This is an automated email from the ASF dual-hosted git repository.
zeroshade pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/iceberg-go.git
The following commit(s) were added to refs/heads/main by this push:
new 712b264c build(deps): bump github.com/in-toto/in-toto-golang from
0.10.0 to 0.11.0 (#1042)
712b264c is described below
commit 712b264ca241c223950cfe7dfe37fbc4aaaf761d
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Tue May 12 09:19:59 2026 -0700
build(deps): bump github.com/in-toto/in-toto-golang from 0.10.0 to 0.11.0
(#1042)
Bumps
[github.com/in-toto/in-toto-golang](https://github.com/in-toto/in-toto-golang)
from 0.10.0 to 0.11.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/in-toto/in-toto-golang/releases";>github.com/in-toto/in-toto-golang's
releases</a>.</em></p>
<blockquote>
<h2>v0.11.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): bump the all group with 2 updates by <a
href="https://github.com/dependabot";><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/in-toto/in-toto-golang/pull/453";>in-toto/in-toto-golang#453</a></li>
<li>chore(deps): bump the all group across 1 directory with 2 updates by
<a
href="https://github.com/dependabot";><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/in-toto/in-toto-golang/pull/452";>in-toto/in-toto-golang#452</a></li>
<li>chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 by <a
href="https://github.com/dependabot";><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/in-toto/in-toto-golang/pull/457";>in-toto/in-toto-golang#457</a></li>
<li>chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4
by <a
href="https://github.com/dependabot";><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/in-toto/in-toto-golang/pull/459";>in-toto/in-toto-golang#459</a></li>
<li>match: Replace ^ with ! for negation in character classes by <a
href="https://github.com/adityasaky";><code>@adityasaky</code></a> in <a
href="https://redirect.github.com/in-toto/in-toto-golang/pull/462";>in-toto/in-toto-golang#462</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0";>https://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/in-toto/in-toto-golang/commit/36d782ffb2ca3adbffcdce1fd971c23319dd4469";><code>36d782f</code></a>
Merge pull request <a
href="https://redirect.github.com/in-toto/in-toto-golang/issues/462";>#462</a>
from in-toto/fix-negation-character</li>
<li><a
href="https://github.com/in-toto/in-toto-golang/commit/4a09e3bbc44bc687577b6532e57e8a4abfa5ddf4";><code>4a09e3b</code></a>
match: Replace ^ with ! for negation in character classes</li>
<li><a
href="https://github.com/in-toto/in-toto-golang/commit/c3302e8bc36e46119f7ae17c07eb879ff3507caa";><code>c3302e8</code></a>
Merge pull request <a
href="https://redirect.github.com/in-toto/in-toto-golang/issues/459";>#459</a>
from in-toto/dependabot/go_modules/github.com/go-jose...</li>
<li><a
href="https://github.com/in-toto/in-toto-golang/commit/016e87efbb55c6dd8772ce227002eeb1b6e3f593";><code>016e87e</code></a>
chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4</li>
<li><a
href="https://github.com/in-toto/in-toto-golang/commit/5b9df76e685eaa0a950ea9ba3f4a5561e87e13ad";><code>5b9df76</code></a>
Merge pull request <a
href="https://redirect.github.com/in-toto/in-toto-golang/issues/457";>#457</a>
from in-toto/dependabot/go_modules/google.golang.org/...</li>
<li><a
href="https://github.com/in-toto/in-toto-golang/commit/595b3fe0a13f481eb0ef898ccaff5e345e492a2f";><code>595b3fe</code></a>
chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3</li>
<li><a
href="https://github.com/in-toto/in-toto-golang/commit/e396d248c9cf19f9e144f4e90c476af88742bf35";><code>e396d24</code></a>
Merge pull request <a
href="https://redirect.github.com/in-toto/in-toto-golang/issues/452";>#452</a>
from in-toto/dependabot/github_actions/all-502588e1ca</li>
<li><a
href="https://github.com/in-toto/in-toto-golang/commit/142b779059713332fe5c7856e98f1c564c6d6a09";><code>142b779</code></a>
Merge pull request <a
href="https://redirect.github.com/in-toto/in-toto-golang/issues/453";>#453</a>
from in-toto/dependabot/go_modules/all-d8ef5820aa</li>
<li><a
href="https://github.com/in-toto/in-toto-golang/commit/f741bcc43330554606b813fa0f8fe0c284fcdaea";><code>f741bcc</code></a>
chore(deps): bump the all group with 2 updates</li>
<li><a
href="https://github.com/in-toto/in-toto-golang/commit/c374dc9808137651fe8754eed363ec816cd59d2a";><code>c374dc9</code></a>
chore(deps): bump the all group across 1 directory with 2 updates</li>
<li>See full diff in <a
href="https://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0";>compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/apache/iceberg-go/network/alerts).
</details>
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
go.mod | 2 +-
go.sum | 4 ++--
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/go.mod b/go.mod
index 043ff8dd..f96e8182 100644
--- a/go.mod
+++ b/go.mod
@@ -167,7 +167,7 @@ require (
github.com/hashicorp/go-multierror v1.1.1 // indirect
github.com/hashicorp/go-version v1.9.0 // indirect
github.com/in-toto/attestation v1.1.2 // indirect
- github.com/in-toto/in-toto-golang v0.10.0 // indirect
+ github.com/in-toto/in-toto-golang v0.11.0 // indirect
github.com/inconshreveable/mousetrap v1.1.0 // indirect
github.com/inhies/go-bytesize v0.0.0-20220417184213-4913239db9cf //
indirect
github.com/jinzhu/inflection v1.0.0 // indirect
diff --git a/go.sum b/go.sum
index 0eec1507..7904cc4d 100644
--- a/go.sum
+++ b/go.sum
@@ -392,8 +392,8 @@ github.com/hashicorp/golang-lru/v2 v2.0.7
h1:a+bsQ5rvGLjzHuww6tVxozPZFVghXaHOwFs
github.com/hashicorp/golang-lru/v2 v2.0.7/go.mod
h1:QeFd9opnmA6QUJc5vARoKUSoFhyfM2/ZepoAG6RGpeM=
github.com/in-toto/attestation v1.1.2
h1:MBFn6lsMq6dptQZJBhalXTcWMb/aJy3V+GX3VYj/V1E=
github.com/in-toto/attestation v1.1.2/go.mod
h1:gYFddHMZj3DiQ0b62ltNi1Vj5rC879bTmBbrv9CRHpM=
-github.com/in-toto/in-toto-golang v0.10.0
h1:+s2eZQSK3WmWfYV85qXVSBfqgawi/5L02MaqA4o/tpM=
-github.com/in-toto/in-toto-golang v0.10.0/go.mod
h1:wjT4RiyFlLWCmLUJjwB8oZcjaq7HA390aMJcD3xXgmg=
+github.com/in-toto/in-toto-golang v0.11.0
h1:nfidMYBFx+E0lnmX5KUnN2Pdm8zdNKal1ayjJuzzRoA=
+github.com/in-toto/in-toto-golang v0.11.0/go.mod
h1:u3PjTnwFKjp5a1YCcw8SJg0G+tMeKfVoWsWeFMDCMtw=
github.com/inconshreveable/mousetrap v1.1.0
h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
github.com/inconshreveable/mousetrap v1.1.0/go.mod
h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
github.com/inhies/go-bytesize v0.0.0-20220417184213-4913239db9cf
h1:FtEj8sfIcaaBfAKrE1Cwb61YDtYq9JxChK1c7AKce7s=
