Skip to content

build(deps): bump github.com/google/go-containerregistry from 0.21.2 to 0.21.3#239

Merged
pgcrooks-sysdig merged 1 commit intodevfrom
dependabot/go_modules/github.com/google/go-containerregistry-0.21.3
Mar 30, 2026
Merged

build(deps): bump github.com/google/go-containerregistry from 0.21.2 to 0.21.3#239
pgcrooks-sysdig merged 1 commit intodevfrom
dependabot/go_modules/github.com/google/go-containerregistry-0.21.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 18, 2026

Bumps github.com/google/go-containerregistry from 0.21.2 to 0.21.3.

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.3

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.2...v0.21.3

Commits
  • 3888fb8 bump golang to 1.25.7 (#2236)
  • f439624 tarball: detect symlink cycles in extractFileFromTar (#2232)
  • 400c263 mutate: reject path traversal and symlink escape in Extract (#2227)
  • 47eedc9 Bump goreleaser/goreleaser-action in the actions group (#2220)
  • be0a845 Bump the go-deps group across 4 directories with 7 updates (#2233)
  • e916301 migrate to github.com/moby/moby modules (#2228)
  • 8b2478e Adds local file support to the crane index subcommand (#2223)
  • See full diff in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 18, 2026
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/google/go-containerregistry-0.21.3 branch from 37c907f to fe274d2 Compare March 30, 2026 14:05
Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.21.2 to 0.21.3.
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.2...v0.21.3)

---
updated-dependencies:
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/google/go-containerregistry-0.21.3 branch from fe274d2 to 47f6fe9 Compare March 30, 2026 14:10
Copy link
Copy Markdown
Contributor

@pgcrooks-sysdig pgcrooks-sysdig left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@pgcrooks-sysdig pgcrooks-sysdig merged commit 9c0207e into dev Mar 30, 2026
2 checks passed
@pgcrooks-sysdig pgcrooks-sysdig deleted the dependabot/go_modules/github.com/google/go-containerregistry-0.21.3 branch March 30, 2026 14:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant