chore(deps): bump the go-minor-and-patch group with 20 updates

Closed
DE
2mo ago
+119-120

Bumps the go-minor-and-patch group with 20 updates:

PackageFromTo
code.cloudfoundry.org/bytefmt0.84.00.85.0
github.com/aws/aws-sdk-go-v21.43.41.43.6
github.com/aws/aws-sdk-go-v2/config1.32.351.32.37
github.com/aws/aws-sdk-go-v2/credentials1.19.341.19.36
github.com/aws/aws-sdk-go-v2/service/secretsmanager1.44.41.44.6
github.com/aws/aws-sdk-go-v2/service/sso1.33.41.33.6
github.com/aws/smithy-go1.27.71.27.8
github.com/stretchr/testify1.12.01.12.1
google.golang.org/api0.292.00.293.0
github.com/Azure/azure-sdk-for-go/sdk/azcore1.22.01.23.0
github.com/aws/aws-sdk-go-v2/feature/s3/manager1.22.411.22.43
github.com/aws/aws-sdk-go-v2/service/s31.107.01.107.2
github.com/nats-io/nats-server/v22.14.42.14.5
github.com/nats-io/nats.go1.52.01.53.1
github.com/open-policy-agent/opa1.19.01.19.1
github.com/posthog/posthog-go1.23.01.23.1
go.step.sm/crypto0.87.00.88.0
google.golang.org/genproto/googleapis/bytestream0.0.0-20260729162451-8efbd57d26e00.0.0-20260807164820-c8921c73eeea
github.com/aws/aws-sdk-go-v2/service/sts1.45.41.45.6
github.com/minio/minio-go/v77.2.17.3.0

Updates code.cloudfoundry.org/bytefmt from 0.84.0 to 0.85.0

Commits

Updates github.com/aws/aws-sdk-go-v2 from 1.43.4 to 1.43.6

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.35 to 1.32.37

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.34 to 1.19.36

Commits

Updates github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.44.4 to 1.44.6

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sso from 1.33.4 to 1.33.6

Commits

Updates github.com/aws/smithy-go from 1.27.7 to 1.27.8

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-08-21)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.9
    • Bug Fix: Fix a generic event stream exception not carrying the error code and message from its payload.
    • Bug Fix: Fix an event stream not being closed when its connection is lost, which would cause a caller writing to the stream to block indefinitely.
    • Bug Fix: Fix deserialization of an empty list producing a nil slice instead of an empty one.
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-14)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.8
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-07)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.7
    • Bug Fix: Don't serialize unset JSON documents as nil in structure members.
    • Bug Fix: Fix a deserialization panic around collection members in recursive shape configs.

Release (2026-07-31)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.6
    • Bug Fix: Fix failure to deserialize any @httpPayload struct with a non-string member.
    • Bug Fix: Fix failure to serialize any @httpPayload struct with a nested struct.

Release (2026-07-27)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.5
    • Bug Fix: Fix a performance issue in awsQuery with large response payloads.

... (truncated)

Commits

Updates github.com/stretchr/testify from 1.12.0 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: https://github.com/stretchr/testify/compare/v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: https://github.com/stretchr/testify/compare/v1.12.0...v1.12.1

Commits

Updates google.golang.org/api from 0.292.0 to 0.293.0

Release notes

Sourced from google.golang.org/api's releases.

v0.293.0

0.293.0 (2026-08-11)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.293.0 (2026-08-11)

Features

Commits

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.22.0 to 1.23.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.23.0

1.23.0 (2026-08-11)

Features Added

  • Helper method runtime.NewRequestForNextLink for creating requests for pageable operations that uses a next link. It handles absolute and relative next links.

Bugs Fixed

  • Fixed an issue where runtime.Pager[T].More could return true indefinitely after NextPage failed to retrieve the first page, causing for pager.More() loops to spin. After a page fetch returns an error the Pager now enters a terminal state: More returns false and subsequent NextPage calls return the same error without invoking the fetcher again.
Commits
  • 86f252c Prep azcore for release (#27366)
  • 7f66fdd Configurations: 'specification/netapp/resource-manager/Microsoft.NetApp/NetA...
  • 7dcf481 Add runtime.NewRequestForNextLink (#27349)
  • e5a54a6 azqueue: reference generated StorageErrorCode constants in queueerror (#27300)
  • 8053e3a Sync eng/common directory with azure-sdk-tools for PR 16449 (#27355)
  • 7ab8185 Expand eng common sync to support microsoft org (#27347)
  • 2b59c65 Configurations: 'specification/containerservice/resource-manager/Microsoft.C...
  • 677abc2 [AutoPR sdk-resourcemanager/containerserviceaimanager/armcontainerserviceaima...
  • 160eda3 Configurations: 'specification/iotoperations/resource-manager/Microsoft.IoTO...
  • a441e90 [AutoPR sdk-resourcemanager/discovery/armdiscovery]-generated-from-SDK Genera...
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.22.41 to 1.22.43

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.0 to 1.107.2

Commits

Updates github.com/nats-io/nats-server/v2 from 2.14.4 to 2.14.5

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.14.5

Changelog

Refer to the 2.14 Upgrade Guide for backwards compatibility notes with 2.12.x. Please note that the 2.13.x version was skipped.

Go Version

  • 1.26.5

Dependencies

  • github.com/klauspost/compress v1.19.2 (#8459)
  • golang.org/x/crypto v0.55.0 (#8459)

Added

Leafnodes

  • New dial_timeout option can be specified in the leafnode config block or for specific remotes in the configuration, allowing it to be increased above the default 1 second for high-latency links (#8427)

Fixed

General

  • Fixed a deadlock that could occur in the logger when a close error occurs (#8430)

JetStream

  • Fix a bug that could result in potential data loss when handling idempotent stream creates when an offline node catches up from a metalayer snapshot, caused by an incorrect update to the create time in the stream assignment (#8449)

Complete Changes

https://github.com/nats-io/nats-server/compare/v2.14.4...v2.14.5

Commits
  • d3bc045 Release v2.14.5
  • 16bcbd9 Update dependencies
  • ed1644a Cherry-picks for 2.14.5 (#8458)
  • 618e6c9 [FIXED] Route missing after reconnect due to gossip URL mismatch
  • 28c83a9 Cherry-picks for 2.14.5-RC.1 (#8450)
  • 47fb6c3 [FIXED] Idempotent stream create uses same created timestamp
  • 165bce1 Make leafnode tcp dialtimeout configurable
  • 62b409b [FIXED] SetLoggerV2 deadlock when prev logger errors on close
  • See full diff in compare view

Updates github.com/nats-io/nats.go from 1.52.0 to 1.53.1

Release notes

Sourced from github.com/nats-io/nats.go's releases.

Release v1.53.1

Changelog

This is a patch release containing no functional changes.

FIXED

  • Version const and the README install line, which were not updated for v1.53.0 (#2118)

Complete Changes

https://github.com/nats-io/nats.go/compare/v1.53.0...v1.53.1

Release v1.53.0

Changelog

ADDED

  • JetStream:
    • WithPublishAsyncAckHandler option for JetStream async publish. Thanks @​occamist for the contribution (#2109)
    • AckFlowControlPolicy to legacy API (#2091)
  • Micro:

FIXED

  • Core NATS:
  • JetStream:
    • Data race in resetOrderedConsumer when resets overlap (#2111)
    • Avoid panic in PullSubscribe consumer create path. Thanks @​wyf027 for the contribution (#2088)
    • Honor per-request JSOpt API prefix across JetStream APIs. Thanks @​wyf027 for the contribution (#2087)
    • Add nil checks for empty JetStream API responses. Thanks @​colecschmidt for the contribution (#2073)
  • KeyValue:
    • Recognize error code 10164 for replicated KV CAS conflicts (#2098)
    • Reject keys with consecutive dots in keyValid and searchKeyValid. Thanks @​c-tonneslan for the contribution (#2076)
  • Micro:

IMPROVED

  • Performance enhancement when publishing core NATS messages with headers. Thanks @​jonchammer for the contribution (#2083)
  • Migrate tests to ntf (#2082)
  • Add docs.nats.io examples to main (#2106)
  • Improve readme wording for JetStream consumers. Thanks @​trevorah for the contribution (#2104)

Complete Changes

https://github.com/nats-io/nats.go/compare/v1.52.0...v1.53.0

Commits
  • db1375f Release v1.53.1 (#2118)
  • ae0af2c [IMPROVED] Migrate tests to ntf (#2082)
  • 0c5d8d7 [ADDED] WithPublishAsyncAckHandler option for JetStream async publish (#2109)
  • 15d96ca [FIXED] Data race in resetOrderedConsumer when resets overlap (#2111)
  • f66c8e7 [FIXED] Recognize error code 10164 for replicated KV CAS conflicts (#2097) (#...
  • 9d92e85 iter: don't yield a phantom (nil, nil) after MsgsTimeout's ErrTimeout (#2093)
  • c68c4de [FIXED] micro: endpoint subject prefix over-match (#2105)
  • e663e67 Improve example wording (#2104)
  • c1a0716 Add docs.nats.io examples to main (#2106)
  • 77e280d [FIXED] MsgsTimeout iterator yields spurious (nil, nil) after a timeout (#2099)
  • Additional commits viewable in compare view

Updates github.com/open-policy-agent/opa from 1.19.0 to 1.19.1

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v1.19.1

This release uses the latest version of Go (1.26.6) to build OPA, fixing stdlib vulnerabilities in code that OPA's HTTP handler and crypto builtins use:

It is otherwise the same code as v1.19.0.

Note that users building their own OPA binaries and images already control the Golang version, so this is not relevant for them.

Miscellaneous

Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

1.19.1

This release uses the latest version of Go (1.26.6) to build OPA, fixing stdlib vulnerabilities in code that OPA's HTTP handler and crypto builtins use:

It is otherwise the same code as v1.19.0.

Note that users building their own OPA binaries and images already control the Golang version, so this is not relevant for them.

Miscellaneous

Commits

Updates github.com/posthog/posthog-go from 1.23.0 to 1.23.1

Release notes

Sourced from github.com/posthog/posthog-go's releases.

1.23.1

Unreleased

Changelog

Sourced from github.com/posthog/posthog-go's changelog.

1.23.1

Patch Changes

  • ec8f6c0: Normalize event timestamps to the equivalent UTC instant before serializing legacy batch and Capture V1 payloads.
Commits
  • 608be68 chore: release v1.23.1 [version bump] [skip ci]
  • ec8f6c0 fix: normalize SDK timestamps to UTC (#284)
  • 7fb10e6 ci: remove automerge from upgrade workflow (#282)
  • 4127d7d ci: Upgrade posthog-go in the PostHog monorepo after releases (#281)
  • f7b86e8 chore(deps): bump the github-actions group with 3 updates (#280)
  • a02322f chore: group Dependabot updates (#278)
  • e6df366 chore(deps): bump github/codeql-action/analyze from 4.35.5 to 4.37.4 (#274)
  • 3a67823 chore(deps-dev): bump @​changesets/cli from 2.31.0 to 2.31.1 (#269)
  • f2742c5 chore(deps): bump github.com/goccy/go-json from 0.10.5 to 0.10.6 (#271)
  • 5bb890e chore(deps): bump actions/checkout from 6.0.2 to 7.0.1 (#273)
  • Additional commits viewable in compare view

Updates go.step.sm/crypto from 0.87.0 to 0.88.0

Release notes

Sourced from go.step.sm/crypto's releases.

Release v0.88.0

What's Changed

Dependencies

Full Changelog: https://github.com/smallstep/crypto/compare/v0.87.0...v0.88.0

Commits
  • 77837ea Merge pull request #1073 from smallstep/feat/mackms-subject-search
  • d6585c7 Reverse order of MacKMS certificate lookup on delete
  • ddd2124 Don't allow cn component multiple times in MacKMS URI
  • 442450a Ignore certificate parse errors in loadCertificate conditionally
  • 9faf2f8 Support subject DN components in DeleteCertificate
  • 4728d0c Add subject DN components to certificate load URIs
  • a967e13 Merge pull request #1104 from smallstep/mariano/pkcs11-homebrew
  • 4ce0929 Fix pkcs11 tests on macOS
  • 70ace16 Merge pull request #1103 from smallstep/dependabot/go_modules/github.com/aws/...
  • 785a038 chore(deps): Bump github.com/aws/aws-sdk-go-v2/config
  • Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/bytestream from 0.0.0-20260729162451-8efbd57d26e0 to 0.0.0-20260807164820-c8921c73eeea

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.45.4 to 1.45.6

Commits

Updates github.com/minio/minio-go/v7 from 7.2.1 to 7.3.0

Release notes

Sourced from github.com/minio/minio-go/v7's releases.

v7.3.0

What's Changed