chore(deps): bump github.com/google/go-containerregistry from 0.20.6 to 0.20.7 #482

dependabot · 2025-12-01T22:25:09Z

Bumps github.com/google/go-containerregistry from 0.20.6 to 0.20.7.

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.20.7

What's Changed

Fix ArgsEscaped lint directive by @Subserial in google/go-containerregistry#2137

transport: Fix broken links to distribution docs by @guzalv in google/go-containerregistry#2136

fix(remote): using customized retry predicate func if provided by @derekhjray in google/go-containerregistry#2135

Adding docker file by @HassanJasim in google/go-containerregistry#2138

crane: Add timestamp to flatten layer by @Stephanie0829 in google/go-containerregistry#2117

feat(remote): pass retryBackoff option to transport by @aslafy-z in google/go-containerregistry#1628

Expose clobber refusal error by @pjbgf in google/go-containerregistry#2146

Build artifacts for riscv64 by @ffgan in google/go-containerregistry#2159

Update dependencies and deprecate DockerVersion field by @Subserial in google/go-containerregistry#2164

New Contributors

@guzalv made their first contribution in google/go-containerregistry#2136

@derekhjray made their first contribution in google/go-containerregistry#2135

@HassanJasim made their first contribution in google/go-containerregistry#2138

@Stephanie0829 made their first contribution in google/go-containerregistry#2117

@pjbgf made their first contribution in google/go-containerregistry#2146

@ffgan made their first contribution in google/go-containerregistry#2159

Full Changelog: google/go-containerregistry@v0.20.6...v0.20.7

Commits

e075f20 go mod tidy on dependabot update (#2171)
45aacf4 Bump the actions group across 1 directory with 3 updates (#2170)
073b936 Update dependencies and deprecate DockerVersion field (#2164)
390dacd Bump golang.org/x/crypto from 0.38.0 to 0.45.0 in /cmd/krane (#2163)
ca44d47 Bump golang.org/x/crypto from 0.38.0 to 0.45.0 in /pkg/authn/k8schain (#2162)
999cc1f Bump github.com/docker/docker (#2161)
d1809c8 Build artifacts for riscv64 (#2159)
7471efd Bump the auxiliary-deps group across 3 directories with 4 updates (#2156)
2bb5bb0 Bump the actions group with 5 updates (#2155)
16371c1 Remove manual vendor setting for dependabot (#2151)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

github-actions · 2025-12-01T22:27:50Z

Benchmark Test Results

Benchmark results from the latest changes vs base branch

make .tool/task
make[1]: Entering directory '/home/runner/work/stereoscope/stereoscope'
make[1]: Leaving directory '/home/runner/work/stereoscope/stereoscope'
.tool/task show-benchstat
?   	github.com/anchore/stereoscope	[no test files]
?   	github.com/anchore/stereoscope/examples	[no test files]
PASS
ok  	github.com/anchore/stereoscope/internal	0.003s
?   	github.com/anchore/stereoscope/internal/bus	[no test files]
PASS
ok  	github.com/anchore/stereoscope/internal/containerd	0.008s
PASS
ok  	github.com/anchore/stereoscope/internal/docker	0.004s
?   	github.com/anchore/stereoscope/internal/log	[no test files]
PASS
ok  	github.com/anchore/stereoscope/internal/podman	0.005s
?   	github.com/anchore/stereoscope/pkg/event	[no test files]
?   	github.com/anchore/stereoscope/pkg/event/parsers	[no test files]
goos: linux
goarch: amd64
pkg: github.com/anchore/stereoscope/pkg/file
cpu: AMD EPYC 7763 64-Core Processor                
BenchmarkTarIndex-4   	   35877	     33546 ns/op	    5699 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   35595	     33669 ns/op	    5700 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   33140	     33718 ns/op	    5700 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   35484	     33772 ns/op	    5702 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   35437	     33740 ns/op	    5702 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   35637	     33649 ns/op	    5700 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   35598	     33480 ns/op	    5701 B/op	      93 allocs/op
PASS
ok  	github.com/anchore/stereoscope/pkg/file	10.732s
PASS
ok  	github.com/anchore/stereoscope/pkg/filetree	0.005s
?   	github.com/anchore/stereoscope/pkg/filetree/filenode	[no test files]
PASS
ok  	github.com/anchore/stereoscope/pkg/image	0.005s
PASS
ok  	github.com/anchore/stereoscope/pkg/image/containerd	0.007s
PASS
ok  	github.com/anchore/stereoscope/pkg/image/docker	0.005s
PASS
ok  	github.com/anchore/stereoscope/pkg/image/oci	0.005s
PASS
ok  	github.com/anchore/stereoscope/pkg/image/oci/credhelpers	0.005s
?   	github.com/anchore/stereoscope/pkg/image/podman	[no test files]
PASS
ok  	github.com/anchore/stereoscope/pkg/image/sif	0.004s
?   	github.com/anchore/stereoscope/pkg/imagetest	[no test files]
PASS
ok  	github.com/anchore/stereoscope/pkg/tree	0.003s
PASS
ok  	github.com/anchore/stereoscope/pkg/tree/node	0.003s
goos: linux
goarch: amd64
pkg: github.com/anchore/stereoscope/test/integration
cpu: AMD EPYC 7763 64-Core Processor                
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1150	   1045458 ns/op	  275299 B/op	    2244 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1138	   1098746 ns/op	  275102 B/op	    2244 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	     975	   1132308 ns/op	  274947 B/op	    2244 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1132	   1033661 ns/op	  274973 B/op	    2244 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1159	   1030005 ns/op	  274734 B/op	    2243 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	     999	   1029994 ns/op	  274653 B/op	    2243 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1144	   1087292 ns/op	  274553 B/op	    2243 allocs/op
--- FAIL: BenchmarkSimpleImage_GetImage/podman
    fixture_image_simple_test.go:175: could not get fixture image: unable to detect input for 'stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7', errs: podman not available: no host address
#0 building with "default" instance using docker driver

#1 [internal] load build definition from Dockerfile
#1 transferring dockerfile: 345B done
#1 DONE 0.0s

#2 [internal] load .dockerignore
#2 transferring context: 2B done
#2 DONE 0.0s

#3 [internal] load build context
#3 transferring context: 209B done
#3 DONE 0.0s

#4 [1/3] ADD file-1.txt /somefile-1.txt
#4 CACHED

#5 [2/3] ADD file-2.txt /somefile-2.txt
#5 CACHED

#6 [3/3] ADD target /
#6 CACHED

#7 exporting to image
#7 exporting layers done
#7 writing image sha256:dc7840bdbd76d8521bc90a5bc4b0870d8c21e4286ea1420c23f21c84b525fba1 done
#7 naming to docker.io/library/stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7 done
#7 naming to docker.io/library/stereoscope-fixture-image-simple:latest done
#7 DONE 0.0s
time="2025-12-05T18:35:58Z" level=warning msg="Failed to check deprecations" error="connection error: desc = \"transport: Error while dialing: dial unix /run/containerd/containerd.sock: connect: permission denied\""
ctr: connection error: desc = "transport: Error while dialing: dial unix /run/containerd/containerd.sock: connect: permission denied"
--- FAIL: BenchmarkSimpleImage_GetImage
    image_fixtures.go:193: using existing image tar: 'test-fixtures/cache/stereoscope-fixture-image-simple-04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7.tar' (size: 22528, modified: 2025-12-05 18:35:10.044158716 +0000 UTC, mode: -rw-r--r--)
    image_fixtures.go:241: Build docker image: name="stereoscope-fixture-image-simple" tag="04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7"
    image_fixtures.go:291: saveImage running: docker image save stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7
    image_fixtures.go:286: 
        	Error Trace:	/home/runner/work/stereoscope/stereoscope/pkg/imagetest/image_fixtures.go:286
        	            				/home/runner/work/stereoscope/stereoscope/pkg/imagetest/image_fixtures.go:162
        	            				/home/runner/work/stereoscope/stereoscope/pkg/imagetest/image_fixtures.go:152
        	            				/home/runner/work/stereoscope/stereoscope/pkg/imagetest/image_fixtures.go:33
        	            				/home/runner/work/stereoscope/stereoscope/test/integration/fixture_image_simple_test.go:163
        	            				/opt/hostedtoolcache/go/1.25.4/x64/src/testing/benchmark.go:245
        	            				/opt/hostedtoolcache/go/1.25.4/x64/src/runtime/asm_amd64.s:1693
        	Error:      	Received unexpected error:
        	            	exit status 1
        	Test:       	BenchmarkSimpleImage_GetImage
        	Messages:   	could not import docker image to containerd (shell out)
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   60757	     19560 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   60948	     19617 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   61543	     19628 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   60931	     19467 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   61366	     19573 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   61243	     19545 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   61046	     19692 ns/op	    2616 B/op	      18 allocs/op
--- FAIL: BenchmarkSimpleImage_FetchSquashedContents
    image_fixtures.go:193: using existing image tar: 'test-fixtures/cache/stereoscope-fixture-image-simple-04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7.tar' (size: 22528, modified: 2025-12-05 18:35:10.044158716 +0000 UTC, mode: -rw-r--r--)
    image_fixtures.go:75: error getting fixture image: 'podman' 'image-simple' with request 'podman:stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7': unable to detect input for 'stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7', errs: podman not available: no host address
FAIL
exit status 1
FAIL	github.com/anchore/stereoscope/test/integration	19.497s
?   	github.com/anchore/stereoscope/test/integration/test-fixtures/registry	[no test files]
FAIL
goos: linux
goarch: amd64
pkg: github.com/anchore/stereoscope/pkg/file
cpu: AMD EPYC 7763 64-Core Processor                
ctr: 
           │ .tmp/benchmark-8771837.txt │
           │           sec/op           │
TarIndex-4                  33.67µ ± 1%

           │ .tmp/benchmark-8771837.txt │
           │            B/op            │
TarIndex-4                 5.566Ki ± 0%

           │ .tmp/benchmark-8771837.txt │
           │         allocs/op          │
TarIndex-4                   93.00 ± 0%

pkg: github.com/anchore/stereoscope/test/integration
                                      │ .tmp/benchmark-8771837.txt │
                                      │           sec/op           │
SimpleImage_GetImage/docker-archive-4                  1.045m ± 8%

                                      │ .tmp/benchmark-8771837.txt │
                                      │            B/op            │
SimpleImage_GetImage/docker-archive-4                 268.5Ki ± 0%

                                      │ .tmp/benchmark-8771837.txt │
                                      │         allocs/op          │
SimpleImage_GetImage/docker-archive-4                  2.244k ± 0%

ctr: connection error: desc = "transport: Error while dialing: dial unix /run/containerd/containerd.sock: connect: permission denied"
                                                   │ .tmp/benchmark-8771837.txt │
                                                   │           sec/op           │
SimpleImage_FetchSquashedContents/docker-archive-4                  19.57µ ± 1%

                                                   │ .tmp/benchmark-8771837.txt │
                                                   │            B/op            │
SimpleImage_FetchSquashedContents/docker-archive-4                 2.555Ki ± 0%

                                                   │ .tmp/benchmark-8771837.txt │
                                                   │         allocs/op          │
SimpleImage_FetchSquashedContents/docker-archive-4                   18.00 ± 0%
goos: linux
goarch: amd64
pkg: github.com/anchore/stereoscope/pkg/file
cpu: AMD EPYC 7763 64-Core Processor                
ctr: 
           │ .tmp/benchmark-8771837.txt │
           │           sec/op           │
TarIndex-4                  33.67µ ± 1%

           │ .tmp/benchmark-8771837.txt │
           │            B/op            │
TarIndex-4                 5.566Ki ± 0%

           │ .tmp/benchmark-8771837.txt │
           │         allocs/op          │
TarIndex-4                   93.00 ± 0%

pkg: github.com/anchore/stereoscope/test/integration
                                      │ .tmp/benchmark-8771837.txt │
                                      │           sec/op           │
SimpleImage_GetImage/docker-archive-4                  1.045m ± 8%

                                      │ .tmp/benchmark-8771837.txt │
                                      │            B/op            │
SimpleImage_GetImage/docker-archive-4                 268.5Ki ± 0%

                                      │ .tmp/benchmark-8771837.txt │
                                      │         allocs/op          │
SimpleImage_GetImage/docker-archive-4                  2.244k ± 0%

ctr: connection error: desc = "transport: Error while dialing: dial unix /run/containerd/containerd.sock: connect: permission denied"
                                                   │ .tmp/benchmark-8771837.txt │
                                                   │           sec/op           │
SimpleImage_FetchSquashedContents/docker-archive-4                  19.57µ ± 1%

                                                   │ .tmp/benchmark-8771837.txt │
                                                   │            B/op            │
SimpleImage_FetchSquashedContents/docker-archive-4                 2.555Ki ± 0%

                                                   │ .tmp/benchmark-8771837.txt │
                                                   │         allocs/op          │
SimpleImage_FetchSquashedContents/docker-archive-4                   18.00 ± 0%

spiffcs · 2025-12-05T18:32:40Z

@dependabot rebase

dependabot · 2025-12-05T18:32:44Z

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.20.6 to 0.20.7. - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.20.6...v0.20.7) --- updated-dependencies: - dependency-name: github.com/google/go-containerregistry dependency-version: 0.20.7 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 1, 2025

github-actions bot approved these changes Dec 1, 2025

View reviewed changes

dependabot bot force-pushed the dependabot/go_modules/github.com/google/go-containerregistry-0.20.7 branch from 680263a to 0933885 Compare December 5, 2025 18:32

github-actions bot approved these changes Dec 5, 2025

View reviewed changes

dependabot bot force-pushed the dependabot/go_modules/github.com/google/go-containerregistry-0.20.7 branch from 0933885 to f669c0e Compare December 5, 2025 18:33

github-actions bot approved these changes Dec 5, 2025

View reviewed changes

spiffcs enabled auto-merge (squash) December 5, 2025 18:39

spiffcs merged commit 4a07743 into main Dec 5, 2025
7 checks passed

spiffcs deleted the dependabot/go_modules/github.com/google/go-containerregistry-0.20.7 branch December 5, 2025 18:39

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump github.com/google/go-containerregistry from 0.20.6 to 0.20.7 #482

chore(deps): bump github.com/google/go-containerregistry from 0.20.6 to 0.20.7 #482

Uh oh!

dependabot bot commented on behalf of github Dec 1, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Dec 1, 2025 •

edited

Loading

Uh oh!

spiffcs commented Dec 5, 2025

Uh oh!

dependabot bot commented on behalf of github Dec 5, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(deps): bump github.com/google/go-containerregistry from 0.20.6 to 0.20.7 #482

chore(deps): bump github.com/google/go-containerregistry from 0.20.6 to 0.20.7 #482

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.20.7

What's Changed

New Contributors

Uh oh!

github-actions bot commented Dec 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Benchmark Test Results

Uh oh!

spiffcs commented Dec 5, 2025

Uh oh!

dependabot bot commented on behalf of github Dec 5, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Dec 1, 2025 •

edited

Loading

github-actions bot commented Dec 1, 2025 •

edited

Loading