chore(deps): bump the go-minor-and-patch group with 22 updates

Merged
DE
1d ago
+129-129

Bumps the go-minor-and-patch group with 22 updates:

PackageFromTo
github.com/Azure/azure-sdk-for-go/sdk/azcore1.23.21.23.3
github.com/aws/aws-sdk-go-v21.47.11.47.3
github.com/aws/aws-sdk-go-v2/config1.33.61.33.9
github.com/aws/aws-sdk-go-v2/credentials1.20.61.20.9
github.com/aws/aws-sdk-go-v2/feature/s3/manager1.23.111.23.14
github.com/aws/aws-sdk-go-v2/service/s31.114.01.114.3
github.com/aws/aws-sdk-go-v2/service/secretsmanager1.50.11.50.4
github.com/aws/aws-sdk-go-v2/service/sso1.38.11.38.4
github.com/aws/aws-sdk-go-v2/service/sts1.51.11.51.4
github.com/aws/smithy-go1.28.21.28.5
github.com/getsentry/sentry-go0.49.00.50.0
github.com/nats-io/nats-server/v22.15.02.15.1
github.com/posthog/posthog-go1.33.01.34.0
github.com/prometheus/client_golang1.24.11.25.0
github.com/prometheus/common0.72.00.72.1
github.com/sigstore/timestamp-authority/v22.1.32.1.4
github.com/vektah/gqlparser/v22.5.602.5.62
golang.org/x/crypto0.57.00.58.0
golang.org/x/term0.46.00.47.0
golang.org/x/text0.42.00.43.0
google.golang.org/api0.300.00.301.0
google.golang.org/genproto/googleapis/bytestream0.0.0-20260921155816-b142276694590.0.0-20260928230214-8a89bd6388cc

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.23.2 to 1.23.3

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.23.3

1.23.3 (2026-10-06)

Bugs Fixed

  • Fixed arm.ResourceID.Location being empty when the locations segment uses different casing.

Other Changes

  • Added azure-deprecating to the default set of allowed (non-redacted) response headers for logging.
  • Replaced internal default HTTP client with the one from sdk/internal.
Commits
  • b0d63ac Prep azcore@v1.23.3 for release (#27681)
  • 83e527f [azdatalake] Update azblob to v1.8.2 for service.Client GetSASURL fix (#27657)
  • 4e68728 [Service Bus] Stabilize session timeout tests (#27609)
  • f3c857e Sync eng/common directory with azure-sdk-tools for PR 17077 (#27678)
  • c76d8f0 Fix location parsing for mixed-case resource IDs (#27669)
  • 6e5da8b fix: add period to LICENSE.txt (#26886)
  • add0a52 Configurations: 'specification/azurefleet/resource-manager/Microsoft.AzureFl...
  • 856b379 feat(azcore): add azure-deprecating to default allowed logging headers (#27...
  • 50a269f Fix base template. (#27666)
  • 3714be0 Sync eng/common directory with azure-sdk-tools for PR 17167 (#27665)
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.47.1 to 1.47.3

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.6 to 1.33.9

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.20.6 to 1.20.9

Commits

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.23.11 to 1.23.14

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.114.0 to 1.114.3

Commits

Updates github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.50.1 to 1.50.4

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sso from 1.38.1 to 1.38.4

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.51.1 to 1.51.4

Commits

Updates github.com/aws/smithy-go from 1.28.2 to 1.28.5

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-10-09)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.5
    • Bug Fix: Retain the key with the zero value when encountering a null-value key in a dense map. This matches how legacy code-generated JSON deserializers behaved.

Release (2026-10-07)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.4
    • Bug Fix: Revert #698 that fixed JoinPath with trailing slash. This has a side effect on certain S3 API paths in the downstream SDK that need more consideration.

Release (2026-10-06)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.3
    • Bug Fix: Accept either casing of message/Message on modeled JSON error structures in schema-based deserialization, and emit the smithy.api#error trait in generated schemas
    • Bug Fix: Include the underlying error when logging failures to discard or close an HTTP response body

Release (2026-09-18)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.2
    • Bug Fix: Avoid allocating a slice in ValidateEndpointHost by indexing into the hostname instead of using strings.Split.
    • Bug Fix: Fix event stream decode panic on unknown header value type.
    • Bug Fix: Fix schema-serde CBOR decode panic on malformed string/blob length.
    • Bug Fix: JoinPath keeps a trailing slash when the added path is a slash.

Release (2026-08-26)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.1
    • Bug Fix: Fix broken AddLogger middleware since its insert point was removed.

Release (2026-08-25.2)

... (truncated)

Commits

Updates github.com/getsentry/sentry-go from 0.49.0 to 0.50.0

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.50.0

Breaking Changes 🛠

  • adds NoopClient implementation. The SDK now returns a non-nil noop client and handles the previous nil checks with checking for a disabled client. Code paths that were using nil checks now need to check for client.IsEnabled. by @​giortzisg in #1365

New Features ✨

Crons

Bug Fixes 🐛

Internal Changes 🔧

Deps

  • Bump getsentry/craft from 2.30.1 to 2.31.2 by @​dependabot in #1441
  • Bump getsentry/github-workflows/validate-pr from 4013fc6e1aeb1be1f9d3b4d232624f0ec1afa613 to 36c729264d2edc29ebae61950c50e1e9f043ad7e by @​dependabot in #1442
  • Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.43.0 to 1.45.0 in /otel/otlp by @​dependabot in #1430
  • Bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 by @​dependabot in #1431
  • Bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @​dependabot in #1422
  • Bump getsentry/craft from 2.27.2 to 2.30.1 by @​dependabot in #1411
  • Bump google.golang.org/grpc from 1.82.1 to 1.83.1 by @​dependabot in #1413
Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.50.0

Breaking Changes 🛠

  • adds NoopClient implementation. The SDK now returns a non-nil noop client and handles the previous nil checks with checking for a disabled client. Code paths that were using nil checks now need to check for client.IsEnabled. by @​giortzisg in #1365

New Features ✨

Crons

Bug Fixes 🐛

Internal Changes 🔧

Deps

  • Bump getsentry/craft from 2.30.1 to 2.31.2 by @​dependabot in #1441
  • Bump getsentry/github-workflows/validate-pr from 4013fc6e1aeb1be1f9d3b4d232624f0ec1afa613 to 36c729264d2edc29ebae61950c50e1e9f043ad7e by @​dependabot in #1442
  • Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.43.0 to 1.45.0 in /otel/otlp by @​dependabot in #1430
  • Bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 by @​dependabot in #1431
  • Bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @​dependabot in #1422
  • Bump getsentry/craft from 2.27.2 to 2.30.1 by @​dependabot in #1411
  • Bump google.golang.org/grpc from 1.82.1 to 1.83.1 by @​dependabot in #1413
Commits
  • e02bc2a release: 0.50.0
  • 1b3c561 fix(slog): stop replaceAttrs from mutating the handler's grouped attrs (#1439)
  • 7897fe4 fix(zerolog): unescape JSON string values before sending to Sentry (#1440)
  • e3fb470 build(deps): bump getsentry/craft from 2.30.1 to 2.31.2 (#1441)
  • d1f06d9 feat(crons): add WithMonitor helper (#1443)
  • 0a0b2ad fix: guard concurrent flushes (#1449)
  • cdcad4a build(deps): bump getsentry/github-workflows/validate-pr (#1442)
  • 6afdeb6 fix(dsn): build envelope URL without re-parsing (#1436)
  • 48bb0a5 refactor: move scope information under scopeData (#1370)
  • 85db5bc feat: add noop client implementation (#1365)
  • Additional commits viewable in compare view

Updates github.com/nats-io/nats-server/v2 from 2.15.0 to 2.15.1

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.15.1

Changelog

Refer to the 2.15 Upgrade Guide for backwards compatibility notes with 2.14.x.

Go Version

Dependencies

  • github.com/klauspost/compress v1.20.1 (#8737)
  • github.com/nats-io/nats.go v1.53.1 (#8737)

Changed

JetStream

  • The max_ha_assets limit is now enforced consistently by the metalayer leader during stream and consumer placement, scaling and moves (#8639)

Gateways

  • Support for sending and handling the legacy $GR. reply prefix, used by servers prior to v2.1.2, has been removed (#8615)

Improved

JetStream

  • Stalled source and mirror flow control is now reported in stream info and warning logs, making missing $JS.FC.> imports or exports easier to diagnose (#8633)
  • Stream and consumer placement now prefers peers that have caught up with the metalayer, reducing delays in API responses (#8643)
  • Improved the performance of deleting entries from and encoding AVL sequence sets (#8646)
  • Fast batch publish now reports backward sequence gaps as well as forward gaps (#8699)
  • Stream pending message calculations avoid unnecessary filestore cache access and handle deleted sequence ranges more efficiently (#8680, #8681)
  • Stream restore format detection now stops after the first S2 chunk (#8693)
  • Stream restore waits for the preferred node to become leader, avoiding an incorrect create response during clustered restore (#8690)
  • Memory backed streams avoid copying message headers and bodies twice when storing messages (#8652, contributed by @​randomizedcoder)

Monitoring

  • Leafz now reports whether a leafnode connection uses WebSockets (#8683)

MQTT

  • QoS2 PUBLISH and PUBREL processing is now pipelined for increased throughput (#8416, contributed by @​levb)
  • Reduced allocations and buffer copying when processing QoS1 and QoS2 messages and issuing JetStream store and delete requests (#8624, #8625, contributed by @​levb)
  • Partial packets are no longer copied in full on every read, reducing allocations and buffer copying (#8692)

Fixed

General

... (truncated)

Commits
  • b2fd3ef Release v2.15.1
  • 5502536 Update to Go 1.27.2/1.26.9
  • 2f50d04 Cherry-picks for 2.15.1 (#164)
  • ff5047c Fix TestJetStreamClusterKeyValueLastSeqMismatch
  • bd33432 Update GHA dependencies
  • 86bf9f1 Update Go dependencies
  • c4aea1c [FIXED] Leafnode interest and request/reply across account imports
  • 04869d4 [FIXED] Recovered ephemeral pull consumer never deleted
  • 51d0113 De-flake TestJetStreamAtomicBatchPublishRejectPartialBatchOnLeaderChange
  • 21344fd NRG: Re-send vote request of preferred candidate
  • Additional commits viewable in compare view

Updates github.com/posthog/posthog-go from 1.33.0 to 1.34.0

Release notes

Sourced from github.com/posthog/posthog-go's releases.

1.34.0

Unreleased

Changelog

Sourced from github.com/posthog/posthog-go's changelog.

1.34.0

Minor Changes

  • 3f345cc: posthogmcpsdk accepts WithIntentFallback, a callback that supplies $mcp_intent for tool calls whose agent sent no context, with $mcp_intent_source of inferred. The agent's own context still wins.
Commits
  • 5fc2dd9 chore: release v1.34.0 [version bump] [skip ci]
  • 3f345cc feat(mcp): add WithIntentFallback to posthogmcpsdk (#365)
  • 5216878 chore(deps): bump PostHog/posthog-sdk-test-harness/.github/workflows/test-sdk...
  • See full diff in compare view

Updates github.com/prometheus/client_golang from 1.24.1 to 1.25.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.25.0

:warning: This release raises the minimum required Go version to 1.26 and includes breaking API changes in api/prometheus/v1 (see the [CHANGE] entries below). :warning:

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139
  • [BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135

What's Changed

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139
  • [BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135
Commits

Updates github.com/prometheus/common from 0.72.0 to 0.72.1

Release notes

Sourced from github.com/prometheus/common's releases.

v0.72.1

Bugfixes

  • fix(config): deep copy the header in cloneRequest #982

Internal

  • Fix MAINTAINERS.md link text typo in RELEASE.md #1009
  • Synchronize common files from prometheus/prometheus #1010
  • build(deps): bump the codeql group with 4 updates #1007

Full Changelog: https://github.com/prometheus/common/compare/v0.72.0...v0.72.1

Changelog

Sourced from github.com/prometheus/co...

Description has been truncated