Skip to content

build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in /pkg/app/pipedv1/plugin/cloudrun#16

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/pkg/app/pipedv1/plugin/cloudrun/github.com/go-jose/go-jose/v4-4.1.4
Open

build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in /pkg/app/pipedv1/plugin/cloudrun#16
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/pkg/app/pipedv1/plugin/cloudrun/github.com/go-jose/go-jose/v4-4.1.4

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 3, 2026

Bumps github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4.

Release notes

Sourced from github.com/go-jose/go-jose/v4's releases.

v4.1.4

What's Changed

Fixes Panic in JWE decryption. See GHSA-78h2-9frx-2jm8

Full Changelog: go-jose/go-jose@v4.1.3...v4.1.4

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 3, 2026
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.0.5 to 4.1.4.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](go-jose/go-jose@v4.0.5...v4.1.4)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.4 in /pkg/app/pipedv1/plugin/cloudrun build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in /pkg/app/pipedv1/plugin/cloudrun Apr 21, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/pkg/app/pipedv1/plugin/cloudrun/github.com/go-jose/go-jose/v4-4.1.4 branch from 4cd3166 to b30ccb4 Compare April 21, 2026 09:31
@github-actions
Copy link
Copy Markdown

This PR is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 7 days.

@github-actions github-actions Bot added Stale and removed Stale labels May 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/go area/pipedv1 dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants