Skip to content

build(deps): Bump github.com/spiffe/go-spiffe/v2 from 2.6.0 to 2.8.1 in /authbridge/authlib#541

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/authbridge/authlib/github.com/spiffe/go-spiffe/v2-2.8.1
Open

build(deps): Bump github.com/spiffe/go-spiffe/v2 from 2.6.0 to 2.8.1 in /authbridge/authlib#541
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/authbridge/authlib/github.com/spiffe/go-spiffe/v2-2.8.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/spiffe/go-spiffe/v2 from 2.6.0 to 2.8.1.

Release notes

Sourced from github.com/spiffe/go-spiffe/v2's releases.

v2.8.1

Changed

  • WIT bundle JWKS entries now include "use": "wit-svid" as required by the SPIFFE WIT spec (#395)

v2.8.0

Added

  • Experimental SPIFFE Broker API protobuf definitions in the new exp/proto/spiffe/broker package (#388)

v2.7.0

Added

  • Experimental support for WIT-SVIDs, including the new exp/svid/witsvid and exp/bundle/witbundle packages and Workload API client support for fetching and watching WIT-SVIDs and WIT bundles (#385, #391)

Changed

  • X509-SVID verification now rejects leaf certificates with a SPIFFE ID that has a root path (#375)
  • Other dependency updates.
Changelog

Sourced from github.com/spiffe/go-spiffe/v2's changelog.

[2.8.1] - 2026-06-19

Changed

  • WIT bundle JWKS entries now include "use": "wit-svid" as required by the SPIFFE WIT spec (#395)

[2.8.0] - 2026-06-16

Added

  • Experimental SPIFFE Broker API protobuf definitions in the new exp/proto/spiffe/broker package (#388)

[2.7.0] - 2026-06-03

Added

  • Experimental support for WIT-SVIDs, including the new exp/svid/witsvid and exp/bundle/witbundle packages and Workload API client support for fetching and watching WIT-SVIDs and WIT bundles (#385, #391)

Changed

  • X509-SVID verification now rejects leaf certificates with a SPIFFE ID that has a root path (#375)
  • Other dependency updates.
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jun 22, 2026
@dependabot dependabot Bot requested a review from a team as a code owner June 22, 2026 23:14
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jun 22, 2026
@evaline-ju

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [github.com/spiffe/go-spiffe/v2](https://github.com/spiffe/go-spiffe) from 2.6.0 to 2.8.1.
- [Release notes](https://github.com/spiffe/go-spiffe/releases)
- [Changelog](https://github.com/spiffe/go-spiffe/blob/main/CHANGELOG.md)
- [Commits](spiffe/go-spiffe@v2.6.0...v2.8.1)

---
updated-dependencies:
- dependency-name: github.com/spiffe/go-spiffe/v2
  dependency-version: 2.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/authbridge/authlib/github.com/spiffe/go-spiffe/v2-2.8.1 branch from 7084d31 to fe0e819 Compare June 30, 2026 15:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

Status: New/ToDo

Development

Successfully merging this pull request may close these issues.

2 participants