Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps github.com/buildpacks/pack from 0.38.2 to 0.39.0.

Release notes

Sourced from github.com/buildpacks/pack's releases.

pack v0.39.0

Prerequisites

  • A container runtime such as Docker or podman must be available to execute builds.

Install

For instructions on installing pack, see our installation docs.

Run

Run the command pack.

You should see the following output

CLI for building apps using Cloud Native Buildpacks

Usage: pack [command]

Available Commands: build Generate app image from source code builder Interact with builders buildpack Interact with buildpacks extension Interact with extensions config Interact with your local pack config file inspect Show information about a built app image stack (deprecated) Interact with stacks rebase Rebase app image with latest run image sbom Interact with SBoM completion Outputs completion script location report Display useful information for reporting an issue version Show current 'pack' version help Help about any command

Flags: --force-color Force color output -h, --help Help for 'pack' --no-color Disable color output -q, --quiet Show less output --timestamps Enable timestamps in output -v, --verbose Show more output --version Show current 'pack' version

Use "pack [command] --help" for more information about a command.

Info

... (truncated)

Commits
  • a8010d1 fix: upgrade imgutil to fix containerd snapshotter issue (#2493)
  • e45b434 fix: update lifecycle API validation for experimental flag solve issue #2414 ...
  • b604f01 Updating lifecycle version to v0.20.19 (#2481)
  • 9321d2c Bump to go 1.25 (#2480)
  • 53ab88c When fetching lifecycle image, use a platform-specific digest (#2467)
  • 6e6e4bf build(deps): bump the go-dependencies group across 1 directory with 3 updates...
  • 019eb74 fix(security): Resolve CVE-GHSA-cgrx-mc8f-2prm by upgrading selinux to v1.13....
  • 6735aac build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#2473)
  • f5f0a62 Use Docker API version negotiation instead of hardcoded version (#2474)
  • d1a30b6 build(deps): bump the go-dependencies group with 8 updates (#2453)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added area/dependency Issues or PRs related to dependency changes kind/chore Categorizes issue or PR as related to a chore. labels Dec 1, 2025
@dependabot dependabot bot requested a review from a team as a code owner December 1, 2025 21:14
@dependabot dependabot bot added area/dependency Issues or PRs related to dependency changes kind/chore Categorizes issue or PR as related to a chore. labels Dec 1, 2025
@github-actions
Copy link

github-actions bot commented Dec 1, 2025

✅ Proposed changes verification passed

This pull request comes with up-to-date documentation and no illegal standard output usages.

Find more detailed information in the verify / standards (pull_request_target) action.

halamix2
halamix2 previously approved these changes Dec 2, 2025
@halamix2 halamix2 enabled auto-merge (squash) December 2, 2025 07:51
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/buildpacks/pack-0.39.0 branch 2 times, most recently from b551c37 to 460fd6f Compare December 2, 2025 07:59
Bumps [github.com/buildpacks/pack](https://github.com/buildpacks/pack) from 0.38.2 to 0.39.0.
- [Release notes](https://github.com/buildpacks/pack/releases)
- [Changelog](https://github.com/buildpacks/pack/blob/main/RELEASE.md)
- [Commits](buildpacks/pack@v0.38.2...v0.39.0)

---
updated-dependencies:
- dependency-name: github.com/buildpacks/pack
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/buildpacks/pack-0.39.0 branch from 460fd6f to be9f18c Compare December 2, 2025 08:04
@halamix2 halamix2 merged commit ea2f036 into main Dec 2, 2025
12 checks passed
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/buildpacks/pack-0.39.0 branch December 2, 2025 09:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/dependency Issues or PRs related to dependency changes kind/chore Categorizes issue or PR as related to a chore.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants