Skip to content

chore(deps): bump the go-modules-root group across 1 directory with 20 updates - #1071

Draft
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-root-7119ff70f7
Draft

chore(deps): bump the go-modules-root group across 1 directory with 20 updates#1071
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-root-7119ff70f7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-modules-root group with 20 updates in the / directory:

Package From To
github.com/containerd/containerd/v2 2.2.5 2.4.1
github.com/containerd/platforms 1.0.0-rc.4 1.0.0-rc.5
github.com/docker/cli 29.4.1+incompatible 29.8.2+incompatible
github.com/docker/docker-credential-helpers 0.9.6 0.9.9
github.com/gpustack/gguf-parser-go 0.24.0 0.26.4
github.com/jaypipes/ghw 0.24.0 0.26.0
github.com/mattn/go-runewidth 0.0.23 0.0.30
github.com/mattn/go-shellwords 1.0.13 1.0.16
github.com/moby/moby/api 1.54.2 1.56.1
github.com/moby/moby/client 0.4.1 0.6.1
github.com/olekukonko/tablewriter 1.1.4 1.1.5
github.com/prometheus/client_model 0.6.2 0.6.3
github.com/prometheus/common 0.67.5 0.70.1
github.com/stretchr/testify 1.11.1 1.12.1
github.com/testcontainers/testcontainers-go 0.42.0 0.44.0
github.com/testcontainers/testcontainers-go/modules/registry 0.42.0 0.44.0
go.opentelemetry.io/otel 1.44.0 1.46.0
golang.org/x/sync 0.22.0 0.23.0
golang.org/x/sys 0.47.0 0.48.0
golang.org/x/term 0.45.0 0.46.0

Updates github.com/containerd/containerd/v2 from 2.2.5 to 2.4.1

Release notes

Sourced from github.com/containerd/containerd/v2's releases.

containerd 2.4.1

Welcome to the v2.4.1 release of containerd!

The first patch release for containerd 2.4 contains various fixes and updates including a security patch.

Security Updates

Highlights

Container Runtime Interface (CRI)

  • Fix bug where failed container start cleanup leaked tasks and prevented container removal (#14223)
  • Fix bug where container creation failed when SELinux relabeling was unsupported by the filesystem (#14212)

Image Distribution

  • Fix content upload failures when retrying fetch content after reaching EOF (#14197)

Snapshotters

  • Apply hardening to filter ID-mapping labels from image annotations during unpack (#14200)

ctr development tool

  • Fix bug where arguments following "-" were dropped in "ctr images export" (#14219)
  • Fix bug where container command arguments were parsed as flags in "ctr run", "ctr containers create", "ctr tasks exec", and "containerd oci-hook" (#14215)
  • Fix bug where comma-separated flag values were incorrectly split in ctr subcommands (#14188)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Samuel Karp
  • Aysha Afrah Ziya
  • Chris Henzie
  • CrazyMax
  • Maksym Pavlenko
  • Nan Liu
  • Sebastiaan van Stijn

Changes

... (truncated)

Changelog

Sourced from github.com/containerd/containerd/v2's changelog.

Versioning and Release

This document details the versioning and release plan for containerd. Stability is a top goal for this project, and we hope that this document and the processes it entails will help to achieve that. It covers the release process, versioning numbering, backporting, API stability and support horizons.

If you rely on containerd, it would be good to spend time understanding the areas of the API that are and are not supported and how they impact your project in the future.

This document will be considered a living document. Supported timelines, backport targets and API stability guarantees will be updated here as they change.

If there is something that you require or this document leaves out, please reach out by filing an issue.

Releases

Releases of containerd will be versioned using dotted triples, similar to Semantic Version. For the purposes of this document, we will refer to the respective components of this triple as <major>.<minor>.<patch>. The version number may have additional information, such as alpha, beta and release candidate qualifications. Such releases will be considered "pre-releases".

Major and Minor Releases

Major and minor releases of containerd will be made from main. Releases of containerd will be marked with GPG signed tags and announced at https://github.com/containerd/containerd/releases. The tag will be of the format v<major>.<minor>.<patch> and should be made with the command git tag -s v<major>.<minor>.<patch>.

After a minor release, a branch will be created, with the format release/<major>.<minor> from the minor tag. All further patch releases will be done from that branch. For example, once we release v1.0.0, a branch release/1.0 will be created from that tag. All future patch releases will be done against that branch.

Release Cadence

Since containerd v2.3 in April 2026, minor releases are provided on a time basis with a cadence of 4 months. New minor releases are scheduled for April, August, and December of each year. This cadence is synchronized with the Kubernetes release schedule to ensure that new features in containerd can be smoothly adopted by new Kubernetes releases.

The maintainers will maintain a roadmap and milestones for each release, however,

... (truncated)

Commits
  • f255103 Merge pull request #14225 from samuelkarp/prepare-release-2.4.1
  • 9f7f70f Prepare release notes for v2.4.1
  • 98e88f2 Merge commit from fork
  • ddf7128 Merge pull request #14223 from k8s-infra-cherrypick-robot/cherry-pick-14218-t...
  • 9e8abe0 cri: fix process leak when start cleanup fails to delete task
  • a7ddb10 Merge pull request #14219 from k8s-infra-cherrypick-robot/cherry-pick-14217-t...
  • acbdd57 ctr: preserve args after "-" in images export
  • 8949dc8 Merge pull request #14215 from k8s-infra-cherrypick-robot/cherry-pick-14209-t...
  • a2e9a51 cmd/containerd: stop flag parsing on oci-hook
  • 2d0e534 ctr: stop flag parsing before container command
  • Additional commits viewable in compare view

Updates github.com/containerd/platforms from 1.0.0-rc.4 to 1.0.0-rc.5

Release notes

Sourced from github.com/containerd/platforms's releases.

v1.0.0-rc.5

What's Changed

New Contributors

Full Changelog: containerd/platforms@v1.0.0-rc.4...v1.0.0-rc.5

Commits

Updates github.com/docker/cli from 29.4.1+incompatible to 29.8.2+incompatible

Commits
  • 7fc2dff Merge pull request #7325 from docker/dependabot/github_actions/codecov/codeco...
  • ca5a266 build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1
  • 39f182c Merge pull request #7323 from docker/dependabot/github_actions/docker-actions...
  • 0684ae0 Merge pull request #7311 from docker/dependabot/github_actions/codeql-actions...
  • b7dc94c build(deps): bump the codeql-actions group across 1 directory with 3 updates
  • 12566dd build(deps): bump the docker-actions group with 3 updates
  • 4167943 Merge pull request #7320 from docker/dependabot/github_actions/docker-actions...
  • 9dcf8af Merge pull request #7322 from thaJeztah/bump_version
  • 6fdced8 update version to 29.8.2
  • 0a563b1 build(deps): bump docker/docker-agent-action/.github/workflows/review-pr.yml
  • Additional commits viewable in compare view

Updates github.com/docker/docker-credential-helpers from 0.9.6 to 0.9.9

Release notes

Sourced from github.com/docker/docker-credential-helpers's releases.

v0.9.9

What's Changed

  • update to go1.26.7
  • Dockerfile: update to debian trixie, libgcc-12-dev, ubuntu 24.04 (noble)
  • README: remove Go Report Card badge
  • build(deps): bump docker/* actions
  • build(deps): bump actions/checkout from 6.0.3 to 7.0.1
  • build(deps): bump actions/setup-go from 6.4.0 to 7.0.0
  • build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
  • build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml from 1.10.0 to 1.11.0
  • build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.2

Full Changelog: docker/docker-credential-helpers@v0.9.8...v0.9.9

v0.9.8

What's Changed

  • update to go1.26.4
  • wincred: inline label, and append to existing
  • build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • build(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1
  • build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml from 1.7.1 to 1.10.0
  • build(deps): bump docker/bake-action from 7.1.0 to 7.2.0
  • build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0
  • build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0

Full Changelog: docker/docker-credential-helpers@v0.9.7...v0.9.8

v0.9.7

What's Changed

  • update to go1.26.3
  • ci: update zizmore action to v1.7.1

Full Changelog: docker/docker-credential-helpers@v0.9.6...v0.9.7

Commits
  • 59e7cc0 Merge pull request #463 from thaJeztah/bump_go
  • f1c2632 update to go1.26.7
  • 594c023 Merge pull request #462 from thaJeztah/bump_go
  • 3668361 update to go1.26.6
  • 6f4c9aa Merge pull request #457 from docker/dependabot/github_actions/actions/setup-g...
  • 019be48 Merge pull request #460 from docker/dependabot/github_actions/crazy-max/dot-g...
  • 3a74a75 Merge pull request #461 from docker/dependabot/github_actions/docker-actions-...
  • ec72e5a Merge pull request #458 from docker/dependabot/github_actions/actions/checkou...
  • 57e6dc0 build(deps): bump docker/setup-buildx-action
  • 0679cbb build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml
  • Additional commits viewable in compare view

Updates github.com/gpustack/gguf-parser-go from 0.24.0 to 0.26.4

Commits
  • 637cd9a fix: keep letter-suffix quants out of the fine-tune field
  • 6816487 ci(code-review): drop trigger gating and concurrency now owned by the reusabl...
  • c3fed26 ci(code-review): rename the review trigger keyword
  • 5dfd4ff ci: wire review sampling and thinking-clear org variables
  • 7d3b827 fix: Check the type of every projector key the architecture reader reads
  • 71c933d fix: Size the compute buffer as llama.cpp allocates it, and bound its inputs ...
  • 15ed8a1 ci: source code review reasoning effort from org variable
  • 047375d ci: stop selecting test files as review items
  • fabf4c4 ci: drop serena tool steering from review rules
  • d42f430 ci: source code review thinking mode from org variable
  • Additional commits viewable in compare view

Updates github.com/jaypipes/ghw from 0.24.0 to 0.26.0

Release notes

Sourced from github.com/jaypipes/ghw's releases.

v0.26.0

What's Changed

New Contributors

Full Changelog: jaypipes/ghw@v0.25.0...v0.26.0

v0.25.0

What's Changed

New Contributors

Full Changelog: jaypipes/ghw@v0.24.0...v0.25.0

Commits
  • a3cacae Merge pull request #477 from krisiasty/fix/sort-processors-by-id
  • 72c0c98 Merge pull request #475 from mdevils/fix/darwin-ioreg-ambiguous-match
  • 63dc409 fix(cpu/linux): sort processors by ID
  • 69ce5aa fix(block/darwin): don't fail on ambiguous ioreg node matches
  • 28bab22 Merge pull request #474 from mdevils/fix/darwin-block-tools-and-nvme
  • 43a4cbd fix(block/darwin): detect NVMe controller on Apple Silicon
  • 72554a2 Merge pull request #472 from bunlongheng/fix/untar-path-traversal
  • 8642dec fix(snapshot): contain tar entry paths within destination directory
  • 063cf88 Merge pull request #473 from mdevils/feat/support-macos-product
  • d5c38ed feat: support macOS in product
  • Additional commits viewable in compare view

Updates github.com/mattn/go-runewidth from 0.0.23 to 0.0.30

Commits
  • 14205cc Merge pull request #110 from mattn/truncate-rune-fast-path
  • 67f0b8d Take the rune fast path in the Truncate functions too
  • a42811d Merge pull request #111 from mattn/wrap-invalid-utf8
  • 1156ade Keep strings that are not valid UTF-8 on the segmenter
  • 06120a9 Merge pull request #109 from mattn/skip-segmentation-without-joiners
  • 21388ad Skip grapheme segmentation for text that cannot form clusters
  • 6c7068f Generate a table of runes that can join a grapheme cluster
  • 2793dc5 Merge pull request #108 from youdie006/fix-wrap-grapheme-cluster
  • fd7c07f Add Wrap benchmarks for the ASCII, CJK and emoji paths
  • f5f115c Inline the ASCII width rule in the Wrap fast path
  • Additional commits viewable in compare view

Updates github.com/mattn/go-shellwords from 1.0.13 to 1.0.16

Release notes

Sourced from github.com/mattn/go-shellwords's releases.

v1.0.15

What's Changed

New Contributors

Full Changelog: mattn/go-shellwords@v1.0.14...v1.0.15

Commits
  • 4e5c2e5 Merge pull request #81 from sjh9714/codex/20260929-79-quoted-env
  • 189c244 Add more tests for environment expansion during scanning
  • b8dd580 Expand environment variables while scanning the line
  • c58b245 Preserve literal characters when joining expanded parts
  • f72ab52 Preserve quote boundaries during environment expansion
  • c64be43 Merge pull request #80 from mattn/fix-subst-redirect-prefix
  • 6ab5f20 Don't treat command substitution output as a redirect descriptor
  • c97b1b2 Merge pull request #75 from hdimer/fix-quoted-fd-redirect-prefix
  • ad7694d Don't treat quoted digits as a redirect descriptor
  • f40666a Merge pull request #77 from vitalivo/fix/comments-after-empty-quotes
  • Additional commits viewable in compare view

Updates github.com/moby/moby/api from 1.54.2 to 1.56.1

Release notes

Sourced from github.com/moby/moby/api's releases.

api/v1.56.1

1.56.1

Changelog

api/v1.56.0

1.56.0

Changelog

  • GET /containers/json now supports an annotation filter to filter containers by annotation, either by key (annotation=key) or by key and value (annotation="key=value"), similar to the existing label filter. moby/moby#53538
  • POST /containers/create now supports HostConfig.Umask to set the initial umask for a Unix container. When set, the daemon includes the value in the OCI process configuration for the container's entrypoint, exec processes, and healthchecks. When omitted, the runtime's default behavior applies.moby/moby#53463
  • api/docs: sync API docs v1.25 - v1.55. moby/moby#53246
  • api/swagger: Align Healthcheck name with Go struct. moby/moby#53567
  • api/types/plugin: Deprecated plugin.Privileges sorting methods in favor of slices.SortFunc. moby/moby#53511
  • api/types/plugin: fix Privileges Swap implementation. moby/moby#53510
  • api: Bump to 1.56. moby/moby#53425
  • api: document Task.NetworksAttachments in the swagger definition. moby/moby#53082
  • api: remove gotest.tools from tests. moby/moby#53535
  • api: swagger: Use int64 for build query params. moby/moby#53520
  • api: use blackbox testing. moby/moby#53525
  • Fix API reference documenting an unsupported names filter for GET /configs. moby/moby#53447

api/v1.55.0

1.55.0

Changelog

  • POST /containers/{id}/update now supports per-device blkio resource settingss. moby/moby#52651
  • The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636
  • docs: clarify swarm join required fields. moby/moby#52763

api/v1.55.0-rc.1

1.55.0-rc.1

Changelog

  • POST /containers/{id}/update now supports per-device blkio resource settingss. moby/moby#52651
  • The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636
  • docs: clarify swarm join required fields. moby/moby#52763
Commits
  • 14ebc60 Merge pull request #53830 from tonistiigi/update-buildkit-v0.34.0-rc1
  • 8eded0e Merge pull request #53671 from thaJeztah/add_WithHTTPRequestHook
  • c4e39af Merge pull request #53596 from vvoland/c8d-refactor-imgload
  • b8a569e client: add WithHTTPRequestHook option
  • 0fed273 Merge pull request #53803 from thaJeztah/etchosts_cleanups
  • 80c72a3 Merge pull request #53831 from corhere/fix-dnsproxy-servfail-test
  • 1cfa161 daemon/containerd: Split image loading into import and unpack steps
  • e7272aa Merge pull request #53606 from flostellbrink/fix/swagger-yaml-indentation
  • 357096e libnetwork/etchosts: keep file open when updating hosts
  • 012b2ef libnetwork/etchosts: propagate file close errors
  • Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.4.1 to 0.6.1

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.6.1

0.6.1

Changelog

client/v0.6.0

0.6.0

Changelog

client/v0.5.1

0.5.1

Changelog

  • client/pkg/jsonmessage: Display: fix godoc link. moby/moby#53070
  • client: ServiceCreate, ServiceUpdate: fix duplicate and 'unkown' platforms. moby/moby#53012
  • client: ServiceInspect, ContainerCommit: omit optional query args if not set. moby/moby#53010
  • golangci-lint: enable perfsprint linter. moby/moby#53016

client/0.5.0

0.5.0

Changelog

  • The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636

client/v0.5.0-rc.1

0.5.0-rc.1

Changelog

  • The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636
Changelog

Sourced from github.com/moby/moby/client's changelog.

0.6.1 (2013-08-23)

  • Registry: Pass "meta" headers in API calls to the registry
  • Packaging: Use correct upstart script with new build tool
  • Packaging: Use libffi-dev, don't build it from sources
  • Packaging: Removed duplicate mercurial install command

0.6.0 (2013-08-22)

  • Runtime: Load authConfig only when needed and fix useless WARNING
  • Runtime: Add lxc-conf flag to allow custom lxc options
  • Runtime: Fix race conditions in parallel pull
  • Runtime: Improve CMD, ENTRYPOINT, and attach docs.
  • Documentation: Small fix to docs regarding adding docker groups
  • Documentation: Add MongoDB image example
  • Builder: Add USER instruction do Dockerfile
  • Documentation: updated default -H docs
  • Remote API: Sort Images by most recent creation date.
  • Builder: Add workdir support for the Buildfile
  • Runtime: Add an option to set the working directory
  • Runtime: Show tag used when image is missing
  • Documentation: Update readme with dependencies for building
  • Documentation: Add instructions for creating and using the docker group
  • Remote API: Reworking opaque requests in registry module
  • Runtime: Fix Graph ByParent() to generate list of child images per parent image.
  • Runtime: Add Image name to LogEvent tests
  • Documentation: Add sudo to examples and installation to documentation
  • Hack: Bash Completion: Limit commands to containers of a relevant state
  • Remote API: Add image name in /events
  • Runtime: Apply volumes-from before creating volumes
  • Runtime: Make docker run handle SIGINT/SIGTERM
  • Runtime: Prevent crash when .dockercfg not readable
  • Hack: Add docker dependencies coverage testing into docker-ci
  • Runtime: Add -privileged flag and relevant tests, docs, and examples
  • Packaging: Docker-brew 0.5.2 support and memory footprint reduction
  • Runtime: Install script should be fetched over https, not http.
  • Packaging: Add new docker dependencies into docker-ci
  • Runtime: Use Go 1.1.2 for dockerbuilder
  • Registry: Improve auth push
  • Runtime: API, issue 1471: Use groups for socket permissions
  • Documentation: PostgreSQL service example in documentation
  • Contrib: bash completion script
  • Tests: Improve TestKillDifferentUser to prevent timeout on buildbot
  • Documentation: Fix typo in docs for docker run -dns
  • Documentation: Adding a reference to ps -a
  • Runtime: Correctly detect IPv4 forwarding
  • Packaging: Revert "docker.upstart: avoid spawning a sh process"
  • Runtime: Use ranged for loop on channels
  • Runtime: Fix typo: fmt.Sprint -> fmt.Sprintf
  • Tests: Fix typo in TestBindMounts (runContainer called without image)
  • Runtime: add websocket support to /container//attach/ws
  • Runtime: Mount /dev/shm as a tmpfs

... (truncated)

Commits
  • 5105263 Bump to v0.6.1
  • 7b5c579 Use correct upstart script with new build tool
  • 15d658d Removed duplicate mercurial install command
  • 59281d6 use libffi-dev, don't build it from sources
  • 29be20f Fixed: ImagePull in runtime test
  • 5a8c32d Use additional decorator in RequestFactory to pass meta headers to registry
  • 588f8e1 Merge pull request #1628 from dotcloud/bump_0.6.0
  • f4a4f1c Bump to 0.6.0
  • f925edd Merge pull request #1525 from griff/1503-fix
  • 12715c8 Merge pull request #1609 from jpetazzo/release-docker-with-docker
  • Additional commits viewable in compare view

Updates github.com/olekukonko/tablewriter from 1.1.4 to 1.1.5

Commits
  • 5f0c87a change readme to v1.1.5
  • 8535cd2 Merge pull request #331 from olekukonko/makawhy
  • 8db545f markdown game
  • 569d938 Merge pull request #330 from olekukonko/makawhy
  • ce371fa Merge pull request #326 from olekukonko/makawhy
  • e1d22bb Merge pull request #329 from team-humaki/fix/global-width-wrap-split
  • c9a710f Merge pull request #327 from youdie006/wrapwords-last-word-hang
  • cbd4eb4 wrap: split Widths.Global across columns
  • 2a7896c Broaden the WrapWords table to the shapes around the last-word case
  • cb595f4 Terminate WrapWords when the last word is wider than the limit
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_model from 0.6.2 to 0.6.3

Release notes

Sourced from github.com/prometheus/client_model's releases.

v0.6.3

What's Changed

New Contributors

Full Changelog: prometheus/client_model@v0.6.2...v0.6.3

What's Changed

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 26, 2026
@ericcurtin
ericcurtin requested a lite review from Copilot September 26, 2026 19:00
Copilot AI reviewed Sep 26, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

Align the shared Go version and Docker build configuration with the new module requirement.

Review effort: Lite
Findings: 1 High severity

Open (1)
What changed in this PR

Updates 20 Go dependencies and refreshes the module checksum set.

Changes:

  • Bumps direct and transitive dependencies.
  • Raises the Go requirement to 1.26.6.
  • Refreshes go.sum checksums.

Critical blocker: Go 1.26.6 is not aligned with the repository’s Go 1.25 selection, causing non-reproducible builds without toolchain downloads.

File Description
go.mod Updates dependency versions and Go requirement.
go.sum Refreshes dependency checksums.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread go.mod
module github.com/docker/model-runner

go 1.25.8
go 1.26.6
@ericcurtin

ericcurtin commented Sep 26, 2026

Copy link
Copy Markdown
Contributor

Build is broken: go.mod bumps go 1.25.8 -> go 1.26.6, but CI runners have go 1.25.14 with GOTOOLCHAIN=local, so lint/test/e2e all fail immediately ("go.mod requires go >= 1.26.6"). Please pin the go directive back to a version CI supports, or bump the CI toolchain first. Also, model-runner is being deprecated in favor of https://github.com/llmmanorg/llmman, please open future PRs there instead. Setting to draft until green.

@ericcurtin
ericcurtin marked this pull request as draft September 26, 2026 20:24
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-modules-root-7119ff70f7 branch from b4c749d to 8dd5d79 Compare September 26, 2026 20:27
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-modules-root-7119ff70f7 branch from 8dd5d79 to b321a6d Compare October 5, 2026 06:55
@dependabot
chore(deps): bump the go-modules-root group across 1 directory with 2…
52d05cc 
…0 updates

Bumps the go-modules-root group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.2.5` | `2.4.1` |
| [github.com/containerd/platforms](https://github.com/containerd/platforms) | `1.0.0-rc.4` | `1.0.0-rc.5` |
| [github.com/docker/cli](https://github.com/docker/cli) | `29.4.1+incompatible` | `29.8.2+incompatible` |
| [github.com/docker/docker-credential-helpers](https://github.com/docker/docker-credential-helpers) | `0.9.6` | `0.9.9` |
| [github.com/gpustack/gguf-parser-go](https://github.com/gpustack/gguf-parser-go) | `0.24.0` | `0.26.4` |
| [github.com/jaypipes/ghw](https://github.com/jaypipes/ghw) | `0.24.0` | `0.26.0` |
| [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.23` | `0.0.30` |
| [github.com/mattn/go-shellwords](https://github.com/mattn/go-shellwords) | `1.0.13` | `1.0.16` |
| [github.com/moby/moby/api](https://github.com/moby/moby) | `1.54.2` | `1.56.1` |
| [github.com/moby/moby/client](https://github.com/moby/moby) | `0.4.1` | `0.6.1` |
| [github.com/olekukonko/tablewriter](https://github.com/olekukonko/tablewriter) | `1.1.4` | `1.1.5` |
| [github.com/prometheus/client_model](https://github.com/prometheus/client_model) | `0.6.2` | `0.6.3` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.67.5` | `0.70.1` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` |
| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.44.0` |
| [github.com/testcontainers/testcontainers-go/modules/registry](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.44.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.46.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.22.0` | `0.23.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.47.0` | `0.48.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.45.0` | `0.46.0` |



Updates `github.com/containerd/containerd/v2` from 2.2.5 to 2.4.1
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v2.2.5...v2.4.1)

Updates `github.com/containerd/platforms` from 1.0.0-rc.4 to 1.0.0-rc.5
- [Release notes](https://github.com/containerd/platforms/releases)
- [Commits](containerd/platforms@v1.0.0-rc.4...v1.0.0-rc.5)

Updates `github.com/docker/cli` from 29.4.1+incompatible to 29.8.2+incompatible
- [Commits](docker/cli@v29.4.1...v29.8.2)

Updates `github.com/docker/docker-credential-helpers` from 0.9.6 to 0.9.9
- [Release notes](https://github.com/docker/docker-credential-helpers/releases)
- [Commits](docker/docker-credential-helpers@v0.9.6...v0.9.9)

Updates `github.com/gpustack/gguf-parser-go` from 0.24.0 to 0.26.4
- [Release notes](https://github.com/gpustack/gguf-parser-go/releases)
- [Commits](gpustack/gguf-parser-go@v0.24.0...v0.26.4)

Updates `github.com/jaypipes/ghw` from 0.24.0 to 0.26.0
- [Release notes](https://github.com/jaypipes/ghw/releases)
- [Commits](jaypipes/ghw@v0.24.0...v0.26.0)

Updates `github.com/mattn/go-runewidth` from 0.0.23 to 0.0.30
- [Commits](mattn/go-runewidth@v0.0.23...v0.0.30)

Updates `github.com/mattn/go-shellwords` from 1.0.13 to 1.0.16
- [Release notes](https://github.com/mattn/go-shellwords/releases)
- [Commits](mattn/go-shellwords@v1.0.13...v1.0.16)

Updates `github.com/moby/moby/api` from 1.54.2 to 1.56.1
- [Release notes](https://github.com/moby/moby/releases)
- [Commits](moby/moby@api/v1.54.2...api/v1.56.1)

Updates `github.com/moby/moby/client` from 0.4.1 to 0.6.1
- [Release notes](https://github.com/moby/moby/releases)
- [Changelog](https://github.com/moby/moby/blob/v0.6.1/CHANGELOG.md)
- [Commits](moby/moby@v0.4.1...v0.6.1)

Updates `github.com/olekukonko/tablewriter` from 1.1.4 to 1.1.5
- [Release notes](https://github.com/olekukonko/tablewriter/releases)
- [Commits](olekukonko/tablewriter@v1.1.4...v1.1.5)

Updates `github.com/prometheus/client_model` from 0.6.2 to 0.6.3
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](prometheus/client_model@v0.6.2...v0.6.3)

Updates `github.com/prometheus/common` from 0.67.5 to 0.70.1
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.67.5...v0.70.1)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

Updates `github.com/testcontainers/testcontainers-go` from 0.42.0 to 0.44.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.42.0...v0.44.0)

Updates `github.com/testcontainers/testcontainers-go/modules/registry` from 0.42.0 to 0.44.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.42.0...v0.44.0)

Updates `go.opentelemetry.io/otel` from 1.44.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.46.0)

Updates `golang.org/x/sync` from 0.22.0 to 0.23.0
- [Commits](golang/sync@v0.22.0...v0.23.0)

Updates `golang.org/x/sys` from 0.47.0 to 0.48.0
- [Commits](golang/sys@v0.47.0...v0.48.0)

Updates `golang.org/x/term` from 0.45.0 to 0.46.0
- [Commits](golang/term@v0.45.0...v0.46.0)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-root
- dependency-name: github.com/containerd/platforms
  dependency-version: 1.0.0-rc.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules-root
- dependency-name: github.com/docker/cli
  dependency-version: 29.8.1+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-root
- dependency-name: github.com/docker/docker-credential-helpers
  dependency-version: 0.9.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules-root
- dependency-name: github.com/gpustack/gguf-parser-go
  dependency-version: 0.26.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-root
- dependency-name: github.com/jaypipes/ghw
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-root
- dependency-name: github.com/mattn/go-runewidth
  dependency-version: 0.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules-root
- dependency-name: github.com/mattn/go-shellwords
  dependency-version: 1.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules-root
- dependency-name: github.com/moby/moby/api
  dependency-version: 1.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-root
- dependency-name: github.com/moby/moby/client
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-root
- dependency-name: github.com/olekukonko/tablewriter
  dependency-version: 1.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules-root
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules-root
- dependency-name: github.com/prometheus/common
  dependency-version: 0.70.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-root
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-root
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-root
- dependency-name: github.com/testcontainers/testcontainers-go/modules/registry
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-root
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-root
- dependency-name: golang.org/x/sync
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-root
- dependency-name: golang.org/x/sys
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-root
- dependency-name: golang.org/x/term
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-root
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-modules-root-7119ff70f7 branch from b321a6d to 52d05cc Compare October 12, 2026 20:46

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@ericcurtin