build(deps): bump github.com/google/go-containerregistry from 0.20.7 to 0.21.2 (#1026)

Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry)
from 0.20.7 to 0.21.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.21.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Better handle redirects to https in ping by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2225">google/go-containerregistry#2225</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.21.1...v0.21.2">https://github.com/google/go-containerregistry/compare/v0.21.1...v0.21.2</a></p>
<h2>v0.21.1</h2>
<p>This release fixes a regression in <code>crane</code> introduced in
the previous release.</p>
<h2>What's Changed</h2>
<ul>
<li>Add WithFileBufferedOpener for file-backed daemon image buffering by
<a href="https://github.com/twdamhore"><code>@​twdamhore</code></a> in
<a
href="https://redirect.github.com/google/go-containerregistry/pull/2214">google/go-containerregistry#2214</a></li>
<li>crane: fix case in auth response json by <a
href="https://github.com/aelindeman"><code>@​aelindeman</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2218">google/go-containerregistry#2218</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/twdamhore"><code>@​twdamhore</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2214">google/go-containerregistry#2214</a></li>
<li><a
href="https://github.com/aelindeman"><code>@​aelindeman</code></a> made
their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2218">google/go-containerregistry#2218</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.21.0...v0.21.1">https://github.com/google/go-containerregistry/compare/v0.21.0...v0.21.1</a></p>
<h2>v0.21.0</h2>
<p>This release updates the minimum Go version to
<code>1.25.6</code>.</p>
<h2>What's Changed</h2>
<ul>
<li>fix(mutate): don't skip dir replacements via whiteout in export by
<a href="https://github.com/r4f4"><code>@​r4f4</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2191">google/go-containerregistry#2191</a></li>
<li>Improve performance of v1.NewHash by <a
href="https://github.com/bmoylan"><code>@​bmoylan</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2194">google/go-containerregistry#2194</a></li>
<li>Bump the actions group across 1 directory with 4 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2207">google/go-containerregistry#2207</a></li>
<li>Bump the root-deps group across 1 directory with 7 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2195">google/go-containerregistry#2195</a></li>
<li>Fix error messages in crane_test.go by <a
href="https://github.com/jammie-jelly"><code>@​jammie-jelly</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2189">google/go-containerregistry#2189</a></li>
<li>Bump go version across packages to 1.25.6 by <a
href="https://github.com/Subserial"><code>@​Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2211">google/go-containerregistry#2211</a></li>
<li>Join go.mod dependency updates by <a
href="https://github.com/Subserial"><code>@​Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2212">google/go-containerregistry#2212</a></li>
<li>Bump the go-deps group across 3 directories with 3 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2213">google/go-containerregistry#2213</a></li>
<li>Disable taint gosec lints by <a
href="https://github.com/Subserial"><code>@​Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2215">google/go-containerregistry#2215</a></li>
<li>Update go version used in goreleaser by <a
href="https://github.com/Subserial"><code>@​Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2216">google/go-containerregistry#2216</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/r4f4"><code>@​r4f4</code></a> made their
first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2191">google/go-containerregistry#2191</a></li>
<li><a
href="https://github.com/jammie-jelly"><code>@​jammie-jelly</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2189">google/go-containerregistry#2189</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.0">https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9e0ccb0a72"><code>9e0ccb0</code></a>
Better handle redirects to https in ping (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2225">#2225</a>)</li>
<li><a
href="85f2bf5f73"><code>85f2bf5</code></a>
crane: fix case in auth response json (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2218">#2218</a>)</li>
<li><a
href="e971d630dc"><code>e971d63</code></a>
Add WithFileBufferedOpener for file-backed daemon image buffering (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2214">#2214</a>)</li>
<li><a
href="8e2d6a6817"><code>8e2d6a6</code></a>
Update go version used in goreleaser (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2216">#2216</a>)</li>
<li><a
href="b58334f761"><code>b58334f</code></a>
Disable taint gosec lints (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2215">#2215</a>)</li>
<li><a
href="88b39ed906"><code>88b39ed</code></a>
Bump the go-deps group across 3 directories with 3 updates (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2213">#2213</a>)</li>
<li><a
href="102ac75dde"><code>102ac75</code></a>
join go.mod dependency updates (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2212">#2212</a>)</li>
<li><a
href="d5817d559e"><code>d5817d5</code></a>
Bump go version across packages to 1.25.6 (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2211">#2211</a>)</li>
<li><a
href="23f0632fa3"><code>23f0632</code></a>
Fix error messages in crane_test.go (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2189">#2189</a>)</li>
<li><a
href="438abde5e7"><code>438abde</code></a>
Bump the root-deps group across 1 directory with 7 updates (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2195">#2195</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry&package-manager=go_modules&previous-version=0.20.7&new-version=0.21.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
This commit is contained in:
dependabot[bot] 2026-03-07 15:31:08 +02:00 • committed by GitHub
commit c0ecfd5a65
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

10
go.mod
View file

@ -10,7 +10,7 @@ require (
github.com/coreos/go-oidc/v3 v3.17.0
github.com/danielgtaylor/huma/v2 v2.35.0
github.com/golang-jwt/jwt/v5 v5.3.1
github.com/google/go-containerregistry v0.20.7
github.com/google/go-containerregistry v0.21.2
github.com/jackc/pgx/v5 v5.8.0
github.com/prometheus/client_golang v1.23.2
github.com/rs/cors v1.11.1
@ -39,9 +39,9 @@ require (
github.com/AzureAD/microsoft-authentication-library-for-go v1.6.0 // indirect
github.com/beorn7/perks v1.0.1 // indirect
github.com/cespare/xxhash/v2 v2.3.0 // indirect
github.com/containerd/stargz-snapshotter/estargz v0.18.1 // indirect
github.com/containerd/stargz-snapshotter/estargz v0.18.2 // indirect
github.com/davecgh/go-spew v1.1.1 // indirect
github.com/docker/cli v29.2.0+incompatible // indirect
github.com/docker/cli v29.2.1+incompatible // indirect
github.com/docker/distribution v2.8.3+incompatible // indirect
github.com/docker/docker-credential-helpers v0.9.3 // indirect
github.com/felixge/httpsnoop v1.0.4 // indirect
@ -55,7 +55,7 @@ require (
github.com/jackc/pgpassfile v1.0.0 // indirect
github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
github.com/jackc/puddle/v2 v2.2.2 // indirect
github.com/klauspost/compress v1.18.1 // indirect
github.com/klauspost/compress v1.18.4 // indirect
github.com/kylelemons/godebug v1.1.0 // indirect
github.com/mitchellh/go-homedir v1.1.0 // indirect
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
@ -76,7 +76,7 @@ require (
go.yaml.in/yaml/v2 v2.4.3 // indirect
golang.org/x/crypto v0.47.0 // indirect
golang.org/x/net v0.49.0 // indirect
golang.org/x/oauth2 v0.34.0 // indirect
golang.org/x/oauth2 v0.35.0 // indirect
golang.org/x/sync v0.19.0 // indirect
golang.org/x/sys v0.41.0 // indirect
golang.org/x/text v0.33.0 // indirect