acfc6580f9762d01cdb233e6\"\u003e\u003ccode\u003e128c322\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6863\"\u003e#6863\u003c/a\u003e from tonistiigi/exec-proxy-cni-dial-update\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.29.0...v0.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit\u0026package-manager=go_modules\u0026previous-version=0.29.0\u0026new-version=0.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/stacklok/frizbee/pull/433","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/stacklok%2Ffrizbee/issues/433","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/433/packages"},{"uuid":"4551866990","node_id":"PR_kwDOPrYSMc7g0ZQ3","number":38,"state":"open","title":"chore(deps): bump the go_modules group across 5 directories with 28 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-29T21:53:39.000Z","updated_at":"2026-05-30T00:01:27.864Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go_modules","update_count":28,"packages":[{"name":"github.com/distribution/distribution/v3","old_version":"3.0.0-20220128175647-b60926597a1b","new_version":"3.1.1","repository_url":"https://github.com/distribution/distribution"},{"name":"github.com/go-git/go-git/v5","old_version":"5.11.0","new_version":"5.19.1","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/moby/buildkit","old_version":"0.12.5","new_version":"0.28.1","repository_url":"https://github.com/moby/buildkit"},{"name":"github.com/russellhaering/gosaml2","old_version":"0.9.1","new_version":"0.11.0","repository_url":"https://github.com/russellhaering/gosaml2"},{"name":"github.com/slack-go/slack","old_version":"0.10.1","new_version":"0.23.1","repository_url":"https://github.com/slack-go/slack"},{"name":"chainguard.dev/apko","old_version":"0.14.0","new_version":"1.2.7","repository_url":"https://github.com/chainguard-dev/apko"},{"name":"github.com/jackc/pgx/v5","old_version":"5.5.5","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/go-chi/chi/v5","old_version":"5.0.10","new_version":"5.2.2","repository_url":"https://github.com/go-chi/chi"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 8 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/distribution/distribution/v3](https://github.com/distribution/distribution) | `3.0.0-20220128175647-b60926597a1b` | `3.1.1` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.11.0` | `5.19.1` |\n| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.12.5` | `0.28.1` |\n| [github.com/russellhaering/gosaml2](https://github.com/russellhaering/gosaml2) | `0.9.1` | `0.11.0` |\n| [github.com/slack-go/slack](https://github.com/slack-go/slack) | `0.10.1` | `0.23.1` |\n| [chainguard.dev/apko](https://github.com/chainguard-dev/apko) | `0.14.0` | `1.2.7` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.5.5` | `5.9.2` |\n| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.0.10` | `5.2.2` |\n\nBumps the go_modules group with 4 updates in the /internal/cmd/progress-bot directory: [github.com/slack-go/slack](https://github.com/slack-go/slack), [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/oauth2](https://github.com/golang/oauth2) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /lib directory: [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/oauth2](https://github.com/golang/oauth2), [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 6 updates in the /lib/managedservicesplatform directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.25.0` | `1.43.0` |\n| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.21.0` | `0.27.0` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.5.5` | `5.9.2` |\n| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.5.3` | `9.5.5` |\n| [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519) | `1.1.0` | `1.1.1` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.65.0` | `1.79.3` |\n\nBumps the go_modules group with 3 updates in the /monitoring directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) and [github.com/hashicorp/go-retryablehttp](https://github.com/hashicorp/go-retryablehttp).\n\nUpdates `github.com/distribution/distribution/v3` from 3.0.0-20220128175647-b60926597a1b to 3.1.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/distribution/distribution/releases\"\u003egithub.com/distribution/distribution/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the \u003ccode\u003ev3.1.1\u003c/code\u003e release of registry!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eThis is a stable release\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/distribution/distribution/issues\"\u003ehttps://github.com/distribution/distribution/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixes \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-41888\"\u003eCVE-2026-41888\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBounds-check the file basename in PurgeUploads Walk callback\u003c/li\u003e\n\u003cli\u003eAdd S3 Express One Zone support to the S3 storage driver (\u003ca href=\"https://redirect.github.com/distribution/distribution/issues/4858\"\u003e#4858\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix tag list endpoint in proxy mode (\u003ca href=\"https://redirect.github.com/distribution/distribution/issues/4846\"\u003e#4846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClamp oversized \u003ccode\u003en\u003c/code\u003e query parameter in proxy mode instead of returning 400 (\u003ca href=\"https://redirect.github.com/distribution/distribution/issues/4856\"\u003e#4856\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSee the full changelog below for the full list of changes.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003einternal/client/auth/challenge: cleanups and minor refactor by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4832\"\u003edistribution/distribution#4832\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp from 0.18.0 to 0.19.0 in the go_modules group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4843\"\u003edistribution/distribution#4843\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0 in the go_modules group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4850\"\u003edistribution/distribution#4850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.34.1 to 4.35.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4840\"\u003edistribution/distribution#4840\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(build): Bump go version to latest by \u003ca href=\"https://github.com/milosgajdos\"\u003e\u003ccode\u003e@​milosgajdos\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4851\"\u003edistribution/distribution#4851\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: use slices.Backward to simplify the code by \u003ca href=\"https://github.com/chuanshanjida\"\u003e\u003ccode\u003e@​chuanshanjida\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4848\"\u003edistribution/distribution#4848\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(proxy): fix tag list endpoint in proxy mode by \u003ca href=\"https://github.com/njucjc\"\u003e\u003ccode\u003e@​njucjc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4846\"\u003edistribution/distribution#4846\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate docker-compose structure in deploying.md by \u003ca href=\"https://github.com/jdg71nl\"\u003e\u003ccode\u003e@​jdg71nl\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4855\"\u003edistribution/distribution#4855\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4854\"\u003edistribution/distribution#4854\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4852\"\u003edistribution/distribution#4852\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump docker/login-action from 4.0.0 to 4.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4847\"\u003edistribution/distribution#4847\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump docker/bake-action from 7.0.0 to 7.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4853\"\u003edistribution/distribution#4853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(proxy): clamp oversized n query param instead of returning 400 by \u003ca href=\"https://github.com/milosgajdos\"\u003e\u003ccode\u003e@​milosgajdos\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4856\"\u003edistribution/distribution#4856\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(s3): add express zone one support to S3 driver by \u003ca href=\"https://github.com/milosgajdos\"\u003e\u003ccode\u003e@​milosgajdos\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4858\"\u003edistribution/distribution#4858\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(storage): bounds-check the file basename in PurgeUploads Walk callback by \u003ca href=\"https://github.com/SAY-5\"\u003e\u003ccode\u003e@​SAY-5\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4860\"\u003edistribution/distribution#4860\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(release): prepare for v3.1.1 release by \u003ca href=\"https://github.com/milosgajdos\"\u003e\u003ccode\u003e@​milosgajdos\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4864\"\u003edistribution/distribution#4864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chuanshanjida\"\u003e\u003ccode\u003e@​chuanshanjida\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4848\"\u003edistribution/distribution#4848\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jdg71nl\"\u003e\u003ccode\u003e@​jdg71nl\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4855\"\u003edistribution/distribution#4855\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SAY-5\"\u003e\u003ccode\u003e@​SAY-5\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4860\"\u003edistribution/distribution#4860\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/distribution/distribution/compare/v3.1.0...v3.1.1\"\u003ehttps://github.com/distribution/distribution/compare/v3.1.0...v3.1.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the \u003ccode\u003ev3.1.0\u003c/code\u003e release of registry!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eThis is a stable release\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/distribution/distribution/issues\"\u003ehttps://github.com/distribution/distribution/issues\u003c/a\u003e.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/distribution/distribution/commits/v3.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.11.0 to 5.19.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ev5: plumbing: transport/ssh, Shell-quote path by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2068\"\u003ego-git/go-git#2068\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, Fix relative URL resolution by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2070\"\u003ego-git/go-git#2070\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, canonical remote for relative URLs by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2074\"\u003ego-git/go-git#2074\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, error on remote without URLs by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2078\"\u003ego-git/go-git#2078\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format/idxfile, Validate offset64 indices by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2084\"\u003ego-git/go-git#2084\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: *: Reject malformed variable-length integers by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2092\"\u003ego-git/go-git#2092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format/packfile, Tighten delta validation by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2091\"\u003ego-git/go-git#2091\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Add \u003ccode\u003eworktreeFilesystem\u003c/code\u003e wrapper for worktree and hardening by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2100\"\u003ego-git/go-git#2100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: config: validate submodule names by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2082\"\u003ego-git/go-git#2082\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.19.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2111\"\u003ego-git/go-git#2111\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: Allow MkdirAll on worktree-root paths by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2117\"\u003ego-git/go-git#2117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: Stop validating symlink target paths by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2116\"\u003ego-git/go-git#2116\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format decoder input bounds and contracts by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2125\"\u003ego-git/go-git#2125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplumbing: format/packfile, cap delta chain depth in parser by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2137\"\u003ego-git/go-git#2137\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.19.0...v5.19.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.19.0...v5.19.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3c3be601aa6c0fd0d536c0d1e4f898b4c60e65fe\"\u003e\u003ccode\u003e3c3be60\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2137\"\u003e#2137\u003c/a\u003e from go-git/validate-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3fba897bd9e84b1aec170fa708b80e297b7d6cf6\"\u003e\u003ccode\u003e3fba897\u003c/code\u003e\u003c/a\u003e plumbing: format/packfile, cap delta chain depth in parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a97d6601c85e017bb64c2b0f2e3169f6ef6a6709\"\u003e\u003ccode\u003ea97d660\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2125\"\u003e#2125\u003c/a\u003e from hiddeco/v5/format-input-bounds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/aeaa125c8af8e4c4c95b574c22c5633e97fc436e\"\u003e\u003ccode\u003eaeaa125\u003c/code\u003e\u003c/a\u003e plumbing: format/objfile, require Header before Read\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1f38e171218526ea254a73187a52f0648253c1b8\"\u003e\u003ccode\u003e1f38e17\u003c/code\u003e\u003c/a\u003e plumbing: format/packfile, bound inflate size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f7545a02529e03998d6a7219140dc0e6644ad337\"\u003e\u003ccode\u003ef7545a0\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, bound nr by file size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/170b88181f385913a457a08b68c88956fb3f8e4f\"\u003e\u003ccode\u003e170b881\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2116\"\u003e#2116\u003c/a\u003e from pjbgf/symlink-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/7b6d994467f06630268904aa3c441b6de7248b31\"\u003e\u003ccode\u003e7b6d994\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2117\"\u003e#2117\u003c/a\u003e from hiddeco/v5/worktree-fs-mkdirall-root-noop\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f0709b32f8fbb87c16cd63c6762d2cd515f36541\"\u003e\u003ccode\u003ef0709b3\u003c/code\u003e\u003c/a\u003e git: Stop validating symlink target paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/776d00f11d336f26862d0f2bab987b217f3a7844\"\u003e\u003ccode\u003e776d00f\u003c/code\u003e\u003c/a\u003e git: Allow MkdirAll on worktree-root paths\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.11.0...v5.19.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/moby/buildkit` from 0.12.5 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.28.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix insufficient validation of Git URL \u003ccode\u003e#ref:subdir\u003c/code\u003e fragments that could allow access to restricted files outside the checked-out repository root. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg\"\u003eGHSA-4vrq-3vrq-g6gg\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a vulnerability where an untrusted custom frontend could cause files to be written outside the BuildKit state directory. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj\"\u003eGHSA-4c29-8rgm-jvjj\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a panic when processing invalid \u003ccode\u003e.dockerignore\u003c/code\u003e patterns during \u003ccode\u003eCOPY\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/patternmatcher/issues/9\"\u003emoby/patternmatcher#9\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/moby/patternmatcher\u003c/strong\u003e  v0.6.0 -\u0026gt; v0.6.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.28.0\"\u003ev0.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.28.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.28.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.28.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eAmr Mahdi\u003c/li\u003e\n\u003cli\u003eDan Duvall\u003c/li\u003e\n\u003cli\u003eDavid Karlsson\u003c/li\u003e\n\u003cli\u003eJonas Geiler\u003c/li\u003e\n\u003cli\u003eKevin L.\u003c/li\u003e\n\u003cli\u003ersteube\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8\"\u003e\u003ccode\u003e45b038c\u003c/code\u003e\u003c/a\u003e git: normalize and validate subdir paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f5462c216098af766f97ea4cb328e65c6d8f7256\"\u003e\u003ccode\u003ef5462c2\u003c/code\u003e\u003c/a\u003e git: harden ref arg handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/71577a5da7a2b3ab75a90c2cfedfda0c27d1ef40\"\u003e\u003ccode\u003e71577a5\u003c/code\u003e\u003c/a\u003e source: extract SafeFileName into shared pathutil package\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df4378316f3b000403d097551a8139a700bd823d\"\u003e\u003ccode\u003edf43783\u003c/code\u003e\u003c/a\u003e source/http: use os.Root for saved file operations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/9ce6f62aca0653657047ee613cdef22f38b31244\"\u003e\u003ccode\u003e9ce6f62\u003c/code\u003e\u003c/a\u003e source/http: sanitize downloaded filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4\"\u003e\u003ccode\u003e099cf80\u003c/code\u003e\u003c/a\u003e executor: validate container IDs centrally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/2642113bbc9d969d223c37aaabca4b50613fddf9\"\u003e\u003ccode\u003e2642113\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e from thaJeztah/0.28_backport_bump_patternmatcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/802da78332d9f2c6c9d856c1648ab52c701076fa\"\u003e\u003ccode\u003e802da78\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/patternmatcher v0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/5245d869d85d9c98f986b600584c332a3b001986\"\u003e\u003ccode\u003e5245d86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6551\"\u003e#6551\u003c/a\u003e from tonistiigi/v0.28-cherry-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/90ee5deef6c6efcb82358eb48d76235191196db1\"\u003e\u003ccode\u003e90ee5de\u003c/code\u003e\u003c/a\u003e vendor: update x/net to v0.51.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.12.5...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/russellhaering/gosaml2` from 0.9.1 to 0.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/russellhaering/gosaml2/releases\"\u003egithub.com/russellhaering/gosaml2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReject unsigned SAML \u003ccode\u003eLogoutRequest\u003c/code\u003e when signature validation is enabled. Previously, \u003ccode\u003eValidateEncodedLogoutRequestPOST\u003c/code\u003e silently accepted unsigned requests even when \u003ccode\u003eSkipSignatureValidation\u003c/code\u003e was \u003ccode\u003efalse\u003c/code\u003e. (GHSA-pcgw-qcv5-h8ch)\u003c/li\u003e\n\u003cli\u003eSecurity hardening: CBC bounds check to prevent panics from crafted ciphertext, replaced \u003ccode\u003epanic()\u003c/code\u003e calls with error returns, and assertion signatures within a signed Response envelope are now verified when present (previously they were skipped entirely, which could allow XML wrapping attacks)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd oss-fuzz integration\u003c/li\u003e\n\u003cli\u003eBump minimum Go version to 1.25\u003c/li\u003e\n\u003cli\u003eUpdate dependencies: goxmldsig v1.6.0, etree v1.6.0, testify v1.11.1\u003c/li\u003e\n\u003cli\u003eBump all GitHub Actions to latest versions\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/gosaml2/compare/v0.10.0...v0.11.0\"\u003ehttps://github.com/russellhaering/gosaml2/compare/v0.10.0...v0.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport encryption and signing keys that implement crypto.Signer by \u003ca href=\"https://github.com/nicksnyder\"\u003e\u003ccode\u003e@​nicksnyder\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/pull/131\"\u003erussellhaering/gosaml2#131\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid panic when the encrypted data has wrong size for CBC by \u003ca href=\"https://github.com/fformica\"\u003e\u003ccode\u003e@​fformica\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/pull/195\"\u003erussellhaering/gosaml2#195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSecurity hardening by \u003ca href=\"https://github.com/ahacker1-securesaml\"\u003e\u003ccode\u003e@​ahacker1-securesaml\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDependency and CI updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nicksnyder\"\u003e\u003ccode\u003e@​nicksnyder\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/pull/131\"\u003erussellhaering/gosaml2#131\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fformica\"\u003e\u003ccode\u003e@​fformica\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/pull/195\"\u003erussellhaering/gosaml2#195\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/gosaml2/compare/v0.9.1...v0.10.0\"\u003ehttps://github.com/russellhaering/gosaml2/compare/v0.9.1...v0.10.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/636e7dda202a4d669644e72404a82616ffcbe004\"\u003e\u003ccode\u003e636e7dd\u003c/code\u003e\u003c/a\u003e Bump all GitHub Actions to latest versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/1e9cc447527b4031ffd8e7a2cb64b99289ffde29\"\u003e\u003ccode\u003e1e9cc44\u003c/code\u003e\u003c/a\u003e Bump minimum Go version to 1.25 and update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/7159bbee574ae311e3c995df506c2e61cf2c232a\"\u003e\u003ccode\u003e7159bbe\u003c/code\u003e\u003c/a\u003e Reject unsigned LogoutRequest when signature validation is enabled\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/4ddcc822c3c2bb6676221cbf2259e141b2f2e315\"\u003e\u003ccode\u003e4ddcc82\u003c/code\u003e\u003c/a\u003e Security hardening: CBC bounds check, panic removal, assertion signature veri...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/d57d10562c0a9243d5a6d86fff5067d34c7f045f\"\u003e\u003ccode\u003ed57d105\u003c/code\u003e\u003c/a\u003e Add oss-fuzz integration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/e8596e7457e1657e90dd2fb18da03e03fc4ae1a4\"\u003e\u003ccode\u003ee8596e7\u003c/code\u003e\u003c/a\u003e Fix tests broken by expired IDP test certificate\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/5d20d420e18a8e08e870d145be26bc8110073d90\"\u003e\u003ccode\u003e5d20d42\u003c/code\u003e\u003c/a\u003e Bump github.com/beevik/etree from 1.5.0 to 1.5.1 (\u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/issues/212\"\u003e#212\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/115aa21abac634a1c9b68c2a30505b60b148f8cc\"\u003e\u003ccode\u003e115aa21\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 3.28.12 to 3.28.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/cdd66bccd151b682fe99fec82a1c8c4ecdba8ff0\"\u003e\u003ccode\u003ecdd66bc\u003c/code\u003e\u003c/a\u003e Tidy dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/3418f9ae09063ff8df0ce1bd93f24e538e614def\"\u003e\u003ccode\u003e3418f9a\u003c/code\u003e\u003c/a\u003e Avoid panic when the encrypted data has wrong size for CBC\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/russellhaering/gosaml2/compare/v0.9.1...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/russellhaering/goxmldsig` from 1.4.0 to 1.6.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/russellhaering/goxmldsig/releases\"\u003egithub.com/russellhaering/goxmldsig's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.6.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSecurity:\u003c/strong\u003e Fix possible signature validation bypass caused by loop variable capture in \u003ccode\u003evalidateSignature\u003c/code\u003e (GHSA-479m-364c-43vc)\u003c/li\u003e\n\u003cli\u003eBump minimum Go version to 1.23\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003egithub.com/beevik/etree\u003c/code\u003e to v1.6.0\u003c/li\u003e\n\u003cli\u003eAdd fuzz tests for XML signature validation and canonicalization\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0\"\u003ehttps://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.5.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump dependencies\u003c/li\u003e\n\u003cli\u003eUpdate GitHub workflows\u003c/li\u003e\n\u003cli\u003eSecurity hardening by \u003ca href=\"https://github.com/ahacker1-securesaml\"\u003e\u003ccode\u003e@​ahacker1-securesaml\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/goxmldsig/compare/v1.4.0...v1.5.0\"\u003ehttps://github.com/russellhaering/goxmldsig/compare/v1.4.0...v1.5.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/878c8c615feb628064040115d00e105a137fcfa7\"\u003e\u003ccode\u003e878c8c6\u003c/code\u003e\u003c/a\u003e Apply go fix ./...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/db3d1e31f7535d7f5debb49851b9e9a2ff08b936\"\u003e\u003ccode\u003edb3d1e3\u003c/code\u003e\u003c/a\u003e Fix loop variable capture bug in validateSignature\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/4f576b89acf01f68983ca5cb9dcebd0b460234bc\"\u003e\u003ccode\u003e4f576b8\u003c/code\u003e\u003c/a\u003e Bump dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/79c29ee3ed2da54553a4132b372ced83185fcf12\"\u003e\u003ccode\u003e79c29ee\u003c/code\u003e\u003c/a\u003e Rename FuzzValidate to FuzzValidateXML to avoid name collision\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/ac7bf745b9fd3d92460ad9be3459a97b0e3bf89f\"\u003e\u003ccode\u003eac7bf74\u003c/code\u003e\u003c/a\u003e Add fuzz tests for XML signature validation and canonicalization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/a5805dfad93fc67a2106a1dc6d881df83769e3eb\"\u003e\u003ccode\u003ea5805df\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 2.13.4 to 3.28.17 (\u003ca href=\"https://redirect.github.com/russellhaering/goxmldsig/issues/155\"\u003e#155\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/7dac9ec3b2a1a336d73ff091fba4131d186dfec6\"\u003e\u003ccode\u003e7dac9ec\u003c/code\u003e\u003c/a\u003e Update GitHub Workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/1bf54ca740682fac1149814344c24c722fde8238\"\u003e\u003ccode\u003e1bf54ca\u003c/code\u003e\u003c/a\u003e Bump dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/e1c8a5b89d1d03089aa1a0ec546b33aaf80ee02f\"\u003e\u003ccode\u003ee1c8a5b\u003c/code\u003e\u003c/a\u003e Refactor to help eliminate potential vulnerabilities:\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/2ac5490a2441a3484e030c5cfeb02ce62886c01a\"\u003e\u003ccode\u003e2ac5490\u003c/code\u003e\u003c/a\u003e Refactor .verifyCertificate to obtain the certificate from an identifier from...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/russellhaering/goxmldsig/compare/v1.4.0...v1.6.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/slack-go/slack` from 0.10.1 to 0.23.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/slack-go/slack/releases\"\u003egithub.com/slack-go/slack's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.23.1\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!IMPORTANT]\nEven though this is a [security] patch release, if you were using an empty secret, this is a breaking change due to a change in behaviour. That's on purpose, to ensure you fix your approach so that there are no footguns.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eNewSecretsVerifier\u003c/code\u003e now rejects empty signing secrets to avoid accepting forged request\nsignatures when applications are misconfigured.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/slack-go/slack/compare/v0.23.0...v0.23.1\"\u003ehttps://github.com/slack-go/slack/compare/v0.23.0...v0.23.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.23.0\u003c/h2\u003e\n\u003ch2\u003eAdded\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(socketmode): expose socketmode handler \u003ccode\u003edispatcher\u003c/code\u003e method by \u003ca href=\"https://github.com/nlopes\"\u003e\u003ccode\u003e@​nlopes\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/slack-go/slack/pull/1550\"\u003eslack-go/slack#1550\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(block): add card and carousel blocks by \u003ca href=\"https://github.com/nlopes\"\u003e\u003ccode\u003e@​nlopes\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/slack-go/slack/pull/1551\"\u003eslack-go/slack#1551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(assistant): add username and icon to status update by \u003ca href=\"https://github.com/charleenwang\"\u003e\u003ccode\u003e@​charleenwang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/slack-go/slack/pull/1553\"\u003eslack-go/slack#1553\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(block): add alert block by \u003ca href=\"https://github.com/nlopes\"\u003e\u003ccode\u003e@​nlopes\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/slack-go/slack/pull/1552\"\u003eslack-go/slack#1552\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/charleenwang\"\u003e\u003ccode\u003e@​charleenwang\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/slack-go/slack/pull/1553\"\u003eslack-go/slack#1553\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/slack-go/slack/compare/v0.22.0...v0.23.0\"\u003ehttps://github.com/slack-go/slack/compare/v0.22.0...v0.23.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.22.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eOAuth PKCE support\u003c/strong\u003e - \u003ccode\u003eOAuthOptionCodeVerifier\u003c/code\u003e option for \u003ccode\u003eGetOAuthV2Response\u003c/code\u003e, plus \u003ccode\u003eGenerateCodeVerifier()\u003c/code\u003e and \u003ccode\u003eGenerateCodeChallenge()\u003c/code\u003e helpers (RFC 7636). \u003ccode\u003eclient_secret\u003c/code\u003e is now conditionally omitted when empty in both \u003ccode\u003eGetOAuthV2ResponseContext\u003c/code\u003e and \u003ccode\u003eRefreshOAuthV2TokenContext\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eManifest scope fields\u003c/strong\u003e - \u003ccode\u003eBotOptional\u003c/code\u003e and \u003ccode\u003eUserOptional\u003c/code\u003e on \u003ccode\u003eOAuthScopes\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRich text styles\u003c/strong\u003e - \u003ccode\u003eUnderline\u003c/code\u003e, \u003ccode\u003eHighlight\u003c/code\u003e, \u003ccode\u003eClientHighlight\u003c/code\u003e, and \u003ccode\u003eUnlink\u003c/code\u003e on \u003ccode\u003eRichTextSectionTextStyle\u003c/code\u003e. \u003ccode\u003eStyle\u003c/code\u003e field on \u003ccode\u003eRichTextSectionUserGroupElement\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eAssistant search context\u003c/strong\u003e - \u003ccode\u003eSort\u003c/code\u003e, \u003ccode\u003eSortDir\u003c/code\u003e, \u003ccode\u003eBefore\u003c/code\u003e, \u003ccode\u003eAfter\u003c/code\u003e, \u003ccode\u003eHighlight\u003c/code\u003e, \u003ccode\u003eIncludeContextMessages\u003c/code\u003e, \u003ccode\u003eIncludeDeletedUsers\u003c/code\u003e, \u003ccode\u003eIncludeMessageBlocks\u003c/code\u003e, \u003ccode\u003eIncludeArchivedChannels\u003c/code\u003e, \u003ccode\u003eDisableSemanticSearch\u003c/code\u003e, \u003ccode\u003eModifiers\u003c/code\u003e, \u003ccode\u003eTermClauses\u003c/code\u003e parameters and new response types (\u003ccode\u003eAssistantSearchContextFile\u003c/code\u003e, \u003ccode\u003eAssistantSearchContextChannel\u003c/code\u003e, \u003ccode\u003eAssistantSearchContextMessageContext\u003c/code\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003esocketmode: malformed JSON no longer forces reconnect\u003c/strong\u003e - \u003ccode\u003ejson.SyntaxError\u003c/code\u003e and \u003ccode\u003ejson.UnmarshalTypeError\u003c/code\u003e now emit an \u003ccode\u003eEventTypeIncomingError\u003c/code\u003e event and continue reading instead of killing the WebSocket connection.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esocketmode: \u003ccode\u003edebug_reconnects\u003c/code\u003e query param applied correctly\u003c/strong\u003e - the parameter was silently discarded due to a missing \u003ccode\u003eurl.RawQuery\u003c/code\u003e assignment.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eChannelTypes\u003c/code\u003e and \u003ccode\u003eContentTypes\u003c/code\u003e now send comma-separated values instead of repeated form keys, matching the convention used by every other method in the library.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eassistant:write\u003c/code\u003e scope marked as deprecated in favour of \u003ccode\u003echat:write\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ccode\u003ev0.21.1...v0.22.0\u003c/code\u003e\u003c/p\u003e\n\u003ch2\u003ev0.21.1\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eMessageEvent\u003c/code\u003e channel type helpers\u003c/strong\u003e — New \u003ccode\u003eChannelTypeChannel\u003c/code\u003e, \u003ccode\u003eChannelTypeGroup\u003c/code\u003e,\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/slack-go/slack/blob/master/CHANGELOG.md\"\u003egithub.com/slack-go/slack's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[0.23.1] - 2026-05-10\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eNewSecretsVerifier\u003c/code\u003e now rejects empty signing secrets to avoid accepting forged request\nsignatures when applications are misconfigured.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[0.23.0] - 2026-04-22\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBlock Kit: \u003ccode\u003eCardBlock\u003c/code\u003e and \u003ccode\u003eCarouselBlock\u003c/code\u003e\u003c/strong\u003e — Support for two of the new\nagent-UI blocks announced in the\n\u003ca href=\"https://docs.slack.dev/changelog/2026/04/16/block-kit-new-blocks\"\u003eApril 16 Slack changelog\u003c/a\u003e.\n\u003ccode\u003eCardBlock\u003c/code\u003e is constructed via \u003ccode\u003eNewCardBlock\u003c/code\u003e with a functional-options\npattern and fluent \u003ccode\u003eWith*\u003c/code\u003e builders (\u003ccode\u003eWithTitle\u003c/code\u003e, \u003ccode\u003eWithSubtitle\u003c/code\u003e, \u003ccode\u003eWithBody\u003c/code\u003e,\n\u003ccode\u003eWithIcon\u003c/code\u003e, \u003ccode\u003eWithHeroImage\u003c/code\u003e, \u003ccode\u003eWithActions\u003c/code\u003e). \u003ccode\u003eCarouselBlock\u003c/code\u003e is constructed\nvia \u003ccode\u003eNewCarouselBlock\u003c/code\u003e with a variadic \u003ccode\u003e*CardBlock\u003c/code\u003e list plus \u003ccode\u003eWithBlockID\u003c/code\u003e\nand \u003ccode\u003eAddCard\u003c/code\u003e helpers. Both blocks wire into \u003ccode\u003eBlocks.UnmarshalJSON\u003c/code\u003e for\nround-trip fidelity, and reuse existing \u003ccode\u003eImageBlockElement\u003c/code\u003e /\n\u003ccode\u003eButtonBlockElement\u003c/code\u003e / \u003ccode\u003eBlockElements\u003c/code\u003e types rather than introducing new\ncomposition objects.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBlock Kit: \u003ccode\u003eAlertBlock\u003c/code\u003e\u003c/strong\u003e — Support for the third of the new agent-UI\nblocks from the\n\u003ca href=\"https://docs.slack.dev/changelog/2026/04/16/block-kit-new-blocks\"\u003eApril 16 Slack changelog\u003c/a\u003e.\n\u003ccode\u003eAlertBlock\u003c/code\u003e is constructed via \u003ccode\u003eNewAlertBlock\u003c/code\u003e with a \u003ccode\u003e*TextBlockObject\u003c/code\u003e\nbody and a functional-options pattern. Severity is set via\n\u003ccode\u003eAlertBlockOptionLevel\u003c/code\u003e (\u003ccode\u003eAlertLevelDefault\u003c/code\u003e, \u003ccode\u003eAlertLevelInfo\u003c/code\u003e,\n\u003ccode\u003eAlertLevelWarning\u003c/code\u003e, \u003ccode\u003eAlertLevelError\u003c/code\u003e, \u003ccode\u003eAlertLevelSuccess\u003c/code\u003e) and the block\nID via \u003ccode\u003eAlertBlockOptionBlockID\u003c/code\u003e. Wires into \u003ccode\u003eBlocks.UnmarshalJSON\u003c/code\u003e for\nround-trip fidelity. Must be delivered via the streaming chunks API —\n\u003ccode\u003echat.postMessage\u003c/code\u003e rejects it as an unsupported block type.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eStreaming-message chunks API\u003c/strong\u003e — \u003ccode\u003echat.startStream\u003c/code\u003e / \u003ccode\u003echat.appendStream\u003c/code\u003e /\n\u003ccode\u003echat.stopStream\u003c/code\u003e now accept a \u003ccode\u003echunks\u003c/code\u003e parameter. Added \u003ccode\u003eMsgOptionChunks\u003c/code\u003e\nalong with a \u003ccode\u003eStreamChunk\u003c/code\u003e interface and four chunk types:\n\u003ccode\u003eMarkdownTextChunk\u003c/code\u003e, \u003ccode\u003eTaskUpdateChunk\u003c/code\u003e, \u003ccode\u003ePlanUpdateChunk\u003c/code\u003e, and \u003ccode\u003eBlocksChunk\u003c/code\u003e\n(each with a \u003ccode\u003eNew*Chunk\u003c/code\u003e constructor). This is the supported transport for\nstreaming Block Kit content and the new agent-UI blocks in particular\n(which \u003ccode\u003echat.postMessage\u003c/code\u003e rejects as \u003ccode\u003eUnsupported block type\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eMsgOptionTaskDisplayMode\u003c/code\u003e\u003c/strong\u003e — New option for \u003ccode\u003echat.startStream\u003c/code\u003e controlling\nwhether task chunks render as a sequential timeline or a grouped plan.\nAccepts \u003ccode\u003eTaskDisplayModeTimeline\u003c/code\u003e or \u003ccode\u003eTaskDisplayModePlan\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003eUsername\u003c/code\u003e, \u003ccode\u003eIconURL\u003c/code\u003e, and \u003ccode\u003eIconEmoji\u003c/code\u003e fields to\n\u003ccode\u003eAssistantThreadsSetStatusParameters\u003c/code\u003e, forwarded by\n\u003ccode\u003eSetAssistantThreadsStatusContext\u003c/code\u003e, matching the new optional parameters on\n\u003ca href=\"https://docs.slack.dev/reference/methods/assistant.threads.setStatus\"\u003e\u003ccode\u003eassistant.threads.setStatus\u003c/code\u003e\u003c/a\u003e\nfor customising the status-update presentation.\u003c/li\u003e\n\u003cli\u003eExposed \u003ccode\u003eSocketmodeHandler.DispatchEvent\u003c/code\u003e (previously the unexported\n\u003ccode\u003edispatcher\u003c/code\u003e), enabling integration tests to exercise registered handlers\nwithout a live WebSocket connection. The unexported \u003ccode\u003edispatcher\u003c/code\u003e is kept as\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/34ad5c052e446f58505ae8d81a2a72821de107cc\"\u003e\u003ccode\u003e34ad5c0\u003c/code\u003e\u003c/a\u003e security: reject empty signing secret for NewSecretsVerifier\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/c6edc2762f59b0fcd2af7f2d8eab36e2f29bad7d\"\u003e\u003ccode\u003ec6edc27\u003c/code\u003e\u003c/a\u003e chore: bump go to 1.25.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/35d8f31a076f73db88bf08304a8418846ed7b865\"\u003e\u003ccode\u003e35d8f31\u003c/code\u003e\u003c/a\u003e chore: bump to v0.23.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/ae59061d9e69253ce76fa676a2a91db238d363cf\"\u003e\u003ccode\u003eae59061\u003c/code\u003e\u003c/a\u003e feat(block): add alert block (\u003ca href=\"https://redirect.github.com/slack-go/slack/issues/1552\"\u003e#1552\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/2df5cfa0b974d57fc8077ecd030be22e42a2e4a1\"\u003e\u003ccode\u003e2df5cfa\u003c/code\u003e\u003c/a\u003e feat(assistant): add username and icon to status update (\u003ca href=\"https://redirect.github.com/slack-go/slack/issues/1553\"\u003e#1553\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/e3c0e8b15630749da93cd18168a26e78a74fecd0\"\u003e\u003ccode\u003ee3c0e8b\u003c/code\u003e\u003c/a\u003e feat(block): add card and carousel blocks (\u003ca href=\"https://redirect.github.com/slack-go/slack/issues/1551\"\u003e#1551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/4c472cd10a45bd81ef26db9510a317a674293c78\"\u003e\u003ccode\u003e4c472cd\u003c/code\u003e\u003c/a\u003e feat(socketmode): expose socketmode handler \u003ccode\u003edispatcher\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/slack-go/slack/issues/1550\"\u003e#1550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/f482b199d4e33975c13e65e075bcf87173ad902f\"\u003e\u003ccode\u003ef482b19\u003c/code\u003e\u003c/a\u003e chore: v0.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/3a5db9ddb81e7c9e5379efa510ba826b1e5d935c\"\u003e\u003ccode\u003e3a5db9d\u003c/code\u003e\u003c/a\u003e chore: fix staticcheck errors (\u003ca href=\"https://redirect.github.com/slack-go/slack/issues/1548\"\u003e#1548\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/19e0416c15851aa3f28d41e2b92dbb2fb541ad96\"\u003e\u003ccode\u003e19e0416\u003c/code\u003e\u003c/a\u003e ci: add staticcheck\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/slack-go/slack/compare/v0.10.1...v0.23.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.27.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.27.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.27.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.25.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.24.0 to 0.50.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnos...\n\n_Description has been truncated_\n\n---\n\n🔄 This PR performs a comprehensive dependency update across 5 directories, bumping 28 Go modules to their latest versions including major updates to security-critical packages like go-git, gRPC, and OpenTelemetry components.\n\n\u003cdetails\u003e\n\u003csummary\u003e🔍 \u003cstrong\u003eDetailed Analysis\u003c/strong\u003e\u003c/summary\u003e\n\n### Key Changes\n- **Go Version Updates**: Upgraded Go toolchain versions across modules (1.21→1.25, 1.22→1.24.0, etc.)\n- **Security Updates**: Critical security fixes in go-git (5.11.0→5.19.1), gosaml2 (0.9.1→0.11.0), and buildkit (0.12.5→0.28.1)\n- **Core Dependencies**: Major version bumps for gRPC (1.63.2→1.79.3), OpenTelemetry SDK (1.25.0→1.43.0), and Slack SDK (0.10.1→0.23.1)\n- **Infrastructure Libraries**: Updates to crypto, oauth2, Redis client, and PostgreSQL driver packages\n\n### Technical Implementation\n```mermaid\nflowchart TD\n    A[Dependabot Scan] --\u003e B[5 Directory Analysis]\n    B --\u003e C[progress-bot/]\n    B --\u003e D[lib/]\n    B --\u003e E[lib/managedservicesplatform/]\n    B --\u003e F[monitoring/]\n    B --\u003e G[Root Directory]\n    \n    C --\u003e H[4 Updates: Slack, crypto, oauth2, gRPC]\n    D --\u003e I[4 Updates: crypto, oauth2, Redis, gRPC]\n    E --\u003e J[6 Updates: OpenTelemetry, oauth2, pgx, Redis, edwards25519, gRPC]\n    F --\u003e K[3 Updates: crypto, logrus, retryablehttp]\n    G --\u003e L[8 Major Updates: distribution, go-git, buildkit, gosaml2, etc.]\n    \n    H --\u003e M[Security \u0026 Compatibility Improvements]\n    I --\u003e M\n    J --\u003e M\n    K --\u003e M\n    L --\u003e M\n```\n\n### Impact\n- **Security Enhancement**: Addresses multiple CVEs and security vulnerabilities in go-git, buildkit, and SAML libraries\n- **Performance Improvements**: Updated OpenTelemetry SDK includes performance optimizations and new features like W3C Trace Context Level 2 support\n- **Compatibility**: Maintains backward compatibility while providing access to latest features and bug fixes across the dependency tree\n- **Maintenance**: Reduces technical debt by keeping dependencies current and aligned with latest Go ecosystem standards\n\n\u003c/details\u003e\n\n_Created with [Palmier](https://www.palmier.io)_","html_url":"https://github.com/GlacierEQ/sourcegraph-public-snapshot/pull/38","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/GlacierEQ%2Fsourcegraph-public-snapshot/issues/38","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/38/packages"},{"uuid":"4497938405","node_id":"PR_kwDOQWu_J87eG4lP","number":659,"state":"closed","title":"build(deps): bump the go_modules group across 1 directory with 5 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-21T22:53:54.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-21T21:11:02.000Z","updated_at":"2026-05-21T22:53:56.000Z","time_to_close":6172,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"go_modules","update_count":5,"packages":[{"name":"github.com/moby/buildkit","old_version":"0.25.2","new_version":"0.28.1","repository_url":"https://github.com/moby/buildkit"},{"name":"github.com/containernetworking/plugins","old_version":"1.8.0","new_version":"1.9.0"},{"name":"github.com/in-toto/in-toto-golang","old_version":"0.9.0","new_version":"0.10.0"},{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp","old_version":"1.35.0","new_version":"1.38.0"},{"name":"go.opentelemetry.io/otel/sdk","old_version":"1.39.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 2 updates in the / directory: [github.com/moby/buildkit](https://github.com/moby/buildkit) and [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go).\n\nUpdates `github.com/moby/buildkit` from 0.25.2 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.28.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix insufficient validation of Git URL \u003ccode\u003e#ref:subdir\u003c/code\u003e fragments that could allow access to restricted files outside the checked-out repository root. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg\"\u003eGHSA-4vrq-3vrq-g6gg\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a vulnerability where an untrusted custom frontend could cause files to be written outside the BuildKit state directory. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj\"\u003eGHSA-4c29-8rgm-jvjj\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a panic when processing invalid \u003ccode\u003e.dockerignore\u003c/code\u003e patterns during \u003ccode\u003eCOPY\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/patternmatcher/issues/9\"\u003emoby/patternmatcher#9\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/moby/patternmatcher\u003c/strong\u003e  v0.6.0 -\u0026gt; v0.6.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.28.0\"\u003ev0.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.28.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.28.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.28.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eAmr Mahdi\u003c/li\u003e\n\u003cli\u003eDan Duvall\u003c/li\u003e\n\u003cli\u003eDavid Karlsson\u003c/li\u003e\n\u003cli\u003eJonas Geiler\u003c/li\u003e\n\u003cli\u003eKevin L.\u003c/li\u003e\n\u003cli\u003ersteube\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8\"\u003e\u003ccode\u003e45b038c\u003c/code\u003e\u003c/a\u003e git: normalize and validate subdir paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f5462c216098af766f97ea4cb328e65c6d8f7256\"\u003e\u003ccode\u003ef5462c2\u003c/code\u003e\u003c/a\u003e git: harden ref arg handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/71577a5da7a2b3ab75a90c2cfedfda0c27d1ef40\"\u003e\u003ccode\u003e71577a5\u003c/code\u003e\u003c/a\u003e source: extract SafeFileName into shared pathutil package\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df4378316f3b000403d097551a8139a700bd823d\"\u003e\u003ccode\u003edf43783\u003c/code\u003e\u003c/a\u003e source/http: use os.Root for saved file operations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/9ce6f62aca0653657047ee613cdef22f38b31244\"\u003e\u003ccode\u003e9ce6f62\u003c/code\u003e\u003c/a\u003e source/http: sanitize downloaded filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4\"\u003e\u003ccode\u003e099cf80\u003c/code\u003e\u003c/a\u003e executor: validate container IDs centrally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/2642113bbc9d969d223c37aaabca4b50613fddf9\"\u003e\u003ccode\u003e2642113\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e from thaJeztah/0.28_backport_bump_patternmatcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/802da78332d9f2c6c9d856c1648ab52c701076fa\"\u003e\u003ccode\u003e802da78\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/patternmatcher v0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/5245d869d85d9c98f986b600584c332a3b001986\"\u003e\u003ccode\u003e5245d86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6551\"\u003e#6551\u003c/a\u003e from tonistiigi/v0.28-cherry-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/90ee5deef6c6efcb82358eb48d76235191196db1\"\u003e\u003ccode\u003e90ee5de\u003c/code\u003e\u003c/a\u003e vendor: update x/net to v0.51.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.25.2...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/containernetworking/plugins` from 1.8.0 to 1.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/containernetworking/plugins/releases\"\u003egithub.com/containernetworking/plugins's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCNI plugins v1.9.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThis release fixes \u003ca href=\"https://github.com/containernetworking/plugins/security/advisories/GHSA-jv3w-x3r3-g6rm\"\u003eCVE-2025-67499\u003c/a\u003e, a bug in the \u003ccode\u003enftables\u003c/code\u003e backend for the \u003ccode\u003eportmap\u003c/code\u003e plugin that can cause traffic to be unexpectedly intercepted.\u003c/p\u003e\n\u003ch3\u003eBugs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eportmap: ensure nftables backend only intercept local traffic by \u003ca href=\"https://github.com/champtar\"\u003e\u003ccode\u003e@​champtar\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/containernetworking/plugins/pull/1210\"\u003econtainernetworking/plugins#1210\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix file exists errro in dummy cni by \u003ca href=\"https://github.com/liuyuan10\"\u003e\u003ccode\u003e@​liuyuan10\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/containernetworking/plugins/pull/1205\"\u003econtainernetworking/plugins#1205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIgnore settling with down state since it would never settle by \u003ca href=\"https://github.com/bn222\"\u003e\u003ccode\u003e@​bn222\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/containernetworking/plugins/pull/1207\"\u003econtainernetworking/plugins#1207\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/containernetworking/plugins/compare/v1.8.0...v1.9.0\"\u003ehttps://github.com/containernetworking/plugins/compare/v1.8.0...v1.9.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containernetworking/plugins/commit/9b3772e1a7abf93cbb7c6526a28bc0d27b830e02\"\u003e\u003ccode\u003e9b3772e\u003c/code\u003e\u003c/a\u003e portmap: ensure nftables backend only intercept local traffic\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containernetworking/plugins/commit/8ee59c6f6ac8e05a64ac9a4448145aa0f5db7213\"\u003e\u003ccode\u003e8ee59c6\u003c/code\u003e\u003c/a\u003e portmap: fix CHECK for nftables backend\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containernetworking/plugins/commit/372953dfb89fe5c17a29a865b502a2eabb31a195\"\u003e\u003ccode\u003e372953d\u003c/code\u003e\u003c/a\u003e Ignore settling with down state since it will never settle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containernetworking/plugins/commit/85daca7d7b247c5e58a6216e09388d8d3aa7ae1a\"\u003e\u003ccode\u003e85daca7\u003c/code\u003e\u003c/a\u003e Fix file exists errro in dummy cni\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/containernetworking/plugins/compare/v1.8.0...v1.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/in-toto/in-toto-golang` from 0.9.0 to 0.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/in-toto/in-toto-golang/releases\"\u003egithub.com/in-toto/in-toto-golang's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/232\"\u003ein-toto/in-toto-golang#232\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate maintainers and governance by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/233\"\u003ein-toto/in-toto-golang#233\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/234\"\u003ein-toto/in-toto-golang#234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.3 to 2.1.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/235\"\u003ein-toto/in-toto-golang#235\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/236\"\u003ein-toto/in-toto-golang#236\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix expired signature in test by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/241\"\u003ein-toto/in-toto-golang#241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.8.0 to 0.9.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/240\"\u003ein-toto/in-toto-golang#240\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.5 to 2.1.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/239\"\u003ein-toto/in-toto-golang#239\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/242\"\u003ein-toto/in-toto-golang#242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.56.0 to 1.56.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/243\"\u003ein-toto/in-toto-golang#243\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate GitHub Actions workflows by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/246\"\u003ein-toto/in-toto-golang#246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/245\"\u003ein-toto/in-toto-golang#245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremove linters that are no longer supported and add to make file by \u003ca href=\"https://github.com/pxp928\"\u003e\u003ccode\u003e@​pxp928\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/249\"\u003ein-toto/in-toto-golang#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd match products feature by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/237\"\u003ein-toto/in-toto-golang#237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove unfinished link on record stop by \u003ca href=\"https://github.com/PradyumnaKrishna\"\u003e\u003ccode\u003e@​PradyumnaKrishna\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/248\"\u003ein-toto/in-toto-golang#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.56.1 to 1.56.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/250\"\u003ein-toto/in-toto-golang#250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.6.0 to 0.7.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/251\"\u003ein-toto/in-toto-golang#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.56.2 to 1.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/255\"\u003ein-toto/in-toto-golang#255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd tests for coverage in envelope.go by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/256\"\u003ein-toto/in-toto-golang#256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/257\"\u003ein-toto/in-toto-golang#257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/258\"\u003ein-toto/in-toto-golang#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/259\"\u003ein-toto/in-toto-golang#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixes filepath pattern matching in windows by \u003ca href=\"https://github.com/PradyumnaKrishna\"\u003e\u003ccode\u003e@​PradyumnaKrishna\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/254\"\u003ein-toto/in-toto-golang#254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 3.5.3 to 3.6.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/261\"\u003ein-toto/in-toto-golang#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 3.6.0 to 4.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/262\"\u003ein-toto/in-toto-golang#262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/263\"\u003ein-toto/in-toto-golang#263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.57.0 to 1.58.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/264\"\u003ein-toto/in-toto-golang#264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/266\"\u003ein-toto/in-toto-golang#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate Provenance v1 struct in favor of /attestation protobufs by \u003ca href=\"https://github.com/marcelamelara\"\u003e\u003ccode\u003e@​marcelamelara\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/267\"\u003ein-toto/in-toto-golang#267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/269\"\u003ein-toto/in-toto-golang#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 4.0.0 to 4.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/270\"\u003ein-toto/in-toto-golang#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop use of \u003ccode\u003eany\u003c/code\u003e for hash objects by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/238\"\u003ein-toto/in-toto-golang#238\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/271\"\u003ein-toto/in-toto-golang#271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/273\"\u003ein-toto/in-toto-golang#273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/272\"\u003ein-toto/in-toto-golang#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.12.0 to 0.17.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/274\"\u003ein-toto/in-toto-golang#274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.3 to 1.59.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/275\"\u003ein-toto/in-toto-golang#275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 4.1.0 to 4.1.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/276\"\u003ein-toto/in-toto-golang#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTrigger workflow on pushes only to master branch by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/280\"\u003ein-toto/in-toto-golang#280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.13.0 to 0.14.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/278\"\u003ein-toto/in-toto-golang#278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/277\"\u003ein-toto/in-toto-golang#277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd openssf scorecard by \u003ca href=\"https://github.com/viveksahu26\"\u003e\u003ccode\u003e@​viveksahu26\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/281\"\u003ein-toto/in-toto-golang#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/282\"\u003ein-toto/in-toto-golang#282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix coveralls, use action by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/285\"\u003ein-toto/in-toto-golang#285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSecure System Lab Sign/Verify by \u003ca href=\"https://github.com/Forrin\"\u003e\u003ccode\u003e@​Forrin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/279\"\u003ein-toto/in-toto-golang#279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.14.0 to 0.15.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/287\"\u003ein-toto/in-toto-golang#287\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 4.1.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/289\"\u003ein-toto/in-toto-golang#289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.59.0 to 1.60.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/290\"\u003ein-toto/in-toto-golang#290\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/db554e2ab6498a07d719e5374efa6ad4a7a7c222\"\u003e\u003ccode\u003edb554e2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/450\"\u003e#450\u003c/a\u003e from in-toto/dependabot/go_modules/all-e2678a00b5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/b2ea0f2587b6b6df90a489a199f4e845fd53bc18\"\u003e\u003ccode\u003eb2ea0f2\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/sys in the all group\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/acc2f336840dd6a4c09ced5dcd69e1dc8cd1dce3\"\u003e\u003ccode\u003eacc2f33\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/448\"\u003e#448\u003c/a\u003e from in-toto/dependabot/go_modules/github.com/secure-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/313b1d6c89e412fc2e1b68ec8c4ffd3767408cf2\"\u003e\u003ccode\u003e313b1d6\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/449\"\u003e#449\u003c/a\u003e from in-toto/dependabot/github_actions/all-2ed24f8e11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/d9a60afc87a0ad342c30719f864042075194708f\"\u003e\u003ccode\u003ed9a60af\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/secure-systems-lab/go-securesystemslib\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/e7783d589362197c09b16b9f4b6e533957a56bef\"\u003e\u003ccode\u003ee7783d5\u003c/code\u003e\u003c/a\u003e chore(deps): bump the all group with 3 updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/7a1798a0e1cd26c554b353b6b792b73c1448691d\"\u003e\u003ccode\u003e7a1798a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/447\"\u003e#447\u003c/a\u003e from in-toto/fix-ci\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/b6af1a7fdb901ab63bd21b6a8a85b232843ce48f\"\u003e\u003ccode\u003eb6af1a7\u003c/code\u003e\u003c/a\u003e Modernize CI and automation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/ad676459ee070471436b44d3b482698975c35030\"\u003e\u003ccode\u003ead67645\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/446\"\u003e#446\u003c/a\u003e from in-toto/dependabot/go_modules/google.golang.org/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/b63fd336d6a981407d080757e958a50d0cdf5901\"\u003e\u003ccode\u003eb63fd33\u003c/code\u003e\u003c/a\u003e chore(deps): bump google.golang.org/grpc from 1.74.2 to 1.78.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/in-toto/in-toto-golang/compare/v0.9.0...v0.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.35.0 to 1.38.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.38.0/0.60.0/0.14.0/0.0.13] 2025-08-29\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.23].\nThe next release will require at least [Go 1.24].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd native histogram exemplar support in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/6772\"\u003e#6772\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd template attribute functions to the \u003ccode\u003ego.opentelmetry.io/otel/semconv/v1.34.0\u003c/code\u003e package. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/6939\"\u003e#6939\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eContainerLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eDBOperationParameter\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eDBSystemParameter\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eHTTPRequestHeader\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eHTTPResponseHeader\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SCronJobAnnotation\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SCronJobLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SDaemonSetAnnotation\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SDaemonSetLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SDeploymentAnnotation\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SDeploymentLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SJobAnnotation\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SJobLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SNamespaceAnnotation\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SNamespaceLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SNodeAnnotation\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SNodeLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SPodAnnotation\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SPodLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SReplicaSetAnnotation\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SReplicaSetLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SStatefulSetAnnotation\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SStatefulSetLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eProcessEnvironmentVariable\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eRPCConnectRPCRequestMetadata\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eRPCConnectRPCResponseMetadata\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eRPCGRPCRequestMetadata\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eRPCGRPCResponseMetadata\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrorType\u003c/code\u003e attribute helper function to the \u003ccode\u003ego.opentelmetry.io/otel/semconv/v1.34.0\u003c/code\u003e package. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/6962\"\u003e#6962\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithAllowKeyDuplication\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e which can be used to disable deduplication for log records. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/6968\"\u003e#6968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimit\u003c/code\u003e option to configure the cardinality limit in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/6996\"\u003e#6996\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7065\"\u003e#7065\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7081\"\u003e#7081\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7164\"\u003e#7164\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7165\"\u003e#7165\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7179\"\u003e#7179\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eClone\u003c/code\u003e method to \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/log\u003c/code\u003e that returns a copy of the record with no shared state. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7001\"\u003e#7001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability span and batch span processor metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e.\nCheck the \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace/internal/x\u003c/code\u003e package documentation for more information. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7027\"\u003e#7027\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/6393\"\u003e#6393\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7209\"\u003e#7209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.36.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.36.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.36.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.34.0.\u003c/code\u003e(\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7032\"\u003e#7032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7041\"\u003e#7041\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for configuring Prometheus name translation using \u003ccode\u003eWithTranslationStrategy\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e. The current default translation strategy when UTF-8 mode is enabled is \u003ccode\u003eNoUTF8EscapingWithSuffixes\u003c/code\u003e, but a future release will change the default strategy to \u003ccode\u003eUnderscoreEscapingWithSuffixes\u003c/code\u003e for compliance with the specification. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7111\"\u003e#7111\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability log metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e.\nCheck the \u003ccode\u003ego.opentelemetry.io/otel/sdk/log/internal/x\u003c/code\u003e package documentation for more information. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7121\"\u003e#7121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability trace exporter metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdouttrace\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/84e3f3ac8b25204f3a0f77a805437a5e08573b35\"\u003e\u003ccode\u003e84e3f3a\u003c/code\u003e\u003c/a\u003e Release v1.38.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7271\"\u003e#7271\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/18424a46edbe635f53b87625541abe341ea24467\"\u003e\u003ccode\u003e18424a4\u003c/code\u003e\u003c/a\u003e Add tests for attribute JSON marshalling (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7268\"\u003e#7268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/979875946326aee5bd59601796ee2c90b63a3316\"\u003e\u003ccode\u003e9798759\u003c/code\u003e\u003c/a\u003e Statically define trace observability attributes (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7263\"\u003e#7263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/be1e57fb3651b1a0d16f91a413aa40c47078881d\"\u003e\u003ccode\u003ebe1e57f\u003c/code\u003e\u003c/a\u003e Refactor BSP observability setup (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7264\"\u003e#7264\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d99c68cb21b2e7abf2405ebf9d17f419daef273e\"\u003e\u003ccode\u003ed99c68c\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mgechev/revive to v1.12.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7269\"\u003e#7269\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0724539e71727d03916c5c5996c67c2268ca8774\"\u003e\u003ccode\u003e0724539\u003c/code\u003e\u003c/a\u003e Add benchmark for set equality (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7262\"\u003e#7262\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5358fd737d0c0c4adedcf4c76f2d94bb51f4a493\"\u003e\u003ccode\u003e5358fd7\u003c/code\u003e\u003c/a\u003e Upgrade semconv dependencies to v1.37.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7260\"\u003e#7260\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/25d02741f7640af42083dfb217d26be89f1fe94c\"\u003e\u003ccode\u003e25d0274\u003c/code\u003e\u003c/a\u003e fix(deps): update module github.com/stretchr/testify to v1.11.1 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7261\"\u003e#7261\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d0cab8666b740c975f028236610cab2663f02031\"\u003e\u003ccode\u003ed0cab86\u003c/code\u003e\u003c/a\u003e prometheus: Add support for setting Translation Strategy config option (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7111\"\u003e#7111\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3342341f15081be03d23b3e36b9e2c07ffca858a\"\u003e\u003ccode\u003e3342341\u003c/code\u003e\u003c/a\u003e Generate the \u003ccode\u003esemconv/v1.37.0\u003c/code\u003e packages (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7254\"\u003e#7254\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.35.0...v1.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.39.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/eminwux/kukeon/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/eminwux/kukeon/pull/659","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/eminwux%2Fkukeon/issues/659","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/659/packages"},{"uuid":"4486833425","node_id":"PR_kwDOHKqUys7di4at","number":668,"state":"closed","title":"build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.30.0","user":"dependabot[bot]","labels":["stale"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":"2026-06-11T02:18:11.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-20T13:25:42.000Z","updated_at":"2026-06-11T02:18:19.000Z","time_to_close":1860749,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/moby/buildkit","old_version":"0.10.3","new_version":"0.30.0","repository_url":"https://github.com/moby/buildkit"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.10.3 to 0.30.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.30.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.30.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eNatnael Gebremariam\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eDawei Wei\u003c/li\u003e\n\u003cli\u003eDmitrii Kostyrev\u003c/li\u003e\n\u003cli\u003eJiří Moravčík\u003c/li\u003e\n\u003cli\u003eVladimir Kuznichenkov\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuiltin Dockerfile frontend has been updated to v1.24.0 \u003ca href=\"https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.24.0\"\u003echangelog\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuildKit now supports the concept of \u0026quot;compatibility version\u0026quot; for improved reproducible builds support across different BuildKit versions. This allows users to specify a version for which the build should be compatible with, and BuildKit will attempt to maintain compatibility with that version when possible. Compatibility version will be stored in the provenance attestation of the build and can be used to independently verify the artifacts of the build on other BuildKit versions. The current compatibility version and backward compatibility with old versions are defined in \u003ca href=\"https://github.com/moby/buildkit/blob/v0.30.0-rc1/docs/build-repro.md#compatibility-version\"\u003eBuild reproducibility docs\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6681\"\u003e#6681\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGit sources now support \u003ccode\u003efetch-by-commit\u003c/code\u003e option where commit is fetched by the SHA and then associated with the reference. This is useful when checking out mutable references \u003ccode\u003erefs/NR/merge\u003c/code\u003e where the commit SHA may change during invocation and cause checksum mismatch error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6708\"\u003e#6708\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe LLB API now supports Git bundle format. Git bundles can be loaded from registry or OCI layout blobs and Git sources can be checked out into bundle format for snapshotting \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6711\"\u003e#6711\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eProvenance attestations for multi-pass or chained builds now include request details for root requests and individual input requests, allowing full reconstruction of such complex builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6739\"\u003e#6739\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe version of the built-in Dockerfile frontend that was used is now included in the provenance metadata and reported via worker info APIs. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6705\"\u003e#6705\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error reporting for registry errors on cache export \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports additional options \u003ccode\u003eretry_mode\u003c/code\u003e and \u003ccode\u003eretry_max_attempts\u003c/code\u003e to configure retry behavior of S3 client \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6657\"\u003e#6657\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports \u003ccode\u003edisable_accept_encoding\u003c/code\u003e option for GCS interoperability \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6642\"\u003e#6642\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce potential lock contention in gateway forwarder for improved performance on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6741\"\u003e#6741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eA new log level option has been added to the buildkitd TOML configuration; previous \u0026quot;debug\u0026quot; and \u0026quot;trace\u0026quot; options have been deprecated \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6732\"\u003e#6732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow gateway frontend requests to forward to the built-in Dockerfile frontend the same way as to external frontends \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6643\"\u003e#6643\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSession connection health checks have been improved to better detect loss of connectivity and avoid stuck builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6649\"\u003e#6649\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix issue with Git subdirectory value not being included in ConfigSource section of SLSA provenance for builds from Git sources \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6724\"\u003e#6724\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid potential deadlock if the credential helper in the client is misbehaving and never returns credentials \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6709\"\u003e#6709\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in provenance computation on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible provenance capture race in concurrent no-cache builds that could leave source pins empty and fail with an invalid checksum digest error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6764\"\u003e#6764\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in progress writer \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6679\"\u003e#6679\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix data race in S3 cache reader \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6675\"\u003e#6675\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible Git config lookup errors on Windows \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6639\"\u003e#6639\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix build cancellation not working properly when blocked on credential callback \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6641\"\u003e#6641\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Azure/azure-sdk-for-go/sdk/azcore\u003c/strong\u003e                                  v1.20.0 -\u0026gt; v1.21.0\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Microsoft/hcsshim\u003c/strong\u003e                                                  v0.14.0-rc.1 -\u0026gt; v0.14.1\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2\u003c/strong\u003e                                                  v1.41.4 -\u0026gt; v1.41.7\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/dd2170e156c9633da1b2d1a58a6188e3f7d36fa4\"\u003e\u003ccode\u003edd2170e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6770\"\u003e#6770\u003c/a\u003e from crazy-max/v0.30-picks-0.30.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e4b9769cf519c5c1d9bc59643adde2c977f9ae30\"\u003e\u003ccode\u003ee4b9769\u003c/code\u003e\u003c/a\u003e test: gate merge diff tests through worker capabilities\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/d5956a1cf26f4055deaff883dad537b6a25bcfa1\"\u003e\u003ccode\u003ed5956a1\u003c/code\u003e\u003c/a\u003e skip pin race test on workers without merge diff support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/505ab37cd6c6c6d2ac37e3a598eab4abdc315c2a\"\u003e\u003ccode\u003e505ab37\u003c/code\u003e\u003c/a\u003e solver: fix race in walkProvenance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f2e48d20dc7d744a4051d6b5591b851a29a6232f\"\u003e\u003ccode\u003ef2e48d2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e from jsternberg/add-error-details\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f7a40a08716a42f1066b99bb0cdc09cab42987b9\"\u003e\u003ccode\u003ef7a40a0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e from tonistiigi/fix-provenance-data-race\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/80e934d8b310736f71a6a33c696b8448bec6c12d\"\u003e\u003ccode\u003e80e934d\u003c/code\u003e\u003c/a\u003e remotecache: propagate details field from registry when included\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/a7c874909a0045c6e32c1c1314e7aba949bf85da\"\u003e\u003ccode\u003ea7c8749\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6761\"\u003e#6761\u003c/a\u003e from moby/dependabot/github_actions/github/codeql-ac...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df37b6751b796a1b22d4dfe0ffb0bc9962b2c38b\"\u003e\u003ccode\u003edf37b67\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.35.3 to 4.35.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c7ba94199885e89e25615d3e2d78fea86a2c7eb7\"\u003e\u003ccode\u003ec7ba941\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6759\"\u003e#6759\u003c/a\u003e from moby/dependabot/github_actions/docker/github-bu...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.10.3...v0.30.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit\u0026package-manager=go_modules\u0026previous-version=0.10.3\u0026new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/RemakingEden/dagger/pull/668","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/RemakingEden%2Fdagger/issues/668","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/668/packages"},{"uuid":"4470161807","node_id":"PR_kwDOENmims7cs7GK","number":318,"state":"open","title":"build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.30.0","user":"dependabot[bot]","labels":["dependencies","go","stale"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-18T14:57:50.000Z","updated_at":"2026-06-18T01:17:51.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/moby/buildkit","old_version":"0.10.3","new_version":"0.30.0","repository_url":"https://github.com/moby/buildkit"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.10.3 to 0.30.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.30.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.30.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eNatnael Gebremariam\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eDawei Wei\u003c/li\u003e\n\u003cli\u003eDmitrii Kostyrev\u003c/li\u003e\n\u003cli\u003eJiří Moravčík\u003c/li\u003e\n\u003cli\u003eVladimir Kuznichenkov\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuiltin Dockerfile frontend has been updated to v1.24.0 \u003ca href=\"https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.24.0\"\u003echangelog\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuildKit now supports the concept of \u0026quot;compatibility version\u0026quot; for improved reproducible builds support across different BuildKit versions. This allows users to specify a version for which the build should be compatible with, and BuildKit will attempt to maintain compatibility with that version when possible. Compatibility version will be stored in the provenance attestation of the build and can be used to independently verify the artifacts of the build on other BuildKit versions. The current compatibility version and backward compatibility with old versions are defined in \u003ca href=\"https://github.com/moby/buildkit/blob/v0.30.0-rc1/docs/build-repro.md#compatibility-version\"\u003eBuild reproducibility docs\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6681\"\u003e#6681\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGit sources now support \u003ccode\u003efetch-by-commit\u003c/code\u003e option where commit is fetched by the SHA and then associated with the reference. This is useful when checking out mutable references \u003ccode\u003erefs/NR/merge\u003c/code\u003e where the commit SHA may change during invocation and cause checksum mismatch error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6708\"\u003e#6708\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe LLB API now supports Git bundle format. Git bundles can be loaded from registry or OCI layout blobs and Git sources can be checked out into bundle format for snapshotting \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6711\"\u003e#6711\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eProvenance attestations for multi-pass or chained builds now include request details for root requests and individual input requests, allowing full reconstruction of such complex builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6739\"\u003e#6739\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe version of the built-in Dockerfile frontend that was used is now included in the provenance metadata and reported via worker info APIs. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6705\"\u003e#6705\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error reporting for registry errors on cache export \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports additional options \u003ccode\u003eretry_mode\u003c/code\u003e and \u003ccode\u003eretry_max_attempts\u003c/code\u003e to configure retry behavior of S3 client \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6657\"\u003e#6657\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports \u003ccode\u003edisable_accept_encoding\u003c/code\u003e option for GCS interoperability \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6642\"\u003e#6642\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce potential lock contention in gateway forwarder for improved performance on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6741\"\u003e#6741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eA new log level option has been added to the buildkitd TOML configuration; previous \u0026quot;debug\u0026quot; and \u0026quot;trace\u0026quot; options have been deprecated \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6732\"\u003e#6732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow gateway frontend requests to forward to the built-in Dockerfile frontend the same way as to external frontends \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6643\"\u003e#6643\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSession connection health checks have been improved to better detect loss of connectivity and avoid stuck builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6649\"\u003e#6649\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix issue with Git subdirectory value not being included in ConfigSource section of SLSA provenance for builds from Git sources \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6724\"\u003e#6724\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid potential deadlock if the credential helper in the client is misbehaving and never returns credentials \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6709\"\u003e#6709\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in provenance computation on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible provenance capture race in concurrent no-cache builds that could leave source pins empty and fail with an invalid checksum digest error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6764\"\u003e#6764\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in progress writer \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6679\"\u003e#6679\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix data race in S3 cache reader \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6675\"\u003e#6675\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible Git config lookup errors on Windows \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6639\"\u003e#6639\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix build cancellation not working properly when blocked on credential callback \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6641\"\u003e#6641\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Azure/azure-sdk-for-go/sdk/azcore\u003c/strong\u003e                                  v1.20.0 -\u0026gt; v1.21.0\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Microsoft/hcsshim\u003c/strong\u003e                                                  v0.14.0-rc.1 -\u0026gt; v0.14.1\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2\u003c/strong\u003e                                                  v1.41.4 -\u0026gt; v1.41.7\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/dd2170e156c9633da1b2d1a58a6188e3f7d36fa4\"\u003e\u003ccode\u003edd2170e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6770\"\u003e#6770\u003c/a\u003e from crazy-max/v0.30-picks-0.30.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e4b9769cf519c5c1d9bc59643adde2c977f9ae30\"\u003e\u003ccode\u003ee4b9769\u003c/code\u003e\u003c/a\u003e test: gate merge diff tests through worker capabilities\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/d5956a1cf26f4055deaff883dad537b6a25bcfa1\"\u003e\u003ccode\u003ed5956a1\u003c/code\u003e\u003c/a\u003e skip pin race test on workers without merge diff support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/505ab37cd6c6c6d2ac37e3a598eab4abdc315c2a\"\u003e\u003ccode\u003e505ab37\u003c/code\u003e\u003c/a\u003e solver: fix race in walkProvenance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f2e48d20dc7d744a4051d6b5591b851a29a6232f\"\u003e\u003ccode\u003ef2e48d2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e from jsternberg/add-error-details\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f7a40a08716a42f1066b99bb0cdc09cab42987b9\"\u003e\u003ccode\u003ef7a40a0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e from tonistiigi/fix-provenance-data-race\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/80e934d8b310736f71a6a33c696b8448bec6c12d\"\u003e\u003ccode\u003e80e934d\u003c/code\u003e\u003c/a\u003e remotecache: propagate details field from registry when included\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/a7c874909a0045c6e32c1c1314e7aba949bf85da\"\u003e\u003ccode\u003ea7c8749\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6761\"\u003e#6761\u003c/a\u003e from moby/dependabot/github_actions/github/codeql-ac...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df37b6751b796a1b22d4dfe0ffb0bc9962b2c38b\"\u003e\u003ccode\u003edf37b67\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.35.3 to 4.35.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c7ba94199885e89e25615d3e2d78fea86a2c7eb7\"\u003e\u003ccode\u003ec7ba941\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6759\"\u003e#6759\u003c/a\u003e from moby/dependabot/github_actions/docker/github-bu...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.10.3...v0.30.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit\u0026package-manager=go_modules\u0026previous-version=0.10.3\u0026new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/doytsujin/act/pull/318","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/doytsujin%2Fact/issues/318","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/318/packages"},{"uuid":"4466470602","node_id":"PR_kwDOQuvXGs7cg_re","number":19,"state":"open","title":"deps(deps): bump github.com/moby/buildkit from 0.29.0 to 0.30.0 in the docker group across 1 directory","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-18T05:23:02.000Z","updated_at":"2026-05-19T03:13:02.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps)","packages":[{"name":"github.com/moby/buildkit","old_version":"0.29.0","new_version":"0.30.0","repository_url":"https://github.com/moby/buildkit"}],"path":"the docker group across 1 directory","ecosystem":"go"},"body":"Bumps the docker group with 1 update in the / directory: [github.com/moby/buildkit](https://github.com/moby/buildkit).\n\nUpdates `github.com/moby/buildkit` from 0.29.0 to 0.30.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.30.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.30.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eNatnael Gebremariam\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eDawei Wei\u003c/li\u003e\n\u003cli\u003eDmitrii Kostyrev\u003c/li\u003e\n\u003cli\u003eJiří Moravčík\u003c/li\u003e\n\u003cli\u003eVladimir Kuznichenkov\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuiltin Dockerfile frontend has been updated to v1.24.0 \u003ca href=\"https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.24.0\"\u003echangelog\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuildKit now supports the concept of \u0026quot;compatibility version\u0026quot; for improved reproducible builds support across different BuildKit versions. This allows users to specify a version for which the build should be compatible with, and BuildKit will attempt to maintain compatibility with that version when possible. Compatibility version will be stored in the provenance attestation of the build and can be used to independently verify the artifacts of the build on other BuildKit versions. The current compatibility version and backward compatibility with old versions are defined in \u003ca href=\"https://github.com/moby/buildkit/blob/v0.30.0-rc1/docs/build-repro.md#compatibility-version\"\u003eBuild reproducibility docs\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6681\"\u003e#6681\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGit sources now support \u003ccode\u003efetch-by-commit\u003c/code\u003e option where commit is fetched by the SHA and then associated with the reference. This is useful when checking out mutable references \u003ccode\u003erefs/NR/merge\u003c/code\u003e where the commit SHA may change during invocation and cause checksum mismatch error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6708\"\u003e#6708\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe LLB API now supports Git bundle format. Git bundles can be loaded from registry or OCI layout blobs and Git sources can be checked out into bundle format for snapshotting \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6711\"\u003e#6711\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eProvenance attestations for multi-pass or chained builds now include request details for root requests and individual input requests, allowing full reconstruction of such complex builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6739\"\u003e#6739\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe version of the built-in Dockerfile frontend that was used is now included in the provenance metadata and reported via worker info APIs. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6705\"\u003e#6705\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error reporting for registry errors on cache export \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports additional options \u003ccode\u003eretry_mode\u003c/code\u003e and \u003ccode\u003eretry_max_attempts\u003c/code\u003e to configure retry behavior of S3 client \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6657\"\u003e#6657\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports \u003ccode\u003edisable_accept_encoding\u003c/code\u003e option for GCS interoperability \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6642\"\u003e#6642\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce potential lock contention in gateway forwarder for improved performance on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6741\"\u003e#6741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eA new log level option has been added to the buildkitd TOML configuration; previous \u0026quot;debug\u0026quot; and \u0026quot;trace\u0026quot; options have been deprecated \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6732\"\u003e#6732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow gateway frontend requests to forward to the built-in Dockerfile frontend the same way as to external frontends \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6643\"\u003e#6643\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSession connection health checks have been improved to better detect loss of connectivity and avoid stuck builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6649\"\u003e#6649\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix issue with Git subdirectory value not being included in ConfigSource section of SLSA provenance for builds from Git sources \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6724\"\u003e#6724\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid potential deadlock if the credential helper in the client is misbehaving and never returns credentials \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6709\"\u003e#6709\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in provenance computation on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible provenance capture race in concurrent no-cache builds that could leave source pins empty and fail with an invalid checksum digest error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6764\"\u003e#6764\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in progress writer \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6679\"\u003e#6679\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix data race in S3 cache reader \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6675\"\u003e#6675\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible Git config lookup errors on Windows \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6639\"\u003e#6639\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix build cancellation not working properly when blocked on credential callback \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6641\"\u003e#6641\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Azure/azure-sdk-for-go/sdk/azcore\u003c/strong\u003e                                  v1.20.0 -\u0026gt; v1.21.0\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Microsoft/hcsshim\u003c/strong\u003e                                                  v0.14.0-rc.1 -\u0026gt; v0.14.1\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2\u003c/strong\u003e                                                  v1.41.4 -\u0026gt; v1.41.7\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/dd2170e156c9633da1b2d1a58a6188e3f7d36fa4\"\u003e\u003ccode\u003edd2170e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6770\"\u003e#6770\u003c/a\u003e from crazy-max/v0.30-picks-0.30.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e4b9769cf519c5c1d9bc59643adde2c977f9ae30\"\u003e\u003ccode\u003ee4b9769\u003c/code\u003e\u003c/a\u003e test: gate merge diff tests through worker capabilities\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/d5956a1cf26f4055deaff883dad537b6a25bcfa1\"\u003e\u003ccode\u003ed5956a1\u003c/code\u003e\u003c/a\u003e skip pin race test on workers without merge diff support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/505ab37cd6c6c6d2ac37e3a598eab4abdc315c2a\"\u003e\u003ccode\u003e505ab37\u003c/code\u003e\u003c/a\u003e solver: fix race in walkProvenance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f2e48d20dc7d744a4051d6b5591b851a29a6232f\"\u003e\u003ccode\u003ef2e48d2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e from jsternberg/add-error-details\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f7a40a08716a42f1066b99bb0cdc09cab42987b9\"\u003e\u003ccode\u003ef7a40a0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e from tonistiigi/fix-provenance-data-race\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/80e934d8b310736f71a6a33c696b8448bec6c12d\"\u003e\u003ccode\u003e80e934d\u003c/code\u003e\u003c/a\u003e remotecache: propagate details field from registry when included\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/a7c874909a0045c6e32c1c1314e7aba949bf85da\"\u003e\u003ccode\u003ea7c8749\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6761\"\u003e#6761\u003c/a\u003e from moby/dependabot/github_actions/github/codeql-ac...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df37b6751b796a1b22d4dfe0ffb0bc9962b2c38b\"\u003e\u003ccode\u003edf37b67\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.35.3 to 4.35.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c7ba94199885e89e25615d3e2d78fea86a2c7eb7\"\u003e\u003ccode\u003ec7ba941\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6759\"\u003e#6759\u003c/a\u003e from moby/dependabot/github_actions/docker/github-bu...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.29.0...v0.30.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e","html_url":"https://github.com/rhajizada/cradle/pull/19","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/rhajizada%2Fcradle/issues/19","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/19/packages"},{"uuid":"4465604608","node_id":"PR_kwDOQ1E4ts7ceSKk","number":288,"state":"open","title":"chore(deps): bump the go-minor-patch group across 1 directory with 6 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-18T01:17:54.000Z","updated_at":"2026-05-18T01:17:55.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-minor-patch","update_count":6,"packages":[{"name":"github.com/moby/buildkit","old_version":"0.29.0","new_version":"0.30.0","repository_url":"https://github.com/moby/buildkit"},{"name":"golang.org/x/sys","old_version":"0.43.0","new_version":"0.44.0","repository_url":"https://github.com/golang/sys"},{"name":"golang.org/x/term","old_version":"0.42.0","new_version":"0.43.0","repository_url":"https://github.com/golang/term"},{"name":"google.golang.org/grpc","old_version":"1.81.0","new_version":"1.81.1","repository_url":"https://github.com/grpc/grpc-go"},{"name":"modernc.org/sqlite","old_version":"1.50.0","new_version":"1.50.1"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor-patch group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.29.0` | `0.30.0` |\n| [golang.org/x/sys](https://github.com/golang/sys) | `0.43.0` | `0.44.0` |\n| [golang.org/x/term](https://github.com/golang/term) | `0.42.0` | `0.43.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.81.0` | `1.81.1` |\n| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.50.0` | `1.50.1` |\n\n\nUpdates `github.com/moby/buildkit` from 0.29.0 to 0.30.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.30.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.30.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eNatnael Gebremariam\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eDawei Wei\u003c/li\u003e\n\u003cli\u003eDmitrii Kostyrev\u003c/li\u003e\n\u003cli\u003eJiří Moravčík\u003c/li\u003e\n\u003cli\u003eVladimir Kuznichenkov\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuiltin Dockerfile frontend has been updated to v1.24.0 \u003ca href=\"https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.24.0\"\u003echangelog\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuildKit now supports the concept of \u0026quot;compatibility version\u0026quot; for improved reproducible builds support across different BuildKit versions. This allows users to specify a version for which the build should be compatible with, and BuildKit will attempt to maintain compatibility with that version when possible. Compatibility version will be stored in the provenance attestation of the build and can be used to independently verify the artifacts of the build on other BuildKit versions. The current compatibility version and backward compatibility with old versions are defined in \u003ca href=\"https://github.com/moby/buildkit/blob/v0.30.0-rc1/docs/build-repro.md#compatibility-version\"\u003eBuild reproducibility docs\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6681\"\u003e#6681\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGit sources now support \u003ccode\u003efetch-by-commit\u003c/code\u003e option where commit is fetched by the SHA and then associated with the reference. This is useful when checking out mutable references \u003ccode\u003erefs/NR/merge\u003c/code\u003e where the commit SHA may change during invocation and cause checksum mismatch error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6708\"\u003e#6708\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe LLB API now supports Git bundle format. Git bundles can be loaded from registry or OCI layout blobs and Git sources can be checked out into bundle format for snapshotting \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6711\"\u003e#6711\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eProvenance attestations for multi-pass or chained builds now include request details for root requests and individual input requests, allowing full reconstruction of such complex builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6739\"\u003e#6739\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe version of the built-in Dockerfile frontend that was used is now included in the provenance metadata and reported via worker info APIs. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6705\"\u003e#6705\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error reporting for registry errors on cache export \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports additional options \u003ccode\u003eretry_mode\u003c/code\u003e and \u003ccode\u003eretry_max_attempts\u003c/code\u003e to configure retry behavior of S3 client \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6657\"\u003e#6657\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports \u003ccode\u003edisable_accept_encoding\u003c/code\u003e option for GCS interoperability \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6642\"\u003e#6642\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce potential lock contention in gateway forwarder for improved performance on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6741\"\u003e#6741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eA new log level option has been added to the buildkitd TOML configuration; previous \u0026quot;debug\u0026quot; and \u0026quot;trace\u0026quot; options have been deprecated \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6732\"\u003e#6732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow gateway frontend requests to forward to the built-in Dockerfile frontend the same way as to external frontends \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6643\"\u003e#6643\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSession connection health checks have been improved to better detect loss of connectivity and avoid stuck builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6649\"\u003e#6649\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix issue with Git subdirectory value not being included in ConfigSource section of SLSA provenance for builds from Git sources \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6724\"\u003e#6724\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid potential deadlock if the credential helper in the client is misbehaving and never returns credentials \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6709\"\u003e#6709\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in provenance computation on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible provenance capture race in concurrent no-cache builds that could leave source pins empty and fail with an invalid checksum digest error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6764\"\u003e#6764\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in progress writer \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6679\"\u003e#6679\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix data race in S3 cache reader \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6675\"\u003e#6675\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible Git config lookup errors on Windows \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6639\"\u003e#6639\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix build cancellation not working properly when blocked on credential callback \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6641\"\u003e#6641\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Azure/azure-sdk-for-go/sdk/azcore\u003c/strong\u003e                                  v1.20.0 -\u0026gt; v1.21.0\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Microsoft/hcsshim\u003c/strong\u003e                                                  v0.14.0-rc.1 -\u0026gt; v0.14.1\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2\u003c/strong\u003e                                                  v1.41.4 -\u0026gt; v1.41.7\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/dd2170e156c9633da1b2d1a58a6188e3f7d36fa4\"\u003e\u003ccode\u003edd2170e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6770\"\u003e#6770\u003c/a\u003e from crazy-max/v0.30-picks-0.30.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e4b9769cf519c5c1d9bc59643adde2c977f9ae30\"\u003e\u003ccode\u003ee4b9769\u003c/code\u003e\u003c/a\u003e test: gate merge diff tests through worker capabilities\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/d5956a1cf26f4055deaff883dad537b6a25bcfa1\"\u003e\u003ccode\u003ed5956a1\u003c/code\u003e\u003c/a\u003e skip pin race test on workers without merge diff support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/505ab37cd6c6c6d2ac37e3a598eab4abdc315c2a\"\u003e\u003ccode\u003e505ab37\u003c/code\u003e\u003c/a\u003e solver: fix race in walkProvenance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f2e48d20dc7d744a4051d6b5591b851a29a6232f\"\u003e\u003ccode\u003ef2e48d2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e from jsternberg/add-error-details\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f7a40a08716a42f1066b99bb0cdc09cab42987b9\"\u003e\u003ccode\u003ef7a40a0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e from tonistiigi/fix-provenance-data-race\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/80e934d8b310736f71a6a33c696b8448bec6c12d\"\u003e\u003ccode\u003e80e934d\u003c/code\u003e\u003c/a\u003e remotecache: propagate details field from registry when included\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/a7c874909a0045c6e32c1c1314e7aba949bf85da\"\u003e\u003ccode\u003ea7c8749\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6761\"\u003e#6761\u003c/a\u003e from moby/dependabot/github_actions/github/codeql-ac...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df37b6751b796a1b22d4dfe0ffb0bc9962b2c38b\"\u003e\u003ccode\u003edf37b67\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.35.3 to 4.35.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c7ba94199885e89e25615d3e2d78fea86a2c7eb7\"\u003e\u003ccode\u003ec7ba941\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6759\"\u003e#6759\u003c/a\u003e from moby/dependabot/github_actions/docker/github-bu...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.29.0...v0.30.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/sys` from 0.43.0 to 0.44.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/sys/commit/fb1facd76f95fa87c151018200ea5e4892ff115d\"\u003e\u003ccode\u003efb1facd\u003c/code\u003e\u003c/a\u003e windows: avoid uint16 overflow in NewNTUnicodeString\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/sys/commit/94ad893e1e59c1d079221324d38945d2aad8703f\"\u003e\u003ccode\u003e94ad893\u003c/code\u003e\u003c/a\u003e windows: add GetIfTable2Ex, GetIpInterface{Entry,Table}, GetUnicastIpAddressT...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/sys/commit/54fe89f8411576c06b345b341ca79a77d878a4ad\"\u003e\u003ccode\u003e54fe89f\u003c/code\u003e\u003c/a\u003e cpu: use IsProcessorFeaturePresent to calculate ARM64 on windows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/sys/commit/df7d5d7b60641d17d87e2b50911124cb65f954fd\"\u003e\u003ccode\u003edf7d5d7\u003c/code\u003e\u003c/a\u003e unix: automatically remove container created by mkall.sh\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/sys/commit/68a4a8e945b22751c1a619261b1d755372a1d5f7\"\u003e\u003ccode\u003e68a4a8e\u003c/code\u003e\u003c/a\u003e unix: avoid nil pointer dereference in Utime\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/sys/commit/690c91f6ecf3b3ef141ad2aedb1306a868b3a176\"\u003e\u003ccode\u003e690c91f\u003c/code\u003e\u003c/a\u003e unix: add CPUSetDynamic for systems with more than 1024 CPUs\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/sys/compare/v0.43.0...v0.44.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/term` from 0.42.0 to 0.43.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/term/commit/3c3e4855f7d2eb06c3e48933554add9ec6b599b5\"\u003e\u003ccode\u003e3c3e485\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/term/compare/v0.42.0...v0.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260401024825-9d38bb4040a9 to 0.0.0-20260406210006-6f92a3bedf2d\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/googleapis/go-genproto/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.81.0 to 1.81.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.81.1\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003exds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per \u003ca href=\"https://github.com/grpc/proposal/blob/master/A41-xds-rbac.md\"\u003egRFC A41\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9111\"\u003e#9111\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/al4an444\"\u003e\u003ccode\u003e@​al4an444\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eotel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9081\"\u003e#9081\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/caf0772c2bcb8bc15d43eb53448e921f34f0b7e8\"\u003e\u003ccode\u003ecaf0772\u003c/code\u003e\u003c/a\u003e Change version from 1.81.1-dev to 1.81.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9122\"\u003e#9122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/6ccbeebf058ede71e43a5ac28fada2a736573215\"\u003e\u003ccode\u003e6ccbeeb\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9111\"\u003e#9111\u003c/a\u003e into v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9121\"\u003e#9121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/b33c29e41b438e371c8504de9bdf64a80098cc29\"\u003e\u003ccode\u003eb33c29e\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9081\"\u003e#9081\u003c/a\u003e into v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9102\"\u003e#9102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/c45fae6d06a5c192b7b96418a2bc26a96b856834\"\u003e\u003ccode\u003ec45fae6\u003c/code\u003e\u003c/a\u003e Change version to 1.81.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9063\"\u003e#9063\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.81.0...v1.81.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `modernc.org/sqlite` from 1.50.0 to 1.50.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md\"\u003emodernc.org/sqlite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e2026-05-10 v1.50.1:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to \u003ca href=\"https://sqlite.org/releaselog/3_53_1.html\"\u003eSQLite 3.53.1\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-04-24 v1.50.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to sqlite-vec \u003ca href=\"https://github.com/asg017/sqlite-vec/releases/tag/v0.1.9\"\u003ev0.1.9\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eIntroduce \u003ccode\u003eColumnInfo\u003c/code\u003e, enabling dynamic query builders and ORMs to retrieve underlying SQLite C-API metadata (\u003ccode\u003eOriginName\u003c/code\u003e, \u003ccode\u003eTableName\u003c/code\u003e, \u003ccode\u003eDatabaseName\u003c/code\u003e, and \u003ccode\u003eDeclType\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003eThis feature is exposed via the idiomatic \u003ccode\u003edatabase/sql\u003c/code\u003e escape hatch \u003ccode\u003e(*sql.Conn).Raw()\u003c/code\u003e, avoiding custom statement handles and keeping the standard library workflow intact.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/113\"\u003e#113\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/113\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/113\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-04-17 v1.49.0: Upgrade to \u003ca href=\"https://sqlite.org/releaselog/3_53_0.html\"\u003eSQLite 3.53.0\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e-DSQLITE_ENABLE_DBPAGE_VTAB\u003c/code\u003e to the transpilation. See \u003ca href=\"https://www.sqlite.org/dbpage.html\"\u003e\u0026quot;The SQLITE_DBPAGE Virtual Table\u0026quot;\u003c/a\u003e for details.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-04-06 v1.48.2:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFix ABI mapping mismatch in the pre-update hook trampoline that caused silent truncation of large 64-bit RowIDs.\u003c/li\u003e\n\u003cli\u003eEnsure the Go trampoline signature correctly aligns with the public \u003ccode\u003esqlite3_preupdate_hook\u003c/code\u003e C API, preventing data corruption for high-entropy keys (e.g., Snowflake IDs).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/98\"\u003e#98\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/98\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/98\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix the memory allocator used in \u003ccode\u003e(*conn).Deserialize\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eReplace \u003ccode\u003etls.Alloc\u003c/code\u003e with \u003ccode\u003esqlite3_malloc64\u003c/code\u003e to prevent internal allocator corruption. This ensures the buffer is safely owned by SQLite, which may resize or free it due to the \u003ccode\u003eSQLITE_DESERIALIZE_RESIZEABLE\u003c/code\u003e and \u003ccode\u003eSQLITE_DESERIALIZE_FREEONCLOSE\u003c/code\u003e flags.\u003c/li\u003e\n\u003cli\u003ePrevent a memory leak by properly freeing the allocated buffer if fetching the main database name fails before handing ownership to SQLite.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/100\"\u003e#100\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/100\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/100\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003e(*conn).Deserialize\u003c/code\u003e to explicitly reject \u003ccode\u003enil\u003c/code\u003e or empty byte slices.\u003c/li\u003e\n\u003cli\u003ePrevent silent database disconnection and connection pool corruption caused by SQLite's default behavior when \u003ccode\u003esqlite3_deserialize\u003c/code\u003e receives a 0-length buffer.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/101\"\u003e#101\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/101\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/101\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003ecommitHookTrampoline\u003c/code\u003e and \u003ccode\u003erollbackHookTrampoline\u003c/code\u003e signatures by removing the unused \u003ccode\u003epCsr\u003c/code\u003e parameter.\u003c/li\u003e\n\u003cli\u003eAligns internal hook callbacks accurately with the underlying SQLite C API, cleaning up the code to prevent potential future confusion or bugs.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/102\"\u003e#102\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/102\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/102\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003echeckptr\u003c/code\u003e instrumentation failures during \u003ccode\u003ego test -race\u003c/code\u003e when registering and using virtual tables (\u003ccode\u003evtab\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003eAllocate \u003ccode\u003esqlite3_module\u003c/code\u003e instances using the C allocator (\u003ccode\u003elibc.Xcalloc\u003c/code\u003e) instead of the Go heap. This ensures transpiled C code can safely perform pointer operations on the struct without tripping Go's pointer checks.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/103\"\u003e#103\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/103\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/103\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix data race on \u003ccode\u003emutex.id\u003c/code\u003e in the \u003ccode\u003emutexTry\u003c/code\u003e non-recursive path.\u003c/li\u003e\n\u003cli\u003eEnsure consistent atomic writes (\u003ccode\u003eatomic.StoreInt32\u003c/code\u003e) to prevent data races with atomic loads in \u003ccode\u003emutexHeld\u003c/code\u003e and \u003ccode\u003emutexNotheld\u003c/code\u003e during concurrent execution.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/104\"\u003e#104\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/104\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/104\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix resource leak in \u003ccode\u003e(*Backup).Commit\u003c/code\u003e where the destination connection was not closed on error.\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003edstConn\u003c/code\u003e is properly closed when \u003ccode\u003esqlite3_backup_finish\u003c/code\u003e fails, preventing file descriptor, TLS, and memory leaks.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/105\"\u003e#105\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/105\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/105\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eExec\u003c/code\u003e to fully drain rows when encountering \u003ccode\u003eSQLITE_ROW\u003c/code\u003e, preventing silent data loss in DML statements.\u003c/li\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eExec\u003c/code\u003e aborted after the first row, meaning \u003ccode\u003eINSERT\u003c/code\u003e, \u003ccode\u003eUPDATE\u003c/code\u003e, or \u003ccode\u003eDELETE\u003c/code\u003e statements with a \u003ccode\u003eRETURNING\u003c/code\u003e clause would fail to process subsequent rows. The execution path now correctly loops until \u003ccode\u003eSQLITE_DONE\u003c/code\u003e and properly respects context cancellations during the drain loop, fully aligning with native C \u003ccode\u003esqlite3_exec\u003c/code\u003e semantics.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/106\"\u003e#106\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/106\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/106\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;Shadowed err value (stmt.go)\u0026quot;.\u003c/li\u003e\n\u003cli\u003eSee [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/249\"\u003e#249\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/work_items/249\"\u003ehttps://gitlab.com/cznic/sqlite/-/work_items/249\u003c/a\u003e), thanks Emrecan BATI!\u003c/li\u003e\n\u003cli\u003eFix silent omission of virtual table savepoint callbacks by correctly setting the sqlite3_module version.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/107\"\u003e#107\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/107\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/107\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003evfsRead\u003c/code\u003e to properly handle partial and fragmented reads from \u003ccode\u003eio.Reader\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eReplace \u003ccode\u003ef.Read\u003c/code\u003e with \u003ccode\u003eio.ReadFull\u003c/code\u003e to ensure the buffer is fully populated, preventing premature \u003ccode\u003eSQLITE_IOERR_SHORT_READ\u003c/code\u003e errors on valid mid-stream partial reads. Unread tail bytes at EOF are now efficiently zero-filled using the built-in \u003ccode\u003eclear\u003c/code\u003e function.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/108\"\u003e#108\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/108\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/108\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eRefactor internal error formatting to safely handle uninitialized or closed database pointers.\u003c/li\u003e\n\u003cli\u003ePrevent a misleading \u0026quot;out of memory\u0026quot; error message when an operation fails and the underlying SQLite database handle is \u003ccode\u003eNULL\u003c/code\u003e (\u003ccode\u003edb == 0\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/109\"\u003e#109\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/109\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/109\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/b95ed459e063439b1b7f58db051f168832bb14b6\"\u003e\u003ccode\u003eb95ed45\u003c/code\u003e\u003c/a\u003e upgrade to SQLite 3.53.1\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://gitlab.com/cznic/sqlite/compare/v1.50.0...v1.50.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/schmitthub/clawker/pull/288","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/schmitthub%2Fclawker/issues/288","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/288/packages"},{"uuid":"4454884613","node_id":"PR_kwDOBGvVPc7b9qY7","number":60244,"state":"open","title":"Bump the all-dependencies group across 1 directory with 4 updates","user":"dependabot[bot]","labels":["size/L","needs-ok-to-test","release-notes-none"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-15T15:02:16.000Z","updated_at":"2026-05-17T02:50:32.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"all-dependencies","update_count":4,"packages":[{"name":"github.com/docker/cli","old_version":"29.4.3+incompatible","new_version":"29.5.0+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/moby/buildkit","old_version":"0.29.0","new_version":"0.30.0","repository_url":"https://github.com/moby/buildkit"},{"name":"google.golang.org/grpc","old_version":"1.81.0","new_version":"1.81.1","repository_url":"https://github.com/grpc/grpc-go"},{"name":"helm.sh/helm/v4","old_version":"4.1.4","new_version":"4.2.0","repository_url":"https://github.com/helm/helm"}],"path":null,"ecosystem":"go"},"body":"Bumps the all-dependencies group with 4 updates in the / directory: [github.com/docker/cli](https://github.com/docker/cli), [github.com/moby/buildkit](https://github.com/moby/buildkit), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [helm.sh/helm/v4](https://github.com/helm/helm).\n\nUpdates `github.com/docker/cli` from 29.4.3+incompatible to 29.5.0+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/98f14649600f05480629d5c481878b1e1bcb7c17\"\u003e\u003ccode\u003e98f1464\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6988\"\u003e#6988\u003c/a\u003e from thaJeztah/make_shell\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/50712c932660e7859d692b5aed45ad321beced1a\"\u003e\u003ccode\u003e50712c9\u003c/code\u003e\u003c/a\u003e README: simplify instructions for using dev container\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/653dc8f03d161677a8648758cdf0af8b150780bc\"\u003e\u003ccode\u003e653dc8f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6485\"\u003e#6485\u003c/a\u003e from paulchen5/6484-update-pull-request-template\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/13945822d4ba2119b867ee2cf215506c8b9f9817\"\u003e\u003ccode\u003e1394582\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6987\"\u003e#6987\u003c/a\u003e from thaJeztah/contributing_links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/f99747b9e0bee5623a13655439e7a34b696e8617\"\u003e\u003ccode\u003ef99747b\u003c/code\u003e\u003c/a\u003e docs: fix stale links in CONTRIBUTING.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/ddac061db783a24d75b24cabc74793f6924d4724\"\u003e\u003ccode\u003eddac061\u003c/code\u003e\u003c/a\u003e PR template: remove outdated contributing guide link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/bd55370d2fe13ccc6237a463e5ff66931cf56f8a\"\u003e\u003ccode\u003ebd55370\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6984\"\u003e#6984\u003c/a\u003e from thaJeztah/cleanup_experimental\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/f907b27599d8dd5b02dd23f1decd18c8770ad511\"\u003e\u003ccode\u003ef907b27\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6985\"\u003e#6985\u003c/a\u003e from thaJeztah/rm_builder_stub\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/5201f5894e8aefbb09a67ba34895e59841e41b82\"\u003e\u003ccode\u003e5201f58\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6971\"\u003e#6971\u003c/a\u003e from matte1782/docs-authz-64kib-buffer-2026-05\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/5d4877414898fbceb81fef0533b939408b01dffa\"\u003e\u003ccode\u003e5d48774\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6986\"\u003e#6986\u003c/a\u003e from thaJeztah/cleanup_docs_readme\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v29.4.3...v29.5.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/moby/buildkit` from 0.29.0 to 0.30.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.30.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.30.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eNatnael Gebremariam\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eDawei Wei\u003c/li\u003e\n\u003cli\u003eDmitrii Kostyrev\u003c/li\u003e\n\u003cli\u003eJiří Moravčík\u003c/li\u003e\n\u003cli\u003eVladimir Kuznichenkov\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuiltin Dockerfile frontend has been updated to v1.24.0 \u003ca href=\"https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.24.0\"\u003echangelog\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuildKit now supports the concept of \u0026quot;compatibility version\u0026quot; for improved reproducible builds support across different BuildKit versions. This allows users to specify a version for which the build should be compatible with, and BuildKit will attempt to maintain compatibility with that version when possible. Compatibility version will be stored in the provenance attestation of the build and can be used to independently verify the artifacts of the build on other BuildKit versions. The current compatibility version and backward compatibility with old versions are defined in \u003ca href=\"https://github.com/moby/buildkit/blob/v0.30.0-rc1/docs/build-repro.md#compatibility-version\"\u003eBuild reproducibility docs\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6681\"\u003e#6681\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGit sources now support \u003ccode\u003efetch-by-commit\u003c/code\u003e option where commit is fetched by the SHA and then associated with the reference. This is useful when checking out mutable references \u003ccode\u003erefs/NR/merge\u003c/code\u003e where the commit SHA may change during invocation and cause checksum mismatch error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6708\"\u003e#6708\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe LLB API now supports Git bundle format. Git bundles can be loaded from registry or OCI layout blobs and Git sources can be checked out into bundle format for snapshotting \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6711\"\u003e#6711\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eProvenance attestations for multi-pass or chained builds now include request details for root requests and individual input requests, allowing full reconstruction of such complex builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6739\"\u003e#6739\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe version of the built-in Dockerfile frontend that was used is now included in the provenance metadata and reported via worker info APIs. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6705\"\u003e#6705\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error reporting for registry errors on cache export \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports additional options \u003ccode\u003eretry_mode\u003c/code\u003e and \u003ccode\u003eretry_max_attempts\u003c/code\u003e to configure retry behavior of S3 client \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6657\"\u003e#6657\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports \u003ccode\u003edisable_accept_encoding\u003c/code\u003e option for GCS interoperability \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6642\"\u003e#6642\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce potential lock contention in gateway forwarder for improved performance on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6741\"\u003e#6741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eA new log level option has been added to the buildkitd TOML configuration; previous \u0026quot;debug\u0026quot; and \u0026quot;trace\u0026quot; options have been deprecated \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6732\"\u003e#6732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow gateway frontend requests to forward to the built-in Dockerfile frontend the same way as to external frontends \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6643\"\u003e#6643\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSession connection health checks have been improved to better detect loss of connectivity and avoid stuck builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6649\"\u003e#6649\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix issue with Git subdirectory value not being included in ConfigSource section of SLSA provenance for builds from Git sources \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6724\"\u003e#6724\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid potential deadlock if the credential helper in the client is misbehaving and never returns credentials \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6709\"\u003e#6709\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in provenance computation on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible provenance capture race in concurrent no-cache builds that could leave source pins empty and fail with an invalid checksum digest error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6764\"\u003e#6764\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in progress writer \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6679\"\u003e#6679\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix data race in S3 cache reader \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6675\"\u003e#6675\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible Git config lookup errors on Windows \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6639\"\u003e#6639\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix build cancellation not working properly when blocked on credential callback \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6641\"\u003e#6641\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Azure/azure-sdk-for-go/sdk/azcore\u003c/strong\u003e                                  v1.20.0 -\u0026gt; v1.21.0\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Microsoft/hcsshim\u003c/strong\u003e                                                  v0.14.0-rc.1 -\u0026gt; v0.14.1\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2\u003c/strong\u003e                                                  v1.41.4 -\u0026gt; v1.41.7\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/dd2170e156c9633da1b2d1a58a6188e3f7d36fa4\"\u003e\u003ccode\u003edd2170e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6770\"\u003e#6770\u003c/a\u003e from crazy-max/v0.30-picks-0.30.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e4b9769cf519c5c1d9bc59643adde2c977f9ae30\"\u003e\u003ccode\u003ee4b9769\u003c/code\u003e\u003c/a\u003e test: gate merge diff tests through worker capabilities\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/d5956a1cf26f4055deaff883dad537b6a25bcfa1\"\u003e\u003ccode\u003ed5956a1\u003c/code\u003e\u003c/a\u003e skip pin race test on workers without merge diff support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/505ab37cd6c6c6d2ac37e3a598eab4abdc315c2a\"\u003e\u003ccode\u003e505ab37\u003c/code\u003e\u003c/a\u003e solver: fix race in walkProvenance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f2e48d20dc7d744a4051d6b5591b851a29a6232f\"\u003e\u003ccode\u003ef2e48d2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e from jsternberg/add-error-details\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f7a40a08716a42f1066b99bb0cdc09cab42987b9\"\u003e\u003ccode\u003ef7a40a0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e from tonistiigi/fix-provenance-data-race\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/80e934d8b310736f71a6a33c696b8448bec6c12d\"\u003e\u003ccode\u003e80e934d\u003c/code\u003e\u003c/a\u003e remotecache: propagate details field from registry when included\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/a7c874909a0045c6e32c1c1314e7aba949bf85da\"\u003e\u003ccode\u003ea7c8749\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6761\"\u003e#6761\u003c/a\u003e from moby/dependabot/github_actions/github/codeql-ac...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df37b6751b796a1b22d4dfe0ffb0bc9962b2c38b\"\u003e\u003ccode\u003edf37b67\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.35.3 to 4.35.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c7ba94199885e89e25615d3e2d78fea86a2c7eb7\"\u003e\u003ccode\u003ec7ba941\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6759\"\u003e#6759\u003c/a\u003e from moby/dependabot/github_actions/docker/github-bu...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.29.0...v0.30.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.81.0 to 1.81.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.81.1\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003exds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per \u003ca href=\"https://github.com/grpc/proposal/blob/master/A41-xds-rbac.md\"\u003egRFC A41\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9111\"\u003e#9111\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/al4an444\"\u003e\u003ccode\u003e@​al4an444\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eotel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9081\"\u003e#9081\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/caf0772c2bcb8bc15d43eb53448e921f34f0b7e8\"\u003e\u003ccode\u003ecaf0772\u003c/code\u003e\u003c/a\u003e Change version from 1.81.1-dev to 1.81.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9122\"\u003e#9122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/6ccbeebf058ede71e43a5ac28fada2a736573215\"\u003e\u003ccode\u003e6ccbeeb\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9111\"\u003e#9111\u003c/a\u003e into v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9121\"\u003e#9121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/b33c29e41b438e371c8504de9bdf64a80098cc29\"\u003e\u003ccode\u003eb33c29e\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9081\"\u003e#9081\u003c/a\u003e into v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9102\"\u003e#9102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/c45fae6d06a5c192b7b96418a2bc26a96b856834\"\u003e\u003ccode\u003ec45fae6\u003c/code\u003e\u003c/a\u003e Change version to 1.81.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9063\"\u003e#9063\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.81.0...v1.81.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `helm.sh/helm/v4` from 4.1.4 to 4.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/helm/helm/releases\"\u003ehelm.sh/helm/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eHelm v4.2.0 is a feature release. Users are encouraged to upgrade for the best experience.\u003c/p\u003e\n\u003cp\u003eThe community keeps growing, and we'd love to see you there!\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJoin the discussion in \u003ca href=\"https://kubernetes.slack.com\"\u003eKubernetes Slack\u003c/a\u003e:\n\u003cul\u003e\n\u003cli\u003efor questions and just to hang out\u003c/li\u003e\n\u003cli\u003efor discussing PRs, code, and bugs\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eHang out at the Public Developer Call: Thursday, 9:30 Pacific via \u003ca href=\"https://zoom.us/j/696660622\"\u003eZoom\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTest, debug, and contribute charts: \u003ca href=\"https://artifacthub.io/packages/search?kind=0\"\u003eArtifactHub/packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNotable Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSwitch to \u003ccode\u003egoreleaser\u003c/code\u003e for release builds\u003c/li\u003e\n\u003cli\u003eKubernetes client libraries to v1.36\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003emustToToml\u003c/code\u003e template function\u003c/li\u003e\n\u003cli\u003edeprecate unused \u003ccode\u003e--hide-notes\u003c/code\u003e and \u003ccode\u003e--render-subchart-notes\u003c/code\u003e flags\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e--dry-run=server\u003c/code\u003e now respects \u003ccode\u003egenerateName:\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eInstallation and Upgrading\u003c/h2\u003e\n\u003cp\u003eDownload Helm v4.2.0. The common platform binaries are here:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-darwin-amd64.tar.gz\"\u003eMacOS amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-darwin-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 1376ea697140e4db316736e760d5a47d12afc1524dce704476ef06fd7fdeddc6)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-darwin-arm64.tar.gz\"\u003eMacOS arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-darwin-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / f13f959015447b6bc309f9fd506509926543988a39035c088b52522ec95e2acb)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-amd64.tar.gz\"\u003eLinux amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 97dbeb971be4ac4b27e3839976d9564c0fb35c6f3b1da89dd1e292d236af4096)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-arm.tar.gz\"\u003eLinux arm\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-arm.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / ae624870b2d50e655b6462daff117eb9d28c4bad45234ef24c1275113540fcb0)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-arm64.tar.gz\"\u003eLinux arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 1f8de130dfbd04de64978e7b852a7a547be1404956a366608276d2520b678670)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-386.tar.gz\"\u003eLinux i386\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-386.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 9cf44acc59081aca98b4d9f09138348836b26761258e02ad2b99616f66eead5c)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-loong64.tar.gz\"\u003eLinux loong64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-loong64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 5b04f0167b8b415a057c1f4f809ede86d5ead840e0aa560db097da5be19f86d0)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-ppc64le.tar.gz\"\u003eLinux ppc64le\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-ppc64le.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 48f0637b93247717b725e8d4a8d2cf8df0e2fdea91bdd0e36e2426c2d5c76e4e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-s390x.tar.gz\"\u003eLinux s390x\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-s390x.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 328e9ed27904f9910026240c4311bb1b0bf91c6fde1634f212097694507a702f)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-riscv64.tar.gz\"\u003eLinux riscv64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-riscv64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 5d292d57ab1f40e47e373a87187bafa66e8daac4ddc4a1333421c174e8184755)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-windows-amd64.zip\"\u003eWindows amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-windows-amd64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / 614f68ddc567ac9bfb0c205f869b1f83ba4e0a9aacd26cbae47743ae6082a579)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-windows-arm64.zip\"\u003eWindows arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-windows-arm64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / e740e4c19b6e2a0b428f7a52c38b7f0b092f0c43ac49870537d7e7fac9cedc07)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThis release was signed by \u003ca href=\"https://github.com/gjenkins8\"\u003e\u003ccode\u003e@​gjenkins8\u003c/code\u003e\u003c/a\u003e with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at \u003ca href=\"https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739\"\u003ehttps://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739\u003c/a\u003e. Please use the attached signatures for verifying this release using gpg.\u003c/p\u003e\n\u003cp\u003eThe \u003ca href=\"https://helm.sh/docs/intro/quickstart/\"\u003eQuickstart Guide\u003c/a\u003e will get you going from there. For \u003cstrong\u003eupgrade instructions\u003c/strong\u003e or detailed installation notes, check the \u003ca href=\"https://helm.sh/docs/intro/install/\"\u003einstall guide\u003c/a\u003e. You can also use a \u003ca href=\"https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-4\"\u003escript to install\u003c/a\u003e on any system with \u003ccode\u003ebash\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eWhat's Next\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e4.2.1 will contain only bug fixes\u003c/li\u003e\n\u003cli\u003e4.3.0 is the next feature release\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump to version v4.2 06468084e85c244c712834933d25ea232a4c2093 (George Jenkins)\u003c/li\u003e\n\u003cli\u003ebuild: Clean up Goreleaser change (\u003ca href=\"https://redirect.github.com/helm/helm/issues/32098\"\u003e#32098\u003c/a\u003e) e23bf3af53c52185123278e83b7023c102707778 (Scott Rigby)\u003c/li\u003e\n\u003cli\u003efix: add -extldflags -static to dist target to match build-cross f60ab7c31c81a73b8e0aade5aff41bfc01c08820 (Terry Howe)\u003c/li\u003e\n\u003cli\u003ebuild: use goreleaser build with manual archive creation 64aa46f2f1cf239cf6535c5e847e14dcb933a847 (Terry Howe)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/06468084e85c244c712834933d25ea232a4c2093\"\u003e\u003ccode\u003e0646808\u003c/code\u003e\u003c/a\u003e Bump to version v4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/e23bf3af53c52185123278e83b7023c102707778\"\u003e\u003ccode\u003ee23bf3a\u003c/code\u003e\u003c/a\u003e build: Clean up Goreleaser change (\u003ca href=\"https://redirect.github.com/helm/helm/issues/32098\"\u003e#32098\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/ad18580255c5f0937f5ec85adfd970b142b0308d\"\u003e\u003ccode\u003ead18580\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/helm/helm/issues/31343\"\u003e#31343\u003c/a\u003e from TerryHowe/chore-replace-mitchellh-gox-with-gor...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/b3a458fde91b4a225535c5b6d8c64b2efdd0d4a6\"\u003e\u003ccode\u003eb3a458f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/helm/helm/issues/31970\"\u003e#31970\u003c/a\u003e from isumitsolanki/fix/31965-decouple-cli-from-kube\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/f60ab7c31c81a73b8e0aade5aff41bfc01c08820\"\u003e\u003ccode\u003ef60ab7c\u003c/code\u003e\u003c/a\u003e fix: add -extldflags -static to dist target to match build-cross\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/64aa46f2f1cf239cf6535c5e847e14dcb933a847\"\u003e\u003ccode\u003e64aa46f\u003c/code\u003e\u003c/a\u003e build: use goreleaser build with manual archive creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/d199a1a42c04bccb287f2c7d9c3f73b669412e5a\"\u003e\u003ccode\u003ed199a1a\u003c/code\u003e\u003c/a\u003e chore: remove build-cross dependency from test-acceptance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/82899404a68f3826389bb38cf67bf75085db6b2c\"\u003e\u003ccode\u003e8289940\u003c/code\u003e\u003c/a\u003e ci: add fetch-depth 0 to canary checkout for goreleaser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/c075022ce16489f5f7afd45a37b679cf58fa36ea\"\u003e\u003ccode\u003ec075022\u003c/code\u003e\u003c/a\u003e fix: address goreleaser build issues flagged in review\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/04885dd905b6f8a823733dbc9b9f5cb2843a975f\"\u003e\u003ccode\u003e04885dd\u003c/code\u003e\u003c/a\u003e fix: pass VERSION as GORELEASER_CURRENT_TAG to preserve v-prefix in archive n...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/helm/helm/compare/v4.1.4...v4.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/istio/istio/pull/60244","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/istio%2Fistio/issues/60244","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/60244/packages"},{"uuid":"4442813850","node_id":"PR_kwDOQv_oCs7bXMdk","number":28,"state":"open","title":"Bump the go_modules group across 1 directory with 7 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-14T03:12:40.000Z","updated_at":"2026-05-14T03:13:21.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":7,"packages":[{"name":"github.com/docker/cli","old_version":"28.3.0+incompatible","new_version":"29.2.0+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/moby/buildkit","old_version":"0.22.0","new_version":"0.28.1","repository_url":"https://github.com/moby/buildkit"},{"name":"google.golang.org/grpc","old_version":"1.71.0","new_version":"1.78.0"},{"name":"github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream","old_version":"1.6.10","new_version":"1.7.10"},{"name":"github.com/in-toto/in-toto-golang","old_version":"0.5.0","new_version":"0.10.0"},{"name":"go.opentelemetry.io/otel","old_version":"1.40.0","new_version":"1.41.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"go.opentelemetry.io/otel/sdk","old_version":"1.40.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 4 updates in the / directory: [github.com/docker/cli](https://github.com/docker/cli), [github.com/moby/buildkit](https://github.com/moby/buildkit), [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) and [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go).\n\nUpdates `github.com/docker/cli` from 28.3.0+incompatible to 29.2.0+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/0b9d1985dbf919678745f122b12b46f730b97d87\"\u003e\u003ccode\u003e0b9d198\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6764\"\u003e#6764\u003c/a\u003e from vvoland/update-docker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9c9ec7358833bb3e5622a166673744fca7fefac4\"\u003e\u003ccode\u003e9c9ec73\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/client v0.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/bab3e81e1d8874a2d4f26afc02225ee537d0b15d\"\u003e\u003ccode\u003ebab3e81\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/api v1.53.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2e64fc162ab632a530f7191cc6af65c22356ea0d\"\u003e\u003ccode\u003e2e64fc1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6367\"\u003e#6367\u003c/a\u003e from thaJeztah/template_slicejoin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1f2ba2ac9d8c92870f7cce89dfa17d89d3375c19\"\u003e\u003ccode\u003e1f2ba2a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6760\"\u003e#6760\u003c/a\u003e from thaJeztah/container_create_fix_error\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/e34a3422cc32c808d2e8b0e0ef51112d53fa896d\"\u003e\u003ccode\u003ee34a342\u003c/code\u003e\u003c/a\u003e templates: make \u0026quot;join\u0026quot; work with non-string slices and map values\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/a86356d42f918968579e670b51bc85dc45982a33\"\u003e\u003ccode\u003ea86356d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6763\"\u003e#6763\u003c/a\u003e from thaJeztah/bump_mapstructure\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/771660a17e56116eb32677a6d83c5210e5092194\"\u003e\u003ccode\u003e771660a\u003c/code\u003e\u003c/a\u003e vendor: github.com/go-viper/mapstructure/v2 v2.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9cff36b35a828be8d137bc5de4983b7e3fef1614\"\u003e\u003ccode\u003e9cff36b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6762\"\u003e#6762\u003c/a\u003e from thaJeztah/bump_x_deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/08ed2bc6e8bc49ad988ecd44633620a48fb10967\"\u003e\u003ccode\u003e08ed2bc\u003c/code\u003e\u003c/a\u003e cli/command/container: make injecting config.json failures a warning\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v28.3.0...v29.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/moby/buildkit` from 0.22.0 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.28.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix insufficient validation of Git URL \u003ccode\u003e#ref:subdir\u003c/code\u003e fragments that could allow access to restricted files outside the checked-out repository root. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg\"\u003eGHSA-4vrq-3vrq-g6gg\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a vulnerability where an untrusted custom frontend could cause files to be written outside the BuildKit state directory. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj\"\u003eGHSA-4c29-8rgm-jvjj\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a panic when processing invalid \u003ccode\u003e.dockerignore\u003c/code\u003e patterns during \u003ccode\u003eCOPY\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/patternmatcher/issues/9\"\u003emoby/patternmatcher#9\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/moby/patternmatcher\u003c/strong\u003e  v0.6.0 -\u0026gt; v0.6.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.28.0\"\u003ev0.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.28.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.28.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.28.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eAmr Mahdi\u003c/li\u003e\n\u003cli\u003eDan Duvall\u003c/li\u003e\n\u003cli\u003eDavid Karlsson\u003c/li\u003e\n\u003cli\u003eJonas Geiler\u003c/li\u003e\n\u003cli\u003eKevin L.\u003c/li\u003e\n\u003cli\u003ersteube\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8\"\u003e\u003ccode\u003e45b038c\u003c/code\u003e\u003c/a\u003e git: normalize and validate subdir paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f5462c216098af766f97ea4cb328e65c6d8f7256\"\u003e\u003ccode\u003ef5462c2\u003c/code\u003e\u003c/a\u003e git: harden ref arg handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/71577a5da7a2b3ab75a90c2cfedfda0c27d1ef40\"\u003e\u003ccode\u003e71577a5\u003c/code\u003e\u003c/a\u003e source: extract SafeFileName into shared pathutil package\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df4378316f3b000403d097551a8139a700bd823d\"\u003e\u003ccode\u003edf43783\u003c/code\u003e\u003c/a\u003e source/http: use os.Root for saved file operations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/9ce6f62aca0653657047ee613cdef22f38b31244\"\u003e\u003ccode\u003e9ce6f62\u003c/code\u003e\u003c/a\u003e source/http: sanitize downloaded filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4\"\u003e\u003ccode\u003e099cf80\u003c/code\u003e\u003c/a\u003e executor: validate container IDs centrally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/2642113bbc9d969d223c37aaabca4b50613fddf9\"\u003e\u003ccode\u003e2642113\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e from thaJeztah/0.28_backport_bump_patternmatcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/802da78332d9f2c6c9d856c1648ab52c701076fa\"\u003e\u003ccode\u003e802da78\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/patternmatcher v0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/5245d869d85d9c98f986b600584c332a3b001986\"\u003e\u003ccode\u003e5245d86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6551\"\u003e#6551\u003c/a\u003e from tonistiigi/v0.28-cherry-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/90ee5deef6c6efcb82358eb48d76235191196db1\"\u003e\u003ccode\u003e90ee5de\u003c/code\u003e\u003c/a\u003e vendor: update x/net to v0.51.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.22.0...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.71.0 to 1.78.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.78.0\u003c/h2\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eclient: Align URL validation with Go 1.26+ to now reject target URLs with unbracketed colons in the hostname. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8716\"\u003e#8716\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/neild\"\u003e\u003ccode\u003e@​neild\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport/client : Return status code \u003ccode\u003eUnknown\u003c/code\u003e on malformed grpc-status. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8735\"\u003e#8735\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\n\u003cul\u003e\n\u003cli\u003exds/resolver:\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eDrop previous route resources and report an error when no matching virtual host is found.\u003c/li\u003e\n\u003cli\u003eOnly log LDS/RDS configuration errors following a successful update and retain the last valid resource to prevent transient failures. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8711\"\u003e#8711\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats/otel: Add backend service label to weighted round robin metrics as part of A89. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8737\"\u003e#8737\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003estats/otel: Add subchannel metrics (without the disconnection reason) to eventually replace the pickfirst metrics. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8738\"\u003e#8738\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclient: Wait for all pending goroutines to complete when closing a graceful switch balancer. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8746\"\u003e#8746\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/twz123\"\u003e\u003ccode\u003e@​twz123\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eclient: Add \u003ccode\u003eexperimental.AcceptCompressors\u003c/code\u003e so callers can restrict the \u003ccode\u003egrpc-accept-encoding\u003c/code\u003e header advertised for a call. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8718\"\u003e#8718\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/iblancasa\"\u003e\u003ccode\u003e@​iblancasa\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003exds: Fix a bug in \u003ccode\u003eStringMatcher\u003c/code\u003e where regexes would match incorrectly when ignore_case is set to true. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8723\"\u003e#8723\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclient:\n\u003cul\u003e\n\u003cli\u003eChange connectivity state to CONNECTING when creating the name resolver (as part of exiting IDLE).\u003c/li\u003e\n\u003cli\u003eChange connectivity state to TRANSIENT_FAILURE if name resolver creation fails (as part of exiting IDLE).\u003c/li\u003e\n\u003cli\u003eChange connectivity state to IDLE after idle timeout expires even when current state is TRANSIENT_FAILURE.\u003c/li\u003e\n\u003cli\u003eFix a bug that resulted in \u003ccode\u003eOnFinish\u003c/code\u003e call option not being invoked for RPCs where stream creation failed. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8710\"\u003e#8710\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exdsclient: Fix a race in the xdsClient that could lead to resource-not-found errors. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8627\"\u003e#8627\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Round up to nearest 4KiB for pool allocations larger than 1MiB. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8705\"\u003e#8705\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/cjc25\"\u003e\u003ccode\u003e@​cjc25\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.77.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Replace the \u003ccode\u003eReader\u003c/code\u003e interface with a struct for better performance and maintainability. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8669\"\u003e#8669\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/pickfirst: Remove support for the old \u003ccode\u003epick_first\u003c/code\u003e LB policy via the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false\u003c/code\u003e. The new \u003ccode\u003epick_first\u003c/code\u003e has been the default since \u003ccode\u003ev1.71.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8672\"\u003e#8672\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003exdsclient: Fix a race condition in the ADS stream implementation that could result in \u003ccode\u003eresource-not-found\u003c/code\u003e errors, causing the gRPC client channel to move to \u003ccode\u003eTransientFailure\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8605\"\u003e#8605\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclient: Ignore HTTP status header for gRPC streams. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8548\"\u003e#8548\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclient: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8534\"\u003e#8534\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/9df039ef2c921978514b600c9d5c6bf25cce54f6\"\u003e\u003ccode\u003e9df039e\u003c/code\u003e\u003c/a\u003e Change version to 1.78.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8761\"\u003e#8761\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/9b990b6355c443ecf9e71f118f7097b62bc3299a\"\u003e\u003ccode\u003e9b990b6\u003c/code\u003e\u003c/a\u003e gracefulswitch: Wait for all goroutines on close (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8746\"\u003e#8746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/6677d9a9cf1dd8227673253015027de0addeeafb\"\u003e\u003ccode\u003e6677d9a\u003c/code\u003e\u003c/a\u003e xds: Fixing a typo (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8760\"\u003e#8760\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/d35cedde1ee806f3c578aba8c59bec7117ae0bc3\"\u003e\u003ccode\u003ed35cedd\u003c/code\u003e\u003c/a\u003e xds/resolver: pass route's auto_host_rewrite to LB picker (gRFC A81) (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8740\"\u003e#8740\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/d931fdc379623f36d2050487887f5465a18b7912\"\u003e\u003ccode\u003ed931fdc\u003c/code\u003e\u003c/a\u003e client: allow overriding grpc-accept-encoding header (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8718\"\u003e#8718\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/0800ec75223cd0995d599002581eafe2151c6df3\"\u003e\u003ccode\u003e0800ec7\u003c/code\u003e\u003c/a\u003e xds/clusterimpl: update TestChildPolicyChangeOnConfigUpdate to use custom lb ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/6553ea1a1d99ff4e3a516499330bf47607e7708f\"\u003e\u003ccode\u003e6553ea1\u003c/code\u003e\u003c/a\u003e stats/otel: Add subchannel metrics (A94) (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8738\"\u003e#8738\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/81a00cecc0abe8a7d7140967f96d9cc0729a3aa4\"\u003e\u003ccode\u003e81a00ce\u003c/code\u003e\u003c/a\u003e grpc: Fixing spelling typo (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8756\"\u003e#8756\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/e413838c3b7b8b3e94754cb3704751e49f917358\"\u003e\u003ccode\u003ee413838\u003c/code\u003e\u003c/a\u003e client: Change connectivity state to CONNECTING when creating the name resolv...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/f9d2bdb34edcd95f0ca9e2cfaba692722cb85ee2\"\u003e\u003ccode\u003ef9d2bdb\u003c/code\u003e\u003c/a\u003e stats/otel: Add grpc.lb.backend_service label to wrr metrics (A89) (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8737\"\u003e#8737\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.71.0...v1.78.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream` from 1.6.10 to 1.7.10\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/765544941191825edd26162f9790bf11f059d426\"\u003e\u003ccode\u003e7655449\u003c/code\u003e\u003c/a\u003e Release 2022-10-21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/dcae829ecc334f91502afd6d7ae2295861db9885\"\u003e\u003ccode\u003edcae829\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b82766b858e595943b26924ad1f107cd04363d66\"\u003e\u003ccode\u003eb82766b\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/1c05fb6452a1f74985ff6deb7a642b9eb441274a\"\u003e\u003ccode\u003e1c05fb6\u003c/code\u003e\u003c/a\u003e Implements IsCredentialsProvider for checking if a provider matches a target ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/0fab39aa32e09221c21383a8e658ef94d240b7e4\"\u003e\u003ccode\u003e0fab39a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/1888\"\u003e#1888\u003c/a\u003e from aws/isvita/issues-1787\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/56eb993a7dfc0195e4ca3fca306d4985f6c7c99a\"\u003e\u003ccode\u003e56eb993\u003c/code\u003e\u003c/a\u003e added changelog file\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/cde8cbcb42326be0c822cc557405619f1cefd92a\"\u003e\u003ccode\u003ecde8cbc\u003c/code\u003e\u003c/a\u003e Release 2022-10-20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/d7765f947faec45f0b4e22bb8051ca3a1c337d93\"\u003e\u003ccode\u003ed7765f9\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b9dab7e94b7446829a09a1f7a302251bac37771d\"\u003e\u003ccode\u003eb9dab7e\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/93ed3ee62605d8af3021010c5ddbf2141574af00\"\u003e\u003ccode\u003e93ed3ee\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/rum/v1.6.10...service/account/v1.7.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/in-toto/in-toto-golang` from 0.5.0 to 0.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/in-toto/in-toto-golang/releases\"\u003egithub.com/in-toto/in-toto-golang's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/232\"\u003ein-toto/in-toto-golang#232\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate maintainers and governance by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/233\"\u003ein-toto/in-toto-golang#233\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/234\"\u003ein-toto/in-toto-golang#234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.3 to 2.1.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/235\"\u003ein-toto/in-toto-golang#235\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/236\"\u003ein-toto/in-toto-golang#236\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix expired signature in test by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/241\"\u003ein-toto/in-toto-golang#241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.8.0 to 0.9.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/240\"\u003ein-toto/in-toto-golang#240\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.5 to 2.1.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/239\"\u003ein-toto/in-toto-golang#239\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/242\"\u003ein-toto/in-toto-golang#242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.56.0 to 1.56.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/243\"\u003ein-toto/in-toto-golang#243\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate GitHub Actions workflows by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/246\"\u003ein-toto/in-toto-golang#246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/245\"\u003ein-toto/in-toto-golang#245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremove linters that are no longer supported and add to make file by \u003ca href=\"https://github.com/pxp928\"\u003e\u003ccode\u003e@​pxp928\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/249\"\u003ein-toto/in-toto-golang#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd match products feature by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/237\"\u003ein-toto/in-toto-golang#237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove unfinished link on record stop by \u003ca href=\"https://github.com/PradyumnaKrishna\"\u003e\u003ccode\u003e@​PradyumnaKrishna\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/248\"\u003ein-toto/in-toto-golang#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.56.1 to 1.56.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/250\"\u003ein-toto/in-toto-golang#250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.6.0 to 0.7.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/251\"\u003ein-toto/in-toto-golang#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.56.2 to 1.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/255\"\u003ein-toto/in-toto-golang#255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd tests for coverage in envelope.go by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/256\"\u003ein-toto/in-toto-golang#256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/257\"\u003ein-toto/in-toto-golang#257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/258\"\u003ein-toto/in-toto-golang#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/259\"\u003ein-toto/in-toto-golang#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixes filepath pattern matching in windows by \u003ca href=\"https://github.com/PradyumnaKrishna\"\u003e\u003ccode\u003e@​PradyumnaKrishna\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/254\"\u003ein-toto/in-toto-golang#254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 3.5.3 to 3.6.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/261\"\u003ein-toto/in-toto-golang#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 3.6.0 to 4.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/262\"\u003ein-toto/in-toto-golang#262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/263\"\u003ein-toto/in-toto-golang#263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.57.0 to 1.58.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/264\"\u003ein-toto/in-toto-golang#264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/266\"\u003ein-toto/in-toto-golang#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate Provenance v1 struct in favor of /attestation protobufs by \u003ca href=\"https://github.com/marcelamelara\"\u003e\u003ccode\u003e@​marcelamelara\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/267\"\u003ein-toto/in-toto-golang#267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/269\"\u003ein-toto/in-toto-golang#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 4.0.0 to 4.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/270\"\u003ein-toto/in-toto-golang#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop use of \u003ccode\u003eany\u003c/code\u003e for hash objects by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/238\"\u003ein-toto/in-toto-golang#238\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/271\"\u003ein-toto/in-toto-golang#271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/273\"\u003ein-toto/in-toto-golang#273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/272\"\u003ein-toto/in-toto-golang#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.12.0 to 0.17.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/274\"\u003ein-toto/in-toto-golang#274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.3 to 1.59.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/275\"\u003ein-toto/in-toto-golang#275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 4.1.0 to 4.1.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/276\"\u003ein-toto/in-toto-golang#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTrigger workflow on pushes only to master branch by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/280\"\u003ein-toto/in-toto-golang#280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.13.0 to 0.14.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/278\"\u003ein-toto/in-toto-golang#278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/277\"\u003ein-toto/in-toto-golang#277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd openssf scorecard by \u003ca href=\"https://github.com/viveksahu26\"\u003e\u003ccode\u003e@​viveksahu26\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/281\"\u003ein-toto/in-toto-golang#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/282\"\u003ein-toto/in-toto-golang#282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix coveralls, use action by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/285\"\u003ein-toto/in-toto-golang#285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSecure System Lab Sign/Verify by \u003ca href=\"https://github.com/Forrin\"\u003e\u003ccode\u003e@​Forrin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/279\"\u003ein-toto/in-toto-golang#279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.14.0 to 0.15.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/287\"\u003ein-toto/in-toto-golang#287\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 4.1.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/289\"\u003ein-toto/in-toto-golang#289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.59.0 to 1.60.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/290\"\u003ein-toto/in-toto-golang#290\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/db554e2ab6498a07d719e5374efa6ad4a7a7c222\"\u003e\u003ccode\u003edb554e2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/450\"\u003e#450\u003c/a\u003e from in-toto/dependabot/go_modules/all-e2678a00b5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/b2ea0f2587b6b6df90a489a199f4e845fd53bc18\"\u003e\u003ccode\u003eb2ea0f2\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/sys in the all group\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/acc2f336840dd6a4c09ced5dcd69e1dc8cd1dce3\"\u003e\u003ccode\u003eacc2f33\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/448\"\u003e#448\u003c/a\u003e from in-toto/dependabot/go_modules/github.com/secure-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/313b1d6c89e412fc2e1b68ec8c4ffd3767408cf2\"\u003e\u003ccode\u003e313b1d6\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/449\"\u003e#449\u003c/a\u003e from in-toto/dependabot/github_actions/all-2ed24f8e11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/d9a60afc87a0ad342c30719f864042075194708f\"\u003e\u003ccode\u003ed9a60af\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/secure-systems-lab/go-securesystemslib\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/e7783d589362197c09b16b9f4b6e533957a56bef\"\u003e\u003ccode\u003ee7783d5\u003c/code\u003e\u003c/a\u003e chore(deps): bump the all group with 3 updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/7a1798a0e1cd26c554b353b6b792b73c1448691d\"\u003e\u003ccode\u003e7a1798a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/447\"\u003e#447\u003c/a\u003e from in-toto/fix-ci\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/b6af1a7fdb901ab63bd21b6a8a85b232843ce48f\"\u003e\u003ccode\u003eb6af1a7\u003c/code\u003e\u003c/a\u003e Modernize CI and automation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/ad676459ee070471436b44d3b482698975c35030\"\u003e\u003ccode\u003ead67645\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/446\"\u003e#446\u003c/a\u003e from in-toto/dependabot/go_modules/google.golang.org/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/b63fd336d6a981407d080757e958a50d0cdf5901\"\u003e\u003ccode\u003eb63fd33\u003c/code\u003e\u003c/a\u003e chore(deps): bump google.golang.org/grpc from 1.74.2 to 1.78.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/in-toto/in-toto-golang/compare/v0.5.0...v0.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.40.0 to 1.41.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.40.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/GlacierEQ/cog/network/alerts).\n\n\u003c/details\u003e\n\n---\n\n🔄 This PR updates 7 Go module dependencies in a grouped update, including major version bumps for Docker CLI (v28.3.0 → v29.2.0), BuildKit (v0.22.0 → v0.28.1), and several other critical dependencies like gRPC and OpenTelemetry libraries.\n\n\u003cdetails\u003e\n\u003csummary\u003e🔍 \u003cstrong\u003eDetailed Analysis\u003c/strong\u003e\u003c/summary\u003e\n\n### Key Changes\n- **Docker Dependencies**: Updated `github.com/docker/cli` from v28.3.0 to v29.2.0 and `github.com/moby/buildkit` from v0.22.0 to v0.28.1\n- **gRPC Library**: Upgraded `google.golang.org/grpc` from v1.71.0 to v1.78.0 with connectivity state improvements and performance optimizations\n- **OpenTelemetry**: Updated both `go.opentelemetry.io/otel` (v1.40.0 → v1.41.0) and `go.opentelemetry.io/otel/sdk` (v1.40.0 → v1.43.0) with baggage compliance fixes and new features\n- **Security Updates**: AWS SDK and in-toto-golang updates include security patches and vulnerability fixes\n- **Indirect Dependencies**: AWS EventStream protocol and in-toto-golang libraries received significant version bumps\n\n### Technical Implementation\n```mermaid\nflowchart TD\n    A[Dependabot Scan] --\u003e B[Identify 7 Dependencies]\n    B --\u003e C[Group Update: go_modules]\n    C --\u003e D[Docker CLI v29.2.0]\n    C --\u003e E[BuildKit v0.28.1]\n    C --\u003e F[gRPC v1.78.0]\n    C --\u003e G[OpenTelemetry v1.41.0/v1.43.0]\n    C --\u003e H[AWS SDK v1.7.10]\n    C --\u003e I[in-toto-golang v0.10.0]\n    D --\u003e J[Security \u0026 Bug Fixes]\n    E --\u003e J\n    F --\u003e K[Performance Improvements]\n    G --\u003e L[W3C Compliance]\n    H --\u003e J\n    I --\u003e J\n```\n\n### Impact\n- **Security Enhancement**: BuildKit v0.28.1 includes critical security fixes for Git URL validation and frontend vulnerabilities (GHSA-4vrq-3vrq-g6gg, GHSA-4c29-8rgm-jvjj)\n- **Performance Improvements**: gRPC v1.78.0 brings memory pool optimizations and better connectivity state handling\n- **Standards Compliance**: OpenTelemetry updates improve W3C Baggage specification compliance and add support for trace context level 2 features\n- **Stability**: Multiple bug fixes across dependencies, including panic fixes in BuildKit's dockerignore processing and race condition fixes in xDS client\n\n\u003c/details\u003e\n\n_Created with [Palmier](https://www.palmier.io)_","html_url":"https://github.com/GlacierEQ/cog/pull/28","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/GlacierEQ%2Fcog/issues/28","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/28/packages"},{"uuid":"4439212068","node_id":"PR_kwDOBGvVPc7bLxKI","number":60215,"state":"open","title":"Bump the all-dependencies group across 1 directory with 32 updates","user":"dependabot[bot]","labels":["size/L","needs-ok-to-test","release-notes-none"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-13T15:39:51.000Z","updated_at":"2026-05-13T15:40:06.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"all-dependencies","update_count":32,"packages":[{"name":"github.com/cbeuw/connutil","old_version":"0.0.0-20200411215123-966bfaa51ee3","new_version":"1.0.1","repository_url":"https://github.com/cbeuw/connutil"},{"name":"github.com/coreos/go-oidc/v3","old_version":"3.15.0","new_version":"3.18.0","repository_url":"https://github.com/coreos/go-oidc"},{"name":"github.com/docker/cli","old_version":"28.3.3+incompatible","new_version":"29.4.3+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/fatih/color","old_version":"1.18.0","new_version":"1.19.0","repository_url":"https://github.com/fatih/color"},{"name":"github.com/fsnotify/fsnotify","old_version":"1.10.0","new_version":"1.10.1","repository_url":"https://github.com/fsnotify/fsnotify"},{"name":"github.com/google/cel-go","old_version":"0.28.0","new_version":"0.28.1","repository_url":"https://github.com/google/cel-go"},{"name":"github.com/google/go-containerregistry","old_version":"0.20.6","new_version":"0.21.5","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/moby/buildkit","old_version":"0.23.2","new_version":"0.30.0","repository_url":"https://github.com/moby/buildkit"},{"name":"github.com/pires/go-proxyproto","old_version":"0.11.0","new_version":"0.12.0","repository_url":"https://github.com/pires/go-proxyproto"},{"name":"github.com/prometheus/procfs","old_version":"0.19.2","new_version":"0.20.1","repository_url":"https://github.com/prometheus/procfs"},{"name":"github.com/spf13/viper","old_version":"1.20.1","new_version":"1.21.0","repository_url":"https://github.com/spf13/viper"},{"name":"go.opentelemetry.io/otel/exporters/prometheus","old_version":"0.61.0","new_version":"0.65.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"go.uber.org/zap","old_version":"1.27.0","new_version":"1.28.0","repository_url":"https://github.com/uber-go/zap"}],"path":null,"ecosystem":"go"},"body":"Bumps the all-dependencies group with 13 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/cbeuw/connutil](https://github.com/cbeuw/connutil) | `0.0.0-20200411215123-966bfaa51ee3` | `1.0.1` |\n| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.15.0` | `3.18.0` |\n| [github.com/docker/cli](https://github.com/docker/cli) | `28.3.3+incompatible` | `29.4.3+incompatible` |\n| [github.com/fatih/color](https://github.com/fatih/color) | `1.18.0` | `1.19.0` |\n| [github.com/fsnotify/fsnotify](https://github.com/fsnotify/fsnotify) | `1.10.0` | `1.10.1` |\n| [github.com/google/cel-go](https://github.com/google/cel-go) | `0.28.0` | `0.28.1` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.6` | `0.21.5` |\n| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.23.2` | `0.30.0` |\n| [github.com/pires/go-proxyproto](https://github.com/pires/go-proxyproto) | `0.11.0` | `0.12.0` |\n| [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.19.2` | `0.20.1` |\n| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.20.1` | `1.21.0` |\n| [go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go) | `0.61.0` | `0.65.0` |\n| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.0` | `1.28.0` |\n\n\nUpdates `github.com/cbeuw/connutil` from 0.0.0-20200411215123-966bfaa51ee3 to 1.0.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/cbeuw/connutil/commits/v1.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/coreos/go-oidc/v3` from 3.15.0 to 3.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/coreos/go-oidc/releases\"\u003egithub.com/coreos/go-oidc/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e.github: configure dependabot by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/477\"\u003ecoreos/go-oidc#477\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e.github: update go versions in CI by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/480\"\u003ecoreos/go-oidc#480\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/478\"\u003ecoreos/go-oidc#478\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/479\"\u003ecoreos/go-oidc#479\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eoidc: improve error message for mismatched issuer URLs by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/469\"\u003ecoreos/go-oidc#469\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.16.0...v3.17.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.16.0...v3.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.16.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: Remove unused time injection from RemoteKeySet by \u003ca href=\"https://github.com/ponimas\"\u003e\u003ccode\u003e@​ponimas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/466\"\u003ecoreos/go-oidc#466\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebump go to 1.24, remove 1.23 support, bump go-jose dependency, remove x/net dependency by \u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/467\"\u003ecoreos/go-oidc#467\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/467\"\u003ecoreos/go-oidc#467\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.15.0...v3.16.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.15.0...v3.16.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/da6b3bfca8af72414ee0e6e8746585ff5d206003\"\u003e\u003ccode\u003eda6b3bf\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/7f80694215d5eb5b28f851f35845439b1e1e9e5d\"\u003e\u003ccode\u003e7f80694\u003c/code\u003e\u003c/a\u003e build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/7271de57587bb756318f9819796ba846b1ba875a\"\u003e\u003ccode\u003e7271de5\u003c/code\u003e\u003c/a\u003e .github: update go versions in CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/3ccf20fdc4afab7c64881a108d6f4c17a4ecc24d\"\u003e\u003ccode\u003e3ccf20f\u003c/code\u003e\u003c/a\u003e .github: configure dependabot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/35b8e031bcac7fed73b96b09d42e6e233a6e6562\"\u003e\u003ccode\u003e35b8e03\u003c/code\u003e\u003c/a\u003e oidc: improve error message for mismatched issuer URLs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/e9584733f8bb6c4683d1e98b4fb22eee121f7dff\"\u003e\u003ccode\u003ee958473\u003c/code\u003e\u003c/a\u003e bump go to 1.24, remove 1.23 support, bump go-jose dependency, remove x/net d...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/69b167061fdb7270ef965f150ea6aabe11678728\"\u003e\u003ccode\u003e69b1670\u003c/code\u003e\u003c/a\u003e refactor: Remove unused time injection from RemoteKeySet\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.15.0...v3.18.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/cli` from 28.3.3+incompatible to 29.4.3+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/055a478ea9010a19d0d4674c0d0e87ade37a4223\"\u003e\u003ccode\u003e055a478\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6945\"\u003e#6945\u003c/a\u003e from thaJeztah/bump_moby\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/d0f5b279e9ead4cadc6f78a2ea0ff29f652f1c50\"\u003e\u003ccode\u003ed0f5b27\u003c/code\u003e\u003c/a\u003e cmd/docker-trust: bump moby/client v0.4.1, moby/api v1.54.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/b7f37e86da572a12dcea84a2e08183132bf51e00\"\u003e\u003ccode\u003eb7f37e8\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/client v0.4.1, moby/api v1.54.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/c93d892f0ea0145d9e6ab99bb4aae7dbcb389d61\"\u003e\u003ccode\u003ec93d892\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6949\"\u003e#6949\u003c/a\u003e from thaJeztah/bump_utils\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/3553cafa13f691eb0a5a726f5457929c44fd55e7\"\u003e\u003ccode\u003e3553caf\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6948\"\u003e#6948\u003c/a\u003e from thaJeztah/bump_trust_deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/266f039bb52fd237388f08e874aa719d6a6e9835\"\u003e\u003ccode\u003e266f039\u003c/code\u003e\u003c/a\u003e Dockerfile: update compose to v5.1.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/d74d3c3b163abbb084d50676da34a0055d45b855\"\u003e\u003ccode\u003ed74d3c3\u003c/code\u003e\u003c/a\u003e Dockerfile: update buildx to v0.33.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/134c2a0ed627f03cc0e6d1806f96a0b68331dc50\"\u003e\u003ccode\u003e134c2a0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6826\"\u003e#6826\u003c/a\u003e from thaJeztah/bump_golangci_lint2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/58a7c3155b14d6696bb8cb2d7a77c48a555848c1\"\u003e\u003ccode\u003e58a7c31\u003c/code\u003e\u003c/a\u003e golangci-lint: fix lint failures from v2.10.1 upgrade\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/f37a9e663fca9f351cdbe3e18353292125108285\"\u003e\u003ccode\u003ef37a9e6\u003c/code\u003e\u003c/a\u003e Dockerfile: update golangci-lint to v2.10.1\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v28.3.3...v29.4.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/fatih/color` from 1.18.0 to 1.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fatih/color/releases\"\u003egithub.com/fatih/color's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump golang.org/x/sys from 0.25.0 to 0.28.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/fatih/color/pull/246\"\u003efatih/color#246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix for issue \u003ca href=\"https://redirect.github.com/fatih/color/issues/230\"\u003e#230\u003c/a\u003e set/unsetwriter symmetric wrt color support detection by \u003ca href=\"https://github.com/ataypamart\"\u003e\u003ccode\u003e@​ataypamart\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/fatih/color/pull/243\"\u003efatih/color#243\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: go mod cleanup by \u003ca href=\"https://github.com/sashamelentyev\"\u003e\u003ccode\u003e@​sashamelentyev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/fatih/color/pull/244\"\u003efatih/color#244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/sys from 0.28.0 to 0.30.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/fatih/color/pull/249\"\u003efatih/color#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github.com/mattn/go-colorable from 0.1.13 to 0.1.14 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/fatih/color/pull/248\"\u003efatih/color#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate CI and go deps by \u003ca href=\"https://github.com/fatih\"\u003e\u003ccode\u003e@​fatih\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/fatih/color/pull/254\"\u003efatih/color#254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/sys from 0.31.0 to 0.37.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/fatih/color/pull/268\"\u003efatih/color#268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: include escape codes in byte counts from \u003ccode\u003eFprint\u003c/code\u003e, \u003ccode\u003eFprintf\u003c/code\u003e by \u003ca href=\"https://github.com/qualidafial\"\u003e\u003ccode\u003e@​qualidafial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/fatih/color/pull/282\"\u003efatih/color#282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/sys from 0.37.0 to 0.40.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/fatih/color/pull/277\"\u003efatih/color#277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: add nil check for os.Stdout to prevent panic on Windows services by \u003ca href=\"https://github.com/majiayu000\"\u003e\u003ccode\u003e@​majiayu000\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/fatih/color/pull/275\"\u003efatih/color#275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump dominikh/staticcheck-action from 1.3.1 to 1.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/fatih/color/pull/259\"\u003efatih/color#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/checkout from 4 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/fatih/color/pull/273\"\u003efatih/color#273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOptimize Color.Equals performance (O(n²) → O(n)) by \u003ca href=\"https://github.com/UnSubble\"\u003e\u003ccode\u003e@​UnSubble\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/fatih/color/pull/269\"\u003efatih/color#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/setup-go from 5 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/fatih/color/pull/266\"\u003efatih/color#266\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ataypamart\"\u003e\u003ccode\u003e@​ataypamart\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/fatih/color/pull/243\"\u003efatih/color#243\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sashamelentyev\"\u003e\u003ccode\u003e@​sashamelentyev\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/fatih/color/pull/244\"\u003efatih/color#244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/qualidafial\"\u003e\u003ccode\u003e@​qualidafial\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/fatih/color/pull/282\"\u003efatih/color#282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/majiayu000\"\u003e\u003ccode\u003e@​majiayu000\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/fatih/color/pull/275\"\u003efatih/color#275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/UnSubble\"\u003e\u003ccode\u003e@​UnSubble\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/fatih/color/pull/269\"\u003efatih/color#269\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fatih/color/compare/v1.18.0...v1.19.0\"\u003ehttps://github.com/fatih/color/compare/v1.18.0...v1.19.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/ca25f6e17f118a5a259f3c2c0d395949d1103a5a\"\u003e\u003ccode\u003eca25f6e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/fatih/color/issues/266\"\u003e#266\u003c/a\u003e from fatih/dependabot/github_actions/actions/setup-go-6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/120598440a16510564204450092d1e7925fad9ae\"\u003e\u003ccode\u003e1205984\u003c/code\u003e\u003c/a\u003e Bump actions/setup-go from 5 to 6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/5715c20323d8c79f60d4944831fcfa3b76cd5734\"\u003e\u003ccode\u003e5715c20\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/fatih/color/issues/269\"\u003e#269\u003c/a\u003e from UnSubble/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/2f6e2003760028129f34c4ad5c3728b904811d3c\"\u003e\u003ccode\u003e2f6e200\u003c/code\u003e\u003c/a\u003e Merge branch 'main' into main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/f72ec947d0c34504dfd08b0db68d89f37503fc90\"\u003e\u003ccode\u003ef72ec94\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/fatih/color/issues/273\"\u003e#273\u003c/a\u003e from fatih/dependabot/github_actions/actions/checkout-6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/848e6330af5690fa24bb038d5330839a33f1f0e5\"\u003e\u003ccode\u003e848e633\u003c/code\u003e\u003c/a\u003e Merge branch 'main' into main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/4c2cd3443934693bd8892fc0f7bb5bbec8e3788a\"\u003e\u003ccode\u003e4c2cd34\u003c/code\u003e\u003c/a\u003e Add tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/7f812f029c41eddd3ac7fbbdf6cc78e4b175944b\"\u003e\u003ccode\u003e7f812f0\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4 to 6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/b7fc9f9557629556aff702751b5268cefcbafa15\"\u003e\u003ccode\u003eb7fc9f9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/fatih/color/issues/259\"\u003e#259\u003c/a\u003e from fatih/dependabot/github_actions/dominikh/staticc...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/239a88f715e8e35f40492da7a1e08f7173e78e05\"\u003e\u003ccode\u003e239a88f\u003c/code\u003e\u003c/a\u003e Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/fatih/color/compare/v1.18.0...v1.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/fsnotify/fsnotify` from 1.10.0 to 1.10.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fsnotify/fsnotify/releases\"\u003egithub.com/fsnotify/fsnotify's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.1\u003c/h2\u003e\n\u003ch3\u003eChanges and fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003einotify: don't remove sibling watches sharing a path prefix (\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/754\"\u003e#754\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003einotify, windows: don't rename sibling watches sharing a path prefix\n(\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/755\"\u003e#755\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/754\"\u003e#754\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/pull/754\"\u003efsnotify/fsnotify#754\u003c/a\u003e\n\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/755\"\u003e#755\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/pull/755\"\u003efsnotify/fsnotify#755\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fsnotify/fsnotify/blob/main/CHANGELOG.md\"\u003egithub.com/fsnotify/fsnotify's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.10.1 2026-05-04\u003c/h2\u003e\n\u003ch3\u003eChanges and fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003einotify: don't remove sibling watches sharing a path prefix (\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/754\"\u003e#754\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003einotify, windows: don't rename sibling watches sharing a path prefix\n(\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/755\"\u003e#755\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/754\"\u003e#754\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/pull/754\"\u003efsnotify/fsnotify#754\u003c/a\u003e\n\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/755\"\u003e#755\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/pull/755\"\u003efsnotify/fsnotify#755\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fsnotify/fsnotify/commit/76b01a6e8f502187fecedea8b025e79e5a86085c\"\u003e\u003ccode\u003e76b01a6\u003c/code\u003e\u003c/a\u003e Release 1.10.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fsnotify/fsnotify/commit/fec150b807510e54e5b25def4b6e5fb001b4898c\"\u003e\u003ccode\u003efec150b\u003c/code\u003e\u003c/a\u003e Update changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fsnotify/fsnotify/commit/162b4216ab8f92ecd26425530bee198972c9b3cb\"\u003e\u003ccode\u003e162b421\u003c/code\u003e\u003c/a\u003e inotify, windows: don't rename sibling watches sharing a path prefix (\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/755\"\u003e#755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fsnotify/fsnotify/commit/224257f23b2f3a96509b316c5cead71dd4a9099a\"\u003e\u003ccode\u003e224257f\u003c/code\u003e\u003c/a\u003e inotify: don't remove sibling watches sharing a path prefix (\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/754\"\u003e#754\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fsnotify/fsnotify/commit/e0c956c0ccaf51562fee30ef5c055c74e6ae2104\"\u003e\u003ccode\u003ee0c956c\u003c/code\u003e\u003c/a\u003e windows: document directory Write events and stabilize tests (\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/745\"\u003e#745\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/fsnotify/fsnotify/compare/v1.10.0...v1.10.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.1.3 to 4.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes Panic in JWE decryption. See \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9\"\u003e\u003ccode\u003e0e59876\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ddffdbcec8bdadea8e02a20bdf19239878228215\"\u003e\u003ccode\u003eddffdbc\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/cel-go` from 0.28.0 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/cel-go/releases\"\u003egithub.com/google/cel-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease v0.28.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: deleted \u003ccode\u003eIntToDuration\u003c/code\u003e overload by \u003ca href=\"https://github.com/alexsnaps\"\u003e\u003ccode\u003e@​alexsnaps\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/cel-go/pull/1300\"\u003egoogle/cel-go#1300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport shorthand types in env yaml and REPL  by \u003ca href=\"https://github.com/jnthntatum\"\u003e\u003ccode\u003e@​jnthntatum\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/cel-go/pull/1301\"\u003egoogle/cel-go#1301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreserve operation interrupted in ContextEval error by \u003ca href=\"https://github.com/dims\"\u003e\u003ccode\u003e@​dims\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/cel-go/pull/1303\"\u003egoogle/cel-go#1303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse shorthand type specifiers in env yaml files by \u003ca href=\"https://github.com/jnthntatum\"\u003e\u003ccode\u003e@​jnthntatum\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/cel-go/pull/1305\"\u003egoogle/cel-go#1305\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCost estimation and tracking for strings extension by \u003ca href=\"https://github.com/TristonianJones\"\u003e\u003ccode\u003e@​TristonianJones\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/cel-go/pull/1307\"\u003egoogle/cel-go#1307\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate repl type string for doubles by \u003ca href=\"https://github.com/TristonianJones\"\u003e\u003ccode\u003e@​TristonianJones\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/cel-go/pull/1308\"\u003egoogle/cel-go#1308\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alexsnaps\"\u003e\u003ccode\u003e@​alexsnaps\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/cel-go/pull/1300\"\u003egoogle/cel-go#1300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dims\"\u003e\u003ccode\u003e@​dims\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/cel-go/pull/1303\"\u003egoogle/cel-go#1303\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/cel-go/compare/v0.28.0...v0.28.1\"\u003ehttps://github.com/google/cel-go/compare/v0.28.0...v0.28.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/cel-go/commit/a82c68b770ac0cb67f7b4f76166827c14b145eb8\"\u003e\u003ccode\u003ea82c68b\u003c/code\u003e\u003c/a\u003e Update repl type assessment for doubles (\u003ca href=\"https://redirect.github.com/google/cel-go/issues/1308\"\u003e#1308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/cel-go/commit/c9d70486a872fbfaf9c4cb383a005de56e499368\"\u003e\u003ccode\u003ec9d7048\u003c/code\u003e\u003c/a\u003e Cost estimation and tracking for strings extension (\u003ca href=\"https://redirect.github.com/google/cel-go/issues/1307\"\u003e#1307\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/cel-go/commit/646cdc1728643aec9499e3a00236ef1007a5d3fa\"\u003e\u003ccode\u003e646cdc1\u003c/code\u003e\u003c/a\u003e Use shorthand type specifiers in env yaml files (\u003ca href=\"https://redirect.github.com/google/cel-go/issues/1305\"\u003e#1305\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/cel-go/commit/7263793b453228e8a47ca742afd124b3eaa8fc68\"\u003e\u003ccode\u003e7263793\u003c/code\u003e\u003c/a\u003e Preserve operation interrupted in ContextEval error (\u003ca href=\"https://redirect.github.com/google/cel-go/issues/1303\"\u003e#1303\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/cel-go/commit/b826162b7b6ac7ae048fbf23b6123ab5c99da11b\"\u003e\u003ccode\u003eb826162\u003c/code\u003e\u003c/a\u003e Support shorthand types in env yaml and REPL  (\u003ca href=\"https://redirect.github.com/google/cel-go/issues/1301\"\u003e#1301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/cel-go/commit/339269b44af7c3cd477b55530e9cc1fe534c7f09\"\u003e\u003ccode\u003e339269b\u003c/code\u003e\u003c/a\u003e fix: deleted \u003ccode\u003eIntToDuration\u003c/code\u003e overload (\u003ca href=\"https://redirect.github.com/google/cel-go/issues/1300\"\u003e#1300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/google/cel-go/compare/v0.28.0...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.20.6 to 0.21.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2254\"\u003egoogle/go-containerregistry#2254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate to Go 1.26.2 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2255\"\u003egoogle/go-containerregistry#2255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2257\"\u003egoogle/go-containerregistry#2257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 in the go-deps group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2260\"\u003egoogle/go-containerregistry#2260\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.4...v0.21.5\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.4...v0.21.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.21.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ego.mod: do not make a viral minimum go version by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2237\"\u003egoogle/go-containerregistry#2237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid pruning absolute links from extracted and flattened images by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2241\"\u003egoogle/go-containerregistry#2241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump the go-deps group across 3 directories with 5 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2245\"\u003egoogle/go-containerregistry#2245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: update to go1.25.8, and use separate .go-version file by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2246\"\u003egoogle/go-containerregistry#2246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump CI go version to 1.26.1 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2242\"\u003egoogle/go-containerregistry#2242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump codecov/codecov-action from 5.5.2 to 5.5.3 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2240\"\u003egoogle/go-containerregistry#2240\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efork distribution client v3 auth-challenge as an internal package (squashed) by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2248\"\u003egoogle/go-containerregistry#2248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: validate Bearer realm URL to prevent SSRF by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2243\"\u003egoogle/go-containerregistry#2243\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erevert path traversal and symlink escape from \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2227\"\u003e#2227\u003c/a\u003e by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2250\"\u003egoogle/go-containerregistry#2250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pkg/v1/google/auth tests for arm64  by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2085\"\u003egoogle/go-containerregistry#2085\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egoreleaser: Update goreleaser config and GH action by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2253\"\u003egoogle/go-containerregistry#2253\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2243\"\u003egoogle/go-containerregistry#2243\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.3...v0.21.4\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.3...v0.21.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.21.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdds local file support to the \u003ccode\u003ecrane index\u003c/code\u003e subcommand  by \u003ca href=\"https://github.com/edwardthiele\"\u003e\u003ccode\u003e@​edwardthiele\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2223\"\u003egoogle/go-containerregistry#2223\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emigrate to github.com/moby/moby modules by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2228\"\u003egoogle/go-containerregistry#2228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump the go-deps group across 4 directories with 7 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2233\"\u003egoogle/go-containerregistry#2233\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2220\"\u003egoogle/go-containerregistry#2220\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: reject path traversal and symlink escape in Extract by \u003ca href=\"https://github.com/KevinZhao\"\u003e\u003ccode\u003e@​KevinZhao\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2227\"\u003egoogle/go-containerregistry#2227\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etarball: detect symlink cycles in extractFileFromTar by \u003ca href=\"https://github.com/vnykmshr\"\u003e\u003ccode\u003e@​vnykmshr\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2232\"\u003egoogle/go-containerregistry#2232\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebump golang to 1.25.7 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2236\"\u003egoogle/go-containerregistry#2236\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/edwardthiele\"\u003e\u003ccode\u003e@​edwardthiele\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2223\"\u003egoogle/go-containerregistry#2223\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2228\"\u003egoogle/go-containerregistry#2228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KevinZhao\"\u003e\u003ccode\u003e@​KevinZhao\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2227\"\u003egoogle/go-containerregistry#2227\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vnykmshr\"\u003e\u003ccode\u003e@​vnykmshr\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2232\"\u003egoogle/go-containerregistry#2232\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.21.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBetter handle redirects to https in ping by \u003ca href=\"https://github.com/jonjohnsonjr\"\u003e\u003ccode\u003e@​jonjohnsonjr\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2225\"\u003egoogle/go-containerregistry#2225\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/5b80281da727dae218e1697ab8529b631b9efa64\"\u003e\u003ccode\u003e5b80281\u003c/code\u003e\u003c/a\u003e build(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 in the go-deps gro...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/b99bca24a8df1bd88afc1d299d4c0ebba0555cf8\"\u003e\u003ccode\u003eb99bca2\u003c/code\u003e\u003c/a\u003e build(deps): bump aws-actions/configure-aws-credentials (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2257\"\u003e#2257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/f8be1d442e6fc85c791e4aa50155aa8806ca8312\"\u003e\u003ccode\u003ef8be1d4\u003c/code\u003e\u003c/a\u003e update to Go 1.26.2 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2255\"\u003e#2255\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/87ad88b4a000e418add5c1bb4ae1da908cbc3b85\"\u003e\u003ccode\u003e87ad88b\u003c/code\u003e\u003c/a\u003e Bump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2254\"\u003e#2254\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e8813dd0a00e799459cae01d8a4659b9be2fd871\"\u003e\u003ccode\u003ee8813dd\u003c/code\u003e\u003c/a\u003e goreleaser: Update goreleaser config and GH action for releases (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2253\"\u003e#2253\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e90447d319233b94dcdc75a24246ccbee6d1e72a\"\u003e\u003ccode\u003ee90447d\u003c/code\u003e\u003c/a\u003e replace gcloud in binary calls in pkg/v1/google tests (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2085\"\u003e#2085\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/0d0368c2a5fa524c4765a6c0b7df4ff6d6951471\"\u003e\u003ccode\u003e0d0368c\u003c/code\u003e\u003c/a\u003e revert path traversal and symlink escape changes (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2250\"\u003e#2250\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a2f47d4202de443f68e8bafa95ddd41407327168\"\u003e\u003ccode\u003ea2f47d4\u003c/code\u003e\u003c/a\u003e transport: validate Bearer realm URL to prevent SSRF (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2243\"\u003e#2243\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/19a36cd8c44dd465a84f9d6ffea3009023f73660\"\u003e\u003ccode\u003e19a36cd\u003c/code\u003e\u003c/a\u003e fork distribution client v3 auth-challenge as an internal package (squashed) ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c612a9b20a4c533454b7fa8b39a8c8139065f0b1\"\u003e\u003ccode\u003ec612a9b\u003c/code\u003e\u003c/a\u003e Bump codecov/codecov-action from 5.5.2 to 5.5.3 in the actions group (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2240\"\u003e#2240\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.20.6...v0.21.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/moby/buildkit` from 0.23.2 to 0.30.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.30.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.30.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eNatnael Gebremariam\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eDawei Wei\u003c/li\u003e\n\u003cli\u003eDmitrii Kostyrev\u003c/li\u003e\n\u003cli\u003eJiří Moravčík\u003c/li\u003e\n\u003cli\u003eVladimir Kuznichenkov\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuiltin Dockerfile frontend has been updated to v1.24.0 \u003ca href=\"https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.24.0\"\u003echangelog\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuildKit now supports the concept of \u0026quot;compatibility version\u0026quot; for improved reproducible builds support across different BuildKit versions. This allows users to specify a version for which the build should be compatible with, and BuildKit will attempt to maintain compatibility with that version when possible. Compatibility version will be stored in the provenance attestation of the build and can be used to independently verify the artifacts of the build on other BuildKit versions. The current compatibility version and backward compatibility with old versions are defined in \u003ca href=\"https://github.com/moby/buildkit/blob/v0.30.0-rc1/docs/build-repro.md#compatibility-version\"\u003eBuild reproducibility docs\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6681\"\u003e#6681\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGit sources now support \u003ccode\u003efetch-by-commit\u003c/code\u003e option where commit is fetched by the SHA and then associated with the reference. This is useful when checking out mutable references \u003ccode\u003erefs/NR/merge\u003c/code\u003e where the commit SHA may change during invocation and cause checksum mismatch error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6708\"\u003e#6708\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe LLB API now supports Git bundle format. Git bundles can be loaded from registry or OCI layout blobs and Git sources can be checked out into bundle format for snapshotting \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6711\"\u003e#6711\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eProvenance attestations for multi-pass or chained builds now include request details for root requests and individual input requests, allowing full reconstruction of such complex builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6739\"\u003e#6739\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe version of the built-in Dockerfile frontend that was used is now included in the provenance metadata and reported via worker info APIs. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6705\"\u003e#6705\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error reporting for registry errors on cache export \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports additional options \u003ccode\u003eretry_mode\u003c/code\u003e and \u003ccode\u003eretry_max_attempts\u003c/code\u003e to configure retry behavior of S3 client \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6657\"\u003e#6657\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports \u003ccode\u003edisable_accept_encoding\u003c/code\u003e option for GCS interoperability \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6642\"\u003e#6642\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce potential lock contention in gateway forwarder for improved performance on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6741\"\u003e#6741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eA new log level option has been added to the buildkitd TOML configuration; previous \u0026quot;debug\u0026quot; and \u0026quot;trace\u0026quot; options have been deprecated \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6732\"\u003e#6732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow gateway frontend requests to forward to the built-in Dockerfile frontend the same way as to external frontends \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6643\"\u003e#6643\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSession connection health checks have been improved to better detect loss of connectivity and avoid stuck builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6649\"\u003e#6649\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix issue with Git subdirectory value not being included in ConfigSource section of SLSA provenance for builds from Git sources \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6724\"\u003e#6724\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid potential deadlock if the credential helper in the client is misbehaving and never returns credentials \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6709\"\u003e#6709\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in provenance computation on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible provenance capture race in concurrent no-cache builds that could leave source pins empty and fail with an invalid checksum digest error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6764\"\u003e#6764\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in progress writer \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6679\"\u003e#6679\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix data race in S3 cache reader \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6675\"\u003e#6675\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible Git config lookup errors on Windows \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6639\"\u003e#6639\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix build cancellation not working properly when blocked on credential callback \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6641\"\u003e#6641\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Azure/azure-sdk-for-go/sdk/azcore\u003c/strong\u003e                                  v1.20.0 -\u0026gt; v1.21.0\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Microsoft/hcsshim\u003c/strong\u003e                                                  v0.14.0-rc.1 -\u0026gt; v0.14.1\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2\u003c/strong\u003e                                                  v1.41.4 -\u0026gt; v1.41.7\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/dd2170e156c9633da1b2d1a58a6188e3f7d36fa4\"\u003e\u003ccode\u003edd2170e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6770\"\u003e#6770\u003c/a\u003e from crazy-max/v0.30-picks-0.30.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e4b9769cf519c5c1d9bc59643adde2c977f9ae30\"\u003e\u003ccode\u003ee4b9769\u003c/code\u003e\u003c/a\u003e test: gate merge diff tests through worker capabilities\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/d5956a1cf26f4055deaff883dad537b6a25bcfa1\"\u003e\u003ccode\u003ed5956a1\u003c/code\u003e\u003c/a\u003e skip pin race test on workers without merge diff support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/505ab37cd6c6c6d2ac37e3a598eab4abdc315c2a\"\u003e\u003ccode\u003e505ab37\u003c/code\u003e\u003c/a\u003e solver: fix race in walkProvenance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f2e48d20dc7d744a4051d6b5591b851a29a6232f\"\u003e\u003ccode\u003ef2e48d2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e from jsternberg/add-error-details\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f7a40a08716a42f1066b99bb0cdc09cab42987b9\"\u003e\u003ccode\u003ef7a40a0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e from tonistiigi/fix-provenance-data-race\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/80e934d8b310736f71a6a33c696b8448bec6c12d\"\u003e\u003ccode\u003e80e934d\u003c/code\u003e\u003c/a\u003e remotecache: propagate details field from registry when included\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/a7c874909a0045c6e32c1c1314e7aba949bf85da\"\u003e\u003ccode\u003ea7c8749\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6761\"\u003e#6761\u003c/a\u003e from moby/dependabot/github_actions/github/codeql-ac...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df37b6751b796a1b22d4dfe0ffb0bc9962b2c38b\"\u003e\u003ccode\u003edf37b67\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.35.3 to 4.35.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c7ba94199885e89e25615d3e2d78fea86a2c7eb7\"\u003e\u003ccode\u003ec7ba941\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6759\"\u003e#6759\u003c/a\u003e from moby/dependabot/github_actions/docker/github-bu...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.23.2...v0.30.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/pires/go-proxyproto` from 0.11.0 to 0.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pires/go-proxyproto/releases\"\u003egithub.com/pires/go-proxyproto's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.12.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: drop Go 1.24 (EOL) in favor of 1.26 by \u003ca href=\"https://github.com/pires\"\u003e\u003ccode\u003e@​pires\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pires/go-proxyproto/pull/166\"\u003epires/go-proxyproto#166\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev1: accept plain IPv4 addresses in TCP6 headers by \u003ca href=\"https://github.com/cmarker-gl\"\u003e\u003ccode\u003e@​cmarker-gl\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pires/go-proxyproto/pull/167\"\u003epires/go-proxyproto#167\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cmarker-gl\"\u003e\u003ccode\u003e@​cmarker-gl\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pires/go-proxyproto/pull/167\"\u003epires/go-proxyproto#167\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/pires/go-proxyproto/compare/v0.11.0...v0.12.0\"\u003ehttps://github.com/pires/go-proxyproto/compare/v0.11.0...v0.12.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pires/go-proxyproto/commit/0cee3e4e1c33d9cad14cde1837d454656cd348d9\"\u003e\u003ccode\u003e0cee3e4\u003c/code\u003e\u003c/a\u003e v1: accept plain IPv4 addresses in TCP6 headers (\u003ca href=\"https://redirect.github.com/pires/go-proxyproto/issues/167\"\u003e#167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pires/go-proxyproto/commit/5c8010d2392f09ce18169631c024aceae758335a\"\u003e\u003ccode\u003e5c8010d\u003c/code\u003e\u003c/a\u003e build: drop Go 1.24 (EOL) in favor of 1.26\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/pires/go-proxyproto/compare/v0.11.0...v0.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/prometheus/procfs` from 0.19.2 to 0.20.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/prometheus/procfs/releases\"\u003egithub.com/prometheus/procfs's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.20.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003envme: Parse NVMe namespace details  by \u003ca href=\"https://github.com/ShashwatHiregoudar\"\u003e\u003ccode\u003e@​ShashwatHiregoudar\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/765\"\u003eprometheus/procfs#765\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix bcachefs parsing by \u003ca href=\"https://github.com/ananthb\"\u003e\u003ccode\u003e@​ananthb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/789\"\u003eprometheus/procfs#789\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/788\"\u003eprometheus/procfs#788\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate sysfs/class_thermal: continue on EINVAL in parseClassThermalZone to ignore only invalid thermal zones which raise \u0026quot;invalid argument\u0026quot; by \u003ca href=\"https://github.com/ccastiglione-reply\"\u003e\u003ccode\u003e@​ccastiglione-reply\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/763\"\u003eprometheus/procfs#763\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ccastiglione-reply\"\u003e\u003ccode\u003e@​ccastiglione-reply\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/763\"\u003eprometheus/procfs#763\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/prometheus/procfs/compare/v0.20.0...v0.20.1\"\u003ehttps://github.com/prometheus/procfs/compare/v0.20.0...v0.20.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.20.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/747\"\u003eprometheus/procfs#747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/766\"\u003eprometheus/procfs#766\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/sync from 0.17.0 to 0.19.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/773\"\u003eprometheus/procfs#773\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/sys from 0.37.0 to 0.39.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/772\"\u003eprometheus/procfs#772\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/774\"\u003eprometheus/procfs#774\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix /proc/interrupts by \u003ca href=\"https://github.com/ffyuanda\"\u003e\u003ccode\u003e@​ffyuanda\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/775\"\u003eprometheus/procfs#775\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/778\"\u003eprometheus/procfs#778\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/779\"\u003eprometheus/procfs#779\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMigrate to GitHub actions by \u003ca href=\"https://github.com/SuperQ\"\u003e\u003ccode\u003e@​SuperQ\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/780\"\u003eprometheus/procfs#780\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/sys from 0.40.0 to 0.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/782\"\u003eprometheus/procfs#782\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/785\"\u003eprometheus/procfs#785\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebcachefs support by \u003ca href=\"https://github.com/ananthb\"\u003e\u003ccode\u003e@​ananthb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/750\"\u003eprometheus/procfs#750\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.1 to 6.0.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/781\"\u003eprometheus/procfs#781\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: parse capabilities in /proc/pid/status by \u003ca href=\"https://github.com/biscout42\"\u003e\u003ccode\u003e@​biscout42\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/784\"\u003eprometheus/procfs#784\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eclass_cooling_device: ignore EINVAL (etc) when reading files. by \u003ca href=\"https://github.com/malcolmr\"\u003e\u003ccode\u003e@​malcolmr\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/783\"\u003eprometheus/procfs#783\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd type and name to the DRM parser class by \u003ca href=\"https://github.com/Deezzir\"\u003e\u003ccode\u003e@​Deezzir\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/672\"\u003eprometheus/procfs#672\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ffyuanda\"\u003e\u003ccode\u003e@​ffyuanda\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/775\"\u003eprometheus/procfs#775\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ananthb\"\u003e\u003ccode\u003e@​ananthb\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/750\"\u003eprometheus/procfs#750\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biscout42\"\u003e\u003ccode\u003e@​biscout42\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/784\"\u003eprometheus/procfs#784\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malcolmr\"\u003e\u003ccode\u003e@​malcolmr\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/783\"\u003eprometheus/procfs#783\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Deezzir\"\u003e\u003ccode\u003e@​Deezzir\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/672\"\u003eprometheus/procfs#672\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/prometheus/procfs/compare/v0.19.2...v0.20.0\"\u003ehttps://github.com/prometheus/procfs/compare/v0.19.2...v0.20.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/b380dd40ab2971c80872861842bcb997ff83bebb\"\u003e\u003ccode\u003eb380dd4\u003c/code\u003e\u003c/a\u003e fix: thermal_zone, handle EINVAL errors from sysfs reads. (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/763\"\u003e#763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/61288059f5793af40adc195d6e4346add4f85c89\"\u003e\u003ccode\u003e6128805\u003c/code\u003e\u003c/a\u003e Update common Prometheus files (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/788\"\u003e#788\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/e72bf7a2fe39830a015c17e5cbbab1ba287cd13b\"\u003e\u003ccode\u003ee72bf7a\u003c/code\u003e\u003c/a\u003e Fix bcachefs parsing (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/789\"\u003e#789\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/56add94167b80e177a915b7259dcabbc8ac8d3e3\"\u003e\u003ccode\u003e56add94\u003c/code\u003e\u003c/a\u003e nvme: Parse NVMe namespace details  (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/765\"\u003e#765\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/8fce2bdad2fb853f22d44b52c09f43abfe962626\"\u003e\u003ccode\u003e8fce2bd\u003c/code\u003e\u003c/a\u003e Add type and name to the DRM parser class (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/672\"\u003e#672\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/091f46ca6347d92a695271845df08dde73917feb\"\u003e\u003ccode\u003e091f46c\u003c/code\u003e\u003c/a\u003e class_cooling_device: ignore EINVAL (etc) when reading files. (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/783\"\u003e#783\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/5efaf0ae13b2c7e33032be909335933920e2b399\"\u003e\u003ccode\u003e5efaf0a\u003c/code\u003e\u003c/a\u003e feat: parse capabilities in /proc/pid/status (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/784\"\u003e#784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/31bc6b65b1d89d9f4718301233bd241a4636b777\"\u003e\u003ccode\u003e31bc6b6\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/checkout from 6.0.1 to 6.0.2 (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/781\"\u003e#781\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/51a5dd2044d8b6039567bdb1c7498250588b5585\"\u003e\u003ccode\u003e51a5dd2\u003c/code\u003e\u003c/a\u003e init bcachefs support (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/750\"\u003e#750\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/c33362dbe6d59af295f6ed3b6809aece4c502d17\"\u003e\u003ccode\u003ec33362d\u003c/code\u003e\u003c/a\u003e Update common Prometheus files (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/785\"\u003e#785\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/prometheus/procfs/compare/v0.19.2...v0.20.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/spf13/cobra` from 1.9.1 to 1.10.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/spf13/cobra/releases\"\u003egithub.com/spf13/cobra's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.2\u003c/h2\u003e\n\u003ch2\u003e🔧 Dependencies\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: Migrate from \u003ccode\u003egopkg.in/yaml.v3\u003c/code\u003e to \u003ccode\u003ego.yaml.in/yaml/v3\u003c/code\u003e by \u003ca href=\"https://github.com/dims\"\u003e\u003ccode\u003e@​dims\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2336\"\u003espf13/cobra#2336\u003c/a\u003e - the \u003ccode\u003egopkg.in/yaml.v3\u003c/code\u003e package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of \u003ccode\u003espf13/cobra\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📈 CI/CD\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix linter and allow CI to pass by \u003ca href=\"https://github.com/marckhouzam\"\u003e\u003ccode\u003e@​marckhouzam\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2327\"\u003espf13/cobra#2327\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: actions/setup-go v6 by \u003ca href=\"https://github.com/jpmcb\"\u003e\u003ccode\u003e@​jpmcb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2337\"\u003espf13/cobra#2337\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔥✍🏼 Docs\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd documentation for repeated flags functionality by \u003ca href=\"https://github.com/rvergis\"\u003e\u003ccode\u003e@​rvergis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2316\"\u003espf13/cobra#2316\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🍂 Refactors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: replace several vars with consts by \u003ca href=\"https://github.com/htoyoda18\"\u003e\u003ccode\u003e@​htoyoda18\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2328\"\u003espf13/cobra#2328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: change minUsagePadding from var to const by \u003ca href=\"https://github.com/ssam18\"\u003e\u003ccode\u003e@​ssam18\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2325\"\u003espf13/cobra#2325\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🤗 New Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rvergis\"\u003e\u003ccode\u003e@​rvergis\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2316\"\u003espf13/cobra#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/htoyoda18\"\u003e\u003ccode\u003e@​htoyoda18\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2328\"\u003espf13/cobra#2328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ssam18\"\u003e\u003ccode\u003e@​ssam18\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2325\"\u003espf13/cobra#2325\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dims\"\u003e\u003ccode\u003e@​dims\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2336\"\u003espf13/cobra#2336\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/spf13/cobra/compare/v1.10.1...v1.10.2\"\u003ehttps://github.com/spf13/cobra/compare/v1.10.1...v1.10.2\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThank you to our amazing contributors!!!!! 🐍 🚀\u003c/p\u003e\n\u003ch2\u003ev1.10.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Fix\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore: upgrade pflags v1.0.9 by \u003ca href=\"https://github.com/jpmcb\"\u003e\u003ccode\u003e@​jpmcb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2305\"\u003espf13/cobra#2305\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ev1.0.9 of pflags brought back \u003ccode\u003eParseErrorsWhitelist\u003c/code\u003e and marked it as deprecated\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/spf13/cobra/compare/v1.10.0...v1.10.1\"\u003ehttps://github.com/spf13/cobra/compare/v1.10.0...v1.10.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e🚨 Attention!\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump pflag to 1.0.8 by \u003ca href=\"https://github.com/tomasaschan\"\u003e\u003ccode\u003e@​tomasaschan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2303\"\u003espf13/cobra#2303\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThis version of \u003ccode\u003epflag\u003c/code\u003e carried a breaking change: it renamed \u003ccode\u003eParseErrorsWhitelist\u003c/code\u003e to \u003ccode\u003eParseErrorsAllowlist\u003c/code\u003e which can break builds if both \u003ccode\u003epflag\u003c/code\u003e and \u003ccode\u003ecobra\u003c/code\u003e are dependencies in your project.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIf you use both \u003ccode\u003epflag and \u003c/code\u003ecobra\u003ccode\u003e, upgrade \u003c/code\u003epflag\u003ccode\u003eto 1.0.8 and\u003c/code\u003ecobra\u003ccode\u003eto\u003c/code\u003e1.10.0`\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003cem\u003eor\u003c/em\u003e\u003c/strong\u003e use the newer, fixed version of \u003ccode\u003epflag\u003c/code\u003e v1.0.9 which keeps the deprecated \u003ccode\u003eParseErrorsWhitelist\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/88b30ab89da2d0d0abb153818746c5a2d30eccec\"\u003e\u003ccode\u003e88b30ab\u003c/code\u003e\u003c/a\u003e chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (\u003ca href=\"https://redirect.github.com/spf13/cobra/issues/2336\"\u003e#2336\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/346d408fe7d4be00ff9481ea4d43c4abb5e5f77d\"\u003e\u003ccode\u003e346d408\u003c/code\u003e\u003c/a\u003e fix: actions/setup-go v6 (\u003ca href=\"https://redirect.github.com/spf13/cobra/issues/2337\"\u003e#2337\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/fc81d2003469e2a5c440306d04a6d82a54065979\"\u003e\u003ccode\u003efc81d20\u003c/code\u003e\u003c/a\u003e refactor: change minUsagePadding from var to const (\u003ca href=\"https://redirect.github.com/spf13/cobra/issues/2325\"\u003e#2325\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/117698a604b65e80a1ad5b76df67b604bcd992e0\"\u003e\u003ccode\u003e117698a\u003c/code\u003e\u003c/a\u003e refactor: replace several vars with consts (\u003ca href=\"https://redirect.github.com/spf13/cobra/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/e2dd29ddc39acacf3af13013b06e1fe58b5c3599\"\u003e\u003ccode\u003ee2dd29d\u003c/code\u003e\u003c/a\u003e Add documentation for repeated flags functionality (\u003ca href=\"https://redirect.github.com/spf13/cobra/issues/2316\"\u003e#2316\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/062989255670f5e100abf70fa5e291a394915f89\"\u003e\u003ccode\u003e0629892\u003c/code\u003e\u003c/a\u003e Fix linter (\u003ca href=\"https://redirect.github.com/spf13/cobra/issues/2327\"\u003e#2327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/7da941c3547e93b8c9f70bbd3befca79c6335388\"\u003e\u003ccode\u003e7da941c\u003c/code\u003e\u003c/a\u003e chore: Bump pflag to v1.0.9 (\u003ca href=\"https://redirect.github.com/spf13/cobra/issues/2305\"\u003e#2305\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/51d675196729be769ce235b710ab7058b3aad03a\"\u003e\u003ccode\u003e51d6751\u003c/code\u003e\u003c/a\u003e Bump pflag to 1.0.8 (\u003ca href=\"https://redirect.github.com/spf13/cobra/issues/2303\"\u003e#2303\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/3f3b81882534a51628f3286e93c6842d9b2e29ea\"\u003e\u003ccode\u003e3f3b818\u003c/code\u003e\u003c/a\u003e Update README.md with new logo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/dcaf42e2633496bf97d5476d7419071e5c48f40a\"\u003e\u003ccode\u003edcaf42e\u003c/code\u003e\u003c/a\u003e Add Periscope to the list of projects using Cobra (\u003ca href=\"https://redirect.github.com/spf13/cobra/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/spf13/cobra/compare/v1.9.1...v1.10.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/spf13/pflag` from 1.0.7 to 1.0.10\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/spf13/pflag/releases\"\u003egithub.com/spf13/pflag's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.0.10\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix deprecation comment for (FlagSet.)ParseErrorsWhitelist by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/447\"\u003espf13/pflag#447\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremove uses of errors.Is, which requires go1.13, move go1.16/go1.21 tests to separate file by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/448\"\u003espf13/pflag#448\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/447\"\u003espf13/pflag#447\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/spf13/pflag/compare/v1.0.9...v1.0.10\"\u003ehttps://github.com/spf13/pflag/compare/v1.0.9...v1.0.10\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.0.9\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: Restore ParseErrorsWhitelist name for now by \u003ca href=\"https://github.com/tomasaschan\"\u003e\u003ccode\u003e@​tomasaschan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/446\"\u003espf13/pflag#446\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/spf13/pflag/compare/v1.0.8...v1.0.9\"\u003ehttps://github.com/spf13/pflag/compare/v1.0.8...v1.0.9\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.0.8\u003c/h2\u003e\n\u003ch2\u003e:warning: Breaking Change\u003c/h2\u003e\n\u003cp\u003eThis version, while only a patch bump, includes a (very minor) breaking change: the \u003ccode\u003eflag.ParseErrorsWhitelist\u003c/code\u003e struct and corresponding \u003ccode\u003eFlagSet.parseErrorsWhitelist\u003c/code\u003e field have been renamed to \u003ccode\u003eParseErrorsAllowlist\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eThis should result in compilation errors in any code that uses these fields, which can be fixed by adjusting the names at call sites. There is no change in semantics or behavior of the struct or field referred to by these names. If your code compiles without errors after bumping to/past v1.0.8, you are not affected by this change.\u003c/p\u003e\n\u003cp\u003eThe breaking change was reverted in v1.0.9, by means of re-introducing the old names with deprecation warnings. The plan is still to remove them in a future release, so if your code does depend on the old names, please change them to use the new names at your earliest convenience.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove Redundant \u0026quot;Unknown-Flag\u0026quot; Error by \u003ca href=\"https://github.com/vaguecoder\"\u003e\u003ccode\u003e@​vaguecoder\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/364\"\u003espf13/pflag#364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSwitching from whitelist to Allowlist terminology by \u003ca href=\"https://github.com/dubrie\"\u003e\u003ccode\u003e@​dubrie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/261\"\u003espf13/pflag#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOmit zero time.Time default from usage line by \u003ca href=\"https://github.com/mologie\"\u003e\u003ccode\u003e@​mologie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/438\"\u003espf13/pflag#438\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eimplement CopyToGoFlagSet by \u003ca href=\"https://github.com/pohly\"\u003e\u003ccode\u003e@​pohly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/330\"\u003espf13/pflag#330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eflag: Emulate stdlib behavior and do not print ErrHelp by \u003ca href=\"https://github.com/tmc\"\u003e\u003ccode\u003e@​tmc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/407\"\u003espf13/pflag#407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePrint Default Values of String-to-String in Sorted Order by \u003ca href=\"https://github.com/vaguecoder\"\u003e\u003ccode\u003e@​vaguecoder\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/365\"\u003espf13/pflag#365\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Don't print ErrHelp in ParseAll by \u003ca href=\"https://github.com/tomasaschan\"\u003e\u003ccode\u003e@​tomasaschan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/443\"\u003espf13/pflag#443\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReset args on re-parse even if empty by \u003ca href=\"https://github.com/tomasaschan\"\u003e\u003ccode\u003e@​tomasaschan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/444\"\u003espf13/pflag#444\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vaguecoder\"\u003e\u003ccode\u003e@​vaguecoder\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/364\"\u003espf13/pflag#364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dubrie\"\u003e\u003ccode\u003e@​dubrie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/261\"\u003espf13/pflag#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mologie\"\u003e\u003ccode\u003e@​mologie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/438\"\u003espf13/pflag#438\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pohly\"\u003e\u003ccode\u003e@​pohly\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/330\"\u003espf13/pflag#330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tmc\"\u003e\u003ccode\u003e@​tmc\u003c/cod...\n\n_Description has been truncated_","html_url":"https://github.com/istio/istio/pull/60215","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/istio%2Fistio/issues/60215","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/60215/packages"},{"uuid":"4401194680","node_id":"PR_kwDOBGvVPc7ZRKKs","number":60134,"state":"open","title":"Bump the all-dependencies group across 1 directory with 3 updates","user":"dependabot[bot]","labels":["ok-to-test","size/L","release-notes-none"],"assignees":[],"locked":false,"comments_count":5,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-07T18:48:16.000Z","updated_at":"2026-05-07T22:01:18.184Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"all-dependencies","update_count":3,"packages":[{"name":"github.com/moby/buildkit","old_version":"0.28.0","new_version":"0.29.0","repository_url":"https://github.com/moby/buildkit"},{"name":"github.com/onsi/gomega","old_version":"1.39.1","new_version":"1.40.0","repository_url":"https://github.com/onsi/gomega"},{"name":"github.com/pires/go-proxyproto","old_version":"0.11.0","new_version":"0.12.0","repository_url":"https://github.com/pires/go-proxyproto"}],"path":null,"ecosystem":"go"},"body":"Bumps the all-dependencies group with 3 updates in the / directory: [github.com/moby/buildkit](https://github.com/moby/buildkit), [github.com/onsi/gomega](https://github.com/onsi/gomega) and [github.com/pires/go-proxyproto](https://github.com/pires/go-proxyproto).\n\nUpdates `github.com/moby/buildkit` from 0.28.0 to 0.29.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.29.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.29.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eDavid Karlsson\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eBrian Ristuccia\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eMateusz Gozdek\u003c/li\u003e\n\u003cli\u003eNatnael Gebremariam\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuiltin Dockerfile frontend has been updated to v1.23.0 \u003ca href=\"https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.23.0\"\u003echangelog\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGit sources can now initialize all files from a Git checkout with commit time in the LLB API for better reproducibility. See \u003ca href=\"https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.23.0\"\u003eDockerfile changelog\u003c/a\u003e for how to enable this in the Dockerfile frontend \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6600\"\u003e#6600\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eVarious file access operations in Git and HTTP sources have been hardened for improved security \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6613\"\u003e#6613\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFrontends can now report updated \u003ccode\u003eSOURCE_DATE_EPOCH\u003c/code\u003e with result metadata that can be used by exporters \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6601\"\u003e#6601\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible panic when listing build history after recent deletions \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6614\"\u003e#6614\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible issue where builds from Git repositories could start to fail after submodule rename \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6563\"\u003e#6563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible process lifecycle event ordering issue in interactive container API that could cause deadlocks in the client \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6531\"\u003e#6531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix regression where build progress skipped the message about layers being pushed to the registry \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6587\"\u003e#6587\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible cgroup initialization failure in BuildKit container image entrypoint on some environments \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6585\"\u003e#6585\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix issue with resolving symlinks via file access methods of the Gateway API \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6559\"\u003e#6559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible \u0026quot;parent snapshot does not exist\u0026quot; error when exporting images in parallel \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6558\"\u003e#6558\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible panic from zstd compression \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6599\"\u003e#6599\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix issue where cache imports from an uninitialized local cache tag could fail the build \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6554\"\u003e#6554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIncluded CNI plugins have been updated to v1.9.1 \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6583\"\u003e#6583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIncluded QEMU emulator support has been updated to v10.2.1 \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6580\"\u003e#6580\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRunc container runtime has been updated to v1.3.5 \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6625\"\u003e#6625\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2\u003c/strong\u003e                                       v1.41.1 -\u0026gt; v1.41.4\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2/aws/protocol/eventstream\u003c/strong\u003e              v1.7.4 -\u0026gt; v1.7.5\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2/config\u003c/strong\u003e                                v1.32.7 -\u0026gt; v1.32.12\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2/credentials\u003c/strong\u003e                           v1.19.7 -\u0026gt; v1.19.12\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2/feature/ec2/imds\u003c/strong\u003e                      v1.18.17 -\u0026gt; v1.18.20\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2/internal/configsources\u003c/strong\u003e                v1.4.17 -\u0026gt; v1.4.20\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2/internal/endpoints/v2\u003c/strong\u003e                 v2.7.17 -\u0026gt; v2.7.20\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2/internal/ini\u003c/strong\u003e                          v1.8.4 -\u0026gt; v1.8.6\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2/service/internal/accept-encoding\u003c/strong\u003e      v1.13.4 -\u0026gt; v1.13.7\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/8543ce4428265d547cb009e5ad62348284497a88\"\u003e\u003ccode\u003e8543ce4\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6634\"\u003e#6634\u003c/a\u003e from moby/dependabot/github_actions/crazy-max-dot-gi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/1154c7eda062136a8a590ab22dead213ec309101\"\u003e\u003ccode\u003e1154c7e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6635\"\u003e#6635\u003c/a\u003e from moby/dependabot/github_actions/codecov/codecov-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/326e4d184d68efa25ec23314885e90dcc40c0d46\"\u003e\u003ccode\u003e326e4d1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6637\"\u003e#6637\u003c/a\u003e from moby/dependabot/github_actions/github/codeql-ac...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/676cdfa5309276128eb15e22417204955e0396a8\"\u003e\u003ccode\u003e676cdfa\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6636\"\u003e#6636\u003c/a\u003e from moby/dependabot/github_actions/actions/setup-go...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/1dd2e5057a3d357ebcc1880d544d36c249973a5f\"\u003e\u003ccode\u003e1dd2e50\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.34.1 to 4.35.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/21fb77153c31888f48126302735232d2c3b72d65\"\u003e\u003ccode\u003e21fb771\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-go from 6.3.0 to 6.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/06b36e556dfdc2296b705121ec6ace57487d1e6f\"\u003e\u003ccode\u003e06b36e5\u003c/code\u003e\u003c/a\u003e build(deps): bump codecov/codecov-action from 5.5.4 to 6.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/969f5e4030788c0fe8ab0dc8238c69427975e6ef\"\u003e\u003ccode\u003e969f5e4\u003c/code\u003e\u003c/a\u003e build(deps): bump the crazy-max-dot-github group with 2 updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f8fd302904168b49cf54db74d3020ca6907fd006\"\u003e\u003ccode\u003ef8fd302\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6623\"\u003e#6623\u003c/a\u003e from crazy-max/zizmor\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/a103fb63eb0afa54208e06e8d801812a00571cd8\"\u003e\u003ccode\u003ea103fb6\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6625\"\u003e#6625\u003c/a\u003e from thaJeztah/bump_runc_1.3\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.28.0...v0.29.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/onsi/gomega` from 1.39.1 to 1.40.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/gomega/releases\"\u003egithub.com/onsi/gomega's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.40.0\u003c/h2\u003e\n\u003ch2\u003e1.40.0\u003c/h2\u003e\n\u003cp\u003eWe're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega.  It is a limitation of the go mod toolchain that \u003cem\u003etest\u003c/em\u003e subdependencies of your project's direct dependencies get pulled in as \u003cem\u003eindirect\u003c/em\u003e dependencies.  In the case of Gomega, this ends up pulling in all of Ginkgo into your \u003ccode\u003ego.mod\u003c/code\u003e even if you are only using Gomega (Gomega uses Ginkgo for its own tests).\u003c/p\u003e\n\u003cp\u003eGoing forward, releases will strip out all tests, tidy up the \u003ccode\u003ego.mod\u003c/code\u003e and then push this stripped down version to a new \u003ccode\u003emaster-lite\u003c/code\u003e branch.  These stripped-down versions will receive the \u003ccode\u003evx.y.z\u003c/code\u003e git tag and will be picked up by the go toolchain.\u003c/p\u003e\n\u003cp\u003ePlease open an issue if this new release process causes unexpected changes for your projects.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/gomega/blob/master/CHANGELOG.md\"\u003egithub.com/onsi/gomega's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.40.0\u003c/h2\u003e\n\u003cp\u003eWe're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega.  It is a limitation of the go mod toolchain that \u003cem\u003etest\u003c/em\u003e subdependencies of your project's direct dependencies get pulled in as \u003cem\u003eindirect\u003c/em\u003e dependencies.  In the case of Gomega, this ends up pulling in all of Ginkgo into your \u003ccode\u003ego.mod\u003c/code\u003e even if you are only using Gomega (Gomega uses Ginkgo for its own tests).\u003c/p\u003e\n\u003cp\u003eGoing forward, releases will strip out all tests, tidy up the \u003ccode\u003ego.mod\u003c/code\u003e and then push this stripped down version to a new \u003ccode\u003emaster-lite\u003c/code\u003e branch.  These stripped-down versions will receive the \u003ccode\u003evx.y.z\u003c/code\u003e git tag and will be picked up by the go toolchain.\u003c/p\u003e\n\u003cp\u003ePlease open an issue if this new release process causes unexpected changes for your projects.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/87ee9d3caabba627e5951958be800828b85f0370\"\u003e\u003ccode\u003e87ee9d3\u003c/code\u003e\u003c/a\u003e v1.40.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/ea660274df4319411eea463c942d1d3a56e6c2e6\"\u003e\u003ccode\u003eea66027\u003c/code\u003e\u003c/a\u003e v1.40.0 (full)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/e3fd789576a5f5b9a35847683804349bb4bbc761\"\u003e\u003ccode\u003ee3fd789\u003c/code\u003e\u003c/a\u003e update docs to reflect new versioning strategy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/7d4ee309b2c28ab1854424f70c99a173650ab2f6\"\u003e\u003ccode\u003e7d4ee30\u003c/code\u003e\u003c/a\u003e first push to master-lite\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/e4a82d1a2de91721bb249fe9532c4d9211920363\"\u003e\u003ccode\u003ee4a82d1\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 3 to 4 (\u003ca href=\"https://redirect.github.com/onsi/gomega/issues/875\"\u003e#875\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/af627234340a2e1d40074d6e6860a1b41dc03204\"\u003e\u003ccode\u003eaf62723\u003c/code\u003e\u003c/a\u003e Bump rexml from 3.4.0 to 3.4.2 in /docs (\u003ca href=\"https://redirect.github.com/onsi/gomega/issues/870\"\u003e#870\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/e1642211b3906ab5456d9d3ed7cfd9edd11f2d63\"\u003e\u003ccode\u003ee164221\u003c/code\u003e\u003c/a\u003e Bump github.com/onsi/ginkgo/v2 from 2.28.0 to 2.28.1 (\u003ca href=\"https://redirect.github.com/onsi/gomega/issues/895\"\u003e#895\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/334a282f9d59760a3e737e5b61400a3162997803\"\u003e\u003ccode\u003e334a282\u003c/code\u003e\u003c/a\u003e Bump faraday from 2.12.2 to 2.14.1 in /docs (\u003ca href=\"https://redirect.github.com/onsi/gomega/issues/896\"\u003e#896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/onsi/gomega/compare/v1.39.1...v1.40.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/pires/go-proxyproto` from 0.11.0 to 0.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pires/go-proxyproto/releases\"\u003egithub.com/pires/go-proxyproto's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.12.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: drop Go 1.24 (EOL) in favor of 1.26 by \u003ca href=\"https://github.com/pires\"\u003e\u003ccode\u003e@​pires\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pires/go-proxyproto/pull/166\"\u003epires/go-proxyproto#166\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev1: accept plain IPv4 addresses in TCP6 headers by \u003ca href=\"https://github.com/cmarker-gl\"\u003e\u003ccode\u003e@​cmarker-gl\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pires/go-proxyproto/pull/167\"\u003epires/go-proxyproto#167\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cmarker-gl\"\u003e\u003ccode\u003e@​cmarker-gl\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pires/go-proxyproto/pull/167\"\u003epires/go-proxyproto#167\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/pires/go-proxyproto/compare/v0.11.0...v0.12.0\"\u003ehttps://github.com/pires/go-proxyproto/compare/v0.11.0...v0.12.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pires/go-proxyproto/commit/0cee3e4e1c33d9cad14cde1837d454656cd348d9\"\u003e\u003ccode\u003e0cee3e4\u003c/code\u003e\u003c/a\u003e v1: accept plain IPv4 addresses in TCP6 headers (\u003ca href=\"https://redirect.github.com/pires/go-proxyproto/issues/167\"\u003e#167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pires/go-proxyproto/commit/5c8010d2392f09ce18169631c024aceae758335a\"\u003e\u003ccode\u003e5c8010d\u003c/code\u003e\u003c/a\u003e build: drop Go 1.24 (EOL) in favor of 1.26\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/pires/go-proxyproto/compare/v0.11.0...v0.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/istio/istio/pull/60134","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/istio%2Fistio/issues/60134","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/60134/packages"},{"uuid":"4379849682","node_id":"PR_kwDOPrYSMc7YLVY4","number":28,"state":"open","title":"chore(deps): bump the go_modules group across 5 directories with 30 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-04T21:39:00.000Z","updated_at":"2026-05-04T23:56:15.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go_modules","update_count":30,"packages":[{"name":"github.com/distribution/distribution/v3","old_version":"3.0.0-20220128175647-b60926597a1b","new_version":"3.1.1","repository_url":"https://github.com/distribution/distribution"},{"name":"github.com/go-git/go-git/v5","old_version":"5.11.0","new_version":"5.18.0","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/golang-jwt/jwt/v4","old_version":"4.5.0","new_version":"4.5.1","repository_url":"https://github.com/golang-jwt/jwt"},{"name":"github.com/moby/buildkit","old_version":"0.12.5","new_version":"0.28.1","repository_url":"https://github.com/moby/buildkit"},{"name":"github.com/russellhaering/gosaml2","old_version":"0.9.1","new_version":"0.11.0","repository_url":"https://github.com/russellhaering/gosaml2"},{"name":"chainguard.dev/apko","old_version":"0.14.0","new_version":"1.2.7","repository_url":"https://github.com/chainguard-dev/apko"},{"name":"github.com/jackc/pgx/v5","old_version":"5.5.5","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/vektah/gqlparser/v2","old_version":"2.4.5","new_version":"2.5.15","repository_url":"https://github.com/vektah/gqlparser"},{"name":"github.com/go-chi/chi/v5","old_version":"5.0.10","new_version":"5.2.2","repository_url":"https://github.com/go-chi/chi"},{"name":"github.com/hashicorp/go-slug","old_version":"0.12.1","new_version":"0.16.3","repository_url":"https://github.com/hashicorp/go-slug"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 10 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/distribution/distribution/v3](https://github.com/distribution/distribution) | `3.0.0-20220128175647-b60926597a1b` | `3.1.1` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.11.0` | `5.18.0` |\n| [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) | `4.5.0` | `4.5.1` |\n| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.12.5` | `0.28.1` |\n| [github.com/russellhaering/gosaml2](https://github.com/russellhaering/gosaml2) | `0.9.1` | `0.11.0` |\n| [chainguard.dev/apko](https://github.com/chainguard-dev/apko) | `0.14.0` | `1.2.7` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.5.5` | `5.9.2` |\n| [github.com/vektah/gqlparser/v2](https://github.com/vektah/gqlparser) | `2.4.5` | `2.5.15` |\n| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.0.10` | `5.2.2` |\n| [github.com/hashicorp/go-slug](https://github.com/hashicorp/go-slug) | `0.12.1` | `0.16.3` |\n\nBumps the go_modules group with 3 updates in the /internal/cmd/progress-bot directory: [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/oauth2](https://github.com/golang/oauth2) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /lib directory: [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/oauth2](https://github.com/golang/oauth2), [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 6 updates in the /lib/managedservicesplatform directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.25.0` | `1.43.0` |\n| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.21.0` | `0.27.0` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.5.5` | `5.9.2` |\n| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.5.3` | `9.5.5` |\n| [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519) | `1.1.0` | `1.1.1` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.65.0` | `1.79.3` |\n\nBumps the go_modules group with 3 updates in the /monitoring directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) and [github.com/hashicorp/go-retryablehttp](https://github.com/hashicorp/go-retryablehttp).\n\nUpdates `github.com/distribution/distribution/v3` from 3.0.0-20220128175647-b60926597a1b to 3.1.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/distribution/distribution/releases\"\u003egithub.com/distribution/distribution/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the \u003ccode\u003ev3.1.1\u003c/code\u003e release of registry!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eThis is a stable release\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/distribution/distribution/issues\"\u003ehttps://github.com/distribution/distribution/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixes \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-41888\"\u003eCVE-2026-41888\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBounds-check the file basename in PurgeUploads Walk callback\u003c/li\u003e\n\u003cli\u003eAdd S3 Express One Zone support to the S3 storage driver (\u003ca href=\"https://redirect.github.com/distribution/distribution/issues/4858\"\u003e#4858\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix tag list endpoint in proxy mode (\u003ca href=\"https://redirect.github.com/distribution/distribution/issues/4846\"\u003e#4846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClamp oversized \u003ccode\u003en\u003c/code\u003e query parameter in proxy mode instead of returning 400 (\u003ca href=\"https://redirect.github.com/distribution/distribution/issues/4856\"\u003e#4856\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSee the full changelog below for the full list of changes.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003einternal/client/auth/challenge: cleanups and minor refactor by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4832\"\u003edistribution/distribution#4832\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp from 0.18.0 to 0.19.0 in the go_modules group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4843\"\u003edistribution/distribution#4843\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0 in the go_modules group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4850\"\u003edistribution/distribution#4850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.34.1 to 4.35.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4840\"\u003edistribution/distribution#4840\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(build): Bump go version to latest by \u003ca href=\"https://github.com/milosgajdos\"\u003e\u003ccode\u003e@​milosgajdos\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4851\"\u003edistribution/distribution#4851\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: use slices.Backward to simplify the code by \u003ca href=\"https://github.com/chuanshanjida\"\u003e\u003ccode\u003e@​chuanshanjida\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4848\"\u003edistribution/distribution#4848\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(proxy): fix tag list endpoint in proxy mode by \u003ca href=\"https://github.com/njucjc\"\u003e\u003ccode\u003e@​njucjc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4846\"\u003edistribution/distribution#4846\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate docker-compose structure in deploying.md by \u003ca href=\"https://github.com/jdg71nl\"\u003e\u003ccode\u003e@​jdg71nl\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4855\"\u003edistribution/distribution#4855\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4854\"\u003edistribution/distribution#4854\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4852\"\u003edistribution/distribution#4852\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump docker/login-action from 4.0.0 to 4.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4847\"\u003edistribution/distribution#4847\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump docker/bake-action from 7.0.0 to 7.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4853\"\u003edistribution/distribution#4853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(proxy): clamp oversized n query param instead of returning 400 by \u003ca href=\"https://github.com/milosgajdos\"\u003e\u003ccode\u003e@​milosgajdos\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4856\"\u003edistribution/distribution#4856\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(s3): add express zone one support to S3 driver by \u003ca href=\"https://github.com/milosgajdos\"\u003e\u003ccode\u003e@​milosgajdos\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4858\"\u003edistribution/distribution#4858\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(storage): bounds-check the file basename in PurgeUploads Walk callback by \u003ca href=\"https://github.com/SAY-5\"\u003e\u003ccode\u003e@​SAY-5\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4860\"\u003edistribution/distribution#4860\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(release): prepare for v3.1.1 release by \u003ca href=\"https://github.com/milosgajdos\"\u003e\u003ccode\u003e@​milosgajdos\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4864\"\u003edistribution/distribution#4864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chuanshanjida\"\u003e\u003ccode\u003e@​chuanshanjida\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4848\"\u003edistribution/distribution#4848\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jdg71nl\"\u003e\u003ccode\u003e@​jdg71nl\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4855\"\u003edistribution/distribution#4855\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SAY-5\"\u003e\u003ccode\u003e@​SAY-5\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4860\"\u003edistribution/distribution#4860\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/distribution/distribution/compare/v3.1.0...v3.1.1\"\u003ehttps://github.com/distribution/distribution/compare/v3.1.0...v3.1.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the \u003ccode\u003ev3.1.0\u003c/code\u003e release of registry!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eThis is a stable release\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/distribution/distribution/issues\"\u003ehttps://github.com/distribution/distribution/issues\u003c/a\u003e.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/distribution/distribution/commits/v3.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.11.0 to 5.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpand packfile checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1836\"\u003ego-git/go-git#1836\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebackport plumbing: format/idxfile, prevent panic by \u003ca href=\"https://github.com/swills\"\u003e\u003ccode\u003e@​swills\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1732\"\u003ego-git/go-git#1732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[backport] build: test, Fix build on Windows. by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1734\"\u003ego-git/go-git#1734\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/ea3e7ec9dfc54f577a01afb4dd601c0284604264\"\u003e\u003ccode\u003eea3e7ec\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2004\"\u003e#2004\u003c/a\u003e from go-git/v5-http-hardening\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bcd20a9c525826081262a06a9ed9c3167abfcd53\"\u003e\u003ccode\u003ebcd20a9\u003c/code\u003e\u003c/a\u003e plumbing: transport/http, Add support for followRedirects policy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/45ae193b3a60aa8ec8a3e373f7265a7819473d5f\"\u003e\u003ccode\u003e45ae193\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1944\"\u003e#1944\u003c/a\u003e from go-git/fix-perms\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fda4f7464b597ff33d2dea1c026482a5e900037c\"\u003e\u003ccode\u003efda4f74\u003c/code\u003e\u003c/a\u003e storage: filesystem/dotgit, Skip writing pack files that already exist on disk\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/2212dc7caeb2a389fe2129923811ef63f75a557a\"\u003e\u003ccode\u003e2212dc7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1941\"\u003e#1941\u003c/a\u003e from go-git/renovate/releases/v5.x-go-github.com-go-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/ebb2d7da7f5d5aebeaa0b5e13276d72d602c1ae3\"\u003e\u003ccode\u003eebb2d7d\u003c/code\u003e\u003c/a\u003e build: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5e23dfd02db92644dc4a3358ceb297fce875b772\"\u003e\u003ccode\u003e5e23dfd\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1937\"\u003e#1937\u003c/a\u003e from pjbgf/idx-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6b38a326816b80f64c20cc0e6113958b65c05a1c\"\u003e\u003ccode\u003e6b38a32\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1935\"\u003e#1935\u003c/a\u003e from pjbgf/index-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/cd757fcb856a2dcc5fff6c110320a8ff62e99513\"\u003e\u003ccode\u003ecd757fc\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, Fix version and fanout checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3ec0d70cb687ae1da5f4d18faa4229bd971a8710\"\u003e\u003ccode\u003e3ec0d70\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Fix tree extension invalidated entry parsing\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.11.0...v5.18.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/golang-jwt/jwt/v4` from 4.5.0 to 4.5.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang-jwt/jwt/releases\"\u003egithub.com/golang-jwt/jwt/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.5.1\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cp\u003eUnclear documentation of the error behavior in \u003ccode\u003eParseWithClaims\u003c/code\u003e in \u0026lt;= 4.5.0 could lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by \u003ccode\u003eParseWithClaims\u003c/code\u003e return both error codes. If users only check for the \u003ccode\u003ejwt.ErrTokenExpired \u003c/code\u003e using \u003ccode\u003eerror.Is\u003c/code\u003e, they will ignore the embedded \u003ccode\u003ejwt.ErrTokenSignatureInvalid\u003c/code\u003e and thus potentially accept invalid tokens.\u003c/p\u003e\n\u003cp\u003eThis issue was documented in \u003ca href=\"https://github.com/golang-jwt/jwt/security/advisories/GHSA-29wx-vh33-7x7r\"\u003ehttps://github.com/golang-jwt/jwt/security/advisories/GHSA-29wx-vh33-7x7r\u003c/a\u003e and fixed in this release.\u003c/p\u003e\n\u003cp\u003eNote: \u003ccode\u003ev5\u003c/code\u003e was not affected by this issue. So upgrading to this release version is also recommended.\u003c/p\u003e\n\u003ch1\u003eWhat's Changed\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eBack-ported error-handling logic in \u003ccode\u003eParseWithClaims\u003c/code\u003e from \u003ccode\u003ev5\u003c/code\u003e branch. This fixes \u003ca href=\"https://github.com/golang-jwt/jwt/security/advisories/GHSA-29wx-vh33-7x7r\"\u003ehttps://github.com/golang-jwt/jwt/security/advisories/GHSA-29wx-vh33-7x7r\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v4.5.0...v4.5.1\"\u003ehttps://github.com/golang-jwt/jwt/compare/v4.5.0...v4.5.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/7b1c1c00a171c6c79bbdb40e4ce7d197060c1c2c\"\u003e\u003ccode\u003e7b1c1c0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v4.5.0...v4.5.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/moby/buildkit` from 0.12.5 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.28.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix insufficient validation of Git URL \u003ccode\u003e#ref:subdir\u003c/code\u003e fragments that could allow access to restricted files outside the checked-out repository root. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg\"\u003eGHSA-4vrq-3vrq-g6gg\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a vulnerability where an untrusted custom frontend could cause files to be written outside the BuildKit state directory. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj\"\u003eGHSA-4c29-8rgm-jvjj\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a panic when processing invalid \u003ccode\u003e.dockerignore\u003c/code\u003e patterns during \u003ccode\u003eCOPY\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/patternmatcher/issues/9\"\u003emoby/patternmatcher#9\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/moby/patternmatcher\u003c/strong\u003e  v0.6.0 -\u0026gt; v0.6.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.28.0\"\u003ev0.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.28.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.28.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.28.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eAmr Mahdi\u003c/li\u003e\n\u003cli\u003eDan Duvall\u003c/li\u003e\n\u003cli\u003eDavid Karlsson\u003c/li\u003e\n\u003cli\u003eJonas Geiler\u003c/li\u003e\n\u003cli\u003eKevin L.\u003c/li\u003e\n\u003cli\u003ersteube\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8\"\u003e\u003ccode\u003e45b038c\u003c/code\u003e\u003c/a\u003e git: normalize and validate subdir paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f5462c216098af766f97ea4cb328e65c6d8f7256\"\u003e\u003ccode\u003ef5462c2\u003c/code\u003e\u003c/a\u003e git: harden ref arg handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/71577a5da7a2b3ab75a90c2cfedfda0c27d1ef40\"\u003e\u003ccode\u003e71577a5\u003c/code\u003e\u003c/a\u003e source: extract SafeFileName into shared pathutil package\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df4378316f3b000403d097551a8139a700bd823d\"\u003e\u003ccode\u003edf43783\u003c/code\u003e\u003c/a\u003e source/http: use os.Root for saved file operations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/9ce6f62aca0653657047ee613cdef22f38b31244\"\u003e\u003ccode\u003e9ce6f62\u003c/code\u003e\u003c/a\u003e source/http: sanitize downloaded filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4\"\u003e\u003ccode\u003e099cf80\u003c/code\u003e\u003c/a\u003e executor: validate container IDs centrally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/2642113bbc9d969d223c37aaabca4b50613fddf9\"\u003e\u003ccode\u003e2642113\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e from thaJeztah/0.28_backport_bump_patternmatcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/802da78332d9f2c6c9d856c1648ab52c701076fa\"\u003e\u003ccode\u003e802da78\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/patternmatcher v0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/5245d869d85d9c98f986b600584c332a3b001986\"\u003e\u003ccode\u003e5245d86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6551\"\u003e#6551\u003c/a\u003e from tonistiigi/v0.28-cherry-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/90ee5deef6c6efcb82358eb48d76235191196db1\"\u003e\u003ccode\u003e90ee5de\u003c/code\u003e\u003c/a\u003e vendor: update x/net to v0.51.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.12.5...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/russellhaering/gosaml2` from 0.9.1 to 0.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/russellhaering/gosaml2/releases\"\u003egithub.com/russellhaering/gosaml2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReject unsigned SAML \u003ccode\u003eLogoutRequest\u003c/code\u003e when signature validation is enabled. Previously, \u003ccode\u003eValidateEncodedLogoutRequestPOST\u003c/code\u003e silently accepted unsigned requests even when \u003ccode\u003eSkipSignatureValidation\u003c/code\u003e was \u003ccode\u003efalse\u003c/code\u003e. (GHSA-pcgw-qcv5-h8ch)\u003c/li\u003e\n\u003cli\u003eSecurity hardening: CBC bounds check to prevent panics from crafted ciphertext, replaced \u003ccode\u003epanic()\u003c/code\u003e calls with error returns, and assertion signatures within a signed Response envelope are now verified when present (previously they were skipped entirely, which could allow XML wrapping attacks)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd oss-fuzz integration\u003c/li\u003e\n\u003cli\u003eBump minimum Go version to 1.25\u003c/li\u003e\n\u003cli\u003eUpdate dependencies: goxmldsig v1.6.0, etree v1.6.0, testify v1.11.1\u003c/li\u003e\n\u003cli\u003eBump all GitHub Actions to latest versions\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/gosaml2/compare/v0.10.0...v0.11.0\"\u003ehttps://github.com/russellhaering/gosaml2/compare/v0.10.0...v0.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport encryption and signing keys that implement crypto.Signer by \u003ca href=\"https://github.com/nicksnyder\"\u003e\u003ccode\u003e@​nicksnyder\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/pull/131\"\u003erussellhaering/gosaml2#131\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid panic when the encrypted data has wrong size for CBC by \u003ca href=\"https://github.com/fformica\"\u003e\u003ccode\u003e@​fformica\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/pull/195\"\u003erussellhaering/gosaml2#195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSecurity hardening by \u003ca href=\"https://github.com/ahacker1-securesaml\"\u003e\u003ccode\u003e@​ahacker1-securesaml\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDependency and CI updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nicksnyder\"\u003e\u003ccode\u003e@​nicksnyder\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/pull/131\"\u003erussellhaering/gosaml2#131\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fformica\"\u003e\u003ccode\u003e@​fformica\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/pull/195\"\u003erussellhaering/gosaml2#195\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/gosaml2/compare/v0.9.1...v0.10.0\"\u003ehttps://github.com/russellhaering/gosaml2/compare/v0.9.1...v0.10.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/636e7dda202a4d669644e72404a82616ffcbe004\"\u003e\u003ccode\u003e636e7dd\u003c/code\u003e\u003c/a\u003e Bump all GitHub Actions to latest versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/1e9cc447527b4031ffd8e7a2cb64b99289ffde29\"\u003e\u003ccode\u003e1e9cc44\u003c/code\u003e\u003c/a\u003e Bump minimum Go version to 1.25 and update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/7159bbee574ae311e3c995df506c2e61cf2c232a\"\u003e\u003ccode\u003e7159bbe\u003c/code\u003e\u003c/a\u003e Reject unsigned LogoutRequest when signature validation is enabled\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/4ddcc822c3c2bb6676221cbf2259e141b2f2e315\"\u003e\u003ccode\u003e4ddcc82\u003c/code\u003e\u003c/a\u003e Security hardening: CBC bounds check, panic removal, assertion signature veri...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/d57d10562c0a9243d5a6d86fff5067d34c7f045f\"\u003e\u003ccode\u003ed57d105\u003c/code\u003e\u003c/a\u003e Add oss-fuzz integration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/e8596e7457e1657e90dd2fb18da03e03fc4ae1a4\"\u003e\u003ccode\u003ee8596e7\u003c/code\u003e\u003c/a\u003e Fix tests broken by expired IDP test certificate\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/5d20d420e18a8e08e870d145be26bc8110073d90\"\u003e\u003ccode\u003e5d20d42\u003c/code\u003e\u003c/a\u003e Bump github.com/beevik/etree from 1.5.0 to 1.5.1 (\u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/issues/212\"\u003e#212\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/115aa21abac634a1c9b68c2a30505b60b148f8cc\"\u003e\u003ccode\u003e115aa21\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 3.28.12 to 3.28.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/cdd66bccd151b682fe99fec82a1c8c4ecdba8ff0\"\u003e\u003ccode\u003ecdd66bc\u003c/code\u003e\u003c/a\u003e Tidy dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/3418f9ae09063ff8df0ce1bd93f24e538e614def\"\u003e\u003ccode\u003e3418f9a\u003c/code\u003e\u003c/a\u003e Avoid panic when the encrypted data has wrong size for CBC\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/russellhaering/gosaml2/compare/v0.9.1...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/russellhaering/goxmldsig` from 1.4.0 to 1.6.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/russellhaering/goxmldsig/releases\"\u003egithub.com/russellhaering/goxmldsig's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.6.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSecurity:\u003c/strong\u003e Fix possible signature validation bypass caused by loop variable capture in \u003ccode\u003evalidateSignature\u003c/code\u003e (GHSA-479m-364c-43vc)\u003c/li\u003e\n\u003cli\u003eBump minimum Go version to 1.23\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003egithub.com/beevik/etree\u003c/code\u003e to v1.6.0\u003c/li\u003e\n\u003cli\u003eAdd fuzz tests for XML signature validation and canonicalization\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0\"\u003ehttps://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.5.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump dependencies\u003c/li\u003e\n\u003cli\u003eUpdate GitHub workflows\u003c/li\u003e\n\u003cli\u003eSecurity hardening by \u003ca href=\"https://github.com/ahacker1-securesaml\"\u003e\u003ccode\u003e@​ahacker1-securesaml\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/goxmldsig/compare/v1.4.0...v1.5.0\"\u003ehttps://github.com/russellhaering/goxmldsig/compare/v1.4.0...v1.5.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/878c8c615feb628064040115d00e105a137fcfa7\"\u003e\u003ccode\u003e878c8c6\u003c/code\u003e\u003c/a\u003e Apply go fix ./...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/db3d1e31f7535d7f5debb49851b9e9a2ff08b936\"\u003e\u003ccode\u003edb3d1e3\u003c/code\u003e\u003c/a\u003e Fix loop variable capture bug in validateSignature\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/4f576b89acf01f68983ca5cb9dcebd0b460234bc\"\u003e\u003ccode\u003e4f576b8\u003c/code\u003e\u003c/a\u003e Bump dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/79c29ee3ed2da54553a4132b372ced83185fcf12\"\u003e\u003ccode\u003e79c29ee\u003c/code\u003e\u003c/a\u003e Rename FuzzValidate to FuzzValidateXML to avoid name collision\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/ac7bf745b9fd3d92460ad9be3459a97b0e3bf89f\"\u003e\u003ccode\u003eac7bf74\u003c/code\u003e\u003c/a\u003e Add fuzz tests for XML signature validation and canonicalization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/a5805dfad93fc67a2106a1dc6d881df83769e3eb\"\u003e\u003ccode\u003ea5805df\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 2.13.4 to 3.28.17 (\u003ca href=\"https://redirect.github.com/russellhaering/goxmldsig/issues/155\"\u003e#155\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/7dac9ec3b2a1a336d73ff091fba4131d186dfec6\"\u003e\u003ccode\u003e7dac9ec\u003c/code\u003e\u003c/a\u003e Update GitHub Workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/1bf54ca740682fac1149814344c24c722fde8238\"\u003e\u003ccode\u003e1bf54ca\u003c/code\u003e\u003c/a\u003e Bump dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/e1c8a5b89d1d03089aa1a0ec546b33aaf80ee02f\"\u003e\u003ccode\u003ee1c8a5b\u003c/code\u003e\u003c/a\u003e Refactor to help eliminate potential vulnerabilities:\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/2ac5490a2441a3484e030c5cfeb02ce62886c01a\"\u003e\u003ccode\u003e2ac5490\u003c/code\u003e\u003c/a\u003e Refactor .verifyCertificate to obtain the certificate from an identifier from...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/russellhaering/goxmldsig/compare/v1.4.0...v1.6.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.27.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.27.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.27.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.25.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.24.0 to 0.49.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.22.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.26.0 to 0.52.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/316e20ce34d380337f7983808c26948232e16455\"\u003e\u003ccode\u003e316e20c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/9767a42264fa70b674c643d0c87ee95c309a4553\"\u003e\u003ccode\u003e9767a42\u003c/code\u003e\u003c/a\u003e internal/http3: add support for plugging into net/http\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/4a812844d820f49985ee15998af285c43b0a6b96\"\u003e\u003ccode\u003e4a81284\u003c/code\u003e\u003c/a\u003e http2: update docs to disrecommend this package\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/dec6603c16144712aab7f44821471346b35a2230\"\u003e\u003ccode\u003edec6603\u003c/code\u003e\u003c/a\u003e dns/dnsmessage: reject too large of names early during unpack\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/8afa12f927391ba32da2b75b864a3ad04cac6376\"\u003e\u003ccode\u003e8afa12f\u003c/code\u003e\u003c/a\u003e http2: deprecate write schedulers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/38019a2dbc2645a4c06a1e983681eefb041171c8\"\u003e\u003ccode\u003e38019a2\u003c/code\u003e\u003c/a\u003e http2: add missing copyright header to export_test.go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/039b87fac41ca283465e12a3bcc170ccd6c92f84\"\u003e\u003ccode\u003e039b87f\u003c/code\u003e\u003c/a\u003e internal/http3: return error when Write is used after status 304 is set\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/6267c6c4c825a78e4c9cbdc19c705bc81716597c\"\u003e\u003ccode\u003e6267c6c\u003c/code\u003e\u003c/a\u003e internal/http3: add HTTP 103 Early Hints support to ClientConn\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/591bdf35bce56ad50f53555c3cbb31e4bdda2d58\"\u003e\u003ccode\u003e591bdf3\u003c/code\u003e\u003c/a\u003e internal/http3: add HTTP 103 Early Hints support to Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1faa6d8722697d9a1d8d4e973b3c46c7a5563f6c\"\u003e\u003ccode\u003e1faa6d8\u003c/code\u003e\u003c/a\u003e internal/http3: avoid potential race when aborting RoundTrip\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.26.0...v0.52.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/oauth2` from 0.21.0 to 0.35.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/681b4d8edca1bcfea5bce685d77ea7b82ed3e7b3\"\u003e\u003ccode\u003e681b4d8\u003c/code\u003e\u003c/a\u003e jws: split token into fixed number of parts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3f78298beea38fb76a3fbca33e3056f4b7eb5502\"\u003e\u003ccode\u003e3f78298\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/109dabf9017129171d1807e485ca5633ecd095ac\"\u003e\u003ccode\u003e109dabf\u003c/code\u003e\u003c/a\u003e endpoints: add links/provider for Discord\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/ac571fa341c2a2b979d2b2c8341fd24767ef5d47\"\u003e\u003ccode\u003eac571fa\u003c/code\u003e\u003c/a\u003e oauth2: fix docs for Config.DeviceAuth\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/314ee5b92bf23c4973aa8e61eba3ff458e80eef2\"\u003e\u003ccode\u003e314ee5b\u003c/code\u003e\u003c/a\u003e endpoints: add patreon endpoint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/b9c813be7d0ec3262d46deb8677ba5cda93d95ec\"\u003e\u003ccode\u003eb9c813b\u003c/code\u003e\u003c/a\u003e google: add warning about externally-provided credentials\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/49a531d12a9ad6fa9f5a070d577ac752ada772c9\"\u003e\u003ccode\u003e49a531d\u003c/code\u003e\u003c/a\u003e all: make method and struct comments match the names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/22134a41033e44c2cd074106770ab5b7ca910d15\"\u003e\u003ccode\u003e22134a4\u003c/code\u003e\u003c/a\u003e README: don't recommend go get\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3e6480915d39dd1a80fa460e56413857f02cc1b9\"\u003e\u003ccode\u003e3e64809\u003c/code\u003e\u003c/a\u003e x/oauth2: add Token.ExpiresIn\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/16a9973a41c72ea3e252e9c14be34fcaa2928211\"\u003e\u003ccode\u003e16a9973\u003c/code\u003e\u003c/a\u003e jwt: rename example to avoid vet error\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/oauth2/compare/v0.19.0...v0.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `chainguard.dev/apko` from 0.14.0 to 1.2.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/chainguard-dev/apko/releases\"\u003echainguard.dev/apko's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease v1.2.7\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ea118c3d604107532b5525bd4bee2fb369a6228aa apk: verify package control hash against signed APKINDEX (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2191\"\u003e#2191\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.2.6\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e09b82d635baa11223ba5b28b421069cadcddb5d9 fs: strip special mode bits in OpenFile/WriteFile (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2188\"\u003e#2188\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.2.5\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ef5a96e1299ac81c7ea9441705ec467688086f442 fs: Scope all DirFS operations through os.Root (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2187\"\u003e#2187\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.2.4\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e4556aed64043278fb8fa429e620fdbbe2a9e3254 build(deps): bump k8s.io/apimachinery from 0.35.3 to 0.35.4 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2180\"\u003e#2180\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.2.3\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e6f90ec8289c6c04dfacaf2768d2755f6780f6e66 build(deps): bump google.golang.org/api from 0.274.0 to 0.275.0 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2169\"\u003e#2169\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.2.2\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e20685930112eadc3617167a5a49796f6281020cd build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5 in the go_modules group across 1 directory (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2159\"\u003e#2159\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.2.1\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e968d5362f10b21de0cd0c0b1d9a18e1a51ec7df7 build(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.17.2 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2156\"\u003e#2156\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.2.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e392136f2f7fc2042fc5a501f7bcb1e236c867115 build(deps): bump github/codeql-action from 4.35.0 to 4.35.1 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2150\"\u003e#2150\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.1.16\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e861f83f69e6fa9114405a2f7bb5cf6585ad00421 build(deps): bump github/codeql-action from 4.33.0 to 4.34.0 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2138\"\u003e#2138\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.1.15\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e8c0e945faa8cc5d19dc812727463ba23345b0d03 build(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2129\"\u003e#2129\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.1.14\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e238cd7b8aec624af67bcd08492c7bb4412dc119d Add support for custom certificate packages (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2105\"\u003e#2105\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.1.13\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e0a1df0f2e7cb29b95680746b8bbb0c03e5a22511 build(deps): bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2106\"\u003e#2106\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.1.12\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chainguard-dev/apko/commit/a118c3d604107532b5525bd4bee2fb369a6228aa\"\u003e\u003ccode\u003ea118c3d\u003c/code\u003e\u003c/a\u003e apk: verify package control hash against signed APKINDEX (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2191\"\u003e#2191\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chainguard-dev/apko/commit/6604826b19e36e9bc6e196592800fad93738f4a1\"\u003e\u003ccode\u003e6604826\u003c/code\u003e\u003c/a\u003e apk: guard non-RSA JWKS keys in DiscoverKeys (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2190\"\u003e#2190\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chainguard-dev/apko/commit/09b82d635baa11223ba5b28b421069cadcddb5d9\"\u003e\u003ccode\u003e09b82d6\u003c/code\u003e\u003c/a\u003e fs: strip special mode bits in OpenFile/WriteFile (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2188\"\u003e#2188\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chainguard-dev/apko/commit/f5a96e1299ac81c7ea9441705ec467688086f442\"\u003e\u003ccode\u003ef5a96e1\u003c/code\u003e\u003c/a\u003e fs: Scope all DirFS operations through os.Root (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2187\"\u003e#2187\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chainguard-dev/apko/commit/503b545c71921d5c099d4ced162a801bc2c75656\"\u003e\u003ccode\u003e503b545\u003c/code\u003e\u003c/a\u003e build(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2184\"\u003e#2184\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chainguard-dev/apko/commit/481840ffe25e5cee87dd03972dd2e4722b452b5f\"\u003e\u003ccode\u003e481840f\u003c/code\u003e\u003c/a\u003e build(deps): bump chainguard-dev/actions from 1.6.14 to 1.6.15 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2182\"\u003e#2182\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chainguard-dev/apko/commit/4556aed64043278fb8fa429e620fdbbe2a9e3254\"\u003e\u003ccode\u003e4556aed\u003c/code\u003e\u003c/a\u003e build(deps): bump k8s.io/apimachinery from 0.35.3 to 0.35.4 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2180\"\u003e#2180\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chainguard-dev/apko/commit/3e3a0a71d086470f0afd9d0c1e814151efc8e214\"\u003e\u003ccode\u003e3e3a0a7\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0 (\u003ca href=\"https:/...\n\n_Description has been truncated_\n\n---\n\n🔄 This PR updates Go module dependencies across 5 directories with 30 package updates, including major version bumps for Go runtime (1.24.0-1.25.0), security libraries, and cloud services SDKs. The changes primarily focus on security patches, performance improvements, and maintaining compatibility with the latest ecosystem standards.\n\n\u003cdetails\u003e\n\u003csummary\u003e🔍 \u003cstrong\u003eDetailed Analysis\u003c/strong\u003e\u003c/summary\u003e\n\n### Key Changes\n- **Go Runtime Upgrade**: Updated Go version from 1.21/1.22 to 1.24.0-1.25.0 across all modules, removing toolchain specifications\n- **Security Updates**: Major version bumps for security-critical packages like `github.com/go-git/go-git/v5` (5.11.0 → 5.18.0) and `github.com/golang-jwt/jwt/v4` (4.5.0 → 4.5.1) addressing CVEs\n- **Cloud Services**: Updated Google Cloud, Azure, and OpenTelemetry packages with significant version jumps (e.g., `go.opentelemetry.io/otel` 1.25.0 → 1.43.0)\n- **Database \u0026 Redis**: PostgreSQL driver `github.com/jackc/pgx/v5` (5.5.5 → 5.9.2) and Redis client updates for improved performance\n- **Build Tools**: Major update to `github.com/moby/buildkit` (0.12.5 → 0.28.1) and container ecosystem packages\n\n### Technical Implementation\n```mermaid\nflowchart TD\n    A[Dependabot Scan] --\u003e B[Security Vulnerability Detection]\n    B --\u003e C[Automated Dependency Updates]\n    C --\u003e D[Go Module Updates Across 5 Directories]\n    D --\u003e E[progress-bot/]\n    D --\u003e F[lib/]\n    D --\u003e G[lib/managedservicesplatform/]\n    D --\u003e H[monitoring/]\n    E --\u003e I[Go 1.24.0 + gRPC/OAuth2 updates]\n    F --\u003e J[Go 1.24.0 + Redis/PostgreSQL updates]\n    G --\u003e K[Go 1.25.0 + OpenTelemetry major updates]\n    H --\u003e L[Go 1.24.0 + Logging/HTTP client updates]\n```\n\n### Impact\n- **Security Enhancement**: Addresses multiple CVEs including JWT parsing vulnerabilities, Git URL validation issues, and SAML signature bypass risks\n- **Performance Improvements**: Updated packages include optimizations for slice handling, HTTP response processing, and database connection pooling\n- **Ecosystem Compatibility**: Ensures compatibility with latest Go runtime features and modern cloud service APIs\n- **Maintenance Reduction**: Automated dependency management reduces manual security patch tracking and technical debt\n\n\u003c/details\u003e\n\n_Created with [Palmier](https://www.palmier.io)_","html_url":"https://github.com/GlacierEQ/sourcegraph-public-snapshot/pull/28","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/GlacierEQ%2Fsourcegraph-public-snapshot/issues/28","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/28/packages"},{"uuid":"4377800509","node_id":"PR_kwDOCqObs87YEjOE","number":963,"state":"open","title":"Bump the go_modules group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["size/L","needs-ok-to-test","dependencies"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-04T15:38:44.000Z","updated_at":"2026-05-04T15:42:55.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":8,"packages":[{"name":"github.com/containerd/containerd","old_version":"1.7.27","new_version":"1.7.29","repository_url":"https://github.com/containerd/containerd"},{"name":"github.com/docker/cli","old_version":"28.2.2+incompatible","new_version":"29.2.0+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/go-git/go-git/v5","old_version":"5.16.2","new_version":"5.18.0","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/go-jose/go-jose/v4","old_version":"4.1.3","new_version":"4.1.4","repository_url":"https://github.com/go-jose/go-jose"},{"name":"github.com/go-viper/mapstructure/v2","old_version":"2.3.0","new_version":"2.4.0","repository_url":"https://github.com/go-viper/mapstructure"},{"name":"github.com/moby/buildkit","old_version":"0.23.2","new_version":"0.28.1","repository_url":"https://github.com/moby/buildkit"},{"name":"go.opentelemetry.io/otel","old_version":"1.40.0","new_version":"1.41.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"go.opentelemetry.io/otel/sdk","old_version":"1.39.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 8 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/containerd/containerd](https://github.com/containerd/containerd) | `1.7.27` | `1.7.29` |\n| [github.com/docker/cli](https://github.com/docker/cli) | `28.2.2+incompatible` | `29.2.0+incompatible` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.16.2` | `5.18.0` |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.3` | `4.1.4` |\n| [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) | `2.3.0` | `2.4.0` |\n| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.23.2` | `0.28.1` |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.41.0` |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.39.0` | `1.43.0` |\n\n\nUpdates `github.com/containerd/containerd` from 1.7.27 to 1.7.29\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/containerd/containerd/releases\"\u003egithub.com/containerd/containerd's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003econtainerd 1.7.29\u003c/h2\u003e\n\u003cp\u003eWelcome to the v1.7.29 release of containerd!\u003c/p\u003e\n\u003cp\u003eThe twenty-ninth patch release for containerd 1.7 contains various fixes\nand updates including security patches.\u003c/p\u003e\n\u003ch3\u003eSecurity Updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003econtainerd\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w\"\u003e\u003cstrong\u003eGHSA-pwhc-rpq9-4c8w\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2\"\u003e\u003cstrong\u003eGHSA-m6hq-p25p-ffr2\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003erunc\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r\"\u003e\u003cstrong\u003eGHSA-qw9x-cqr3-wc7r\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm\"\u003e\u003cstrong\u003eGHSA-cgrx-mc8f-2prm\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2\"\u003e\u003cstrong\u003eGHSA-9493-h29p-rfm2\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eHighlights\u003c/h3\u003e\n\u003ch4\u003eImage Distribution\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eUpdate differ to handle zstd media types\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12018\"\u003e#12018\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eRuntime\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eUpdate runc binary to v1.3.3\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12480\"\u003e#12480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFix lost container logs from quickly closing io\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12375\"\u003e#12375\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/containerd/containerd/issues\"\u003ehttps://github.com/containerd/containerd/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDerek McGowan\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003ePhil Estes\u003c/li\u003e\n\u003cli\u003eAustin Vazquez\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eningmingxiao\u003c/li\u003e\n\u003cli\u003eMaksym Pavlenko\u003c/li\u003e\n\u003cli\u003eStepSecurity Bot\u003c/li\u003e\n\u003cli\u003ewheat2018\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/442cb34bda9a6a0fed82a2ca7cade05c5c749582\"\u003e\u003ccode\u003e442cb34bd\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/0450f046e6942e513d0ebf1ef5c2aff13daa187f\"\u003e\u003ccode\u003e0450f046e\u003c/code\u003e\u003c/a\u003e Fix directory permissions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/e5cb6ddb7a7730c24253a94d7fdb6bbe13dba6f7\"\u003e\u003ccode\u003ee5cb6ddb7\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/442cb34bda9a6a0fed82a2ca7cade05c5c749582\"\u003e\u003ccode\u003e442cb34\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/e5cb6ddb7a7730c24253a94d7fdb6bbe13dba6f7\"\u003e\u003ccode\u003ee5cb6dd\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/9772966401ad3c33a6cd824632f0c61e5049f3a5\"\u003e\u003ccode\u003e9772966\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/12486\"\u003e#12486\u003c/a\u003e from dmcgowan/prepare-v1.7.29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/1fc2daaf3ed53f4c9e76fbc5786a6f1ae3bb885f\"\u003e\u003ccode\u003e1fc2daa\u003c/code\u003e\u003c/a\u003e Prepare release notes for v1.7.29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/93f710a528958474f95a95e54516624ef832d80f\"\u003e\u003ccode\u003e93f710a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/12480\"\u003e#12480\u003c/a\u003e from k8s-infra-cherrypick-robot/cherry-pick-12475-t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/68d04befab3284f1dfe2a9f5691ea5da76daace7\"\u003e\u003ccode\u003e68d04be\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/12471\"\u003e#12471\u003c/a\u003e from austinvazquez/1_7_update_ci_go_and_images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/3f5f9f872707a743563d316e85e530193a2e30ac\"\u003e\u003ccode\u003e3f5f9f8\u003c/code\u003e\u003c/a\u003e runc: Update runc binary to v1.3.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/667409fb63098cb80280940ab06038114e7712da\"\u003e\u003ccode\u003e667409f\u003c/code\u003e\u003c/a\u003e ci: bump Go 1.24.9, 1.25.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/294f8c027b607c4450b3e52f44280581a737a73f\"\u003e\u003ccode\u003e294f8c0\u003c/code\u003e\u003c/a\u003e Update GHA runners to use latest images for basic binaries build\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/cf66b4141defb757dee0fc5653bfd0a7ba1e8fed\"\u003e\u003ccode\u003ecf66b41\u003c/code\u003e\u003c/a\u003e Update GHA runners to use latest image for most jobs\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/containerd/containerd/compare/v1.7.27...v1.7.29\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/cli` from 28.2.2+incompatible to 29.2.0+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/0b9d1985dbf919678745f122b12b46f730b97d87\"\u003e\u003ccode\u003e0b9d198\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6764\"\u003e#6764\u003c/a\u003e from vvoland/update-docker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9c9ec7358833bb3e5622a166673744fca7fefac4\"\u003e\u003ccode\u003e9c9ec73\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/client v0.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/bab3e81e1d8874a2d4f26afc02225ee537d0b15d\"\u003e\u003ccode\u003ebab3e81\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/api v1.53.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2e64fc162ab632a530f7191cc6af65c22356ea0d\"\u003e\u003ccode\u003e2e64fc1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6367\"\u003e#6367\u003c/a\u003e from thaJeztah/template_slicejoin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1f2ba2ac9d8c92870f7cce89dfa17d89d3375c19\"\u003e\u003ccode\u003e1f2ba2a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6760\"\u003e#6760\u003c/a\u003e from thaJeztah/container_create_fix_error\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/e34a3422cc32c808d2e8b0e0ef51112d53fa896d\"\u003e\u003ccode\u003ee34a342\u003c/code\u003e\u003c/a\u003e templates: make \u0026quot;join\u0026quot; work with non-string slices and map values\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/a86356d42f918968579e670b51bc85dc45982a33\"\u003e\u003ccode\u003ea86356d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6763\"\u003e#6763\u003c/a\u003e from thaJeztah/bump_mapstructure\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/771660a17e56116eb32677a6d83c5210e5092194\"\u003e\u003ccode\u003e771660a\u003c/code\u003e\u003c/a\u003e vendor: github.com/go-viper/mapstructure/v2 v2.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9cff36b35a828be8d137bc5de4983b7e3fef1614\"\u003e\u003ccode\u003e9cff36b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6762\"\u003e#6762\u003c/a\u003e from thaJeztah/bump_x_deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/08ed2bc6e8bc49ad988ecd44633620a48fb10967\"\u003e\u003ccode\u003e08ed2bc\u003c/code\u003e\u003c/a\u003e cli/command/container: make injecting config.json failures a warning\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v28.2.2...v29.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.16.2 to 5.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpand packfile checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1836\"\u003ego-git/go-git#1836\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebackport plumbing: format/idxfile, prevent panic by \u003ca href=\"https://github.com/swills\"\u003e\u003ccode\u003e@​swills\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1732\"\u003ego-git/go-git#1732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[backport] build: test, Fix build on Windows. by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1734\"\u003ego-git/go-git#1734\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/ea3e7ec9dfc54f577a01afb4dd601c0284604264\"\u003e\u003ccode\u003eea3e7ec\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2004\"\u003e#2004\u003c/a\u003e from go-git/v5-http-hardening\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bcd20a9c525826081262a06a9ed9c3167abfcd53\"\u003e\u003ccode\u003ebcd20a9\u003c/code\u003e\u003c/a\u003e plumbing: transport/http, Add support for followRedirects policy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/45ae193b3a60aa8ec8a3e373f7265a7819473d5f\"\u003e\u003ccode\u003e45ae193\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1944\"\u003e#1944\u003c/a\u003e from go-git/fix-perms\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fda4f7464b597ff33d2dea1c026482a5e900037c\"\u003e\u003ccode\u003efda4f74\u003c/code\u003e\u003c/a\u003e storage: filesystem/dotgit, Skip writing pack files that already exist on disk\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/2212dc7caeb2a389fe2129923811ef63f75a557a\"\u003e\u003ccode\u003e2212dc7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1941\"\u003e#1941\u003c/a\u003e from go-git/renovate/releases/v5.x-go-github.com-go-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/ebb2d7da7f5d5aebeaa0b5e13276d72d602c1ae3\"\u003e\u003ccode\u003eebb2d7d\u003c/code\u003e\u003c/a\u003e build: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5e23dfd02db92644dc4a3358ceb297fce875b772\"\u003e\u003ccode\u003e5e23dfd\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1937\"\u003e#1937\u003c/a\u003e from pjbgf/idx-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6b38a326816b80f64c20cc0e6113958b65c05a1c\"\u003e\u003ccode\u003e6b38a32\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1935\"\u003e#1935\u003c/a\u003e from pjbgf/index-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/cd757fcb856a2dcc5fff6c110320a8ff62e99513\"\u003e\u003ccode\u003ecd757fc\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, Fix version and fanout checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3ec0d70cb687ae1da5f4d18faa4229bd971a8710\"\u003e\u003ccode\u003e3ec0d70\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Fix tree extension invalidated entry parsing\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.2...v5.18.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.1.3 to 4.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes Panic in JWE decryption. See \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9\"\u003e\u003ccode\u003e0e59876\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ddffdbcec8bdadea8e02a20bdf19239878228215\"\u003e\u003ccode\u003eddffdbc\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-viper/mapstructure/v2` from 2.3.0 to 2.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-viper/mapstructure/releases\"\u003egithub.com/go-viper/mapstructure/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: replace interface{} with any by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/115\"\u003ego-viper/mapstructure#115\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.0 to 3.29.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/114\"\u003ego-viper/mapstructure#114\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneric tests by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/118\"\u003ego-viper/mapstructure#118\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix godoc reference link in README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/107\"\u003ego-viper/mapstructure#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add StringToTimeLocationHookFunc to convert strings to *time.Location by \u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add back previous StringToSlice as a weak function by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/119\"\u003ego-viper/mapstructure#119\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b9794a5f0e73d425210d6614ed833067029155f5\"\u003e\u003ccode\u003eb9794a5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/119\"\u003e#119\u003c/a\u003e from go-viper/string-to-weak-slice\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17cdcb0741054e2a33938adf6bd1f2a5c0aa8f30\"\u003e\u003ccode\u003e17cdcb0\u003c/code\u003e\u003c/a\u003e feat: add back previous StringToSlice as a weak function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/3caca3614c3ab2c5b5d359c44fdcd72058887b19\"\u003e\u003ccode\u003e3caca36\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/117\"\u003e#117\u003c/a\u003e from ErfanMomeniii/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/9a861bc115f2b54ed4e494662f29c172d9ef046a\"\u003e\u003ccode\u003e9a861bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/107\"\u003e#107\u003c/a\u003e from peczenyj/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/86ed5b59da0615fb8c3a413f401cdf0231f1234c\"\u003e\u003ccode\u003e86ed5b5\u003c/code\u003e\u003c/a\u003e refactor: update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/ace5b4e8b3dec99468ffa9498e42fb09d177b0a6\"\u003e\u003ccode\u003eace5b4e\u003c/code\u003e\u003c/a\u003e chore: add interface any linter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/1a4f1aef38bfa8549762aaf42c7c18a5d268e76e\"\u003e\u003ccode\u003e1a4f1ae\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/118\"\u003e#118\u003c/a\u003e from go-viper/generic-tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/a2689090ed4348033c36724d866faf1f911a9f63\"\u003e\u003ccode\u003ea268909\u003c/code\u003e\u003c/a\u003e fix: lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17f1fd44eb7606b109c9bb017c0a1c6d3e93b5cd\"\u003e\u003ccode\u003e17f1fd4\u003c/code\u003e\u003c/a\u003e test: add more comments\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b48c8566836bf291bfee2b217d51fc36e8e61f6f\"\u003e\u003ccode\u003eb48c856\u003c/code\u003e\u003c/a\u003e test: expand tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/moby/buildkit` from 0.23.2 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.28.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix insufficient validation of Git URL \u003ccode\u003e#ref:subdir\u003c/code\u003e fragments that could allow access to restricted files outside the checked-out repository root. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg\"\u003eGHSA-4vrq-3vrq-g6gg\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a vulnerability where an untrusted custom frontend could cause files to be written outside the BuildKit state directory. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj\"\u003eGHSA-4c29-8rgm-jvjj\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a panic when processing invalid \u003ccode\u003e.dockerignore\u003c/code\u003e patterns during \u003ccode\u003eCOPY\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/patternmatcher/issues/9\"\u003emoby/patternmatcher#9\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/moby/patternmatcher\u003c/strong\u003e  v0.6.0 -\u0026gt; v0.6.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.28.0\"\u003ev0.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.28.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.28.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.28.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eAmr Mahdi\u003c/li\u003e\n\u003cli\u003eDan Duvall\u003c/li\u003e\n\u003cli\u003eDavid Karlsson\u003c/li\u003e\n\u003cli\u003eJonas Geiler\u003c/li\u003e\n\u003cli\u003eKevin L.\u003c/li\u003e\n\u003cli\u003ersteube\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8\"\u003e\u003ccode\u003e45b038c\u003c/code\u003e\u003c/a\u003e git: normalize and validate subdir paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f5462c216098af766f97ea4cb328e65c6d8f7256\"\u003e\u003ccode\u003ef5462c2\u003c/code\u003e\u003c/a\u003e git: harden ref arg handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/71577a5da7a2b3ab75a90c2cfedfda0c27d1ef40\"\u003e\u003ccode\u003e71577a5\u003c/code\u003e\u003c/a\u003e source: extract SafeFileName into shared pathutil package\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df4378316f3b000403d097551a8139a700bd823d\"\u003e\u003ccode\u003edf43783\u003c/code\u003e\u003c/a\u003e source/http: use os.Root for saved file operations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/9ce6f62aca0653657047ee613cdef22f38b31244\"\u003e\u003ccode\u003e9ce6f62\u003c/code\u003e\u003c/a\u003e source/http: sanitize downloaded filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4\"\u003e\u003ccode\u003e099cf80\u003c/code\u003e\u003c/a\u003e executor: validate container IDs centrally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/2642113bbc9d969d223c37aaabca4b50613fddf9\"\u003e\u003ccode\u003e2642113\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e from thaJeztah/0.28_backport_bump_patternmatcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/802da78332d9f2c6c9d856c1648ab52c701076fa\"\u003e\u003ccode\u003e802da78\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/patternmatcher v0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/5245d869d85d9c98f986b600584c332a3b001986\"\u003e\u003ccode\u003e5245d86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6551\"\u003e#6551\u003c/a\u003e from tonistiigi/v0.28-cherry-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/90ee5deef6c6efcb82358eb48d76235191196db1\"\u003e\u003ccode\u003e90ee5de\u003c/code\u003e\u003c/a\u003e vendor: update x/net to v0.51.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.23.2...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.40.0 to 1.41.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.39.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/GoogleCloudPlatform/osconfig/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/GoogleCloudPlatform/osconfig/pull/963","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleCloudPlatform%2Fosconfig/issues/963","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/963/packages"},{"uuid":"4309744056","node_id":"PR_kwDORsmrI87UqLe_","number":3,"state":"closed","title":"build(deps): Bump github.com/moby/buildkit from 0.25.2 to 0.28.1 in /test/integration","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-08T23:38:34.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-22T14:34:39.000Z","updated_at":"2026-05-08T23:38:36.000Z","time_to_close":1415035,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): Bump","packages":[{"name":"github.com/moby/buildkit","old_version":"0.25.2","new_version":"0.28.1","repository_url":"https://github.com/moby/buildkit"}],"path":"/test/integration","ecosystem":"go"},"body":"Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.25.2 to 0.28.1.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.28.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix insufficient validation of Git URL \u003ccode\u003e#ref:subdir\u003c/code\u003e fragments that could allow access to restricted files outside the checked-out repository root. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg\"\u003eGHSA-4vrq-3vrq-g6gg\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a vulnerability where an untrusted custom frontend could cause files to be written outside the BuildKit state directory. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj\"\u003eGHSA-4c29-8rgm-jvjj\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a panic when processing invalid \u003ccode\u003e.dockerignore\u003c/code\u003e patterns during \u003ccode\u003eCOPY\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/patternmatcher/issues/9\"\u003emoby/patternmatcher#9\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/moby/patternmatcher\u003c/strong\u003e  v0.6.0 -\u0026gt; v0.6.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.28.0\"\u003ev0.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.28.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.28.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.28.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eAmr Mahdi\u003c/li\u003e\n\u003cli\u003eDan Duvall\u003c/li\u003e\n\u003cli\u003eDavid Karlsson\u003c/li\u003e\n\u003cli\u003eJonas Geiler\u003c/li\u003e\n\u003cli\u003eKevin L.\u003c/li\u003e\n\u003cli\u003ersteube\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8\"\u003e\u003ccode\u003e45b038c\u003c/code\u003e\u003c/a\u003e git: normalize and validate subdir paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f5462c216098af766f97ea4cb328e65c6d8f7256\"\u003e\u003ccode\u003ef5462c2\u003c/code\u003e\u003c/a\u003e git: harden ref arg handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/71577a5da7a2b3ab75a90c2cfedfda0c27d1ef40\"\u003e\u003ccode\u003e71577a5\u003c/code\u003e\u003c/a\u003e source: extract SafeFileName into shared pathutil package\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df4378316f3b000403d097551a8139a700bd823d\"\u003e\u003ccode\u003edf43783\u003c/code\u003e\u003c/a\u003e source/http: use os.Root for saved file operations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/9ce6f62aca0653657047ee613cdef22f38b31244\"\u003e\u003ccode\u003e9ce6f62\u003c/code\u003e\u003c/a\u003e source/http: sanitize downloaded filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4\"\u003e\u003ccode\u003e099cf80\u003c/code\u003e\u003c/a\u003e executor: validate container IDs centrally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/2642113bbc9d969d223c37aaabca4b50613fddf9\"\u003e\u003ccode\u003e2642113\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e from thaJeztah/0.28_backport_bump_patternmatcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/802da78332d9f2c6c9d856c1648ab52c701076fa\"\u003e\u003ccode\u003e802da78\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/patternmatcher v0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/5245d869d85d9c98f986b600584c332a3b001986\"\u003e\u003ccode\u003e5245d86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6551\"\u003e#6551\u003c/a\u003e from tonistiigi/v0.28-cherry-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/90ee5deef6c6efcb82358eb48d76235191196db1\"\u003e\u003ccode\u003e90ee5de\u003c/code\u003e\u003c/a\u003e vendor: update x/net to v0.51.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.25.2...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit\u0026package-manager=go_modules\u0026previous-version=0.25.2\u0026new-version=0.28.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/eagle19900203-boop/flagd/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/eagle19900203-boop/flagd/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/eagle19900203-boop%2Fflagd/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"},{"uuid":"4285728375","node_id":"PR_kwDOR-Wcqs7TeFZa","number":2,"state":"closed","title":"build(deps): bump github.com/moby/buildkit from 0.23.2 to 0.28.1","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-07-28T09:10:51.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-17T22:50:17.000Z","updated_at":"2026-07-28T09:10:54.000Z","time_to_close":8763634,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/moby/buildkit","old_version":"0.23.2","new_version":"0.28.1","repository_url":"https://github.com/moby/buildkit"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.23.2 to 0.28.1.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.28.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix insufficient validation of Git URL \u003ccode\u003e#ref:subdir\u003c/code\u003e fragments that could allow access to restricted files outside the checked-out repository root. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg\"\u003eGHSA-4vrq-3vrq-g6gg\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a vulnerability where an untrusted custom frontend could cause files to be written outside the BuildKit state directory. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj\"\u003eGHSA-4c29-8rgm-jvjj\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a panic when processing invalid \u003ccode\u003e.dockerignore\u003c/code\u003e patterns during \u003ccode\u003eCOPY\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/patternmatcher/issues/9\"\u003emoby/patternmatcher#9\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/moby/patternmatcher\u003c/strong\u003e  v0.6.0 -\u0026gt; v0.6.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.28.0\"\u003ev0.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.28.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.28.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.28.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eAmr Mahdi\u003c/li\u003e\n\u003cli\u003eDan Duvall\u003c/li\u003e\n\u003cli\u003eDavid Karlsson\u003c/li\u003e\n\u003cli\u003eJonas Geiler\u003c/li\u003e\n\u003cli\u003eKevin L.\u003c/li\u003e\n\u003cli\u003ersteube\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8\"\u003e\u003ccode\u003e45b038c\u003c/code\u003e\u003c/a\u003e git: normalize and validate subdir paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f5462c216098af766f97ea4cb328e65c6d8f7256\"\u003e\u003ccode\u003ef5462c2\u003c/code\u003e\u003c/a\u003e git: harden ref arg handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/71577a5da7a2b3ab75a90c2cfedfda0c27d1ef40\"\u003e\u003ccode\u003e71577a5\u003c/code\u003e\u003c/a\u003e source: extract SafeFileName into shared pathutil package\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df4378316f3b000403d097551a8139a700bd823d\"\u003e\u003ccode\u003edf43783\u003c/code\u003e\u003c/a\u003e source/http: use os.Root for saved file operations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/9ce6f62aca0653657047ee613cdef22f38b31244\"\u003e\u003ccode\u003e9ce6f62\u003c/code\u003e\u003c/a\u003e source/http: sanitize downloaded filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4\"\u003e\u003ccode\u003e099cf80\u003c/code\u003e\u003c/a\u003e executor: validate container IDs centrally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/2642113bbc9d969d223c37aaabca4b50613fddf9\"\u003e\u003ccode\u003e2642113\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e from thaJeztah/0.28_backport_bump_patternmatcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/802da78332d9f2c6c9d856c1648ab52c701076fa\"\u003e\u003ccode\u003e802da78\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/patternmatcher v0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/5245d869d85d9c98f986b600584c332a3b001986\"\u003e\u003ccode\u003e5245d86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6551\"\u003e#6551\u003c/a\u003e from tonistiigi/v0.28-cherry-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/90ee5deef6c6efcb82358eb48d76235191196db1\"\u003e\u003ccode\u003e90ee5de\u003c/code\u003e\u003c/a\u003e vendor: update x/net to v0.51.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.23.2...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit\u0026package-manager=go_modules\u0026previous-version=0.23.2\u0026new-version=0.28.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/LetheanNetwork/osv-scanner/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/LetheanNetwork/osv-scanner/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/LetheanNetwork%2Fosv-scanner/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"}],"issue_packages":[{"old_version":"0.20.2","new_version":"0.28.1","update_type":"minor","path":null,"pr_created_at":"2026-07-15T00:49:26.000Z","version_change":"0.20.2 → 0.28.1","issue":{"uuid":"4888259091","node_id":"PR_kwDOTHVfOs7xztin","number":34,"state":"closed","title":"build(deps): bump the go_modules group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-07-15T00:49:41.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-15T00:49:26.000Z","updated_at":"2026-07-15T00:49:42.000Z","time_to_close":15,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"go_modules","update_count":8,"packages":[{"name":"helm.sh/helm/v3","old_version":"3.19.0","new_version":"3.20.2","repository_url":"https://github.com/helm/helm"},{"name":"github.com/moby/buildkit","old_version":"0.20.2","new_version":"0.28.1","repository_url":"https://github.com/moby/buildkit"},{"name":"go.opentelemetry.io/otel","old_version":"1.39.0","new_version":"1.41.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"google.golang.org/grpc","old_version":"1.78.0","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"github.com/go-git/go-billy/v5","old_version":"5.8.0","new_version":"5.9.0","repository_url":"https://github.com/go-git/go-billy"},{"name":"github.com/go-git/go-git/v5","old_version":"5.17.1","new_version":"5.19.1","repository_url":"https://github.com/go-git/go-git"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.19.0` | `3.20.2` |\n| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.20.2` | `0.28.1` |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.39.0` | `1.41.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.78.0` | `1.79.3` |\n| [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.8.0` | `5.9.0` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.17.1` | `5.19.1` |\n\n\nUpdates `helm.sh/helm/v3` from 3.19.0 to 3.20.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/helm/helm/releases\"\u003ehelm.sh/helm/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eHelm v3.20.2\u003c/h2\u003e\n\u003ch2\u003ev3.20.2\u003c/h2\u003e\n\u003cp\u003eHelm v3.20.2 is a security patch release. Users are encouraged to upgrade for the best experience.\u003c/p\u003e\n\u003cp\u003eThe community keeps growing, and we'd love to see you there!\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJoin the discussion in \u003ca href=\"https://kubernetes.slack.com\"\u003eKubernetes Slack\u003c/a\u003e:\n\u003cul\u003e\n\u003cli\u003efor questions and just to hang out\u003c/li\u003e\n\u003cli\u003efor discussing PRs, code, and bugs\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eHang out at the Public Developer Call: Thursday, 9:30 Pacific via \u003ca href=\"https://zoom.us/j/696660622\"\u003eZoom\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTest, debug, and contribute charts: \u003ca href=\"https://artifacthub.io/packages/search?kind=0\"\u003eArtifactHub/packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/security/advisories/GHSA-hr2v-4r36-88hr\"\u003eGHSA-hr2v-4r36-88hr\u003c/a\u003e Helm Chart extraction output directory collapse via \u003ccode\u003eChart.yaml\u003c/code\u003e name dot-segment\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eInstallation and Upgrading\u003c/h2\u003e\n\u003cp\u003eDownload Helm v3.20.2. The common platform binaries are here:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-darwin-amd64.tar.gz\"\u003eMacOS amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-darwin-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 7de04301f28b902a74f6286ed941cadc86ee5e6a9086a18f2ccf1f548e99d618)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-darwin-arm64.tar.gz\"\u003eMacOS arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-darwin-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 139c794c22f16b579d08ddd3008c8038b9bb2814f35b5bcca91f50a1f458978d)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-amd64.tar.gz\"\u003eLinux amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 258e830a9e613c8a7a302d6059b4bb3b9758f2f3e1bb8ea0d707ce10a9a72fea)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-arm.tar.gz\"\u003eLinux arm\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-arm.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / a8a614c740399ff1ef32bcea6be6e4523f17e3376f9cf55c192cc48c8f2d1f19)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-arm64.tar.gz\"\u003eLinux arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 5ea2d6bc2cda3f8edf985e028809f5a9278f404fb8ab24044de9b7cb9b79a691)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-386.tar.gz\"\u003eLinux i386\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-386.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 88e4c1834307cdbc9f3b80920e1a383e4ba50bb488fb0be1b1fbd4918bb6ae73)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-ppc64le.tar.gz\"\u003eLinux ppc64le\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-ppc64le.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 98bb26a2f3c0b0c1a50db3181dff192554e0c204a07427d98d6b01e259f23cbe)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-s390x.tar.gz\"\u003eLinux s390x\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-s390x.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 584dd77ef8096d6ef939a1822f72840e749fc8311b2b13ae94df5f786862a56b)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-riscv64.tar.gz\"\u003eLinux riscv64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-riscv64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 957391d0710d72678acd09959b5dc77888cd007a78a4b99944d3b2fc7e1895ca)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-windows-amd64.zip\"\u003eWindows amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-windows-amd64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / 24e8e5b71bab4ee17e6f989931ecf4fb144f9916cbe9990c0b6b2ec7b925c454)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-windows-arm64.zip\"\u003eWindows arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-windows-arm64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / 7c940a73a6882f50b69aec3282549da4a49917669db18fc503db930fb74b9789)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThe \u003ca href=\"https://helm.sh/docs/intro/quickstart/\"\u003eQuickstart Guide\u003c/a\u003e will get you going from there. For \u003cstrong\u003eupgrade instructions\u003c/strong\u003e or detailed installation notes, check the \u003ca href=\"https://helm.sh/docs/intro/install/\"\u003einstall guide\u003c/a\u003e. You can also use a \u003ca href=\"https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3\"\u003escript to install\u003c/a\u003e on any system with \u003ccode\u003ebash\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eWhat's Next\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e4.1.5 and 3.20.3 are the next patch (bug fix) releases and will be on April 8, 2026\u003c/li\u003e\n\u003cli\u003e4.2.0 and 3.21.0 are the next minor (feature) releases and will be on May 13, 2026\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: Chart dot-name path bug 8fb76d6ab555577e98e23b7500009537a471feee (George Jenkins)\u003c/li\u003e\n\u003cli\u003efix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow 3a8927e275c50cecde273872dad2a5576bd46375 (Terry Howe)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eHelm v3.20.1 is a patch release. Users are encouraged to upgrade for the best experience.\u003c/p\u003e\n\u003cp\u003eThe community keeps growing, and we'd love to see you there!\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJoin the discussion in \u003ca href=\"https://kubernetes.slack.com\"\u003eKubernetes Slack\u003c/a\u003e:\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/8fb76d6ab555577e98e23b7500009537a471feee\"\u003e\u003ccode\u003e8fb76d6\u003c/code\u003e\u003c/a\u003e fix: Chart dot-name path bug\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/3a8927e275c50cecde273872dad2a5576bd46375\"\u003e\u003ccode\u003e3a8927e\u003c/code\u003e\u003c/a\u003e fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/a2369ca71c0ef633bf6e4fccd66d634eb379b371\"\u003e\u003ccode\u003ea2369ca\u003c/code\u003e\u003c/a\u003e chore(deps): bump the k8s-io group with 7 updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/90e10564f7ae746a153f3a03006e7061a54ad490\"\u003e\u003ccode\u003e90e1056\u003c/code\u003e\u003c/a\u003e add image index test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/911f2e908ae40b01ca95b857e94b8894043f64fd\"\u003e\u003ccode\u003e911f2e9\u003c/code\u003e\u003c/a\u003e fix pulling charts from OCI indices\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/76dad33fb1a2b6451920429b4f5f2dd575ea71bb\"\u003e\u003ccode\u003e76dad33\u003c/code\u003e\u003c/a\u003e Remove refactorring changes from coalesce_test.go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/45c12f71407b6054a37d3e425d5293ee79a1ab37\"\u003e\u003ccode\u003e45c12f7\u003c/code\u003e\u003c/a\u003e Fix import\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/26c6f19f967941dbe53bfb5e52d419b3b3e46075\"\u003e\u003ccode\u003e26c6f19\u003c/code\u003e\u003c/a\u003e Update pkg/chart/common/util/coalesce_test.go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/09f5129d49a14c9336cea6f33adf5f52889915ef\"\u003e\u003ccode\u003e09f5129\u003c/code\u003e\u003c/a\u003e Fix lint warning\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/417deb2b6b7504357b0f580b76f5eed1bb8a5270\"\u003e\u003ccode\u003e417deb2\u003c/code\u003e\u003c/a\u003e Preserve nil values in chart already\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/helm/helm/compare/v3.19.0...v3.20.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/containerd/containerd` from 1.7.29 to 1.7.30\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/containerd/containerd/releases\"\u003egithub.com/containerd/containerd's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003econtainerd 1.7.30\u003c/h2\u003e\n\u003cp\u003eWelcome to the v1.7.30 release of containerd!\u003c/p\u003e\n\u003cp\u003eThe thirtieth patch release for containerd 1.7 contains various fixes\nand updates.\u003c/p\u003e\n\u003ch3\u003eHighlights\u003c/h3\u003e\n\u003ch4\u003eContainer Runtime Interface (CRI)\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eFix NRI dropping requested CDI devices silently\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12650\"\u003e#12650\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRedact all query parameters in CRI error logs\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12551\"\u003e#12551\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eRuntime\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eUpdate runc binary to v1.3.4\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12619\"\u003e#12619\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/containerd/containerd/issues\"\u003ehttps://github.com/containerd/containerd/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDerek McGowan\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eAustin Vazquez\u003c/li\u003e\n\u003cli\u003eMike Brown\u003c/li\u003e\n\u003cli\u003eWei Fu\u003c/li\u003e\n\u003cli\u003eAndrey Noskov\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eDavanum Srinivas\u003c/li\u003e\n\u003cli\u003eJin Dong\u003c/li\u003e\n\u003cli\u003eKrisztian Litkey\u003c/li\u003e\n\u003cli\u003eMaksym Pavlenko\u003c/li\u003e\n\u003cli\u003ePaweł Gronowski\u003c/li\u003e\n\u003cli\u003ePhil Estes\u003c/li\u003e\n\u003cli\u003eSamuel Karp\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare release notes for v1.7.30 (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12652\"\u003e#12652\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/3d0ca6d2e7ba597bf0423e5f5f49e47b81c1e7a0\"\u003e\u003ccode\u003e3d0ca6d2e\u003c/code\u003e\u003c/a\u003e Prepare release notes for v1.7.30\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eFix NRI dropping requested CDI devices silently (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12650\"\u003e#12650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/0bc74f47e708bd843e676c5a8617f0498ea6459a\"\u003e\u003ccode\u003e0bc74f47e\u003c/code\u003e\u003c/a\u003e cri,nri: don't drop requested CDI devices silently.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003escript/setup/install-cni: install CNI plugins v1.9.0 (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12660\"\u003e#12660\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/7db16b5627a550caf05d9a902e16cb0d04bf1ee1\"\u003e\u003ccode\u003e7db16b562\u003c/code\u003e\u003c/a\u003e script/setup/install-cni: install CNI plugins v1.9.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003ego.mod: golang.org/x/crypto v0.45.0 (drop support for Go 1.23) (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12640\"\u003e#12640\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/bca897b4739fef9b6a34c54ac6050d1621e53f92\"\u003e\u003ccode\u003ebca897b47\u003c/code\u003e\u003c/a\u003e go.mod: golang.org/x/crypto v0.45.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/37cbd2224e674c317e25b03bbf4ab5a9ed644a5d\"\u003e\u003ccode\u003e37cbd2224\u003c/code\u003e\u003c/a\u003e CI: drop Go 1.23\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/71c1c8666c6a999cc8c319160b6b2ea38c4a2c9e\"\u003e\u003ccode\u003e71c1c86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/12652\"\u003e#12652\u003c/a\u003e from dmcgowan/prepare-1.7.30\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/3d0ca6d2e7ba597bf0423e5f5f49e47b81c1e7a0\"\u003e\u003ccode\u003e3d0ca6d\u003c/code\u003e\u003c/a\u003e Prepare release notes for v1.7.30\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/a8ce78b8eb3e4b5c6eca0cc4d5a5706288bc5184\"\u003e\u003ccode\u003ea8ce78b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/12650\"\u003e#12650\u003c/a\u003e from klihub/fixes/1.7.x/nri-cdi-device-injection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/ba2b3a20c5101cabe91768d9360b1f0b7055f492\"\u003e\u003ccode\u003eba2b3a2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/12660\"\u003e#12660\u003c/a\u003e from AkihiroSuda/cni-1.9.0-1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/0bc74f47e708bd843e676c5a8617f0498ea6459a\"\u003e\u003ccode\u003e0bc74f4\u003c/code\u003e\u003c/a\u003e cri,nri: don't drop requested CDI devices silently.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/7db16b5627a550caf05d9a902e16cb0d04bf1ee1\"\u003e\u003ccode\u003e7db16b5\u003c/code\u003e\u003c/a\u003e script/setup/install-cni: install CNI plugins v1.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/3b655c21e08e51cbd81d353cdcfc7a1d722ea322\"\u003e\u003ccode\u003e3b655c2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/12640\"\u003e#12640\u003c/a\u003e from AkihiroSuda/dev-1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/bca897b4739fef9b6a34c54ac6050d1621e53f92\"\u003e\u003ccode\u003ebca897b\u003c/code\u003e\u003c/a\u003e go.mod: golang.org/x/crypto v0.45.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/37cbd2224e674c317e25b03bbf4ab5a9ed644a5d\"\u003e\u003ccode\u003e37cbd22\u003c/code\u003e\u003c/a\u003e CI: drop Go 1.23\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/ee49d1747c357cd45119750d4db464f957f4d793\"\u003e\u003ccode\u003eee49d17\u003c/code\u003e\u003c/a\u003e Update Go requirements in BUILDING\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/containerd/containerd/compare/v1.7.29...v1.7.30\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/moby/buildkit` from 0.20.2 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.28.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix insufficient validation of Git URL \u003ccode\u003e#ref:subdir\u003c/code\u003e fragments that could allow access to restricted files outside the checked-out repository root. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg\"\u003eGHSA-4vrq-3vrq-g6gg\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a vulnerability where an untrusted custom frontend could cause files to be written outside the BuildKit state directory. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj\"\u003eGHSA-4c29-8rgm-jvjj\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a panic when processing invalid \u003ccode\u003e.dockerignore\u003c/code\u003e patterns during \u003ccode\u003eCOPY\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/patternmatcher/issues/9\"\u003emoby/patternmatcher#9\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/moby/patternmatcher\u003c/strong\u003e  v0.6.0 -\u0026gt; v0.6.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.28.0\"\u003ev0.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.28.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.28.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.28.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eAmr Mahdi\u003c/li\u003e\n\u003cli\u003eDan Duvall\u003c/li\u003e\n\u003cli\u003eDavid Karlsson\u003c/li\u003e\n\u003cli\u003eJonas Geiler\u003c/li\u003e\n\u003cli\u003eKevin L.\u003c/li\u003e\n\u003cli\u003ersteube\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8\"\u003e\u003ccode\u003e45b038c\u003c/code\u003e\u003c/a\u003e git: normalize and validate subdir paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f5462c216098af766f97ea4cb328e65c6d8f7256\"\u003e\u003ccode\u003ef5462c2\u003c/code\u003e\u003c/a\u003e git: harden ref arg handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/71577a5da7a2b3ab75a90c2cfedfda0c27d1ef40\"\u003e\u003ccode\u003e71577a5\u003c/code\u003e\u003c/a\u003e source: extract SafeFileName into shared pathutil package\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df4378316f3b000403d097551a8139a700bd823d\"\u003e\u003ccode\u003edf43783\u003c/code\u003e\u003c/a\u003e source/http: use os.Root for saved file operations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/9ce6f62aca0653657047ee613cdef22f38b31244\"\u003e\u003ccode\u003e9ce6f62\u003c/code\u003e\u003c/a\u003e source/http: sanitize downloaded filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4\"\u003e\u003ccode\u003e099cf80\u003c/code\u003e\u003c/a\u003e executor: validate container IDs centrally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/2642113bbc9d969d223c37aaabca4b50613fddf9\"\u003e\u003ccode\u003e2642113\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e from thaJeztah/0.28_backport_bump_patternmatcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/802da78332d9f2c6c9d856c1648ab52c701076fa\"\u003e\u003ccode\u003e802da78\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/patternmatcher v0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/5245d869d85d9c98f986b600584c332a3b001986\"\u003e\u003ccode\u003e5245d86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6551\"\u003e#6551\u003c/a\u003e from tonistiigi/v0.28-cherry-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/90ee5deef6c6efcb82358eb48d76235191196db1\"\u003e\u003ccode\u003e90ee5de\u003c/code\u003e\u003c/a\u003e vendor: update x/net to v0.51.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.20.2...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.39.0 to 1.41.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.40.0/0.62.0/0.16.0] 2026-02-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eAlwaysRecord\u003c/code\u003e sampler in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724\"\u003e#7724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to all synchronous instrument interfaces (\u003ccode\u003eFloat64Counter\u003c/code\u003e, \u003ccode\u003eFloat64UpDownCounter\u003c/code\u003e, \u003ccode\u003eFloat64Histogram\u003c/code\u003e, \u003ccode\u003eFloat64Gauge\u003c/code\u003e, \u003ccode\u003eInt64Counter\u003c/code\u003e, \u003ccode\u003eInt64UpDownCounter\u003c/code\u003e, \u003ccode\u003eInt64Histogram\u003c/code\u003e, \u003ccode\u003eInt64Gauge\u003c/code\u003e,) in \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e.\nThis stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763\"\u003e#7763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.39.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0.\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783\"\u003e#7783\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789\"\u003e#7789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eHistogramReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e by 4x. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443\"\u003e#7443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eFixedSizeReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447\"\u003e#7447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474\"\u003e#7474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent synchronous gauge measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478\"\u003e#7478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492\"\u003e#7492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eExporter\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e ignores metrics with the scope \u003ccode\u003ego.opentelemetry.io/contrib/bridges/prometheus\u003c/code\u003e.\nThis prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688\"\u003e#7688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent exponential histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702\"\u003e#7702\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bad log message when key-value pairs are dropped because of key duplication in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eDroppedAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not count the non-attribute key-value pairs dropped because of key duplication. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eSetAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not log that attributes are dropped when they are actually not dropped. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to correctly handle HTTP/2 \u003ccode\u003eGOAWAY\u003c/code\u003e frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794\"\u003e#7794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003eioreg\u003c/code\u003e command on Darwin (macOS). (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818\"\u003e#7818\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.78.0 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream` from 1.6.8 to 1.7.14\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/676a8b1bf0174c8763e19d99b68b988e67e2d398\"\u003e\u003ccode\u003e676a8b1\u003c/code\u003e\u003c/a\u003e Release 2025-01-24\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/1737386a85235b72e9676ed261b72cddb61355df\"\u003e\u003ccode\u003e1737386\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/3bc09da29fb3dd079526f7ed141520f69245e445\"\u003e\u003ccode\u003e3bc09da\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/cb98deef60318ce9a61cda159ebfb0166d88539b\"\u003e\u003ccode\u003ecb98dee\u003c/code\u003e\u003c/a\u003e Fix flex checksum validation cfg (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2981\"\u003e#2981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/9c764018fe28b27912a0b976614d9e806e3f8268\"\u003e\u003ccode\u003e9c76401\u003c/code\u003e\u003c/a\u003e fix bad changelog type\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/ed8a3caa0df9ce36a5b60aebeee201187098d205\"\u003e\u003ccode\u003eed8a3ca\u003c/code\u003e\u003c/a\u003e Reduce fmt.Sprintf allocations in query encoding (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2919\"\u003e#2919\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/d5773a9a070873393eb2e7eed37bd647e12e1267\"\u003e\u003ccode\u003ed5773a9\u003c/code\u003e\u003c/a\u003e Add FixUnmarshalIndividualSetValues option to DecoderOptions of dynamodb (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2896\"\u003e#2896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/58e23dc0311cec940749e34ddfc542dbb00ff7a3\"\u003e\u003ccode\u003e58e23dc\u003c/code\u003e\u003c/a\u003e fix codegen test failing in main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/640d919419375c1bb9041ffa6dd024b60243a1ed\"\u003e\u003ccode\u003e640d919\u003c/code\u003e\u003c/a\u003e fix broken jmespath waiters in cloudwatch and autoscaling (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2984\"\u003e#2984\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/613a6cfc607af8470ceec5b7391f9231fa1f98dd\"\u003e\u003ccode\u003e613a6cf\u003c/code\u003e\u003c/a\u003e Optimize/directory traversal (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2970\"\u003e#2970\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/rum/v1.6.8...service/eksauth/v1.7.14\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-billy/v5` from 5.8.0 to 5.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-billy/releases\"\u003egithub.com/go-git/go-billy/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.9.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse path.Clean instead of filepath.Clean in iofs.Open by \u003ca href=\"https://github.com/puerco\"\u003e\u003ccode\u003e@​puerco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/197\"\u003ego-git/go-billy#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate ChrootOS in favour of BoundOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/201\"\u003ego-git/go-billy#201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneral Improvements by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/203\"\u003ego-git/go-billy#203\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eosfs: ChrootOS eval baseDir on creation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/205\"\u003ego-git/go-billy#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun go-git tests as part of integration tests by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/206\"\u003ego-git/go-billy#206\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/237e529bb8de61704047f71a5ab1c8e6676492f1\"\u003e\u003ccode\u003e237e529\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/206\"\u003e#206\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/04edb394b39979b5cbdec30ded6abdcb9f7786c5\"\u003e\u003ccode\u003e04edb39\u003c/code\u003e\u003c/a\u003e build: Add go-git integration test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/d8efefd33b2e8eeea1030e317bb0d71c5e918270\"\u003e\u003ccode\u003ed8efefd\u003c/code\u003e\u003c/a\u003e osfs: preserve empty ChrootOS base\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/07f2a0bf50e42d438d1d9d263c3c8a22598985b8\"\u003e\u003ccode\u003e07f2a0b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/205\"\u003e#205\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/25207c8468f1af656953cb5db7030aad5df1fe99\"\u003e\u003ccode\u003e25207c8\u003c/code\u003e\u003c/a\u003e build: Bump Go versions in workflows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2fda229d9ac0cb5ba654ebc824cfbb90248f82d9\"\u003e\u003ccode\u003e2fda229\u003c/code\u003e\u003c/a\u003e osfs: ChrootOS eval baseDir on creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/427b27f32f22de11498a682c65cd5060a01ec168\"\u003e\u003ccode\u003e427b27f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/203\"\u003e#203\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/7d5a23ece03edc171c1f63c8fa73f84c8428bf17\"\u003e\u003ccode\u003e7d5a23e\u003c/code\u003e\u003c/a\u003e chroot: Reject symlink loops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2c2287a233d2ee1e6cdce8956141f6d10505f3bf\"\u003e\u003ccode\u003e2c2287a\u003c/code\u003e\u003c/a\u003e util: avoid following symlinks in RemoveAll fallback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/cbd88e9a9a2d7fe1065bbe083d8bf0c5fd7290de\"\u003e\u003ccode\u003ecbd88e9\u003c/code\u003e\u003c/a\u003e Fix mount path handling\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.17.1 to 5.19.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ev5: plumbing: transport/ssh, Shell-quote path by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2068\"\u003ego-git/go-git#2068\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, Fix relative URL resolution by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2070\"\u003ego-git/go-git#2070\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, canonical remote for relative URLs by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2074\"\u003ego-git/go-git#2074\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, error on remote without URLs by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2078\"\u003ego-git/go-git#2078\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format/idxfile, Validate offset64 indices by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2084\"\u003ego-git/go-git#2084\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: *: Reject malformed variable-length integers by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2092\"\u003ego-git/go-git#2092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format/packfile, Tighten delta validation by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2091\"\u003ego-git/go-git#2091\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Add \u003ccode\u003eworktreeFilesystem\u003c/code\u003e wrapper for worktree and hardening by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2100\"\u003ego-git/go-git#2100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: config: validate submodule names by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2082\"\u003ego-git/go-git#2082\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.19.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2111\"\u003ego-git/go-git#2111\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: Allow MkdirAll on worktree-root paths by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2117\"\u003ego-git/go-git#2117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: Stop validating symlink target paths by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2116\"\u003ego-git/go-git#2116\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format decoder input bounds and contracts by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2125\"\u003ego-git/go-git#2125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplumbing: format/packfile, cap delta chain depth in parser by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2137\"\u003ego-git/go-git#2137\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.19.0...v5.19.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.19.0...v5.19.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3c3be601aa6c0fd0d536c0d1e4f898b4c60e65fe\"\u003e\u003ccode\u003e3c3be60\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2137\"\u003e#2137\u003c/a\u003e from go-git/validate-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3fba897bd9e84b1aec170fa708b80e297b7d6cf6\"\u003e\u003ccode\u003e3fba897\u003c/code\u003e\u003c/a\u003e plumbing: format/packfile, cap delta chain depth in parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a97d6601c85e017bb64c2b0f2e3169f6ef6a6709\"\u003e\u003ccode\u003ea97d660\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2125\"\u003e#2125\u003c/a\u003e from hiddeco/v5/format-input-bounds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/aeaa125c8af8e4c4c95b574c22c5633e97fc436e\"\u003e\u003ccode\u003eaeaa125\u003c/code\u003e\u003c/a\u003e plumbing: format/objfile, require Header before Read\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1f38e171218526ea254a73187a52f0648253c1b8\"\u003e\u003ccode\u003e1f38e17\u003c/code\u003e\u003c/a\u003e plumbing: format/packfile, bound inflate size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f7545a02529e03998d6a7219140dc0e6644ad337\"\u003e\u003ccode\u003ef7545a0\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, bound nr by file size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/170b88181f385913a457a08b68c88956fb3f8e4f\"\u003e\u003ccode\u003e170b881\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2116\"\u003e#2116\u003c/a\u003e from pjbgf/symlink-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/7b6d994467f06630268904aa3c441b6de7248b31\"\u003e\u003ccode\u003e7b6d994\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2117\"\u003e#2117\u003c/a\u003e from hiddeco/v5/worktree-fs-mkdirall-root-noop\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f0709b32f8fbb87c16cd63c6762d2cd515f36541\"\u003e\u003ccode\u003ef0709b3\u003c/code\u003e\u003c/a\u003e git: Stop validating symlink target paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/776d00f11d336f26862d0f2bab987b217f3a7844\"\u003e\u003ccode\u003e776d00f\u003c/code\u003e\u003c/a\u003e git: Allow MkdirAll on worktree-root paths\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.19.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/leandro4979-hub/tailscale/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/leandro4979-hub/tailscale/pull/34","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/leandro4979-hub%2Ftailscale/issues/34","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/34/packages"}},{"old_version":"0.31.0","new_version":"0.31.1","update_type":"patch","path":null,"pr_created_at":"2026-07-01T21:17:38.000Z","version_change":"0.31.0 → 0.31.1","issue":{"uuid":"4789278883","node_id":"PR_kwDOSPcun87s3V7F","number":14,"state":"closed","title":"build(deps): bump github.com/moby/buildkit from 0.31.0 to 0.31.1","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-07-10T16:37:57.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-01T21:17:38.000Z","updated_at":"2026-07-10T16:37:59.000Z","time_to_close":760819,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/moby/buildkit","old_version":"0.31.0","new_version":"0.31.1","repository_url":"https://github.com/moby/buildkit"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.31.0 to 0.31.1.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.31.1\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.31.1\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.31.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003eThis is a security patch release with two low severity security fixes.\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCustom frontend could bypass Seccomp/AppArmor restrictions \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6\"\u003ehttps://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePossible runtime DoS via unbounded group parsing \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\"\u003ehttps://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cp\u003eThis release has no dependency changes\u003c/p\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.31.0\"\u003ev0.31.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/673b7e0196de0cac83308274b88aaed97a91af74\"\u003e\u003ccode\u003e673b7e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6896\"\u003e#6896\u003c/a\u003e from tonistiigi/v0.31.1-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/81ce1c60967ff15dd80190895106d3cb8f188deb\"\u003e\u003ccode\u003e81ce1c6\u003c/code\u003e\u003c/a\u003e ci: tolerate empty test matrix includes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/69a3924648e485acb3faad3081e03a8554431255\"\u003e\u003ccode\u003e69a3924\u003c/code\u003e\u003c/a\u003e user: limit size of parsed passwd/group files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/3ea6dd0ce7d269cdb8aa23348718e2c1bf64f109\"\u003e\u003ccode\u003e3ea6dd0\u003c/code\u003e\u003c/a\u003e security: validate exec security modes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.31.0...v0.31.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit\u0026package-manager=go_modules\u0026previous-version=0.31.0\u0026new-version=0.31.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/CodeLinaro-mirror/yocto-mirrors_github_docker_compose/pull/14","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/CodeLinaro-mirror%2Fyocto-mirrors_github_docker_compose/issues/14","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/14/packages"}},{"old_version":"0.30.0","new_version":"0.31.1","update_type":"minor","path":null,"pr_created_at":"2026-06-29T17:34:25.000Z","version_change":"0.30.0 → 0.31.1","issue":{"uuid":"4770295386","node_id":"PR_kwDOFo8pVM7r4-FN","number":34,"state":"open","title":"deps(deps): bump github.com/moby/buildkit from 0.30.0 to 0.31.1","user":"dependabot[bot]","labels":["bug","dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-29T17:34:25.000Z","updated_at":"2026-06-29T17:35:12.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps)","packages":[{"name":"github.com/moby/buildkit","old_version":"0.30.0","new_version":"0.31.1","repository_url":"https://github.com/moby/buildkit"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.30.0 to 0.31.1.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.31.1\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.31.1\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.31.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003eThis is a security patch release with two low severity security fixes.\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCustom frontend could bypass Seccomp/AppArmor restrictions \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6\"\u003ehttps://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePossible runtime DoS via unbounded group parsing \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\"\u003ehttps://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cp\u003eThis release has no dependency changes\u003c/p\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.31.0\"\u003ev0.31.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.31.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.31.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.31.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eBjorn Neergaard\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eBryce Gibson\u003c/li\u003e\n\u003cli\u003eAva Barron\u003c/li\u003e\n\u003cli\u003eBrian Goff\u003c/li\u003e\n\u003cli\u003eJiří Moravčík\u003c/li\u003e\n\u003cli\u003eZRHann\u003c/li\u003e\n\u003cli\u003eKevin NZUGUEM\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/673b7e0196de0cac83308274b88aaed97a91af74\"\u003e\u003ccode\u003e673b7e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6896\"\u003e#6896\u003c/a\u003e from tonistiigi/v0.31.1-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/81ce1c60967ff15dd80190895106d3cb8f188deb\"\u003e\u003ccode\u003e81ce1c6\u003c/code\u003e\u003c/a\u003e ci: tolerate empty test matrix includes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/69a3924648e485acb3faad3081e03a8554431255\"\u003e\u003ccode\u003e69a3924\u003c/code\u003e\u003c/a\u003e user: limit size of parsed passwd/group files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/3ea6dd0ce7d269cdb8aa23348718e2c1bf64f109\"\u003e\u003ccode\u003e3ea6dd0\u003c/code\u003e\u003c/a\u003e security: validate exec security modes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c411f0ac55a2c56d3d68b7d92d257538d5d6f464\"\u003e\u003ccode\u003ec411f0a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6876\"\u003e#6876\u003c/a\u003e from thaJeztah/bump_runc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f292e5c39accd1e3f8ee40dbb9a4abf1029a241b\"\u003e\u003ccode\u003ef292e5c\u003c/code\u003e\u003c/a\u003e Dockerfile: update runc binary to v1.3.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/d31ba4a7e79d1de97793201e7f012925ba7d6eeb\"\u003e\u003ccode\u003ed31ba4a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6867\"\u003e#6867\u003c/a\u003e from okhowang/fix/platforms-data-race\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e819928cc9919aa5e333c2ba17f362d46f9fae8d\"\u003e\u003ccode\u003ee819928\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6869\"\u003e#6869\u003c/a\u003e from crazy-max/update-policy-helpers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e4d0dbaf3f6aeaa4d8e6d7461d73ce434decf610\"\u003e\u003ccode\u003ee4d0dba\u003c/code\u003e\u003c/a\u003e chore: update generated files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c13539bb3d37f50379032dd5dda7b7c85cb072cb\"\u003e\u003ccode\u003ec13539b\u003c/code\u003e\u003c/a\u003e vendor: update policy-helpers to d5411a945cfc\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.30.0...v0.31.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit\u0026package-manager=go_modules\u0026previous-version=0.30.0\u0026new-version=0.31.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/jimschubert/docked/pull/34","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/jimschubert%2Fdocked/issues/34","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/34/packages"}},{"old_version":"0.31.0","new_version":"0.31.1","update_type":"patch","path":"the all-dependencies group across 1 directory","pr_created_at":"2026-06-25T14:54:44.000Z","version_change":"0.31.0 → 0.31.1","issue":{"uuid":"4744913640","node_id":"PR_kwDOBGvVPc7qnM64","number":60700,"state":"open","title":"Bump github.com/moby/buildkit from 0.31.0 to 0.31.1 in the all-dependencies group across 1 directory","user":"dependabot[bot]","labels":["size/XS","release-notes-none"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-25T14:54:44.000Z","updated_at":"2026-06-25T15:30:43.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/moby/buildkit","old_version":"0.31.0","new_version":"0.31.1","repository_url":"https://github.com/moby/buildkit"}],"path":"the all-dependencies group across 1 directory","ecosystem":"go"},"body":"Bumps the all-dependencies group with 1 update in the / directory: [github.com/moby/buildkit](https://github.com/moby/buildkit).\n\nUpdates `github.com/moby/buildkit` from 0.31.0 to 0.31.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.31.1\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.31.1\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.31.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003eThis is a security patch release with two low severity security fixes.\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCustom frontend could bypass Seccomp/AppArmor restrictions \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6\"\u003ehttps://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePossible runtime DoS via unbounded group parsing \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\"\u003ehttps://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cp\u003eThis release has no dependency changes\u003c/p\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.31.0\"\u003ev0.31.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/673b7e0196de0cac83308274b88aaed97a91af74\"\u003e\u003ccode\u003e673b7e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6896\"\u003e#6896\u003c/a\u003e from tonistiigi/v0.31.1-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/81ce1c60967ff15dd80190895106d3cb8f188deb\"\u003e\u003ccode\u003e81ce1c6\u003c/code\u003e\u003c/a\u003e ci: tolerate empty test matrix includes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/69a3924648e485acb3faad3081e03a8554431255\"\u003e\u003ccode\u003e69a3924\u003c/code\u003e\u003c/a\u003e user: limit size of parsed passwd/group files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/3ea6dd0ce7d269cdb8aa23348718e2c1bf64f109\"\u003e\u003ccode\u003e3ea6dd0\u003c/code\u003e\u003c/a\u003e security: validate exec security modes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.31.0...v0.31.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit\u0026package-manager=go_modules\u0026previous-version=0.31.0\u0026new-version=0.31.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/istio/istio/pull/60700","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/istio%2Fistio/issues/60700","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/60700/packages"}},{"old_version":"0.31.0","new_version":"0.31.1","update_type":"patch","path":"the moby group","pr_created_at":"2026-06-25T14:46:35.000Z","version_change":"0.31.0 → 0.31.1","issue":{"uuid":"4744853134","node_id":"PR_kwDOFbZN3c7qnAMg","number":4204,"state":"closed","title":"chore(deps): bump github.com/moby/buildkit from 0.31.0 to 0.31.1 in the moby group","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-26T07:03:11.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-25T14:46:35.000Z","updated_at":"2026-06-26T07:03:13.000Z","time_to_close":58596,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/moby/buildkit","old_version":"0.31.0","new_version":"0.31.1","repository_url":"https://github.com/moby/buildkit"}],"path":"the moby group","ecosystem":"go"},"body":"Bumps the moby group with 1 update: [github.com/moby/buildkit](https://github.com/moby/buildkit).\n\nUpdates `github.com/moby/buildkit` from 0.31.0 to 0.31.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.31.1\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.31.1\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.31.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003eThis is a security patch release with two low severity security fixes.\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCustom frontend could bypass Seccomp/AppArmor restrictions \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6\"\u003ehttps://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePossible runtime DoS via unbounded group parsing \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\"\u003ehttps://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cp\u003eThis release has no dependency changes\u003c/p\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.31.0\"\u003ev0.31.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/673b7e0196de0cac83308274b88aaed97a91af74\"\u003e\u003ccode\u003e673b7e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6896\"\u003e#6896\u003c/a\u003e from tonistiigi/v0.31.1-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/81ce1c60967ff15dd80190895106d3cb8f188deb\"\u003e\u003ccode\u003e81ce1c6\u003c/code\u003e\u003c/a\u003e ci: tolerate empty test matrix includes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/69a3924648e485acb3faad3081e03a8554431255\"\u003e\u003ccode\u003e69a3924\u003c/code\u003e\u003c/a\u003e user: limit size of parsed passwd/group files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/3ea6dd0ce7d269cdb8aa23348718e2c1bf64f109\"\u003e\u003ccode\u003e3ea6dd0\u003c/code\u003e\u003c/a\u003e security: validate exec security modes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.31.0...v0.31.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit\u0026package-manager=go_modules\u0026previous-version=0.31.0\u0026new-version=0.31.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/sylabs/singularity/pull/4204","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sylabs%2Fsingularity/issues/4204","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4204/packages"}},{"old_version":"0.29.0","new_version":"0.31.0","update_type":"minor","path":null,"pr_created_at":"2026-06-18T05:42:58.000Z","version_change":"0.29.0 → 0.31.0","issue":{"uuid":"4689563881","node_id":"PR_kwDOKvtQQ87ny2qD","number":433,"state":"closed","title":"chore(deps): bump github.com/moby/buildkit from 0.29.0 to 0.31.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-25T05:42:47.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-18T05:42:58.000Z","updated_at":"2026-06-25T05:42:48.000Z","time_to_close":604789,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/moby/buildkit","old_version":"0.29.0","new_version":"0.31.0","repository_url":"https://github.com/moby/buildkit"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.29.0 to 0.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.31.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.31.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.31.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eBjorn Neergaard\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eBryce Gibson\u003c/li\u003e\n\u003cli\u003eAva Barron\u003c/li\u003e\n\u003cli\u003eBrian Goff\u003c/li\u003e\n\u003cli\u003eJiří Moravčík\u003c/li\u003e\n\u003cli\u003eZRHann\u003c/li\u003e\n\u003cli\u003eKevin NZUGUEM\u003c/li\u003e\n\u003cli\u003eMaya Chen\u003c/li\u003e\n\u003cli\u003eNatnael Gebremariam\u003c/li\u003e\n\u003cli\u003eSai Kiran Maggidi\u003c/li\u003e\n\u003cli\u003eokhowang(王沛文)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuilt-in Dockerfile frontend has been updated to v1.25.0 \u003ca href=\"https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.25.0\"\u003echangelog\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExec steps now support a network proxy feature where all container traffic will be routed through an HTTP proxy server. This allows capturing the network traffic for inspection in build progress and provenance attestation. Source policies can define the requests that build containers are allowed to make and the ones that should be blocked. Network proxy can be enabled for the whole BuildKit daemon or enabled on a per-build basis. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6858\"\u003e#6858\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6816\"\u003e#6816\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6740\"\u003e#6740\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6863\"\u003e#6863\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe local exporter now supports a \u003ccode\u003emode=delete\u003c/code\u003e attribute which will replace the destination directory with the contents of the build result instead of merging it. Similar to the \u003ccode\u003e--delete\u003c/code\u003e flag in rsync. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6561\"\u003e#6561\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6864\"\u003e#6864\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLLB APIs now support per-step resource limits for CPU and memory. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6569\"\u003e#6569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLLB APIs support a new Passthrough operation that allows defining dependency build graph branches that are required to be built but do not add any outputs to the final result. The \u003ccode\u003estate.Requires()\u003c/code\u003e client helper can be used to define such dependencies in the build graph. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6829\"\u003e#6829\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAll image results now default to using OCI media types. Previously this was applied based on whether annotations or attestations were needed. \u003ccode\u003eoci-mediatypes=false\u003c/code\u003e can be used for legacy Docker media types. This change raises the compatibility version of BuildKit v0.31.0 to 30. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6824\"\u003e#6824\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLocal cache exporter now supports the \u003ccode\u003ereset\u003c/code\u003e option to clear the unreferenced existing cache. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6612\"\u003e#6612\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe local build result outputs now use a new implementation with better security guarantees in case the destination directory is mutated externally during the transfer. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6561\"\u003e#6561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNew build metrics about build counts and durations have been added to the OTEL provider. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6736\"\u003e#6736\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eParallel request limits for registry connections can now be set via configuration file. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6776\"\u003e#6776\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIn special modes where the client does not expose the session connection to transfer credentials, builds can now still fall back to anonymous registry auth instead of erroring. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6760\"\u003e#6760\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEmbedded binfmt emulators in the release image have been updated to QEMU v10.2.3. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6846\"\u003e#6846\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRunc container runtime has been updated to v1.3.6\u003c/li\u003e\n\u003cli\u003eCreated attestations now use in-toto v1 statement format. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6823\"\u003e#6823\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDue to the upgraded CLI library, the internal \u003ccode\u003ebuildctl\u003c/code\u003e completion scripts flag \u003ccode\u003e--generate-bash-completion\u003c/code\u003e is no longer supported and has been replaced with \u003ccode\u003e--generate-shell-completion\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6848\"\u003e#6848\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix an issue in default GC policy rules where the first rule for prioritizing releasing cache mounts and local sources did not apply. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6856\"\u003e#6856\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix an issue where parent directories could be created with incorrect permissions due to system umask when using BuildKit embedded in Dockerd. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6828\"\u003e#6828\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible segfault from race condition when HTTP server returned 401 error. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6791\"\u003e#6791\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix source policy exact match rules losing the destination value during conversion. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6861\"\u003e#6861\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c411f0ac55a2c56d3d68b7d92d257538d5d6f464\"\u003e\u003ccode\u003ec411f0a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6876\"\u003e#6876\u003c/a\u003e from thaJeztah/bump_runc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f292e5c39accd1e3f8ee40dbb9a4abf1029a241b\"\u003e\u003ccode\u003ef292e5c\u003c/code\u003e\u003c/a\u003e Dockerfile: update runc binary to v1.3.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/d31ba4a7e79d1de97793201e7f012925ba7d6eeb\"\u003e\u003ccode\u003ed31ba4a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6867\"\u003e#6867\u003c/a\u003e from okhowang/fix/platforms-data-race\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e819928cc9919aa5e333c2ba17f362d46f9fae8d\"\u003e\u003ccode\u003ee819928\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6869\"\u003e#6869\u003c/a\u003e from crazy-max/update-policy-helpers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e4d0dbaf3f6aeaa4d8e6d7461d73ce434decf610\"\u003e\u003ccode\u003ee4d0dba\u003c/code\u003e\u003c/a\u003e chore: update generated files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c13539bb3d37f50379032dd5dda7b7c85cb072cb\"\u003e\u003ccode\u003ec13539b\u003c/code\u003e\u003c/a\u003e vendor: update policy-helpers to d5411a945cfc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f4f035cd32e36346d26f3c56cc2ed426fb57e208\"\u003e\u003ccode\u003ef4f035c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6864\"\u003e#6864\u003c/a\u003e from crazy-max/mode-delete-old-daemon\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e26b5d452426db42cf4caa0f22ea432103a040e5\"\u003e\u003ccode\u003ee26b5d4\u003c/code\u003e\u003c/a\u003e fix: add mutex to protect Worker.Platforms from data race\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/91760189a858197a9161bb28fc6eebde93889e5d\"\u003e\u003ccode\u003e9176018\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6861\"\u003e#6861\u003c/a\u003e from ZRHann/fix-sourcepolicy-exact-convert\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/128c3228fab4d7c8acfc6580f9762d01cdb233e6\"\u003e\u003ccode\u003e128c322\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6863\"\u003e#6863\u003c/a\u003e from tonistiigi/exec-proxy-cni-dial-update\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.29.0...v0.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit\u0026package-manager=go_modules\u0026previous-version=0.29.0\u0026new-version=0.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/stacklok/frizbee/pull/433","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/stacklok%2Ffrizbee/issues/433","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/433/packages"}},{"old_version":"0.12.5","new_version":"0.28.1","update_type":"minor","path":null,"pr_created_at":"2026-05-29T21:53:39.000Z","version_change":"0.12.5 → 0.28.1","issue":{"uuid":"4551866990","node_id":"PR_kwDOPrYSMc7g0ZQ3","number":38,"state":"open","title":"chore(deps): bump the go_modules group across 5 directories with 28 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-29T21:53:39.000Z","updated_at":"2026-05-30T00:01:27.864Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go_modules","update_count":28,"packages":[{"name":"github.com/distribution/distribution/v3","old_version":"3.0.0-20220128175647-b60926597a1b","new_version":"3.1.1","repository_url":"https://github.com/distribution/distribution"},{"name":"github.com/go-git/go-git/v5","old_version":"5.11.0","new_version":"5.19.1","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/moby/buildkit","old_version":"0.12.5","new_version":"0.28.1","repository_url":"https://github.com/moby/buildkit"},{"name":"github.com/russellhaering/gosaml2","old_version":"0.9.1","new_version":"0.11.0","repository_url":"https://github.com/russellhaering/gosaml2"},{"name":"github.com/slack-go/slack","old_version":"0.10.1","new_version":"0.23.1","repository_url":"https://github.com/slack-go/slack"},{"name":"chainguard.dev/apko","old_version":"0.14.0","new_version":"1.2.7","repository_url":"https://github.com/chainguard-dev/apko"},{"name":"github.com/jackc/pgx/v5","old_version":"5.5.5","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/go-chi/chi/v5","old_version":"5.0.10","new_version":"5.2.2","repository_url":"https://github.com/go-chi/chi"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 8 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/distribution/distribution/v3](https://github.com/distribution/distribution) | `3.0.0-20220128175647-b60926597a1b` | `3.1.1` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.11.0` | `5.19.1` |\n| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.12.5` | `0.28.1` |\n| [github.com/russellhaering/gosaml2](https://github.com/russellhaering/gosaml2) | `0.9.1` | `0.11.0` |\n| [github.com/slack-go/slack](https://github.com/slack-go/slack) | `0.10.1` | `0.23.1` |\n| [chainguard.dev/apko](https://github.com/chainguard-dev/apko) | `0.14.0` | `1.2.7` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.5.5` | `5.9.2` |\n| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.0.10` | `5.2.2` |\n\nBumps the go_modules group with 4 updates in the /internal/cmd/progress-bot directory: [github.com/slack-go/slack](https://github.com/slack-go/slack), [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/oauth2](https://github.com/golang/oauth2) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /lib directory: [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/oauth2](https://github.com/golang/oauth2), [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 6 updates in the /lib/managedservicesplatform directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.25.0` | `1.43.0` |\n| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.21.0` | `0.27.0` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.5.5` | `5.9.2` |\n| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.5.3` | `9.5.5` |\n| [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519) | `1.1.0` | `1.1.1` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.65.0` | `1.79.3` |\n\nBumps the go_modules group with 3 updates in the /monitoring directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) and [github.com/hashicorp/go-retryablehttp](https://github.com/hashicorp/go-retryablehttp).\n\nUpdates `github.com/distribution/distribution/v3` from 3.0.0-20220128175647-b60926597a1b to 3.1.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/distribution/distribution/releases\"\u003egithub.com/distribution/distribution/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the \u003ccode\u003ev3.1.1\u003c/code\u003e release of registry!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eThis is a stable release\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/distribution/distribution/issues\"\u003ehttps://github.com/distribution/distribution/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixes \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-41888\"\u003eCVE-2026-41888\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBounds-check the file basename in PurgeUploads Walk callback\u003c/li\u003e\n\u003cli\u003eAdd S3 Express One Zone support to the S3 storage driver (\u003ca href=\"https://redirect.github.com/distribution/distribution/issues/4858\"\u003e#4858\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix tag list endpoint in proxy mode (\u003ca href=\"https://redirect.github.com/distribution/distribution/issues/4846\"\u003e#4846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClamp oversized \u003ccode\u003en\u003c/code\u003e query parameter in proxy mode instead of returning 400 (\u003ca href=\"https://redirect.github.com/distribution/distribution/issues/4856\"\u003e#4856\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSee the full changelog below for the full list of changes.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003einternal/client/auth/challenge: cleanups and minor refactor by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4832\"\u003edistribution/distribution#4832\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp from 0.18.0 to 0.19.0 in the go_modules group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4843\"\u003edistribution/distribution#4843\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0 in the go_modules group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4850\"\u003edistribution/distribution#4850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.34.1 to 4.35.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4840\"\u003edistribution/distribution#4840\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(build): Bump go version to latest by \u003ca href=\"https://github.com/milosgajdos\"\u003e\u003ccode\u003e@​milosgajdos\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4851\"\u003edistribution/distribution#4851\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: use slices.Backward to simplify the code by \u003ca href=\"https://github.com/chuanshanjida\"\u003e\u003ccode\u003e@​chuanshanjida\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4848\"\u003edistribution/distribution#4848\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(proxy): fix tag list endpoint in proxy mode by \u003ca href=\"https://github.com/njucjc\"\u003e\u003ccode\u003e@​njucjc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4846\"\u003edistribution/distribution#4846\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate docker-compose structure in deploying.md by \u003ca href=\"https://github.com/jdg71nl\"\u003e\u003ccode\u003e@​jdg71nl\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4855\"\u003edistribution/distribution#4855\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4854\"\u003edistribution/distribution#4854\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4852\"\u003edistribution/distribution#4852\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump docker/login-action from 4.0.0 to 4.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4847\"\u003edistribution/distribution#4847\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump docker/bake-action from 7.0.0 to 7.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4853\"\u003edistribution/distribution#4853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(proxy): clamp oversized n query param instead of returning 400 by \u003ca href=\"https://github.com/milosgajdos\"\u003e\u003ccode\u003e@​milosgajdos\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4856\"\u003edistribution/distribution#4856\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(s3): add express zone one support to S3 driver by \u003ca href=\"https://github.com/milosgajdos\"\u003e\u003ccode\u003e@​milosgajdos\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4858\"\u003edistribution/distribution#4858\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(storage): bounds-check the file basename in PurgeUploads Walk callback by \u003ca href=\"https://github.com/SAY-5\"\u003e\u003ccode\u003e@​SAY-5\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4860\"\u003edistribution/distribution#4860\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(release): prepare for v3.1.1 release by \u003ca href=\"https://github.com/milosgajdos\"\u003e\u003ccode\u003e@​milosgajdos\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4864\"\u003edistribution/distribution#4864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chuanshanjida\"\u003e\u003ccode\u003e@​chuanshanjida\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4848\"\u003edistribution/distribution#4848\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jdg71nl\"\u003e\u003ccode\u003e@​jdg71nl\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4855\"\u003edistribution/distribution#4855\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SAY-5\"\u003e\u003ccode\u003e@​SAY-5\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4860\"\u003edistribution/distribution#4860\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/distribution/distribution/compare/v3.1.0...v3.1.1\"\u003ehttps://github.com/distribution/distribution/compare/v3.1.0...v3.1.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the \u003ccode\u003ev3.1.0\u003c/code\u003e release of registry!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eThis is a stable release\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/distribution/distribution/issues\"\u003ehttps://github.com/distribution/distribution/issues\u003c/a\u003e.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/distribution/distribution/commits/v3.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.11.0 to 5.19.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ev5: plumbing: transport/ssh, Shell-quote path by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2068\"\u003ego-git/go-git#2068\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, Fix relative URL resolution by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2070\"\u003ego-git/go-git#2070\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, canonical remote for relative URLs by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2074\"\u003ego-git/go-git#2074\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: submodule, error on remote without URLs by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2078\"\u003ego-git/go-git#2078\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format/idxfile, Validate offset64 indices by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2084\"\u003ego-git/go-git#2084\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: *: Reject malformed variable-length integers by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2092\"\u003ego-git/go-git#2092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format/packfile, Tighten delta validation by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2091\"\u003ego-git/go-git#2091\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Add \u003ccode\u003eworktreeFilesystem\u003c/code\u003e wrapper for worktree and hardening by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2100\"\u003ego-git/go-git#2100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: config: validate submodule names by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2082\"\u003ego-git/go-git#2082\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.19.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2111\"\u003ego-git/go-git#2111\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: Allow MkdirAll on worktree-root paths by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2117\"\u003ego-git/go-git#2117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: git: Stop validating symlink target paths by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2116\"\u003ego-git/go-git#2116\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: plumbing: format decoder input bounds and contracts by \u003ca href=\"https://github.com/hiddeco\"\u003e\u003ccode\u003e@​hiddeco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2125\"\u003ego-git/go-git#2125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplumbing: format/packfile, cap delta chain depth in parser by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2137\"\u003ego-git/go-git#2137\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.19.0...v5.19.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.19.0...v5.19.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3c3be601aa6c0fd0d536c0d1e4f898b4c60e65fe\"\u003e\u003ccode\u003e3c3be60\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2137\"\u003e#2137\u003c/a\u003e from go-git/validate-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3fba897bd9e84b1aec170fa708b80e297b7d6cf6\"\u003e\u003ccode\u003e3fba897\u003c/code\u003e\u003c/a\u003e plumbing: format/packfile, cap delta chain depth in parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a97d6601c85e017bb64c2b0f2e3169f6ef6a6709\"\u003e\u003ccode\u003ea97d660\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2125\"\u003e#2125\u003c/a\u003e from hiddeco/v5/format-input-bounds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/aeaa125c8af8e4c4c95b574c22c5633e97fc436e\"\u003e\u003ccode\u003eaeaa125\u003c/code\u003e\u003c/a\u003e plumbing: format/objfile, require Header before Read\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1f38e171218526ea254a73187a52f0648253c1b8\"\u003e\u003ccode\u003e1f38e17\u003c/code\u003e\u003c/a\u003e plumbing: format/packfile, bound inflate size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f7545a02529e03998d6a7219140dc0e6644ad337\"\u003e\u003ccode\u003ef7545a0\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, bound nr by file size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/170b88181f385913a457a08b68c88956fb3f8e4f\"\u003e\u003ccode\u003e170b881\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2116\"\u003e#2116\u003c/a\u003e from pjbgf/symlink-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/7b6d994467f06630268904aa3c441b6de7248b31\"\u003e\u003ccode\u003e7b6d994\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2117\"\u003e#2117\u003c/a\u003e from hiddeco/v5/worktree-fs-mkdirall-root-noop\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f0709b32f8fbb87c16cd63c6762d2cd515f36541\"\u003e\u003ccode\u003ef0709b3\u003c/code\u003e\u003c/a\u003e git: Stop validating symlink target paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/776d00f11d336f26862d0f2bab987b217f3a7844\"\u003e\u003ccode\u003e776d00f\u003c/code\u003e\u003c/a\u003e git: Allow MkdirAll on worktree-root paths\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.11.0...v5.19.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/moby/buildkit` from 0.12.5 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.28.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix insufficient validation of Git URL \u003ccode\u003e#ref:subdir\u003c/code\u003e fragments that could allow access to restricted files outside the checked-out repository root. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg\"\u003eGHSA-4vrq-3vrq-g6gg\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a vulnerability where an untrusted custom frontend could cause files to be written outside the BuildKit state directory. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj\"\u003eGHSA-4c29-8rgm-jvjj\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a panic when processing invalid \u003ccode\u003e.dockerignore\u003c/code\u003e patterns during \u003ccode\u003eCOPY\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/patternmatcher/issues/9\"\u003emoby/patternmatcher#9\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/moby/patternmatcher\u003c/strong\u003e  v0.6.0 -\u0026gt; v0.6.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.28.0\"\u003ev0.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.28.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.28.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.28.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eAmr Mahdi\u003c/li\u003e\n\u003cli\u003eDan Duvall\u003c/li\u003e\n\u003cli\u003eDavid Karlsson\u003c/li\u003e\n\u003cli\u003eJonas Geiler\u003c/li\u003e\n\u003cli\u003eKevin L.\u003c/li\u003e\n\u003cli\u003ersteube\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8\"\u003e\u003ccode\u003e45b038c\u003c/code\u003e\u003c/a\u003e git: normalize and validate subdir paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f5462c216098af766f97ea4cb328e65c6d8f7256\"\u003e\u003ccode\u003ef5462c2\u003c/code\u003e\u003c/a\u003e git: harden ref arg handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/71577a5da7a2b3ab75a90c2cfedfda0c27d1ef40\"\u003e\u003ccode\u003e71577a5\u003c/code\u003e\u003c/a\u003e source: extract SafeFileName into shared pathutil package\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df4378316f3b000403d097551a8139a700bd823d\"\u003e\u003ccode\u003edf43783\u003c/code\u003e\u003c/a\u003e source/http: use os.Root for saved file operations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/9ce6f62aca0653657047ee613cdef22f38b31244\"\u003e\u003ccode\u003e9ce6f62\u003c/code\u003e\u003c/a\u003e source/http: sanitize downloaded filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4\"\u003e\u003ccode\u003e099cf80\u003c/code\u003e\u003c/a\u003e executor: validate container IDs centrally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/2642113bbc9d969d223c37aaabca4b50613fddf9\"\u003e\u003ccode\u003e2642113\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e from thaJeztah/0.28_backport_bump_patternmatcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/802da78332d9f2c6c9d856c1648ab52c701076fa\"\u003e\u003ccode\u003e802da78\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/patternmatcher v0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/5245d869d85d9c98f986b600584c332a3b001986\"\u003e\u003ccode\u003e5245d86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6551\"\u003e#6551\u003c/a\u003e from tonistiigi/v0.28-cherry-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/90ee5deef6c6efcb82358eb48d76235191196db1\"\u003e\u003ccode\u003e90ee5de\u003c/code\u003e\u003c/a\u003e vendor: update x/net to v0.51.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.12.5...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/russellhaering/gosaml2` from 0.9.1 to 0.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/russellhaering/gosaml2/releases\"\u003egithub.com/russellhaering/gosaml2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReject unsigned SAML \u003ccode\u003eLogoutRequest\u003c/code\u003e when signature validation is enabled. Previously, \u003ccode\u003eValidateEncodedLogoutRequestPOST\u003c/code\u003e silently accepted unsigned requests even when \u003ccode\u003eSkipSignatureValidation\u003c/code\u003e was \u003ccode\u003efalse\u003c/code\u003e. (GHSA-pcgw-qcv5-h8ch)\u003c/li\u003e\n\u003cli\u003eSecurity hardening: CBC bounds check to prevent panics from crafted ciphertext, replaced \u003ccode\u003epanic()\u003c/code\u003e calls with error returns, and assertion signatures within a signed Response envelope are now verified when present (previously they were skipped entirely, which could allow XML wrapping attacks)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd oss-fuzz integration\u003c/li\u003e\n\u003cli\u003eBump minimum Go version to 1.25\u003c/li\u003e\n\u003cli\u003eUpdate dependencies: goxmldsig v1.6.0, etree v1.6.0, testify v1.11.1\u003c/li\u003e\n\u003cli\u003eBump all GitHub Actions to latest versions\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/gosaml2/compare/v0.10.0...v0.11.0\"\u003ehttps://github.com/russellhaering/gosaml2/compare/v0.10.0...v0.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport encryption and signing keys that implement crypto.Signer by \u003ca href=\"https://github.com/nicksnyder\"\u003e\u003ccode\u003e@​nicksnyder\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/pull/131\"\u003erussellhaering/gosaml2#131\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid panic when the encrypted data has wrong size for CBC by \u003ca href=\"https://github.com/fformica\"\u003e\u003ccode\u003e@​fformica\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/pull/195\"\u003erussellhaering/gosaml2#195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSecurity hardening by \u003ca href=\"https://github.com/ahacker1-securesaml\"\u003e\u003ccode\u003e@​ahacker1-securesaml\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDependency and CI updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nicksnyder\"\u003e\u003ccode\u003e@​nicksnyder\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/pull/131\"\u003erussellhaering/gosaml2#131\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fformica\"\u003e\u003ccode\u003e@​fformica\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/pull/195\"\u003erussellhaering/gosaml2#195\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/gosaml2/compare/v0.9.1...v0.10.0\"\u003ehttps://github.com/russellhaering/gosaml2/compare/v0.9.1...v0.10.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/636e7dda202a4d669644e72404a82616ffcbe004\"\u003e\u003ccode\u003e636e7dd\u003c/code\u003e\u003c/a\u003e Bump all GitHub Actions to latest versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/1e9cc447527b4031ffd8e7a2cb64b99289ffde29\"\u003e\u003ccode\u003e1e9cc44\u003c/code\u003e\u003c/a\u003e Bump minimum Go version to 1.25 and update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/7159bbee574ae311e3c995df506c2e61cf2c232a\"\u003e\u003ccode\u003e7159bbe\u003c/code\u003e\u003c/a\u003e Reject unsigned LogoutRequest when signature validation is enabled\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/4ddcc822c3c2bb6676221cbf2259e141b2f2e315\"\u003e\u003ccode\u003e4ddcc82\u003c/code\u003e\u003c/a\u003e Security hardening: CBC bounds check, panic removal, assertion signature veri...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/d57d10562c0a9243d5a6d86fff5067d34c7f045f\"\u003e\u003ccode\u003ed57d105\u003c/code\u003e\u003c/a\u003e Add oss-fuzz integration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/e8596e7457e1657e90dd2fb18da03e03fc4ae1a4\"\u003e\u003ccode\u003ee8596e7\u003c/code\u003e\u003c/a\u003e Fix tests broken by expired IDP test certificate\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/5d20d420e18a8e08e870d145be26bc8110073d90\"\u003e\u003ccode\u003e5d20d42\u003c/code\u003e\u003c/a\u003e Bump github.com/beevik/etree from 1.5.0 to 1.5.1 (\u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/issues/212\"\u003e#212\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/115aa21abac634a1c9b68c2a30505b60b148f8cc\"\u003e\u003ccode\u003e115aa21\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 3.28.12 to 3.28.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/cdd66bccd151b682fe99fec82a1c8c4ecdba8ff0\"\u003e\u003ccode\u003ecdd66bc\u003c/code\u003e\u003c/a\u003e Tidy dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/3418f9ae09063ff8df0ce1bd93f24e538e614def\"\u003e\u003ccode\u003e3418f9a\u003c/code\u003e\u003c/a\u003e Avoid panic when the encrypted data has wrong size for CBC\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/russellhaering/gosaml2/compare/v0.9.1...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/russellhaering/goxmldsig` from 1.4.0 to 1.6.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/russellhaering/goxmldsig/releases\"\u003egithub.com/russellhaering/goxmldsig's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.6.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSecurity:\u003c/strong\u003e Fix possible signature validation bypass caused by loop variable capture in \u003ccode\u003evalidateSignature\u003c/code\u003e (GHSA-479m-364c-43vc)\u003c/li\u003e\n\u003cli\u003eBump minimum Go version to 1.23\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003egithub.com/beevik/etree\u003c/code\u003e to v1.6.0\u003c/li\u003e\n\u003cli\u003eAdd fuzz tests for XML signature validation and canonicalization\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0\"\u003ehttps://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.5.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump dependencies\u003c/li\u003e\n\u003cli\u003eUpdate GitHub workflows\u003c/li\u003e\n\u003cli\u003eSecurity hardening by \u003ca href=\"https://github.com/ahacker1-securesaml\"\u003e\u003ccode\u003e@​ahacker1-securesaml\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/goxmldsig/compare/v1.4.0...v1.5.0\"\u003ehttps://github.com/russellhaering/goxmldsig/compare/v1.4.0...v1.5.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/878c8c615feb628064040115d00e105a137fcfa7\"\u003e\u003ccode\u003e878c8c6\u003c/code\u003e\u003c/a\u003e Apply go fix ./...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/db3d1e31f7535d7f5debb49851b9e9a2ff08b936\"\u003e\u003ccode\u003edb3d1e3\u003c/code\u003e\u003c/a\u003e Fix loop variable capture bug in validateSignature\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/4f576b89acf01f68983ca5cb9dcebd0b460234bc\"\u003e\u003ccode\u003e4f576b8\u003c/code\u003e\u003c/a\u003e Bump dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/79c29ee3ed2da54553a4132b372ced83185fcf12\"\u003e\u003ccode\u003e79c29ee\u003c/code\u003e\u003c/a\u003e Rename FuzzValidate to FuzzValidateXML to avoid name collision\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/ac7bf745b9fd3d92460ad9be3459a97b0e3bf89f\"\u003e\u003ccode\u003eac7bf74\u003c/code\u003e\u003c/a\u003e Add fuzz tests for XML signature validation and canonicalization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/a5805dfad93fc67a2106a1dc6d881df83769e3eb\"\u003e\u003ccode\u003ea5805df\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 2.13.4 to 3.28.17 (\u003ca href=\"https://redirect.github.com/russellhaering/goxmldsig/issues/155\"\u003e#155\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/7dac9ec3b2a1a336d73ff091fba4131d186dfec6\"\u003e\u003ccode\u003e7dac9ec\u003c/code\u003e\u003c/a\u003e Update GitHub Workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/1bf54ca740682fac1149814344c24c722fde8238\"\u003e\u003ccode\u003e1bf54ca\u003c/code\u003e\u003c/a\u003e Bump dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/e1c8a5b89d1d03089aa1a0ec546b33aaf80ee02f\"\u003e\u003ccode\u003ee1c8a5b\u003c/code\u003e\u003c/a\u003e Refactor to help eliminate potential vulnerabilities:\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/2ac5490a2441a3484e030c5cfeb02ce62886c01a\"\u003e\u003ccode\u003e2ac5490\u003c/code\u003e\u003c/a\u003e Refactor .verifyCertificate to obtain the certificate from an identifier from...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/russellhaering/goxmldsig/compare/v1.4.0...v1.6.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/slack-go/slack` from 0.10.1 to 0.23.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/slack-go/slack/releases\"\u003egithub.com/slack-go/slack's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.23.1\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!IMPORTANT]\nEven though this is a [security] patch release, if you were using an empty secret, this is a breaking change due to a change in behaviour. That's on purpose, to ensure you fix your approach so that there are no footguns.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eNewSecretsVerifier\u003c/code\u003e now rejects empty signing secrets to avoid accepting forged request\nsignatures when applications are misconfigured.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/slack-go/slack/compare/v0.23.0...v0.23.1\"\u003ehttps://github.com/slack-go/slack/compare/v0.23.0...v0.23.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.23.0\u003c/h2\u003e\n\u003ch2\u003eAdded\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(socketmode): expose socketmode handler \u003ccode\u003edispatcher\u003c/code\u003e method by \u003ca href=\"https://github.com/nlopes\"\u003e\u003ccode\u003e@​nlopes\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/slack-go/slack/pull/1550\"\u003eslack-go/slack#1550\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(block): add card and carousel blocks by \u003ca href=\"https://github.com/nlopes\"\u003e\u003ccode\u003e@​nlopes\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/slack-go/slack/pull/1551\"\u003eslack-go/slack#1551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(assistant): add username and icon to status update by \u003ca href=\"https://github.com/charleenwang\"\u003e\u003ccode\u003e@​charleenwang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/slack-go/slack/pull/1553\"\u003eslack-go/slack#1553\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(block): add alert block by \u003ca href=\"https://github.com/nlopes\"\u003e\u003ccode\u003e@​nlopes\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/slack-go/slack/pull/1552\"\u003eslack-go/slack#1552\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/charleenwang\"\u003e\u003ccode\u003e@​charleenwang\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/slack-go/slack/pull/1553\"\u003eslack-go/slack#1553\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/slack-go/slack/compare/v0.22.0...v0.23.0\"\u003ehttps://github.com/slack-go/slack/compare/v0.22.0...v0.23.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.22.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eOAuth PKCE support\u003c/strong\u003e - \u003ccode\u003eOAuthOptionCodeVerifier\u003c/code\u003e option for \u003ccode\u003eGetOAuthV2Response\u003c/code\u003e, plus \u003ccode\u003eGenerateCodeVerifier()\u003c/code\u003e and \u003ccode\u003eGenerateCodeChallenge()\u003c/code\u003e helpers (RFC 7636). \u003ccode\u003eclient_secret\u003c/code\u003e is now conditionally omitted when empty in both \u003ccode\u003eGetOAuthV2ResponseContext\u003c/code\u003e and \u003ccode\u003eRefreshOAuthV2TokenContext\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eManifest scope fields\u003c/strong\u003e - \u003ccode\u003eBotOptional\u003c/code\u003e and \u003ccode\u003eUserOptional\u003c/code\u003e on \u003ccode\u003eOAuthScopes\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRich text styles\u003c/strong\u003e - \u003ccode\u003eUnderline\u003c/code\u003e, \u003ccode\u003eHighlight\u003c/code\u003e, \u003ccode\u003eClientHighlight\u003c/code\u003e, and \u003ccode\u003eUnlink\u003c/code\u003e on \u003ccode\u003eRichTextSectionTextStyle\u003c/code\u003e. \u003ccode\u003eStyle\u003c/code\u003e field on \u003ccode\u003eRichTextSectionUserGroupElement\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eAssistant search context\u003c/strong\u003e - \u003ccode\u003eSort\u003c/code\u003e, \u003ccode\u003eSortDir\u003c/code\u003e, \u003ccode\u003eBefore\u003c/code\u003e, \u003ccode\u003eAfter\u003c/code\u003e, \u003ccode\u003eHighlight\u003c/code\u003e, \u003ccode\u003eIncludeContextMessages\u003c/code\u003e, \u003ccode\u003eIncludeDeletedUsers\u003c/code\u003e, \u003ccode\u003eIncludeMessageBlocks\u003c/code\u003e, \u003ccode\u003eIncludeArchivedChannels\u003c/code\u003e, \u003ccode\u003eDisableSemanticSearch\u003c/code\u003e, \u003ccode\u003eModifiers\u003c/code\u003e, \u003ccode\u003eTermClauses\u003c/code\u003e parameters and new response types (\u003ccode\u003eAssistantSearchContextFile\u003c/code\u003e, \u003ccode\u003eAssistantSearchContextChannel\u003c/code\u003e, \u003ccode\u003eAssistantSearchContextMessageContext\u003c/code\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003esocketmode: malformed JSON no longer forces reconnect\u003c/strong\u003e - \u003ccode\u003ejson.SyntaxError\u003c/code\u003e and \u003ccode\u003ejson.UnmarshalTypeError\u003c/code\u003e now emit an \u003ccode\u003eEventTypeIncomingError\u003c/code\u003e event and continue reading instead of killing the WebSocket connection.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esocketmode: \u003ccode\u003edebug_reconnects\u003c/code\u003e query param applied correctly\u003c/strong\u003e - the parameter was silently discarded due to a missing \u003ccode\u003eurl.RawQuery\u003c/code\u003e assignment.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eChannelTypes\u003c/code\u003e and \u003ccode\u003eContentTypes\u003c/code\u003e now send comma-separated values instead of repeated form keys, matching the convention used by every other method in the library.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eassistant:write\u003c/code\u003e scope marked as deprecated in favour of \u003ccode\u003echat:write\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ccode\u003ev0.21.1...v0.22.0\u003c/code\u003e\u003c/p\u003e\n\u003ch2\u003ev0.21.1\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eMessageEvent\u003c/code\u003e channel type helpers\u003c/strong\u003e — New \u003ccode\u003eChannelTypeChannel\u003c/code\u003e, \u003ccode\u003eChannelTypeGroup\u003c/code\u003e,\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/slack-go/slack/blob/master/CHANGELOG.md\"\u003egithub.com/slack-go/slack's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[0.23.1] - 2026-05-10\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eNewSecretsVerifier\u003c/code\u003e now rejects empty signing secrets to avoid accepting forged request\nsignatures when applications are misconfigured.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[0.23.0] - 2026-04-22\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBlock Kit: \u003ccode\u003eCardBlock\u003c/code\u003e and \u003ccode\u003eCarouselBlock\u003c/code\u003e\u003c/strong\u003e — Support for two of the new\nagent-UI blocks announced in the\n\u003ca href=\"https://docs.slack.dev/changelog/2026/04/16/block-kit-new-blocks\"\u003eApril 16 Slack changelog\u003c/a\u003e.\n\u003ccode\u003eCardBlock\u003c/code\u003e is constructed via \u003ccode\u003eNewCardBlock\u003c/code\u003e with a functional-options\npattern and fluent \u003ccode\u003eWith*\u003c/code\u003e builders (\u003ccode\u003eWithTitle\u003c/code\u003e, \u003ccode\u003eWithSubtitle\u003c/code\u003e, \u003ccode\u003eWithBody\u003c/code\u003e,\n\u003ccode\u003eWithIcon\u003c/code\u003e, \u003ccode\u003eWithHeroImage\u003c/code\u003e, \u003ccode\u003eWithActions\u003c/code\u003e). \u003ccode\u003eCarouselBlock\u003c/code\u003e is constructed\nvia \u003ccode\u003eNewCarouselBlock\u003c/code\u003e with a variadic \u003ccode\u003e*CardBlock\u003c/code\u003e list plus \u003ccode\u003eWithBlockID\u003c/code\u003e\nand \u003ccode\u003eAddCard\u003c/code\u003e helpers. Both blocks wire into \u003ccode\u003eBlocks.UnmarshalJSON\u003c/code\u003e for\nround-trip fidelity, and reuse existing \u003ccode\u003eImageBlockElement\u003c/code\u003e /\n\u003ccode\u003eButtonBlockElement\u003c/code\u003e / \u003ccode\u003eBlockElements\u003c/code\u003e types rather than introducing new\ncomposition objects.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBlock Kit: \u003ccode\u003eAlertBlock\u003c/code\u003e\u003c/strong\u003e — Support for the third of the new agent-UI\nblocks from the\n\u003ca href=\"https://docs.slack.dev/changelog/2026/04/16/block-kit-new-blocks\"\u003eApril 16 Slack changelog\u003c/a\u003e.\n\u003ccode\u003eAlertBlock\u003c/code\u003e is constructed via \u003ccode\u003eNewAlertBlock\u003c/code\u003e with a \u003ccode\u003e*TextBlockObject\u003c/code\u003e\nbody and a functional-options pattern. Severity is set via\n\u003ccode\u003eAlertBlockOptionLevel\u003c/code\u003e (\u003ccode\u003eAlertLevelDefault\u003c/code\u003e, \u003ccode\u003eAlertLevelInfo\u003c/code\u003e,\n\u003ccode\u003eAlertLevelWarning\u003c/code\u003e, \u003ccode\u003eAlertLevelError\u003c/code\u003e, \u003ccode\u003eAlertLevelSuccess\u003c/code\u003e) and the block\nID via \u003ccode\u003eAlertBlockOptionBlockID\u003c/code\u003e. Wires into \u003ccode\u003eBlocks.UnmarshalJSON\u003c/code\u003e for\nround-trip fidelity. Must be delivered via the streaming chunks API —\n\u003ccode\u003echat.postMessage\u003c/code\u003e rejects it as an unsupported block type.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eStreaming-message chunks API\u003c/strong\u003e — \u003ccode\u003echat.startStream\u003c/code\u003e / \u003ccode\u003echat.appendStream\u003c/code\u003e /\n\u003ccode\u003echat.stopStream\u003c/code\u003e now accept a \u003ccode\u003echunks\u003c/code\u003e parameter. Added \u003ccode\u003eMsgOptionChunks\u003c/code\u003e\nalong with a \u003ccode\u003eStreamChunk\u003c/code\u003e interface and four chunk types:\n\u003ccode\u003eMarkdownTextChunk\u003c/code\u003e, \u003ccode\u003eTaskUpdateChunk\u003c/code\u003e, \u003ccode\u003ePlanUpdateChunk\u003c/code\u003e, and \u003ccode\u003eBlocksChunk\u003c/code\u003e\n(each with a \u003ccode\u003eNew*Chunk\u003c/code\u003e constructor). This is the supported transport for\nstreaming Block Kit content and the new agent-UI blocks in particular\n(which \u003ccode\u003echat.postMessage\u003c/code\u003e rejects as \u003ccode\u003eUnsupported block type\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eMsgOptionTaskDisplayMode\u003c/code\u003e\u003c/strong\u003e — New option for \u003ccode\u003echat.startStream\u003c/code\u003e controlling\nwhether task chunks render as a sequential timeline or a grouped plan.\nAccepts \u003ccode\u003eTaskDisplayModeTimeline\u003c/code\u003e or \u003ccode\u003eTaskDisplayModePlan\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003eUsername\u003c/code\u003e, \u003ccode\u003eIconURL\u003c/code\u003e, and \u003ccode\u003eIconEmoji\u003c/code\u003e fields to\n\u003ccode\u003eAssistantThreadsSetStatusParameters\u003c/code\u003e, forwarded by\n\u003ccode\u003eSetAssistantThreadsStatusContext\u003c/code\u003e, matching the new optional parameters on\n\u003ca href=\"https://docs.slack.dev/reference/methods/assistant.threads.setStatus\"\u003e\u003ccode\u003eassistant.threads.setStatus\u003c/code\u003e\u003c/a\u003e\nfor customising the status-update presentation.\u003c/li\u003e\n\u003cli\u003eExposed \u003ccode\u003eSocketmodeHandler.DispatchEvent\u003c/code\u003e (previously the unexported\n\u003ccode\u003edispatcher\u003c/code\u003e), enabling integration tests to exercise registered handlers\nwithout a live WebSocket connection. The unexported \u003ccode\u003edispatcher\u003c/code\u003e is kept as\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/34ad5c052e446f58505ae8d81a2a72821de107cc\"\u003e\u003ccode\u003e34ad5c0\u003c/code\u003e\u003c/a\u003e security: reject empty signing secret for NewSecretsVerifier\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/c6edc2762f59b0fcd2af7f2d8eab36e2f29bad7d\"\u003e\u003ccode\u003ec6edc27\u003c/code\u003e\u003c/a\u003e chore: bump go to 1.25.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/35d8f31a076f73db88bf08304a8418846ed7b865\"\u003e\u003ccode\u003e35d8f31\u003c/code\u003e\u003c/a\u003e chore: bump to v0.23.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/ae59061d9e69253ce76fa676a2a91db238d363cf\"\u003e\u003ccode\u003eae59061\u003c/code\u003e\u003c/a\u003e feat(block): add alert block (\u003ca href=\"https://redirect.github.com/slack-go/slack/issues/1552\"\u003e#1552\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/2df5cfa0b974d57fc8077ecd030be22e42a2e4a1\"\u003e\u003ccode\u003e2df5cfa\u003c/code\u003e\u003c/a\u003e feat(assistant): add username and icon to status update (\u003ca href=\"https://redirect.github.com/slack-go/slack/issues/1553\"\u003e#1553\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/e3c0e8b15630749da93cd18168a26e78a74fecd0\"\u003e\u003ccode\u003ee3c0e8b\u003c/code\u003e\u003c/a\u003e feat(block): add card and carousel blocks (\u003ca href=\"https://redirect.github.com/slack-go/slack/issues/1551\"\u003e#1551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/4c472cd10a45bd81ef26db9510a317a674293c78\"\u003e\u003ccode\u003e4c472cd\u003c/code\u003e\u003c/a\u003e feat(socketmode): expose socketmode handler \u003ccode\u003edispatcher\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/slack-go/slack/issues/1550\"\u003e#1550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/f482b199d4e33975c13e65e075bcf87173ad902f\"\u003e\u003ccode\u003ef482b19\u003c/code\u003e\u003c/a\u003e chore: v0.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/3a5db9ddb81e7c9e5379efa510ba826b1e5d935c\"\u003e\u003ccode\u003e3a5db9d\u003c/code\u003e\u003c/a\u003e chore: fix staticcheck errors (\u003ca href=\"https://redirect.github.com/slack-go/slack/issues/1548\"\u003e#1548\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/slack-go/slack/commit/19e0416c15851aa3f28d41e2b92dbb2fb541ad96\"\u003e\u003ccode\u003e19e0416\u003c/code\u003e\u003c/a\u003e ci: add staticcheck\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/slack-go/slack/compare/v0.10.1...v0.23.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.27.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.27.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.27.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.25.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.24.0 to 0.50.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnos...\n\n_Description has been truncated_\n\n---\n\n🔄 This PR performs a comprehensive dependency update across 5 directories, bumping 28 Go modules to their latest versions including major updates to security-critical packages like go-git, gRPC, and OpenTelemetry components.\n\n\u003cdetails\u003e\n\u003csummary\u003e🔍 \u003cstrong\u003eDetailed Analysis\u003c/strong\u003e\u003c/summary\u003e\n\n### Key Changes\n- **Go Version Updates**: Upgraded Go toolchain versions across modules (1.21→1.25, 1.22→1.24.0, etc.)\n- **Security Updates**: Critical security fixes in go-git (5.11.0→5.19.1), gosaml2 (0.9.1→0.11.0), and buildkit (0.12.5→0.28.1)\n- **Core Dependencies**: Major version bumps for gRPC (1.63.2→1.79.3), OpenTelemetry SDK (1.25.0→1.43.0), and Slack SDK (0.10.1→0.23.1)\n- **Infrastructure Libraries**: Updates to crypto, oauth2, Redis client, and PostgreSQL driver packages\n\n### Technical Implementation\n```mermaid\nflowchart TD\n    A[Dependabot Scan] --\u003e B[5 Directory Analysis]\n    B --\u003e C[progress-bot/]\n    B --\u003e D[lib/]\n    B --\u003e E[lib/managedservicesplatform/]\n    B --\u003e F[monitoring/]\n    B --\u003e G[Root Directory]\n    \n    C --\u003e H[4 Updates: Slack, crypto, oauth2, gRPC]\n    D --\u003e I[4 Updates: crypto, oauth2, Redis, gRPC]\n    E --\u003e J[6 Updates: OpenTelemetry, oauth2, pgx, Redis, edwards25519, gRPC]\n    F --\u003e K[3 Updates: crypto, logrus, retryablehttp]\n    G --\u003e L[8 Major Updates: distribution, go-git, buildkit, gosaml2, etc.]\n    \n    H --\u003e M[Security \u0026 Compatibility Improvements]\n    I --\u003e M\n    J --\u003e M\n    K --\u003e M\n    L --\u003e M\n```\n\n### Impact\n- **Security Enhancement**: Addresses multiple CVEs and security vulnerabilities in go-git, buildkit, and SAML libraries\n- **Performance Improvements**: Updated OpenTelemetry SDK includes performance optimizations and new features like W3C Trace Context Level 2 support\n- **Compatibility**: Maintains backward compatibility while providing access to latest features and bug fixes across the dependency tree\n- **Maintenance**: Reduces technical debt by keeping dependencies current and aligned with latest Go ecosystem standards\n\n\u003c/details\u003e\n\n_Created with [Palmier](https://www.palmier.io)_","html_url":"https://github.com/GlacierEQ/sourcegraph-public-snapshot/pull/38","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/GlacierEQ%2Fsourcegraph-public-snapshot/issues/38","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/38/packages"}},{"old_version":"0.25.2","new_version":"0.28.1","update_type":"minor","path":null,"pr_created_at":"2026-05-21T21:11:02.000Z","version_change":"0.25.2 → 0.28.1","issue":{"uuid":"4497938405","node_id":"PR_kwDOQWu_J87eG4lP","number":659,"state":"closed","title":"build(deps): bump the go_modules group across 1 directory with 5 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-21T22:53:54.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-21T21:11:02.000Z","updated_at":"2026-05-21T22:53:56.000Z","time_to_close":6172,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"go_modules","update_count":5,"packages":[{"name":"github.com/moby/buildkit","old_version":"0.25.2","new_version":"0.28.1","repository_url":"https://github.com/moby/buildkit"},{"name":"github.com/containernetworking/plugins","old_version":"1.8.0","new_version":"1.9.0"},{"name":"github.com/in-toto/in-toto-golang","old_version":"0.9.0","new_version":"0.10.0"},{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp","old_version":"1.35.0","new_version":"1.38.0"},{"name":"go.opentelemetry.io/otel/sdk","old_version":"1.39.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 2 updates in the / directory: [github.com/moby/buildkit](https://github.com/moby/buildkit) and [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go).\n\nUpdates `github.com/moby/buildkit` from 0.25.2 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.28.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix insufficient validation of Git URL \u003ccode\u003e#ref:subdir\u003c/code\u003e fragments that could allow access to restricted files outside the checked-out repository root. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg\"\u003eGHSA-4vrq-3vrq-g6gg\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a vulnerability where an untrusted custom frontend could cause files to be written outside the BuildKit state directory. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj\"\u003eGHSA-4c29-8rgm-jvjj\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a panic when processing invalid \u003ccode\u003e.dockerignore\u003c/code\u003e patterns during \u003ccode\u003eCOPY\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/patternmatcher/issues/9\"\u003emoby/patternmatcher#9\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/moby/patternmatcher\u003c/strong\u003e  v0.6.0 -\u0026gt; v0.6.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.28.0\"\u003ev0.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.28.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.28.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.28.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eAmr Mahdi\u003c/li\u003e\n\u003cli\u003eDan Duvall\u003c/li\u003e\n\u003cli\u003eDavid Karlsson\u003c/li\u003e\n\u003cli\u003eJonas Geiler\u003c/li\u003e\n\u003cli\u003eKevin L.\u003c/li\u003e\n\u003cli\u003ersteube\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8\"\u003e\u003ccode\u003e45b038c\u003c/code\u003e\u003c/a\u003e git: normalize and validate subdir paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f5462c216098af766f97ea4cb328e65c6d8f7256\"\u003e\u003ccode\u003ef5462c2\u003c/code\u003e\u003c/a\u003e git: harden ref arg handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/71577a5da7a2b3ab75a90c2cfedfda0c27d1ef40\"\u003e\u003ccode\u003e71577a5\u003c/code\u003e\u003c/a\u003e source: extract SafeFileName into shared pathutil package\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df4378316f3b000403d097551a8139a700bd823d\"\u003e\u003ccode\u003edf43783\u003c/code\u003e\u003c/a\u003e source/http: use os.Root for saved file operations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/9ce6f62aca0653657047ee613cdef22f38b31244\"\u003e\u003ccode\u003e9ce6f62\u003c/code\u003e\u003c/a\u003e source/http: sanitize downloaded filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4\"\u003e\u003ccode\u003e099cf80\u003c/code\u003e\u003c/a\u003e executor: validate container IDs centrally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/2642113bbc9d969d223c37aaabca4b50613fddf9\"\u003e\u003ccode\u003e2642113\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e from thaJeztah/0.28_backport_bump_patternmatcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/802da78332d9f2c6c9d856c1648ab52c701076fa\"\u003e\u003ccode\u003e802da78\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/patternmatcher v0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/5245d869d85d9c98f986b600584c332a3b001986\"\u003e\u003ccode\u003e5245d86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6551\"\u003e#6551\u003c/a\u003e from tonistiigi/v0.28-cherry-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/90ee5deef6c6efcb82358eb48d76235191196db1\"\u003e\u003ccode\u003e90ee5de\u003c/code\u003e\u003c/a\u003e vendor: update x/net to v0.51.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.25.2...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/containernetworking/plugins` from 1.8.0 to 1.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/containernetworking/plugins/releases\"\u003egithub.com/containernetworking/plugins's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCNI plugins v1.9.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThis release fixes \u003ca href=\"https://github.com/containernetworking/plugins/security/advisories/GHSA-jv3w-x3r3-g6rm\"\u003eCVE-2025-67499\u003c/a\u003e, a bug in the \u003ccode\u003enftables\u003c/code\u003e backend for the \u003ccode\u003eportmap\u003c/code\u003e plugin that can cause traffic to be unexpectedly intercepted.\u003c/p\u003e\n\u003ch3\u003eBugs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eportmap: ensure nftables backend only intercept local traffic by \u003ca href=\"https://github.com/champtar\"\u003e\u003ccode\u003e@​champtar\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/containernetworking/plugins/pull/1210\"\u003econtainernetworking/plugins#1210\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix file exists errro in dummy cni by \u003ca href=\"https://github.com/liuyuan10\"\u003e\u003ccode\u003e@​liuyuan10\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/containernetworking/plugins/pull/1205\"\u003econtainernetworking/plugins#1205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIgnore settling with down state since it would never settle by \u003ca href=\"https://github.com/bn222\"\u003e\u003ccode\u003e@​bn222\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/containernetworking/plugins/pull/1207\"\u003econtainernetworking/plugins#1207\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/containernetworking/plugins/compare/v1.8.0...v1.9.0\"\u003ehttps://github.com/containernetworking/plugins/compare/v1.8.0...v1.9.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containernetworking/plugins/commit/9b3772e1a7abf93cbb7c6526a28bc0d27b830e02\"\u003e\u003ccode\u003e9b3772e\u003c/code\u003e\u003c/a\u003e portmap: ensure nftables backend only intercept local traffic\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containernetworking/plugins/commit/8ee59c6f6ac8e05a64ac9a4448145aa0f5db7213\"\u003e\u003ccode\u003e8ee59c6\u003c/code\u003e\u003c/a\u003e portmap: fix CHECK for nftables backend\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containernetworking/plugins/commit/372953dfb89fe5c17a29a865b502a2eabb31a195\"\u003e\u003ccode\u003e372953d\u003c/code\u003e\u003c/a\u003e Ignore settling with down state since it will never settle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containernetworking/plugins/commit/85daca7d7b247c5e58a6216e09388d8d3aa7ae1a\"\u003e\u003ccode\u003e85daca7\u003c/code\u003e\u003c/a\u003e Fix file exists errro in dummy cni\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/containernetworking/plugins/compare/v1.8.0...v1.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/in-toto/in-toto-golang` from 0.9.0 to 0.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/in-toto/in-toto-golang/releases\"\u003egithub.com/in-toto/in-toto-golang's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/232\"\u003ein-toto/in-toto-golang#232\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate maintainers and governance by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/233\"\u003ein-toto/in-toto-golang#233\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/234\"\u003ein-toto/in-toto-golang#234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.3 to 2.1.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/235\"\u003ein-toto/in-toto-golang#235\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/236\"\u003ein-toto/in-toto-golang#236\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix expired signature in test by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/241\"\u003ein-toto/in-toto-golang#241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.8.0 to 0.9.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/240\"\u003ein-toto/in-toto-golang#240\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.5 to 2.1.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/239\"\u003ein-toto/in-toto-golang#239\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/242\"\u003ein-toto/in-toto-golang#242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.56.0 to 1.56.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/243\"\u003ein-toto/in-toto-golang#243\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate GitHub Actions workflows by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/246\"\u003ein-toto/in-toto-golang#246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/245\"\u003ein-toto/in-toto-golang#245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremove linters that are no longer supported and add to make file by \u003ca href=\"https://github.com/pxp928\"\u003e\u003ccode\u003e@​pxp928\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/249\"\u003ein-toto/in-toto-golang#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd match products feature by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/237\"\u003ein-toto/in-toto-golang#237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove unfinished link on record stop by \u003ca href=\"https://github.com/PradyumnaKrishna\"\u003e\u003ccode\u003e@​PradyumnaKrishna\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/248\"\u003ein-toto/in-toto-golang#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.56.1 to 1.56.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/250\"\u003ein-toto/in-toto-golang#250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.6.0 to 0.7.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/251\"\u003ein-toto/in-toto-golang#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.56.2 to 1.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/255\"\u003ein-toto/in-toto-golang#255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd tests for coverage in envelope.go by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/256\"\u003ein-toto/in-toto-golang#256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/257\"\u003ein-toto/in-toto-golang#257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/258\"\u003ein-toto/in-toto-golang#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/259\"\u003ein-toto/in-toto-golang#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixes filepath pattern matching in windows by \u003ca href=\"https://github.com/PradyumnaKrishna\"\u003e\u003ccode\u003e@​PradyumnaKrishna\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/254\"\u003ein-toto/in-toto-golang#254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 3.5.3 to 3.6.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/261\"\u003ein-toto/in-toto-golang#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 3.6.0 to 4.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/262\"\u003ein-toto/in-toto-golang#262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/263\"\u003ein-toto/in-toto-golang#263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.57.0 to 1.58.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/264\"\u003ein-toto/in-toto-golang#264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/266\"\u003ein-toto/in-toto-golang#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate Provenance v1 struct in favor of /attestation protobufs by \u003ca href=\"https://github.com/marcelamelara\"\u003e\u003ccode\u003e@​marcelamelara\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/267\"\u003ein-toto/in-toto-golang#267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/269\"\u003ein-toto/in-toto-golang#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 4.0.0 to 4.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/270\"\u003ein-toto/in-toto-golang#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop use of \u003ccode\u003eany\u003c/code\u003e for hash objects by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/238\"\u003ein-toto/in-toto-golang#238\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/271\"\u003ein-toto/in-toto-golang#271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/273\"\u003ein-toto/in-toto-golang#273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/272\"\u003ein-toto/in-toto-golang#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.12.0 to 0.17.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/274\"\u003ein-toto/in-toto-golang#274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.3 to 1.59.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/275\"\u003ein-toto/in-toto-golang#275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 4.1.0 to 4.1.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/276\"\u003ein-toto/in-toto-golang#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTrigger workflow on pushes only to master branch by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/280\"\u003ein-toto/in-toto-golang#280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.13.0 to 0.14.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/278\"\u003ein-toto/in-toto-golang#278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/277\"\u003ein-toto/in-toto-golang#277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd openssf scorecard by \u003ca href=\"https://github.com/viveksahu26\"\u003e\u003ccode\u003e@​viveksahu26\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/281\"\u003ein-toto/in-toto-golang#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/282\"\u003ein-toto/in-toto-golang#282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix coveralls, use action by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/285\"\u003ein-toto/in-toto-golang#285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSecure System Lab Sign/Verify by \u003ca href=\"https://github.com/Forrin\"\u003e\u003ccode\u003e@​Forrin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/279\"\u003ein-toto/in-toto-golang#279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.14.0 to 0.15.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/287\"\u003ein-toto/in-toto-golang#287\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 4.1.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/289\"\u003ein-toto/in-toto-golang#289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.59.0 to 1.60.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/290\"\u003ein-toto/in-toto-golang#290\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/db554e2ab6498a07d719e5374efa6ad4a7a7c222\"\u003e\u003ccode\u003edb554e2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/450\"\u003e#450\u003c/a\u003e from in-toto/dependabot/go_modules/all-e2678a00b5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/b2ea0f2587b6b6df90a489a199f4e845fd53bc18\"\u003e\u003ccode\u003eb2ea0f2\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/sys in the all group\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/acc2f336840dd6a4c09ced5dcd69e1dc8cd1dce3\"\u003e\u003ccode\u003eacc2f33\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/448\"\u003e#448\u003c/a\u003e from in-toto/dependabot/go_modules/github.com/secure-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/313b1d6c89e412fc2e1b68ec8c4ffd3767408cf2\"\u003e\u003ccode\u003e313b1d6\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/449\"\u003e#449\u003c/a\u003e from in-toto/dependabot/github_actions/all-2ed24f8e11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/d9a60afc87a0ad342c30719f864042075194708f\"\u003e\u003ccode\u003ed9a60af\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/secure-systems-lab/go-securesystemslib\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/e7783d589362197c09b16b9f4b6e533957a56bef\"\u003e\u003ccode\u003ee7783d5\u003c/code\u003e\u003c/a\u003e chore(deps): bump the all group with 3 updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/7a1798a0e1cd26c554b353b6b792b73c1448691d\"\u003e\u003ccode\u003e7a1798a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/447\"\u003e#447\u003c/a\u003e from in-toto/fix-ci\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/b6af1a7fdb901ab63bd21b6a8a85b232843ce48f\"\u003e\u003ccode\u003eb6af1a7\u003c/code\u003e\u003c/a\u003e Modernize CI and automation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/ad676459ee070471436b44d3b482698975c35030\"\u003e\u003ccode\u003ead67645\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/446\"\u003e#446\u003c/a\u003e from in-toto/dependabot/go_modules/google.golang.org/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/b63fd336d6a981407d080757e958a50d0cdf5901\"\u003e\u003ccode\u003eb63fd33\u003c/code\u003e\u003c/a\u003e chore(deps): bump google.golang.org/grpc from 1.74.2 to 1.78.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/in-toto/in-toto-golang/compare/v0.9.0...v0.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.35.0 to 1.38.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.38.0/0.60.0/0.14.0/0.0.13] 2025-08-29\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.23].\nThe next release will require at least [Go 1.24].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd native histogram exemplar support in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/6772\"\u003e#6772\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd template attribute functions to the \u003ccode\u003ego.opentelmetry.io/otel/semconv/v1.34.0\u003c/code\u003e package. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/6939\"\u003e#6939\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eContainerLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eDBOperationParameter\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eDBSystemParameter\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eHTTPRequestHeader\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eHTTPResponseHeader\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SCronJobAnnotation\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SCronJobLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SDaemonSetAnnotation\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SDaemonSetLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SDeploymentAnnotation\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SDeploymentLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SJobAnnotation\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SJobLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SNamespaceAnnotation\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SNamespaceLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SNodeAnnotation\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SNodeLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SPodAnnotation\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SPodLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SReplicaSetAnnotation\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SReplicaSetLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SStatefulSetAnnotation\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eK8SStatefulSetLabel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eProcessEnvironmentVariable\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eRPCConnectRPCRequestMetadata\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eRPCConnectRPCResponseMetadata\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eRPCGRPCRequestMetadata\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eRPCGRPCResponseMetadata\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eErrorType\u003c/code\u003e attribute helper function to the \u003ccode\u003ego.opentelmetry.io/otel/semconv/v1.34.0\u003c/code\u003e package. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/6962\"\u003e#6962\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithAllowKeyDuplication\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e which can be used to disable deduplication for log records. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/6968\"\u003e#6968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimit\u003c/code\u003e option to configure the cardinality limit in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/6996\"\u003e#6996\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7065\"\u003e#7065\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7081\"\u003e#7081\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7164\"\u003e#7164\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7165\"\u003e#7165\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7179\"\u003e#7179\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eClone\u003c/code\u003e method to \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/log\u003c/code\u003e that returns a copy of the record with no shared state. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7001\"\u003e#7001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability span and batch span processor metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e.\nCheck the \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace/internal/x\u003c/code\u003e package documentation for more information. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7027\"\u003e#7027\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/6393\"\u003e#6393\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7209\"\u003e#7209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.36.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.36.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.36.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.34.0.\u003c/code\u003e(\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7032\"\u003e#7032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7041\"\u003e#7041\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for configuring Prometheus name translation using \u003ccode\u003eWithTranslationStrategy\u003c/code\u003e option in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e. The current default translation strategy when UTF-8 mode is enabled is \u003ccode\u003eNoUTF8EscapingWithSuffixes\u003c/code\u003e, but a future release will change the default strategy to \u003ccode\u003eUnderscoreEscapingWithSuffixes\u003c/code\u003e for compliance with the specification. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7111\"\u003e#7111\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability log metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e.\nCheck the \u003ccode\u003ego.opentelemetry.io/otel/sdk/log/internal/x\u003c/code\u003e package documentation for more information. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7121\"\u003e#7121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental self-observability trace exporter metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdouttrace\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/84e3f3ac8b25204f3a0f77a805437a5e08573b35\"\u003e\u003ccode\u003e84e3f3a\u003c/code\u003e\u003c/a\u003e Release v1.38.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7271\"\u003e#7271\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/18424a46edbe635f53b87625541abe341ea24467\"\u003e\u003ccode\u003e18424a4\u003c/code\u003e\u003c/a\u003e Add tests for attribute JSON marshalling (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7268\"\u003e#7268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/979875946326aee5bd59601796ee2c90b63a3316\"\u003e\u003ccode\u003e9798759\u003c/code\u003e\u003c/a\u003e Statically define trace observability attributes (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7263\"\u003e#7263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/be1e57fb3651b1a0d16f91a413aa40c47078881d\"\u003e\u003ccode\u003ebe1e57f\u003c/code\u003e\u003c/a\u003e Refactor BSP observability setup (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7264\"\u003e#7264\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d99c68cb21b2e7abf2405ebf9d17f419daef273e\"\u003e\u003ccode\u003ed99c68c\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mgechev/revive to v1.12.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7269\"\u003e#7269\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0724539e71727d03916c5c5996c67c2268ca8774\"\u003e\u003ccode\u003e0724539\u003c/code\u003e\u003c/a\u003e Add benchmark for set equality (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7262\"\u003e#7262\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5358fd737d0c0c4adedcf4c76f2d94bb51f4a493\"\u003e\u003ccode\u003e5358fd7\u003c/code\u003e\u003c/a\u003e Upgrade semconv dependencies to v1.37.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7260\"\u003e#7260\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/25d02741f7640af42083dfb217d26be89f1fe94c\"\u003e\u003ccode\u003e25d0274\u003c/code\u003e\u003c/a\u003e fix(deps): update module github.com/stretchr/testify to v1.11.1 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7261\"\u003e#7261\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d0cab8666b740c975f028236610cab2663f02031\"\u003e\u003ccode\u003ed0cab86\u003c/code\u003e\u003c/a\u003e prometheus: Add support for setting Translation Strategy config option (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7111\"\u003e#7111\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3342341f15081be03d23b3e36b9e2c07ffca858a\"\u003e\u003ccode\u003e3342341\u003c/code\u003e\u003c/a\u003e Generate the \u003ccode\u003esemconv/v1.37.0\u003c/code\u003e packages (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7254\"\u003e#7254\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.35.0...v1.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.39.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/eminwux/kukeon/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/eminwux/kukeon/pull/659","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/eminwux%2Fkukeon/issues/659","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/659/packages"}},{"old_version":"0.10.3","new_version":"0.30.0","update_type":"minor","path":null,"pr_created_at":"2026-05-20T13:25:42.000Z","version_change":"0.10.3 → 0.30.0","issue":{"uuid":"4486833425","node_id":"PR_kwDOHKqUys7di4at","number":668,"state":"closed","title":"build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.30.0","user":"dependabot[bot]","labels":["stale"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":"2026-06-11T02:18:11.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-20T13:25:42.000Z","updated_at":"2026-06-11T02:18:19.000Z","time_to_close":1860749,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/moby/buildkit","old_version":"0.10.3","new_version":"0.30.0","repository_url":"https://github.com/moby/buildkit"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.10.3 to 0.30.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.30.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.30.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eNatnael Gebremariam\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eDawei Wei\u003c/li\u003e\n\u003cli\u003eDmitrii Kostyrev\u003c/li\u003e\n\u003cli\u003eJiří Moravčík\u003c/li\u003e\n\u003cli\u003eVladimir Kuznichenkov\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuiltin Dockerfile frontend has been updated to v1.24.0 \u003ca href=\"https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.24.0\"\u003echangelog\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuildKit now supports the concept of \u0026quot;compatibility version\u0026quot; for improved reproducible builds support across different BuildKit versions. This allows users to specify a version for which the build should be compatible with, and BuildKit will attempt to maintain compatibility with that version when possible. Compatibility version will be stored in the provenance attestation of the build and can be used to independently verify the artifacts of the build on other BuildKit versions. The current compatibility version and backward compatibility with old versions are defined in \u003ca href=\"https://github.com/moby/buildkit/blob/v0.30.0-rc1/docs/build-repro.md#compatibility-version\"\u003eBuild reproducibility docs\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6681\"\u003e#6681\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGit sources now support \u003ccode\u003efetch-by-commit\u003c/code\u003e option where commit is fetched by the SHA and then associated with the reference. This is useful when checking out mutable references \u003ccode\u003erefs/NR/merge\u003c/code\u003e where the commit SHA may change during invocation and cause checksum mismatch error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6708\"\u003e#6708\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe LLB API now supports Git bundle format. Git bundles can be loaded from registry or OCI layout blobs and Git sources can be checked out into bundle format for snapshotting \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6711\"\u003e#6711\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eProvenance attestations for multi-pass or chained builds now include request details for root requests and individual input requests, allowing full reconstruction of such complex builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6739\"\u003e#6739\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe version of the built-in Dockerfile frontend that was used is now included in the provenance metadata and reported via worker info APIs. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6705\"\u003e#6705\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error reporting for registry errors on cache export \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports additional options \u003ccode\u003eretry_mode\u003c/code\u003e and \u003ccode\u003eretry_max_attempts\u003c/code\u003e to configure retry behavior of S3 client \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6657\"\u003e#6657\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports \u003ccode\u003edisable_accept_encoding\u003c/code\u003e option for GCS interoperability \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6642\"\u003e#6642\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce potential lock contention in gateway forwarder for improved performance on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6741\"\u003e#6741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eA new log level option has been added to the buildkitd TOML configuration; previous \u0026quot;debug\u0026quot; and \u0026quot;trace\u0026quot; options have been deprecated \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6732\"\u003e#6732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow gateway frontend requests to forward to the built-in Dockerfile frontend the same way as to external frontends \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6643\"\u003e#6643\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSession connection health checks have been improved to better detect loss of connectivity and avoid stuck builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6649\"\u003e#6649\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix issue with Git subdirectory value not being included in ConfigSource section of SLSA provenance for builds from Git sources \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6724\"\u003e#6724\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid potential deadlock if the credential helper in the client is misbehaving and never returns credentials \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6709\"\u003e#6709\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in provenance computation on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible provenance capture race in concurrent no-cache builds that could leave source pins empty and fail with an invalid checksum digest error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6764\"\u003e#6764\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in progress writer \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6679\"\u003e#6679\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix data race in S3 cache reader \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6675\"\u003e#6675\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible Git config lookup errors on Windows \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6639\"\u003e#6639\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix build cancellation not working properly when blocked on credential callback \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6641\"\u003e#6641\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Azure/azure-sdk-for-go/sdk/azcore\u003c/strong\u003e                                  v1.20.0 -\u0026gt; v1.21.0\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Microsoft/hcsshim\u003c/strong\u003e                                                  v0.14.0-rc.1 -\u0026gt; v0.14.1\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2\u003c/strong\u003e                                                  v1.41.4 -\u0026gt; v1.41.7\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/dd2170e156c9633da1b2d1a58a6188e3f7d36fa4\"\u003e\u003ccode\u003edd2170e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6770\"\u003e#6770\u003c/a\u003e from crazy-max/v0.30-picks-0.30.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e4b9769cf519c5c1d9bc59643adde2c977f9ae30\"\u003e\u003ccode\u003ee4b9769\u003c/code\u003e\u003c/a\u003e test: gate merge diff tests through worker capabilities\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/d5956a1cf26f4055deaff883dad537b6a25bcfa1\"\u003e\u003ccode\u003ed5956a1\u003c/code\u003e\u003c/a\u003e skip pin race test on workers without merge diff support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/505ab37cd6c6c6d2ac37e3a598eab4abdc315c2a\"\u003e\u003ccode\u003e505ab37\u003c/code\u003e\u003c/a\u003e solver: fix race in walkProvenance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f2e48d20dc7d744a4051d6b5591b851a29a6232f\"\u003e\u003ccode\u003ef2e48d2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e from jsternberg/add-error-details\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f7a40a08716a42f1066b99bb0cdc09cab42987b9\"\u003e\u003ccode\u003ef7a40a0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e from tonistiigi/fix-provenance-data-race\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/80e934d8b310736f71a6a33c696b8448bec6c12d\"\u003e\u003ccode\u003e80e934d\u003c/code\u003e\u003c/a\u003e remotecache: propagate details field from registry when included\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/a7c874909a0045c6e32c1c1314e7aba949bf85da\"\u003e\u003ccode\u003ea7c8749\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6761\"\u003e#6761\u003c/a\u003e from moby/dependabot/github_actions/github/codeql-ac...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df37b6751b796a1b22d4dfe0ffb0bc9962b2c38b\"\u003e\u003ccode\u003edf37b67\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.35.3 to 4.35.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c7ba94199885e89e25615d3e2d78fea86a2c7eb7\"\u003e\u003ccode\u003ec7ba941\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6759\"\u003e#6759\u003c/a\u003e from moby/dependabot/github_actions/docker/github-bu...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.10.3...v0.30.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit\u0026package-manager=go_modules\u0026previous-version=0.10.3\u0026new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/RemakingEden/dagger/pull/668","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/RemakingEden%2Fdagger/issues/668","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/668/packages"}},{"old_version":"0.10.3","new_version":"0.30.0","update_type":"minor","path":null,"pr_created_at":"2026-05-18T14:57:50.000Z","version_change":"0.10.3 → 0.30.0","issue":{"uuid":"4470161807","node_id":"PR_kwDOENmims7cs7GK","number":318,"state":"open","title":"build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.30.0","user":"dependabot[bot]","labels":["dependencies","go","stale"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-18T14:57:50.000Z","updated_at":"2026-06-18T01:17:51.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/moby/buildkit","old_version":"0.10.3","new_version":"0.30.0","repository_url":"https://github.com/moby/buildkit"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.10.3 to 0.30.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.30.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.30.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eNatnael Gebremariam\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eDawei Wei\u003c/li\u003e\n\u003cli\u003eDmitrii Kostyrev\u003c/li\u003e\n\u003cli\u003eJiří Moravčík\u003c/li\u003e\n\u003cli\u003eVladimir Kuznichenkov\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuiltin Dockerfile frontend has been updated to v1.24.0 \u003ca href=\"https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.24.0\"\u003echangelog\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuildKit now supports the concept of \u0026quot;compatibility version\u0026quot; for improved reproducible builds support across different BuildKit versions. This allows users to specify a version for which the build should be compatible with, and BuildKit will attempt to maintain compatibility with that version when possible. Compatibility version will be stored in the provenance attestation of the build and can be used to independently verify the artifacts of the build on other BuildKit versions. The current compatibility version and backward compatibility with old versions are defined in \u003ca href=\"https://github.com/moby/buildkit/blob/v0.30.0-rc1/docs/build-repro.md#compatibility-version\"\u003eBuild reproducibility docs\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6681\"\u003e#6681\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGit sources now support \u003ccode\u003efetch-by-commit\u003c/code\u003e option where commit is fetched by the SHA and then associated with the reference. This is useful when checking out mutable references \u003ccode\u003erefs/NR/merge\u003c/code\u003e where the commit SHA may change during invocation and cause checksum mismatch error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6708\"\u003e#6708\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe LLB API now supports Git bundle format. Git bundles can be loaded from registry or OCI layout blobs and Git sources can be checked out into bundle format for snapshotting \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6711\"\u003e#6711\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eProvenance attestations for multi-pass or chained builds now include request details for root requests and individual input requests, allowing full reconstruction of such complex builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6739\"\u003e#6739\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe version of the built-in Dockerfile frontend that was used is now included in the provenance metadata and reported via worker info APIs. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6705\"\u003e#6705\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error reporting for registry errors on cache export \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports additional options \u003ccode\u003eretry_mode\u003c/code\u003e and \u003ccode\u003eretry_max_attempts\u003c/code\u003e to configure retry behavior of S3 client \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6657\"\u003e#6657\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports \u003ccode\u003edisable_accept_encoding\u003c/code\u003e option for GCS interoperability \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6642\"\u003e#6642\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce potential lock contention in gateway forwarder for improved performance on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6741\"\u003e#6741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eA new log level option has been added to the buildkitd TOML configuration; previous \u0026quot;debug\u0026quot; and \u0026quot;trace\u0026quot; options have been deprecated \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6732\"\u003e#6732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow gateway frontend requests to forward to the built-in Dockerfile frontend the same way as to external frontends \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6643\"\u003e#6643\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSession connection health checks have been improved to better detect loss of connectivity and avoid stuck builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6649\"\u003e#6649\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix issue with Git subdirectory value not being included in ConfigSource section of SLSA provenance for builds from Git sources \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6724\"\u003e#6724\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid potential deadlock if the credential helper in the client is misbehaving and never returns credentials \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6709\"\u003e#6709\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in provenance computation on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible provenance capture race in concurrent no-cache builds that could leave source pins empty and fail with an invalid checksum digest error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6764\"\u003e#6764\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in progress writer \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6679\"\u003e#6679\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix data race in S3 cache reader \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6675\"\u003e#6675\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible Git config lookup errors on Windows \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6639\"\u003e#6639\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix build cancellation not working properly when blocked on credential callback \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6641\"\u003e#6641\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Azure/azure-sdk-for-go/sdk/azcore\u003c/strong\u003e                                  v1.20.0 -\u0026gt; v1.21.0\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Microsoft/hcsshim\u003c/strong\u003e                                                  v0.14.0-rc.1 -\u0026gt; v0.14.1\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2\u003c/strong\u003e                                                  v1.41.4 -\u0026gt; v1.41.7\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/dd2170e156c9633da1b2d1a58a6188e3f7d36fa4\"\u003e\u003ccode\u003edd2170e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6770\"\u003e#6770\u003c/a\u003e from crazy-max/v0.30-picks-0.30.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e4b9769cf519c5c1d9bc59643adde2c977f9ae30\"\u003e\u003ccode\u003ee4b9769\u003c/code\u003e\u003c/a\u003e test: gate merge diff tests through worker capabilities\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/d5956a1cf26f4055deaff883dad537b6a25bcfa1\"\u003e\u003ccode\u003ed5956a1\u003c/code\u003e\u003c/a\u003e skip pin race test on workers without merge diff support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/505ab37cd6c6c6d2ac37e3a598eab4abdc315c2a\"\u003e\u003ccode\u003e505ab37\u003c/code\u003e\u003c/a\u003e solver: fix race in walkProvenance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f2e48d20dc7d744a4051d6b5591b851a29a6232f\"\u003e\u003ccode\u003ef2e48d2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e from jsternberg/add-error-details\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f7a40a08716a42f1066b99bb0cdc09cab42987b9\"\u003e\u003ccode\u003ef7a40a0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e from tonistiigi/fix-provenance-data-race\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/80e934d8b310736f71a6a33c696b8448bec6c12d\"\u003e\u003ccode\u003e80e934d\u003c/code\u003e\u003c/a\u003e remotecache: propagate details field from registry when included\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/a7c874909a0045c6e32c1c1314e7aba949bf85da\"\u003e\u003ccode\u003ea7c8749\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6761\"\u003e#6761\u003c/a\u003e from moby/dependabot/github_actions/github/codeql-ac...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df37b6751b796a1b22d4dfe0ffb0bc9962b2c38b\"\u003e\u003ccode\u003edf37b67\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.35.3 to 4.35.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c7ba94199885e89e25615d3e2d78fea86a2c7eb7\"\u003e\u003ccode\u003ec7ba941\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6759\"\u003e#6759\u003c/a\u003e from moby/dependabot/github_actions/docker/github-bu...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.10.3...v0.30.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit\u0026package-manager=go_modules\u0026previous-version=0.10.3\u0026new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/doytsujin/act/pull/318","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/doytsujin%2Fact/issues/318","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/318/packages"}},{"old_version":"0.29.0","new_version":"0.30.0","update_type":"minor","path":"the docker group across 1 directory","pr_created_at":"2026-05-18T05:23:02.000Z","version_change":"0.29.0 → 0.30.0","issue":{"uuid":"4466470602","node_id":"PR_kwDOQuvXGs7cg_re","number":19,"state":"open","title":"deps(deps): bump github.com/moby/buildkit from 0.29.0 to 0.30.0 in the docker group across 1 directory","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-18T05:23:02.000Z","updated_at":"2026-05-19T03:13:02.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps)","packages":[{"name":"github.com/moby/buildkit","old_version":"0.29.0","new_version":"0.30.0","repository_url":"https://github.com/moby/buildkit"}],"path":"the docker group across 1 directory","ecosystem":"go"},"body":"Bumps the docker group with 1 update in the / directory: [github.com/moby/buildkit](https://github.com/moby/buildkit).\n\nUpdates `github.com/moby/buildkit` from 0.29.0 to 0.30.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.30.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.30.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eNatnael Gebremariam\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eDawei Wei\u003c/li\u003e\n\u003cli\u003eDmitrii Kostyrev\u003c/li\u003e\n\u003cli\u003eJiří Moravčík\u003c/li\u003e\n\u003cli\u003eVladimir Kuznichenkov\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuiltin Dockerfile frontend has been updated to v1.24.0 \u003ca href=\"https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.24.0\"\u003echangelog\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuildKit now supports the concept of \u0026quot;compatibility version\u0026quot; for improved reproducible builds support across different BuildKit versions. This allows users to specify a version for which the build should be compatible with, and BuildKit will attempt to maintain compatibility with that version when possible. Compatibility version will be stored in the provenance attestation of the build and can be used to independently verify the artifacts of the build on other BuildKit versions. The current compatibility version and backward compatibility with old versions are defined in \u003ca href=\"https://github.com/moby/buildkit/blob/v0.30.0-rc1/docs/build-repro.md#compatibility-version\"\u003eBuild reproducibility docs\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6681\"\u003e#6681\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGit sources now support \u003ccode\u003efetch-by-commit\u003c/code\u003e option where commit is fetched by the SHA and then associated with the reference. This is useful when checking out mutable references \u003ccode\u003erefs/NR/merge\u003c/code\u003e where the commit SHA may change during invocation and cause checksum mismatch error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6708\"\u003e#6708\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe LLB API now supports Git bundle format. Git bundles can be loaded from registry or OCI layout blobs and Git sources can be checked out into bundle format for snapshotting \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6711\"\u003e#6711\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eProvenance attestations for multi-pass or chained builds now include request details for root requests and individual input requests, allowing full reconstruction of such complex builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6739\"\u003e#6739\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe version of the built-in Dockerfile frontend that was used is now included in the provenance metadata and reported via worker info APIs. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6705\"\u003e#6705\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error reporting for registry errors on cache export \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports additional options \u003ccode\u003eretry_mode\u003c/code\u003e and \u003ccode\u003eretry_max_attempts\u003c/code\u003e to configure retry behavior of S3 client \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6657\"\u003e#6657\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports \u003ccode\u003edisable_accept_encoding\u003c/code\u003e option for GCS interoperability \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6642\"\u003e#6642\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce potential lock contention in gateway forwarder for improved performance on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6741\"\u003e#6741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eA new log level option has been added to the buildkitd TOML configuration; previous \u0026quot;debug\u0026quot; and \u0026quot;trace\u0026quot; options have been deprecated \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6732\"\u003e#6732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow gateway frontend requests to forward to the built-in Dockerfile frontend the same way as to external frontends \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6643\"\u003e#6643\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSession connection health checks have been improved to better detect loss of connectivity and avoid stuck builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6649\"\u003e#6649\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix issue with Git subdirectory value not being included in ConfigSource section of SLSA provenance for builds from Git sources \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6724\"\u003e#6724\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid potential deadlock if the credential helper in the client is misbehaving and never returns credentials \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6709\"\u003e#6709\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in provenance computation on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible provenance capture race in concurrent no-cache builds that could leave source pins empty and fail with an invalid checksum digest error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6764\"\u003e#6764\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in progress writer \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6679\"\u003e#6679\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix data race in S3 cache reader \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6675\"\u003e#6675\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible Git config lookup errors on Windows \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6639\"\u003e#6639\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix build cancellation not working properly when blocked on credential callback \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6641\"\u003e#6641\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Azure/azure-sdk-for-go/sdk/azcore\u003c/strong\u003e                                  v1.20.0 -\u0026gt; v1.21.0\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Microsoft/hcsshim\u003c/strong\u003e                                                  v0.14.0-rc.1 -\u0026gt; v0.14.1\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2\u003c/strong\u003e                                                  v1.41.4 -\u0026gt; v1.41.7\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/dd2170e156c9633da1b2d1a58a6188e3f7d36fa4\"\u003e\u003ccode\u003edd2170e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6770\"\u003e#6770\u003c/a\u003e from crazy-max/v0.30-picks-0.30.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e4b9769cf519c5c1d9bc59643adde2c977f9ae30\"\u003e\u003ccode\u003ee4b9769\u003c/code\u003e\u003c/a\u003e test: gate merge diff tests through worker capabilities\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/d5956a1cf26f4055deaff883dad537b6a25bcfa1\"\u003e\u003ccode\u003ed5956a1\u003c/code\u003e\u003c/a\u003e skip pin race test on workers without merge diff support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/505ab37cd6c6c6d2ac37e3a598eab4abdc315c2a\"\u003e\u003ccode\u003e505ab37\u003c/code\u003e\u003c/a\u003e solver: fix race in walkProvenance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f2e48d20dc7d744a4051d6b5591b851a29a6232f\"\u003e\u003ccode\u003ef2e48d2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e from jsternberg/add-error-details\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f7a40a08716a42f1066b99bb0cdc09cab42987b9\"\u003e\u003ccode\u003ef7a40a0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e from tonistiigi/fix-provenance-data-race\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/80e934d8b310736f71a6a33c696b8448bec6c12d\"\u003e\u003ccode\u003e80e934d\u003c/code\u003e\u003c/a\u003e remotecache: propagate details field from registry when included\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/a7c874909a0045c6e32c1c1314e7aba949bf85da\"\u003e\u003ccode\u003ea7c8749\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6761\"\u003e#6761\u003c/a\u003e from moby/dependabot/github_actions/github/codeql-ac...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df37b6751b796a1b22d4dfe0ffb0bc9962b2c38b\"\u003e\u003ccode\u003edf37b67\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.35.3 to 4.35.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c7ba94199885e89e25615d3e2d78fea86a2c7eb7\"\u003e\u003ccode\u003ec7ba941\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6759\"\u003e#6759\u003c/a\u003e from moby/dependabot/github_actions/docker/github-bu...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.29.0...v0.30.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e","html_url":"https://github.com/rhajizada/cradle/pull/19","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/rhajizada%2Fcradle/issues/19","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/19/packages"}},{"old_version":"0.29.0","new_version":"0.30.0","update_type":"minor","path":null,"pr_created_at":"2026-05-18T01:17:54.000Z","version_change":"0.29.0 → 0.30.0","issue":{"uuid":"4465604608","node_id":"PR_kwDOQ1E4ts7ceSKk","number":288,"state":"open","title":"chore(deps): bump the go-minor-patch group across 1 directory with 6 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-18T01:17:54.000Z","updated_at":"2026-05-18T01:17:55.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-minor-patch","update_count":6,"packages":[{"name":"github.com/moby/buildkit","old_version":"0.29.0","new_version":"0.30.0","repository_url":"https://github.com/moby/buildkit"},{"name":"golang.org/x/sys","old_version":"0.43.0","new_version":"0.44.0","repository_url":"https://github.com/golang/sys"},{"name":"golang.org/x/term","old_version":"0.42.0","new_version":"0.43.0","repository_url":"https://github.com/golang/term"},{"name":"google.golang.org/grpc","old_version":"1.81.0","new_version":"1.81.1","repository_url":"https://github.com/grpc/grpc-go"},{"name":"modernc.org/sqlite","old_version":"1.50.0","new_version":"1.50.1"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor-patch group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.29.0` | `0.30.0` |\n| [golang.org/x/sys](https://github.com/golang/sys) | `0.43.0` | `0.44.0` |\n| [golang.org/x/term](https://github.com/golang/term) | `0.42.0` | `0.43.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.81.0` | `1.81.1` |\n| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.50.0` | `1.50.1` |\n\n\nUpdates `github.com/moby/buildkit` from 0.29.0 to 0.30.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.30.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.30.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eNatnael Gebremariam\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eDawei Wei\u003c/li\u003e\n\u003cli\u003eDmitrii Kostyrev\u003c/li\u003e\n\u003cli\u003eJiří Moravčík\u003c/li\u003e\n\u003cli\u003eVladimir Kuznichenkov\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuiltin Dockerfile frontend has been updated to v1.24.0 \u003ca href=\"https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.24.0\"\u003echangelog\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuildKit now supports the concept of \u0026quot;compatibility version\u0026quot; for improved reproducible builds support across different BuildKit versions. This allows users to specify a version for which the build should be compatible with, and BuildKit will attempt to maintain compatibility with that version when possible. Compatibility version will be stored in the provenance attestation of the build and can be used to independently verify the artifacts of the build on other BuildKit versions. The current compatibility version and backward compatibility with old versions are defined in \u003ca href=\"https://github.com/moby/buildkit/blob/v0.30.0-rc1/docs/build-repro.md#compatibility-version\"\u003eBuild reproducibility docs\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6681\"\u003e#6681\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGit sources now support \u003ccode\u003efetch-by-commit\u003c/code\u003e option where commit is fetched by the SHA and then associated with the reference. This is useful when checking out mutable references \u003ccode\u003erefs/NR/merge\u003c/code\u003e where the commit SHA may change during invocation and cause checksum mismatch error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6708\"\u003e#6708\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe LLB API now supports Git bundle format. Git bundles can be loaded from registry or OCI layout blobs and Git sources can be checked out into bundle format for snapshotting \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6711\"\u003e#6711\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eProvenance attestations for multi-pass or chained builds now include request details for root requests and individual input requests, allowing full reconstruction of such complex builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6739\"\u003e#6739\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe version of the built-in Dockerfile frontend that was used is now included in the provenance metadata and reported via worker info APIs. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6705\"\u003e#6705\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error reporting for registry errors on cache export \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports additional options \u003ccode\u003eretry_mode\u003c/code\u003e and \u003ccode\u003eretry_max_attempts\u003c/code\u003e to configure retry behavior of S3 client \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6657\"\u003e#6657\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports \u003ccode\u003edisable_accept_encoding\u003c/code\u003e option for GCS interoperability \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6642\"\u003e#6642\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce potential lock contention in gateway forwarder for improved performance on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6741\"\u003e#6741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eA new log level option has been added to the buildkitd TOML configuration; previous \u0026quot;debug\u0026quot; and \u0026quot;trace\u0026quot; options have been deprecated \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6732\"\u003e#6732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow gateway frontend requests to forward to the built-in Dockerfile frontend the same way as to external frontends \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6643\"\u003e#6643\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSession connection health checks have been improved to better detect loss of connectivity and avoid stuck builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6649\"\u003e#6649\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix issue with Git subdirectory value not being included in ConfigSource section of SLSA provenance for builds from Git sources \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6724\"\u003e#6724\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid potential deadlock if the credential helper in the client is misbehaving and never returns credentials \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6709\"\u003e#6709\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in provenance computation on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible provenance capture race in concurrent no-cache builds that could leave source pins empty and fail with an invalid checksum digest error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6764\"\u003e#6764\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in progress writer \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6679\"\u003e#6679\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix data race in S3 cache reader \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6675\"\u003e#6675\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible Git config lookup errors on Windows \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6639\"\u003e#6639\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix build cancellation not working properly when blocked on credential callback \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6641\"\u003e#6641\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Azure/azure-sdk-for-go/sdk/azcore\u003c/strong\u003e                                  v1.20.0 -\u0026gt; v1.21.0\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Microsoft/hcsshim\u003c/strong\u003e                                                  v0.14.0-rc.1 -\u0026gt; v0.14.1\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2\u003c/strong\u003e                                                  v1.41.4 -\u0026gt; v1.41.7\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/dd2170e156c9633da1b2d1a58a6188e3f7d36fa4\"\u003e\u003ccode\u003edd2170e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6770\"\u003e#6770\u003c/a\u003e from crazy-max/v0.30-picks-0.30.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e4b9769cf519c5c1d9bc59643adde2c977f9ae30\"\u003e\u003ccode\u003ee4b9769\u003c/code\u003e\u003c/a\u003e test: gate merge diff tests through worker capabilities\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/d5956a1cf26f4055deaff883dad537b6a25bcfa1\"\u003e\u003ccode\u003ed5956a1\u003c/code\u003e\u003c/a\u003e skip pin race test on workers without merge diff support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/505ab37cd6c6c6d2ac37e3a598eab4abdc315c2a\"\u003e\u003ccode\u003e505ab37\u003c/code\u003e\u003c/a\u003e solver: fix race in walkProvenance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f2e48d20dc7d744a4051d6b5591b851a29a6232f\"\u003e\u003ccode\u003ef2e48d2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e from jsternberg/add-error-details\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f7a40a08716a42f1066b99bb0cdc09cab42987b9\"\u003e\u003ccode\u003ef7a40a0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e from tonistiigi/fix-provenance-data-race\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/80e934d8b310736f71a6a33c696b8448bec6c12d\"\u003e\u003ccode\u003e80e934d\u003c/code\u003e\u003c/a\u003e remotecache: propagate details field from registry when included\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/a7c874909a0045c6e32c1c1314e7aba949bf85da\"\u003e\u003ccode\u003ea7c8749\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6761\"\u003e#6761\u003c/a\u003e from moby/dependabot/github_actions/github/codeql-ac...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df37b6751b796a1b22d4dfe0ffb0bc9962b2c38b\"\u003e\u003ccode\u003edf37b67\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.35.3 to 4.35.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c7ba94199885e89e25615d3e2d78fea86a2c7eb7\"\u003e\u003ccode\u003ec7ba941\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6759\"\u003e#6759\u003c/a\u003e from moby/dependabot/github_actions/docker/github-bu...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.29.0...v0.30.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/sys` from 0.43.0 to 0.44.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/sys/commit/fb1facd76f95fa87c151018200ea5e4892ff115d\"\u003e\u003ccode\u003efb1facd\u003c/code\u003e\u003c/a\u003e windows: avoid uint16 overflow in NewNTUnicodeString\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/sys/commit/94ad893e1e59c1d079221324d38945d2aad8703f\"\u003e\u003ccode\u003e94ad893\u003c/code\u003e\u003c/a\u003e windows: add GetIfTable2Ex, GetIpInterface{Entry,Table}, GetUnicastIpAddressT...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/sys/commit/54fe89f8411576c06b345b341ca79a77d878a4ad\"\u003e\u003ccode\u003e54fe89f\u003c/code\u003e\u003c/a\u003e cpu: use IsProcessorFeaturePresent to calculate ARM64 on windows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/sys/commit/df7d5d7b60641d17d87e2b50911124cb65f954fd\"\u003e\u003ccode\u003edf7d5d7\u003c/code\u003e\u003c/a\u003e unix: automatically remove container created by mkall.sh\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/sys/commit/68a4a8e945b22751c1a619261b1d755372a1d5f7\"\u003e\u003ccode\u003e68a4a8e\u003c/code\u003e\u003c/a\u003e unix: avoid nil pointer dereference in Utime\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/sys/commit/690c91f6ecf3b3ef141ad2aedb1306a868b3a176\"\u003e\u003ccode\u003e690c91f\u003c/code\u003e\u003c/a\u003e unix: add CPUSetDynamic for systems with more than 1024 CPUs\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/sys/compare/v0.43.0...v0.44.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/term` from 0.42.0 to 0.43.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/term/commit/3c3e4855f7d2eb06c3e48933554add9ec6b599b5\"\u003e\u003ccode\u003e3c3e485\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/term/compare/v0.42.0...v0.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260401024825-9d38bb4040a9 to 0.0.0-20260406210006-6f92a3bedf2d\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/googleapis/go-genproto/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.81.0 to 1.81.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.81.1\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003exds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per \u003ca href=\"https://github.com/grpc/proposal/blob/master/A41-xds-rbac.md\"\u003egRFC A41\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9111\"\u003e#9111\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/al4an444\"\u003e\u003ccode\u003e@​al4an444\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eotel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9081\"\u003e#9081\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/caf0772c2bcb8bc15d43eb53448e921f34f0b7e8\"\u003e\u003ccode\u003ecaf0772\u003c/code\u003e\u003c/a\u003e Change version from 1.81.1-dev to 1.81.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9122\"\u003e#9122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/6ccbeebf058ede71e43a5ac28fada2a736573215\"\u003e\u003ccode\u003e6ccbeeb\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9111\"\u003e#9111\u003c/a\u003e into v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9121\"\u003e#9121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/b33c29e41b438e371c8504de9bdf64a80098cc29\"\u003e\u003ccode\u003eb33c29e\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9081\"\u003e#9081\u003c/a\u003e into v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9102\"\u003e#9102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/c45fae6d06a5c192b7b96418a2bc26a96b856834\"\u003e\u003ccode\u003ec45fae6\u003c/code\u003e\u003c/a\u003e Change version to 1.81.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9063\"\u003e#9063\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.81.0...v1.81.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `modernc.org/sqlite` from 1.50.0 to 1.50.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md\"\u003emodernc.org/sqlite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e2026-05-10 v1.50.1:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to \u003ca href=\"https://sqlite.org/releaselog/3_53_1.html\"\u003eSQLite 3.53.1\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-04-24 v1.50.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to sqlite-vec \u003ca href=\"https://github.com/asg017/sqlite-vec/releases/tag/v0.1.9\"\u003ev0.1.9\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eIntroduce \u003ccode\u003eColumnInfo\u003c/code\u003e, enabling dynamic query builders and ORMs to retrieve underlying SQLite C-API metadata (\u003ccode\u003eOriginName\u003c/code\u003e, \u003ccode\u003eTableName\u003c/code\u003e, \u003ccode\u003eDatabaseName\u003c/code\u003e, and \u003ccode\u003eDeclType\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003eThis feature is exposed via the idiomatic \u003ccode\u003edatabase/sql\u003c/code\u003e escape hatch \u003ccode\u003e(*sql.Conn).Raw()\u003c/code\u003e, avoiding custom statement handles and keeping the standard library workflow intact.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/113\"\u003e#113\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/113\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/113\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-04-17 v1.49.0: Upgrade to \u003ca href=\"https://sqlite.org/releaselog/3_53_0.html\"\u003eSQLite 3.53.0\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e-DSQLITE_ENABLE_DBPAGE_VTAB\u003c/code\u003e to the transpilation. See \u003ca href=\"https://www.sqlite.org/dbpage.html\"\u003e\u0026quot;The SQLITE_DBPAGE Virtual Table\u0026quot;\u003c/a\u003e for details.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-04-06 v1.48.2:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFix ABI mapping mismatch in the pre-update hook trampoline that caused silent truncation of large 64-bit RowIDs.\u003c/li\u003e\n\u003cli\u003eEnsure the Go trampoline signature correctly aligns with the public \u003ccode\u003esqlite3_preupdate_hook\u003c/code\u003e C API, preventing data corruption for high-entropy keys (e.g., Snowflake IDs).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/98\"\u003e#98\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/98\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/98\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix the memory allocator used in \u003ccode\u003e(*conn).Deserialize\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eReplace \u003ccode\u003etls.Alloc\u003c/code\u003e with \u003ccode\u003esqlite3_malloc64\u003c/code\u003e to prevent internal allocator corruption. This ensures the buffer is safely owned by SQLite, which may resize or free it due to the \u003ccode\u003eSQLITE_DESERIALIZE_RESIZEABLE\u003c/code\u003e and \u003ccode\u003eSQLITE_DESERIALIZE_FREEONCLOSE\u003c/code\u003e flags.\u003c/li\u003e\n\u003cli\u003ePrevent a memory leak by properly freeing the allocated buffer if fetching the main database name fails before handing ownership to SQLite.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/100\"\u003e#100\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/100\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/100\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003e(*conn).Deserialize\u003c/code\u003e to explicitly reject \u003ccode\u003enil\u003c/code\u003e or empty byte slices.\u003c/li\u003e\n\u003cli\u003ePrevent silent database disconnection and connection pool corruption caused by SQLite's default behavior when \u003ccode\u003esqlite3_deserialize\u003c/code\u003e receives a 0-length buffer.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/101\"\u003e#101\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/101\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/101\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003ecommitHookTrampoline\u003c/code\u003e and \u003ccode\u003erollbackHookTrampoline\u003c/code\u003e signatures by removing the unused \u003ccode\u003epCsr\u003c/code\u003e parameter.\u003c/li\u003e\n\u003cli\u003eAligns internal hook callbacks accurately with the underlying SQLite C API, cleaning up the code to prevent potential future confusion or bugs.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/102\"\u003e#102\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/102\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/102\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003echeckptr\u003c/code\u003e instrumentation failures during \u003ccode\u003ego test -race\u003c/code\u003e when registering and using virtual tables (\u003ccode\u003evtab\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003eAllocate \u003ccode\u003esqlite3_module\u003c/code\u003e instances using the C allocator (\u003ccode\u003elibc.Xcalloc\u003c/code\u003e) instead of the Go heap. This ensures transpiled C code can safely perform pointer operations on the struct without tripping Go's pointer checks.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/103\"\u003e#103\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/103\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/103\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix data race on \u003ccode\u003emutex.id\u003c/code\u003e in the \u003ccode\u003emutexTry\u003c/code\u003e non-recursive path.\u003c/li\u003e\n\u003cli\u003eEnsure consistent atomic writes (\u003ccode\u003eatomic.StoreInt32\u003c/code\u003e) to prevent data races with atomic loads in \u003ccode\u003emutexHeld\u003c/code\u003e and \u003ccode\u003emutexNotheld\u003c/code\u003e during concurrent execution.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/104\"\u003e#104\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/104\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/104\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix resource leak in \u003ccode\u003e(*Backup).Commit\u003c/code\u003e where the destination connection was not closed on error.\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003edstConn\u003c/code\u003e is properly closed when \u003ccode\u003esqlite3_backup_finish\u003c/code\u003e fails, preventing file descriptor, TLS, and memory leaks.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/105\"\u003e#105\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/105\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/105\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eExec\u003c/code\u003e to fully drain rows when encountering \u003ccode\u003eSQLITE_ROW\u003c/code\u003e, preventing silent data loss in DML statements.\u003c/li\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eExec\u003c/code\u003e aborted after the first row, meaning \u003ccode\u003eINSERT\u003c/code\u003e, \u003ccode\u003eUPDATE\u003c/code\u003e, or \u003ccode\u003eDELETE\u003c/code\u003e statements with a \u003ccode\u003eRETURNING\u003c/code\u003e clause would fail to process subsequent rows. The execution path now correctly loops until \u003ccode\u003eSQLITE_DONE\u003c/code\u003e and properly respects context cancellations during the drain loop, fully aligning with native C \u003ccode\u003esqlite3_exec\u003c/code\u003e semantics.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/106\"\u003e#106\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/106\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/106\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;Shadowed err value (stmt.go)\u0026quot;.\u003c/li\u003e\n\u003cli\u003eSee [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/249\"\u003e#249\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/work_items/249\"\u003ehttps://gitlab.com/cznic/sqlite/-/work_items/249\u003c/a\u003e), thanks Emrecan BATI!\u003c/li\u003e\n\u003cli\u003eFix silent omission of virtual table savepoint callbacks by correctly setting the sqlite3_module version.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/107\"\u003e#107\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/107\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/107\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003evfsRead\u003c/code\u003e to properly handle partial and fragmented reads from \u003ccode\u003eio.Reader\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eReplace \u003ccode\u003ef.Read\u003c/code\u003e with \u003ccode\u003eio.ReadFull\u003c/code\u003e to ensure the buffer is fully populated, preventing premature \u003ccode\u003eSQLITE_IOERR_SHORT_READ\u003c/code\u003e errors on valid mid-stream partial reads. Unread tail bytes at EOF are now efficiently zero-filled using the built-in \u003ccode\u003eclear\u003c/code\u003e function.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/108\"\u003e#108\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/108\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/108\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003cli\u003eRefactor internal error formatting to safely handle uninitialized or closed database pointers.\u003c/li\u003e\n\u003cli\u003ePrevent a misleading \u0026quot;out of memory\u0026quot; error message when an operation fails and the underlying SQLite database handle is \u003ccode\u003eNULL\u003c/code\u003e (\u003ccode\u003edb == 0\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/109\"\u003e#109\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/109\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/109\u003c/a\u003e), thanks Josh Bleecher Snyder!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://gitlab.com/cznic/sqlite/commit/b95ed459e063439b1b7f58db051f168832bb14b6\"\u003e\u003ccode\u003eb95ed45\u003c/code\u003e\u003c/a\u003e upgrade to SQLite 3.53.1\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://gitlab.com/cznic/sqlite/compare/v1.50.0...v1.50.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/schmitthub/clawker/pull/288","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/schmitthub%2Fclawker/issues/288","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/288/packages"}},{"old_version":"0.29.0","new_version":"0.30.0","update_type":"minor","path":null,"pr_created_at":"2026-05-15T15:02:16.000Z","version_change":"0.29.0 → 0.30.0","issue":{"uuid":"4454884613","node_id":"PR_kwDOBGvVPc7b9qY7","number":60244,"state":"open","title":"Bump the all-dependencies group across 1 directory with 4 updates","user":"dependabot[bot]","labels":["size/L","needs-ok-to-test","release-notes-none"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-15T15:02:16.000Z","updated_at":"2026-05-17T02:50:32.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"all-dependencies","update_count":4,"packages":[{"name":"github.com/docker/cli","old_version":"29.4.3+incompatible","new_version":"29.5.0+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/moby/buildkit","old_version":"0.29.0","new_version":"0.30.0","repository_url":"https://github.com/moby/buildkit"},{"name":"google.golang.org/grpc","old_version":"1.81.0","new_version":"1.81.1","repository_url":"https://github.com/grpc/grpc-go"},{"name":"helm.sh/helm/v4","old_version":"4.1.4","new_version":"4.2.0","repository_url":"https://github.com/helm/helm"}],"path":null,"ecosystem":"go"},"body":"Bumps the all-dependencies group with 4 updates in the / directory: [github.com/docker/cli](https://github.com/docker/cli), [github.com/moby/buildkit](https://github.com/moby/buildkit), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [helm.sh/helm/v4](https://github.com/helm/helm).\n\nUpdates `github.com/docker/cli` from 29.4.3+incompatible to 29.5.0+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/98f14649600f05480629d5c481878b1e1bcb7c17\"\u003e\u003ccode\u003e98f1464\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6988\"\u003e#6988\u003c/a\u003e from thaJeztah/make_shell\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/50712c932660e7859d692b5aed45ad321beced1a\"\u003e\u003ccode\u003e50712c9\u003c/code\u003e\u003c/a\u003e README: simplify instructions for using dev container\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/653dc8f03d161677a8648758cdf0af8b150780bc\"\u003e\u003ccode\u003e653dc8f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6485\"\u003e#6485\u003c/a\u003e from paulchen5/6484-update-pull-request-template\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/13945822d4ba2119b867ee2cf215506c8b9f9817\"\u003e\u003ccode\u003e1394582\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6987\"\u003e#6987\u003c/a\u003e from thaJeztah/contributing_links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/f99747b9e0bee5623a13655439e7a34b696e8617\"\u003e\u003ccode\u003ef99747b\u003c/code\u003e\u003c/a\u003e docs: fix stale links in CONTRIBUTING.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/ddac061db783a24d75b24cabc74793f6924d4724\"\u003e\u003ccode\u003eddac061\u003c/code\u003e\u003c/a\u003e PR template: remove outdated contributing guide link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/bd55370d2fe13ccc6237a463e5ff66931cf56f8a\"\u003e\u003ccode\u003ebd55370\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6984\"\u003e#6984\u003c/a\u003e from thaJeztah/cleanup_experimental\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/f907b27599d8dd5b02dd23f1decd18c8770ad511\"\u003e\u003ccode\u003ef907b27\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6985\"\u003e#6985\u003c/a\u003e from thaJeztah/rm_builder_stub\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/5201f5894e8aefbb09a67ba34895e59841e41b82\"\u003e\u003ccode\u003e5201f58\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6971\"\u003e#6971\u003c/a\u003e from matte1782/docs-authz-64kib-buffer-2026-05\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/5d4877414898fbceb81fef0533b939408b01dffa\"\u003e\u003ccode\u003e5d48774\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6986\"\u003e#6986\u003c/a\u003e from thaJeztah/cleanup_docs_readme\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v29.4.3...v29.5.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/moby/buildkit` from 0.29.0 to 0.30.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.30.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.30.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eNatnael Gebremariam\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eDawei Wei\u003c/li\u003e\n\u003cli\u003eDmitrii Kostyrev\u003c/li\u003e\n\u003cli\u003eJiří Moravčík\u003c/li\u003e\n\u003cli\u003eVladimir Kuznichenkov\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuiltin Dockerfile frontend has been updated to v1.24.0 \u003ca href=\"https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.24.0\"\u003echangelog\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuildKit now supports the concept of \u0026quot;compatibility version\u0026quot; for improved reproducible builds support across different BuildKit versions. This allows users to specify a version for which the build should be compatible with, and BuildKit will attempt to maintain compatibility with that version when possible. Compatibility version will be stored in the provenance attestation of the build and can be used to independently verify the artifacts of the build on other BuildKit versions. The current compatibility version and backward compatibility with old versions are defined in \u003ca href=\"https://github.com/moby/buildkit/blob/v0.30.0-rc1/docs/build-repro.md#compatibility-version\"\u003eBuild reproducibility docs\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6681\"\u003e#6681\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGit sources now support \u003ccode\u003efetch-by-commit\u003c/code\u003e option where commit is fetched by the SHA and then associated with the reference. This is useful when checking out mutable references \u003ccode\u003erefs/NR/merge\u003c/code\u003e where the commit SHA may change during invocation and cause checksum mismatch error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6708\"\u003e#6708\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe LLB API now supports Git bundle format. Git bundles can be loaded from registry or OCI layout blobs and Git sources can be checked out into bundle format for snapshotting \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6711\"\u003e#6711\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eProvenance attestations for multi-pass or chained builds now include request details for root requests and individual input requests, allowing full reconstruction of such complex builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6739\"\u003e#6739\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe version of the built-in Dockerfile frontend that was used is now included in the provenance metadata and reported via worker info APIs. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6705\"\u003e#6705\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error reporting for registry errors on cache export \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports additional options \u003ccode\u003eretry_mode\u003c/code\u003e and \u003ccode\u003eretry_max_attempts\u003c/code\u003e to configure retry behavior of S3 client \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6657\"\u003e#6657\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports \u003ccode\u003edisable_accept_encoding\u003c/code\u003e option for GCS interoperability \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6642\"\u003e#6642\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce potential lock contention in gateway forwarder for improved performance on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6741\"\u003e#6741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eA new log level option has been added to the buildkitd TOML configuration; previous \u0026quot;debug\u0026quot; and \u0026quot;trace\u0026quot; options have been deprecated \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6732\"\u003e#6732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow gateway frontend requests to forward to the built-in Dockerfile frontend the same way as to external frontends \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6643\"\u003e#6643\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSession connection health checks have been improved to better detect loss of connectivity and avoid stuck builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6649\"\u003e#6649\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix issue with Git subdirectory value not being included in ConfigSource section of SLSA provenance for builds from Git sources \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6724\"\u003e#6724\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid potential deadlock if the credential helper in the client is misbehaving and never returns credentials \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6709\"\u003e#6709\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in provenance computation on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible provenance capture race in concurrent no-cache builds that could leave source pins empty and fail with an invalid checksum digest error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6764\"\u003e#6764\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in progress writer \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6679\"\u003e#6679\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix data race in S3 cache reader \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6675\"\u003e#6675\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible Git config lookup errors on Windows \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6639\"\u003e#6639\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix build cancellation not working properly when blocked on credential callback \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6641\"\u003e#6641\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Azure/azure-sdk-for-go/sdk/azcore\u003c/strong\u003e                                  v1.20.0 -\u0026gt; v1.21.0\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Microsoft/hcsshim\u003c/strong\u003e                                                  v0.14.0-rc.1 -\u0026gt; v0.14.1\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2\u003c/strong\u003e                                                  v1.41.4 -\u0026gt; v1.41.7\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/dd2170e156c9633da1b2d1a58a6188e3f7d36fa4\"\u003e\u003ccode\u003edd2170e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6770\"\u003e#6770\u003c/a\u003e from crazy-max/v0.30-picks-0.30.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e4b9769cf519c5c1d9bc59643adde2c977f9ae30\"\u003e\u003ccode\u003ee4b9769\u003c/code\u003e\u003c/a\u003e test: gate merge diff tests through worker capabilities\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/d5956a1cf26f4055deaff883dad537b6a25bcfa1\"\u003e\u003ccode\u003ed5956a1\u003c/code\u003e\u003c/a\u003e skip pin race test on workers without merge diff support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/505ab37cd6c6c6d2ac37e3a598eab4abdc315c2a\"\u003e\u003ccode\u003e505ab37\u003c/code\u003e\u003c/a\u003e solver: fix race in walkProvenance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f2e48d20dc7d744a4051d6b5591b851a29a6232f\"\u003e\u003ccode\u003ef2e48d2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e from jsternberg/add-error-details\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f7a40a08716a42f1066b99bb0cdc09cab42987b9\"\u003e\u003ccode\u003ef7a40a0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e from tonistiigi/fix-provenance-data-race\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/80e934d8b310736f71a6a33c696b8448bec6c12d\"\u003e\u003ccode\u003e80e934d\u003c/code\u003e\u003c/a\u003e remotecache: propagate details field from registry when included\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/a7c874909a0045c6e32c1c1314e7aba949bf85da\"\u003e\u003ccode\u003ea7c8749\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6761\"\u003e#6761\u003c/a\u003e from moby/dependabot/github_actions/github/codeql-ac...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df37b6751b796a1b22d4dfe0ffb0bc9962b2c38b\"\u003e\u003ccode\u003edf37b67\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.35.3 to 4.35.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c7ba94199885e89e25615d3e2d78fea86a2c7eb7\"\u003e\u003ccode\u003ec7ba941\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6759\"\u003e#6759\u003c/a\u003e from moby/dependabot/github_actions/docker/github-bu...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.29.0...v0.30.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.81.0 to 1.81.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.81.1\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003exds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per \u003ca href=\"https://github.com/grpc/proposal/blob/master/A41-xds-rbac.md\"\u003egRFC A41\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9111\"\u003e#9111\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/al4an444\"\u003e\u003ccode\u003e@​al4an444\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eotel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9081\"\u003e#9081\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/caf0772c2bcb8bc15d43eb53448e921f34f0b7e8\"\u003e\u003ccode\u003ecaf0772\u003c/code\u003e\u003c/a\u003e Change version from 1.81.1-dev to 1.81.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9122\"\u003e#9122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/6ccbeebf058ede71e43a5ac28fada2a736573215\"\u003e\u003ccode\u003e6ccbeeb\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9111\"\u003e#9111\u003c/a\u003e into v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9121\"\u003e#9121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/b33c29e41b438e371c8504de9bdf64a80098cc29\"\u003e\u003ccode\u003eb33c29e\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9081\"\u003e#9081\u003c/a\u003e into v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9102\"\u003e#9102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/c45fae6d06a5c192b7b96418a2bc26a96b856834\"\u003e\u003ccode\u003ec45fae6\u003c/code\u003e\u003c/a\u003e Change version to 1.81.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9063\"\u003e#9063\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.81.0...v1.81.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `helm.sh/helm/v4` from 4.1.4 to 4.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/helm/helm/releases\"\u003ehelm.sh/helm/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eHelm v4.2.0 is a feature release. Users are encouraged to upgrade for the best experience.\u003c/p\u003e\n\u003cp\u003eThe community keeps growing, and we'd love to see you there!\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJoin the discussion in \u003ca href=\"https://kubernetes.slack.com\"\u003eKubernetes Slack\u003c/a\u003e:\n\u003cul\u003e\n\u003cli\u003efor questions and just to hang out\u003c/li\u003e\n\u003cli\u003efor discussing PRs, code, and bugs\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eHang out at the Public Developer Call: Thursday, 9:30 Pacific via \u003ca href=\"https://zoom.us/j/696660622\"\u003eZoom\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTest, debug, and contribute charts: \u003ca href=\"https://artifacthub.io/packages/search?kind=0\"\u003eArtifactHub/packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNotable Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSwitch to \u003ccode\u003egoreleaser\u003c/code\u003e for release builds\u003c/li\u003e\n\u003cli\u003eKubernetes client libraries to v1.36\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003emustToToml\u003c/code\u003e template function\u003c/li\u003e\n\u003cli\u003edeprecate unused \u003ccode\u003e--hide-notes\u003c/code\u003e and \u003ccode\u003e--render-subchart-notes\u003c/code\u003e flags\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e--dry-run=server\u003c/code\u003e now respects \u003ccode\u003egenerateName:\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eInstallation and Upgrading\u003c/h2\u003e\n\u003cp\u003eDownload Helm v4.2.0. The common platform binaries are here:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-darwin-amd64.tar.gz\"\u003eMacOS amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-darwin-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 1376ea697140e4db316736e760d5a47d12afc1524dce704476ef06fd7fdeddc6)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-darwin-arm64.tar.gz\"\u003eMacOS arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-darwin-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / f13f959015447b6bc309f9fd506509926543988a39035c088b52522ec95e2acb)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-amd64.tar.gz\"\u003eLinux amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 97dbeb971be4ac4b27e3839976d9564c0fb35c6f3b1da89dd1e292d236af4096)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-arm.tar.gz\"\u003eLinux arm\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-arm.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / ae624870b2d50e655b6462daff117eb9d28c4bad45234ef24c1275113540fcb0)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-arm64.tar.gz\"\u003eLinux arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 1f8de130dfbd04de64978e7b852a7a547be1404956a366608276d2520b678670)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-386.tar.gz\"\u003eLinux i386\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-386.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 9cf44acc59081aca98b4d9f09138348836b26761258e02ad2b99616f66eead5c)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-loong64.tar.gz\"\u003eLinux loong64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-loong64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 5b04f0167b8b415a057c1f4f809ede86d5ead840e0aa560db097da5be19f86d0)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-ppc64le.tar.gz\"\u003eLinux ppc64le\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-ppc64le.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 48f0637b93247717b725e8d4a8d2cf8df0e2fdea91bdd0e36e2426c2d5c76e4e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-s390x.tar.gz\"\u003eLinux s390x\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-s390x.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 328e9ed27904f9910026240c4311bb1b0bf91c6fde1634f212097694507a702f)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-riscv64.tar.gz\"\u003eLinux riscv64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-linux-riscv64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 5d292d57ab1f40e47e373a87187bafa66e8daac4ddc4a1333421c174e8184755)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-windows-amd64.zip\"\u003eWindows amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-windows-amd64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / 614f68ddc567ac9bfb0c205f869b1f83ba4e0a9aacd26cbae47743ae6082a579)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v4.2.0-windows-arm64.zip\"\u003eWindows arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v4.2.0-windows-arm64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / e740e4c19b6e2a0b428f7a52c38b7f0b092f0c43ac49870537d7e7fac9cedc07)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThis release was signed by \u003ca href=\"https://github.com/gjenkins8\"\u003e\u003ccode\u003e@​gjenkins8\u003c/code\u003e\u003c/a\u003e with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at \u003ca href=\"https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739\"\u003ehttps://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739\u003c/a\u003e. Please use the attached signatures for verifying this release using gpg.\u003c/p\u003e\n\u003cp\u003eThe \u003ca href=\"https://helm.sh/docs/intro/quickstart/\"\u003eQuickstart Guide\u003c/a\u003e will get you going from there. For \u003cstrong\u003eupgrade instructions\u003c/strong\u003e or detailed installation notes, check the \u003ca href=\"https://helm.sh/docs/intro/install/\"\u003einstall guide\u003c/a\u003e. You can also use a \u003ca href=\"https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-4\"\u003escript to install\u003c/a\u003e on any system with \u003ccode\u003ebash\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eWhat's Next\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e4.2.1 will contain only bug fixes\u003c/li\u003e\n\u003cli\u003e4.3.0 is the next feature release\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump to version v4.2 06468084e85c244c712834933d25ea232a4c2093 (George Jenkins)\u003c/li\u003e\n\u003cli\u003ebuild: Clean up Goreleaser change (\u003ca href=\"https://redirect.github.com/helm/helm/issues/32098\"\u003e#32098\u003c/a\u003e) e23bf3af53c52185123278e83b7023c102707778 (Scott Rigby)\u003c/li\u003e\n\u003cli\u003efix: add -extldflags -static to dist target to match build-cross f60ab7c31c81a73b8e0aade5aff41bfc01c08820 (Terry Howe)\u003c/li\u003e\n\u003cli\u003ebuild: use goreleaser build with manual archive creation 64aa46f2f1cf239cf6535c5e847e14dcb933a847 (Terry Howe)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/06468084e85c244c712834933d25ea232a4c2093\"\u003e\u003ccode\u003e0646808\u003c/code\u003e\u003c/a\u003e Bump to version v4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/e23bf3af53c52185123278e83b7023c102707778\"\u003e\u003ccode\u003ee23bf3a\u003c/code\u003e\u003c/a\u003e build: Clean up Goreleaser change (\u003ca href=\"https://redirect.github.com/helm/helm/issues/32098\"\u003e#32098\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/ad18580255c5f0937f5ec85adfd970b142b0308d\"\u003e\u003ccode\u003ead18580\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/helm/helm/issues/31343\"\u003e#31343\u003c/a\u003e from TerryHowe/chore-replace-mitchellh-gox-with-gor...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/b3a458fde91b4a225535c5b6d8c64b2efdd0d4a6\"\u003e\u003ccode\u003eb3a458f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/helm/helm/issues/31970\"\u003e#31970\u003c/a\u003e from isumitsolanki/fix/31965-decouple-cli-from-kube\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/f60ab7c31c81a73b8e0aade5aff41bfc01c08820\"\u003e\u003ccode\u003ef60ab7c\u003c/code\u003e\u003c/a\u003e fix: add -extldflags -static to dist target to match build-cross\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/64aa46f2f1cf239cf6535c5e847e14dcb933a847\"\u003e\u003ccode\u003e64aa46f\u003c/code\u003e\u003c/a\u003e build: use goreleaser build with manual archive creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/d199a1a42c04bccb287f2c7d9c3f73b669412e5a\"\u003e\u003ccode\u003ed199a1a\u003c/code\u003e\u003c/a\u003e chore: remove build-cross dependency from test-acceptance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/82899404a68f3826389bb38cf67bf75085db6b2c\"\u003e\u003ccode\u003e8289940\u003c/code\u003e\u003c/a\u003e ci: add fetch-depth 0 to canary checkout for goreleaser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/c075022ce16489f5f7afd45a37b679cf58fa36ea\"\u003e\u003ccode\u003ec075022\u003c/code\u003e\u003c/a\u003e fix: address goreleaser build issues flagged in review\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/04885dd905b6f8a823733dbc9b9f5cb2843a975f\"\u003e\u003ccode\u003e04885dd\u003c/code\u003e\u003c/a\u003e fix: pass VERSION as GORELEASER_CURRENT_TAG to preserve v-prefix in archive n...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/helm/helm/compare/v4.1.4...v4.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/istio/istio/pull/60244","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/istio%2Fistio/issues/60244","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/60244/packages"}},{"old_version":"0.22.0","new_version":"0.28.1","update_type":"minor","path":null,"pr_created_at":"2026-05-14T03:12:40.000Z","version_change":"0.22.0 → 0.28.1","issue":{"uuid":"4442813850","node_id":"PR_kwDOQv_oCs7bXMdk","number":28,"state":"open","title":"Bump the go_modules group across 1 directory with 7 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-14T03:12:40.000Z","updated_at":"2026-05-14T03:13:21.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":7,"packages":[{"name":"github.com/docker/cli","old_version":"28.3.0+incompatible","new_version":"29.2.0+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/moby/buildkit","old_version":"0.22.0","new_version":"0.28.1","repository_url":"https://github.com/moby/buildkit"},{"name":"google.golang.org/grpc","old_version":"1.71.0","new_version":"1.78.0"},{"name":"github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream","old_version":"1.6.10","new_version":"1.7.10"},{"name":"github.com/in-toto/in-toto-golang","old_version":"0.5.0","new_version":"0.10.0"},{"name":"go.opentelemetry.io/otel","old_version":"1.40.0","new_version":"1.41.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"go.opentelemetry.io/otel/sdk","old_version":"1.40.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 4 updates in the / directory: [github.com/docker/cli](https://github.com/docker/cli), [github.com/moby/buildkit](https://github.com/moby/buildkit), [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) and [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go).\n\nUpdates `github.com/docker/cli` from 28.3.0+incompatible to 29.2.0+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/0b9d1985dbf919678745f122b12b46f730b97d87\"\u003e\u003ccode\u003e0b9d198\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6764\"\u003e#6764\u003c/a\u003e from vvoland/update-docker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9c9ec7358833bb3e5622a166673744fca7fefac4\"\u003e\u003ccode\u003e9c9ec73\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/client v0.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/bab3e81e1d8874a2d4f26afc02225ee537d0b15d\"\u003e\u003ccode\u003ebab3e81\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/api v1.53.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2e64fc162ab632a530f7191cc6af65c22356ea0d\"\u003e\u003ccode\u003e2e64fc1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6367\"\u003e#6367\u003c/a\u003e from thaJeztah/template_slicejoin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1f2ba2ac9d8c92870f7cce89dfa17d89d3375c19\"\u003e\u003ccode\u003e1f2ba2a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6760\"\u003e#6760\u003c/a\u003e from thaJeztah/container_create_fix_error\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/e34a3422cc32c808d2e8b0e0ef51112d53fa896d\"\u003e\u003ccode\u003ee34a342\u003c/code\u003e\u003c/a\u003e templates: make \u0026quot;join\u0026quot; work with non-string slices and map values\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/a86356d42f918968579e670b51bc85dc45982a33\"\u003e\u003ccode\u003ea86356d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6763\"\u003e#6763\u003c/a\u003e from thaJeztah/bump_mapstructure\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/771660a17e56116eb32677a6d83c5210e5092194\"\u003e\u003ccode\u003e771660a\u003c/code\u003e\u003c/a\u003e vendor: github.com/go-viper/mapstructure/v2 v2.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9cff36b35a828be8d137bc5de4983b7e3fef1614\"\u003e\u003ccode\u003e9cff36b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6762\"\u003e#6762\u003c/a\u003e from thaJeztah/bump_x_deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/08ed2bc6e8bc49ad988ecd44633620a48fb10967\"\u003e\u003ccode\u003e08ed2bc\u003c/code\u003e\u003c/a\u003e cli/command/container: make injecting config.json failures a warning\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v28.3.0...v29.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/moby/buildkit` from 0.22.0 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.28.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix insufficient validation of Git URL \u003ccode\u003e#ref:subdir\u003c/code\u003e fragments that could allow access to restricted files outside the checked-out repository root. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg\"\u003eGHSA-4vrq-3vrq-g6gg\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a vulnerability where an untrusted custom frontend could cause files to be written outside the BuildKit state directory. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj\"\u003eGHSA-4c29-8rgm-jvjj\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a panic when processing invalid \u003ccode\u003e.dockerignore\u003c/code\u003e patterns during \u003ccode\u003eCOPY\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/patternmatcher/issues/9\"\u003emoby/patternmatcher#9\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/moby/patternmatcher\u003c/strong\u003e  v0.6.0 -\u0026gt; v0.6.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.28.0\"\u003ev0.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.28.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.28.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.28.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eAmr Mahdi\u003c/li\u003e\n\u003cli\u003eDan Duvall\u003c/li\u003e\n\u003cli\u003eDavid Karlsson\u003c/li\u003e\n\u003cli\u003eJonas Geiler\u003c/li\u003e\n\u003cli\u003eKevin L.\u003c/li\u003e\n\u003cli\u003ersteube\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8\"\u003e\u003ccode\u003e45b038c\u003c/code\u003e\u003c/a\u003e git: normalize and validate subdir paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f5462c216098af766f97ea4cb328e65c6d8f7256\"\u003e\u003ccode\u003ef5462c2\u003c/code\u003e\u003c/a\u003e git: harden ref arg handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/71577a5da7a2b3ab75a90c2cfedfda0c27d1ef40\"\u003e\u003ccode\u003e71577a5\u003c/code\u003e\u003c/a\u003e source: extract SafeFileName into shared pathutil package\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df4378316f3b000403d097551a8139a700bd823d\"\u003e\u003ccode\u003edf43783\u003c/code\u003e\u003c/a\u003e source/http: use os.Root for saved file operations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/9ce6f62aca0653657047ee613cdef22f38b31244\"\u003e\u003ccode\u003e9ce6f62\u003c/code\u003e\u003c/a\u003e source/http: sanitize downloaded filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4\"\u003e\u003ccode\u003e099cf80\u003c/code\u003e\u003c/a\u003e executor: validate container IDs centrally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/2642113bbc9d969d223c37aaabca4b50613fddf9\"\u003e\u003ccode\u003e2642113\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e from thaJeztah/0.28_backport_bump_patternmatcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/802da78332d9f2c6c9d856c1648ab52c701076fa\"\u003e\u003ccode\u003e802da78\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/patternmatcher v0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/5245d869d85d9c98f986b600584c332a3b001986\"\u003e\u003ccode\u003e5245d86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6551\"\u003e#6551\u003c/a\u003e from tonistiigi/v0.28-cherry-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/90ee5deef6c6efcb82358eb48d76235191196db1\"\u003e\u003ccode\u003e90ee5de\u003c/code\u003e\u003c/a\u003e vendor: update x/net to v0.51.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.22.0...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.71.0 to 1.78.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.78.0\u003c/h2\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eclient: Align URL validation with Go 1.26+ to now reject target URLs with unbracketed colons in the hostname. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8716\"\u003e#8716\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/neild\"\u003e\u003ccode\u003e@​neild\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport/client : Return status code \u003ccode\u003eUnknown\u003c/code\u003e on malformed grpc-status. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8735\"\u003e#8735\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\n\u003cul\u003e\n\u003cli\u003exds/resolver:\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eDrop previous route resources and report an error when no matching virtual host is found.\u003c/li\u003e\n\u003cli\u003eOnly log LDS/RDS configuration errors following a successful update and retain the last valid resource to prevent transient failures. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8711\"\u003e#8711\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats/otel: Add backend service label to weighted round robin metrics as part of A89. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8737\"\u003e#8737\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003estats/otel: Add subchannel metrics (without the disconnection reason) to eventually replace the pickfirst metrics. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8738\"\u003e#8738\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclient: Wait for all pending goroutines to complete when closing a graceful switch balancer. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8746\"\u003e#8746\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/twz123\"\u003e\u003ccode\u003e@​twz123\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eclient: Add \u003ccode\u003eexperimental.AcceptCompressors\u003c/code\u003e so callers can restrict the \u003ccode\u003egrpc-accept-encoding\u003c/code\u003e header advertised for a call. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8718\"\u003e#8718\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/iblancasa\"\u003e\u003ccode\u003e@​iblancasa\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003exds: Fix a bug in \u003ccode\u003eStringMatcher\u003c/code\u003e where regexes would match incorrectly when ignore_case is set to true. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8723\"\u003e#8723\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclient:\n\u003cul\u003e\n\u003cli\u003eChange connectivity state to CONNECTING when creating the name resolver (as part of exiting IDLE).\u003c/li\u003e\n\u003cli\u003eChange connectivity state to TRANSIENT_FAILURE if name resolver creation fails (as part of exiting IDLE).\u003c/li\u003e\n\u003cli\u003eChange connectivity state to IDLE after idle timeout expires even when current state is TRANSIENT_FAILURE.\u003c/li\u003e\n\u003cli\u003eFix a bug that resulted in \u003ccode\u003eOnFinish\u003c/code\u003e call option not being invoked for RPCs where stream creation failed. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8710\"\u003e#8710\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exdsclient: Fix a race in the xdsClient that could lead to resource-not-found errors. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8627\"\u003e#8627\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Round up to nearest 4KiB for pool allocations larger than 1MiB. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8705\"\u003e#8705\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/cjc25\"\u003e\u003ccode\u003e@​cjc25\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.77.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Replace the \u003ccode\u003eReader\u003c/code\u003e interface with a struct for better performance and maintainability. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8669\"\u003e#8669\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/pickfirst: Remove support for the old \u003ccode\u003epick_first\u003c/code\u003e LB policy via the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false\u003c/code\u003e. The new \u003ccode\u003epick_first\u003c/code\u003e has been the default since \u003ccode\u003ev1.71.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8672\"\u003e#8672\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003exdsclient: Fix a race condition in the ADS stream implementation that could result in \u003ccode\u003eresource-not-found\u003c/code\u003e errors, causing the gRPC client channel to move to \u003ccode\u003eTransientFailure\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8605\"\u003e#8605\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclient: Ignore HTTP status header for gRPC streams. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8548\"\u003e#8548\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclient: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8534\"\u003e#8534\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/9df039ef2c921978514b600c9d5c6bf25cce54f6\"\u003e\u003ccode\u003e9df039e\u003c/code\u003e\u003c/a\u003e Change version to 1.78.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8761\"\u003e#8761\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/9b990b6355c443ecf9e71f118f7097b62bc3299a\"\u003e\u003ccode\u003e9b990b6\u003c/code\u003e\u003c/a\u003e gracefulswitch: Wait for all goroutines on close (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8746\"\u003e#8746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/6677d9a9cf1dd8227673253015027de0addeeafb\"\u003e\u003ccode\u003e6677d9a\u003c/code\u003e\u003c/a\u003e xds: Fixing a typo (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8760\"\u003e#8760\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/d35cedde1ee806f3c578aba8c59bec7117ae0bc3\"\u003e\u003ccode\u003ed35cedd\u003c/code\u003e\u003c/a\u003e xds/resolver: pass route's auto_host_rewrite to LB picker (gRFC A81) (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8740\"\u003e#8740\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/d931fdc379623f36d2050487887f5465a18b7912\"\u003e\u003ccode\u003ed931fdc\u003c/code\u003e\u003c/a\u003e client: allow overriding grpc-accept-encoding header (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8718\"\u003e#8718\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/0800ec75223cd0995d599002581eafe2151c6df3\"\u003e\u003ccode\u003e0800ec7\u003c/code\u003e\u003c/a\u003e xds/clusterimpl: update TestChildPolicyChangeOnConfigUpdate to use custom lb ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/6553ea1a1d99ff4e3a516499330bf47607e7708f\"\u003e\u003ccode\u003e6553ea1\u003c/code\u003e\u003c/a\u003e stats/otel: Add subchannel metrics (A94) (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8738\"\u003e#8738\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/81a00cecc0abe8a7d7140967f96d9cc0729a3aa4\"\u003e\u003ccode\u003e81a00ce\u003c/code\u003e\u003c/a\u003e grpc: Fixing spelling typo (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8756\"\u003e#8756\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/e413838c3b7b8b3e94754cb3704751e49f917358\"\u003e\u003ccode\u003ee413838\u003c/code\u003e\u003c/a\u003e client: Change connectivity state to CONNECTING when creating the name resolv...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/f9d2bdb34edcd95f0ca9e2cfaba692722cb85ee2\"\u003e\u003ccode\u003ef9d2bdb\u003c/code\u003e\u003c/a\u003e stats/otel: Add grpc.lb.backend_service label to wrr metrics (A89) (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8737\"\u003e#8737\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.71.0...v1.78.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream` from 1.6.10 to 1.7.10\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/765544941191825edd26162f9790bf11f059d426\"\u003e\u003ccode\u003e7655449\u003c/code\u003e\u003c/a\u003e Release 2022-10-21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/dcae829ecc334f91502afd6d7ae2295861db9885\"\u003e\u003ccode\u003edcae829\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b82766b858e595943b26924ad1f107cd04363d66\"\u003e\u003ccode\u003eb82766b\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/1c05fb6452a1f74985ff6deb7a642b9eb441274a\"\u003e\u003ccode\u003e1c05fb6\u003c/code\u003e\u003c/a\u003e Implements IsCredentialsProvider for checking if a provider matches a target ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/0fab39aa32e09221c21383a8e658ef94d240b7e4\"\u003e\u003ccode\u003e0fab39a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/1888\"\u003e#1888\u003c/a\u003e from aws/isvita/issues-1787\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/56eb993a7dfc0195e4ca3fca306d4985f6c7c99a\"\u003e\u003ccode\u003e56eb993\u003c/code\u003e\u003c/a\u003e added changelog file\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/cde8cbcb42326be0c822cc557405619f1cefd92a\"\u003e\u003ccode\u003ecde8cbc\u003c/code\u003e\u003c/a\u003e Release 2022-10-20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/d7765f947faec45f0b4e22bb8051ca3a1c337d93\"\u003e\u003ccode\u003ed7765f9\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b9dab7e94b7446829a09a1f7a302251bac37771d\"\u003e\u003ccode\u003eb9dab7e\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/93ed3ee62605d8af3021010c5ddbf2141574af00\"\u003e\u003ccode\u003e93ed3ee\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/rum/v1.6.10...service/account/v1.7.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/in-toto/in-toto-golang` from 0.5.0 to 0.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/in-toto/in-toto-golang/releases\"\u003egithub.com/in-toto/in-toto-golang's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/232\"\u003ein-toto/in-toto-golang#232\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate maintainers and governance by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/233\"\u003ein-toto/in-toto-golang#233\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/234\"\u003ein-toto/in-toto-golang#234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.3 to 2.1.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/235\"\u003ein-toto/in-toto-golang#235\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/236\"\u003ein-toto/in-toto-golang#236\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix expired signature in test by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/241\"\u003ein-toto/in-toto-golang#241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.8.0 to 0.9.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/240\"\u003ein-toto/in-toto-golang#240\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.5 to 2.1.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/239\"\u003ein-toto/in-toto-golang#239\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/242\"\u003ein-toto/in-toto-golang#242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.56.0 to 1.56.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/243\"\u003ein-toto/in-toto-golang#243\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate GitHub Actions workflows by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/246\"\u003ein-toto/in-toto-golang#246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/245\"\u003ein-toto/in-toto-golang#245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremove linters that are no longer supported and add to make file by \u003ca href=\"https://github.com/pxp928\"\u003e\u003ccode\u003e@​pxp928\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/249\"\u003ein-toto/in-toto-golang#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd match products feature by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/237\"\u003ein-toto/in-toto-golang#237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove unfinished link on record stop by \u003ca href=\"https://github.com/PradyumnaKrishna\"\u003e\u003ccode\u003e@​PradyumnaKrishna\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/248\"\u003ein-toto/in-toto-golang#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.56.1 to 1.56.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/250\"\u003ein-toto/in-toto-golang#250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.6.0 to 0.7.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/251\"\u003ein-toto/in-toto-golang#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.56.2 to 1.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/255\"\u003ein-toto/in-toto-golang#255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd tests for coverage in envelope.go by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/256\"\u003ein-toto/in-toto-golang#256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/257\"\u003ein-toto/in-toto-golang#257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/258\"\u003ein-toto/in-toto-golang#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/259\"\u003ein-toto/in-toto-golang#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixes filepath pattern matching in windows by \u003ca href=\"https://github.com/PradyumnaKrishna\"\u003e\u003ccode\u003e@​PradyumnaKrishna\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/254\"\u003ein-toto/in-toto-golang#254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 3.5.3 to 3.6.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/261\"\u003ein-toto/in-toto-golang#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 3.6.0 to 4.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/262\"\u003ein-toto/in-toto-golang#262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/263\"\u003ein-toto/in-toto-golang#263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.57.0 to 1.58.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/264\"\u003ein-toto/in-toto-golang#264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/266\"\u003ein-toto/in-toto-golang#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate Provenance v1 struct in favor of /attestation protobufs by \u003ca href=\"https://github.com/marcelamelara\"\u003e\u003ccode\u003e@​marcelamelara\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/267\"\u003ein-toto/in-toto-golang#267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/269\"\u003ein-toto/in-toto-golang#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 4.0.0 to 4.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/270\"\u003ein-toto/in-toto-golang#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop use of \u003ccode\u003eany\u003c/code\u003e for hash objects by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/238\"\u003ein-toto/in-toto-golang#238\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/271\"\u003ein-toto/in-toto-golang#271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/273\"\u003ein-toto/in-toto-golang#273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/272\"\u003ein-toto/in-toto-golang#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.12.0 to 0.17.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/274\"\u003ein-toto/in-toto-golang#274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.3 to 1.59.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/275\"\u003ein-toto/in-toto-golang#275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 4.1.0 to 4.1.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/276\"\u003ein-toto/in-toto-golang#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTrigger workflow on pushes only to master branch by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/280\"\u003ein-toto/in-toto-golang#280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.13.0 to 0.14.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/278\"\u003ein-toto/in-toto-golang#278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/277\"\u003ein-toto/in-toto-golang#277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd openssf scorecard by \u003ca href=\"https://github.com/viveksahu26\"\u003e\u003ccode\u003e@​viveksahu26\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/281\"\u003ein-toto/in-toto-golang#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/282\"\u003ein-toto/in-toto-golang#282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix coveralls, use action by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/285\"\u003ein-toto/in-toto-golang#285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSecure System Lab Sign/Verify by \u003ca href=\"https://github.com/Forrin\"\u003e\u003ccode\u003e@​Forrin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/279\"\u003ein-toto/in-toto-golang#279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.14.0 to 0.15.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/287\"\u003ein-toto/in-toto-golang#287\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 4.1.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/289\"\u003ein-toto/in-toto-golang#289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.59.0 to 1.60.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/290\"\u003ein-toto/in-toto-golang#290\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/db554e2ab6498a07d719e5374efa6ad4a7a7c222\"\u003e\u003ccode\u003edb554e2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/450\"\u003e#450\u003c/a\u003e from in-toto/dependabot/go_modules/all-e2678a00b5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/b2ea0f2587b6b6df90a489a199f4e845fd53bc18\"\u003e\u003ccode\u003eb2ea0f2\u003c/code\u003e\u003c/a\u003e chore(deps): bump golang.org/x/sys in the all group\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/acc2f336840dd6a4c09ced5dcd69e1dc8cd1dce3\"\u003e\u003ccode\u003eacc2f33\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/448\"\u003e#448\u003c/a\u003e from in-toto/dependabot/go_modules/github.com/secure-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/313b1d6c89e412fc2e1b68ec8c4ffd3767408cf2\"\u003e\u003ccode\u003e313b1d6\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/449\"\u003e#449\u003c/a\u003e from in-toto/dependabot/github_actions/all-2ed24f8e11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/d9a60afc87a0ad342c30719f864042075194708f\"\u003e\u003ccode\u003ed9a60af\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/secure-systems-lab/go-securesystemslib\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/e7783d589362197c09b16b9f4b6e533957a56bef\"\u003e\u003ccode\u003ee7783d5\u003c/code\u003e\u003c/a\u003e chore(deps): bump the all group with 3 updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/7a1798a0e1cd26c554b353b6b792b73c1448691d\"\u003e\u003ccode\u003e7a1798a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/447\"\u003e#447\u003c/a\u003e from in-toto/fix-ci\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/b6af1a7fdb901ab63bd21b6a8a85b232843ce48f\"\u003e\u003ccode\u003eb6af1a7\u003c/code\u003e\u003c/a\u003e Modernize CI and automation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/ad676459ee070471436b44d3b482698975c35030\"\u003e\u003ccode\u003ead67645\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/446\"\u003e#446\u003c/a\u003e from in-toto/dependabot/go_modules/google.golang.org/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/b63fd336d6a981407d080757e958a50d0cdf5901\"\u003e\u003ccode\u003eb63fd33\u003c/code\u003e\u003c/a\u003e chore(deps): bump google.golang.org/grpc from 1.74.2 to 1.78.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/in-toto/in-toto-golang/compare/v0.5.0...v0.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.40.0 to 1.41.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.40.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/GlacierEQ/cog/network/alerts).\n\n\u003c/details\u003e\n\n---\n\n🔄 This PR updates 7 Go module dependencies in a grouped update, including major version bumps for Docker CLI (v28.3.0 → v29.2.0), BuildKit (v0.22.0 → v0.28.1), and several other critical dependencies like gRPC and OpenTelemetry libraries.\n\n\u003cdetails\u003e\n\u003csummary\u003e🔍 \u003cstrong\u003eDetailed Analysis\u003c/strong\u003e\u003c/summary\u003e\n\n### Key Changes\n- **Docker Dependencies**: Updated `github.com/docker/cli` from v28.3.0 to v29.2.0 and `github.com/moby/buildkit` from v0.22.0 to v0.28.1\n- **gRPC Library**: Upgraded `google.golang.org/grpc` from v1.71.0 to v1.78.0 with connectivity state improvements and performance optimizations\n- **OpenTelemetry**: Updated both `go.opentelemetry.io/otel` (v1.40.0 → v1.41.0) and `go.opentelemetry.io/otel/sdk` (v1.40.0 → v1.43.0) with baggage compliance fixes and new features\n- **Security Updates**: AWS SDK and in-toto-golang updates include security patches and vulnerability fixes\n- **Indirect Dependencies**: AWS EventStream protocol and in-toto-golang libraries received significant version bumps\n\n### Technical Implementation\n```mermaid\nflowchart TD\n    A[Dependabot Scan] --\u003e B[Identify 7 Dependencies]\n    B --\u003e C[Group Update: go_modules]\n    C --\u003e D[Docker CLI v29.2.0]\n    C --\u003e E[BuildKit v0.28.1]\n    C --\u003e F[gRPC v1.78.0]\n    C --\u003e G[OpenTelemetry v1.41.0/v1.43.0]\n    C --\u003e H[AWS SDK v1.7.10]\n    C --\u003e I[in-toto-golang v0.10.0]\n    D --\u003e J[Security \u0026 Bug Fixes]\n    E --\u003e J\n    F --\u003e K[Performance Improvements]\n    G --\u003e L[W3C Compliance]\n    H --\u003e J\n    I --\u003e J\n```\n\n### Impact\n- **Security Enhancement**: BuildKit v0.28.1 includes critical security fixes for Git URL validation and frontend vulnerabilities (GHSA-4vrq-3vrq-g6gg, GHSA-4c29-8rgm-jvjj)\n- **Performance Improvements**: gRPC v1.78.0 brings memory pool optimizations and better connectivity state handling\n- **Standards Compliance**: OpenTelemetry updates improve W3C Baggage specification compliance and add support for trace context level 2 features\n- **Stability**: Multiple bug fixes across dependencies, including panic fixes in BuildKit's dockerignore processing and race condition fixes in xDS client\n\n\u003c/details\u003e\n\n_Created with [Palmier](https://www.palmier.io)_","html_url":"https://github.com/GlacierEQ/cog/pull/28","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/GlacierEQ%2Fcog/issues/28","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/28/packages"}},{"old_version":"0.23.2","new_version":"0.30.0","update_type":"minor","path":null,"pr_created_at":"2026-05-13T15:39:51.000Z","version_change":"0.23.2 → 0.30.0","issue":{"uuid":"4439212068","node_id":"PR_kwDOBGvVPc7bLxKI","number":60215,"state":"open","title":"Bump the all-dependencies group across 1 directory with 32 updates","user":"dependabot[bot]","labels":["size/L","needs-ok-to-test","release-notes-none"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-13T15:39:51.000Z","updated_at":"2026-05-13T15:40:06.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"all-dependencies","update_count":32,"packages":[{"name":"github.com/cbeuw/connutil","old_version":"0.0.0-20200411215123-966bfaa51ee3","new_version":"1.0.1","repository_url":"https://github.com/cbeuw/connutil"},{"name":"github.com/coreos/go-oidc/v3","old_version":"3.15.0","new_version":"3.18.0","repository_url":"https://github.com/coreos/go-oidc"},{"name":"github.com/docker/cli","old_version":"28.3.3+incompatible","new_version":"29.4.3+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/fatih/color","old_version":"1.18.0","new_version":"1.19.0","repository_url":"https://github.com/fatih/color"},{"name":"github.com/fsnotify/fsnotify","old_version":"1.10.0","new_version":"1.10.1","repository_url":"https://github.com/fsnotify/fsnotify"},{"name":"github.com/google/cel-go","old_version":"0.28.0","new_version":"0.28.1","repository_url":"https://github.com/google/cel-go"},{"name":"github.com/google/go-containerregistry","old_version":"0.20.6","new_version":"0.21.5","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/moby/buildkit","old_version":"0.23.2","new_version":"0.30.0","repository_url":"https://github.com/moby/buildkit"},{"name":"github.com/pires/go-proxyproto","old_version":"0.11.0","new_version":"0.12.0","repository_url":"https://github.com/pires/go-proxyproto"},{"name":"github.com/prometheus/procfs","old_version":"0.19.2","new_version":"0.20.1","repository_url":"https://github.com/prometheus/procfs"},{"name":"github.com/spf13/viper","old_version":"1.20.1","new_version":"1.21.0","repository_url":"https://github.com/spf13/viper"},{"name":"go.opentelemetry.io/otel/exporters/prometheus","old_version":"0.61.0","new_version":"0.65.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"go.uber.org/zap","old_version":"1.27.0","new_version":"1.28.0","repository_url":"https://github.com/uber-go/zap"}],"path":null,"ecosystem":"go"},"body":"Bumps the all-dependencies group with 13 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/cbeuw/connutil](https://github.com/cbeuw/connutil) | `0.0.0-20200411215123-966bfaa51ee3` | `1.0.1` |\n| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.15.0` | `3.18.0` |\n| [github.com/docker/cli](https://github.com/docker/cli) | `28.3.3+incompatible` | `29.4.3+incompatible` |\n| [github.com/fatih/color](https://github.com/fatih/color) | `1.18.0` | `1.19.0` |\n| [github.com/fsnotify/fsnotify](https://github.com/fsnotify/fsnotify) | `1.10.0` | `1.10.1` |\n| [github.com/google/cel-go](https://github.com/google/cel-go) | `0.28.0` | `0.28.1` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.6` | `0.21.5` |\n| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.23.2` | `0.30.0` |\n| [github.com/pires/go-proxyproto](https://github.com/pires/go-proxyproto) | `0.11.0` | `0.12.0` |\n| [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.19.2` | `0.20.1` |\n| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.20.1` | `1.21.0` |\n| [go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go) | `0.61.0` | `0.65.0` |\n| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.0` | `1.28.0` |\n\n\nUpdates `github.com/cbeuw/connutil` from 0.0.0-20200411215123-966bfaa51ee3 to 1.0.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/cbeuw/connutil/commits/v1.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/coreos/go-oidc/v3` from 3.15.0 to 3.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/coreos/go-oidc/releases\"\u003egithub.com/coreos/go-oidc/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e.github: configure dependabot by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/477\"\u003ecoreos/go-oidc#477\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e.github: update go versions in CI by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/480\"\u003ecoreos/go-oidc#480\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/478\"\u003ecoreos/go-oidc#478\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/479\"\u003ecoreos/go-oidc#479\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eoidc: improve error message for mismatched issuer URLs by \u003ca href=\"https://github.com/ericchiang\"\u003e\u003ccode\u003e@​ericchiang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/469\"\u003ecoreos/go-oidc#469\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.16.0...v3.17.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.16.0...v3.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.16.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: Remove unused time injection from RemoteKeySet by \u003ca href=\"https://github.com/ponimas\"\u003e\u003ccode\u003e@​ponimas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/466\"\u003ecoreos/go-oidc#466\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebump go to 1.24, remove 1.23 support, bump go-jose dependency, remove x/net dependency by \u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/467\"\u003ecoreos/go-oidc#467\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/coreos/go-oidc/pull/467\"\u003ecoreos/go-oidc#467\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.15.0...v3.16.0\"\u003ehttps://github.com/coreos/go-oidc/compare/v3.15.0...v3.16.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/da6b3bfca8af72414ee0e6e8746585ff5d206003\"\u003e\u003ccode\u003eda6b3bf\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/7f80694215d5eb5b28f851f35845439b1e1e9e5d\"\u003e\u003ccode\u003e7f80694\u003c/code\u003e\u003c/a\u003e build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/7271de57587bb756318f9819796ba846b1ba875a\"\u003e\u003ccode\u003e7271de5\u003c/code\u003e\u003c/a\u003e .github: update go versions in CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/3ccf20fdc4afab7c64881a108d6f4c17a4ecc24d\"\u003e\u003ccode\u003e3ccf20f\u003c/code\u003e\u003c/a\u003e .github: configure dependabot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/35b8e031bcac7fed73b96b09d42e6e233a6e6562\"\u003e\u003ccode\u003e35b8e03\u003c/code\u003e\u003c/a\u003e oidc: improve error message for mismatched issuer URLs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/e9584733f8bb6c4683d1e98b4fb22eee121f7dff\"\u003e\u003ccode\u003ee958473\u003c/code\u003e\u003c/a\u003e bump go to 1.24, remove 1.23 support, bump go-jose dependency, remove x/net d...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/coreos/go-oidc/commit/69b167061fdb7270ef965f150ea6aabe11678728\"\u003e\u003ccode\u003e69b1670\u003c/code\u003e\u003c/a\u003e refactor: Remove unused time injection from RemoteKeySet\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/coreos/go-oidc/compare/v3.15.0...v3.18.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/cli` from 28.3.3+incompatible to 29.4.3+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/055a478ea9010a19d0d4674c0d0e87ade37a4223\"\u003e\u003ccode\u003e055a478\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6945\"\u003e#6945\u003c/a\u003e from thaJeztah/bump_moby\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/d0f5b279e9ead4cadc6f78a2ea0ff29f652f1c50\"\u003e\u003ccode\u003ed0f5b27\u003c/code\u003e\u003c/a\u003e cmd/docker-trust: bump moby/client v0.4.1, moby/api v1.54.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/b7f37e86da572a12dcea84a2e08183132bf51e00\"\u003e\u003ccode\u003eb7f37e8\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/client v0.4.1, moby/api v1.54.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/c93d892f0ea0145d9e6ab99bb4aae7dbcb389d61\"\u003e\u003ccode\u003ec93d892\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6949\"\u003e#6949\u003c/a\u003e from thaJeztah/bump_utils\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/3553cafa13f691eb0a5a726f5457929c44fd55e7\"\u003e\u003ccode\u003e3553caf\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6948\"\u003e#6948\u003c/a\u003e from thaJeztah/bump_trust_deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/266f039bb52fd237388f08e874aa719d6a6e9835\"\u003e\u003ccode\u003e266f039\u003c/code\u003e\u003c/a\u003e Dockerfile: update compose to v5.1.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/d74d3c3b163abbb084d50676da34a0055d45b855\"\u003e\u003ccode\u003ed74d3c3\u003c/code\u003e\u003c/a\u003e Dockerfile: update buildx to v0.33.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/134c2a0ed627f03cc0e6d1806f96a0b68331dc50\"\u003e\u003ccode\u003e134c2a0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6826\"\u003e#6826\u003c/a\u003e from thaJeztah/bump_golangci_lint2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/58a7c3155b14d6696bb8cb2d7a77c48a555848c1\"\u003e\u003ccode\u003e58a7c31\u003c/code\u003e\u003c/a\u003e golangci-lint: fix lint failures from v2.10.1 upgrade\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/f37a9e663fca9f351cdbe3e18353292125108285\"\u003e\u003ccode\u003ef37a9e6\u003c/code\u003e\u003c/a\u003e Dockerfile: update golangci-lint to v2.10.1\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v28.3.3...v29.4.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/fatih/color` from 1.18.0 to 1.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fatih/color/releases\"\u003egithub.com/fatih/color's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump golang.org/x/sys from 0.25.0 to 0.28.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/fatih/color/pull/246\"\u003efatih/color#246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix for issue \u003ca href=\"https://redirect.github.com/fatih/color/issues/230\"\u003e#230\u003c/a\u003e set/unsetwriter symmetric wrt color support detection by \u003ca href=\"https://github.com/ataypamart\"\u003e\u003ccode\u003e@​ataypamart\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/fatih/color/pull/243\"\u003efatih/color#243\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: go mod cleanup by \u003ca href=\"https://github.com/sashamelentyev\"\u003e\u003ccode\u003e@​sashamelentyev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/fatih/color/pull/244\"\u003efatih/color#244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/sys from 0.28.0 to 0.30.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/fatih/color/pull/249\"\u003efatih/color#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github.com/mattn/go-colorable from 0.1.13 to 0.1.14 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/fatih/color/pull/248\"\u003efatih/color#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate CI and go deps by \u003ca href=\"https://github.com/fatih\"\u003e\u003ccode\u003e@​fatih\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/fatih/color/pull/254\"\u003efatih/color#254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/sys from 0.31.0 to 0.37.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/fatih/color/pull/268\"\u003efatih/color#268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: include escape codes in byte counts from \u003ccode\u003eFprint\u003c/code\u003e, \u003ccode\u003eFprintf\u003c/code\u003e by \u003ca href=\"https://github.com/qualidafial\"\u003e\u003ccode\u003e@​qualidafial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/fatih/color/pull/282\"\u003efatih/color#282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golang.org/x/sys from 0.37.0 to 0.40.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/fatih/color/pull/277\"\u003efatih/color#277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: add nil check for os.Stdout to prevent panic on Windows services by \u003ca href=\"https://github.com/majiayu000\"\u003e\u003ccode\u003e@​majiayu000\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/fatih/color/pull/275\"\u003efatih/color#275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump dominikh/staticcheck-action from 1.3.1 to 1.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/fatih/color/pull/259\"\u003efatih/color#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/checkout from 4 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/fatih/color/pull/273\"\u003efatih/color#273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOptimize Color.Equals performance (O(n²) → O(n)) by \u003ca href=\"https://github.com/UnSubble\"\u003e\u003ccode\u003e@​UnSubble\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/fatih/color/pull/269\"\u003efatih/color#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/setup-go from 5 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/fatih/color/pull/266\"\u003efatih/color#266\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ataypamart\"\u003e\u003ccode\u003e@​ataypamart\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/fatih/color/pull/243\"\u003efatih/color#243\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sashamelentyev\"\u003e\u003ccode\u003e@​sashamelentyev\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/fatih/color/pull/244\"\u003efatih/color#244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/qualidafial\"\u003e\u003ccode\u003e@​qualidafial\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/fatih/color/pull/282\"\u003efatih/color#282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/majiayu000\"\u003e\u003ccode\u003e@​majiayu000\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/fatih/color/pull/275\"\u003efatih/color#275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/UnSubble\"\u003e\u003ccode\u003e@​UnSubble\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/fatih/color/pull/269\"\u003efatih/color#269\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fatih/color/compare/v1.18.0...v1.19.0\"\u003ehttps://github.com/fatih/color/compare/v1.18.0...v1.19.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/ca25f6e17f118a5a259f3c2c0d395949d1103a5a\"\u003e\u003ccode\u003eca25f6e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/fatih/color/issues/266\"\u003e#266\u003c/a\u003e from fatih/dependabot/github_actions/actions/setup-go-6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/120598440a16510564204450092d1e7925fad9ae\"\u003e\u003ccode\u003e1205984\u003c/code\u003e\u003c/a\u003e Bump actions/setup-go from 5 to 6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/5715c20323d8c79f60d4944831fcfa3b76cd5734\"\u003e\u003ccode\u003e5715c20\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/fatih/color/issues/269\"\u003e#269\u003c/a\u003e from UnSubble/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/2f6e2003760028129f34c4ad5c3728b904811d3c\"\u003e\u003ccode\u003e2f6e200\u003c/code\u003e\u003c/a\u003e Merge branch 'main' into main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/f72ec947d0c34504dfd08b0db68d89f37503fc90\"\u003e\u003ccode\u003ef72ec94\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/fatih/color/issues/273\"\u003e#273\u003c/a\u003e from fatih/dependabot/github_actions/actions/checkout-6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/848e6330af5690fa24bb038d5330839a33f1f0e5\"\u003e\u003ccode\u003e848e633\u003c/code\u003e\u003c/a\u003e Merge branch 'main' into main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/4c2cd3443934693bd8892fc0f7bb5bbec8e3788a\"\u003e\u003ccode\u003e4c2cd34\u003c/code\u003e\u003c/a\u003e Add tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/7f812f029c41eddd3ac7fbbdf6cc78e4b175944b\"\u003e\u003ccode\u003e7f812f0\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4 to 6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/b7fc9f9557629556aff702751b5268cefcbafa15\"\u003e\u003ccode\u003eb7fc9f9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/fatih/color/issues/259\"\u003e#259\u003c/a\u003e from fatih/dependabot/github_actions/dominikh/staticc...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fatih/color/commit/239a88f715e8e35f40492da7a1e08f7173e78e05\"\u003e\u003ccode\u003e239a88f\u003c/code\u003e\u003c/a\u003e Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/fatih/color/compare/v1.18.0...v1.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/fsnotify/fsnotify` from 1.10.0 to 1.10.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fsnotify/fsnotify/releases\"\u003egithub.com/fsnotify/fsnotify's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.1\u003c/h2\u003e\n\u003ch3\u003eChanges and fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003einotify: don't remove sibling watches sharing a path prefix (\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/754\"\u003e#754\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003einotify, windows: don't rename sibling watches sharing a path prefix\n(\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/755\"\u003e#755\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/754\"\u003e#754\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/pull/754\"\u003efsnotify/fsnotify#754\u003c/a\u003e\n\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/755\"\u003e#755\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/pull/755\"\u003efsnotify/fsnotify#755\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fsnotify/fsnotify/blob/main/CHANGELOG.md\"\u003egithub.com/fsnotify/fsnotify's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.10.1 2026-05-04\u003c/h2\u003e\n\u003ch3\u003eChanges and fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003einotify: don't remove sibling watches sharing a path prefix (\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/754\"\u003e#754\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003einotify, windows: don't rename sibling watches sharing a path prefix\n(\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/755\"\u003e#755\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/754\"\u003e#754\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/pull/754\"\u003efsnotify/fsnotify#754\u003c/a\u003e\n\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/755\"\u003e#755\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/pull/755\"\u003efsnotify/fsnotify#755\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fsnotify/fsnotify/commit/76b01a6e8f502187fecedea8b025e79e5a86085c\"\u003e\u003ccode\u003e76b01a6\u003c/code\u003e\u003c/a\u003e Release 1.10.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fsnotify/fsnotify/commit/fec150b807510e54e5b25def4b6e5fb001b4898c\"\u003e\u003ccode\u003efec150b\u003c/code\u003e\u003c/a\u003e Update changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fsnotify/fsnotify/commit/162b4216ab8f92ecd26425530bee198972c9b3cb\"\u003e\u003ccode\u003e162b421\u003c/code\u003e\u003c/a\u003e inotify, windows: don't rename sibling watches sharing a path prefix (\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/755\"\u003e#755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fsnotify/fsnotify/commit/224257f23b2f3a96509b316c5cead71dd4a9099a\"\u003e\u003ccode\u003e224257f\u003c/code\u003e\u003c/a\u003e inotify: don't remove sibling watches sharing a path prefix (\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/754\"\u003e#754\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fsnotify/fsnotify/commit/e0c956c0ccaf51562fee30ef5c055c74e6ae2104\"\u003e\u003ccode\u003ee0c956c\u003c/code\u003e\u003c/a\u003e windows: document directory Write events and stabilize tests (\u003ca href=\"https://redirect.github.com/fsnotify/fsnotify/issues/745\"\u003e#745\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/fsnotify/fsnotify/compare/v1.10.0...v1.10.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.1.3 to 4.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes Panic in JWE decryption. See \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9\"\u003e\u003ccode\u003e0e59876\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ddffdbcec8bdadea8e02a20bdf19239878228215\"\u003e\u003ccode\u003eddffdbc\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/cel-go` from 0.28.0 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/cel-go/releases\"\u003egithub.com/google/cel-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease v0.28.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: deleted \u003ccode\u003eIntToDuration\u003c/code\u003e overload by \u003ca href=\"https://github.com/alexsnaps\"\u003e\u003ccode\u003e@​alexsnaps\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/cel-go/pull/1300\"\u003egoogle/cel-go#1300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport shorthand types in env yaml and REPL  by \u003ca href=\"https://github.com/jnthntatum\"\u003e\u003ccode\u003e@​jnthntatum\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/cel-go/pull/1301\"\u003egoogle/cel-go#1301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreserve operation interrupted in ContextEval error by \u003ca href=\"https://github.com/dims\"\u003e\u003ccode\u003e@​dims\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/cel-go/pull/1303\"\u003egoogle/cel-go#1303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse shorthand type specifiers in env yaml files by \u003ca href=\"https://github.com/jnthntatum\"\u003e\u003ccode\u003e@​jnthntatum\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/cel-go/pull/1305\"\u003egoogle/cel-go#1305\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCost estimation and tracking for strings extension by \u003ca href=\"https://github.com/TristonianJones\"\u003e\u003ccode\u003e@​TristonianJones\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/cel-go/pull/1307\"\u003egoogle/cel-go#1307\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate repl type string for doubles by \u003ca href=\"https://github.com/TristonianJones\"\u003e\u003ccode\u003e@​TristonianJones\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/cel-go/pull/1308\"\u003egoogle/cel-go#1308\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alexsnaps\"\u003e\u003ccode\u003e@​alexsnaps\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/cel-go/pull/1300\"\u003egoogle/cel-go#1300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dims\"\u003e\u003ccode\u003e@​dims\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/cel-go/pull/1303\"\u003egoogle/cel-go#1303\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/cel-go/compare/v0.28.0...v0.28.1\"\u003ehttps://github.com/google/cel-go/compare/v0.28.0...v0.28.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/cel-go/commit/a82c68b770ac0cb67f7b4f76166827c14b145eb8\"\u003e\u003ccode\u003ea82c68b\u003c/code\u003e\u003c/a\u003e Update repl type assessment for doubles (\u003ca href=\"https://redirect.github.com/google/cel-go/issues/1308\"\u003e#1308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/cel-go/commit/c9d70486a872fbfaf9c4cb383a005de56e499368\"\u003e\u003ccode\u003ec9d7048\u003c/code\u003e\u003c/a\u003e Cost estimation and tracking for strings extension (\u003ca href=\"https://redirect.github.com/google/cel-go/issues/1307\"\u003e#1307\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/cel-go/commit/646cdc1728643aec9499e3a00236ef1007a5d3fa\"\u003e\u003ccode\u003e646cdc1\u003c/code\u003e\u003c/a\u003e Use shorthand type specifiers in env yaml files (\u003ca href=\"https://redirect.github.com/google/cel-go/issues/1305\"\u003e#1305\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/cel-go/commit/7263793b453228e8a47ca742afd124b3eaa8fc68\"\u003e\u003ccode\u003e7263793\u003c/code\u003e\u003c/a\u003e Preserve operation interrupted in ContextEval error (\u003ca href=\"https://redirect.github.com/google/cel-go/issues/1303\"\u003e#1303\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/cel-go/commit/b826162b7b6ac7ae048fbf23b6123ab5c99da11b\"\u003e\u003ccode\u003eb826162\u003c/code\u003e\u003c/a\u003e Support shorthand types in env yaml and REPL  (\u003ca href=\"https://redirect.github.com/google/cel-go/issues/1301\"\u003e#1301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/cel-go/commit/339269b44af7c3cd477b55530e9cc1fe534c7f09\"\u003e\u003ccode\u003e339269b\u003c/code\u003e\u003c/a\u003e fix: deleted \u003ccode\u003eIntToDuration\u003c/code\u003e overload (\u003ca href=\"https://redirect.github.com/google/cel-go/issues/1300\"\u003e#1300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/google/cel-go/compare/v0.28.0...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/google/go-containerregistry` from 0.20.6 to 0.21.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/go-containerregistry/releases\"\u003egithub.com/google/go-containerregistry's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.21.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2254\"\u003egoogle/go-containerregistry#2254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate to Go 1.26.2 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2255\"\u003egoogle/go-containerregistry#2255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 in the actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2257\"\u003egoogle/go-containerregistry#2257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 in the go-deps group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2260\"\u003egoogle/go-containerregistry#2260\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.4...v0.21.5\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.4...v0.21.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.21.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ego.mod: do not make a viral minimum go version by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2237\"\u003egoogle/go-containerregistry#2237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid pruning absolute links from extracted and flattened images by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2241\"\u003egoogle/go-containerregistry#2241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump the go-deps group across 3 directories with 5 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2245\"\u003egoogle/go-containerregistry#2245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: update to go1.25.8, and use separate .go-version file by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2246\"\u003egoogle/go-containerregistry#2246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump CI go version to 1.26.1 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2242\"\u003egoogle/go-containerregistry#2242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump codecov/codecov-action from 5.5.2 to 5.5.3 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2240\"\u003egoogle/go-containerregistry#2240\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efork distribution client v3 auth-challenge as an internal package (squashed) by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2248\"\u003egoogle/go-containerregistry#2248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etransport: validate Bearer realm URL to prevent SSRF by \u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2243\"\u003egoogle/go-containerregistry#2243\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erevert path traversal and symlink escape from \u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2227\"\u003e#2227\u003c/a\u003e by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2250\"\u003egoogle/go-containerregistry#2250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pkg/v1/google/auth tests for arm64  by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2085\"\u003egoogle/go-containerregistry#2085\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egoreleaser: Update goreleaser config and GH action by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2253\"\u003egoogle/go-containerregistry#2253\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilgensec\"\u003e\u003ccode\u003e@​evilgensec\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2243\"\u003egoogle/go-containerregistry#2243\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.3...v0.21.4\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.3...v0.21.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.21.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdds local file support to the \u003ccode\u003ecrane index\u003c/code\u003e subcommand  by \u003ca href=\"https://github.com/edwardthiele\"\u003e\u003ccode\u003e@​edwardthiele\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2223\"\u003egoogle/go-containerregistry#2223\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emigrate to github.com/moby/moby modules by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2228\"\u003egoogle/go-containerregistry#2228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump the go-deps group across 4 directories with 7 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2233\"\u003egoogle/go-containerregistry#2233\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 in the actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2220\"\u003egoogle/go-containerregistry#2220\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emutate: reject path traversal and symlink escape in Extract by \u003ca href=\"https://github.com/KevinZhao\"\u003e\u003ccode\u003e@​KevinZhao\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2227\"\u003egoogle/go-containerregistry#2227\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etarball: detect symlink cycles in extractFileFromTar by \u003ca href=\"https://github.com/vnykmshr\"\u003e\u003ccode\u003e@​vnykmshr\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2232\"\u003egoogle/go-containerregistry#2232\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebump golang to 1.25.7 by \u003ca href=\"https://github.com/Subserial\"\u003e\u003ccode\u003e@​Subserial\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2236\"\u003egoogle/go-containerregistry#2236\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/edwardthiele\"\u003e\u003ccode\u003e@​edwardthiele\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2223\"\u003egoogle/go-containerregistry#2223\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2228\"\u003egoogle/go-containerregistry#2228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KevinZhao\"\u003e\u003ccode\u003e@​KevinZhao\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2227\"\u003egoogle/go-containerregistry#2227\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vnykmshr\"\u003e\u003ccode\u003e@​vnykmshr\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2232\"\u003egoogle/go-containerregistry#2232\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3\"\u003ehttps://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.21.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBetter handle redirects to https in ping by \u003ca href=\"https://github.com/jonjohnsonjr\"\u003e\u003ccode\u003e@​jonjohnsonjr\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/go-containerregistry/pull/2225\"\u003egoogle/go-containerregistry#2225\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/5b80281da727dae218e1697ab8529b631b9efa64\"\u003e\u003ccode\u003e5b80281\u003c/code\u003e\u003c/a\u003e build(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 in the go-deps gro...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/b99bca24a8df1bd88afc1d299d4c0ebba0555cf8\"\u003e\u003ccode\u003eb99bca2\u003c/code\u003e\u003c/a\u003e build(deps): bump aws-actions/configure-aws-credentials (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2257\"\u003e#2257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/f8be1d442e6fc85c791e4aa50155aa8806ca8312\"\u003e\u003ccode\u003ef8be1d4\u003c/code\u003e\u003c/a\u003e update to Go 1.26.2 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2255\"\u003e#2255\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/87ad88b4a000e418add5c1bb4ae1da908cbc3b85\"\u003e\u003ccode\u003e87ad88b\u003c/code\u003e\u003c/a\u003e Bump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2254\"\u003e#2254\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e8813dd0a00e799459cae01d8a4659b9be2fd871\"\u003e\u003ccode\u003ee8813dd\u003c/code\u003e\u003c/a\u003e goreleaser: Update goreleaser config and GH action for releases (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2253\"\u003e#2253\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/e90447d319233b94dcdc75a24246ccbee6d1e72a\"\u003e\u003ccode\u003ee90447d\u003c/code\u003e\u003c/a\u003e replace gcloud in binary calls in pkg/v1/google tests (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2085\"\u003e#2085\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/0d0368c2a5fa524c4765a6c0b7df4ff6d6951471\"\u003e\u003ccode\u003e0d0368c\u003c/code\u003e\u003c/a\u003e revert path traversal and symlink escape changes (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2250\"\u003e#2250\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/a2f47d4202de443f68e8bafa95ddd41407327168\"\u003e\u003ccode\u003ea2f47d4\u003c/code\u003e\u003c/a\u003e transport: validate Bearer realm URL to prevent SSRF (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2243\"\u003e#2243\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/19a36cd8c44dd465a84f9d6ffea3009023f73660\"\u003e\u003ccode\u003e19a36cd\u003c/code\u003e\u003c/a\u003e fork distribution client v3 auth-challenge as an internal package (squashed) ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/go-containerregistry/commit/c612a9b20a4c533454b7fa8b39a8c8139065f0b1\"\u003e\u003ccode\u003ec612a9b\u003c/code\u003e\u003c/a\u003e Bump codecov/codecov-action from 5.5.2 to 5.5.3 in the actions group (\u003ca href=\"https://redirect.github.com/google/go-containerregistry/issues/2240\"\u003e#2240\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/go-containerregistry/compare/v0.20.6...v0.21.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/moby/buildkit` from 0.23.2 to 0.30.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.30.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.30.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eNatnael Gebremariam\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eDawei Wei\u003c/li\u003e\n\u003cli\u003eDmitrii Kostyrev\u003c/li\u003e\n\u003cli\u003eJiří Moravčík\u003c/li\u003e\n\u003cli\u003eVladimir Kuznichenkov\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuiltin Dockerfile frontend has been updated to v1.24.0 \u003ca href=\"https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.24.0\"\u003echangelog\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuildKit now supports the concept of \u0026quot;compatibility version\u0026quot; for improved reproducible builds support across different BuildKit versions. This allows users to specify a version for which the build should be compatible with, and BuildKit will attempt to maintain compatibility with that version when possible. Compatibility version will be stored in the provenance attestation of the build and can be used to independently verify the artifacts of the build on other BuildKit versions. The current compatibility version and backward compatibility with old versions are defined in \u003ca href=\"https://github.com/moby/buildkit/blob/v0.30.0-rc1/docs/build-repro.md#compatibility-version\"\u003eBuild reproducibility docs\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6681\"\u003e#6681\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGit sources now support \u003ccode\u003efetch-by-commit\u003c/code\u003e option where commit is fetched by the SHA and then associated with the reference. This is useful when checking out mutable references \u003ccode\u003erefs/NR/merge\u003c/code\u003e where the commit SHA may change during invocation and cause checksum mismatch error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6708\"\u003e#6708\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe LLB API now supports Git bundle format. Git bundles can be loaded from registry or OCI layout blobs and Git sources can be checked out into bundle format for snapshotting \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6711\"\u003e#6711\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eProvenance attestations for multi-pass or chained builds now include request details for root requests and individual input requests, allowing full reconstruction of such complex builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6739\"\u003e#6739\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe version of the built-in Dockerfile frontend that was used is now included in the provenance metadata and reported via worker info APIs. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6705\"\u003e#6705\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error reporting for registry errors on cache export \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports additional options \u003ccode\u003eretry_mode\u003c/code\u003e and \u003ccode\u003eretry_max_attempts\u003c/code\u003e to configure retry behavior of S3 client \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6657\"\u003e#6657\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eS3 cache now supports \u003ccode\u003edisable_accept_encoding\u003c/code\u003e option for GCS interoperability \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6642\"\u003e#6642\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce potential lock contention in gateway forwarder for improved performance on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6741\"\u003e#6741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eA new log level option has been added to the buildkitd TOML configuration; previous \u0026quot;debug\u0026quot; and \u0026quot;trace\u0026quot; options have been deprecated \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6732\"\u003e#6732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow gateway frontend requests to forward to the built-in Dockerfile frontend the same way as to external frontends \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6643\"\u003e#6643\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSession connection health checks have been improved to better detect loss of connectivity and avoid stuck builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6649\"\u003e#6649\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix issue with Git subdirectory value not being included in ConfigSource section of SLSA provenance for builds from Git sources \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6724\"\u003e#6724\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid potential deadlock if the credential helper in the client is misbehaving and never returns credentials \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6709\"\u003e#6709\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in provenance computation on parallel builds \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible provenance capture race in concurrent no-cache builds that could leave source pins empty and fail with an invalid checksum digest error \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6764\"\u003e#6764\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible data race in progress writer \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6679\"\u003e#6679\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix data race in S3 cache reader \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6675\"\u003e#6675\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible Git config lookup errors on Windows \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6639\"\u003e#6639\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix build cancellation not working properly when blocked on credential callback \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6641\"\u003e#6641\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Azure/azure-sdk-for-go/sdk/azcore\u003c/strong\u003e                                  v1.20.0 -\u0026gt; v1.21.0\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/Microsoft/hcsshim\u003c/strong\u003e                                                  v0.14.0-rc.1 -\u0026gt; v0.14.1\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2\u003c/strong\u003e                                                  v1.41.4 -\u0026gt; v1.41.7\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/dd2170e156c9633da1b2d1a58a6188e3f7d36fa4\"\u003e\u003ccode\u003edd2170e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6770\"\u003e#6770\u003c/a\u003e from crazy-max/v0.30-picks-0.30.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/e4b9769cf519c5c1d9bc59643adde2c977f9ae30\"\u003e\u003ccode\u003ee4b9769\u003c/code\u003e\u003c/a\u003e test: gate merge diff tests through worker capabilities\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/d5956a1cf26f4055deaff883dad537b6a25bcfa1\"\u003e\u003ccode\u003ed5956a1\u003c/code\u003e\u003c/a\u003e skip pin race test on workers without merge diff support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/505ab37cd6c6c6d2ac37e3a598eab4abdc315c2a\"\u003e\u003ccode\u003e505ab37\u003c/code\u003e\u003c/a\u003e solver: fix race in walkProvenance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f2e48d20dc7d744a4051d6b5591b851a29a6232f\"\u003e\u003ccode\u003ef2e48d2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6762\"\u003e#6762\u003c/a\u003e from jsternberg/add-error-details\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f7a40a08716a42f1066b99bb0cdc09cab42987b9\"\u003e\u003ccode\u003ef7a40a0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6758\"\u003e#6758\u003c/a\u003e from tonistiigi/fix-provenance-data-race\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/80e934d8b310736f71a6a33c696b8448bec6c12d\"\u003e\u003ccode\u003e80e934d\u003c/code\u003e\u003c/a\u003e remotecache: propagate details field from registry when included\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/a7c874909a0045c6e32c1c1314e7aba949bf85da\"\u003e\u003ccode\u003ea7c8749\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6761\"\u003e#6761\u003c/a\u003e from moby/dependabot/github_actions/github/codeql-ac...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df37b6751b796a1b22d4dfe0ffb0bc9962b2c38b\"\u003e\u003ccode\u003edf37b67\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.35.3 to 4.35.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/c7ba94199885e89e25615d3e2d78fea86a2c7eb7\"\u003e\u003ccode\u003ec7ba941\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6759\"\u003e#6759\u003c/a\u003e from moby/dependabot/github_actions/docker/github-bu...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.23.2...v0.30.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/pires/go-proxyproto` from 0.11.0 to 0.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pires/go-proxyproto/releases\"\u003egithub.com/pires/go-proxyproto's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.12.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: drop Go 1.24 (EOL) in favor of 1.26 by \u003ca href=\"https://github.com/pires\"\u003e\u003ccode\u003e@​pires\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pires/go-proxyproto/pull/166\"\u003epires/go-proxyproto#166\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev1: accept plain IPv4 addresses in TCP6 headers by \u003ca href=\"https://github.com/cmarker-gl\"\u003e\u003ccode\u003e@​cmarker-gl\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pires/go-proxyproto/pull/167\"\u003epires/go-proxyproto#167\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cmarker-gl\"\u003e\u003ccode\u003e@​cmarker-gl\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pires/go-proxyproto/pull/167\"\u003epires/go-proxyproto#167\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/pires/go-proxyproto/compare/v0.11.0...v0.12.0\"\u003ehttps://github.com/pires/go-proxyproto/compare/v0.11.0...v0.12.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pires/go-proxyproto/commit/0cee3e4e1c33d9cad14cde1837d454656cd348d9\"\u003e\u003ccode\u003e0cee3e4\u003c/code\u003e\u003c/a\u003e v1: accept plain IPv4 addresses in TCP6 headers (\u003ca href=\"https://redirect.github.com/pires/go-proxyproto/issues/167\"\u003e#167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pires/go-proxyproto/commit/5c8010d2392f09ce18169631c024aceae758335a\"\u003e\u003ccode\u003e5c8010d\u003c/code\u003e\u003c/a\u003e build: drop Go 1.24 (EOL) in favor of 1.26\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/pires/go-proxyproto/compare/v0.11.0...v0.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/prometheus/procfs` from 0.19.2 to 0.20.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/prometheus/procfs/releases\"\u003egithub.com/prometheus/procfs's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.20.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003envme: Parse NVMe namespace details  by \u003ca href=\"https://github.com/ShashwatHiregoudar\"\u003e\u003ccode\u003e@​ShashwatHiregoudar\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/765\"\u003eprometheus/procfs#765\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix bcachefs parsing by \u003ca href=\"https://github.com/ananthb\"\u003e\u003ccode\u003e@​ananthb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/789\"\u003eprometheus/procfs#789\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/788\"\u003eprometheus/procfs#788\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate sysfs/class_thermal: continue on EINVAL in parseClassThermalZone to ignore only invalid thermal zones which raise \u0026quot;invalid argument\u0026quot; by \u003ca href=\"https://github.com/ccastiglione-reply\"\u003e\u003ccode\u003e@​ccastiglione-reply\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/763\"\u003eprometheus/procfs#763\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ccastiglione-reply\"\u003e\u003ccode\u003e@​ccastiglione-reply\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/763\"\u003eprometheus/procfs#763\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/prometheus/procfs/compare/v0.20.0...v0.20.1\"\u003ehttps://github.com/prometheus/procfs/compare/v0.20.0...v0.20.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.20.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/747\"\u003eprometheus/procfs#747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/766\"\u003eprometheus/procfs#766\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/sync from 0.17.0 to 0.19.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/773\"\u003eprometheus/procfs#773\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/sys from 0.37.0 to 0.39.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/772\"\u003eprometheus/procfs#772\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/774\"\u003eprometheus/procfs#774\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix /proc/interrupts by \u003ca href=\"https://github.com/ffyuanda\"\u003e\u003ccode\u003e@​ffyuanda\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/775\"\u003eprometheus/procfs#775\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/778\"\u003eprometheus/procfs#778\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/779\"\u003eprometheus/procfs#779\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMigrate to GitHub actions by \u003ca href=\"https://github.com/SuperQ\"\u003e\u003ccode\u003e@​SuperQ\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/780\"\u003eprometheus/procfs#780\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/sys from 0.40.0 to 0.41.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/782\"\u003eprometheus/procfs#782\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/785\"\u003eprometheus/procfs#785\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebcachefs support by \u003ca href=\"https://github.com/ananthb\"\u003e\u003ccode\u003e@​ananthb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/750\"\u003eprometheus/procfs#750\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.1 to 6.0.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/781\"\u003eprometheus/procfs#781\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: parse capabilities in /proc/pid/status by \u003ca href=\"https://github.com/biscout42\"\u003e\u003ccode\u003e@​biscout42\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/784\"\u003eprometheus/procfs#784\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eclass_cooling_device: ignore EINVAL (etc) when reading files. by \u003ca href=\"https://github.com/malcolmr\"\u003e\u003ccode\u003e@​malcolmr\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/783\"\u003eprometheus/procfs#783\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd type and name to the DRM parser class by \u003ca href=\"https://github.com/Deezzir\"\u003e\u003ccode\u003e@​Deezzir\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/672\"\u003eprometheus/procfs#672\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ffyuanda\"\u003e\u003ccode\u003e@​ffyuanda\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/775\"\u003eprometheus/procfs#775\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ananthb\"\u003e\u003ccode\u003e@​ananthb\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/750\"\u003eprometheus/procfs#750\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biscout42\"\u003e\u003ccode\u003e@​biscout42\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/784\"\u003eprometheus/procfs#784\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/malcolmr\"\u003e\u003ccode\u003e@​malcolmr\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/783\"\u003eprometheus/procfs#783\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Deezzir\"\u003e\u003ccode\u003e@​Deezzir\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/prometheus/procfs/pull/672\"\u003eprometheus/procfs#672\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/prometheus/procfs/compare/v0.19.2...v0.20.0\"\u003ehttps://github.com/prometheus/procfs/compare/v0.19.2...v0.20.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/b380dd40ab2971c80872861842bcb997ff83bebb\"\u003e\u003ccode\u003eb380dd4\u003c/code\u003e\u003c/a\u003e fix: thermal_zone, handle EINVAL errors from sysfs reads. (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/763\"\u003e#763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/61288059f5793af40adc195d6e4346add4f85c89\"\u003e\u003ccode\u003e6128805\u003c/code\u003e\u003c/a\u003e Update common Prometheus files (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/788\"\u003e#788\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/e72bf7a2fe39830a015c17e5cbbab1ba287cd13b\"\u003e\u003ccode\u003ee72bf7a\u003c/code\u003e\u003c/a\u003e Fix bcachefs parsing (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/789\"\u003e#789\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/56add94167b80e177a915b7259dcabbc8ac8d3e3\"\u003e\u003ccode\u003e56add94\u003c/code\u003e\u003c/a\u003e nvme: Parse NVMe namespace details  (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/765\"\u003e#765\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/8fce2bdad2fb853f22d44b52c09f43abfe962626\"\u003e\u003ccode\u003e8fce2bd\u003c/code\u003e\u003c/a\u003e Add type and name to the DRM parser class (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/672\"\u003e#672\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/091f46ca6347d92a695271845df08dde73917feb\"\u003e\u003ccode\u003e091f46c\u003c/code\u003e\u003c/a\u003e class_cooling_device: ignore EINVAL (etc) when reading files. (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/783\"\u003e#783\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/5efaf0ae13b2c7e33032be909335933920e2b399\"\u003e\u003ccode\u003e5efaf0a\u003c/code\u003e\u003c/a\u003e feat: parse capabilities in /proc/pid/status (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/784\"\u003e#784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/31bc6b65b1d89d9f4718301233bd241a4636b777\"\u003e\u003ccode\u003e31bc6b6\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/checkout from 6.0.1 to 6.0.2 (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/781\"\u003e#781\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/51a5dd2044d8b6039567bdb1c7498250588b5585\"\u003e\u003ccode\u003e51a5dd2\u003c/code\u003e\u003c/a\u003e init bcachefs support (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/750\"\u003e#750\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/procfs/commit/c33362dbe6d59af295f6ed3b6809aece4c502d17\"\u003e\u003ccode\u003ec33362d\u003c/code\u003e\u003c/a\u003e Update common Prometheus files (\u003ca href=\"https://redirect.github.com/prometheus/procfs/issues/785\"\u003e#785\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/prometheus/procfs/compare/v0.19.2...v0.20.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/spf13/cobra` from 1.9.1 to 1.10.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/spf13/cobra/releases\"\u003egithub.com/spf13/cobra's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.10.2\u003c/h2\u003e\n\u003ch2\u003e🔧 Dependencies\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: Migrate from \u003ccode\u003egopkg.in/yaml.v3\u003c/code\u003e to \u003ccode\u003ego.yaml.in/yaml/v3\u003c/code\u003e by \u003ca href=\"https://github.com/dims\"\u003e\u003ccode\u003e@​dims\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2336\"\u003espf13/cobra#2336\u003c/a\u003e - the \u003ccode\u003egopkg.in/yaml.v3\u003c/code\u003e package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of \u003ccode\u003espf13/cobra\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📈 CI/CD\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix linter and allow CI to pass by \u003ca href=\"https://github.com/marckhouzam\"\u003e\u003ccode\u003e@​marckhouzam\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2327\"\u003espf13/cobra#2327\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: actions/setup-go v6 by \u003ca href=\"https://github.com/jpmcb\"\u003e\u003ccode\u003e@​jpmcb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2337\"\u003espf13/cobra#2337\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔥✍🏼 Docs\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd documentation for repeated flags functionality by \u003ca href=\"https://github.com/rvergis\"\u003e\u003ccode\u003e@​rvergis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2316\"\u003espf13/cobra#2316\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🍂 Refactors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: replace several vars with consts by \u003ca href=\"https://github.com/htoyoda18\"\u003e\u003ccode\u003e@​htoyoda18\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2328\"\u003espf13/cobra#2328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: change minUsagePadding from var to const by \u003ca href=\"https://github.com/ssam18\"\u003e\u003ccode\u003e@​ssam18\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2325\"\u003espf13/cobra#2325\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🤗 New Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rvergis\"\u003e\u003ccode\u003e@​rvergis\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2316\"\u003espf13/cobra#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/htoyoda18\"\u003e\u003ccode\u003e@​htoyoda18\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2328\"\u003espf13/cobra#2328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ssam18\"\u003e\u003ccode\u003e@​ssam18\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2325\"\u003espf13/cobra#2325\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dims\"\u003e\u003ccode\u003e@​dims\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2336\"\u003espf13/cobra#2336\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/spf13/cobra/compare/v1.10.1...v1.10.2\"\u003ehttps://github.com/spf13/cobra/compare/v1.10.1...v1.10.2\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThank you to our amazing contributors!!!!! 🐍 🚀\u003c/p\u003e\n\u003ch2\u003ev1.10.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Fix\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore: upgrade pflags v1.0.9 by \u003ca href=\"https://github.com/jpmcb\"\u003e\u003ccode\u003e@​jpmcb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2305\"\u003espf13/cobra#2305\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ev1.0.9 of pflags brought back \u003ccode\u003eParseErrorsWhitelist\u003c/code\u003e and marked it as deprecated\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/spf13/cobra/compare/v1.10.0...v1.10.1\"\u003ehttps://github.com/spf13/cobra/compare/v1.10.0...v1.10.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e🚨 Attention!\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump pflag to 1.0.8 by \u003ca href=\"https://github.com/tomasaschan\"\u003e\u003ccode\u003e@​tomasaschan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/cobra/pull/2303\"\u003espf13/cobra#2303\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThis version of \u003ccode\u003epflag\u003c/code\u003e carried a breaking change: it renamed \u003ccode\u003eParseErrorsWhitelist\u003c/code\u003e to \u003ccode\u003eParseErrorsAllowlist\u003c/code\u003e which can break builds if both \u003ccode\u003epflag\u003c/code\u003e and \u003ccode\u003ecobra\u003c/code\u003e are dependencies in your project.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIf you use both \u003ccode\u003epflag and \u003c/code\u003ecobra\u003ccode\u003e, upgrade \u003c/code\u003epflag\u003ccode\u003eto 1.0.8 and\u003c/code\u003ecobra\u003ccode\u003eto\u003c/code\u003e1.10.0`\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003cem\u003eor\u003c/em\u003e\u003c/strong\u003e use the newer, fixed version of \u003ccode\u003epflag\u003c/code\u003e v1.0.9 which keeps the deprecated \u003ccode\u003eParseErrorsWhitelist\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/88b30ab89da2d0d0abb153818746c5a2d30eccec\"\u003e\u003ccode\u003e88b30ab\u003c/code\u003e\u003c/a\u003e chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (\u003ca href=\"https://redirect.github.com/spf13/cobra/issues/2336\"\u003e#2336\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/346d408fe7d4be00ff9481ea4d43c4abb5e5f77d\"\u003e\u003ccode\u003e346d408\u003c/code\u003e\u003c/a\u003e fix: actions/setup-go v6 (\u003ca href=\"https://redirect.github.com/spf13/cobra/issues/2337\"\u003e#2337\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/fc81d2003469e2a5c440306d04a6d82a54065979\"\u003e\u003ccode\u003efc81d20\u003c/code\u003e\u003c/a\u003e refactor: change minUsagePadding from var to const (\u003ca href=\"https://redirect.github.com/spf13/cobra/issues/2325\"\u003e#2325\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/117698a604b65e80a1ad5b76df67b604bcd992e0\"\u003e\u003ccode\u003e117698a\u003c/code\u003e\u003c/a\u003e refactor: replace several vars with consts (\u003ca href=\"https://redirect.github.com/spf13/cobra/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/e2dd29ddc39acacf3af13013b06e1fe58b5c3599\"\u003e\u003ccode\u003ee2dd29d\u003c/code\u003e\u003c/a\u003e Add documentation for repeated flags functionality (\u003ca href=\"https://redirect.github.com/spf13/cobra/issues/2316\"\u003e#2316\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/062989255670f5e100abf70fa5e291a394915f89\"\u003e\u003ccode\u003e0629892\u003c/code\u003e\u003c/a\u003e Fix linter (\u003ca href=\"https://redirect.github.com/spf13/cobra/issues/2327\"\u003e#2327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/7da941c3547e93b8c9f70bbd3befca79c6335388\"\u003e\u003ccode\u003e7da941c\u003c/code\u003e\u003c/a\u003e chore: Bump pflag to v1.0.9 (\u003ca href=\"https://redirect.github.com/spf13/cobra/issues/2305\"\u003e#2305\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/51d675196729be769ce235b710ab7058b3aad03a\"\u003e\u003ccode\u003e51d6751\u003c/code\u003e\u003c/a\u003e Bump pflag to 1.0.8 (\u003ca href=\"https://redirect.github.com/spf13/cobra/issues/2303\"\u003e#2303\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/3f3b81882534a51628f3286e93c6842d9b2e29ea\"\u003e\u003ccode\u003e3f3b818\u003c/code\u003e\u003c/a\u003e Update README.md with new logo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/cobra/commit/dcaf42e2633496bf97d5476d7419071e5c48f40a\"\u003e\u003ccode\u003edcaf42e\u003c/code\u003e\u003c/a\u003e Add Periscope to the list of projects using Cobra (\u003ca href=\"https://redirect.github.com/spf13/cobra/issues/2299\"\u003e#2299\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/spf13/cobra/compare/v1.9.1...v1.10.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/spf13/pflag` from 1.0.7 to 1.0.10\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/spf13/pflag/releases\"\u003egithub.com/spf13/pflag's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.0.10\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix deprecation comment for (FlagSet.)ParseErrorsWhitelist by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/447\"\u003espf13/pflag#447\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremove uses of errors.Is, which requires go1.13, move go1.16/go1.21 tests to separate file by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/448\"\u003espf13/pflag#448\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/447\"\u003espf13/pflag#447\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/spf13/pflag/compare/v1.0.9...v1.0.10\"\u003ehttps://github.com/spf13/pflag/compare/v1.0.9...v1.0.10\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.0.9\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: Restore ParseErrorsWhitelist name for now by \u003ca href=\"https://github.com/tomasaschan\"\u003e\u003ccode\u003e@​tomasaschan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/446\"\u003espf13/pflag#446\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/spf13/pflag/compare/v1.0.8...v1.0.9\"\u003ehttps://github.com/spf13/pflag/compare/v1.0.8...v1.0.9\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.0.8\u003c/h2\u003e\n\u003ch2\u003e:warning: Breaking Change\u003c/h2\u003e\n\u003cp\u003eThis version, while only a patch bump, includes a (very minor) breaking change: the \u003ccode\u003eflag.ParseErrorsWhitelist\u003c/code\u003e struct and corresponding \u003ccode\u003eFlagSet.parseErrorsWhitelist\u003c/code\u003e field have been renamed to \u003ccode\u003eParseErrorsAllowlist\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eThis should result in compilation errors in any code that uses these fields, which can be fixed by adjusting the names at call sites. There is no change in semantics or behavior of the struct or field referred to by these names. If your code compiles without errors after bumping to/past v1.0.8, you are not affected by this change.\u003c/p\u003e\n\u003cp\u003eThe breaking change was reverted in v1.0.9, by means of re-introducing the old names with deprecation warnings. The plan is still to remove them in a future release, so if your code does depend on the old names, please change them to use the new names at your earliest convenience.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove Redundant \u0026quot;Unknown-Flag\u0026quot; Error by \u003ca href=\"https://github.com/vaguecoder\"\u003e\u003ccode\u003e@​vaguecoder\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/364\"\u003espf13/pflag#364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSwitching from whitelist to Allowlist terminology by \u003ca href=\"https://github.com/dubrie\"\u003e\u003ccode\u003e@​dubrie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/261\"\u003espf13/pflag#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOmit zero time.Time default from usage line by \u003ca href=\"https://github.com/mologie\"\u003e\u003ccode\u003e@​mologie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/438\"\u003espf13/pflag#438\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eimplement CopyToGoFlagSet by \u003ca href=\"https://github.com/pohly\"\u003e\u003ccode\u003e@​pohly\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/330\"\u003espf13/pflag#330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eflag: Emulate stdlib behavior and do not print ErrHelp by \u003ca href=\"https://github.com/tmc\"\u003e\u003ccode\u003e@​tmc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/407\"\u003espf13/pflag#407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePrint Default Values of String-to-String in Sorted Order by \u003ca href=\"https://github.com/vaguecoder\"\u003e\u003ccode\u003e@​vaguecoder\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/365\"\u003espf13/pflag#365\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Don't print ErrHelp in ParseAll by \u003ca href=\"https://github.com/tomasaschan\"\u003e\u003ccode\u003e@​tomasaschan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/443\"\u003espf13/pflag#443\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReset args on re-parse even if empty by \u003ca href=\"https://github.com/tomasaschan\"\u003e\u003ccode\u003e@​tomasaschan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/444\"\u003espf13/pflag#444\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vaguecoder\"\u003e\u003ccode\u003e@​vaguecoder\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/364\"\u003espf13/pflag#364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dubrie\"\u003e\u003ccode\u003e@​dubrie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/261\"\u003espf13/pflag#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mologie\"\u003e\u003ccode\u003e@​mologie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/438\"\u003espf13/pflag#438\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pohly\"\u003e\u003ccode\u003e@​pohly\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/330\"\u003espf13/pflag#330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tmc\"\u003e\u003ccode\u003e@​tmc\u003c/cod...\n\n_Description has been truncated_","html_url":"https://github.com/istio/istio/pull/60215","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/istio%2Fistio/issues/60215","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/60215/packages"}},{"old_version":"0.28.0","new_version":"0.29.0","update_type":"minor","path":null,"pr_created_at":"2026-05-07T18:48:16.000Z","version_change":"0.28.0 → 0.29.0","issue":{"uuid":"4401194680","node_id":"PR_kwDOBGvVPc7ZRKKs","number":60134,"state":"open","title":"Bump the all-dependencies group across 1 directory with 3 updates","user":"dependabot[bot]","labels":["ok-to-test","size/L","release-notes-none"],"assignees":[],"locked":false,"comments_count":5,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-07T18:48:16.000Z","updated_at":"2026-05-07T22:01:18.184Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"all-dependencies","update_count":3,"packages":[{"name":"github.com/moby/buildkit","old_version":"0.28.0","new_version":"0.29.0","repository_url":"https://github.com/moby/buildkit"},{"name":"github.com/onsi/gomega","old_version":"1.39.1","new_version":"1.40.0","repository_url":"https://github.com/onsi/gomega"},{"name":"github.com/pires/go-proxyproto","old_version":"0.11.0","new_version":"0.12.0","repository_url":"https://github.com/pires/go-proxyproto"}],"path":null,"ecosystem":"go"},"body":"Bumps the all-dependencies group with 3 updates in the / directory: [github.com/moby/buildkit](https://github.com/moby/buildkit), [github.com/onsi/gomega](https://github.com/onsi/gomega) and [github.com/pires/go-proxyproto](https://github.com/pires/go-proxyproto).\n\nUpdates `github.com/moby/buildkit` from 0.28.0 to 0.29.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.29.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.29.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eDavid Karlsson\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eBrian Ristuccia\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eMateusz Gozdek\u003c/li\u003e\n\u003cli\u003eNatnael Gebremariam\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuiltin Dockerfile frontend has been updated to v1.23.0 \u003ca href=\"https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.23.0\"\u003echangelog\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGit sources can now initialize all files from a Git checkout with commit time in the LLB API for better reproducibility. See \u003ca href=\"https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.23.0\"\u003eDockerfile changelog\u003c/a\u003e for how to enable this in the Dockerfile frontend \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6600\"\u003e#6600\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eVarious file access operations in Git and HTTP sources have been hardened for improved security \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6613\"\u003e#6613\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFrontends can now report updated \u003ccode\u003eSOURCE_DATE_EPOCH\u003c/code\u003e with result metadata that can be used by exporters \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6601\"\u003e#6601\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible panic when listing build history after recent deletions \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6614\"\u003e#6614\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible issue where builds from Git repositories could start to fail after submodule rename \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6563\"\u003e#6563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible process lifecycle event ordering issue in interactive container API that could cause deadlocks in the client \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6531\"\u003e#6531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix regression where build progress skipped the message about layers being pushed to the registry \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6587\"\u003e#6587\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible cgroup initialization failure in BuildKit container image entrypoint on some environments \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6585\"\u003e#6585\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix issue with resolving symlinks via file access methods of the Gateway API \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6559\"\u003e#6559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible \u0026quot;parent snapshot does not exist\u0026quot; error when exporting images in parallel \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6558\"\u003e#6558\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix possible panic from zstd compression \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6599\"\u003e#6599\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix issue where cache imports from an uninitialized local cache tag could fail the build \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6554\"\u003e#6554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIncluded CNI plugins have been updated to v1.9.1 \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6583\"\u003e#6583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIncluded QEMU emulator support has been updated to v10.2.1 \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6580\"\u003e#6580\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRunc container runtime has been updated to v1.3.5 \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6625\"\u003e#6625\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2\u003c/strong\u003e                                       v1.41.1 -\u0026gt; v1.41.4\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2/aws/protocol/eventstream\u003c/strong\u003e              v1.7.4 -\u0026gt; v1.7.5\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2/config\u003c/strong\u003e                                v1.32.7 -\u0026gt; v1.32.12\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2/credentials\u003c/strong\u003e                           v1.19.7 -\u0026gt; v1.19.12\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2/feature/ec2/imds\u003c/strong\u003e                      v1.18.17 -\u0026gt; v1.18.20\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2/internal/configsources\u003c/strong\u003e                v1.4.17 -\u0026gt; v1.4.20\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2/internal/endpoints/v2\u003c/strong\u003e                 v2.7.17 -\u0026gt; v2.7.20\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2/internal/ini\u003c/strong\u003e                          v1.8.4 -\u0026gt; v1.8.6\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/aws/aws-sdk-go-v2/service/internal/accept-encoding\u003c/strong\u003e      v1.13.4 -\u0026gt; v1.13.7\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/8543ce4428265d547cb009e5ad62348284497a88\"\u003e\u003ccode\u003e8543ce4\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6634\"\u003e#6634\u003c/a\u003e from moby/dependabot/github_actions/crazy-max-dot-gi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/1154c7eda062136a8a590ab22dead213ec309101\"\u003e\u003ccode\u003e1154c7e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6635\"\u003e#6635\u003c/a\u003e from moby/dependabot/github_actions/codecov/codecov-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/326e4d184d68efa25ec23314885e90dcc40c0d46\"\u003e\u003ccode\u003e326e4d1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6637\"\u003e#6637\u003c/a\u003e from moby/dependabot/github_actions/github/codeql-ac...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/676cdfa5309276128eb15e22417204955e0396a8\"\u003e\u003ccode\u003e676cdfa\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6636\"\u003e#6636\u003c/a\u003e from moby/dependabot/github_actions/actions/setup-go...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/1dd2e5057a3d357ebcc1880d544d36c249973a5f\"\u003e\u003ccode\u003e1dd2e50\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.34.1 to 4.35.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/21fb77153c31888f48126302735232d2c3b72d65\"\u003e\u003ccode\u003e21fb771\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-go from 6.3.0 to 6.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/06b36e556dfdc2296b705121ec6ace57487d1e6f\"\u003e\u003ccode\u003e06b36e5\u003c/code\u003e\u003c/a\u003e build(deps): bump codecov/codecov-action from 5.5.4 to 6.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/969f5e4030788c0fe8ab0dc8238c69427975e6ef\"\u003e\u003ccode\u003e969f5e4\u003c/code\u003e\u003c/a\u003e build(deps): bump the crazy-max-dot-github group with 2 updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f8fd302904168b49cf54db74d3020ca6907fd006\"\u003e\u003ccode\u003ef8fd302\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6623\"\u003e#6623\u003c/a\u003e from crazy-max/zizmor\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/a103fb63eb0afa54208e06e8d801812a00571cd8\"\u003e\u003ccode\u003ea103fb6\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6625\"\u003e#6625\u003c/a\u003e from thaJeztah/bump_runc_1.3\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.28.0...v0.29.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/onsi/gomega` from 1.39.1 to 1.40.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/gomega/releases\"\u003egithub.com/onsi/gomega's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.40.0\u003c/h2\u003e\n\u003ch2\u003e1.40.0\u003c/h2\u003e\n\u003cp\u003eWe're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega.  It is a limitation of the go mod toolchain that \u003cem\u003etest\u003c/em\u003e subdependencies of your project's direct dependencies get pulled in as \u003cem\u003eindirect\u003c/em\u003e dependencies.  In the case of Gomega, this ends up pulling in all of Ginkgo into your \u003ccode\u003ego.mod\u003c/code\u003e even if you are only using Gomega (Gomega uses Ginkgo for its own tests).\u003c/p\u003e\n\u003cp\u003eGoing forward, releases will strip out all tests, tidy up the \u003ccode\u003ego.mod\u003c/code\u003e and then push this stripped down version to a new \u003ccode\u003emaster-lite\u003c/code\u003e branch.  These stripped-down versions will receive the \u003ccode\u003evx.y.z\u003c/code\u003e git tag and will be picked up by the go toolchain.\u003c/p\u003e\n\u003cp\u003ePlease open an issue if this new release process causes unexpected changes for your projects.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/gomega/blob/master/CHANGELOG.md\"\u003egithub.com/onsi/gomega's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.40.0\u003c/h2\u003e\n\u003cp\u003eWe're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega.  It is a limitation of the go mod toolchain that \u003cem\u003etest\u003c/em\u003e subdependencies of your project's direct dependencies get pulled in as \u003cem\u003eindirect\u003c/em\u003e dependencies.  In the case of Gomega, this ends up pulling in all of Ginkgo into your \u003ccode\u003ego.mod\u003c/code\u003e even if you are only using Gomega (Gomega uses Ginkgo for its own tests).\u003c/p\u003e\n\u003cp\u003eGoing forward, releases will strip out all tests, tidy up the \u003ccode\u003ego.mod\u003c/code\u003e and then push this stripped down version to a new \u003ccode\u003emaster-lite\u003c/code\u003e branch.  These stripped-down versions will receive the \u003ccode\u003evx.y.z\u003c/code\u003e git tag and will be picked up by the go toolchain.\u003c/p\u003e\n\u003cp\u003ePlease open an issue if this new release process causes unexpected changes for your projects.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/87ee9d3caabba627e5951958be800828b85f0370\"\u003e\u003ccode\u003e87ee9d3\u003c/code\u003e\u003c/a\u003e v1.40.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/ea660274df4319411eea463c942d1d3a56e6c2e6\"\u003e\u003ccode\u003eea66027\u003c/code\u003e\u003c/a\u003e v1.40.0 (full)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/e3fd789576a5f5b9a35847683804349bb4bbc761\"\u003e\u003ccode\u003ee3fd789\u003c/code\u003e\u003c/a\u003e update docs to reflect new versioning strategy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/7d4ee309b2c28ab1854424f70c99a173650ab2f6\"\u003e\u003ccode\u003e7d4ee30\u003c/code\u003e\u003c/a\u003e first push to master-lite\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/e4a82d1a2de91721bb249fe9532c4d9211920363\"\u003e\u003ccode\u003ee4a82d1\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 3 to 4 (\u003ca href=\"https://redirect.github.com/onsi/gomega/issues/875\"\u003e#875\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/af627234340a2e1d40074d6e6860a1b41dc03204\"\u003e\u003ccode\u003eaf62723\u003c/code\u003e\u003c/a\u003e Bump rexml from 3.4.0 to 3.4.2 in /docs (\u003ca href=\"https://redirect.github.com/onsi/gomega/issues/870\"\u003e#870\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/e1642211b3906ab5456d9d3ed7cfd9edd11f2d63\"\u003e\u003ccode\u003ee164221\u003c/code\u003e\u003c/a\u003e Bump github.com/onsi/ginkgo/v2 from 2.28.0 to 2.28.1 (\u003ca href=\"https://redirect.github.com/onsi/gomega/issues/895\"\u003e#895\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/334a282f9d59760a3e737e5b61400a3162997803\"\u003e\u003ccode\u003e334a282\u003c/code\u003e\u003c/a\u003e Bump faraday from 2.12.2 to 2.14.1 in /docs (\u003ca href=\"https://redirect.github.com/onsi/gomega/issues/896\"\u003e#896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/onsi/gomega/compare/v1.39.1...v1.40.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/pires/go-proxyproto` from 0.11.0 to 0.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pires/go-proxyproto/releases\"\u003egithub.com/pires/go-proxyproto's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.12.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: drop Go 1.24 (EOL) in favor of 1.26 by \u003ca href=\"https://github.com/pires\"\u003e\u003ccode\u003e@​pires\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pires/go-proxyproto/pull/166\"\u003epires/go-proxyproto#166\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev1: accept plain IPv4 addresses in TCP6 headers by \u003ca href=\"https://github.com/cmarker-gl\"\u003e\u003ccode\u003e@​cmarker-gl\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pires/go-proxyproto/pull/167\"\u003epires/go-proxyproto#167\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cmarker-gl\"\u003e\u003ccode\u003e@​cmarker-gl\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pires/go-proxyproto/pull/167\"\u003epires/go-proxyproto#167\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/pires/go-proxyproto/compare/v0.11.0...v0.12.0\"\u003ehttps://github.com/pires/go-proxyproto/compare/v0.11.0...v0.12.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pires/go-proxyproto/commit/0cee3e4e1c33d9cad14cde1837d454656cd348d9\"\u003e\u003ccode\u003e0cee3e4\u003c/code\u003e\u003c/a\u003e v1: accept plain IPv4 addresses in TCP6 headers (\u003ca href=\"https://redirect.github.com/pires/go-proxyproto/issues/167\"\u003e#167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pires/go-proxyproto/commit/5c8010d2392f09ce18169631c024aceae758335a\"\u003e\u003ccode\u003e5c8010d\u003c/code\u003e\u003c/a\u003e build: drop Go 1.24 (EOL) in favor of 1.26\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/pires/go-proxyproto/compare/v0.11.0...v0.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/istio/istio/pull/60134","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/istio%2Fistio/issues/60134","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/60134/packages"}},{"old_version":"0.12.5","new_version":"0.28.1","update_type":"minor","path":null,"pr_created_at":"2026-05-04T21:39:00.000Z","version_change":"0.12.5 → 0.28.1","issue":{"uuid":"4379849682","node_id":"PR_kwDOPrYSMc7YLVY4","number":28,"state":"open","title":"chore(deps): bump the go_modules group across 5 directories with 30 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-04T21:39:00.000Z","updated_at":"2026-05-04T23:56:15.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go_modules","update_count":30,"packages":[{"name":"github.com/distribution/distribution/v3","old_version":"3.0.0-20220128175647-b60926597a1b","new_version":"3.1.1","repository_url":"https://github.com/distribution/distribution"},{"name":"github.com/go-git/go-git/v5","old_version":"5.11.0","new_version":"5.18.0","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/golang-jwt/jwt/v4","old_version":"4.5.0","new_version":"4.5.1","repository_url":"https://github.com/golang-jwt/jwt"},{"name":"github.com/moby/buildkit","old_version":"0.12.5","new_version":"0.28.1","repository_url":"https://github.com/moby/buildkit"},{"name":"github.com/russellhaering/gosaml2","old_version":"0.9.1","new_version":"0.11.0","repository_url":"https://github.com/russellhaering/gosaml2"},{"name":"chainguard.dev/apko","old_version":"0.14.0","new_version":"1.2.7","repository_url":"https://github.com/chainguard-dev/apko"},{"name":"github.com/jackc/pgx/v5","old_version":"5.5.5","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/vektah/gqlparser/v2","old_version":"2.4.5","new_version":"2.5.15","repository_url":"https://github.com/vektah/gqlparser"},{"name":"github.com/go-chi/chi/v5","old_version":"5.0.10","new_version":"5.2.2","repository_url":"https://github.com/go-chi/chi"},{"name":"github.com/hashicorp/go-slug","old_version":"0.12.1","new_version":"0.16.3","repository_url":"https://github.com/hashicorp/go-slug"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 10 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/distribution/distribution/v3](https://github.com/distribution/distribution) | `3.0.0-20220128175647-b60926597a1b` | `3.1.1` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.11.0` | `5.18.0` |\n| [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) | `4.5.0` | `4.5.1` |\n| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.12.5` | `0.28.1` |\n| [github.com/russellhaering/gosaml2](https://github.com/russellhaering/gosaml2) | `0.9.1` | `0.11.0` |\n| [chainguard.dev/apko](https://github.com/chainguard-dev/apko) | `0.14.0` | `1.2.7` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.5.5` | `5.9.2` |\n| [github.com/vektah/gqlparser/v2](https://github.com/vektah/gqlparser) | `2.4.5` | `2.5.15` |\n| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.0.10` | `5.2.2` |\n| [github.com/hashicorp/go-slug](https://github.com/hashicorp/go-slug) | `0.12.1` | `0.16.3` |\n\nBumps the go_modules group with 3 updates in the /internal/cmd/progress-bot directory: [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/oauth2](https://github.com/golang/oauth2) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /lib directory: [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/oauth2](https://github.com/golang/oauth2), [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 6 updates in the /lib/managedservicesplatform directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.25.0` | `1.43.0` |\n| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.21.0` | `0.27.0` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.5.5` | `5.9.2` |\n| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.5.3` | `9.5.5` |\n| [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519) | `1.1.0` | `1.1.1` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.65.0` | `1.79.3` |\n\nBumps the go_modules group with 3 updates in the /monitoring directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) and [github.com/hashicorp/go-retryablehttp](https://github.com/hashicorp/go-retryablehttp).\n\nUpdates `github.com/distribution/distribution/v3` from 3.0.0-20220128175647-b60926597a1b to 3.1.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/distribution/distribution/releases\"\u003egithub.com/distribution/distribution/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the \u003ccode\u003ev3.1.1\u003c/code\u003e release of registry!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eThis is a stable release\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/distribution/distribution/issues\"\u003ehttps://github.com/distribution/distribution/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixes \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-41888\"\u003eCVE-2026-41888\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBounds-check the file basename in PurgeUploads Walk callback\u003c/li\u003e\n\u003cli\u003eAdd S3 Express One Zone support to the S3 storage driver (\u003ca href=\"https://redirect.github.com/distribution/distribution/issues/4858\"\u003e#4858\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix tag list endpoint in proxy mode (\u003ca href=\"https://redirect.github.com/distribution/distribution/issues/4846\"\u003e#4846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClamp oversized \u003ccode\u003en\u003c/code\u003e query parameter in proxy mode instead of returning 400 (\u003ca href=\"https://redirect.github.com/distribution/distribution/issues/4856\"\u003e#4856\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSee the full changelog below for the full list of changes.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003einternal/client/auth/challenge: cleanups and minor refactor by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4832\"\u003edistribution/distribution#4832\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp from 0.18.0 to 0.19.0 in the go_modules group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4843\"\u003edistribution/distribution#4843\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0 in the go_modules group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4850\"\u003edistribution/distribution#4850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.34.1 to 4.35.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4840\"\u003edistribution/distribution#4840\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(build): Bump go version to latest by \u003ca href=\"https://github.com/milosgajdos\"\u003e\u003ccode\u003e@​milosgajdos\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4851\"\u003edistribution/distribution#4851\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: use slices.Backward to simplify the code by \u003ca href=\"https://github.com/chuanshanjida\"\u003e\u003ccode\u003e@​chuanshanjida\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4848\"\u003edistribution/distribution#4848\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(proxy): fix tag list endpoint in proxy mode by \u003ca href=\"https://github.com/njucjc\"\u003e\u003ccode\u003e@​njucjc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4846\"\u003edistribution/distribution#4846\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate docker-compose structure in deploying.md by \u003ca href=\"https://github.com/jdg71nl\"\u003e\u003ccode\u003e@​jdg71nl\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4855\"\u003edistribution/distribution#4855\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4854\"\u003edistribution/distribution#4854\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4852\"\u003edistribution/distribution#4852\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump docker/login-action from 4.0.0 to 4.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4847\"\u003edistribution/distribution#4847\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump docker/bake-action from 7.0.0 to 7.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4853\"\u003edistribution/distribution#4853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(proxy): clamp oversized n query param instead of returning 400 by \u003ca href=\"https://github.com/milosgajdos\"\u003e\u003ccode\u003e@​milosgajdos\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4856\"\u003edistribution/distribution#4856\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(s3): add express zone one support to S3 driver by \u003ca href=\"https://github.com/milosgajdos\"\u003e\u003ccode\u003e@​milosgajdos\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4858\"\u003edistribution/distribution#4858\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(storage): bounds-check the file basename in PurgeUploads Walk callback by \u003ca href=\"https://github.com/SAY-5\"\u003e\u003ccode\u003e@​SAY-5\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4860\"\u003edistribution/distribution#4860\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(release): prepare for v3.1.1 release by \u003ca href=\"https://github.com/milosgajdos\"\u003e\u003ccode\u003e@​milosgajdos\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4864\"\u003edistribution/distribution#4864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chuanshanjida\"\u003e\u003ccode\u003e@​chuanshanjida\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4848\"\u003edistribution/distribution#4848\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jdg71nl\"\u003e\u003ccode\u003e@​jdg71nl\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4855\"\u003edistribution/distribution#4855\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SAY-5\"\u003e\u003ccode\u003e@​SAY-5\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/distribution/distribution/pull/4860\"\u003edistribution/distribution#4860\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/distribution/distribution/compare/v3.1.0...v3.1.1\"\u003ehttps://github.com/distribution/distribution/compare/v3.1.0...v3.1.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.0\u003c/h2\u003e\n\u003cp\u003eWelcome to the \u003ccode\u003ev3.1.0\u003c/code\u003e release of registry!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eThis is a stable release\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/distribution/distribution/issues\"\u003ehttps://github.com/distribution/distribution/issues\u003c/a\u003e.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/distribution/distribution/commits/v3.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.11.0 to 5.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpand packfile checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1836\"\u003ego-git/go-git#1836\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebackport plumbing: format/idxfile, prevent panic by \u003ca href=\"https://github.com/swills\"\u003e\u003ccode\u003e@​swills\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1732\"\u003ego-git/go-git#1732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[backport] build: test, Fix build on Windows. by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1734\"\u003ego-git/go-git#1734\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/ea3e7ec9dfc54f577a01afb4dd601c0284604264\"\u003e\u003ccode\u003eea3e7ec\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2004\"\u003e#2004\u003c/a\u003e from go-git/v5-http-hardening\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bcd20a9c525826081262a06a9ed9c3167abfcd53\"\u003e\u003ccode\u003ebcd20a9\u003c/code\u003e\u003c/a\u003e plumbing: transport/http, Add support for followRedirects policy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/45ae193b3a60aa8ec8a3e373f7265a7819473d5f\"\u003e\u003ccode\u003e45ae193\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1944\"\u003e#1944\u003c/a\u003e from go-git/fix-perms\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fda4f7464b597ff33d2dea1c026482a5e900037c\"\u003e\u003ccode\u003efda4f74\u003c/code\u003e\u003c/a\u003e storage: filesystem/dotgit, Skip writing pack files that already exist on disk\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/2212dc7caeb2a389fe2129923811ef63f75a557a\"\u003e\u003ccode\u003e2212dc7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1941\"\u003e#1941\u003c/a\u003e from go-git/renovate/releases/v5.x-go-github.com-go-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/ebb2d7da7f5d5aebeaa0b5e13276d72d602c1ae3\"\u003e\u003ccode\u003eebb2d7d\u003c/code\u003e\u003c/a\u003e build: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5e23dfd02db92644dc4a3358ceb297fce875b772\"\u003e\u003ccode\u003e5e23dfd\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1937\"\u003e#1937\u003c/a\u003e from pjbgf/idx-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6b38a326816b80f64c20cc0e6113958b65c05a1c\"\u003e\u003ccode\u003e6b38a32\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1935\"\u003e#1935\u003c/a\u003e from pjbgf/index-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/cd757fcb856a2dcc5fff6c110320a8ff62e99513\"\u003e\u003ccode\u003ecd757fc\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, Fix version and fanout checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3ec0d70cb687ae1da5f4d18faa4229bd971a8710\"\u003e\u003ccode\u003e3ec0d70\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Fix tree extension invalidated entry parsing\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.11.0...v5.18.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/golang-jwt/jwt/v4` from 4.5.0 to 4.5.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang-jwt/jwt/releases\"\u003egithub.com/golang-jwt/jwt/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.5.1\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cp\u003eUnclear documentation of the error behavior in \u003ccode\u003eParseWithClaims\u003c/code\u003e in \u0026lt;= 4.5.0 could lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by \u003ccode\u003eParseWithClaims\u003c/code\u003e return both error codes. If users only check for the \u003ccode\u003ejwt.ErrTokenExpired \u003c/code\u003e using \u003ccode\u003eerror.Is\u003c/code\u003e, they will ignore the embedded \u003ccode\u003ejwt.ErrTokenSignatureInvalid\u003c/code\u003e and thus potentially accept invalid tokens.\u003c/p\u003e\n\u003cp\u003eThis issue was documented in \u003ca href=\"https://github.com/golang-jwt/jwt/security/advisories/GHSA-29wx-vh33-7x7r\"\u003ehttps://github.com/golang-jwt/jwt/security/advisories/GHSA-29wx-vh33-7x7r\u003c/a\u003e and fixed in this release.\u003c/p\u003e\n\u003cp\u003eNote: \u003ccode\u003ev5\u003c/code\u003e was not affected by this issue. So upgrading to this release version is also recommended.\u003c/p\u003e\n\u003ch1\u003eWhat's Changed\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eBack-ported error-handling logic in \u003ccode\u003eParseWithClaims\u003c/code\u003e from \u003ccode\u003ev5\u003c/code\u003e branch. This fixes \u003ca href=\"https://github.com/golang-jwt/jwt/security/advisories/GHSA-29wx-vh33-7x7r\"\u003ehttps://github.com/golang-jwt/jwt/security/advisories/GHSA-29wx-vh33-7x7r\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v4.5.0...v4.5.1\"\u003ehttps://github.com/golang-jwt/jwt/compare/v4.5.0...v4.5.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/7b1c1c00a171c6c79bbdb40e4ce7d197060c1c2c\"\u003e\u003ccode\u003e7b1c1c0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v4.5.0...v4.5.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/moby/buildkit` from 0.12.5 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.28.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix insufficient validation of Git URL \u003ccode\u003e#ref:subdir\u003c/code\u003e fragments that could allow access to restricted files outside the checked-out repository root. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg\"\u003eGHSA-4vrq-3vrq-g6gg\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a vulnerability where an untrusted custom frontend could cause files to be written outside the BuildKit state directory. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj\"\u003eGHSA-4c29-8rgm-jvjj\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a panic when processing invalid \u003ccode\u003e.dockerignore\u003c/code\u003e patterns during \u003ccode\u003eCOPY\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/patternmatcher/issues/9\"\u003emoby/patternmatcher#9\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/moby/patternmatcher\u003c/strong\u003e  v0.6.0 -\u0026gt; v0.6.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.28.0\"\u003ev0.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.28.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.28.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.28.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eAmr Mahdi\u003c/li\u003e\n\u003cli\u003eDan Duvall\u003c/li\u003e\n\u003cli\u003eDavid Karlsson\u003c/li\u003e\n\u003cli\u003eJonas Geiler\u003c/li\u003e\n\u003cli\u003eKevin L.\u003c/li\u003e\n\u003cli\u003ersteube\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8\"\u003e\u003ccode\u003e45b038c\u003c/code\u003e\u003c/a\u003e git: normalize and validate subdir paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f5462c216098af766f97ea4cb328e65c6d8f7256\"\u003e\u003ccode\u003ef5462c2\u003c/code\u003e\u003c/a\u003e git: harden ref arg handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/71577a5da7a2b3ab75a90c2cfedfda0c27d1ef40\"\u003e\u003ccode\u003e71577a5\u003c/code\u003e\u003c/a\u003e source: extract SafeFileName into shared pathutil package\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df4378316f3b000403d097551a8139a700bd823d\"\u003e\u003ccode\u003edf43783\u003c/code\u003e\u003c/a\u003e source/http: use os.Root for saved file operations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/9ce6f62aca0653657047ee613cdef22f38b31244\"\u003e\u003ccode\u003e9ce6f62\u003c/code\u003e\u003c/a\u003e source/http: sanitize downloaded filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4\"\u003e\u003ccode\u003e099cf80\u003c/code\u003e\u003c/a\u003e executor: validate container IDs centrally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/2642113bbc9d969d223c37aaabca4b50613fddf9\"\u003e\u003ccode\u003e2642113\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e from thaJeztah/0.28_backport_bump_patternmatcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/802da78332d9f2c6c9d856c1648ab52c701076fa\"\u003e\u003ccode\u003e802da78\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/patternmatcher v0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/5245d869d85d9c98f986b600584c332a3b001986\"\u003e\u003ccode\u003e5245d86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6551\"\u003e#6551\u003c/a\u003e from tonistiigi/v0.28-cherry-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/90ee5deef6c6efcb82358eb48d76235191196db1\"\u003e\u003ccode\u003e90ee5de\u003c/code\u003e\u003c/a\u003e vendor: update x/net to v0.51.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.12.5...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/russellhaering/gosaml2` from 0.9.1 to 0.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/russellhaering/gosaml2/releases\"\u003egithub.com/russellhaering/gosaml2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReject unsigned SAML \u003ccode\u003eLogoutRequest\u003c/code\u003e when signature validation is enabled. Previously, \u003ccode\u003eValidateEncodedLogoutRequestPOST\u003c/code\u003e silently accepted unsigned requests even when \u003ccode\u003eSkipSignatureValidation\u003c/code\u003e was \u003ccode\u003efalse\u003c/code\u003e. (GHSA-pcgw-qcv5-h8ch)\u003c/li\u003e\n\u003cli\u003eSecurity hardening: CBC bounds check to prevent panics from crafted ciphertext, replaced \u003ccode\u003epanic()\u003c/code\u003e calls with error returns, and assertion signatures within a signed Response envelope are now verified when present (previously they were skipped entirely, which could allow XML wrapping attacks)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd oss-fuzz integration\u003c/li\u003e\n\u003cli\u003eBump minimum Go version to 1.25\u003c/li\u003e\n\u003cli\u003eUpdate dependencies: goxmldsig v1.6.0, etree v1.6.0, testify v1.11.1\u003c/li\u003e\n\u003cli\u003eBump all GitHub Actions to latest versions\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/gosaml2/compare/v0.10.0...v0.11.0\"\u003ehttps://github.com/russellhaering/gosaml2/compare/v0.10.0...v0.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport encryption and signing keys that implement crypto.Signer by \u003ca href=\"https://github.com/nicksnyder\"\u003e\u003ccode\u003e@​nicksnyder\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/pull/131\"\u003erussellhaering/gosaml2#131\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid panic when the encrypted data has wrong size for CBC by \u003ca href=\"https://github.com/fformica\"\u003e\u003ccode\u003e@​fformica\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/pull/195\"\u003erussellhaering/gosaml2#195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSecurity hardening by \u003ca href=\"https://github.com/ahacker1-securesaml\"\u003e\u003ccode\u003e@​ahacker1-securesaml\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDependency and CI updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nicksnyder\"\u003e\u003ccode\u003e@​nicksnyder\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/pull/131\"\u003erussellhaering/gosaml2#131\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fformica\"\u003e\u003ccode\u003e@​fformica\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/pull/195\"\u003erussellhaering/gosaml2#195\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/gosaml2/compare/v0.9.1...v0.10.0\"\u003ehttps://github.com/russellhaering/gosaml2/compare/v0.9.1...v0.10.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/636e7dda202a4d669644e72404a82616ffcbe004\"\u003e\u003ccode\u003e636e7dd\u003c/code\u003e\u003c/a\u003e Bump all GitHub Actions to latest versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/1e9cc447527b4031ffd8e7a2cb64b99289ffde29\"\u003e\u003ccode\u003e1e9cc44\u003c/code\u003e\u003c/a\u003e Bump minimum Go version to 1.25 and update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/7159bbee574ae311e3c995df506c2e61cf2c232a\"\u003e\u003ccode\u003e7159bbe\u003c/code\u003e\u003c/a\u003e Reject unsigned LogoutRequest when signature validation is enabled\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/4ddcc822c3c2bb6676221cbf2259e141b2f2e315\"\u003e\u003ccode\u003e4ddcc82\u003c/code\u003e\u003c/a\u003e Security hardening: CBC bounds check, panic removal, assertion signature veri...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/d57d10562c0a9243d5a6d86fff5067d34c7f045f\"\u003e\u003ccode\u003ed57d105\u003c/code\u003e\u003c/a\u003e Add oss-fuzz integration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/e8596e7457e1657e90dd2fb18da03e03fc4ae1a4\"\u003e\u003ccode\u003ee8596e7\u003c/code\u003e\u003c/a\u003e Fix tests broken by expired IDP test certificate\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/5d20d420e18a8e08e870d145be26bc8110073d90\"\u003e\u003ccode\u003e5d20d42\u003c/code\u003e\u003c/a\u003e Bump github.com/beevik/etree from 1.5.0 to 1.5.1 (\u003ca href=\"https://redirect.github.com/russellhaering/gosaml2/issues/212\"\u003e#212\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/115aa21abac634a1c9b68c2a30505b60b148f8cc\"\u003e\u003ccode\u003e115aa21\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 3.28.12 to 3.28.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/cdd66bccd151b682fe99fec82a1c8c4ecdba8ff0\"\u003e\u003ccode\u003ecdd66bc\u003c/code\u003e\u003c/a\u003e Tidy dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/gosaml2/commit/3418f9ae09063ff8df0ce1bd93f24e538e614def\"\u003e\u003ccode\u003e3418f9a\u003c/code\u003e\u003c/a\u003e Avoid panic when the encrypted data has wrong size for CBC\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/russellhaering/gosaml2/compare/v0.9.1...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/russellhaering/goxmldsig` from 1.4.0 to 1.6.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/russellhaering/goxmldsig/releases\"\u003egithub.com/russellhaering/goxmldsig's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.6.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSecurity:\u003c/strong\u003e Fix possible signature validation bypass caused by loop variable capture in \u003ccode\u003evalidateSignature\u003c/code\u003e (GHSA-479m-364c-43vc)\u003c/li\u003e\n\u003cli\u003eBump minimum Go version to 1.23\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003egithub.com/beevik/etree\u003c/code\u003e to v1.6.0\u003c/li\u003e\n\u003cli\u003eAdd fuzz tests for XML signature validation and canonicalization\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0\"\u003ehttps://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.5.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump dependencies\u003c/li\u003e\n\u003cli\u003eUpdate GitHub workflows\u003c/li\u003e\n\u003cli\u003eSecurity hardening by \u003ca href=\"https://github.com/ahacker1-securesaml\"\u003e\u003ccode\u003e@​ahacker1-securesaml\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/goxmldsig/compare/v1.4.0...v1.5.0\"\u003ehttps://github.com/russellhaering/goxmldsig/compare/v1.4.0...v1.5.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/878c8c615feb628064040115d00e105a137fcfa7\"\u003e\u003ccode\u003e878c8c6\u003c/code\u003e\u003c/a\u003e Apply go fix ./...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/db3d1e31f7535d7f5debb49851b9e9a2ff08b936\"\u003e\u003ccode\u003edb3d1e3\u003c/code\u003e\u003c/a\u003e Fix loop variable capture bug in validateSignature\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/4f576b89acf01f68983ca5cb9dcebd0b460234bc\"\u003e\u003ccode\u003e4f576b8\u003c/code\u003e\u003c/a\u003e Bump dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/79c29ee3ed2da54553a4132b372ced83185fcf12\"\u003e\u003ccode\u003e79c29ee\u003c/code\u003e\u003c/a\u003e Rename FuzzValidate to FuzzValidateXML to avoid name collision\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/ac7bf745b9fd3d92460ad9be3459a97b0e3bf89f\"\u003e\u003ccode\u003eac7bf74\u003c/code\u003e\u003c/a\u003e Add fuzz tests for XML signature validation and canonicalization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/a5805dfad93fc67a2106a1dc6d881df83769e3eb\"\u003e\u003ccode\u003ea5805df\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 2.13.4 to 3.28.17 (\u003ca href=\"https://redirect.github.com/russellhaering/goxmldsig/issues/155\"\u003e#155\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/7dac9ec3b2a1a336d73ff091fba4131d186dfec6\"\u003e\u003ccode\u003e7dac9ec\u003c/code\u003e\u003c/a\u003e Update GitHub Workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/1bf54ca740682fac1149814344c24c722fde8238\"\u003e\u003ccode\u003e1bf54ca\u003c/code\u003e\u003c/a\u003e Bump dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/e1c8a5b89d1d03089aa1a0ec546b33aaf80ee02f\"\u003e\u003ccode\u003ee1c8a5b\u003c/code\u003e\u003c/a\u003e Refactor to help eliminate potential vulnerabilities:\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/2ac5490a2441a3484e030c5cfeb02ce62886c01a\"\u003e\u003ccode\u003e2ac5490\u003c/code\u003e\u003c/a\u003e Refactor .verifyCertificate to obtain the certificate from an identifier from...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/russellhaering/goxmldsig/compare/v1.4.0...v1.6.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.27.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.27.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.27.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.25.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.24.0 to 0.49.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.22.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.26.0 to 0.52.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/316e20ce34d380337f7983808c26948232e16455\"\u003e\u003ccode\u003e316e20c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/9767a42264fa70b674c643d0c87ee95c309a4553\"\u003e\u003ccode\u003e9767a42\u003c/code\u003e\u003c/a\u003e internal/http3: add support for plugging into net/http\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/4a812844d820f49985ee15998af285c43b0a6b96\"\u003e\u003ccode\u003e4a81284\u003c/code\u003e\u003c/a\u003e http2: update docs to disrecommend this package\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/dec6603c16144712aab7f44821471346b35a2230\"\u003e\u003ccode\u003edec6603\u003c/code\u003e\u003c/a\u003e dns/dnsmessage: reject too large of names early during unpack\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/8afa12f927391ba32da2b75b864a3ad04cac6376\"\u003e\u003ccode\u003e8afa12f\u003c/code\u003e\u003c/a\u003e http2: deprecate write schedulers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/38019a2dbc2645a4c06a1e983681eefb041171c8\"\u003e\u003ccode\u003e38019a2\u003c/code\u003e\u003c/a\u003e http2: add missing copyright header to export_test.go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/039b87fac41ca283465e12a3bcc170ccd6c92f84\"\u003e\u003ccode\u003e039b87f\u003c/code\u003e\u003c/a\u003e internal/http3: return error when Write is used after status 304 is set\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/6267c6c4c825a78e4c9cbdc19c705bc81716597c\"\u003e\u003ccode\u003e6267c6c\u003c/code\u003e\u003c/a\u003e internal/http3: add HTTP 103 Early Hints support to ClientConn\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/591bdf35bce56ad50f53555c3cbb31e4bdda2d58\"\u003e\u003ccode\u003e591bdf3\u003c/code\u003e\u003c/a\u003e internal/http3: add HTTP 103 Early Hints support to Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1faa6d8722697d9a1d8d4e973b3c46c7a5563f6c\"\u003e\u003ccode\u003e1faa6d8\u003c/code\u003e\u003c/a\u003e internal/http3: avoid potential race when aborting RoundTrip\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.26.0...v0.52.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/oauth2` from 0.21.0 to 0.35.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/681b4d8edca1bcfea5bce685d77ea7b82ed3e7b3\"\u003e\u003ccode\u003e681b4d8\u003c/code\u003e\u003c/a\u003e jws: split token into fixed number of parts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3f78298beea38fb76a3fbca33e3056f4b7eb5502\"\u003e\u003ccode\u003e3f78298\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/109dabf9017129171d1807e485ca5633ecd095ac\"\u003e\u003ccode\u003e109dabf\u003c/code\u003e\u003c/a\u003e endpoints: add links/provider for Discord\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/ac571fa341c2a2b979d2b2c8341fd24767ef5d47\"\u003e\u003ccode\u003eac571fa\u003c/code\u003e\u003c/a\u003e oauth2: fix docs for Config.DeviceAuth\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/314ee5b92bf23c4973aa8e61eba3ff458e80eef2\"\u003e\u003ccode\u003e314ee5b\u003c/code\u003e\u003c/a\u003e endpoints: add patreon endpoint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/b9c813be7d0ec3262d46deb8677ba5cda93d95ec\"\u003e\u003ccode\u003eb9c813b\u003c/code\u003e\u003c/a\u003e google: add warning about externally-provided credentials\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/49a531d12a9ad6fa9f5a070d577ac752ada772c9\"\u003e\u003ccode\u003e49a531d\u003c/code\u003e\u003c/a\u003e all: make method and struct comments match the names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/22134a41033e44c2cd074106770ab5b7ca910d15\"\u003e\u003ccode\u003e22134a4\u003c/code\u003e\u003c/a\u003e README: don't recommend go get\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3e6480915d39dd1a80fa460e56413857f02cc1b9\"\u003e\u003ccode\u003e3e64809\u003c/code\u003e\u003c/a\u003e x/oauth2: add Token.ExpiresIn\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/16a9973a41c72ea3e252e9c14be34fcaa2928211\"\u003e\u003ccode\u003e16a9973\u003c/code\u003e\u003c/a\u003e jwt: rename example to avoid vet error\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/oauth2/compare/v0.19.0...v0.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `chainguard.dev/apko` from 0.14.0 to 1.2.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/chainguard-dev/apko/releases\"\u003echainguard.dev/apko's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease v1.2.7\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ea118c3d604107532b5525bd4bee2fb369a6228aa apk: verify package control hash against signed APKINDEX (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2191\"\u003e#2191\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.2.6\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e09b82d635baa11223ba5b28b421069cadcddb5d9 fs: strip special mode bits in OpenFile/WriteFile (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2188\"\u003e#2188\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.2.5\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ef5a96e1299ac81c7ea9441705ec467688086f442 fs: Scope all DirFS operations through os.Root (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2187\"\u003e#2187\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.2.4\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e4556aed64043278fb8fa429e620fdbbe2a9e3254 build(deps): bump k8s.io/apimachinery from 0.35.3 to 0.35.4 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2180\"\u003e#2180\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.2.3\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e6f90ec8289c6c04dfacaf2768d2755f6780f6e66 build(deps): bump google.golang.org/api from 0.274.0 to 0.275.0 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2169\"\u003e#2169\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.2.2\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e20685930112eadc3617167a5a49796f6281020cd build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5 in the go_modules group across 1 directory (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2159\"\u003e#2159\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.2.1\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e968d5362f10b21de0cd0c0b1d9a18e1a51ec7df7 build(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.17.2 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2156\"\u003e#2156\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.2.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e392136f2f7fc2042fc5a501f7bcb1e236c867115 build(deps): bump github/codeql-action from 4.35.0 to 4.35.1 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2150\"\u003e#2150\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.1.16\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e861f83f69e6fa9114405a2f7bb5cf6585ad00421 build(deps): bump github/codeql-action from 4.33.0 to 4.34.0 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2138\"\u003e#2138\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.1.15\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e8c0e945faa8cc5d19dc812727463ba23345b0d03 build(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2129\"\u003e#2129\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.1.14\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e238cd7b8aec624af67bcd08492c7bb4412dc119d Add support for custom certificate packages (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2105\"\u003e#2105\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.1.13\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e0a1df0f2e7cb29b95680746b8bbb0c03e5a22511 build(deps): bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2106\"\u003e#2106\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.1.12\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chainguard-dev/apko/commit/a118c3d604107532b5525bd4bee2fb369a6228aa\"\u003e\u003ccode\u003ea118c3d\u003c/code\u003e\u003c/a\u003e apk: verify package control hash against signed APKINDEX (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2191\"\u003e#2191\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chainguard-dev/apko/commit/6604826b19e36e9bc6e196592800fad93738f4a1\"\u003e\u003ccode\u003e6604826\u003c/code\u003e\u003c/a\u003e apk: guard non-RSA JWKS keys in DiscoverKeys (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2190\"\u003e#2190\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chainguard-dev/apko/commit/09b82d635baa11223ba5b28b421069cadcddb5d9\"\u003e\u003ccode\u003e09b82d6\u003c/code\u003e\u003c/a\u003e fs: strip special mode bits in OpenFile/WriteFile (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2188\"\u003e#2188\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chainguard-dev/apko/commit/f5a96e1299ac81c7ea9441705ec467688086f442\"\u003e\u003ccode\u003ef5a96e1\u003c/code\u003e\u003c/a\u003e fs: Scope all DirFS operations through os.Root (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2187\"\u003e#2187\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chainguard-dev/apko/commit/503b545c71921d5c099d4ced162a801bc2c75656\"\u003e\u003ccode\u003e503b545\u003c/code\u003e\u003c/a\u003e build(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2184\"\u003e#2184\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chainguard-dev/apko/commit/481840ffe25e5cee87dd03972dd2e4722b452b5f\"\u003e\u003ccode\u003e481840f\u003c/code\u003e\u003c/a\u003e build(deps): bump chainguard-dev/actions from 1.6.14 to 1.6.15 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2182\"\u003e#2182\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chainguard-dev/apko/commit/4556aed64043278fb8fa429e620fdbbe2a9e3254\"\u003e\u003ccode\u003e4556aed\u003c/code\u003e\u003c/a\u003e build(deps): bump k8s.io/apimachinery from 0.35.3 to 0.35.4 (\u003ca href=\"https://redirect.github.com/chainguard-dev/apko/issues/2180\"\u003e#2180\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chainguard-dev/apko/commit/3e3a0a71d086470f0afd9d0c1e814151efc8e214\"\u003e\u003ccode\u003e3e3a0a7\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0 (\u003ca href=\"https:/...\n\n_Description has been truncated_\n\n---\n\n🔄 This PR updates Go module dependencies across 5 directories with 30 package updates, including major version bumps for Go runtime (1.24.0-1.25.0), security libraries, and cloud services SDKs. The changes primarily focus on security patches, performance improvements, and maintaining compatibility with the latest ecosystem standards.\n\n\u003cdetails\u003e\n\u003csummary\u003e🔍 \u003cstrong\u003eDetailed Analysis\u003c/strong\u003e\u003c/summary\u003e\n\n### Key Changes\n- **Go Runtime Upgrade**: Updated Go version from 1.21/1.22 to 1.24.0-1.25.0 across all modules, removing toolchain specifications\n- **Security Updates**: Major version bumps for security-critical packages like `github.com/go-git/go-git/v5` (5.11.0 → 5.18.0) and `github.com/golang-jwt/jwt/v4` (4.5.0 → 4.5.1) addressing CVEs\n- **Cloud Services**: Updated Google Cloud, Azure, and OpenTelemetry packages with significant version jumps (e.g., `go.opentelemetry.io/otel` 1.25.0 → 1.43.0)\n- **Database \u0026 Redis**: PostgreSQL driver `github.com/jackc/pgx/v5` (5.5.5 → 5.9.2) and Redis client updates for improved performance\n- **Build Tools**: Major update to `github.com/moby/buildkit` (0.12.5 → 0.28.1) and container ecosystem packages\n\n### Technical Implementation\n```mermaid\nflowchart TD\n    A[Dependabot Scan] --\u003e B[Security Vulnerability Detection]\n    B --\u003e C[Automated Dependency Updates]\n    C --\u003e D[Go Module Updates Across 5 Directories]\n    D --\u003e E[progress-bot/]\n    D --\u003e F[lib/]\n    D --\u003e G[lib/managedservicesplatform/]\n    D --\u003e H[monitoring/]\n    E --\u003e I[Go 1.24.0 + gRPC/OAuth2 updates]\n    F --\u003e J[Go 1.24.0 + Redis/PostgreSQL updates]\n    G --\u003e K[Go 1.25.0 + OpenTelemetry major updates]\n    H --\u003e L[Go 1.24.0 + Logging/HTTP client updates]\n```\n\n### Impact\n- **Security Enhancement**: Addresses multiple CVEs including JWT parsing vulnerabilities, Git URL validation issues, and SAML signature bypass risks\n- **Performance Improvements**: Updated packages include optimizations for slice handling, HTTP response processing, and database connection pooling\n- **Ecosystem Compatibility**: Ensures compatibility with latest Go runtime features and modern cloud service APIs\n- **Maintenance Reduction**: Automated dependency management reduces manual security patch tracking and technical debt\n\n\u003c/details\u003e\n\n_Created with [Palmier](https://www.palmier.io)_","html_url":"https://github.com/GlacierEQ/sourcegraph-public-snapshot/pull/28","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/GlacierEQ%2Fsourcegraph-public-snapshot/issues/28","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/28/packages"}},{"old_version":"0.23.2","new_version":"0.28.1","update_type":"minor","path":null,"pr_created_at":"2026-05-04T15:38:44.000Z","version_change":"0.23.2 → 0.28.1","issue":{"uuid":"4377800509","node_id":"PR_kwDOCqObs87YEjOE","number":963,"state":"open","title":"Bump the go_modules group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["size/L","needs-ok-to-test","dependencies"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-04T15:38:44.000Z","updated_at":"2026-05-04T15:42:55.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":8,"packages":[{"name":"github.com/containerd/containerd","old_version":"1.7.27","new_version":"1.7.29","repository_url":"https://github.com/containerd/containerd"},{"name":"github.com/docker/cli","old_version":"28.2.2+incompatible","new_version":"29.2.0+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/go-git/go-git/v5","old_version":"5.16.2","new_version":"5.18.0","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/go-jose/go-jose/v4","old_version":"4.1.3","new_version":"4.1.4","repository_url":"https://github.com/go-jose/go-jose"},{"name":"github.com/go-viper/mapstructure/v2","old_version":"2.3.0","new_version":"2.4.0","repository_url":"https://github.com/go-viper/mapstructure"},{"name":"github.com/moby/buildkit","old_version":"0.23.2","new_version":"0.28.1","repository_url":"https://github.com/moby/buildkit"},{"name":"go.opentelemetry.io/otel","old_version":"1.40.0","new_version":"1.41.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"go.opentelemetry.io/otel/sdk","old_version":"1.39.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 8 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/containerd/containerd](https://github.com/containerd/containerd) | `1.7.27` | `1.7.29` |\n| [github.com/docker/cli](https://github.com/docker/cli) | `28.2.2+incompatible` | `29.2.0+incompatible` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.16.2` | `5.18.0` |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.3` | `4.1.4` |\n| [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) | `2.3.0` | `2.4.0` |\n| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.23.2` | `0.28.1` |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.41.0` |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.39.0` | `1.43.0` |\n\n\nUpdates `github.com/containerd/containerd` from 1.7.27 to 1.7.29\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/containerd/containerd/releases\"\u003egithub.com/containerd/containerd's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003econtainerd 1.7.29\u003c/h2\u003e\n\u003cp\u003eWelcome to the v1.7.29 release of containerd!\u003c/p\u003e\n\u003cp\u003eThe twenty-ninth patch release for containerd 1.7 contains various fixes\nand updates including security patches.\u003c/p\u003e\n\u003ch3\u003eSecurity Updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003econtainerd\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w\"\u003e\u003cstrong\u003eGHSA-pwhc-rpq9-4c8w\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2\"\u003e\u003cstrong\u003eGHSA-m6hq-p25p-ffr2\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003erunc\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r\"\u003e\u003cstrong\u003eGHSA-qw9x-cqr3-wc7r\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm\"\u003e\u003cstrong\u003eGHSA-cgrx-mc8f-2prm\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2\"\u003e\u003cstrong\u003eGHSA-9493-h29p-rfm2\u003c/strong\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eHighlights\u003c/h3\u003e\n\u003ch4\u003eImage Distribution\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eUpdate differ to handle zstd media types\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12018\"\u003e#12018\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eRuntime\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eUpdate runc binary to v1.3.3\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12480\"\u003e#12480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFix lost container logs from quickly closing io\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/containerd/containerd/pull/12375\"\u003e#12375\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/containerd/containerd/issues\"\u003ehttps://github.com/containerd/containerd/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDerek McGowan\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003ePhil Estes\u003c/li\u003e\n\u003cli\u003eAustin Vazquez\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eningmingxiao\u003c/li\u003e\n\u003cli\u003eMaksym Pavlenko\u003c/li\u003e\n\u003cli\u003eStepSecurity Bot\u003c/li\u003e\n\u003cli\u003ewheat2018\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/442cb34bda9a6a0fed82a2ca7cade05c5c749582\"\u003e\u003ccode\u003e442cb34bd\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/0450f046e6942e513d0ebf1ef5c2aff13daa187f\"\u003e\u003ccode\u003e0450f046e\u003c/code\u003e\u003c/a\u003e Fix directory permissions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/e5cb6ddb7a7730c24253a94d7fdb6bbe13dba6f7\"\u003e\u003ccode\u003ee5cb6ddb7\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/442cb34bda9a6a0fed82a2ca7cade05c5c749582\"\u003e\u003ccode\u003e442cb34\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/e5cb6ddb7a7730c24253a94d7fdb6bbe13dba6f7\"\u003e\u003ccode\u003ee5cb6dd\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/9772966401ad3c33a6cd824632f0c61e5049f3a5\"\u003e\u003ccode\u003e9772966\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/12486\"\u003e#12486\u003c/a\u003e from dmcgowan/prepare-v1.7.29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/1fc2daaf3ed53f4c9e76fbc5786a6f1ae3bb885f\"\u003e\u003ccode\u003e1fc2daa\u003c/code\u003e\u003c/a\u003e Prepare release notes for v1.7.29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/93f710a528958474f95a95e54516624ef832d80f\"\u003e\u003ccode\u003e93f710a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/12480\"\u003e#12480\u003c/a\u003e from k8s-infra-cherrypick-robot/cherry-pick-12475-t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/68d04befab3284f1dfe2a9f5691ea5da76daace7\"\u003e\u003ccode\u003e68d04be\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/containerd/containerd/issues/12471\"\u003e#12471\u003c/a\u003e from austinvazquez/1_7_update_ci_go_and_images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/3f5f9f872707a743563d316e85e530193a2e30ac\"\u003e\u003ccode\u003e3f5f9f8\u003c/code\u003e\u003c/a\u003e runc: Update runc binary to v1.3.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/667409fb63098cb80280940ab06038114e7712da\"\u003e\u003ccode\u003e667409f\u003c/code\u003e\u003c/a\u003e ci: bump Go 1.24.9, 1.25.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/294f8c027b607c4450b3e52f44280581a737a73f\"\u003e\u003ccode\u003e294f8c0\u003c/code\u003e\u003c/a\u003e Update GHA runners to use latest images for basic binaries build\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/containerd/containerd/commit/cf66b4141defb757dee0fc5653bfd0a7ba1e8fed\"\u003e\u003ccode\u003ecf66b41\u003c/code\u003e\u003c/a\u003e Update GHA runners to use latest image for most jobs\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/containerd/containerd/compare/v1.7.27...v1.7.29\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/cli` from 28.2.2+incompatible to 29.2.0+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/0b9d1985dbf919678745f122b12b46f730b97d87\"\u003e\u003ccode\u003e0b9d198\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6764\"\u003e#6764\u003c/a\u003e from vvoland/update-docker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9c9ec7358833bb3e5622a166673744fca7fefac4\"\u003e\u003ccode\u003e9c9ec73\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/client v0.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/bab3e81e1d8874a2d4f26afc02225ee537d0b15d\"\u003e\u003ccode\u003ebab3e81\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/api v1.53.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2e64fc162ab632a530f7191cc6af65c22356ea0d\"\u003e\u003ccode\u003e2e64fc1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6367\"\u003e#6367\u003c/a\u003e from thaJeztah/template_slicejoin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1f2ba2ac9d8c92870f7cce89dfa17d89d3375c19\"\u003e\u003ccode\u003e1f2ba2a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6760\"\u003e#6760\u003c/a\u003e from thaJeztah/container_create_fix_error\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/e34a3422cc32c808d2e8b0e0ef51112d53fa896d\"\u003e\u003ccode\u003ee34a342\u003c/code\u003e\u003c/a\u003e templates: make \u0026quot;join\u0026quot; work with non-string slices and map values\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/a86356d42f918968579e670b51bc85dc45982a33\"\u003e\u003ccode\u003ea86356d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6763\"\u003e#6763\u003c/a\u003e from thaJeztah/bump_mapstructure\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/771660a17e56116eb32677a6d83c5210e5092194\"\u003e\u003ccode\u003e771660a\u003c/code\u003e\u003c/a\u003e vendor: github.com/go-viper/mapstructure/v2 v2.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9cff36b35a828be8d137bc5de4983b7e3fef1614\"\u003e\u003ccode\u003e9cff36b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6762\"\u003e#6762\u003c/a\u003e from thaJeztah/bump_x_deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/08ed2bc6e8bc49ad988ecd44633620a48fb10967\"\u003e\u003ccode\u003e08ed2bc\u003c/code\u003e\u003c/a\u003e cli/command/container: make injecting config.json failures a warning\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v28.2.2...v29.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.16.2 to 5.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpand packfile checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1836\"\u003ego-git/go-git#1836\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebackport plumbing: format/idxfile, prevent panic by \u003ca href=\"https://github.com/swills\"\u003e\u003ccode\u003e@​swills\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1732\"\u003ego-git/go-git#1732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[backport] build: test, Fix build on Windows. by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1734\"\u003ego-git/go-git#1734\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/ea3e7ec9dfc54f577a01afb4dd601c0284604264\"\u003e\u003ccode\u003eea3e7ec\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2004\"\u003e#2004\u003c/a\u003e from go-git/v5-http-hardening\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bcd20a9c525826081262a06a9ed9c3167abfcd53\"\u003e\u003ccode\u003ebcd20a9\u003c/code\u003e\u003c/a\u003e plumbing: transport/http, Add support for followRedirects policy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/45ae193b3a60aa8ec8a3e373f7265a7819473d5f\"\u003e\u003ccode\u003e45ae193\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1944\"\u003e#1944\u003c/a\u003e from go-git/fix-perms\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fda4f7464b597ff33d2dea1c026482a5e900037c\"\u003e\u003ccode\u003efda4f74\u003c/code\u003e\u003c/a\u003e storage: filesystem/dotgit, Skip writing pack files that already exist on disk\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/2212dc7caeb2a389fe2129923811ef63f75a557a\"\u003e\u003ccode\u003e2212dc7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1941\"\u003e#1941\u003c/a\u003e from go-git/renovate/releases/v5.x-go-github.com-go-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/ebb2d7da7f5d5aebeaa0b5e13276d72d602c1ae3\"\u003e\u003ccode\u003eebb2d7d\u003c/code\u003e\u003c/a\u003e build: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5e23dfd02db92644dc4a3358ceb297fce875b772\"\u003e\u003ccode\u003e5e23dfd\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1937\"\u003e#1937\u003c/a\u003e from pjbgf/idx-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6b38a326816b80f64c20cc0e6113958b65c05a1c\"\u003e\u003ccode\u003e6b38a32\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1935\"\u003e#1935\u003c/a\u003e from pjbgf/index-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/cd757fcb856a2dcc5fff6c110320a8ff62e99513\"\u003e\u003ccode\u003ecd757fc\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, Fix version and fanout checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3ec0d70cb687ae1da5f4d18faa4229bd971a8710\"\u003e\u003ccode\u003e3ec0d70\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Fix tree extension invalidated entry parsing\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.2...v5.18.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.1.3 to 4.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes Panic in JWE decryption. See \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9\"\u003e\u003ccode\u003e0e59876\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ddffdbcec8bdadea8e02a20bdf19239878228215\"\u003e\u003ccode\u003eddffdbc\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-viper/mapstructure/v2` from 2.3.0 to 2.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-viper/mapstructure/releases\"\u003egithub.com/go-viper/mapstructure/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: replace interface{} with any by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/115\"\u003ego-viper/mapstructure#115\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.0 to 3.29.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/114\"\u003ego-viper/mapstructure#114\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneric tests by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/118\"\u003ego-viper/mapstructure#118\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix godoc reference link in README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/107\"\u003ego-viper/mapstructure#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add StringToTimeLocationHookFunc to convert strings to *time.Location by \u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add back previous StringToSlice as a weak function by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/119\"\u003ego-viper/mapstructure#119\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b9794a5f0e73d425210d6614ed833067029155f5\"\u003e\u003ccode\u003eb9794a5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/119\"\u003e#119\u003c/a\u003e from go-viper/string-to-weak-slice\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17cdcb0741054e2a33938adf6bd1f2a5c0aa8f30\"\u003e\u003ccode\u003e17cdcb0\u003c/code\u003e\u003c/a\u003e feat: add back previous StringToSlice as a weak function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/3caca3614c3ab2c5b5d359c44fdcd72058887b19\"\u003e\u003ccode\u003e3caca36\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/117\"\u003e#117\u003c/a\u003e from ErfanMomeniii/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/9a861bc115f2b54ed4e494662f29c172d9ef046a\"\u003e\u003ccode\u003e9a861bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/107\"\u003e#107\u003c/a\u003e from peczenyj/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/86ed5b59da0615fb8c3a413f401cdf0231f1234c\"\u003e\u003ccode\u003e86ed5b5\u003c/code\u003e\u003c/a\u003e refactor: update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/ace5b4e8b3dec99468ffa9498e42fb09d177b0a6\"\u003e\u003ccode\u003eace5b4e\u003c/code\u003e\u003c/a\u003e chore: add interface any linter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/1a4f1aef38bfa8549762aaf42c7c18a5d268e76e\"\u003e\u003ccode\u003e1a4f1ae\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/118\"\u003e#118\u003c/a\u003e from go-viper/generic-tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/a2689090ed4348033c36724d866faf1f911a9f63\"\u003e\u003ccode\u003ea268909\u003c/code\u003e\u003c/a\u003e fix: lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17f1fd44eb7606b109c9bb017c0a1c6d3e93b5cd\"\u003e\u003ccode\u003e17f1fd4\u003c/code\u003e\u003c/a\u003e test: add more comments\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b48c8566836bf291bfee2b217d51fc36e8e61f6f\"\u003e\u003ccode\u003eb48c856\u003c/code\u003e\u003c/a\u003e test: expand tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/moby/buildkit` from 0.23.2 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.28.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix insufficient validation of Git URL \u003ccode\u003e#ref:subdir\u003c/code\u003e fragments that could allow access to restricted files outside the checked-out repository root. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg\"\u003eGHSA-4vrq-3vrq-g6gg\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a vulnerability where an untrusted custom frontend could cause files to be written outside the BuildKit state directory. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj\"\u003eGHSA-4c29-8rgm-jvjj\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a panic when processing invalid \u003ccode\u003e.dockerignore\u003c/code\u003e patterns during \u003ccode\u003eCOPY\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/patternmatcher/issues/9\"\u003emoby/patternmatcher#9\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/moby/patternmatcher\u003c/strong\u003e  v0.6.0 -\u0026gt; v0.6.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.28.0\"\u003ev0.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.28.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.28.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.28.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eAmr Mahdi\u003c/li\u003e\n\u003cli\u003eDan Duvall\u003c/li\u003e\n\u003cli\u003eDavid Karlsson\u003c/li\u003e\n\u003cli\u003eJonas Geiler\u003c/li\u003e\n\u003cli\u003eKevin L.\u003c/li\u003e\n\u003cli\u003ersteube\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8\"\u003e\u003ccode\u003e45b038c\u003c/code\u003e\u003c/a\u003e git: normalize and validate subdir paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f5462c216098af766f97ea4cb328e65c6d8f7256\"\u003e\u003ccode\u003ef5462c2\u003c/code\u003e\u003c/a\u003e git: harden ref arg handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/71577a5da7a2b3ab75a90c2cfedfda0c27d1ef40\"\u003e\u003ccode\u003e71577a5\u003c/code\u003e\u003c/a\u003e source: extract SafeFileName into shared pathutil package\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df4378316f3b000403d097551a8139a700bd823d\"\u003e\u003ccode\u003edf43783\u003c/code\u003e\u003c/a\u003e source/http: use os.Root for saved file operations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/9ce6f62aca0653657047ee613cdef22f38b31244\"\u003e\u003ccode\u003e9ce6f62\u003c/code\u003e\u003c/a\u003e source/http: sanitize downloaded filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4\"\u003e\u003ccode\u003e099cf80\u003c/code\u003e\u003c/a\u003e executor: validate container IDs centrally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/2642113bbc9d969d223c37aaabca4b50613fddf9\"\u003e\u003ccode\u003e2642113\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e from thaJeztah/0.28_backport_bump_patternmatcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/802da78332d9f2c6c9d856c1648ab52c701076fa\"\u003e\u003ccode\u003e802da78\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/patternmatcher v0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/5245d869d85d9c98f986b600584c332a3b001986\"\u003e\u003ccode\u003e5245d86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6551\"\u003e#6551\u003c/a\u003e from tonistiigi/v0.28-cherry-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/90ee5deef6c6efcb82358eb48d76235191196db1\"\u003e\u003ccode\u003e90ee5de\u003c/code\u003e\u003c/a\u003e vendor: update x/net to v0.51.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.23.2...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.40.0 to 1.41.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.39.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/GoogleCloudPlatform/osconfig/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/GoogleCloudPlatform/osconfig/pull/963","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleCloudPlatform%2Fosconfig/issues/963","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/963/packages"}},{"old_version":"0.25.2","new_version":"0.28.1","update_type":"minor","path":"/test/integration","pr_created_at":"2026-04-22T14:34:39.000Z","version_change":"0.25.2 → 0.28.1","issue":{"uuid":"4309744056","node_id":"PR_kwDORsmrI87UqLe_","number":3,"state":"closed","title":"build(deps): Bump github.com/moby/buildkit from 0.25.2 to 0.28.1 in /test/integration","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-08T23:38:34.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-22T14:34:39.000Z","updated_at":"2026-05-08T23:38:36.000Z","time_to_close":1415035,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): Bump","packages":[{"name":"github.com/moby/buildkit","old_version":"0.25.2","new_version":"0.28.1","repository_url":"https://github.com/moby/buildkit"}],"path":"/test/integration","ecosystem":"go"},"body":"Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.25.2 to 0.28.1.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.28.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix insufficient validation of Git URL \u003ccode\u003e#ref:subdir\u003c/code\u003e fragments that could allow access to restricted files outside the checked-out repository root. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg\"\u003eGHSA-4vrq-3vrq-g6gg\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a vulnerability where an untrusted custom frontend could cause files to be written outside the BuildKit state directory. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj\"\u003eGHSA-4c29-8rgm-jvjj\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a panic when processing invalid \u003ccode\u003e.dockerignore\u003c/code\u003e patterns during \u003ccode\u003eCOPY\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/patternmatcher/issues/9\"\u003emoby/patternmatcher#9\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/moby/patternmatcher\u003c/strong\u003e  v0.6.0 -\u0026gt; v0.6.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.28.0\"\u003ev0.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.28.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.28.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.28.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eAmr Mahdi\u003c/li\u003e\n\u003cli\u003eDan Duvall\u003c/li\u003e\n\u003cli\u003eDavid Karlsson\u003c/li\u003e\n\u003cli\u003eJonas Geiler\u003c/li\u003e\n\u003cli\u003eKevin L.\u003c/li\u003e\n\u003cli\u003ersteube\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8\"\u003e\u003ccode\u003e45b038c\u003c/code\u003e\u003c/a\u003e git: normalize and validate subdir paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f5462c216098af766f97ea4cb328e65c6d8f7256\"\u003e\u003ccode\u003ef5462c2\u003c/code\u003e\u003c/a\u003e git: harden ref arg handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/71577a5da7a2b3ab75a90c2cfedfda0c27d1ef40\"\u003e\u003ccode\u003e71577a5\u003c/code\u003e\u003c/a\u003e source: extract SafeFileName into shared pathutil package\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df4378316f3b000403d097551a8139a700bd823d\"\u003e\u003ccode\u003edf43783\u003c/code\u003e\u003c/a\u003e source/http: use os.Root for saved file operations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/9ce6f62aca0653657047ee613cdef22f38b31244\"\u003e\u003ccode\u003e9ce6f62\u003c/code\u003e\u003c/a\u003e source/http: sanitize downloaded filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4\"\u003e\u003ccode\u003e099cf80\u003c/code\u003e\u003c/a\u003e executor: validate container IDs centrally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/2642113bbc9d969d223c37aaabca4b50613fddf9\"\u003e\u003ccode\u003e2642113\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e from thaJeztah/0.28_backport_bump_patternmatcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/802da78332d9f2c6c9d856c1648ab52c701076fa\"\u003e\u003ccode\u003e802da78\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/patternmatcher v0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/5245d869d85d9c98f986b600584c332a3b001986\"\u003e\u003ccode\u003e5245d86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6551\"\u003e#6551\u003c/a\u003e from tonistiigi/v0.28-cherry-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/90ee5deef6c6efcb82358eb48d76235191196db1\"\u003e\u003ccode\u003e90ee5de\u003c/code\u003e\u003c/a\u003e vendor: update x/net to v0.51.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.25.2...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit\u0026package-manager=go_modules\u0026previous-version=0.25.2\u0026new-version=0.28.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/eagle19900203-boop/flagd/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/eagle19900203-boop/flagd/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/eagle19900203-boop%2Fflagd/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"}},{"old_version":"0.23.2","new_version":"0.28.1","update_type":"minor","path":null,"pr_created_at":"2026-04-17T22:50:17.000Z","version_change":"0.23.2 → 0.28.1","issue":{"uuid":"4285728375","node_id":"PR_kwDOR-Wcqs7TeFZa","number":2,"state":"closed","title":"build(deps): bump github.com/moby/buildkit from 0.23.2 to 0.28.1","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-07-28T09:10:51.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-17T22:50:17.000Z","updated_at":"2026-07-28T09:10:54.000Z","time_to_close":8763634,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/moby/buildkit","old_version":"0.23.2","new_version":"0.28.1","repository_url":"https://github.com/moby/buildkit"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.23.2 to 0.28.1.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moby/buildkit/releases\"\u003egithub.com/moby/buildkit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cp\u003eWelcome to the v0.28.1 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNotable Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix insufficient validation of Git URL \u003ccode\u003e#ref:subdir\u003c/code\u003e fragments that could allow access to restricted files outside the checked-out repository root. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg\"\u003eGHSA-4vrq-3vrq-g6gg\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a vulnerability where an untrusted custom frontend could cause files to be written outside the BuildKit state directory. \u003ca href=\"https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj\"\u003eGHSA-4c29-8rgm-jvjj\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a panic when processing invalid \u003ccode\u003e.dockerignore\u003c/code\u003e patterns during \u003ccode\u003eCOPY\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e \u003ca href=\"https://redirect.github.com/moby/patternmatcher/issues/9\"\u003emoby/patternmatcher#9\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003egithub.com/moby/patternmatcher\u003c/strong\u003e  v0.6.0 -\u0026gt; v0.6.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePrevious release can be found at \u003ca href=\"https://github.com/moby/buildkit/releases/tag/v0.28.0\"\u003ev0.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.28.0\u003c/h2\u003e\n\u003cp\u003ebuildkit 0.28.0\u003c/p\u003e\n\u003cp\u003eWelcome to the v0.28.0 release of buildkit!\u003c/p\u003e\n\u003cp\u003ePlease try out the release binaries and report any issues at\n\u003ca href=\"https://github.com/moby/buildkit/issues\"\u003ehttps://github.com/moby/buildkit/issues\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTõnis Tiigi\u003c/li\u003e\n\u003cli\u003eCrazyMax\u003c/li\u003e\n\u003cli\u003eSebastiaan van Stijn\u003c/li\u003e\n\u003cli\u003eJonathan A. Sternberg\u003c/li\u003e\n\u003cli\u003eAkihiro Suda\u003c/li\u003e\n\u003cli\u003eAmr Mahdi\u003c/li\u003e\n\u003cli\u003eDan Duvall\u003c/li\u003e\n\u003cli\u003eDavid Karlsson\u003c/li\u003e\n\u003cli\u003eJonas Geiler\u003c/li\u003e\n\u003cli\u003eKevin L.\u003c/li\u003e\n\u003cli\u003ersteube\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8\"\u003e\u003ccode\u003e45b038c\u003c/code\u003e\u003c/a\u003e git: normalize and validate subdir paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/f5462c216098af766f97ea4cb328e65c6d8f7256\"\u003e\u003ccode\u003ef5462c2\u003c/code\u003e\u003c/a\u003e git: harden ref arg handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/71577a5da7a2b3ab75a90c2cfedfda0c27d1ef40\"\u003e\u003ccode\u003e71577a5\u003c/code\u003e\u003c/a\u003e source: extract SafeFileName into shared pathutil package\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/df4378316f3b000403d097551a8139a700bd823d\"\u003e\u003ccode\u003edf43783\u003c/code\u003e\u003c/a\u003e source/http: use os.Root for saved file operations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/9ce6f62aca0653657047ee613cdef22f38b31244\"\u003e\u003ccode\u003e9ce6f62\u003c/code\u003e\u003c/a\u003e source/http: sanitize downloaded filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4\"\u003e\u003ccode\u003e099cf80\u003c/code\u003e\u003c/a\u003e executor: validate container IDs centrally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/2642113bbc9d969d223c37aaabca4b50613fddf9\"\u003e\u003ccode\u003e2642113\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6610\"\u003e#6610\u003c/a\u003e from thaJeztah/0.28_backport_bump_patternmatcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/802da78332d9f2c6c9d856c1648ab52c701076fa\"\u003e\u003ccode\u003e802da78\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/patternmatcher v0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/5245d869d85d9c98f986b600584c332a3b001986\"\u003e\u003ccode\u003e5245d86\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moby/buildkit/issues/6551\"\u003e#6551\u003c/a\u003e from tonistiigi/v0.28-cherry-picks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/buildkit/commit/90ee5deef6c6efcb82358eb48d76235191196db1\"\u003e\u003ccode\u003e90ee5de\u003c/code\u003e\u003c/a\u003e vendor: update x/net to v0.51.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moby/buildkit/compare/v0.23.2...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit\u0026package-manager=go_modules\u0026previous-version=0.23.2\u0026new-version=0.28.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/LetheanNetwork/osv-scanner/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/LetheanNetwork/osv-scanner/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/LetheanNetwork%2Fosv-scanner/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"}}]}