Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the go-modules group with 14 updates #90

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 14, 2024

Bumps the go-modules group with 14 updates:

Package From To
github.com/onsi/gomega 1.31.0 1.31.1
github.com/paketo-buildpacks/occam 0.18.1 0.18.2
github.com/containerd/containerd 1.7.12 1.7.13
github.com/google/go-containerregistry 0.18.0 0.19.0
github.com/google/uuid 1.5.0 1.6.0
github.com/klauspost/compress 1.17.4 1.17.6
github.com/opencontainers/runc 1.1.11 1.1.12
github.com/shirou/gopsutil/v3 3.23.12 3.24.1
github.com/yusufpapurcu/wmi 1.2.3 1.2.4
golang.org/x/mod 0.14.0 0.15.0
golang.org/x/net 0.20.0 0.21.0
golang.org/x/sys 0.16.0 0.17.0
golang.org/x/tools 0.17.0 0.18.0
google.golang.org/grpc 1.60.1 1.61.1

Updates github.com/onsi/gomega from 1.31.0 to 1.31.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.31.1

1.31.1

Fixes

  • Inverted arguments order of FailureMessage of BeComparableToMatcher [e0dd999]
  • Update test in case keeping msg is desired [ad1a367]

Maintenance

  • Show how to import the format sub package [24e958d]
  • tidy up go.sum [26661b8]
  • bump dependencies [bde8f7a]
Changelog

Sourced from github.com/onsi/gomega's changelog.

1.31.1

Fixes

  • Inverted arguments order of FailureMessage of BeComparableToMatcher [e0dd999]
  • Update test in case keeping msg is desired [ad1a367]

Maintenance

  • Show how to import the format sub package [24e958d]
  • tidy up go.sum [26661b8]
  • bump dependencies [bde8f7a]
Commits
  • 762b171 v1.31.1
  • 26661b8 tidy up go.sum
  • bde8f7a bump dependencies
  • 24e958d Show how to import the format sub package
  • ad1a367 Update test in case keeping msg is desired
  • e0dd999 Inverted arguments order of FailureMessage of BeComparableToMatcher
  • See full diff in compare view

Updates github.com/paketo-buildpacks/occam from 0.18.1 to 0.18.2

Release notes

Sourced from github.com/paketo-buildpacks/occam's releases.

v0.18.2

What's Changed

Full Changelog: paketo-buildpacks/occam@v0.18.1...v0.18.2

Commits
  • f37d228 Bump github.com/opencontainers/runc from 1.1.5 to 1.1.12
  • See full diff in compare view

Updates github.com/containerd/containerd from 1.7.12 to 1.7.13

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.13

Welcome to the v1.7.13 release of containerd!

The thirteenth patch release for containerd 1.7 updates the runc binary in the release builds to address CVE-2024-21626

Notable Updates

  • Update runc binary to v1.1.12 (GHSA-xr7r-f8xq-vfvv)
  • Update seccomp profile for new syscalls added since Linux 5.16 (#9693)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Derek McGowan
  • Akihiro Suda
  • Evan Lezar
  • Paweł Gronowski
  • Phil Estes
  • Wei Fu

Changes

  • Prepare v1.7.13 and update runc to v1.1.12 (#9724)
  • [release/1.7] seccomp: kernel 6.7 (#9693)
  • [release/1.7] Update container-device-interface to v0.6.2 (#9685)
    • 14628d4aa Update container-device-interface to v0.6.2
  • [release/1.7] content: Add InfoReaderProvider (#9658)

Dependency Changes

  • tags.cncf.io/container-device-interface v0.6.2 new
  • tags.cncf.io/container-device-interface/specs-go v0.6.0 new

Previous release can be found at v1.7.12

Commits
  • 7c3aca7 Merge pull request #9724 from dmcgowan/prepare-v1.7.13
  • b97e611 Prepare release notes for v1.7.13
  • 2e7fa14 Update runc binary to v1.1.12
  • cbda56b Merge pull request #9693 from k8s-infra-cherrypick-robot/cherry-pick-9684-to-...
  • 1bed378 seccomp: kernel 6.7
  • 1944259 Merge pull request #9685 from elezar/dependency-update-container-device-inter...
  • 14628d4 Update container-device-interface to v0.6.2
  • 8c780b7 Merge pull request #9658 from vvoland/contentprovider-1.7
  • 8364779 content: Add InfoReaderProvider
  • See full diff in compare view

Updates github.com/google/go-containerregistry from 0.18.0 to 0.19.0

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.19.0

What's Changed

Full Changelog: google/go-containerregistry@v0.18.0...v0.19.0

Commits

Updates github.com/google/uuid from 1.5.0 to 1.6.0

Release notes

Sourced from github.com/google/uuid's releases.

v1.6.0

1.6.0 (2024-01-16)

Features

Bug Fixes

Changelog

Sourced from github.com/google/uuid's changelog.

1.6.0 (2024-01-16)

Features

Bug Fixes

Commits

Updates github.com/klauspost/compress from 1.17.4 to 1.17.6

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.17.6

What's Changed

Full Changelog: klauspost/compress@v1.17.5...v1.17.6

v1.17.5

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.17.4...v1.17.5

Commits
  • 255a132 s2: Fix DecodeConcurrent deadlock on errors (#925)
  • e8251aa build: Remove garble compiler (#924)
  • 32f34cf build(deps): bump the github-actions group with 1 update (#921)
  • aac36dc zstd: Fix incorrect repeat coding in best mode (#923)
  • 9b0f130 Update README.md
  • 6662a21 s2: Document and test how to peek the stream for skippable blocks (#918)
  • 3deb878 s2: Fix up AddSkippableBlock more (#919)
  • 6ac58c9 s2: Fix incorrect length encoded by writer.AddSkippableBlock (#917)
  • 515f153 s2: Fix callbacks for skippable blocks and disallow 0xfe (Padding) for custom...
  • 01b2a79 zstd: Limit default window to 8MB (#913)
  • Additional commits viewable in compare view

Updates github.com/opencontainers/runc from 1.1.11 to 1.1.12

Release notes

Sourced from github.com/opencontainers/runc's releases.

runc 1.1.12 -- "Now you're thinking with Portals™!"

This is the twelfth patch release in the 1.1.z release branch of runc. It fixes a high-severity container breakout vulnerability involving leaked file descriptors, and users are strongly encouraged to update as soon as possible.

  • Fix CVE-2024-21626, a container breakout attack that took advantage of a file descriptor that was leaked internally within runc (but never leaked to the container process).

    In addition to fixing the leak, several strict hardening measures were added to ensure that future internal leaks could not be used to break out in this manner again.

    Based on our research, while no other container runtime had a similar leak, none had any of the hardening steps we've introduced (and some runtimes would not check for any file descriptors that a calling process may have leaked to them, allowing for container breakouts due to basic user error).

Static Linking Notices

The runc binary distributed with this release are statically linked with the following GNU LGPL-2.1 licensed libraries, with runc acting as a "work that uses the Library":

The versions of these libraries were not modified from their upstream versions, but in order to comply with the LGPL-2.1 (§6(a)), we have attached the complete source code for those libraries which (when combined with the attached runc source code) may be used to exercise your rights under the LGPL-2.1.

However we strongly suggest that you make use of your distribution's packages or download them from the authoritative upstream sources, especially since these libraries are related to the security of your containers.

Thanks to all of the contributors who made this release possible:

Signed-off-by: Aleksa Sarai [email protected]

Changelog

Sourced from github.com/opencontainers/runc's changelog.

[1.1.12] - 2024-01-31

Now you're thinking with Portals™!

Security

  • Fix CVE-2024-21626, a container breakout attack that took advantage of a file descriptor that was leaked internally within runc (but never leaked to the container process). In addition to fixing the leak, several strict hardening measures were added to ensure that future internal leaks could not be used to break out in this manner again. Based on our research, while no other container runtime had a similar leak, none had any of the hardening steps we've introduced (and some runtimes would not check for any file descriptors that a calling process may have leaked to them, allowing for container breakouts due to basic user error).
Commits
  • 51d5e94 VERSION: release 1.1.12
  • 2a4ed3e merge 1.1-GHSA-xr7r-f8xq-vfvv into release-1.1
  • e9665f4 init: don't special-case logrus fds
  • 683ad2f libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
  • b6633f4 cgroup: plug leaks of /sys/fs/cgroup handle
  • 284ba30 init: close internal fds before execve
  • fbe3eed setns init: do explicit lookup of execve argument early
  • 0994249 init: verify after chdir that cwd is inside the container
  • 506552a Fix File to Close
  • 099ff69 merge #4177 into opencontainers/runc:release-1.1
  • Additional commits viewable in compare view

Updates github.com/shirou/gopsutil/v3 from 3.23.12 to 3.24.1

Release notes

Sourced from github.com/shirou/gopsutil/v3's releases.

v3.24.1

Compatibility Notice

We don't think #1585 will affect compatibility about PlatformVersion in host.Info(), but maybe it will.

What's Changed

disk

host

process

Other Changes

New Contributors

Full Changelog: shirou/gopsutil@v3.23.12...v3.24.1

Commits
  • 65b5fa3 Merge pull request #1587 from shirou/dependabot/github_actions/actions/upload...
  • 2241397 chore(deps): bump actions/upload-artifact from 4.2.0 to 4.3.0
  • 9de1a42 Merge pull request #1585 from DataDog/bryce.kahle/os-release-version-id
  • 9b6f828 Merge pull request #1584 from DataDog/bryce.kahle/host-platform
  • dc01f63 Merge pull request #1583 from shirou/dependabot/github_actions/actions/cache-...
  • e912ebd Merge pull request #1580 from jnewmano/patch-1
  • b86b36a Merge pull request #1586 from shirou/dependabot/github_actions/actions/upload...
  • 61758d5 chore(deps): bump actions/upload-artifact from 4.1.0 to 4.2.0
  • d753f78 use VERSION_ID from os-release
  • b0d976c ensure host platform are files and have contents
  • Additional commits viewable in compare view

Updates github.com/yusufpapurcu/wmi from 1.2.3 to 1.2.4

Release notes

Sourced from github.com/yusufpapurcu/wmi's releases.

v1.2.4

What's Changed

New Contributors

Full Changelog: yusufpapurcu/wmi@v1.2.3...v1.2.4

Commits

Updates golang.org/x/mod from 0.14.0 to 0.15.0

Commits
  • fa1ba42 sumdb: replace globsMatchPath with module.MatchPrefixPatterns
  • See full diff in compare view

Updates golang.org/x/net from 0.20.0 to 0.21.0

Commits
  • 73d21fd go.mod: update golang.org/x dependencies
  • 643fd16 html: fix SOLIDUS '/' handling in attribute parsing
  • 73e4b50 dns/dnsmessage: allow name compression for SRV resource parsing
  • b2208d0 internal/quic/qlog: fix typo
  • 0d0b98c http2: avoid goroutine starvation in TestServer_Push_RejectAfterGoAway
  • 07e05fd http2: remove suspicious uint32->v conversion in frame code
  • 26b646e quic: avoid deadlock in Endpoint.Close
  • See full diff in compare view

Updates golang.org/x/sys from 0.16.0 to 0.17.0

Commits
  • 914b96c windows: support ill-formed UTF-16 in UTF16PtrToString
  • 511ec84 Revert "windows: support nil done parameter in ReadFile and WriteFile"
  • 628365d windows: support nil done parameter in ReadFile and WriteFile
  • bef1bd8 unix: move mksyscall regexp to package level variables
  • 5710a32 unix/linux: update Linux kernel to 6.7
  • b3ce6a3 windows: build env_windows_test.go only go Go 1.21 and above
  • c3fa2b8 windows: fix parsing of non-ASCII entries in token.Environ
  • f69d32a unix: in TestDirent, make as many ReadDirent calls as are needed
  • 0d9df52 unix: add more SECCOMP constants
  • See full diff in compare view

Updates golang.org/x/tools from 0.17.0 to 0.18.0

Commits
  • c5643e9 gopls/internal/server: fix two bugs related to dynamic configuration
  • 50b4f1b gopls/internal/golang: close open file
  • f0ef3c6 gopls: update x/telemetry dependency to fix crash
  • 8cf0a8e gopls: record that v0.15 will be the last to support go1.18
  • 730dc3c gopls/internal/settings: add a hidden option to disable zero config
  • 95f04f4 gopls/internal/golang: add resolve support for inline refactorings
  • 9619683 gopls/internal/cache: treat local replaces as workspace modules
  • a5af84e gopls/internal/cache: check views on any on-disk change to go.mod files
  • a7407fa gopls: update telemetry
  • 314368d go/analysis/passes/deepequalerrors: audit for types.Alias safety
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.60.1 to 1.61.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.61.1

Bug Fixes

  • server: wait to close connection until incoming socket is drained (with timeout) to prevent data loss on client-side (#6977)

Release 1.61.0

New Features

  • resolver: provide method, AuthorityOverrider, to allow resolver.Builders to override the default authority for a ClientConn. (EXPERIMENTAL) (#6752)
  • xds: add support for mTLS Credentials in xDS bootstrap (gRFC A65) (#6757)
  • server: add grpc.WaitForHandlers ServerOption to cause Server.Stop to block until method handlers return. (EXPERIMENTAL) (#6922)

Performance Improvements

  • grpc: skip compression of empty messages as an optimization (#6842)
  • orca: use atomic pointer to improve performance in server metrics recorder (#6799)

Bug Fixes

  • client: correctly enable TCP keepalives with OS defaults on windows (#6863)
  • server: change some stream operations to return UNAVAILABLE instead of UNKNOWN when underlying connection is broken (#6891)
  • server: fix GracefulStop to block until all method handlers return (v1.60 regression). (#6922)
  • server: fix two bugs that could lead to panics at shutdown when using NumStreamWorkers (EXPERIMENTAL). (#6856)
  • reflection: do not send invalid descriptors to clients for files that cannot be fully resolved (#6771)
  • xds: don't fail channel/server startup when xds creds is specified, but bootstrap is missing certificate providers (#6848)
  • xds: Atomically read and write xDS security configuration client side (#6796)
  • xds/server: fix RDS handling for non-inline route configs (#6915)
Commits
  • c6e7f04 Change version to 1.61.1 (#6981)
  • dbd4cbc cherry-pick #6977 to 1.61.x release branch (#6980)
  • 57ed608 Change version to 1.61.1-dev (#6937)
  • 8167bc3 Change version to 1.61.0 (#6936)
  • 52e2363 test/xds: Use different import path for gRPC Messages (#6933)
  • 67e50be transport: Remove redundant if in handleGoAway (#6930)
  • e96f521 alts: Extract AuthInfo after handshake in ALTS e2e test. (#6931)
  • 987df13 metadata: move FromOutgoingContextRaw() to internal (#6765)
  • 61eab37 server: block GracefulStop on method handlers and make blocking optional for ...
  • ddd377f xds/server: fix RDS handling for non-inline route configs (#6915)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-modules group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.31.0` | `1.31.1` |
| [github.com/paketo-buildpacks/occam](https://github.com/paketo-buildpacks/occam) | `0.18.1` | `0.18.2` |
| [github.com/containerd/containerd](https://github.com/containerd/containerd) | `1.7.12` | `1.7.13` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.18.0` | `0.19.0` |
| [github.com/google/uuid](https://github.com/google/uuid) | `1.5.0` | `1.6.0` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.4` | `1.17.6` |
| [github.com/opencontainers/runc](https://github.com/opencontainers/runc) | `1.1.11` | `1.1.12` |
| [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil) | `3.23.12` | `3.24.1` |
| [github.com/yusufpapurcu/wmi](https://github.com/yusufpapurcu/wmi) | `1.2.3` | `1.2.4` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.14.0` | `0.15.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.20.0` | `0.21.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.16.0` | `0.17.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.17.0` | `0.18.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.60.1` | `1.61.1` |


Updates `github.com/onsi/gomega` from 1.31.0 to 1.31.1
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.31.0...v1.31.1)

Updates `github.com/paketo-buildpacks/occam` from 0.18.1 to 0.18.2
- [Release notes](https://github.com/paketo-buildpacks/occam/releases)
- [Commits](paketo-buildpacks/occam@v0.18.1...v0.18.2)

Updates `github.com/containerd/containerd` from 1.7.12 to 1.7.13
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v1.7.12...v1.7.13)

Updates `github.com/google/go-containerregistry` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](google/go-containerregistry@v0.18.0...v0.19.0)

Updates `github.com/google/uuid` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/google/uuid/releases)
- [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md)
- [Commits](google/uuid@v1.5.0...v1.6.0)

Updates `github.com/klauspost/compress` from 1.17.4 to 1.17.6
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.17.4...v1.17.6)

Updates `github.com/opencontainers/runc` from 1.1.11 to 1.1.12
- [Release notes](https://github.com/opencontainers/runc/releases)
- [Changelog](https://github.com/opencontainers/runc/blob/v1.1.12/CHANGELOG.md)
- [Commits](opencontainers/runc@v1.1.11...v1.1.12)

Updates `github.com/shirou/gopsutil/v3` from 3.23.12 to 3.24.1
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v3.23.12...v3.24.1)

Updates `github.com/yusufpapurcu/wmi` from 1.2.3 to 1.2.4
- [Release notes](https://github.com/yusufpapurcu/wmi/releases)
- [Commits](yusufpapurcu/wmi@v1.2.3...v1.2.4)

Updates `golang.org/x/mod` from 0.14.0 to 0.15.0
- [Commits](golang/mod@v0.14.0...v0.15.0)

Updates `golang.org/x/net` from 0.20.0 to 0.21.0
- [Commits](golang/net@v0.20.0...v0.21.0)

Updates `golang.org/x/sys` from 0.16.0 to 0.17.0
- [Commits](golang/sys@v0.16.0...v0.17.0)

Updates `golang.org/x/tools` from 0.17.0 to 0.18.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.17.0...v0.18.0)

Updates `google.golang.org/grpc` from 1.60.1 to 1.61.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.60.1...v1.61.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/paketo-buildpacks/occam
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/containerd/containerd
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/google/go-containerregistry
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/google/uuid
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/klauspost/compress
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/opencontainers/runc
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/shirou/gopsutil/v3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/yusufpapurcu/wmi
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: golang.org/x/mod
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/net
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/tools
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner February 14, 2024 07:45
@dependabot dependabot bot added the failure:update-dependencies An issue filed automatically when updating buildpack.toml dependencies fails in a workflow label Feb 14, 2024
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label Feb 14, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 16, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Feb 16, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/go-modules-fbfb1fe344 branch February 16, 2024 07:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
failure:update-dependencies An issue filed automatically when updating buildpack.toml dependencies fails in a workflow semver:patch A change requiring a patch version bump
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant