Repository navigation
fix(deps): bump the go_modules group across 4 directories with 15 updates - #3517
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…ates Bumps the go_modules group with 12 updates in the /cli directory: | Package | From | To | | --- | --- | --- | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.16.5` | `5.19.2` | | [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` | | [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.6.1` | `1.6.3` | | [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.6.2` | `5.9.0` | | [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.3` | `4.1.6` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.1` | `1.18.7` | | [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) | `1.8.3` | `1.17.7` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.39.0` | `1.41.0` | | [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.39.0` | `1.47.0` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.47.0` | `0.57.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.49.0` | `0.59.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.78.0` | `1.83.2` | Bumps the go_modules group with 6 updates in the /infra/blueprint-test directory: | Package | From | To | | --- | --- | --- | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.16.7` | `1.18.7` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.47.0` | `0.52.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.49.0` | `0.54.0` | | [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519) | `1.1.0` | `1.1.1` | | [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.7.1` | `5.9.2` | | [github.com/moby/spdystream](https://github.com/moby/spdystream) | `0.5.0` | `0.5.1` | Bumps the go_modules group with 4 updates in the /infra/utils/fbf directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/net](https://github.com/golang/net) and [google.golang.org/grpc](https://github.com/grpc/grpc-go). Bumps the go_modules group with 2 updates in the /tflint-ruleset-blueprint directory: [golang.org/x/net](https://github.com/golang/net) and [google.golang.org/grpc](https://github.com/grpc/grpc-go). Updates `github.com/go-git/go-git/v5` from 5.16.5 to 5.19.2 - [Release notes](https://github.com/go-git/go-git/releases) - [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md) - [Commits](go-git/go-git@v5.16.5...v5.19.2) Updates `github.com/buger/jsonparser` from 1.1.1 to 1.1.2 - [Release notes](https://github.com/buger/jsonparser/releases) - [Changelog](https://github.com/buger/jsonparser/blob/master/CHANGELOG.md) - [Commits](buger/jsonparser@v1.1.1...v1.1.2) Updates `github.com/cloudflare/circl` from 1.6.1 to 1.6.3 - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](cloudflare/circl@v1.6.1...v1.6.3) Updates `github.com/go-git/go-billy/v5` from 5.6.2 to 5.9.0 - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](go-git/go-billy@v5.6.2...v5.9.0) Updates `github.com/go-jose/go-jose/v4` from 4.1.3 to 4.1.6 - [Release notes](https://github.com/go-jose/go-jose/releases) - [Commits](go-jose/go-jose@v4.1.3...v4.1.6) Updates `github.com/klauspost/compress` from 1.18.1 to 1.18.7 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.18.1...v1.18.7) Updates `go.mongodb.org/mongo-driver` from 1.8.3 to 1.17.7 - [Release notes](https://github.com/mongodb/mongo-go-driver/releases) - [Commits](mongodb/mongo-go-driver@v1.8.3...v1.17.7) Updates `go.opentelemetry.io/otel` from 1.39.0 to 1.41.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.41.0) Updates `go.opentelemetry.io/otel/sdk` from 1.39.0 to 1.47.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.47.0) Updates `golang.org/x/crypto` from 0.47.0 to 0.57.0 - [Commits](golang/crypto@v0.47.0...v0.57.0) Updates `golang.org/x/net` from 0.49.0 to 0.59.0 - [Commits](golang/net@v0.49.0...v0.59.0) Updates `google.golang.org/grpc` from 1.78.0 to 1.83.2 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.78.0...v1.83.2) Updates `github.com/klauspost/compress` from 1.16.7 to 1.18.7 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.18.1...v1.18.7) Updates `golang.org/x/crypto` from 0.47.0 to 0.52.0 - [Commits](golang/crypto@v0.47.0...v0.57.0) Updates `golang.org/x/net` from 0.49.0 to 0.54.0 - [Commits](golang/net@v0.49.0...v0.59.0) Updates `filippo.io/edwards25519` from 1.1.0 to 1.1.1 - [Commits](FiloSottile/edwards25519@v1.1.0...v1.1.1) Updates `github.com/jackc/pgx/v5` from 5.7.1 to 5.9.2 - [Release notes](https://github.com/jackc/pgx/releases) - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.7.1...v5.9.2) Updates `github.com/moby/spdystream` from 0.5.0 to 0.5.1 - [Release notes](https://github.com/moby/spdystream/releases) - [Commits](moby/spdystream@v0.5.0...v0.5.1) Updates `go.opentelemetry.io/otel` from 1.39.0 to 1.41.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.41.0) Updates `golang.org/x/crypto` from 0.47.0 to 0.52.0 - [Commits](golang/crypto@v0.47.0...v0.57.0) Updates `golang.org/x/net` from 0.49.0 to 0.54.0 - [Commits](golang/net@v0.49.0...v0.59.0) Updates `google.golang.org/grpc` from 1.78.0 to 1.83.2 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.78.0...v1.83.2) Updates `golang.org/x/net` from 0.44.0 to 0.55.0 - [Commits](golang/net@v0.49.0...v0.59.0) Updates `google.golang.org/grpc` from 1.75.1 to 1.83.2 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.78.0...v1.83.2) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.19.2 dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/buger/jsonparser dependency-version: 1.1.2 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/cloudflare/circl dependency-version: 1.6.3 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/go-git/go-billy/v5 dependency-version: 5.9.0 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/go-jose/go-jose/v4 dependency-version: 4.1.6 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/klauspost/compress dependency-version: 1.18.7 dependency-type: indirect dependency-group: go_modules - dependency-name: go.mongodb.org/mongo-driver dependency-version: 1.17.7 dependency-type: indirect dependency-group: go_modules - dependency-name: go.opentelemetry.io/otel dependency-version: 1.41.0 dependency-type: indirect dependency-group: go_modules - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.47.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.57.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.59.0 dependency-type: indirect dependency-group: go_modules - dependency-name: google.golang.org/grpc dependency-version: 1.83.2 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/klauspost/compress dependency-version: 1.18.7 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.52.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.54.0 dependency-type: indirect dependency-group: go_modules - dependency-name: filippo.io/edwards25519 dependency-version: 1.1.1 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.9.2 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/moby/spdystream dependency-version: 0.5.1 dependency-type: indirect dependency-group: go_modules - dependency-name: go.opentelemetry.io/otel dependency-version: 1.41.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.52.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.54.0 dependency-type: indirect dependency-group: go_modules - dependency-name: google.golang.org/grpc dependency-version: 1.83.2 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.55.0 dependency-type: indirect dependency-group: go_modules - dependency-name: google.golang.org/grpc dependency-version: 1.83.2 dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
requested review from
a team,
apeabody,
bharathkkb,
g-awmalik and
q2w
as code owners
November 10, 2026 17:42
dependabot
Bot
added
dependencies
Collaborator
|
/gcbrun |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
Bumps the go_modules group with 12 updates in the /cli directory:
5.16.55.19.21.1.11.1.21.6.11.6.35.6.25.9.04.1.34.1.61.18.11.18.71.8.31.17.71.39.01.41.01.39.01.47.00.47.00.57.00.49.00.59.01.78.01.83.2Bumps the go_modules group with 6 updates in the /infra/blueprint-test directory:
1.16.71.18.70.47.00.52.00.49.00.54.01.1.01.1.15.7.15.9.20.5.00.5.1Bumps the go_modules group with 4 updates in the /infra/utils/fbf directory: go.opentelemetry.io/otel, golang.org/x/crypto, golang.org/x/net and google.golang.org/grpc.
Bumps the go_modules group with 2 updates in the /tflint-ruleset-blueprint directory: golang.org/x/net and google.golang.org/grpc.
Updates
github.com/go-git/go-git/v5from 5.16.5 to 5.19.2Release notes
Sourced from github.com/go-git/go-git/v5's releases.
... (truncated)
Commits
3eeb238Merge pull request #2277 from go-git/checkout-v5008a78fgit: worktree, make the filesystem wrapper a symlink-safe boundary2263fb5Merge pull request #2268 from go-git/renovate/releases/v5.x-go-golang.org-x-t...77b7625build: Update module golang.org/x/text to v0.39.0 [SECURITY]85ea767Merge pull request #2267 from go-git/renovate/releases/v5.x-go-golang.org-x-n...198675abuild: Update module golang.org/x/net to v0.56.0 [SECURITY]4a0e66dMerge pull request #2254 from pjbgf/v5-dotgit-ref-name-containment3b306efstorage: dotgit, align reference-name safety with refname_is_safef3d0cc1storage: dotgit, reject path traversal in reference names979cfe9Merge pull request #2262 from joshblum/joshblum/to-slash-v5Updates
github.com/buger/jsonparserfrom 1.1.1 to 1.1.2Release notes
Sourced from github.com/buger/jsonparser's releases.
Commits
a69e7e0Merge pull request #276 from dbarrosop/masterd3eacc0fix: prevent panic on negative slice index in Delete with malformed JSON (GO-...61b32cfMerge pull request #241 from unxcepted/master2181e83Merge pull request #244 from ScaleChamp/patch-21510b51Added latest versions of go to tests6fc2e48fix: eachkey allocationa6f867eMerge pull request #239 from AdamKorcz/cifuzz1cbc01fdFuzzing: Add CIFuzzdc92d69Merge pull request #228 from jonomacd/null-handling2d9d634Merge pull request #231 from carsonip/fix-parseint-overflow-checkUpdates
github.com/cloudflare/circlfrom 1.6.1 to 1.6.3Release notes
Sourced from github.com/cloudflare/circl's releases.
Commits
24ae53cRelease CIRCL v1.6.3581020bRename method to oddMultiplesProjective.12209a4Removing unused cmov for jacobian points.fcba359ecc/p384: use of complete projective formulas for scalar multiplication.5e1bae8ecc/p384: handle point doubling in point addition with Jacobian coordinates.3416046Check opts for nil value.a763d47Release CIRCL v1.6.23c70bf9Bump x/crypto x/sys dependencies.3f0f15bRevert to using package-declared HPKE errors for shortkem instead of standard...23491bdAdding generic Power2Round method.Updates
github.com/go-git/go-billy/v5from 5.6.2 to 5.9.0Release notes
Sourced from github.com/go-git/go-billy/v5's releases.
Commits
237e529Merge pull request #206 from pjbgf/v5-improvements04edb39build: Add go-git integration testd8efefdosfs: preserve empty ChrootOS base07f2a0bMerge pull request #205 from pjbgf/v5-improvements25207c8build: Bump Go versions in workflows2fda229osfs: ChrootOS eval baseDir on creation427b27fMerge pull request #203 from pjbgf/v5-improvements7d5a23echroot: Reject symlink loops2c2287autil: avoid following symlinks in RemoveAll fallbackcbd88e9Fix mount path handlingUpdates
github.com/go-jose/go-jose/v4from 4.1.3 to 4.1.6Release notes
Sourced from github.com/go-jose/go-jose/v4's releases.
Commits
a0111f8Merge commit from forkdd39a41Fix error message for future issued tokens (#303)13b7118Add a tests containerfile and threat model (#300)25b55feReject mismatched JWE CEK lengths (#266)b10771eReject typed nil at Verify time56f3866Check alg against pubkey curve during verify. (#293)74114c2cipher/cbc_hmac: don't panic on empty ciphertext (#292)6b364f3cipher/cbc_hmac: don't panic on invalid key (#291)a31af25json: limit stack depth (#290)7f5beb3jwt: reject out-of-range NumericDate values (#278)Updates
github.com/klauspost/compressfrom 1.18.1 to 1.18.7Release notes
Sourced from github.com/klauspost/compress's releases.
... (truncated)
Commits
8668e35Merge commit from forkac2f5e8docs: use unix line-endings for markdown files (#1144)620d7b5s2: Fix amd64 stack frame corruption (#1145)1b63f2fbuild(deps): bump the github-actions group with 2 updates (#1141)3d86b89s2: pool hash tables in Go encode paths to reduce allocations (#1143)15967degzhttp: Canonicalize ETag header (#1139)c5e0077zstd: Fix encoder changing dictionary with same ID (#1135)fd3f23ezstd: Default to full zero frames (#1134)8233c58flate: Clean up histogram order (#1133)bcf0d12build(deps): bump the github-actions group with 3 updates (#1132)Updates
go.mongodb.org/mongo-driverfrom 1.8.3 to 1.17.7Release notes
Sourced from go.mongodb.org/mongo-driver's releases.
... (truncated)
Commits
eb01e7eBUMP v1.17.73c55093GODRIVER-3766 Remove deprecation notice forMergeClientOptions(#2294)f6163bfGODRIVER-3770 Remove libasan from gssapi tests in CI (#2293)6798963GODRIVER-3770 Fix buffer handling in GSSAPI error description and username fu...c1e9575Add more visible deprecation banner to the 1.17 readme (#2233)d2fa0abBUMP v1.17.6f1d540bBUMP v1.17.5b879028GODRIVER-3654 Don't test v1 branches against latest server. (#2188)21f47d4Allow ignore-for-release label to satisfy label checker (#2203)8708ca8Disable merge-up from release/1.17 (#2202)Updates
go.opentelemetry.io/otelfrom 1.39.0 to 1.41.0Release notes
Sourced from go.opentelemetry.io/otel's releases.
... (truncated)
Changelog
Sourced from go.opentelemetry.io/otel's changelog.