Skip to content

build(deps): Bump the gomod group across 1 directory with 2 updates - #847

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-36b163fbf7
Open

build(deps): Bump the gomod group across 1 directory with 2 updates#847
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-36b163fbf7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the gomod group with 2 updates in the / directory: github.com/mattn/go-shellwords and helm.sh/helm/v3.

Updates github.com/mattn/go-shellwords from 1.0.13 to 1.0.14

Commits
  • 2b31b13 Merge pull request #72 from mattn/add-gitignore
  • 925f016 Add .gitignore for .codex
  • ad15017 Merge pull request #71 from mattn/refactor-buffers
  • a3c716b Use byte buffers in Parse to reduce allocations
  • a9af5c2 Merge pull request #70 from mattn/add-benchmarks
  • 6eb4f8d Add benchmarks for Parse variants
  • a51cda8 Merge pull request #69 from mattn/followups
  • 2488652 Fix comment handling inside backticks and drop empty substitution words
  • 5bec8b9 Merge pull request #55 from aTTiny73/feature/exclude-separator
  • 4052da2 Merge remote-tracking branch 'origin/master' into pr55
  • Additional commits viewable in compare view

Updates helm.sh/helm/v3 from 3.21.0 to 3.21.4

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.21.4 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • fix(engine): prevent Files.Lines panic on empty file (backport to v3)- #32303 by @​mahesh-sadupalli
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932- #32463 by @​karan-vk
  • [dev-v3 backport] fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158- #32535 by @​scottrigby
  • [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061- #32536 by @​scottrigby
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0- (includes golang.org/x/text v0.40.0 to fix GO-2026-5970) #32308

Installation and Upgrading

Download Helm v3.21.4. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308) 813176c51bb5c181dbbd7901298ddcc104cd3417 (dependabot[bot])
  • [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061 b6aa8b1d71140347f75ef0b77fac91f28ffe10b3 (Scott Rigby)
  • fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158 57ce7aeec1eb82422c5c349dfadda20ea3f743fe (Scott Rigby)
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 ab71449c76f66e55064ae4503a6e7adae21dcfa9 (Karan V)
  • fix(engine): prevent Files.Lines panic on empty file 955dfab1e6bdd70b5ccd7b932b2d500e9e26566c (Mahesh Sadupalli)

... (truncated)

Commits
  • 813176c chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308)
  • b6aa8b1 [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061
  • 57ce7ae fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158
  • ab71449 fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932
  • 955dfab fix(engine): prevent Files.Lines panic on empty file
  • 1ad6e68 Apply suggestions from code review
  • 037733e fix: drop containerd v1 dep to resolve govulncheck CVEs
  • d3e178b chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33
  • 1259634 chore(deps): bump the k8s-io group with 2 updates
  • b52e276 fixes
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 13, 2026
Bumps the gomod group with 2 updates in the / directory: [github.com/mattn/go-shellwords](https://github.com/mattn/go-shellwords) and [helm.sh/helm/v3](https://github.com/helm/helm).


Updates `github.com/mattn/go-shellwords` from 1.0.13 to 1.0.14
- [Commits](mattn/go-shellwords@v1.0.13...v1.0.14)

Updates `helm.sh/helm/v3` from 3.21.0 to 3.21.4
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.21.0...v3.21.4)

---
updated-dependencies:
- dependency-name: github.com/mattn/go-shellwords
  dependency-version: 1.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.21.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/gomod-36b163fbf7 branch from 4e93b4a to beb0cf7 Compare September 7, 2026 23:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code size/S

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants