build(deps): Bump github.com/spiffe/go-spiffe/v2 from 2.6.0 to 2.8.0 in /authbridge/authlib

[dependabot]

Bumps github.com/spiffe/go-spiffe/v2 from 2.6.0 to 2.8.0.

Release notes

Sourced from github.com/spiffe/go-spiffe/v2's releases.

v2.8.0

Added

• Experimental SPIFFE Broker API protobuf definitions in the new exp/proto/spiffe/broker package (#388)

v2.7.0

Added

• Experimental support for WIT-SVIDs, including the new exp/svid/witsvid and exp/bundle/witbundle packages and Workload API client support for fetching and watching WIT-SVIDs and WIT bundles (#385, #391)

Changed

• X509-SVID verification now rejects leaf certificates with a SPIFFE ID that has a root path (#375)
• Other dependency updates.

Changelog

Sourced from github.com/spiffe/go-spiffe/v2's changelog.

[2.8.0] - 2026-06-16

Added

• Experimental SPIFFE Broker API protobuf definitions in the new exp/proto/spiffe/broker package (#388)

[2.7.0] - 2026-06-03

Added

• Experimental support for WIT-SVIDs, including the new exp/svid/witsvid and exp/bundle/witbundle packages and Workload API client support for fetching and watching WIT-SVIDs and WIT bundles (#385, #391)

Changed

• X509-SVID verification now rejects leaf certificates with a SPIFFE ID that has a root path (#375)
• Other dependency updates.

Commits

• dbebcf8 v2.8.0 changelog (#394)
• f685b2d Add Broker API (#388)
• 76b14bd v2.7.0 changelog (#392)
• 8580a01 Add missing witbundle APIs for parity with jwtbundle (#391)
• 280d52e fix(x509svid): reject leaf SPIFFE IDs with root path (#375)
• c7f2701 Add WIT-SVID (#385)
• af3667a Bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#380)
• c925be7 Bump christophebedard/dco-check from 0.5.0 to 0.5.1 (#390)
• 1d02ca5 Bump google.golang.org/protobuf from 1.36.8 to 1.36.11 (#371)
• 9e0f387 Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#381)
• Additional commits viewable in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 6227ed66-5a49-42b3-b7c1-279176999ed2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

📝 Walkthrough

Walkthrough

The authbridge/authlib Go module dependency github.com/spiffe/go-spiffe/v2 is bumped from v2.6.0 to v2.7.0 in the require directive. No other dependencies or the Go version directive are affected.

Changes

Dependency Update

Layer / File(s)	Summary
SPIFFE go-spiffe version bump authbridge/authlib/go.mod	The required dependency github.com/spiffe/go-spiffe/v2 is updated from v2.6.0 to v2.7.0.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🐰 A spiffe of version bumps, hop, hop, hooray!
From v2.6 to v2.7 we leap and play,
Dependencies dance in the go.mod song,
Fresh SPIFFE magic helps us along! ✨

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Title check	⚠️ Warning	The PR title states version 2.8.0, but the actual change updates the dependency to v2.7.0 as confirmed by the file summary and PR objectives.	Correct the title to reflect the actual version bump: 'build(deps): Bump github.com/spiffe/go-spiffe/v2 from 2.6.0 to 2.7.0 in /authbridge/authlib'

✅ Passed checks (4 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/authbridge/authlib/github.com/spiffe/go-spiffe/v2-2.7.0

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[dependabot]

Superseded by #541.