Skip to content

Combine open Dependabot updates into one PR - #778

Merged
David Gamero (davidgamero) merged 13 commits into
Azure:mainfrom
bosesuneha:combined-dependabot-updates
Aug 5, 2026
Merged

Combine open Dependabot updates into one PR#778
David Gamero (davidgamero) merged 13 commits into
Azure:mainfrom
bosesuneha:combined-dependabot-updates

Conversation

@bosesuneha

@bosesunehaSuneha Bose (bosesuneha) commented Jul 31, 2026

Copy link
Copy Markdown
Member

Combined Dependabot updates

This PR combines all currently open Dependabot PRs into a single PR to reduce CI churn and merge overhead. It supersedes:

Notable changes

  • Go module directive bumped to go 1.26.0 (from the go-dependencies group update). CI workflow go-version and the Dockerfile base image are updated to 1.26 to match.
  • go.sum reconciled via go mod tidy after resolving overlapping version bumps (kept the highest requested version in each case).

Verification

  • go build ./... — passes
  • go vet ./... — passes
  • go test ./... — passes

Once merged, PRs #770, #771, #773, #776, and #777 can be closed.

dependabotBotand others added 13 commits July 16, 2026 12:55
@dependabot
Bump the go-dependencies group across 1 directory with 11 updates
0b0f917
Bumps the go-dependencies group with 6 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.21.1` | `1.22.0` |
| [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.13.1` | `1.14.0` |
| [github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v3](https://github.com/Azure/azure-sdk-for-go) | `3.0.0-beta.2` | `3.0.0-beta.3` |
| [github.com/open-policy-agent/gatekeeper/v3](https://github.com/open-policy-agent/gatekeeper) | `3.22.2` | `3.23.0` |
| [github.com/yannh/kubeconform](https://github.com/yannh/kubeconform) | `0.7.0` | `0.8.0` |
| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.21.0` | `3.21.2` |
Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.21.1 to 1.22.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.21.1...sdk/azcore/v1.22.0)
Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.13.1 to 1.14.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azidentity/v1.13.1...sdk/azcore/v1.14.0)
Updates `github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v3` from 3.0.0-beta.2 to 3.0.0-beta.3
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/resourcemanager/cosmos/armcosmos/v3.0.0-beta.2...sdk/resourcemanager/cosmos/armcosmos/v3.0.0-beta.3)
Updates `github.com/open-policy-agent/gatekeeper/v3` from 3.22.2 to 3.23.0
- [Release notes](https://github.com/open-policy-agent/gatekeeper/releases)
- [Changelog](https://github.com/open-policy-agent/gatekeeper/blob/master/docs/RELEASE.md)
- [Commits](open-policy-agent/gatekeeper@v3.22.2...v3.23.0)
Updates `github.com/yannh/kubeconform` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/yannh/kubeconform/releases)
- [Commits](yannh/kubeconform@v0.7.0...v0.8.0)
Updates `golang.org/x/mod` from 0.34.0 to 0.36.0
- [Commits](golang/mod@v0.34.0...v0.36.0)
Updates `helm.sh/helm/v3` from 3.21.0 to 3.21.2
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.21.0...v3.21.2)
Updates `k8s.io/api` from 0.35.5 to 0.36.2
- [Commits](kubernetes/api@v0.35.5...v0.36.2)
Updates `k8s.io/apimachinery` from 0.35.5 to 0.36.2
- [Commits](kubernetes/apimachinery@v0.35.5...v0.36.2)
Updates `k8s.io/cli-runtime` from 0.35.5 to 0.36.2
- [Commits](kubernetes/cli-runtime@v0.35.5...v0.36.2)
Updates `k8s.io/client-go` from 0.35.5 to 0.36.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.35.5...v0.36.2)
---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
dependency-version: 1.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
dependency-version: 1.14.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v3
dependency-version: 3.0.0-beta.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-dependencies
- dependency-name: github.com/open-policy-agent/gatekeeper/v3
dependency-version: 3.23.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: github.com/yannh/kubeconform
dependency-version: 0.8.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: golang.org/x/mod
dependency-version: 0.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: helm.sh/helm/v3
dependency-version: 3.21.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-dependencies
- dependency-name: k8s.io/api
dependency-version: 0.36.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: k8s.io/apimachinery
dependency-version: 0.36.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: k8s.io/cli-runtime
dependency-version: 0.36.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: k8s.io/client-go
dependency-version: 0.36.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump golang.org/x/crypto from 0.51.0 to 0.52.0
825a857
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.51.0 to 0.52.0.
- [Commits](golang/crypto@v0.51.0...v0.52.0)
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.52.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
@bosesuneha
Merge branch 'main' into dependabot/go_modules/go-dependencies-b95966…
28a4490
…d8a9
@dependabot
Bump google.golang.org/grpc from 1.80.0 to 1.82.1
303a2d8
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.80.0 to 1.82.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.80.0...v1.82.1)
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.82.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump github.com/google/cel-go from 0.26.1 to 0.29.0
c57f1c2
Bumps [github.com/google/cel-go](https://github.com/google/cel-go) from 0.26.1 to 0.29.0.
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](cel-expr/cel-go@v0.26.1...v0.29.0)
---
updated-dependencies:
- dependency-name: github.com/google/cel-go
dependency-version: 0.29.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump the github-actions group across 1 directory with 7 updates
ce679a3
Bumps the github-actions group with 7 updates in the /.github/workflows directory:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` |
| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.0` | `4.37.3` |
| [github/codeql-action/autobuild](https://github.com/github/codeql-action) | `4.37.0` | `4.37.3` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.0` | `4.37.3` |
| [actions/setup-go](https://github.com/actions/setup-go) | `6.5.0` | `7.0.0` |
| [Azure/k8s-deploy](https://github.com/azure/k8s-deploy) | `6` | `7` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.1` | `3.0.2` |
Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v7...v7.0.1)
Updates `github/codeql-action/init` from 4.37.0 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@99df26d...e4fba86)
Updates `github/codeql-action/autobuild` from 4.37.0 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@99df26d...e4fba86)
Updates `github/codeql-action/analyze` from 4.37.0 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@99df26d...e4fba86)
Updates `actions/setup-go` from 6.5.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@924ae3a...b7ad1da)
Updates `Azure/k8s-deploy` from 6 to 7
- [Release notes](https://github.com/azure/k8s-deploy/releases)
- [Changelog](https://github.com/Azure/k8s-deploy/blob/main/CHANGELOG.md)
- [Commits](Azure/k8s-deploy@v6...v7)
Updates `softprops/action-gh-release` from 3.0.1 to 3.0.2
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@v3.0.1...v3.0.2)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: github/codeql-action/init
dependency-version: 4.37.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: github/codeql-action/autobuild
dependency-version: 4.37.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
dependency-version: 4.37.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: actions/setup-go
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: Azure/k8s-deploy
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: softprops/action-gh-release
dependency-version: 3.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
@bosesuneha
Merge remote-tracking branch 'origin/dependabot/go_modules/go-depende…
3cbb3e0
…ncies-b95966d8a9' into combined-dependabot-updates
@bosesuneha
Merge remote-tracking branch 'origin/dependabot/go_modules/golang.org…
ef6ef0d
…/x/crypto-0.52.0' into combined-dependabot-updates
# Conflicts:
#	go.mod
#	go.sum
@bosesuneha
Merge remote-tracking branch 'origin/dependabot/go_modules/google.gol…
ed8cbd9
…ang.org/grpc-1.82.1' into combined-dependabot-updates
# Conflicts:
#	go.mod
#	go.sum
@bosesuneha
Merge remote-tracking branch 'origin/dependabot/go_modules/github.com…
27f353e
…/google/cel-go-0.29.0' into combined-dependabot-updates
# Conflicts:
#	go.mod
#	go.sum
@bosesuneha
Merge remote-tracking branch 'origin/dependabot/github_actions/dot-gi…
13dbcbb
…thub/workflows/github-actions-da9060ba92' into combined-dependabot-updates
@bosesuneha
Bump Go to 1.26 in CI workflows and Dockerfile for updated dependencies
b84a0a8
@bosesuneha
Keep Azure/k8s-deploy at v6 (v7 rejects baked manifests outside works…
4948183
…pace)
@davidgamero
David Gamero (davidgamero) merged commit 6e19ff6 into Azure:mainAug 5, 2026
145 checks passed
@davidgameroDavid Gamero (davidgamero) mentioned this pull request Aug 5, 2026
Merged
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@davidgameroDavid Gamero (davidgamero)davidgamero approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@bosesuneha@davidgamero