Bump the go-deps group with 13 updates by dependabot[bot] · Pull Request #1691 · fluxcd/kustomize-controller

dependabot · 2026-07-01T02:05:07Z

Bumps the go-deps group with 13 updates:

Package	From	To
github.com/cyphar/filepath-securejoin	`0.6.1`	`0.7.0`
github.com/fluxcd/cli-utils	`1.2.1`	`1.2.2`
github.com/fluxcd/pkg/apis/event	`0.27.0`	`0.28.0`
github.com/fluxcd/pkg/apis/kustomize	`1.19.0`	`1.20.0`
github.com/fluxcd/pkg/apis/meta	`1.30.0`	`1.31.0`
github.com/fluxcd/pkg/auth	`0.54.0`	`0.55.0`
github.com/fluxcd/pkg/kustomize	`1.35.0`	`1.36.0`
github.com/fluxcd/pkg/runtime	`0.110.0`	`0.111.0`
github.com/fluxcd/pkg/ssa	`0.76.0`	`0.77.0`
github.com/getsops/sops/v3	`3.13.1`	`3.13.2`
github.com/google/cel-go	`0.26.1`	`0.28.1`
github.com/onsi/gomega	`1.41.0`	`1.42.1`
golang.org/x/net	`0.55.0`	`0.56.0`

Updates github.com/cyphar/filepath-securejoin from 0.6.1 to 0.7.0

Changelog

Sourced from github.com/cyphar/filepath-securejoin's changelog.

[0.7.0] - 2025-06-17

You talk of times of peace for all, and then prepare for war.

Changed

Update to cyphar.com/go-pathrs@0.2.5, which included a build-time API breakage that we needed to work around. The API of this library is unchanged by this, but users should make sure to update to v0.7.0 of filepath-securejoin if they use the libpathrs built tag and have update to libpathrs v0.2.5.

Commits

8096a95 VERSION: release v0.7.0
1324ccb merge #101 into cyphar/filepath-securejoin:main
dd8f0bb deps: bump to cyphar.com/go-pathrs@v0.2.5
c9a7725 gha: bump golangci-lint to v2.12
2e968bd Merge pull request #91 from cyphar/dependabot/github_actions/actions/download...
2879148 Merge pull request #90 from cyphar/dependabot/github_actions/actions/upload-a...
07b805b build(deps): bump actions/download-artifact from 6 to 7
8507844 build(deps): bump actions/upload-artifact from 5 to 6
daef0cf Merge pull request #89 from cyphar/dependabot/github_actions/actions/checkout-6
95f8ea4 build(deps): bump actions/checkout from 5 to 6
Additional commits viewable in compare view

Updates github.com/fluxcd/cli-utils from 1.2.1 to 1.2.2

Release notes

Sourced from github.com/fluxcd/cli-utils's releases.

v1.2.2

What's Changed

Upgrade golang.org/x/net to v0.55.0 by @matheuscscp in fluxcd/cli-utils#36

Upgrade kubernetes to 1.36.2 by @matheuscscp in fluxcd/cli-utils#37

Full Changelog: fluxcd/cli-utils@v1.2.1...v1.2.2

Commits

5620149 Merge pull request #37 from fluxcd/upgrade-k8s-36.2
1e5951f Upgrade kubernetes to 1.36.2
94614cd Merge pull request #36 from fluxcd/upgrade-deps
e7fc06f Upgrade golang.org/x/net to v0.55.0
See full diff in compare view

Updates github.com/fluxcd/pkg/apis/event from 0.27.0 to 0.28.0

Commits

00782ed Merge pull request #917 from fluxcd/test-auth-providers
3976c50 [RFC-0010] Add tests for auth providers
182841a Merge pull request #916 from fluxcd/cache-op-label
1e41450 Introduce operation label for cache event metric
aa3cde9 Merge pull request #909 from fluxcd/auth-azure
9e0e8bc [RFC-0010] Add azure auth library
7eae091 Merge pull request #908 from fluxcd/auth-gcp
9f68942 Merge pull request #907 from fluxcd/auth-aws
bb7cb58 Merge pull request #906 from fluxcd/auth-core
45fbfee [RFC-0010] Add gcp auth library
Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/apis/kustomize from 1.19.0 to 1.20.0

Commits

a5e02ce Merge pull request #1013 from fluxcd/meta-history
71c0a08 Prepare release
4aaf176 meta: Add History API for tracking reconcile runs in status
See full diff in compare view

Updates github.com/fluxcd/pkg/apis/meta from 1.30.0 to 1.31.0

Commits

b98e2b0 Merge pull request #1251 from fluxcd/release-main
2dfcb7c Prepare for release
dd6b016 Merge pull request #1253 from fluxcd/upgrade-k8s-36.2
2d00796 Upgrade kubernetes to 1.36.2
827f6c3 Merge pull request #1249 from fluxcd/upgrade-go-git-providers
be6d462 Upgrade go-git-providers and go-github
023a357 Merge pull request #1248 from fluxcd/label-2.9
7e8856d Add backport label for Flux 2.9
ae10469 Merge pull request #1246 from fluxcd/ks-always-subst
2cd36cb kustomize: add tests for empty vars with strict sub and omitted without
Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/auth from 0.54.0 to 0.55.0

Commits

6ce1a83 Merge pull request #1019 from fluxcd/update-otel
828f74f Prepare release
e7a2b15 Update otel to v1.38.0
d2f54dd Merge pull request #1018 from fluxcd/meta-artifact
9adb480 apis: Add Artifact type to meta package
7201e2c Merge pull request #1017 from fluxcd/kustomize-ignore-components
929f4b4 kustomize: Add ignoreMissingComponents option
a5e02ce Merge pull request #1013 from fluxcd/meta-history
71c0a08 Prepare release
4aaf176 meta: Add History API for tracking reconcile runs in status
See full diff in compare view

Updates github.com/fluxcd/pkg/kustomize from 1.35.0 to 1.36.0

Commits

b98e2b0 Merge pull request #1251 from fluxcd/release-main
2dfcb7c Prepare for release
dd6b016 Merge pull request #1253 from fluxcd/upgrade-k8s-36.2
2d00796 Upgrade kubernetes to 1.36.2
827f6c3 Merge pull request #1249 from fluxcd/upgrade-go-git-providers
be6d462 Upgrade go-git-providers and go-github
023a357 Merge pull request #1248 from fluxcd/label-2.9
7e8856d Add backport label for Flux 2.9
See full diff in compare view

Updates github.com/fluxcd/pkg/runtime from 0.110.0 to 0.111.0

Commits

b98e2b0 Merge pull request #1251 from fluxcd/release-main
2dfcb7c Prepare for release
dd6b016 Merge pull request #1253 from fluxcd/upgrade-k8s-36.2
2d00796 Upgrade kubernetes to 1.36.2
827f6c3 Merge pull request #1249 from fluxcd/upgrade-go-git-providers
be6d462 Upgrade go-git-providers and go-github
023a357 Merge pull request #1248 from fluxcd/label-2.9
7e8856d Add backport label for Flux 2.9
ae10469 Merge pull request #1246 from fluxcd/ks-always-subst
2cd36cb kustomize: add tests for empty vars with strict sub and omitted without
Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/ssa from 0.76.0 to 0.77.0

Commits

b98e2b0 Merge pull request #1251 from fluxcd/release-main
2dfcb7c Prepare for release
dd6b016 Merge pull request #1253 from fluxcd/upgrade-k8s-36.2
2d00796 Upgrade kubernetes to 1.36.2
827f6c3 Merge pull request #1249 from fluxcd/upgrade-go-git-providers
be6d462 Upgrade go-git-providers and go-github
023a357 Merge pull request #1248 from fluxcd/label-2.9
7e8856d Add backport label for Flux 2.9
ae10469 Merge pull request #1246 from fluxcd/ks-always-subst
2cd36cb kustomize: add tests for empty vars with strict sub and omitted without
Additional commits viewable in compare view

Updates github.com/getsops/sops/v3 from 3.13.1 to 3.13.2

Release notes

Sourced from github.com/getsops/sops/v3's releases.

v3.13.2

Installation

To install sops, download one of the pre-built binaries provided for your platform from the artifacts attached to this release.

For instance, if you are using Linux on an AMD64 architecture:
# Download the binary
curl -LO https://github.com/getsops/sops/releases/download/v3.13.2/sops-v3.13.2.linux.amd64
Move the binary in to your PATH
mv sops-v3.13.2.linux.amd64 /usr/local/bin/sops
Make the binary executable
chmod +x /usr/local/bin/sops
Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:
# Download the checksums file, certificate and signature
curl -LO https://github.com/getsops/sops/releases/download/v3.13.2/sops-v3.13.2.checksums.txt
curl -LO https://github.com/getsops/sops/releases/download/v3.13.2/sops-v3.13.2.checksums.sigstore.json
Verify the checksums file
cosign verify-blob sops-v3.13.2.checksums.txt 
--bundle sops-v3.13.2.checksums.sigstore.json 
--certificate-identity-regexp=https://github.com/getsops 
--certificate-oidc-issuer=https://token.actions.githubusercontent.com
Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature:
# Verify the binary using the checksums file
sha256sum -c sops-v3.13.2.checksums.txt --ignore-missing
Verify artifact provenance

The SLSA provenance of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an in-toto link metadata file named sops-v3.13.2.intoto.jsonl. To verify the provenance of an artifact, you can utilize the slsa-verifier tool:
# Download the metadata file
curl -LO  https://github.com/getsops/sops/releases/download/v3.13.2/sops-v3.13.2.intoto.jsonl
</tr></table> 

... (truncated)

Changelog

Sourced from github.com/getsops/sops/v3's changelog.

3.13.2

Improvements:

Dependency updates (#2185), (#2193), (#2197), (#2212), (#2218), (#2229), (#2231), (#2231).

Fix typos in documentation (#2221).

Bugfixes:

When using --user in the sops exec-file and sops exec-env subcommands, supplementary groups are now reset to the ones of the supplied user (#2194).

When using --user in the sops exec-file and sops exec-env subcommands, make sure that HOME, USER, and LOGNAME are set to the correct values for the supplied user (#2230).

AWS KMS: Handle pointers when serializing AWS context (#2219).

JSON store: Preverse large integers that fit into int64 (#2222).

INI store: Restore old behavior of double-escaping newlines in metadata, and adjust code to handle both the 3.13.0/3.13.1 single-escaped newlines as well as double-escaped newlines (#2189).

Fix panic when expecting a string for encrypted data, but when encountering something else (#2227).

Project changes:

CI dependency updates (#2184), (#2192), (#2196), (#2211), (#2228), (#2236).

Rust dependency updates for functional tests (#2191).

Build alpine container in CI (#2217).

Improve make test by unsetting all age environment variables (#2208).

Shorten lines in MarkDown files (#2206).

Commits

15e36f9 Merge pull request #2232 from felixfontein/release-3.13.2
0d49dff Add changelog for 3.13.2.
72d9f5a Bump version to 3.13.2.
8a62945 Merge pull request #2236 from getsops/dependabot/github_actions/ci-35246068e4
59d36c6 build(deps): Bump the ci group with 2 updates
ed14c0b Merge pull request #2233 from getsops/dependabot/go_modules/github.com/openco...
ff43b27 build(deps): Bump github.com/opencontainers/runc from 1.2.8 to 1.3.6
1c13f06 Merge pull request #2231 from felixfontein/deps
818f7d9 Update all dependencies.
bb4f688 Merge pull request #2206 from felixfontein/mdl2
Additional commits viewable in compare view

Updates github.com/google/cel-go from 0.26.1 to 0.28.1

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.28.1

What's Changed

fix: deleted IntToDuration overload by @alexsnaps in google/cel-go#1300

Support shorthand types in env yaml and REPL by @jnthntatum in google/cel-go#1301

Preserve operation interrupted in ContextEval error by @dims in google/cel-go#1303

Use shorthand type specifiers in env yaml files by @jnthntatum in google/cel-go#1305

Cost estimation and tracking for strings extension by @TristonianJones in google/cel-go#1307

Update repl type string for doubles by @TristonianJones in google/cel-go#1308

New Contributors

@alexsnaps made their first contribution in google/cel-go#1300

@dims made their first contribution in google/cel-go#1303

Full Changelog: cel-expr/cel-go@v0.28.0...v0.28.1

Release v0.28.0

High-Level Changes

Enhanced JSON Interoperability: New support for JSON names across the checker, AST, and runtime allows for more seamless data handling when working with JSON-native structures.

Improved Developer Tooling: Integration is now smoother thanks to new utilities for converting Go errors into cel.Issues and more descriptive, context-aware error messages.

Greater Environment Flexibility: You can now redeclare variables as constants and export parse limit options, providing finer control over how CEL environments are configured and constrained.

Native Struct Improvements: Support for mixing CEL and native values within native structs simplifies the handling of complex, hybrid data types.

🚀 Features

Add helper method to check whether a function has a singleton binding in google/cel-go#1266

Helper utility for converting a Go error into cel.Issues in google/cel-go#1267

Policy API improvements in google/cel-go#1268

CEL Test usability requirements in google/cel-go#1269

Better context-related error messages in google/cel-go#1271

Sort env.Config values where reasonable in google/cel-go#1273

Support redeclaring variables as constants in NewEnv in google/cel-go#1275

Add support for exporting parse limit options in google/cel-go#1277

Support mixing CEL values and native values in native structs in google/cel-go#1270

Add checker, AST, and type-provider support for JSON names in google/cel-go#1283

JSON field names runtime support in google/cel-go#1286

Optionally include reachable fieldpaths in prompt in google/cel-go#1285

REPL -- cel-spec pb2 and json name support google/cel-go#1294

🐞 Bug Fixes

Fix support for config-based type references in google/cel-go#1265

Check arg kinds in optional.or and .orValue impl in google/cel-go#1276

Bazel fixes for import in google/cel-go#1278

Support zero-value literals in presence test inlining google/cel-go#1280

Cache concatList.Size() to prevent O(N^2) evaluation time google/cel-go#1291

Preserve runtime error node IDs from Resolve google/cel-go#1290

... (truncated)

Commits

a82c68b Update repl type assessment for doubles (#1308)
c9d7048 Cost estimation and tracking for strings extension (#1307)
646cdc1 Use shorthand type specifiers in env yaml files (#1305)
7263793 Preserve operation interrupted in ContextEval error (#1303)
b826162 Support shorthand types in env yaml and REPL (#1301)
339269b fix: deleted IntToDuration overload (#1300)
6b8f6d6 fix: cap format string precision to prevent memory exhaustion (#1292)
d942970 Default enable identifier escaping with backticks (#1295)
7114ed2 Preserve runtime error node IDs from Resolve (#1290)
d91350b fix: cache concatList.Size() to prevent O(N^2) evaluation time (#1291)
Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.41.0 to 1.42.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.42.1

1.42.1

Bump Dependencies

v1.42.0

1.42.0

Add a set of Claude skill as a marketplace plugin

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.42.1

Bump Dependencies

1.42.0

Add a set of Claude skill as a marketplace plugin

Commits

ced6c1c v1.42.1
2beb9fb v1.42.1 (full)
006cd2c bump al lthe things
35ca084 v1.42.0
d72697b v1.42.0 (full)
1f95d86 add a set of claude skills as a marketplace plugin
See full diff in compare view

Updates golang.org/x/net from 0.55.0 to 0.56.0

Commits

9e7fdbf internal/http3: fix wrong argument being given when validating header value
b686e5f internal/http3: add gzip support to transport
8a34885 go.mod: update golang.org/x dependencies
72eaf98 dns/dnsmessage: correctly validate SVCB record parameter order
82e7868 dns/dnsmessage: avoid panic when parsing SVCB record with truncated data
b64f1fa internal/http3: add server support for "Trailer:" magic prefix
2707ee2 internal/http3: implement HTTP/3 clientConn methods
31358cc internal/http3: snapshot response headers at WriteHeader time
8ecbaa9 html: don't adjust xml:base
8ae811a html: properly handle end script tag in fragment mode
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-deps group with 13 updates: | Package | From | To | | --- | --- | --- | | [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.6.1` | `0.7.0` | | [github.com/fluxcd/cli-utils](https://github.com/fluxcd/cli-utils) | `1.2.1` | `1.2.2` | | [github.com/fluxcd/pkg/apis/event](https://github.com/fluxcd/pkg) | `0.27.0` | `0.28.0` | | [github.com/fluxcd/pkg/apis/kustomize](https://github.com/fluxcd/pkg) | `1.19.0` | `1.20.0` | | [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) | `1.30.0` | `1.31.0` | | [github.com/fluxcd/pkg/auth](https://github.com/fluxcd/pkg) | `0.54.0` | `0.55.0` | | [github.com/fluxcd/pkg/kustomize](https://github.com/fluxcd/pkg) | `1.35.0` | `1.36.0` | | [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) | `0.110.0` | `0.111.0` | | [github.com/fluxcd/pkg/ssa](https://github.com/fluxcd/pkg) | `0.76.0` | `0.77.0` | | [github.com/getsops/sops/v3](https://github.com/getsops/sops) | `3.13.1` | `3.13.2` | | [github.com/google/cel-go](https://github.com/google/cel-go) | `0.26.1` | `0.28.1` | | [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.41.0` | `1.42.1` | | [golang.org/x/net](https://github.com/golang/net) | `0.55.0` | `0.56.0` | Updates `github.com/cyphar/filepath-securejoin` from 0.6.1 to 0.7.0 - [Release notes](https://github.com/cyphar/filepath-securejoin/releases) - [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md) - [Commits](cyphar/filepath-securejoin@v0.6.1...v0.7.0) Updates `github.com/fluxcd/cli-utils` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/fluxcd/cli-utils/releases) - [Commits](fluxcd/cli-utils@v1.2.1...v1.2.2) Updates `github.com/fluxcd/pkg/apis/event` from 0.27.0 to 0.28.0 - [Commits](fluxcd/pkg@git/v0.27.0...git/v0.28.0) Updates `github.com/fluxcd/pkg/apis/kustomize` from 1.19.0 to 1.20.0 - [Commits](fluxcd/pkg@apis/meta/v1.19.0...apis/meta/v1.20.0) Updates `github.com/fluxcd/pkg/apis/meta` from 1.30.0 to 1.31.0 - [Commits](fluxcd/pkg@apis/meta/v1.30.0...apis/meta/v1.31.0) Updates `github.com/fluxcd/pkg/auth` from 0.54.0 to 0.55.0 - [Commits](fluxcd/pkg@oci/v0.54.0...oci/v0.55.0) Updates `github.com/fluxcd/pkg/kustomize` from 1.35.0 to 1.36.0 - [Commits](fluxcd/pkg@kustomize/v1.35.0...kustomize/v1.36.0) Updates `github.com/fluxcd/pkg/runtime` from 0.110.0 to 0.111.0 - [Commits](fluxcd/pkg@runtime/v0.110.0...runtime/v0.111.0) Updates `github.com/fluxcd/pkg/ssa` from 0.76.0 to 0.77.0 - [Commits](fluxcd/pkg@ssa/v0.76.0...ssa/v0.77.0) Updates `github.com/getsops/sops/v3` from 3.13.1 to 3.13.2 - [Release notes](https://github.com/getsops/sops/releases) - [Changelog](https://github.com/getsops/sops/blob/main/CHANGELOG.md) - [Commits](getsops/sops@v3.13.1...v3.13.2) Updates `github.com/google/cel-go` from 0.26.1 to 0.28.1 - [Release notes](https://github.com/google/cel-go/releases) - [Commits](cel-expr/cel-go@v0.26.1...v0.28.1) Updates `github.com/onsi/gomega` from 1.41.0 to 1.42.1 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.41.0...v1.42.1) Updates `golang.org/x/net` from 0.55.0 to 0.56.0 - [Commits](golang/net@v0.55.0...v0.56.0) --- updated-dependencies: - dependency-name: github.com/cyphar/filepath-securejoin dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/cli-utils dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/apis/event dependency-version: 0.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/apis/kustomize dependency-version: 1.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/apis/meta dependency-version: 1.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/auth dependency-version: 0.55.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/kustomize dependency-version: 1.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/runtime dependency-version: 0.111.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/ssa dependency-version: 0.77.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/getsops/sops/v3 dependency-version: 3.13.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/google/cel-go dependency-version: 0.28.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/onsi/gomega dependency-version: 1.42.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/net dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps ... Signed-off-by: dependabot[bot] <support@github.com>

agravgaard · 2026-07-04T22:44:00Z

I'd like the sops update, due to getsops/sops#2188 which makes decryption of my .ini file fail:

matheuscscp · 2026-07-04T23:02:09Z

@agravgaard Cool we can upgrade to the latest patch release of SOPS v3.13 in a separate PR and backport it to kustomize-controller v1.9, we are going to release a patch this Monday. This PR is upgrading more things that we won't ship in a patch. Can you please open a separate PR only with SOPS v3.13.2?

dependabot Bot added the dependencies Pull requests that update a dependency label Jul 1, 2026

agravgaard mentioned this pull request Jul 4, 2026

Update SOPS dependency to fix .ini file decryption #1695

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the go-deps group with 13 updates#1691

Bump the go-deps group with 13 updates#1691
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-78f7db7a88

dependabot Bot commented on behalf of github Jul 1, 2026

Uh oh!

agravgaard commented Jul 4, 2026

Uh oh!

matheuscscp commented Jul 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 1, 2026

[0.7.0] - 2025-06-17

Changed

v1.2.2

What's Changed

v3.13.2

Installation

Verify checksums file signature

Verify binary integrity

Verify artifact provenance

3.13.2

Release v0.28.1

What's Changed

New Contributors

Release v0.28.0

High-Level Changes

🚀 Features

🐞 Bug Fixes

v1.42.1

1.42.1

v1.42.0

1.42.0

1.42.1

1.42.0

Uh oh!

agravgaard commented Jul 4, 2026

Uh oh!

matheuscscp commented Jul 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants