chore(deps): bump the go-minor-and-patch group with 17 updates

Merged
DE
2mo ago
+95-95

Bumps the go-minor-and-patch group with 17 updates:

PackageFromTo
github.com/aws/aws-sdk-go-v21.43.61.43.7
github.com/aws/aws-sdk-go-v2/config1.32.371.32.38
github.com/aws/aws-sdk-go-v2/credentials1.19.361.19.37
github.com/aws/aws-sdk-go-v2/service/secretsmanager1.44.61.44.7
github.com/aws/aws-sdk-go-v2/service/sso1.33.61.33.7
github.com/aws/smithy-go1.27.81.27.9
github.com/google/go-containerregistry0.21.90.22.0
github.com/googleapis/gax-go/v22.23.02.24.0
github.com/secure-systems-lab/go-securesystemslib0.11.00.11.1
github.com/aws/aws-sdk-go-v2/feature/s3/manager1.22.431.22.44
github.com/aws/aws-sdk-go-v2/service/s31.107.21.107.3
github.com/grpc-ecosystem/go-grpc-middleware/v22.3.32.3.4
github.com/posthog/posthog-go1.23.11.24.0
github.com/sigstore/protobuf-specs0.5.10.5.2
github.com/aws/aws-sdk-go-v2/service/sts1.45.61.45.7
github.com/fsouza/fake-gcs-server1.55.11.56.1
k8s.io/apimachinery0.36.30.36.4

Updates github.com/aws/aws-sdk-go-v2 from 1.43.6 to 1.43.7

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.37 to 1.32.38

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.36 to 1.19.37

Commits

Updates github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.44.6 to 1.44.7

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sso from 1.33.6 to 1.33.7

Commits

Updates github.com/aws/smithy-go from 1.27.8 to 1.27.9

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-08-26)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.1
    • Bug Fix: Fix broken AddLogger middleware since its insert point was removed.

Release (2026-08-25.2)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.0
    • Feature: Set Content-Length inline when the request body is set via SetStream. The ComputeContentLength middleware is now deprecated.

Release (2026-08-25)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.10
    • Bug Fix: Fix a data race on the underlying writer when an event stream is closed while an event write is in flight.
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-21)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.9
    • Bug Fix: Fix a generic event stream exception not carrying the error code and message from its payload.
    • Bug Fix: Fix an event stream not being closed when its connection is lost, which would cause a caller writing to the stream to block indefinitely.
    • Bug Fix: Fix deserialization of an empty list producing a nil slice instead of an empty one.
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-14)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.8
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-07)

... (truncated)

Commits

Updates github.com/google/go-containerregistry from 0.21.9 to 0.22.0

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.22.0

What's Changed

New Contributors

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.21.9...v0.21.10

Commits
  • 3f4ff3c fix(build): unify new build flow into cloudbuild_v2.yaml (#2419)
  • c6b5acd fix(build): correct Cloud Build schema options and source provenance hash (#2...
  • 8f4a85d go.mod: bump Go version + add toolchain directive to replace .go-version file...
  • 5481560 build(deps): bump the go-deps group across 1 directory with 3 updates (#2415)
  • 5b5c272 build(deps): bump the actions group across 1 directory with 8 updates (#2405)
  • 66dd454 remote: retry failed Puller and Pusher initialization (#2406)
  • 3f47f91 fix: add missing substitutions and workspace cleanup to new build files (#2413)
  • 4cb3583 Allow single-character repository paths (#2407)
  • 82cc428 remote: resolve push-check credentials against the repository (#2411)
  • 97815aa build: add multi-architecture Cloud Build configurations for crane, gcrane, a...
  • Additional commits viewable in compare view

Updates github.com/googleapis/gax-go/v2 from 2.23.0 to 2.24.0

Release notes

Sourced from github.com/googleapis/gax-go/v2's releases.

v2.24.0

2.24.0 (2026-08-20)

Features

Commits

Updates github.com/secure-systems-lab/go-securesystemslib from 0.11.0 to 0.11.1

Commits
  • 662f0f7 Merge pull request #165 from secure-systems-lab/dependabot/go_modules/github....
  • 0b40db0 chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0
  • e330185 Merge pull request #166 from secure-systems-lab/dependabot/go_modules/golang....
  • 1778905 chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0
  • 4d3d2c7 Merge pull request #164 from secure-systems-lab/dependabot/github_actions/act...
  • 379ec0d chore(deps): bump actions/checkout from 7.0.0 to 7.0.1
  • efcd6cb Merge pull request #163 from secure-systems-lab/dependabot/github_actions/act...
  • cd018df chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0
  • 5cd75e5 Merge pull request #162 from secure-systems-lab/dependabot/go_modules/golang....
  • 4a8f3f8 chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.22.43 to 1.22.44

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.2 to 1.107.3

Commits

Updates github.com/grpc-ecosystem/go-grpc-middleware/v2 from 2.3.3 to 2.3.4

Release notes

Sourced from github.com/grpc-ecosystem/go-grpc-middleware/v2's releases.

v2.3.4

What's Changed

Full Changelog: https://github.com/grpc-ecosystem/go-grpc-middleware/compare/v2.3.3...v2.3.4

Commits
  • 80d77aa avoid logging io.EOF as error in PostMsgSend and PostMsgReceive (#822)
  • 9150cbd simplify Level type and align with slog.Level (#818)
  • fd4eab5 Fix mdox link validation CI failure for medium.com 403 responses (#819)
  • ab2131d Group dependabot PRs (#813)
  • 3a0bad9 build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.10 (#805)
  • c68dee1 build(deps): bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go ...
  • 77deb93 build(deps): bump golang.org/x/net from 0.40.0 to 0.46.0 (#807)
  • 1c6d261 build(deps): bump actions/checkout from 4 to 5 (#790)
  • 4f0b6d1 build(deps): bump buf.build/go/protovalidate from 0.12.0 to 1.0.0 (#803)
  • b2bf988 build(deps): bump github.com/oklog/run from 1.1.0 to 1.2.0 in /examples (#793)
  • Additional commits viewable in compare view

Updates github.com/posthog/posthog-go from 1.23.1 to 1.24.0

Release notes

Sourced from github.com/posthog/posthog-go's releases.

1.24.0

Unreleased

Changelog

Sourced from github.com/posthog/posthog-go's changelog.

1.24.0

Minor Changes

  • 150f03e: Fall back to /flags when a requested flag is missing from loaded local definitions. This changes the earlier behavior where the key was omitted without a request.
Commits
  • 2eaba71 chore: release v1.24.0 [version bump] [skip ci]
  • 35100f0 fix(release): gate released Slack notification on an actual release (#293)
  • bded1a0 fix(release): opt private package into changesets v3 versioning (#292)
  • 150f03e fix(flags): fall back for missing local definitions (#286)
  • fd8580e chore(deps): bump the github-actions group with 3 updates (#290)
  • 176cbdc chore(deps-dev): bump @​changesets/cli from 2.31.1 to 3.0.0 in the release-too...
  • 8030588 chore: update flags project workflow caller (#287)
  • d0ba449 test: expand server SDK wire snapshots (#285)
  • See full diff in compare view

Updates github.com/sigstore/protobuf-specs from 0.5.1 to 0.5.2

Changelog

Sourced from github.com/sigstore/protobuf-specs's changelog.

v0.5.2

  • Add monitor configuration protobuf definition (#907)
  • Add custom java_package to envelope.proto (#923)
Commits
  • 0342fe5 Prepare for 0.5.2 release (#925)
  • 15d97a6 build(deps): bump ts-proto from 2.11.8 to 2.12.0 in /protoc-builder/hack in t...
  • 39f729e build(deps): bump the actions-deps group across 1 directory with 6 updates (#...
  • f46db79 build(deps): bump the java-deps group in /java with 4 updates (#919)
  • 1e1e712 Add custom java_package to envelope.proto (#923)
  • 104df67 build(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 in /protoc-bui...
  • 0ebecc1 build(deps): bump the rust-deps group in /gen/pb-rust with 8 updates (#920)
  • 436804b build(deps): bump the actions-deps group across 1 directory with 7 updates (#...
  • 63617ed build(deps): bump the docker-refs group (#918)
  • fc5238b build(deps): bump tar from 7.5.16 to 7.5.22 in /protoc-builder/hack (#913)
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.45.6 to 1.45.7

Commits

Updates github.com/fsouza/fake-gcs-server from 1.55.1 to 1.56.1

Release notes

Sourced from github.com/fsouza/fake-gcs-server's releases.

v1.56.1

What's Changed

Full Changelog: https://github.com/fsouza/fake-gcs-server/compare/v1.56.0...v1.56.1

v1.56.0

What's Changed

... (truncated)

Commits
  • 896ece5 internal: fix vet violations in tests
  • 168c3cc fakestorage: fix vet violations in tests
  • 0fd8f94 Go 1.27 is out, drop 1.26
  • 853ebda build(deps): bump cloud.google.com/go/pubsub/v2 from 2.6.1 to 2.6.2 (#2338)
  • 21db263 build(deps): bump @​google-cloud/storage in /examples/node (#2337)
  • b5c218b build(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1 (#2339)
  • e1f11fe build(deps): bump golang from 1.26 to 1.27 (#2336)
  • b6b5c38 build(deps): bump cloud.google.com/go/storage from 1.64.0 to 1.65.0 (#2340)
  • 64fe9e7 Honor the generation parameter on object ACL endpoints (#2335)
  • b8deb04 perf: move an object to delete it instead of copying it (#2334)
  • Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.36.3 to 0.36.4

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions