Skip to content

chore(deps): Bump the backend group across 1 directory with 9 updates#670

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/backend-5778edfc58
Open

chore(deps): Bump the backend group across 1 directory with 9 updates#670
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/backend-5778edfc58

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 13, 2026 •
edited
Loading

Bumps the backend group with 8 updates in the / directory:

Package From To
github.com/containerd/containerd/api 1.10.0 1.11.1
github.com/containerd/ttrpc 1.2.7 1.2.8
github.com/jackpal/gateway 1.1.1 1.2.0
github.com/onsi/ginkgo/v2 2.28.1 2.29.0
github.com/urfave/cli/v3 3.8.0 3.9.0
golang.org/x/sys 0.43.0 0.44.0
google.golang.org/grpc 1.79.3 1.81.1
k8s.io/cri-api 0.35.4 0.36.1

Updates github.com/containerd/containerd/api from 1.10.0 to 1.11.1

Release notes

Sourced from github.com/containerd/containerd/api's releases.

containerd API 1.11.1

Welcome to the api/v1.11.1 release of containerd!

The first patch release for the containerd 1.11 API includes a fix in the task endpoints for non-runc shims.

Highlights

  • Fix sandbox task API endpoints for non-runc runtimes (#13422)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Derek McGowan
  • Maksym Pavlenko
  • Samuel Karp

Changes

  • Prepare release notes for api/v1.11.1 (#13444)
    • da7aef299 Prepare release notes for api/v1.11.1
  • Fix sandbox task API endpoints for non-runc runtimes (#13422)
    • e44f5f9ec protos: include task API address to CreateTaskRequest

Dependency Changes

This release has no dependency changes

Previous release can be found at api/v1.11.0

containerd API 1.11.0

Welcome to the api/v1.11.0 release of containerd!

The 12th release for the containerd 1.x API aligns with the containerd 2.3 release.

Highlights

  • Add transfer types for container filesystem copy (#13165)
  • Update sandbox API to include spec field (#12840)

Image Distribution

  • Add os.features support for EROFS native container images (#13091)

... (truncated)

Commits
  • f822a91 Merge pull request #13444 from dmcgowan/prepare-api-v1.11.1
  • da7aef2 Prepare release notes for api/v1.11.1
  • a50a704 Merge pull request #13422 from k8s-infra-cherrypick-robot/cherry-pick-13360-t...
  • 5282d4e Wire task address and version fields
  • e44f5f9 protos: include task API address to CreateTaskRequest
  • 85f22f7 Merge pull request #13409 from k8s-infra-cherrypick-robot/cherry-pick-13327-t...
  • 4d80a31 seccomp: Block AF_ALG in default socket policy
  • 2ed0d97 seccomp: Document socket rule scope and socketcall limitation
  • 2315484 Merge pull request #13390 from k8s-infra-cherrypick-robot/cherry-pick-13363-t...
  • 1ad3402 Merge pull request #13394 from k8s-infra-cherrypick-robot/cherry-pick-13389-t...
  • Additional commits viewable in compare view

Updates github.com/containerd/ttrpc from 1.2.7 to 1.2.8

Release notes

Sourced from github.com/containerd/ttrpc's releases.

v1.2.8

What's Changed

Full Changelog: containerd/ttrpc@v1.2.7...v1.2.8

Commits
  • 22392c2 Merge pull request #222 from containerd/dependabot/github_actions/actions/set...
  • 9db9fcc Merge pull request #223 from dmcgowan/fix-stream-failure
  • d5b5a20 Add missing continue after stream failure
  • 6a90ebb build(deps): bump actions/setup-go from 6.2.0 to 6.3.0
  • eeb849b Merge pull request #218 from containerd/dependabot/github_actions/actions/set...
  • 3156bf8 Merge pull request #219 from containerd/dependabot/github_actions/actions/che...
  • 385b968 build(deps): bump actions/checkout from 6.0.1 to 6.0.2
  • 292893a build(deps): bump actions/setup-go from 6.1.0 to 6.2.0
  • 9638fba Merge pull request #214 from dmcgowan/update-go-version
  • 590622b Run CI against latest stable version of Go and previous
  • Additional commits viewable in compare view

Updates github.com/jackpal/gateway from 1.1.1 to 1.2.0

Commits
  • edcb35d Release v1.2.0: IPv6 support and deduplication
  • 6fbfe90 Implement best-effort IPv6 support for Solaris/illumos
  • d5114f6 Update README with IPv6 API documentation and platform support table
  • 6ca5ebd Implement Windows IPv6 interface discovery
  • 413ba28 Add IPv6 support for Linux and Windows
  • 366a5be Add IPv6 gateway discovery support (issue #47)
  • 1493912 Prepare v1.1.2 release
  • bbb0bdb Merge remote-tracking branch 'origin/master' into gainskills/master
  • cef2560 Fix typo 'Baiscally' in gateway_parsers.go
  • 93230bd Fix metric parsing in localized versions (#51)
  • Additional commits viewable in compare view

Updates github.com/onsi/ginkgo/v2 from 2.28.1 to 2.29.0

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.29.0

2.29.0

GinkgoHelperGo makes it easier to write test helpers that need to run in goroutines. Specifically, it makes managing the failure state and capturing failure panics correctly straightforward.

ginkgo outline now includes entries defined in DescribeTableSubtree

v2.28.3

2.28.3

Maintenance

Bump all dependencies

v2.28.2

2.28.2

  • Add ArtifactDir() to support Go 1.26 testing.TB interface [f3a36b6]
  • Implement shell completion [94151c8]
  • Add asan CLI option mirroring msan implementation [4d21dbb]
  • Bump uri from 1.0.3 to 1.0.4 in /docs (#1630) [c102161]
  • fix aspect ratio [9619647]
  • update logos [5779304]
Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.29.0

GinkgoHelperGo makes it easier to write test helpers that need to run in goroutines. Specifically, it makes managing the failure state and capturing failure panics correctly straightforward.

ginkgo outline now includes entries defined in DescribeTableSubtree

2.28.3

Maintenance

Bump all dependencies

2.28.2

  • Add ArtifactDir() to support Go 1.26 testing.TB interface [f3a36b6]
  • Implement shell completion [94151c8]
  • Add asan CLI option mirroring msan implementation [4d21dbb]
  • Bump uri from 1.0.3 to 1.0.4 in /docs (#1630) [c102161]
  • fix aspect ratio [9619647]
  • update logos [5779304]
Commits
  • 04b5bcb v2.29.0
  • 124232a docs: GinkgoHelperGo
  • ad9cee8 feat: GinkgoHelperGo, with integration tests
  • 9e56a0a chore: refactor devcontainer for better maintenance
  • 3d235a9 chore: ignore internal/tmp_*/ integration suite temporary dirs
  • 782666a feat: devcontainer configuration with local pkgsite and GH pages
  • 009dd04 Support DescribeTableSubtree in ginkgo outline
  • 5de9c15 v2.28.3
  • 7e2fa19 bump dependencies
  • 1a81912 v2.28.2
  • Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.39.1 to 1.40.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.40.0

1.40.0

We're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega. It is a limitation of the go mod toolchain that test subdependencies of your project's direct dependencies get pulled in as indirect dependencies. In the case of Gomega, this ends up pulling in all of Ginkgo into your go.mod even if you are only using Gomega (Gomega uses Ginkgo for its own tests).

Going forward, releases will strip out all tests, tidy up the go.mod and then push this stripped down version to a new master-lite branch. These stripped-down versions will receive the vx.y.z git tag and will be picked up by the go toolchain.

Please open an issue if this new release process causes unexpected changes for your projects.

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.40.0

We're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega. It is a limitation of the go mod toolchain that test subdependencies of your project's direct dependencies get pulled in as indirect dependencies. In the case of Gomega, this ends up pulling in all of Ginkgo into your go.mod even if you are only using Gomega (Gomega uses Ginkgo for its own tests).

Going forward, releases will strip out all tests, tidy up the go.mod and then push this stripped down version to a new master-lite branch. These stripped-down versions will receive the vx.y.z git tag and will be picked up by the go toolchain.

Please open an issue if this new release process causes unexpected changes for your projects.

Commits

Updates github.com/urfave/cli/v3 from 3.8.0 to 3.9.0

Release notes

Sourced from github.com/urfave/cli/v3's releases.

v3.9.0

What's Changed

New Contributors

Full Changelog: urfave/cli@v3.8.0...v3.9.0

Commits
  • b5aa710 Merge pull request #2321 from wucm667/fix/bool-inverse-alias-help
  • 2f662c8 docs: update testdata/godoc-v3.x.txt for BoolWithInverseFlag alias support
  • b6aec8e docs: regenerate godoc-current.txt for BoolWithInverseFlag alias support
  • c3a86f7 fix: show BoolWithInverseFlag aliases in help text
  • f2cd020 Merge pull request #2319 from barry3406/fix/help-subcommand-flag-parsing
  • 5af9500 fix: parse flags for help subcommand (#2271)
  • b79d768 Merge pull request #2316 from morozov/fix-completion-double-dash
  • 2925d6f Merge pull request #2317 from barry3406/fix/completion-shebang
  • 65406c0 Merge pull request #2308 from gabelluardo/refactor-bash
  • eb4cfc3 fix: drop shebang from bash completion template
  • Additional commits viewable in compare view

Updates golang.org/x/sys from 0.43.0 to 0.44.0

Commits
  • fb1facd windows: avoid uint16 overflow in NewNTUnicodeString
  • 94ad893 windows: add GetIfTable2Ex, GetIpInterface{Entry,Table}, GetUnicastIpAddressT...
  • 54fe89f cpu: use IsProcessorFeaturePresent to calculate ARM64 on windows
  • df7d5d7 unix: automatically remove container created by mkall.sh
  • 68a4a8e unix: avoid nil pointer dereference in Utime
  • 690c91f unix: add CPUSetDynamic for systems with more than 1024 CPUs
  • See full diff in compare view

Updates google.golang.org/grpc from 1.79.3 to 1.81.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.1

Security

  • xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)

Bug Fixes

  • otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)

Release 1.81.0

Behavior Changes

  • balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#8808)

Dependencies

  • Minimum supported Go version is now 1.25. (#8969)

Bug Fixes

  • xds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (#8956)
  • transport: Send a RST_STREAM when receiving an END_STREAM when the stream is not already half-closed. (#8832)
  • xds: Fix ADS resource name validation to prevent a panic. (#8970)

New Features

  • grpc/stats: Add support for custom labels in per-call metrics (gRFC A108). (#9008)
  • xds: Add support for Server Name Indication (SNI) and SAN validation (gRFC A101). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_SNI=true environment variable. (#9016)
  • xds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (gRFC A85). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true. (#9005)
  • xds: Add metrics to track xDS client connectivity and cached resource state (gRFC A78). (#8807)
  • stats/otel: Enhance grpc.subchannel.disconnections metric by adding disconnection reason to the grpc.disconnect_error label (gRFC A94). This provides granular insights into why subchannels are closing. (#8973)
  • mem: Add mem.Buffer.Slice() API to slice the buffer like a slice. (#8977)

Performance Improvements

  • alts: Pool read buffers to lower memory utilization when sockets are unreadable. (#8964)
  • transport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false and report any issues. (#9032)

Release 1.80.0

Behavior Changes

  • balancer: log a warning if a balancer is registered with uppercase letters, as balancer names should be lowercase. In a future release, balancer names will be treated as case-insensitive; see #5288 for details. (#8837)
  • xds: update resource error handling and re-resolution logic (#8907)
    • Re-resolve all LOGICAL_DNS clusters simultaneously when re-resolution is requested.
    • Fail all in-flight RPCs immediately upon receipt of listener or route resource errors, instead of allowing them to complete.

Bug Fixes

... (truncated)

Commits

Updates k8s.io/cri-api from 0.35.4 to 0.36.1

Commits
  • b569fd7 Merge remote-tracking branch 'origin/master' into release-1.36
  • 3e383c8 update go.opentelemetry.io/otel to v1.41.0
  • 861ac7b Merge pull request #135828 from HirazawaUi/5607-alpha-2-stage
  • 556afdc Merge pull request #137906 from aramase/aramase/c/grpc_v1.79.0
  • 7bc5753 update google.golang.org/grpc to v1.79.3
  • 8d77fc8 Merge pull request #136987 from bitoku/kep-5825-cri
  • c71d95a Add alpha 2 phase implementation for UserNamespacesHostNetworkSupport
  • 2461a67 cri-api: Add streaming RPCs for CRI list operations
  • bde76f6 Merge pull request #137248 from SergeyKanzhelev/propagate-context-cri-client
  • 520d075 Merge pull request #137574 from SergeyKanzhelev/revertImageID
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 13, 2026
@netlify
Copy link
Copy Markdown

netlify Bot commented May 13, 2026 •
edited
Loading

✅ Deploy Preview for urunc canceled.

Name Link
🔨 Latest commit 79d6c97
🔍 Latest deploy log https://app.netlify.com/projects/urunc/deploys/6a0ed5845e8e4a00088e1f8d

@dependabot dependabot Bot force-pushed the dependabot/go_modules/backend-5778edfc58 branch from 455490e to fc11596 Compare May 19, 2026 07:57
@dependabot
chore(deps): Bump the backend group across 1 directory with 9 updates
79d6c97 
Bumps the backend group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/containerd/containerd/api](https://github.com/containerd/containerd) | `1.10.0` | `1.11.1` |
| [github.com/containerd/ttrpc](https://github.com/containerd/ttrpc) | `1.2.7` | `1.2.8` |
| [github.com/jackpal/gateway](https://github.com/jackpal/gateway) | `1.1.1` | `1.2.0` |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.28.1` | `2.29.0` |
| [github.com/urfave/cli/v3](https://github.com/urfave/cli) | `3.8.0` | `3.9.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.43.0` | `0.44.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.79.3` | `1.81.1` |
| [k8s.io/cri-api](https://github.com/kubernetes/cri-api) | `0.35.4` | `0.36.1` |



Updates `github.com/containerd/containerd/api` from 1.10.0 to 1.11.1
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@api/v1.10.0...api/v1.11.1)

Updates `github.com/containerd/ttrpc` from 1.2.7 to 1.2.8
- [Release notes](https://github.com/containerd/ttrpc/releases)
- [Commits](containerd/ttrpc@v1.2.7...v1.2.8)

Updates `github.com/jackpal/gateway` from 1.1.1 to 1.2.0
- [Release notes](https://github.com/jackpal/gateway/releases)
- [Commits](jackpal/gateway@v1.1.1...v1.2.0)

Updates `github.com/onsi/ginkgo/v2` from 2.28.1 to 2.29.0
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.28.1...v2.29.0)

Updates `github.com/onsi/gomega` from 1.39.1 to 1.40.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.39.1...v1.40.0)

Updates `github.com/urfave/cli/v3` from 3.8.0 to 3.9.0
- [Release notes](https://github.com/urfave/cli/releases)
- [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md)
- [Commits](urfave/cli@v3.8.0...v3.9.0)

Updates `golang.org/x/sys` from 0.43.0 to 0.44.0
- [Commits](golang/sys@v0.43.0...v0.44.0)

Updates `google.golang.org/grpc` from 1.79.3 to 1.81.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.81.1)

Updates `k8s.io/cri-api` from 0.35.4 to 0.36.1
- [Commits](kubernetes/cri-api@v0.35.4...v0.36.1)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd/api
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: github.com/containerd/ttrpc
  dependency-version: 1.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: github.com/jackpal/gateway
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.28.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: github.com/urfave/cli/v3
  dependency-version: 3.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: golang.org/x/sys
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: k8s.io/cri-api
  dependency-version: 0.36.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/backend-5778edfc58 branch from fc11596 to 79d6c97 Compare May 21, 2026 09:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants