chore(deps): bump the go-minor-and-patch group with 22 updates

Closed
DE
3mo ago
+157-157

Bumps the go-minor-and-patch group with 22 updates:

PackageFromTo
code.cloudfoundry.org/bytefmt0.79.00.80.0
github.com/aws/aws-sdk-go-v2/config1.32.271.32.29
github.com/aws/aws-sdk-go-v2/credentials1.19.261.19.28
github.com/aws/aws-sdk-go-v2/service/secretsmanager1.42.51.43.0
github.com/aws/aws-sdk-go-v2/service/sso1.31.51.32.0
github.com/coreos/go-oidc/v33.19.03.20.0
github.com/googleapis/gax-go/v22.22.02.23.0
golang.org/x/term0.44.00.45.0
google.golang.org/api0.287.00.287.1
cloud.google.com/go/storage1.63.01.63.1
github.com/aws/aws-sdk-go-v2/feature/s3/manager1.22.301.22.32
github.com/aws/aws-sdk-go-v2/service/s31.104.21.105.0
github.com/sigstore/fulcio1.8.71.8.8
github.com/sigstore/sigstore-go1.2.11.2.2
github.com/sigstore/timestamp-authority/v22.1.22.1.3
google.golang.org/genproto/googleapis/api0.0.0-20260615183401-62b3387ff3240.0.0-20260630182238-925bb5da69e7
google.golang.org/genproto/googleapis/bytestream0.0.0-20260622175928-b703f567277d0.0.0-20260630182238-925bb5da69e7
github.com/XSAM/otelsql0.42.00.43.0
github.com/aws/aws-sdk-go-v2/service/sts1.43.51.44.0
github.com/prometheus/common0.69.00.70.0
golang.org/x/crypto0.53.00.54.0
golang.org/x/text0.39.00.40.0

Updates code.cloudfoundry.org/bytefmt from 0.79.0 to 0.80.0

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.27 to 1.32.29

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.26 to 1.19.28

Commits

Updates github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.42.5 to 1.43.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sso from 1.31.5 to 1.32.0

Commits

Updates github.com/coreos/go-oidc/v3 from 3.19.0 to 3.20.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.20.0

What's Changed

Full Changelog: https://github.com/coreos/go-oidc/compare/v3.19.0...v3.20.0

Commits
  • 75dfa5c oidc: add constants for "email" and "profile" scopes
  • a89f046 oidc: add API for determining when issuer URLs mismatch
  • 6a69b6d readme: update README and docs
  • f9049c9 oidc: ignore JWKs with unknown signing algorithms rather than failing
  • 2f178e0 SECURITY.md: add a security policy and point to project-level reporting
  • b3bc7da oidc: improve documentation for APIs
  • 0db9053 oidc: modernize with new Go APIs
  • See full diff in compare view

Updates github.com/googleapis/gax-go/v2 from 2.22.0 to 2.23.0

Release notes

Sourced from github.com/googleapis/gax-go/v2's releases.

v2.23.0

2.23.0 (2026-07-07)

Features

  • v2: add http.response.status_code to TransportTelemetryData (#513) (7d5554f)

Bug Fixes

Commits

Updates golang.org/x/term from 0.44.0 to 0.45.0

Commits

Updates google.golang.org/api from 0.287.0 to 0.287.1

Release notes

Sourced from google.golang.org/api's releases.

v0.287.1

0.287.1 (2026-07-07)

Documentation

Changelog

Sourced from google.golang.org/api's changelog.

0.287.1 (2026-07-07)

Documentation

Commits

Updates cloud.google.com/go/storage from 1.63.0 to 1.63.1

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.63.1

1.63.1 (2026-07-13)

Features

Bug Fixes

Commits

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.22.30 to 1.22.32

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.104.2 to 1.105.0

Commits

Updates github.com/sigstore/fulcio from 1.8.7 to 1.8.8

Release notes

Sourced from github.com/sigstore/fulcio's releases.

v1.8.8

Changelog

  • a783aca51abce93aca863fac2addf0194880e065 Include CT log error body in logs (#2393)
  • 965cdddc90299409ebba952f41b3be8233b2a7b2 update builder to use go1.26.4 (#2388)
  • 80d8405e84eb76d60d99363aa2782631c86418ba Add --ct-log-origin flag (#2392)
  • 7074b709ec6309d863f8789bdd32a75b49c5e127 build(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2383)
  • 16cc54efe85eb2f5ef7f7e51494cb344e14690a0 docs: clarify RSA_PSS algorithm and ignored field in proto (#2378)
  • 6b2c67d809db4a6fa4b4d04940fea0878151d8d7 Update fulcio to have configurable hsm-caroot-id rather than hardcoded (#2377)

Thanks for all contributors!

Commits
  • a783aca Include CT log error body in logs (#2393)
  • 965cddd update builder to use go1.26.4 (#2388)
  • 654e688 build(deps): bump golang.org/x/net (#2389)
  • 462c070 build(deps): bump nginx in the all group across 1 directory (#2381)
  • ccc0782 build(deps): bump golang from 68cb6d6 to 792443b (#2379)
  • 3e0f119 build(deps): bump the all group across 1 directory with 5 updates (#2391)
  • 61e2802 build(deps): bump the all group across 1 directory with 5 updates (#2390)
  • 80d8405 Add --ct-log-origin flag (#2392)
  • 7074b70 build(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2383)
  • 16cc54e docs: clarify RSA_PSS algorithm and ignored field in proto (#2378)
  • Additional commits viewable in compare view

Updates github.com/sigstore/sigstore-go from 1.2.1 to 1.2.2

Release notes

Sourced from github.com/sigstore/sigstore-go's releases.

v1.2.2

What's Changed

Full Changelog: https://github.com/sigstore/sigstore-go/compare/v1.2.1...v1.2.2

Commits
  • 55aa624 Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#655)
  • 2eb9560 Bump the minor-patch group across 1 directory with 2 updates (#656)
  • cbf26e4 Support Verification in sigstore/cosign with X.509 Certificate Chain (#581)
  • 8a3361c Bump go-tuf to v2.4.2 (#652)
  • d6ec891 Bump the minor-patch group across 2 directories with 7 updates (#651)
  • 945a0aa Bump actions/setup-go from 6.4.0 to 6.5.0 (#650)
  • 13a15e1 Bump actions/checkout from 6.0.3 to 7.0.0 (#648)
  • c95d7f4 Update workflows to use Actions network firewall (#646)
  • a2a84a6 Update cert identity verify functions to ensure some criteria is specified (#...
  • See full diff in compare view

Updates github.com/sigstore/timestamp-authority/v2 from 2.1.2 to 2.1.3

Release notes

Sourced from github.com/sigstore/timestamp-authority/v2's releases.

v2.1.3

What's Changed

v2.1.3 bumps the version of Go used to build the binaries and containers to the latest release, 1.26.4. This release also contains a number of changes related to RFC3161 compliance.

Full Changelog: https://github.com/sigstore/timestamp-authority/compare/v2.1.2...v2.1.3

Commits
  • 811e94a chore(deps): bump github.com/go-openapi/swag/cmdutils (#1423)
  • 41e1818 chore(deps): bump github.com/go-openapi/strfmt (#1420)
  • 32d28ff chore(deps): bump github.com/go-openapi/swag/netutils (#1421)
  • 157294b chore(deps): bump the actions group across 1 directory with 3 updates (#1419)
  • 42e74fc require timestamping leaf certificate to be an end-entity (#1416)
  • 3f20613 chore(deps): bump github.com/go-openapi/swag/jsonutils (#1422)
  • 01aa5b9 chore(deps): bump golang from 32c0e6e to f96cc55 (#1414)
  • 99c7698 handle client disconnection as 499 error: (#1417)
  • ba3024d chore(deps): bump actions/setup-go in the actions group (#1415)
  • b7c4a2a Fix timeout flag reporting its value type as format in help (#1413)
  • Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20260615183401-62b3387ff324 to 0.0.0-20260630182238-925bb5da69e7

Commits

Updates google.golang.org/genproto/googleapis/bytestream from 0.0.0-20260622175928-b703f567277d to 0.0.0-20260630182238-925bb5da69e7

Commits

Updates github.com/XSAM/otelsql from 0.42.0 to 0.43.0

Release notes

Sourced from github.com/XSAM/otelsql's releases.

Release v0.43.0

Removed

  • BREAKING Remove support for OTEL_SEMCONV_STABILITY_OPT_IN environment variable, legacy db.sql.latency metric, and db.statement span attribute. Only stable Semantic Conventions are now used. (#617)

Changed

  • Upgrade OTel Semconv to v1.40.0. (#606)
  • Upgrade OTel Semconv to v1.44.0. (#615)

Fixed

  • Implement driver.Validator on otConn so that database/sql connection pool health checks are properly delegated to the underlying driver connection. (#619)
  • AttributesFromDSN no longer panics on DSNs that wrap a unix-socket path in the protocol(/path/to.sock) form, e.g. unix(/tmp/mysql.sock)/dbname. The parser now extracts the address from inside the parentheses before splitting on /. (#625)

What's Changed

New Contributors

Full Changelog: https://github.com/XSAM/otelsql/compare/v0.42.0...v0.43.0

Changelog

Sourced from github.com/XSAM/otelsql's changelog.

[0.43.0] - 2026-07-12

Removed

  • BREAKING Remove support for OTEL_SEMCONV_STABILITY_OPT_IN environment variable, legacy db.sql.latency metric, and db.statement span attribute. Only stable Semantic Conventions are now used. (#617)

Changed

  • Upgrade OTel Semconv to v1.40.0. (#606)
  • Upgrade OTel Semconv to v1.44.0. (#615)

Fixed

  • Implement driver.Validator on otConn so that database/sql connection pool health checks are properly delegated to the underlying driver connection. (#619)
  • AttributesFromDSN no longer panics on DSNs that wrap a unix-socket path in the protocol(/path/to.sock) form, e.g. unix(/tmp/mysql.sock)/dbname. The parser now extracts the address from inside the parentheses before splitting on /. (#625)
Commits

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.43.5 to 1.44.0

Commits
  • fa3ee1a Release 2023-11-21
  • 6e0c553 Regenerated Clients
  • 32fa00b Update endpoints model
  • 72eae5c Update API model
  • 1c69d08 fix: don't expect response to be json in endpointcreds provider (#2381)
  • 3bd97c0 fix: don't send 0 max items for object version and multipart upload paginator...
  • b3e07aa Release 2023-11-20
  • 2fc1c0d Regenerated Clients
  • 1a6bd02 Update endpoints model
  • ac2c871 Update API model
  • Additional commits viewable in compare view

Updates github.com/prometheus/common from 0.69.0 to 0.70.0

Release notes

Sourced from github.com/prometheus/common's releases.

v0.70.0

What's Changed

New Contributors

Full Changelog: https://github.com/prometheus/common/compare/v0.69.0...v0.70.0

Changelog

Sourced from github.com/prometheus/common's changelog.

v0.70.0 / 2026-07-10

Enhancements

  • route: add support for the QUERY HTTP method. #932

Bugfixes

  • config: fix TLSVersion.String() printing a pointer address instead of the numeric version for unknown TLS versions. #929

Internal

  • expfmt: add BenchmarkConvertMetricFamily comparing the Prometheus text and OpenMetrics 1.0 encoders. #943
  • Update Go dependencies. #933 #934
  • Synchronize common files from prometheus/prometheus. #923 #927 #930 #937
  • Update GitHub Actions. #938 #939 #940 #941 #942

Full Changelog: https://github.com/prometheus/common/compare/v0.69.0...v0.70.0

Commits
  • 5eff7a8 Merge pull request #941 from prometheus/dependabot/github_actions/actions/che...
  • a23c5b3 Merge pull request #939 from prometheus/dependabot/github_actions/ossf/scorec...
  • 9e1eb87 Merge pull request #942 from prometheus/dependabot/github_actions/actions/upl...
  • ab2736d Merge pull request #940 from prometheus/dependabot/github_actions/actions/set...
  • e596873 Merge pull request #938 from prometheus/dependabot/github_actions/codeql-ac07...
  • 97c066a Add BenchmarkConvertMetricFamily comparing Prometheus text and OpenMetrics 1....
  • 62e9d0f Merge pull request #932 from roidelapluie/roidelapluie/route-query
  • 6c31239 build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1
  • 755e9d6 build(deps): bump actions/checkout from 3.1.0 to 7.0.0
  • 556d740 build(deps): bump actions/setup-go from 6.2.0 to 6.5.0
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.53.0 to 0.54.0

Commits
  • cdce021 go.mod: update golang.org/x dependencies
  • d9474cc openpgp: make the deprecation message more explicit
  • 7626c50 ssh: verify declared key type matches decoded key in authorized_keys
  • 0471e79 ssh/agent: enforce strict limits on DSA key parameters
  • 6435c37 ssh: sanitize client disconnect messages
  • 7d695da ssh/agent: drain channel stderr in agent forwarders
  • 5b7f841 acme/autocert: fix data race in Manager.createCert
  • 0b316e7 argon2: update RFC 9106 parameter recommendations
  • 55aec0a x509roots/fallback: update bundle
  • 5f2de1a internal: remove wycheproof tests
  • See full diff in compare view

Updates golang.org/x/text from 0.39.0 to 0.40.0

Commits
  • 724af9c go.mod: update golang.org/x dependencies
  • bf5b9d6 internal/export/idna: always treat Punycode encoding pure ASCII as an error
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourse...

Description has been truncated