build(deps): bump the go-dependencies group in /tools with 33 updates by dependabot[bot] · Pull Request #1821 · fastly/cli

dependabot · 2026-06-10T17:14:27Z

Bumps the go-dependencies group in /tools with 33 updates:

Package	From	To
github.com/aws/aws-sdk-go-v2	`1.41.12`	`1.42.0`
github.com/aws/aws-sdk-go-v2/config	`1.32.23`	`1.32.24`
github.com/aws/aws-sdk-go-v2/credentials	`1.19.22`	`1.19.23`
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	`1.18.28`	`1.18.29`
github.com/aws/aws-sdk-go-v2/feature/s3/manager	`1.22.25`	`1.22.26`
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager	`0.2.3`	`0.2.9`
github.com/aws/aws-sdk-go-v2/internal/configsources	`1.4.28`	`1.4.29`
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	`2.7.28`	`2.7.29`
github.com/aws/aws-sdk-go-v2/internal/v4a	`1.4.29`	`1.4.30`
github.com/aws/aws-sdk-go-v2/service/ecr	`1.58.3`	`1.58.4`
github.com/aws/aws-sdk-go-v2/service/ecrpublic	`1.39.5`	`1.39.6`
github.com/aws/aws-sdk-go-v2/service/internal/checksum	`1.9.21`	`1.9.22`
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	`1.13.28`	`1.13.29`
github.com/aws/aws-sdk-go-v2/service/internal/s3shared	`1.19.28`	`1.19.29`
github.com/aws/aws-sdk-go-v2/service/kms	`1.53.3`	`1.53.4`
github.com/aws/aws-sdk-go-v2/service/s3	`1.103.2`	`1.103.3`
github.com/aws/aws-sdk-go-v2/service/signin	`1.1.4`	`1.1.5`
github.com/aws/aws-sdk-go-v2/service/sso	`1.31.2`	`1.31.3`
github.com/aws/aws-sdk-go-v2/service/ssooidc	`1.36.5`	`1.36.6`
github.com/aws/aws-sdk-go-v2/service/sts	`1.43.2`	`1.43.3`
github.com/aws/smithy-go	`1.27.1`	`1.27.2`
github.com/blacktop/go-macho	`1.1.275`	`1.1.278`
github.com/docker/docker-credential-helpers	`0.9.7`	`0.9.8`
github.com/sigstore/cosign/v3	`3.1.0`	`3.1.1`
github.com/sigstore/sigstore-go	`1.2.0`	`1.2.1`
go.yaml.in/yaml/v4	`4.0.0-rc.4`	`4.0.0-rc.5`
golang.org/x/crypto	`0.52.0`	`0.53.0`
golang.org/x/image	`0.41.0`	`0.42.0`
golang.org/x/mod	`0.36.0`	`0.37.0`
golang.org/x/term	`0.43.0`	`0.44.0`
golang.org/x/text	`0.37.0`	`0.38.0`
google.golang.org/api	`0.283.0`	`0.284.0`
software.sslmate.com/src/go-pkcs12	`0.7.1`	`0.7.2`

Updates github.com/aws/aws-sdk-go-v2 from 1.41.12 to 1.42.0

Commits

9a3190f Release 2026-06-08
b20dd5b Regenerated Clients
75a45ea Update API model
e736f55 Add preview of changes for standard retry mode behind flag (#3400)
ba08dc9 Release 2026-06-05.2
9a67e21 Revert schema serde (#3442)
51692f8 s3/transfermanager: avoid double-closing concurrentReader channel after read ...
f696d5b Release 2026-06-05
7efb8fd Regenerated Clients
1a420c5 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.23 to 1.32.24

Commits

9a3190f Release 2026-06-08
b20dd5b Regenerated Clients
75a45ea Update API model
e736f55 Add preview of changes for standard retry mode behind flag (#3400)
ba08dc9 Release 2026-06-05.2
9a67e21 Revert schema serde (#3442)
51692f8 s3/transfermanager: avoid double-closing concurrentReader channel after read ...
f696d5b Release 2026-06-05
7efb8fd Regenerated Clients
1a420c5 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.22 to 1.19.23

Commits

9a3190f Release 2026-06-08
b20dd5b Regenerated Clients
75a45ea Update API model
e736f55 Add preview of changes for standard retry mode behind flag (#3400)
ba08dc9 Release 2026-06-05.2
9a67e21 Revert schema serde (#3442)
51692f8 s3/transfermanager: avoid double-closing concurrentReader channel after read ...
f696d5b Release 2026-06-05
7efb8fd Regenerated Clients
1a420c5 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/ec2/imds from 1.18.28 to 1.18.29

Commits

806208b Release 2023-07-25
6122ccc Regenerated Clients
f4dd56b Update API model
2815861 Release 2023-07-24
3748372 Regenerated Clients
45fe754 Update endpoints model
08fe205 Update API model
bd8bdff added workflow for handling answerable discussions (#2191)
58257c6 Release 2023-07-21
f10862b Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.22.25 to 1.22.26

Commits

9a3190f Release 2026-06-08
b20dd5b Regenerated Clients
75a45ea Update API model
e736f55 Add preview of changes for standard retry mode behind flag (#3400)
ba08dc9 Release 2026-06-05.2
9a67e21 Revert schema serde (#3442)
51692f8 s3/transfermanager: avoid double-closing concurrentReader channel after read ...
f696d5b Release 2026-06-05
7efb8fd Regenerated Clients
1a420c5 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.2.3 to 0.2.9

Commits

9a3190f Release 2026-06-08
b20dd5b Regenerated Clients
75a45ea Update API model
e736f55 Add preview of changes for standard retry mode behind flag (#3400)
ba08dc9 Release 2026-06-05.2
9a67e21 Revert schema serde (#3442)
51692f8 s3/transfermanager: avoid double-closing concurrentReader channel after read ...
f696d5b Release 2026-06-05
7efb8fd Regenerated Clients
1a420c5 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/internal/configsources from 1.4.28 to 1.4.29

Commits

7146c2b Release 2026-06-04
5aef2fd Regenerated Clients
f94c044 Update API model
f00b205 bump to smithy-go v1.27.1 (#3434)
c4ad7de drop service/internal/benchmark (#3433)
91eca46 Release 2026-06-03.2
e9d9e15 Regenerated Clients
def6a3a Update API model
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 from 2.7.28 to 2.7.29

Commits

9a3190f Release 2026-06-08
b20dd5b Regenerated Clients
75a45ea Update API model
e736f55 Add preview of changes for standard retry mode behind flag (#3400)
ba08dc9 Release 2026-06-05.2
9a67e21 Revert schema serde (#3442)
51692f8 s3/transfermanager: avoid double-closing concurrentReader channel after read ...
f696d5b Release 2026-06-05
7efb8fd Regenerated Clients
1a420c5 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/internal/v4a from 1.4.29 to 1.4.30

Commits

9a3190f Release 2026-06-08
b20dd5b Regenerated Clients
75a45ea Update API model
e736f55 Add preview of changes for standard retry mode behind flag (#3400)
ba08dc9 Release 2026-06-05.2
9a67e21 Revert schema serde (#3442)
51692f8 s3/transfermanager: avoid double-closing concurrentReader channel after read ...
f696d5b Release 2026-06-05
7efb8fd Regenerated Clients
1a420c5 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.58.3 to 1.58.4

Commits

9a3190f Release 2026-06-08
b20dd5b Regenerated Clients
75a45ea Update API model
e736f55 Add preview of changes for standard retry mode behind flag (#3400)
ba08dc9 Release 2026-06-05.2
9a67e21 Revert schema serde (#3442)
51692f8 s3/transfermanager: avoid double-closing concurrentReader channel after read ...
f696d5b Release 2026-06-05
7efb8fd Regenerated Clients
1a420c5 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecrpublic from 1.39.5 to 1.39.6

Commits

aacca0a Release 2025-11-04
f2f7085 Regenerated Clients
98ac357 Update endpoints model
545573f Update API model
0c4b1ae upgrade to smithy-go v1.23.2 to track allocation improvements (#3222)
bae1d68 Release 2025-11-03
67d7b9c Regenerated Clients
74be9b9 Update API model
3242971 Release 2025-10-31
2db47dc Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/internal/checksum from 1.9.21 to 1.9.22

Commits

9bc9c51 Release 2026-04-17
2b41455 Regenerated Clients
2327a1b Update endpoints model
9225797 Update API model
7b6f675 Bump smithy-go to 1.25 (again) (#3390)
c8b6a97 Release 2026-04-16
4a05c2b Regenerated Clients
6cd4cc9 Update endpoints model
3153bed Update API model
fe3cef6 Make AccountIDEndpointRouting aware of bdd endpoints (#3387)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/internal/presigned-url from 1.13.28 to 1.13.29

Commits

a5d5009 Release 2023-07-28
ff82299 Regenerated Clients
fc5a86f Update API model
62ffb94 fix v4.go PresignHTTP doc (#2212)
b4d8d26 Release 2023-07-27
ad52106 Regenerated Clients
f335bcf Update API model
d5a9934 Release 2023-07-26
247060d Regenerated Clients
61540ee Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/internal/s3shared from 1.19.28 to 1.19.29

Commits

9a3190f Release 2026-06-08
b20dd5b Regenerated Clients
75a45ea Update API model
e736f55 Add preview of changes for standard retry mode behind flag (#3400)
ba08dc9 Release 2026-06-05.2
9a67e21 Revert schema serde (#3442)
51692f8 s3/transfermanager: avoid double-closing concurrentReader channel after read ...
f696d5b Release 2026-06-05
7efb8fd Regenerated Clients
1a420c5 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.53.3 to 1.53.4

Commits

9a3190f Release 2026-06-08
b20dd5b Regenerated Clients
75a45ea Update API model
e736f55 Add preview of changes for standard retry mode behind flag (#3400)
ba08dc9 Release 2026-06-05.2
9a67e21 Revert schema serde (#3442)
51692f8 s3/transfermanager: avoid double-closing concurrentReader channel after read ...
f696d5b Release 2026-06-05
7efb8fd Regenerated Clients
1a420c5 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.103.2 to 1.103.3

Commits

9a3190f Release 2026-06-08
b20dd5b Regenerated Clients
75a45ea Update API model
e736f55 Add preview of changes for standard retry mode behind flag (#3400)
ba08dc9 Release 2026-06-05.2
9a67e21 Revert schema serde (#3442)
51692f8 s3/transfermanager: avoid double-closing concurrentReader channel after read ...
f696d5b Release 2026-06-05
7efb8fd Regenerated Clients
1a420c5 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/signin from 1.1.4 to 1.1.5

Commits

fdbaadb Release 2021-04-08
d498a2e changenotes for smithy go dependency bump to core
bca1385 make generate changes
214f719 Sync smithy api models and endpoints (#1219)
67f7494 Remove unused RingBuffer implementation (#1206)
33f1593 Update generated code
453feac Fix xml attribute serialization
f91a70b codegen: Add make task to easily pull in smithy-go codegen modules (#1210)
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sso from 1.31.2 to 1.31.3

Commits

e1909a5 Release 2025-08-26
2dead49 Regenerated Clients
8f87507 Update endpoints model
9f13166 Update API model
92833dd drop opsworks and opsworkscm (#3172)
50d1314 Release 2025-08-25.2
d163c8c Deprecate opsworks/opsworkscm (#3171)
f0a97a7 Release 2025-08-25
3b73a3b Regenerated Clients
9c6a548 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ssooidc from 1.36.5 to 1.36.6

Commits

f9f7a6b Release 2025-07-19
c74fb63 Regenerated Clients
d09b466 generate aws-eusc (#3144)
45575dd Release 2025-07-18
40f9e8b Regenerated Clients
da30009 Update endpoints model
78fe67f Update API model
654c62d Release 2025-07-17
47a74cd Regenerated Clients
bdd96b2 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.43.2 to 1.43.3

Commits

fa369bd Release 2026-06-03
960ee4d Regenerated Clients
4b6df8b Update endpoints model
30b15dd Update API model
e8c72af enable schema-serde (#3421)
See full diff in compare view

Updates github.com/aws/smithy-go from 1.27.1 to 1.27.2

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-06-05)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.2

Bug Fix: Fix incorrect serialization of unions in CBOR-based protocols.

Release (2026-06-04)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.1

Bug Fix: Fixed a deserialization failure in all protocols when encountering a union with explicit null members.

Bug Fix: Fixed a panic when deserializing nested unions in JSON- and CBOR-based protocols.

Release (2026-06-02)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.0

Feature: Add APIs for schema-based serialization.

Feature: Add support for all current AWS and Smithy protocols.

Bug Fix: Enforce max nesting depth of 128 on CBOR payloads.

github.com/aws/smithy-go/aws-http-auth: v1.2.0

Feature: Add event stream signer.

Release (2026-05-27)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.26.0

Feature: Add StringSlice to endpoint rulesfn.

Release (2026-04-23)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.25.1

Bug Fix: Fixed a memory leak in the LRU cache implementation used by some AWS services.

... (truncated)

Commits

bff4b8c Release 2026-06-05
6b71b3a fix broken cbor union serialization (#676)
3c67717 serialize value types if @required (#675)
See full diff in compare view

Updates github.com/blacktop/go-macho from 1.1.275 to 1.1.278

Commits

5085f3a feat(fixupchains): walk lazy-load dylib fixup chains to resolve GOT slots
81f020c feat(fixupchains): decode LC_LAZY_LOAD_DYLIB_INFO payload and add DCPtrKind.S...
3414a33 feat(fixupchains): add shared cache v2 and v3 pointers
374f5ce feat(macho): add lazy load dylib info command
40a3796 test(macho): add tests for FunctionVariants load command offset remapping
See full diff in compare view

Updates github.com/docker/docker-credential-helpers from 0.9.7 to 0.9.8

Release notes

Sourced from github.com/docker/docker-credential-helpers's releases.

v0.9.8

What's Changed

update to go1.26.4

wincred: inline label, and append to existing

build(deps): bump actions/checkout from 6.0.2 to 6.0.3

build(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1

build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml from 1.7.1 to 1.10.0

build(deps): bump docker/bake-action from 7.1.0 to 7.2.0

build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0

build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0

Full Changelog: docker/docker-credential-helpers@v0.9.7...v0.9.8

Commits

4f6bc8a Merge pull request #433 from thaJeztah/wincred_inline
b0820e3 Merge pull request #441 from docker/dependabot/github_actions/actions/checkou...
f84e991 Merge pull request #445 from thaJeztah/bump_go_1.26.4
65d1391 update to go1.26.4
d21de35 Merge pull request #444 from docker/dependabot/github_actions/crazy-max/dot-g...
c6ca626 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
1d2dd3d Merge pull request #440 from docker/dependabot/github_actions/docker/setup-qe...
3a54b5c Merge pull request #439 from docker/dependabot/github_actions/docker/bake-act...
b68f2ec Merge pull request #438 from docker/dependabot/github_actions/docker/setup-bu...
6107240 build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml
Additional commits viewable in compare view

Updates github.com/sigstore/cosign/v3 from 3.1.0 to 3.1.1

Release notes

Sourced from github.com/sigstore/cosign/v3's releases.

v3.1.1

What's Changed

Note: v3.1.0 was skipped due to a bug in our release pipeline. v3.1.1 is identical to v3.1.0

This release deprecates a number of flags related to verification material input for trust root material, as well as the bundle format, standardized across Sigstore SDKs, which is now the default output and input for signing and verifying respectively. You may continue to use the deprecated flags with Cosign v3.x releases. The deprecated flags will be removed in a future Cosign v4 release.

This release also updates the signing path for logging to Rekor v2. DSSE attestations will be logged as hashed entries, using the DSSE's pre-auth encoding (PAE). This should unblock developers who want to upload large signed DSSEs such as SBOMs.

Initialize PKCS11 slots Before Getting Token Info in sigstore/cosign#4803

Sign exclusively via sigstore-go in sigstore/cosign#4618

bundle create: Prevent IgnoreTlog when bundle contains SET in sigstore/cosign#4829

Require bundle output or registry upload in sigstore/cosign#4785

fix(load): pass NameOptions to name.ParseReference in sigstore/cosign#4786

fix: honor --digestAlg when hashing a blob in verify-blob-attestation in sigstore/cosign#4813

Deprecate Flags for v4: Certificates in sigstore/cosign#4822

Deprecate flags signing config in sigstore/cosign#4844

Deprecate flags bundle in sigstore/cosign#4838

Fix typo in map of verify command fields unsupported for new bundle format in sigstore/cosign#4853

Add bundle upgrade command in sigstore/cosign#4820

Deprecate Flags for v4 in sigstore/cosign#4854

fix: close file descriptor leaked in WriteSignedImageIndexImages loop in sigstore/cosign#4869

fix: use Header.Set to prevent duplicate Authorization on retry in sigstore/cosign#4870

feat(cli): add Rekor v2 flag to cosign signing-config create in sigstore/cosign#4868

Fix crash verifying timestamps when no timestamp was verified in sigstore/cosign#4881

Deprecate Flags for v4: OCI Referrers in sigstore/cosign#4804

Use the configured Target Repository more consistently in sigstore/cosign#4836

fix: check HTTP status code in LoadFileOrURL in sigstore/cosign#4877

Fix unsafe type assertion in Rego policy evaluation by in sigstore/cosign#4882

Fix Ed25519ph check to respect custom signing configs in sign-blob in sigstore/cosign#4880

Enable initialize command output in conformance in sigstore/cosign#4892

verify: return TUF errors for new bundle trusted roots in sigstore/cosign#4878

Deprecate subcommands in sigstore/cosign#4894

Remove docstring references to deprecated flags in sigstore/cosign#4910

fix(verify): Attach detached certificates to static signatures via wrapped verifier in sigstore/cosign#4737

fix(verify): copy CheckOpts inside VerifyNewBundle to fix data race in sigstore/cosign#4917

Update sigstore-go to v1.2.0 in sigstore/cosign#4914

Full Changelog: sigstore/cosign@v3.0.6...v3.1.1

Commits

7914231 Fix build for Go version 1.26.3 (#4933)
d8e992a chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 (#4929)
305817b chore(deps): bump google.golang.org/api from 0.280.0 to 0.283.0 (#4925)
09564f9 chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4926)
702cbe0 chore(deps): bump golang in the all group across 1 directory
f3885a6 chore(deps): bump github.com/go-openapi/swag/conv in the gomod group
76a5eec chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.6.0 to 2.7.0
df2a334 chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0
2620da6 chore(deps): bump github.com/open-policy-agent/opa from 1.16.2 to 1.17.1
282ff33 chore(deps): bump the actions group across 1 directory with 4 updates
See full diff in compare view

Updates github.com/sigstore/sigstore-go from 1.2.0 to 1.2.1

Release notes

Sourced from github.com/sigstore/sigstore-go's releases.

v1.2.1

What's Changed

v1.2.1 resolves GHSA-wqqc-jjcq-vfxm.

Check signature time against public key validity window in sigstore/sigstore-go#642

Full Changelog: sigstore/sigstore-go@v1.2.0...v1.2.1

Commits

4594ab4 Check signature time against public key validity window (#642)
3ad400c Bump actions/checkout from 6.0.2 to 6.0.3 (#639)
See full diff in compare view

Updates go.yaml.in/yaml/v4 from 4.0.0-rc.4 to 4.0.0-rc.5

Commits

39ad3aa Fix !!merge tag regression for yq #2677
79b4713 Forbid AI co-author attribution in commits
cc48a8d Bump the actions group with 2 updates
b6a4ef8 Revert incorrect gofmt changes
db7ba15 Bump the actions group with 2 updates
6d7a10f Bump crate-ci/typos from 1.45.1 to 1.45.2 in the actions group
dee8e44 Address must() review comments
0a9433f Fix two test issues in runDumpErrorTest
47b8c67 Fix failDump to use direct type assertion
4db0ef6 Address review comments on DumpError PR
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.52.0 to 0.53.0

Commits

45460e0 go.mod: update golang.org/x dependencies
d37c95e pkcs12: limit PBKDF iteration count to prevent CPU exhaustion
e2ffffe ssh: reject incomplete gssapi-with-mic configurations
60e158a ssh/test: isolate CLI tests from user SSH config and agent
1b77d23 ssh/knownhosts: reject lines with multiple or unknown markers
3872a2b ssh/knownhosts: verify declared key type matches decoded key
9f72ecc ssh/knownhosts: treat only ASCII space and tab as whitespace
8f405a4 ssh: validate ECDSA curve matches expected algorithm
bb41b3d ssh: improve DH GEX group selection using PreferredBits
e04e721 ssh/agent: validate ed25519 private key length in Add
Additional commits viewable in compare view

Updates golang.org/x/image from 0.41.0 to 0.42.0

Commits

3fd0b07 go.mod: update golang.org/x dependencies
28d2559 webp: avoid canvas overflow on 32-bit systems
bd05eea image: add security considerations to README
See full diff in compare view

Updates golang.org/x/mod from 0.36.0 to 0.37.0

Commits

deb1dfc go.mod: update golang.org/x dependencies
087f651 modfile: use slices.Backward
343ee60 x/mod: allow for aggressively conslidating requires
See full diff in Description has been truncated

Bumps the go-dependencies group in /tools with 33 updates: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.12` | `1.42.0` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.23` | `1.32.24` | | [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.19.22` | `1.19.23` | | [github.com/aws/aws-sdk-go-v2/feature/ec2/imds](https://github.com/aws/aws-sdk-go-v2) | `1.18.28` | `1.18.29` | | [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.22.25` | `1.22.26` | | [github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager](https://github.com/aws/aws-sdk-go-v2) | `0.2.3` | `0.2.9` | | [github.com/aws/aws-sdk-go-v2/internal/configsources](https://github.com/aws/aws-sdk-go-v2) | `1.4.28` | `1.4.29` | | [github.com/aws/aws-sdk-go-v2/internal/endpoints/v2](https://github.com/aws/aws-sdk-go-v2) | `2.7.28` | `2.7.29` | | [github.com/aws/aws-sdk-go-v2/internal/v4a](https://github.com/aws/aws-sdk-go-v2) | `1.4.29` | `1.4.30` | | [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.58.3` | `1.58.4` | | [github.com/aws/aws-sdk-go-v2/service/ecrpublic](https://github.com/aws/aws-sdk-go-v2) | `1.39.5` | `1.39.6` | | [github.com/aws/aws-sdk-go-v2/service/internal/checksum](https://github.com/aws/aws-sdk-go-v2) | `1.9.21` | `1.9.22` | | [github.com/aws/aws-sdk-go-v2/service/internal/presigned-url](https://github.com/aws/aws-sdk-go-v2) | `1.13.28` | `1.13.29` | | [github.com/aws/aws-sdk-go-v2/service/internal/s3shared](https://github.com/aws/aws-sdk-go-v2) | `1.19.28` | `1.19.29` | | [github.com/aws/aws-sdk-go-v2/service/kms](https://github.com/aws/aws-sdk-go-v2) | `1.53.3` | `1.53.4` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.103.2` | `1.103.3` | | [github.com/aws/aws-sdk-go-v2/service/signin](https://github.com/aws/aws-sdk-go-v2) | `1.1.4` | `1.1.5` | | [github.com/aws/aws-sdk-go-v2/service/sso](https://github.com/aws/aws-sdk-go-v2) | `1.31.2` | `1.31.3` | | [github.com/aws/aws-sdk-go-v2/service/ssooidc](https://github.com/aws/aws-sdk-go-v2) | `1.36.5` | `1.36.6` | | [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.43.2` | `1.43.3` | | [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.27.1` | `1.27.2` | | [github.com/blacktop/go-macho](https://github.com/blacktop/go-macho) | `1.1.275` | `1.1.278` | | [github.com/docker/docker-credential-helpers](https://github.com/docker/docker-credential-helpers) | `0.9.7` | `0.9.8` | | [github.com/sigstore/cosign/v3](https://github.com/sigstore/cosign) | `3.1.0` | `3.1.1` | | [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) | `1.2.0` | `1.2.1` | | [go.yaml.in/yaml/v4](https://github.com/yaml/go-yaml) | `4.0.0-rc.4` | `4.0.0-rc.5` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.52.0` | `0.53.0` | | [golang.org/x/image](https://github.com/golang/image) | `0.41.0` | `0.42.0` | | [golang.org/x/mod](https://github.com/golang/mod) | `0.36.0` | `0.37.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.43.0` | `0.44.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.37.0` | `0.38.0` | | [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.283.0` | `0.284.0` | | software.sslmate.com/src/go-pkcs12 | `0.7.1` | `0.7.2` | Updates `github.com/aws/aws-sdk-go-v2` from 1.41.12 to 1.42.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.41.12...v1.42.0) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.23 to 1.32.24 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.23...config/v1.32.24) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.22 to 1.19.23 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@credentials/v1.19.22...credentials/v1.19.23) Updates `github.com/aws/aws-sdk-go-v2/feature/ec2/imds` from 1.18.28 to 1.18.29 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.18.28...config/v1.18.29) Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.22.25 to 1.22.26 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@feature/s3/manager/v1.22.25...feature/s3/manager/v1.22.26) Updates `github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager` from 0.2.3 to 0.2.9 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@internal/repotools/v0.2.3...feature/s3/transfermanager/v0.2.9) Updates `github.com/aws/aws-sdk-go-v2/internal/configsources` from 1.4.28 to 1.4.29 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@internal/v4a/v1.4.28...internal/v4a/v1.4.29) Updates `github.com/aws/aws-sdk-go-v2/internal/endpoints/v2` from 2.7.28 to 2.7.29 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@internal/endpoints/v2.7.28...internal/endpoints/v2.7.29) Updates `github.com/aws/aws-sdk-go-v2/internal/v4a` from 1.4.29 to 1.4.30 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@internal/v4a/v1.4.29...internal/v4a/v1.4.30) Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.58.3 to 1.58.4 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.58.3...service/ecr/v1.58.4) Updates `github.com/aws/aws-sdk-go-v2/service/ecrpublic` from 1.39.5 to 1.39.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.39.5...v1.39.6) Updates `github.com/aws/aws-sdk-go-v2/service/internal/checksum` from 1.9.21 to 1.9.22 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@feature/cloudfront/sign/v1.9.21...feature/cloudfront/sign/v1.9.22) Updates `github.com/aws/aws-sdk-go-v2/service/internal/presigned-url` from 1.13.28 to 1.13.29 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@credentials/v1.13.28...credentials/v1.13.29) Updates `github.com/aws/aws-sdk-go-v2/service/internal/s3shared` from 1.19.28 to 1.19.29 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/internal/s3shared/v1.19.28...service/internal/s3shared/v1.19.29) Updates `github.com/aws/aws-sdk-go-v2/service/kms` from 1.53.3 to 1.53.4 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/kms/v1.53.3...service/kms/v1.53.4) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.103.2 to 1.103.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.103.2...service/s3/v1.103.3) Updates `github.com/aws/aws-sdk-go-v2/service/signin` from 1.1.4 to 1.1.5 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.1.4...config/v1.1.5) Updates `github.com/aws/aws-sdk-go-v2/service/sso` from 1.31.2 to 1.31.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.31.2...config/v1.31.3) Updates `github.com/aws/aws-sdk-go-v2/service/ssooidc` from 1.36.5 to 1.36.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.36.5...v1.36.6) Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.43.2 to 1.43.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/amp/v1.43.2...service/amp/v1.43.3) Updates `github.com/aws/smithy-go` from 1.27.1 to 1.27.2 - [Release notes](https://github.com/aws/smithy-go/releases) - [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md) - [Commits](aws/smithy-go@v1.27.1...v1.27.2) Updates `github.com/blacktop/go-macho` from 1.1.275 to 1.1.278 - [Release notes](https://github.com/blacktop/go-macho/releases) - [Commits](blacktop/go-macho@v1.1.275...v1.1.278) Updates `github.com/docker/docker-credential-helpers` from 0.9.7 to 0.9.8 - [Release notes](https://github.com/docker/docker-credential-helpers/releases) - [Commits](docker/docker-credential-helpers@v0.9.7...v0.9.8) Updates `github.com/sigstore/cosign/v3` from 3.1.0 to 3.1.1 - [Release notes](https://github.com/sigstore/cosign/releases) - [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md) - [Commits](sigstore/cosign@v3.1.0...v3.1.1) Updates `github.com/sigstore/sigstore-go` from 1.2.0 to 1.2.1 - [Release notes](https://github.com/sigstore/sigstore-go/releases) - [Commits](sigstore/sigstore-go@v1.2.0...v1.2.1) Updates `go.yaml.in/yaml/v4` from 4.0.0-rc.4 to 4.0.0-rc.5 - [Commits](yaml/go-yaml@v4.0.0-rc.4...v4.0.0-rc.5) Updates `golang.org/x/crypto` from 0.52.0 to 0.53.0 - [Commits](golang/crypto@v0.52.0...v0.53.0) Updates `golang.org/x/image` from 0.41.0 to 0.42.0 - [Commits](golang/image@v0.41.0...v0.42.0) Updates `golang.org/x/mod` from 0.36.0 to 0.37.0 - [Commits](golang/mod@v0.36.0...v0.37.0) Updates `golang.org/x/term` from 0.43.0 to 0.44.0 - [Commits](golang/term@v0.43.0...v0.44.0) Updates `golang.org/x/text` from 0.37.0 to 0.38.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.37.0...v0.38.0) Updates `google.golang.org/api` from 0.283.0 to 0.284.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.283.0...v0.284.0) Updates `software.sslmate.com/src/go-pkcs12` from 0.7.1 to 0.7.2 --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.42.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.24 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.19.23 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/feature/ec2/imds dependency-version: 1.18.29 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager dependency-version: 1.22.26 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager dependency-version: 0.2.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/internal/configsources dependency-version: 1.4.29 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 dependency-version: 2.7.29 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/internal/v4a dependency-version: 1.4.30 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr dependency-version: 1.58.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/ecrpublic dependency-version: 1.39.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/checksum dependency-version: 1.9.22 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/presigned-url dependency-version: 1.13.29 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/s3shared dependency-version: 1.19.29 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/kms dependency-version: 1.53.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.103.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/signin dependency-version: 1.1.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/sso dependency-version: 1.31.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/ssooidc dependency-version: 1.36.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/sts dependency-version: 1.43.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/smithy-go dependency-version: 1.27.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/blacktop/go-macho dependency-version: 1.1.278 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/docker/docker-credential-helpers dependency-version: 0.9.8 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/sigstore/cosign/v3 dependency-version: 3.1.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/sigstore/sigstore-go dependency-version: 1.2.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: go.yaml.in/yaml/v4 dependency-version: 4.0.0-rc.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: golang.org/x/crypto dependency-version: 0.53.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/image dependency-version: 0.42.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/mod dependency-version: 0.37.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/term dependency-version: 0.44.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/text dependency-version: 0.38.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: google.golang.org/api dependency-version: 0.284.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: software.sslmate.com/src/go-pkcs12 dependency-version: 0.7.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

…f1011e303c

dependabot Bot added the tools Indicates that a given PR updates the repo tooling. label Jun 10, 2026

dependabot Bot requested a review from a team as a code owner June 10, 2026 17:14

dependabot Bot requested a review from kpfleming June 10, 2026 17:14

dependabot Bot added the tools Indicates that a given PR updates the repo tooling. label Jun 10, 2026

github-actions Bot added the Skip-Changelog do not add a changelog entry for this change label Jun 10, 2026

kpfleming approved these changes Jun 10, 2026

View reviewed changes

Merge branch 'main' into dependabot/go_modules/tools/go-dependencies-…

33cc430

…f1011e303c

kpfleming merged commit cb65e07 into main Jun 10, 2026
14 checks passed

kpfleming deleted the dependabot/go_modules/tools/go-dependencies-f1011e303c branch June 10, 2026 19:04

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the go-dependencies group in /tools with 33 updates#1821

build(deps): bump the go-dependencies group in /tools with 33 updates#1821
kpfleming merged 2 commits into
mainfrom
dependabot/go_modules/tools/go-dependencies-f1011e303c

dependabot Bot commented on behalf of github Jun 10, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 10, 2026

Release (2026-06-05)

General Highlights

Module Highlights

Release (2026-06-04)

General Highlights

Module Highlights

Release (2026-06-02)

General Highlights

Module Highlights

Release (2026-05-27)

General Highlights

Module Highlights

Release (2026-04-23)

General Highlights

Module Highlights

v0.9.8

What's Changed

v3.1.1

What's Changed

v1.2.1

What's Changed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant