chore(deps): bump the go-minor-and-patch group across 1 directory with 30 updates

Closed
DE
4mo ago
+238-235

Bumps the go-minor-and-patch group with 19 updates in the / directory:

PackageFromTo
code.cloudfoundry.org/bytefmt0.75.00.76.0
github.com/aws/aws-sdk-go-v21.41.111.42.0
github.com/aws/aws-sdk-go-v2/config1.32.221.32.25
github.com/aws/aws-sdk-go-v2/service/secretsmanager1.42.11.42.3
github.com/jedib0t/go-pretty/v66.8.06.8.1
github.com/testcontainers/testcontainers-go0.40.00.42.0
golang.org/x/term0.43.00.44.0
google.golang.org/api0.280.00.284.0
github.com/Azure/azure-sdk-for-go/sdk/azcore1.21.11.22.0
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob1.7.01.8.0
github.com/aws/aws-sdk-go-v2/feature/s3/manager1.22.241.22.27
github.com/nats-io/nats.go1.51.01.52.0
github.com/open-policy-agent/opa1.17.01.17.1
github.com/posthog/posthog-go1.14.01.15.0
github.com/sigstore/cosign/v33.0.63.1.1
github.com/sigstore/sigstore-go1.2.01.2.1
go.step.sm/crypto0.81.00.83.0
github.com/vektah/gqlparser/v22.5.332.5.34
github.com/minio/minio-go/v77.0.987.2.0

Updates code.cloudfoundry.org/bytefmt from 0.75.0 to 0.76.0

Commits

Updates github.com/aws/aws-sdk-go-v2 from 1.41.11 to 1.42.0

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.22 to 1.32.25

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.21 to 1.19.24

Commits

Updates github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.42.1 to 1.42.3

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sso from 1.31.1 to 1.31.3

Commits

Updates github.com/aws/smithy-go from 1.27.0 to 1.27.1

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-06-05)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.2
    • Bug Fix: Fix incorrect serialization of unions in CBOR-based protocols.

Release (2026-06-04)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.1
    • Bug Fix: Fixed a deserialization failure in all protocols when encountering a union with explicit null members.
    • Bug Fix: Fixed a panic when deserializing nested unions in JSON- and CBOR-based protocols.

Release (2026-06-02)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.0
    • Feature: Add APIs for schema-based serialization.
    • Feature: Add support for all current AWS and Smithy protocols.
    • Bug Fix: Enforce max nesting depth of 128 on CBOR payloads.
  • github.com/aws/smithy-go/aws-http-auth: v1.2.0
    • Feature: Add event stream signer.

Release (2026-05-27)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.26.0
    • Feature: Add StringSlice to endpoint rulesfn.

Release (2026-04-23)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.25.1
    • Bug Fix: Fixed a memory leak in the LRU cache implementation used by some AWS services.

... (truncated)

Commits

Updates github.com/jedib0t/go-pretty/v6 from 6.8.0 to 6.8.1

Release notes

Sourced from github.com/jedib0t/go-pretty/v6's releases.

v6.8.1

What's Changed

A hardening pass across the table, list, progress, and text packages, fixing security issues, crash/race bugs, and performance problems in the render hot paths, with benchmarks added to back the optimizations.

Security

  • table/list (HTML): escape the title, caption, and CSS class names in RenderHTML() to prevent HTML/attribute injection.
  • table (CSV): make RenderCSV() output RFC 4180 compliant, and add an opt-in Style().CSV.FieldProtection option that neutralizes spreadsheet formula-injection fields (=, +, -, @, tab, CR).
  • text: sanitize hyperlink URLs and bound the escape-sequence parser buffer so adversarial input can't grow it without limit.

Correctness

  • progress: fix a render panic on tiny tracker lengths, data races on tracker/indicator state, and a leaked time.Ticker in the terminal-size watcher.
  • table: guard auto-index rendering against empty maxColumnLengths.
  • text: prevent a panic in VAlign.Apply on negative maxLines.

Performance

  • table: compile regex filters once per render; pre-size render builders.
  • list: hoist repeated width math out of the render loops.
  • text: speed up Align.Apply and StringWidthWithoutEscSequences.
  • progress: build PacManChomp frames with a strings.Builder.

Tooling

  • Moved root-level benchmarks into their packages and wired up make bench; added benchmarks for the table/text/list/progress render hot paths and tests covering the retained-done-tracker render paths.

Full Changelog: https://github.com/jedib0t/go-pretty/compare/v6.8.0...v6.8.1

Commits

Updates github.com/testcontainers/testcontainers-go from 0.40.0 to 0.42.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.42.0

What's Changed

⚠️ Breaking Changes

🔒 Security

🐛 Bug Fixes

  • fix: return an error when docker host cannot be retrieved (#3613) @​ash2k

🧹 Housekeeping

📦 Dependency updates

  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.28.0 to 1.43.0 in /modules/grafana-lgtm (#3639) @dependabot[bot]
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.42.0 to 1.43.0 in /modules/compose (#3641) @dependabot[bot]
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0 in /modules/compose (#3645) @dependabot[bot]
  • chore(deps): bump mkdocs-include-markdown-plugin from 7.2.1 to 7.2.2 (#3626) @dependabot[bot]
  • chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.2 to 1.97.3 in /modules/localstack (#3638) @dependabot[bot]
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.41.0 to 1.43.0 in /modules/grafana-lgtm (#3643) @dependabot[bot]
  • chore(deps): bump go.opentelemetry.io/otel/sdk from 1.41.0 to 1.43.0 in /modules/milvus (#3644) @dependabot[bot]
  • chore: update to Go 1.25.9, 1.26.9 (#3647) @​thaJeztah
  • chore(deps): bump bump github.com/klauspost/compress v1.18.5, github.com/docker/compose v5.1.2 (#3646) @​thaJeztah
  • chore(deps): bump moby/client v0.4.0, moby/api v1.54.1 (#3634) @​thaJeztah
  • chore(deps): bump golang.org/x/sys from 0.41.0 to 0.42.0 (#3629) @dependabot[bot]
  • chore(deps): bump github.com/moby/patternmatcher from 0.6.0 to 0.6.1 (#3628) @dependabot[bot]
  • chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.2 to 4.26.3 (#3627) @dependabot[bot]
  • fix(localstack): accept community-archive as a valid tag (#3601) @​johnduhart
  • chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in /modules/gcloud (#3632) @dependabot[bot]
  • chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 (#3625) @dependabot[bot]
  • chore(deps): bump pygments from 2.19.2 to 2.20.0 (#3615) @dependabot[bot]
  • chore(deps): bump google.golang.org/grpc from 1.67.0 to 1.79.3 in /modules/milvus (#3612) @dependabot[bot]
  • chore(deps): bump google.golang.org/grpc from 1.67.0 to 1.79.3 in /modules/etcd (#3611) @dependabot[bot]
  • chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 in /modules/ollama (#3610) @dependabot[bot]
  • chore(deps): bump google.golang.org/grpc from 1.67.0 to 1.79.3 in /modules/pinecone (#3609) @dependabot[bot]
  • chore(deps): bump google.golang.org/grpc from 1.67.0 to 1.79.3 in /modules/couchbase (#3608) @dependabot[bot]
  • chore(deps): bump requests from 2.32.4 to 2.33.0 (#3604) @dependabot[bot]
  • chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 in /modules/meilisearch (#3607) @dependabot[bot]
  • chore(deps): bump github.com/moby/buildkit from 0.27.1 to 0.28.1 in /modules/compose (#3605) @dependabot[bot]

... (truncated)

Commits
  • 6e58418 chore: use new version (v0.42.0) in modules and examples
  • f713dc0 chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetr...
  • 300827a chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetr...
  • 7a15ac1 chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptrace...
  • 5bae3d2 fix: return an error when docker host cannot be retrieved (#3613)
  • fc19484 chore(deps): bump mkdocs-include-markdown-plugin from 7.2.1 to 7.2.2 (#3626)
  • 95bdc0c chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 (#3638)
  • 75aa226 chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptrace...
  • 2f59938 chore(deps): bump go.opentelemetry.io/otel/sdk in /modules/milvus (#3644)
  • 580abf6 chore: update to Go 1.25.9, 1.26.9 (#3647)
  • Additional commits viewable in compare view

Updates golang.org/x/term from 0.43.0 to 0.44.0

Commits

Updates google.golang.org/api from 0.280.0 to 0.284.0

Release notes

Sourced from google.golang.org/api's releases.

v0.284.0

0.284.0 (2026-06-09)

Features

v0.283.0

0.283.0 (2026-06-01)

Features

v0.282.0

0.282.0 (2026-05-27)

Features

v0.281.0

0.281.0 (2026-05-26)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.284.0 (2026-06-09)

Features

0.283.0 (2026-06-01)

Features

0.282.0 (2026-05-27)

Features

0.281.0 (2026-05-26)

Features

Commits

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.1 to 1.22.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.22.0

1.22.0 (2026-06-04)

Features Added

  • Added type datetime.RFC7231 for date/time values in RFC 1123 format with a fixed GMT timezone.

Other Changes

  • Upgraded dependencies.
Commits
  • a19f613 Prep azcore@v1.22.0 for release (#26926)
  • 5803c0e Increment package version after release of storage/azblob (#26935) (#26943)
  • 9a979ff [Automation] Regenerate SDK based on typespec-go branch main 【batch 6】 (#26939)
  • 711094d eng/tools/generator: release v0.4.14 (#26934)
  • 20bd677 Deprecate Change Analysis SDK (#26913)
  • 92a31ec [Automation] Regenerate SDK based on typespec-go branch main 【batch 5】 (#26932)
  • 768459d azcertificates: live recording for PlatformManaged + review fixes (follow-up ...
  • e845f72 Update codeowners (#26918)
  • 118bb35 eng/tools/internal/exports: handle untyped const with selector expr value (#2...
  • 2b3767b Configurations: 'specification/containerservice/resource-manager/Microsoft.C...
  • Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/storage/azblob's releases.

sdk/storage/azblob/v1.8.0

1.8.0 (2026-06-15)

Features Added

  • Includes all features from 1.8.0-beta.1 and 1.8.0-beta.2

sdk/storage/azblob/v1.8.0-beta.2

1.8.0-beta.2 (2026-06-03)

Features Added

  • Added support for the Expect: 100-continue HTTP header on requests with a body. The new ExpectContinueBehavior field on ClientOptions configures the behavior via ExpectContinueOptions. By default (ExpectContinueModeApplyOnThrottle) the header is sent for one minute after a 429, 500, or 503 response is received; the interval can be overridden via ExpectContinueOptions.ThrottleInterval. Other modes are ExpectContinueModeOn (always send) and ExpectContinueModeOff (never send). Set the environment variable AZURE_STORAGE_DISABLE_EXPECT_CONTINUE_HEADER=true to disable the feature regardless of ClientOptions.
Commits

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.22.24 to 1.22.27

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.103.1 to 1.103.3

Commits

Updates github.com/nats-io/nats.go from 1.51.0 to 1.52.0

Release notes

Sourced from github.com/nats-io/nats.go's releases.

Release v1.52.0

Changelog

This release focuses on 2.14 nats-server features support.

ADDED

  • JetStream:
    • Added fast batch stream config field (#2052)
    • Added message scheduling headers and publish opts (#2051)
    • Updated StreamConfig with Consumer field and added AckFlowControlPolicy (#2070)
    • Added reset consumer API (#2069)

FIXED

  • Core NATS:
    • Fix Subscription.StatusChanged channel closure on Closed Subscription. Thanks @​nithimani38-prog for the contribution (#2034)

IMPROVED

  • Fixed Flaky JS cluster tests (#2062)

Complete Changes

https://github.com/nats-io/nats.go/compare/v1.51.0...v1.52.0

Commits
  • e9f2a36 Release v1.52.0 (#2074)
  • 609274f [FIXED] Subscription.StatusChanged channel closure on Closed Subscription (#2...
  • f7cde74 [IMPROVED] Use latest release build for badge in README (#2064)
  • c7476ea [IMPROVED] Reject empty consumer info in CONSUMER.RESET response (#2072)
  • 8fde36f [ADDED] ResetConsumer JetStream API (#2069)
  • dcfd0fc [ADDED] StreamSource.Consumer config field and AckFlowControlPolicy (#2070)
  • 7a28503 [ADDED] Publish options and consts for message scheduling (#2051)
  • 6c91a51 [ADDED] AllowBatchPublish stream config field (#2052)
  • a614d0b [FIXED] Flaky JS cluster tests due to race in setupJSClusterWithSize (#2062)
  • See full diff in compare view

Updates github.com/open-policy-agent/opa from 1.17.0 to 1.17.1

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v1.17.1

This release uses the latest version of Go (1.26.4) to build OPA, fixing stdlib vulnerabilities in code that OPA's HTTP handler and crypto builtins use:

It is otherwise the same code as v1.17.0.

Note that users building their own OPA binaries and images already control the Golang version, so this is not relevant for them.

Miscellaneous

  • build: bump go 1.26.3 -> 1.26.4 (authored by @​srenatus)
Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

1.17.1

This release uses the latest version of Go (1.26.4) to build OPA, fixing stdlib vulnerabilities in code that OPA's HTTP handler and crypto builtins use:

It is otherwise the same code as v1.17.0.

Note that users building their own OPA binaries and images already control the Golang version, so this is not relevant for them.

Miscellaneous

  • build: bump go 1.26.3 -> 1.26.4 (authored by @​srenatus)
Commits

Updates github.com/posthog/posthog-go from 1.14.0 to 1.15.0

Release notes

Sourced from github.com/posthog/posthog-go's releases.

1.15.0

Unreleased

Changelog

Sourced from github.com/posthog/posthog-go's changelog.

1.15.0

Minor Changes

  • 64ad172: Support the early_exit flag filter in local evaluation. When a flag's filters.early_exit is true and a condition group's property filters match (or there are none) but the rollout percentage excludes the user, evaluation now stops and returns false immediately instead of falling through to later groups. Mirrors the server-side (Rust) evaluation engine. A property-filter mismatch still falls through as before, and behaviour is unchanged when early_exit is unset or false.

Minor Changes

  • Support the early_exit option on feature flag filters during local evaluation. When a flag has filters.early_exit set to true and a condition group matches its property filters (or has none) but the rollout percentage excludes the user, local evaluation now returns a definitive disabled result immediately instead of falling through to later condition groups, mirroring the server-side evaluation engine. Property-filter mismatches continue to fall through as before, and behaviour is unchanged when early_exit is absent or false.
Commits
  • 1a54557 chore: release v1.15.0 [version bump] [skip ci]
  • 64ad172 feat(feature-flags): support early_exit in local evaluation (#217)
  • See full diff in compare view

Updates github.com/sigstore/cosign/v3 from 3.0.6 to 3.1.1

Release notes

Sourced from github.com/sigstore/cosign/v3's releases.

v3.1.1

What's Changed

Note: v3.1.0 was skipped due to a bug in our release pipeline. v3.1.1 is identical to v3.1.0

This release deprecates a number of flags related to verification material input for trust root material, as well as the bundle format, standardized across Sigstore SDKs, which is now the default output and input for signing and verifying respectively. You may continue to use the deprecated flags with Cosign v3.x releases. The deprecated flags will be removed in a future Cosign v4 release.

This release also updates the signing path for logging to Rekor v2. DSSE attestations will be logged as hashed entries, using the DSSE's pre-auth encoding (PAE). This should unblock developers who want to upload large signed DSSEs such as SBOMs.