build(deps): Bump the go group with 8 updates #1854

dependabot · 2025-05-12T10:12:36Z

Bumps the go group with 8 updates:

Package	From	To
github.com/aws/aws-sdk-go-v2/feature/s3/manager	`1.17.74`	`1.17.75`
golang.org/x/crypto	`0.37.0`	`0.38.0`
golang.org/x/net	`0.39.0`	`0.40.0`
golang.org/x/oauth2	`0.29.0`	`0.30.0`
golang.org/x/sys	`0.32.0`	`0.33.0`
golang.org/x/term	`0.31.0`	`0.32.0`
google.golang.org/api	`0.230.0`	`0.232.0`
google.golang.org/genproto/googleapis/rpc	`0.0.0-20250425173222-7b384671a197`	`0.0.0-20250428153025-10db94c68c34`

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.74 to 1.17.75

Commits

f8c3e9d Release 2025-05-05
4d4e6e7 Regenerated Clients
6325f58 Update endpoints model
3e588f5 Update API model
ca45f9b Remove credential config of GetBucketRegion by default (#3081)
d3d6370 Release 2025-05-02
964ce5f Regenerated Clients
f1cdae3 Update endpoints model
62e56ed Update API model
7453dc4 Release 2025-05-01
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.37.0 to 0.38.0

Commits

aae6e61 go.mod: update golang.org/x dependencies
9c1aa6a ssh/test: reset the random source before capturing a recording
8819902 ssh/test: enable Diffie-Hellman key exchange algorithms
3f311e4 acme: return error from pre-authorization when unsupported
1f7c62c ssh/test: skip unsupported tests on js/wasm
a5f8048 acme/autocert: use standard functions to pick the cache directory
958cde8 Revert "chacha20: add loong64 SIMD implementation"
51f005c Revert "salsa20: add loong64 SIMD implementation"
7c35866 Revert "argon2: add loong64 SIMD implementation"
0091fc8 Revert "blake2s: add loong64 SIMD implementation"
Additional commits viewable in compare view

Updates golang.org/x/net from 0.39.0 to 0.40.0

Commits

7d6e62a go.mod: update golang.org/x dependencies
ea0c1d9 internal/timeseries: use built-in max/min to simplify the code
3e7a445 quic: skip packet numbers for optimistic ack defense
3f563d3 quic: use an enum for sentPacket state
a3b6e77 quic: don't re-lose packets when discarding keys
22500a6 quic: decode packet numbers >255 in tests
dd0b200 quic: remove go1.21 build constraint
See full diff in compare view

Updates golang.org/x/oauth2 from 0.29.0 to 0.30.0

Commits

cf14319 oauth2: fix expiration time window check
32d34ef internal: include clientID in auth style cache key
2d34e30 oauth2: replace a magic number with AuthStyleUnknown
696f7b3 all: modernize with doc links and any
471209b oauth2: drop dependency on go-cmp
6968da2 oauth2: sync Token.ExpiresIn from internal Token
d2c4e0a oauth2: context instead of golang.org/x/net/context in doc
883dc3c endpoints: add various endpoints from stale CLs
1c06e87 all: make use of oauth.Token.ExpiresIn
See full diff in compare view

Updates golang.org/x/sys from 0.32.0 to 0.33.0

Commits

3d9a6b8 windows: add WSADuplicateSocket
c0a9559 cpu: add crypto extensions detection for riscv64
8e9e046 windows: add virtual key codes and console input consts
7138967 windows: fix slicing of NTUnicodeString values
6a85559 windows: fix dangling pointers in (*SECURITY_DESCRIPTOR).ToAbsolute
See full diff in compare view

Updates golang.org/x/term from 0.31.0 to 0.32.0

Commits

2ec7864 go.mod: update golang.org/x dependencies
a809085 term: support pluggable history
See full diff in compare view

Updates google.golang.org/api from 0.230.0 to 0.232.0

Release notes

Sourced from google.golang.org/api's releases.

v0.232.0

0.232.0 (2025-05-05)

Features

all: Auto-regenerate discovery clients (#3132) (f041909)

all: Auto-regenerate discovery clients (#3134) (f5cbc80)

all: Auto-regenerate discovery clients (#3135) (25f8d4a)

all: Auto-regenerate discovery clients (#3136) (fceda0c)

v0.231.0

0.231.0 (2025-04-29)

Features

all: Auto-regenerate discovery clients (#3122) (47cbba6)

all: Auto-regenerate discovery clients (#3124) (677b602)

all: Auto-regenerate discovery clients (#3125) (8ccf1f0)

all: Auto-regenerate discovery clients (#3126) (4059351)

all: Auto-regenerate discovery clients (#3127) (ae18b22)

all: Auto-regenerate discovery clients (#3129) (c33e0d1)

Changelog

Sourced from google.golang.org/api's changelog.

0.232.0 (2025-05-05)

Features

all: Auto-regenerate discovery clients (#3132) (f041909)

all: Auto-regenerate discovery clients (#3134) (f5cbc80)

all: Auto-regenerate discovery clients (#3135) (25f8d4a)

all: Auto-regenerate discovery clients (#3136) (fceda0c)

0.231.0 (2025-04-29)

Features

all: Auto-regenerate discovery clients (#3122) (47cbba6)

all: Auto-regenerate discovery clients (#3124) (677b602)

all: Auto-regenerate discovery clients (#3125) (8ccf1f0)

all: Auto-regenerate discovery clients (#3126) (4059351)

all: Auto-regenerate discovery clients (#3127) (ae18b22)

all: Auto-regenerate discovery clients (#3129) (c33e0d1)

Commits

939a2db chore(main): release 0.232.0 (#3133)
412315c chore(all): update all (#3137)
fceda0c feat(all): auto-regenerate discovery clients (#3136)
25f8d4a feat(all): auto-regenerate discovery clients (#3135)
f5cbc80 feat(all): auto-regenerate discovery clients (#3134)
f041909 feat(all): auto-regenerate discovery clients (#3132)
70d3b4f chore(main): release 0.231.0 (#3123)
c33e0d1 feat(all): auto-regenerate discovery clients (#3129)
673da13 chore(all): update all (#3128)
ae18b22 feat(all): auto-regenerate discovery clients (#3127)
Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20250425173222-7b384671a197 to 0.0.0-20250428153025-10db94c68c34

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 8 updates: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.17.74` | `1.17.75` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.37.0` | `0.38.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.39.0` | `0.40.0` | | [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.29.0` | `0.30.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.32.0` | `0.33.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.31.0` | `0.32.0` | | [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.230.0` | `0.232.0` | | [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20250425173222-7b384671a197` | `0.0.0-20250428153025-10db94c68c34` | Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.17.74 to 1.17.75 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@feature/s3/manager/v1.17.74...feature/s3/manager/v1.17.75) Updates `golang.org/x/crypto` from 0.37.0 to 0.38.0 - [Commits](golang/crypto@v0.37.0...v0.38.0) Updates `golang.org/x/net` from 0.39.0 to 0.40.0 - [Commits](golang/net@v0.39.0...v0.40.0) Updates `golang.org/x/oauth2` from 0.29.0 to 0.30.0 - [Commits](golang/oauth2@v0.29.0...v0.30.0) Updates `golang.org/x/sys` from 0.32.0 to 0.33.0 - [Commits](golang/sys@v0.32.0...v0.33.0) Updates `golang.org/x/term` from 0.31.0 to 0.32.0 - [Commits](golang/term@v0.31.0...v0.32.0) Updates `google.golang.org/api` from 0.230.0 to 0.232.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.230.0...v0.232.0) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250425173222-7b384671a197 to 0.0.0-20250428153025-10db94c68c34 - [Commits](https://github.com/googleapis/go-genproto/commits) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager dependency-version: 1.17.75 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: golang.org/x/crypto dependency-version: 0.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/net dependency-version: 0.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/oauth2 dependency-version: 0.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/sys dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/term dependency-version: 0.32.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/api dependency-version: 0.232.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20250428153025-10db94c68c34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go ... Signed-off-by: dependabot[bot] <[email protected]>

This MR contains the following updates: | Package | Update | Change | |---|---|---| | [getsops/sops](https://github.com/getsops/sops) | minor | `v3.10.2` -> `v3.11.0` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>getsops/sops (getsops/sops)</summary> ### [`v3.11.0`](https://github.com/getsops/sops/releases/tag/v3.11.0) [Compare Source](getsops/sops@v3.10.2...v3.11.0) #### Installation To install `sops`, download one of the pre-built binaries provided for your platform from the artifacts attached to this release. For instance, if you are using Linux on an AMD64 architecture: ```shell ### Download the binary curl -LO https://github.com/getsops/sops/releases/download/v3.11.0/sops-v3.11.0.linux.amd64 ### Move the binary in to your PATH mv sops-v3.11.0.linux.amd64 /usr/local/bin/sops ### Make the binary executable chmod +x /usr/local/bin/sops ``` ##### Verify checksums file signature The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands: ```shell ### Download the checksums file, certificate and signature curl -LO https://github.com/getsops/sops/releases/download/v3.11.0/sops-v3.11.0.checksums.txt curl -LO https://github.com/getsops/sops/releases/download/v3.11.0/sops-v3.11.0.checksums.pem curl -LO https://github.com/getsops/sops/releases/download/v3.11.0/sops-v3.11.0.checksums.sig ### Verify the checksums file cosign verify-blob sops-v3.11.0.checksums.txt \ --certificate sops-v3.11.0.checksums.pem \ --signature sops-v3.11.0.checksums.sig \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com ``` ##### Verify binary integrity To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature: ```shell ### Verify the binary using the checksums file sha256sum -c sops-v3.11.0.checksums.txt --ignore-missing ``` ##### Verify artifact provenance The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an [in-toto](https://in-toto.io/) link metadata file named `sops-v3.11.0.intoto.jsonl`. To verify the provenance of an artifact, you can utilize the [`slsa-verifier`](https://github.com/slsa-framework/slsa-verifier#artifacts) tool: ```shell ### Download the metadata file curl -LO https://github.com/getsops/sops/releases/download/v3.11.0/sops-v3.11.0.intoto.jsonl ### Verify the provenance of the artifact slsa-verifier verify-artifact <artifact> \ --provenance-path sops-v3.11.0.intoto.jsonl \ --source-uri github.com/getsops/sops \ --source-tag v3.11.0 ``` #### Container Images The `sops` binaries are also available as container images, based on Debian (slim) and Alpine Linux. The Debian-based container images include any dependencies which may be required to make use of certain key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud KMS. The Alpine-based container images are smaller in size, but do not include these dependencies. These container images are available for the following architectures: `linux/amd64` and `linux/arm64`. ##### GitHub Container Registry - `ghcr.io/getsops/sops:v3.11.0` - `ghcr.io/getsops/sops:v3.11.0-alpine` ##### Quay.io - `quay.io/getsops/sops:v3.11.0` - `quay.io/getsops/sops:v3.11.0-alpine` ##### Verify container image signature The container images are signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of an image, run the following command: ```shell cosign verify ghcr.io/getsops/sops:v3.11.0 \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ -o text ``` ##### Verify container image provenance The container images include [SLSA provenance](https://slsa.dev/provenance/v0.2) attestations. For more information around the verification of this, please refer to the [`slsa-verifier` documentation](https://github.com/slsa-framework/slsa-verifier#containers). #### Software Bill of Materials The Software Bill of Materials (SBOM) for each binary is accessible within the artifacts enclosed with this release. It is presented as an [SPDX](https://spdx.dev/) JSON file, formatted as `<binary>.spdx.sbom.json`. #### What's Changed - build(deps): Bump the go group with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1845](getsops/sops#1845) - build(deps): Bump the go group with 5 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1850](getsops/sops#1850) - build(deps): Bump the ci group with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1849](getsops/sops#1849) - build(deps): Bump the go group with 8 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1854](getsops/sops#1854) - build(deps): Bump tempfile from 3.19.1 to 3.20.0 in /functional-tests in the rust group by [@dependabot](https://github.com/dependabot)\[bot] in [#1853](getsops/sops#1853) - build(deps): Bump actions/setup-go from 5.4.0 to 5.5.0 in the ci group by [@dependabot](https://github.com/dependabot)\[bot] in [#1852](getsops/sops#1852) - use bullet points for structure by [@md42](https://github.com/md42) in [#1844](getsops/sops#1844) - Introduce EncryptContext and DecryptContext for AWS, Azure, GCP, PGP and HashiCorp Vault by [@matheuscscp](https://github.com/matheuscscp) in [#1848](getsops/sops#1848) - build(deps): Bump the go group with 5 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1856](getsops/sops#1856) - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1857](getsops/sops#1857) - Allow injecting custom HTTP client for AWS, Azure, GCP and HashiCorp Vault by [@matheuscscp](https://github.com/matheuscscp) in [#1838](getsops/sops#1838) - Update authors in main.go by [@jvehent](https://github.com/jvehent) in [#1860](getsops/sops#1860) - build(deps): Bump the go group with 7 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1861](getsops/sops#1861) - Remove unmatched '\`' from README.rst by [@wasv](https://github.com/wasv) in [#1863](getsops/sops#1863) - build(deps): Bump the go group with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1867](getsops/sops#1867) - build(deps): Bump alpine from 3.21 to 3.22 in /.release in the docker group by [@dependabot](https://github.com/dependabot)\[bot] in [#1866](getsops/sops#1866) - build(deps): Bump the go group with 12 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1870](getsops/sops#1870) - build(deps): Bump github/codeql-action from 3.28.18 to 3.28.19 in the ci group by [@dependabot](https://github.com/dependabot)\[bot] in [#1869](getsops/sops#1869) - build(deps): Bump github.com/cloudflare/circl from 1.6.0 to 1.6.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#1871](getsops/sops#1871) - build(deps): Bump the go group with 12 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1872](getsops/sops#1872) - build(deps): Bump the ci group across 1 directory with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1874](getsops/sops#1874) - build(deps): Bump the go group with 8 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1878](getsops/sops#1878) - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1879](getsops/sops#1879) - build(deps): Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1882](getsops/sops#1882) - Fix Typo in README.rst by [@inverted-tree](https://github.com/inverted-tree) in [#1881](getsops/sops#1881) - build(deps): Bump the go group with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1884](getsops/sops#1884) - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1883](getsops/sops#1883) - Correct Windows path to store keys.txt by [@EshemMimi](https://github.com/EshemMimi) in [#1885](getsops/sops#1885) - build(deps): Bump the go group with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1888](getsops/sops#1888) - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1889](getsops/sops#1889) - build(deps): Bump the go group with 6 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1893](getsops/sops#1893) - Add "--value-file" option to "sops set \[...]" by [@bjornfor](https://github.com/bjornfor) in [#1876](getsops/sops#1876) - Document XDG\_CONFIG\_HOME support on mac by [@fredericrous](https://github.com/fredericrous) in [#1897](getsops/sops#1897) - Fix Shamir threshold encoding for INI and ENV files by [@felixfontein](https://github.com/felixfontein) in [#1899](getsops/sops#1899) - build(deps): Bump the go group with 12 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1908](getsops/sops#1908) - build(deps): Bump serde\_json from 1.0.140 to 1.0.142 in /functional-tests in the rust group by [@dependabot](https://github.com/dependabot)\[bot] in [#1907](getsops/sops#1907) - build(deps): Bump the ci group with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1905](getsops/sops#1905) - Fix docs: mention all stores instead of just YAML, JSON, and BINARY by [@felixfontein](https://github.com/felixfontein) in [#1895](getsops/sops#1895) - Ensure temporary file for editing is only read-writable by owner by [@felixfontein](https://github.com/felixfontein) in [#1903](getsops/sops#1903) - Add `--value-stdin` option to `sops set` by [@felixfontein](https://github.com/felixfontein) in [#1894](getsops/sops#1894) - Collect age identity loading errors and only report if decryption failed by [@felixfontein](https://github.com/felixfontein) in [#1898](getsops/sops#1898) - add completion script. Resolves [#1868](getsops/sops#1868) by [@longxiucai](https://github.com/longxiucai) in [#1892](getsops/sops#1892) - Resolves [#1864](getsops/sops#1864). Adds Native List as an option for configuring keys. by [@lucqui](https://github.com/lucqui) in [#1880](getsops/sops#1880) - Fix example.yaml file by [@felixfontein](https://github.com/felixfontein) in [#1909](getsops/sops#1909) - build(deps): Bump the go group with 15 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1912](getsops/sops#1912) - build(deps): Bump the ci group with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1911](getsops/sops#1911) - build(deps): Bump the go group with 9 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1917](getsops/sops#1917) - build(deps): Bump the ci group with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1916](getsops/sops#1916) - build(deps): Bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1920](getsops/sops#1920) - build(deps): Bump the go group with 14 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1923](getsops/sops#1923) - build(deps): Bump the rust group in /functional-tests with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1921](getsops/sops#1921) - build(deps): Bump github/codeql-action from 3.29.9 to 3.29.11 in the ci group by [@dependabot](https://github.com/dependabot)\[bot] in [#1922](getsops/sops#1922) - Docs: remove paragraph on GPG/PGP keyservers by [@felixfontein](https://github.com/felixfontein) in [#1928](getsops/sops#1928) - Allow to configure --enable-local-keyservice and --keyservice through env variables by [@felixfontein](https://github.com/felixfontein) in [#1930](getsops/sops#1930) - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1937](getsops/sops#1937) - fix: correct destination validation logic to detect all conflicts by [@bruce-szalwinski-he](https://github.com/bruce-szalwinski-he) in [#1936](getsops/sops#1936) - Switch from deprecated gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by [@sylr](https://github.com/sylr) in [#1934](getsops/sops#1934) - INI: fix converting integers to strings; improve float and time.Time formatting by [@felixfontein](https://github.com/felixfontein) in [#1929](getsops/sops#1929) - feat(azkv): Skipping key-version will get latest key by [@daogilvie](https://github.com/daogilvie) in [#1919](getsops/sops#1919) - Fix keyservice client for unix domain sockets by [@matheuscscp](https://github.com/matheuscscp) in [#1910](getsops/sops#1910) - README: fix argument order by [@felixfontein](https://github.com/felixfontein) in [#1940](getsops/sops#1940) - Allow non-complex non-string values in dotenv and exec-env by [@billy4479](https://github.com/billy4479) in [#1933](getsops/sops#1933) - Fix mention of macOS XDG\_CONFIG\_HOME fallback by [@felixfontein](https://github.com/felixfontein) in [#1944](getsops/sops#1944) - Improve age identity loading by [@felixfontein](https://github.com/felixfontein) in [#1931](getsops/sops#1931) - build(deps): Bump the rust group in /functional-tests with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1948](getsops/sops#1948) - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1949](getsops/sops#1949) - build(deps): Bump the rust group in /functional-tests with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1954](getsops/sops#1954) - build(deps): Bump anchore/sbom-action from 0.20.5 to 0.20.6 in the ci group by [@dependabot](https://github.com/dependabot)\[bot] in [#1955](getsops/sops#1955) - Start documenting the configuration file format by [@felixfontein](https://github.com/felixfontein) in [#1946](getsops/sops#1946) - CI: Build with Go 1.24 and 1.25, release with 1.25 by [@felixfontein](https://github.com/felixfontein) in [#1945](getsops/sops#1945) - build(deps): Bump the go group across 1 directory with 21 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1956](getsops/sops#1956) - When encrypting, load the config only once by [@felixfontein](https://github.com/felixfontein) in [#1939](getsops/sops#1939) - build(deps): Bump the go group across 1 directory with 10 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#1958](getsops/sops#1958) - Ignore encryption selection options for binary store (and warn when they are used) by [@felixfontein](https://github.com/felixfontein) in [#1927](getsops/sops#1927) - AZKV: Also allow to omit version for AZKV keys specified in key groups by [@felixfontein](https://github.com/felixfontein) in [#1947](getsops/sops#1947) - Complex values in dotenv, and exec-env: do not print sensitive value in error message by [@felixfontein](https://github.com/felixfontein) in [#1959](getsops/sops#1959) - Release 3.11.0 by [@felixfontein](https://github.com/felixfontein) in [#1960](getsops/sops#1960) #### New Contributors - [@md42](https://github.com/md42) made their first contribution in [#1844](getsops/sops#1844) - [@wasv](https://github.com/wasv) made their first contribution in [#1863](getsops/sops#1863) - [@inverted-tree](https://github.com/inverted-tree) made their first contribution in [#1881](getsops/sops#1881) - [@EshemMimi](https://github.com/EshemMimi) made their first contribution in [#1885](getsops/sops#1885) - [@bjornfor](https://github.com/bjornfor) made their first contribution in [#1876](getsops/sops#1876) - [@fredericrous](https://github.com/fredericrous) made their first contribution in [#1897](getsops/sops#1897) - [@longxiucai](https://github.com/longxiucai) made their first contribution in [#1892](getsops/sops#1892) - [@lucqui](https://github.com/lucqui) made their first contribution in [#1880](getsops/sops#1880) - [@bruce-szalwinski-he](https://github.com/bruce-szalwinski-he) made their first contribution in [#1936](getsops/sops#1936) - [@sylr](https://github.com/sylr) made their first contribution in [#1934](getsops/sops#1934) - [@daogilvie](https://github.com/daogilvie) made their first contribution in [#1919](getsops/sops#1919) - [@billy4479](https://github.com/billy4479) made their first contribution in [#1933](getsops/sops#1933) **Full Changelog**: <getsops/sops@v3.10.2...v3.11.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

dependabot bot added the dependencies Pull requests that update a dependency file label May 12, 2025

felixfontein approved these changes May 12, 2025

View reviewed changes

felixfontein merged commit 8122c07 into main May 12, 2025
15 checks passed

felixfontein deleted the dependabot/go_modules/go-cc1b804f2e branch May 12, 2025 15:47

BrewTestBot mentioned this pull request Sep 28, 2025

sops 3.11.0 Homebrew/homebrew-core#246102

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): Bump the go group with 8 updates #1854

build(deps): Bump the go group with 8 updates #1854

Uh oh!

dependabot bot commented on behalf of github May 12, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

build(deps): Bump the go group with 8 updates #1854

build(deps): Bump the go group with 8 updates #1854

Uh oh!

Conversation

dependabot bot commented on behalf of github May 12, 2025

v0.232.0

0.232.0 (2025-05-05)

Features

v0.231.0

0.231.0 (2025-04-29)

Features

0.232.0 (2025-05-05)

Features

0.231.0 (2025-04-29)

Features

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants