Skip to content

Bump the go-modules group across 1 directory with 2 updates - #366

Merged
paketo-bot-reviewer merged 1 commit into
mainfrom
dependabot/go_modules/dependency/retrieval/go-modules-20e18afe80
Nov 6, 2026
Merged

paketo-bot-reviewer merged 1 commit into
mainfrom
dependabot/go_modules/dependency/retrieval/go-modules-20e18afe80

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-modules group with 2 updates in the /dependency/retrieval directory: github.com/paketo-buildpacks/packit/v2 and golang.org/x/net.

Updates github.com/paketo-buildpacks/packit/v2 from 2.25.8 to 2.26.0

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.26.0

What's Changed

Full Changelog: paketo-buildpacks/packit@v2.25.8...v2.26.0

Commits
  • 80e85f8 Add DeprecatedDependencyKeys helper (#834)
  • 83653d6 Align dependency metadata with the standard format (#831)
  • 86dfc3e Bump github.com/go-jose/go-jose/v4 from 4.1.5 to 4.1.6
  • 20fbb0e Updating github-config (#832)
  • 1fc812f Updating github-config
  • fe8133c Updates go mod version to 1.27.0 (#805)
  • 836c3bc Bump modernc.org/sqlite from 1.60.1 to 1.61.0
  • 98daf90 Bump github.com/anchore/syft from 1.54.1 to 1.55.0
  • ced0a5b Bump github.com/gabriel-vasile/mimetype from 1.4.15 to 1.4.16
  • See full diff in compare view

Updates golang.org/x/net from 0.61.0 to 0.62.0

Commits
  • 3de643d html: check all ancestor namespace transitions when rendering raw text
  • 05c76ee ipv4, ipv6: avoid slice bounds panics on empty batch or BPF filter
  • dad306f ipv6: avoid out-of-bounds panic in ICMPFilter
  • 9c0565a ipv4: fix TTL control message parsing on big-endian Linux and Solaris
  • 9425eb3 internal/socket, ipv4, ipv6: avoid panic on empty control message on non-Unix
  • 4b10404 ipv4, ipv6: avoid nil parse function call in ControlMessage.Parse
  • afcf8cd ipv4: fix several missing bounds checks
  • 4af4fce html: avoid quadratic complexity when coalescing text nodes
  • 7e56200 quic: per-path connection ids
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-modules group with 2 updates in the /dependency/retrieval directory: [github.com/paketo-buildpacks/packit/v2](https://github.com/paketo-buildpacks/packit) and [golang.org/x/net](https://github.com/golang/net).


Updates `github.com/paketo-buildpacks/packit/v2` from 2.25.8 to 2.26.0
- [Release notes](https://github.com/paketo-buildpacks/packit/releases)
- [Commits](paketo-buildpacks/packit@v2.25.8...v2.26.0)

Updates `golang.org/x/net` from 0.61.0 to 0.62.0
- [Commits](golang/net@v0.61.0...v0.62.0)

---
updated-dependencies:
- dependency-name: github.com/paketo-buildpacks/packit/v2
  dependency-version: 2.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/net
  dependency-version: 0.62.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner November 6, 2026 22:14
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Nov 6, 2026
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label Nov 6, 2026
@paketo-bot-reviewer
paketo-bot-reviewer merged commit a36f8a8 into main Nov 6, 2026
10 of 11 checks passed
@paketo-bot-reviewer
paketo-bot-reviewer deleted the dependabot/go_modules/dependency/retrieval/go-modules-20e18afe80 branch November 6, 2026 22:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code semver:patch A change requiring a patch version bump

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants