Skip to content

fix(deps): update go minor/patch updates #36

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
renovate merged 1 commit into from
Dec 14, 2025
Merged

fix(deps): update go minor/patch updates #36

renovate merged 1 commit into from
Dec 14, 2025

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 14, 2025

This PR contains the following updates:

Package Change Age Confidence
github.com/labstack/echo/v4 v4.13.4 -> v4.14.0 age confidence
helm.sh/helm/v3 v3.19.2 -> v3.19.4 age confidence
k8s.io/api v0.34.2 -> v0.34.3 age confidence
k8s.io/apiextensions-apiserver v0.34.2 -> v0.34.3 age confidence
k8s.io/apimachinery v0.34.2 -> v0.34.3 age confidence
k8s.io/cli-runtime v0.34.2 -> v0.34.3 age confidence
k8s.io/client-go v0.34.2 -> v0.34.3 age confidence

Release Notes

labstack/echo (github.com/labstack/echo/v4)

v4.14.0

Compare Source

middleware.Logger has been deprecated. For request logging, use middleware.RequestLogger or
middleware.RequestLoggerWithConfig.

middleware.RequestLogger replaces middleware.Logger, offering comparable configuration while relying on the
Go standard library’s new slog logger.

The previous default output format was JSON. The new default follows the standard slog logger settings.
To continue emitting request logs in JSON, configure slog accordingly:

slog.SetDefault(slog.New(slog.NewJSONHandler(os.Stdout, nil)))
e.Use(middleware.RequestLogger())

Security

Enhancements

helm/helm (helm.sh/helm/v3)

v3.19.4: Helm v3.19.4

Compare Source

Helm v3.19.4 is a security fix for a Go CVE in the previous tag. This patch release rebuilds the Helm v3.19.3 release with the latest Go toolchain, to fix the Go CVE. Users are encouraged to upgrade.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • [v3 backport] fix: Use latest patch release of Go in releases #​31637

Installation and Upgrading

Download Helm v3.19.4. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.19.5 and 4.0.4 are the next patch releases and will be on January 14, 2026
  • 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

  • Use latest patch release of Go in releases 7cfb6e4 (Matt Farina)
  • chore(deps): bump github.com/gofrs/flock from 0.12.1 to 0.13.0 59c951f (dependabot[bot])
  • chore(deps): bump github.com/cyphar/filepath-securejoin d45f3f1 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 d459544 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.36.0 to 0.37.0 becd387 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates edb1579 (dependabot[bot])

v3.19.3

Compare Source

kubernetes/api (k8s.io/api)

v0.34.3

Compare Source

kubernetes/apiextensions-apiserver (k8s.io/apiextensions-apiserver)

v0.34.3

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.34.3

Compare Source

kubernetes/cli-runtime (k8s.io/cli-runtime)

v0.34.3

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.34.3

Compare Source

Configuration

📅 Schedule: Branch creation - "before 3am on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Contributor Author

renovate bot commented Dec 14, 2025

ℹ️ Artifact update notice

File name: example/complete/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 16 additional dependencies were updated

Details:

Package Change
github.com/containerd/containerd v1.7.28 -> v1.7.29
github.com/cyphar/filepath-securejoin v0.4.1 -> v0.6.0
github.com/spf13/pflag v1.0.9 -> v1.0.10
golang.org/x/crypto v0.41.0 -> v0.43.0
golang.org/x/net v0.43.0 -> v0.45.0
golang.org/x/sync v0.16.0 -> v0.17.0
golang.org/x/sys v0.35.0 -> v0.37.0
golang.org/x/term v0.34.0 -> v0.36.0
golang.org/x/text v0.28.0 -> v0.30.0
helm.sh/helm/v3 v3.19.0 -> v3.19.2
k8s.io/apiextensions-apiserver v0.34.1 -> v0.34.2
k8s.io/apimachinery v0.34.2 -> v0.34.3
k8s.io/apiserver v0.34.1 -> v0.34.2
k8s.io/cli-runtime v0.34.1 -> v0.34.2
k8s.io/client-go v0.34.1 -> v0.34.2
k8s.io/component-base v0.34.1 -> v0.34.2
File name: example/kubernetes/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 9 additional dependencies were updated

Details:

Package Change
github.com/spf13/pflag v1.0.9 -> v1.0.10
golang.org/x/crypto v0.41.0 -> v0.43.0
golang.org/x/net v0.43.0 -> v0.45.0
golang.org/x/sys v0.35.0 -> v0.37.0
golang.org/x/term v0.34.0 -> v0.36.0
golang.org/x/text v0.28.0 -> v0.30.0
k8s.io/apiextensions-apiserver v0.34.1 -> v0.34.2
k8s.io/apimachinery v0.34.2 -> v0.34.3
k8s.io/client-go v0.34.1 -> v0.34.2
File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 13 additional dependencies were updated

Details:

Package Change
github.com/cyphar/filepath-securejoin v0.6.0 -> v0.6.1
golang.org/x/crypto v0.43.0 -> v0.46.0
golang.org/x/mod v0.28.0 -> v0.30.0
golang.org/x/net v0.45.0 -> v0.48.0
golang.org/x/sync v0.17.0 -> v0.19.0
golang.org/x/sys v0.37.0 -> v0.39.0
golang.org/x/term v0.36.0 -> v0.38.0
golang.org/x/text v0.30.0 -> v0.32.0
golang.org/x/time v0.12.0 -> v0.14.0
golang.org/x/tools v0.37.0 -> v0.39.0
k8s.io/apiserver v0.34.2 -> v0.34.3
k8s.io/component-base v0.34.2 -> v0.34.3
k8s.io/kubectl v0.34.0 -> v0.34.2

@renovate renovate bot merged commit 92b8ac6 into main Dec 14, 2025
5 checks passed
@renovate renovate bot deleted the renovate/go-minorpatch-updates branch December 14, 2025 05:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant