Skip to content

chore(deps): bump github.com/google/go-containerregistry from 0.21.7 to 0.21.9 - #810

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/google/go-containerregistry-0.21.9
Open

chore(deps): bump github.com/google/go-containerregistry from 0.21.7 to 0.21.9#810
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/google/go-containerregistry-0.21.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/google/go-containerregistry from 0.21.7 to 0.21.9.

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.9

What's Changed

Full Changelog: google/go-containerregistry@v0.21.8...v0.21.9

v0.21.8

The artifacts attached to this release are missing SLSA provenance, see #2390.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.7...v0.21.8

Commits
  • 7b32099 build(deps): bump the actions group with 3 updates (#2398)
  • 2a4447d fix: remove '.' from unsafe path prefixes (#2400)
  • 43cc3e8 fix: prevent data race on scope refreshes within remote.writer (#2396)
  • 7775aab actions: pin slsa generator version following linter exception (#2395)
  • 2ea098f Bump go version to 1.26.5 (#2388)
  • ec2e586 actions: reformat ALL actions (#2386)
  • ab819b6 actions: fix unformatted action (#2385)
  • eed9a20 actions: update actions to be pinned by hash (#2384)
  • 8a97709 build(deps): bump github.com/moby/moby/client (#2380)
  • d04bf7d tarball: use correct file extension for zstd/uncompressed (#2382)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 10, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 10, 2026 01:05
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 10, 2026
@github-actions

Copy link
Copy Markdown
Contributor

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion Status Detail
Dependencies Review success View logs
Calculated Risk low github.com/google/go-containerregistry v0.21.9
Release Age 100h Released 100 hours ago
Ownership third-party External dependency
Dependency Usage 10 repos Informational only — does not affect approval

Auto-approval: ✅ Approved


Maintainer check list:

  1. Ensure the PR passed all CI tests (required status checks).
  2. Investigate failures for Major updates or any manual review requirement.
  3. Don't overlook breaking changes and changelog information.
  4. If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
  5. Be diligent. When in doubt, ask another maintainer for additional review.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approved: risk=low, review=success, ownership=third-party, release_age=100h.

@github-actions

Copy link
Copy Markdown
Contributor

CRAP Load Analysis

No Go code changes detected in this PR. No CRAP impact.

@trevor-vaughan

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/google/go-containerregistry-0.21.9 branch from 8f80d2c to e32100a Compare August 10, 2026 13:27
@github-actions

Copy link
Copy Markdown
Contributor

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion Status Detail
Dependencies Review success View logs
Calculated Risk low github.com/google/go-containerregistry v0.21.9
Release Age 113h Released 113 hours ago
Ownership third-party External dependency
Dependency Usage 9 repos Informational only — does not affect approval

Auto-approval: ✅ Approved


Maintainer check list:

  1. Ensure the PR passed all CI tests (required status checks).
  2. Investigate failures for Major updates or any manual review requirement.
  3. Don't overlook breaking changes and changelog information.
  4. If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
  5. Be diligent. When in doubt, ask another maintainer for additional review.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approved: risk=low, review=success, ownership=third-party, release_age=113h.

@trevor-vaughan

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/google/go-containerregistry-0.21.9 branch from e32100a to 3f5e115 Compare August 10, 2026 20:15
@github-actions

Copy link
Copy Markdown
Contributor

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion Status Detail
Dependencies Review success View logs
Calculated Risk low github.com/google/go-containerregistry v0.21.9
Release Age 119h Released 119 hours ago
Ownership third-party External dependency
Dependency Usage unavailable Informational only — does not affect approval

Auto-approval: ✅ Approved


Maintainer check list:

  1. Ensure the PR passed all CI tests (required status checks).
  2. Investigate failures for Major updates or any manual review requirement.
  3. Don't overlook breaking changes and changelog information.
  4. If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
  5. Be diligent. When in doubt, ask another maintainer for additional review.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approved: risk=low, review=success, ownership=third-party, release_age=119h.

Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.21.7 to 0.21.9.
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.7...v0.21.9)

---
updated-dependencies:
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/google/go-containerregistry-0.21.9 branch from 3f5e115 to 4ea1c5c Compare August 12, 2026 21:44
@github-actions

Copy link
Copy Markdown
Contributor

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion Status Detail
Dependencies Review success View logs
Calculated Risk low github.com/google/go-containerregistry v0.21.9
Release Age 169h Released 169 hours ago
Ownership third-party External dependency
Dependency Usage 9 repos Informational only — does not affect approval

Auto-approval: ✅ Approved


Maintainer check list:

  1. Ensure the PR passed all CI tests (required status checks).
  2. Investigate failures for Major updates or any manual review requirement.
  3. Don't overlook breaking changes and changelog information.
  4. If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
  5. Be diligent. When in doubt, ask another maintainer for additional review.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approved: risk=low, review=success, ownership=third-party, release_age=169h.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant