chore(deps): update dependency chainguard-dev/apko to v1.4.14 #11

Merged
renovate-bot merged 1 commit from renovate/chainguard-dev-apko-1.x into main 2026-10-30 13:00:32 +01:00
Collaborator

This PR contains the following updates:

Package Update Change
chainguard-dev/apko patch 1.4.13 → 1.4.14

Release Notes

chainguard-dev/apko

v1.4.14

Compare Source

Changelog

  • 6a66a43 Regenerate apko-discover.lock.json golden file (#​2608)
  • 0d57364 Use go-jose v4 directly for JWKS key discovery (#​2621)
  • 70b8c43 apk: stop writing the uncompressed data tar into the cache (#​2622)
  • f7ffe4e build(deps): bump chainguard.dev/sdk from 0.1.404 to 0.1.421 (#​2605)
  • fb0bf33 build(deps): bump chainguard.dev/sdk from 0.1.421 to 0.1.424 (#​2614)
  • 7223d8c build(deps): bump chainguard.dev/sdk from 0.1.424 to 0.1.426 (#​2616)
  • ab9c6d6 build(deps): bump github.com/erofs/go-erofs from 0.3.2-0.20260804074615-52cc42c5291c to 0.3.2 (#​2617)
  • dec3e6d build(deps): bump github.com/github/go-spdx/v2 from 2.7.1 to 2.8.0 (#​2603)
  • 796ba1d build(deps): bump google.golang.org/api from 0.305.0 to 0.308.0 (#​2604)
  • f71ffa1 build(deps): bump the codeql group across 1 directory with 2 updates (#​2606)
  • 6c60be3 build: split a layered build's walk from how it writes layers (#​2615)
  • ad76450 fix(apk): don't write to an offline cache on a package cache miss (#​2611)
  • 41d1382 paths: recursive permission mutations follow symlinks and re-own files outside the tree (#​2618)
  • ad680c7 tarfs: keep a package file's changes once it is opened to write (#​2612)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [chainguard-dev/apko](https://github.com/chainguard-dev/apko) | patch | `1.4.13` → `1.4.14` | --- ### Release Notes <details> <summary>chainguard-dev/apko</summary> ### [`v1.4.14`](https://github.com/chainguard-dev/apko/releases/tag/v1.4.14) [Compare Source](https://github.com/chainguard-dev/apko/compare/v1.4.13...v1.4.14) #### Changelog - [`6a66a43`](https://github.com/chainguard-dev/apko/commit/6a66a431605aca243f9b9cb185404c80f61c56b3) Regenerate apko-discover.lock.json golden file ([#&#8203;2608](https://github.com/chainguard-dev/apko/issues/2608)) - [`0d57364`](https://github.com/chainguard-dev/apko/commit/0d57364915f16b2378d00efc0d39e4c08bf7d8f5) Use go-jose v4 directly for JWKS key discovery ([#&#8203;2621](https://github.com/chainguard-dev/apko/issues/2621)) - [`70b8c43`](https://github.com/chainguard-dev/apko/commit/70b8c434bba5e541cd616696710de3942f91540b) apk: stop writing the uncompressed data tar into the cache ([#&#8203;2622](https://github.com/chainguard-dev/apko/issues/2622)) - [`f7ffe4e`](https://github.com/chainguard-dev/apko/commit/f7ffe4eefa4b1919e90f2301daa0c96ff51aa5bf) build(deps): bump chainguard.dev/sdk from 0.1.404 to 0.1.421 ([#&#8203;2605](https://github.com/chainguard-dev/apko/issues/2605)) - [`fb0bf33`](https://github.com/chainguard-dev/apko/commit/fb0bf33bf34ba55cf2a4370dbf7c4a064484ffd5) build(deps): bump chainguard.dev/sdk from 0.1.421 to 0.1.424 ([#&#8203;2614](https://github.com/chainguard-dev/apko/issues/2614)) - [`7223d8c`](https://github.com/chainguard-dev/apko/commit/7223d8c8b92737e5a33cfcae23d8e16e285af3b0) build(deps): bump chainguard.dev/sdk from 0.1.424 to 0.1.426 ([#&#8203;2616](https://github.com/chainguard-dev/apko/issues/2616)) - [`ab9c6d6`](https://github.com/chainguard-dev/apko/commit/ab9c6d6dfc930c4aed1c5017a1aa6e62de5fb764) build(deps): bump github.com/erofs/go-erofs from 0.3.2-0.20260804074615-52cc42c5291c to 0.3.2 ([#&#8203;2617](https://github.com/chainguard-dev/apko/issues/2617)) - [`dec3e6d`](https://github.com/chainguard-dev/apko/commit/dec3e6d775622d64b862ae1dc5bc2c41708d8a20) build(deps): bump github.com/github/go-spdx/v2 from 2.7.1 to 2.8.0 ([#&#8203;2603](https://github.com/chainguard-dev/apko/issues/2603)) - [`796ba1d`](https://github.com/chainguard-dev/apko/commit/796ba1dc61bfa4629b6e2e4b06770f9924287426) build(deps): bump google.golang.org/api from 0.305.0 to 0.308.0 ([#&#8203;2604](https://github.com/chainguard-dev/apko/issues/2604)) - [`f71ffa1`](https://github.com/chainguard-dev/apko/commit/f71ffa13c0110e34d6a11e8c0246184c294b80c3) build(deps): bump the codeql group across 1 directory with 2 updates ([#&#8203;2606](https://github.com/chainguard-dev/apko/issues/2606)) - [`6c60be3`](https://github.com/chainguard-dev/apko/commit/6c60be375f23fd3476e002d8fcf6929593326260) build: split a layered build's walk from how it writes layers ([#&#8203;2615](https://github.com/chainguard-dev/apko/issues/2615)) - [`ad76450`](https://github.com/chainguard-dev/apko/commit/ad76450190fe3cc11737eacee3aba1b9c8556a94) fix(apk): don't write to an offline cache on a package cache miss ([#&#8203;2611](https://github.com/chainguard-dev/apko/issues/2611)) - [`41d1382`](https://github.com/chainguard-dev/apko/commit/41d1382ec10039d5c8a37746f5c4d48d30bcd427) paths: recursive permission mutations follow symlinks and re-own files outside the tree ([#&#8203;2618](https://github.com/chainguard-dev/apko/issues/2618)) - [`ad680c7`](https://github.com/chainguard-dev/apko/commit/ad680c7be02ae48e884d214fc92f55ac1f5201ce) tarfs: keep a package file's changes once it is opened to write ([#&#8203;2612](https://github.com/chainguard-dev/apko/issues/2612)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovate**redacted**/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODEuNiIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MS42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
chore(deps): update dependency chainguard-dev/apko to v1.4.14
All checks were successful
ci/woodpecker/pr/woodpecker Pipeline was successful
ci/woodpecker/pull_request_closed/woodpecker Pipeline was successful
ci/woodpecker/push/woodpecker Pipeline was successful
00d9c2a49d
renovate-bot scheduled this pull request to auto merge when all checks succeed 2026-10-30 13:00:22 +01:00
renovate-bot deleted branch renovate/chainguard-dev-apko-1.x 2026-10-30 13:00:32 +01:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
public/apko-melange!11
No description provided.