Skip to content

chore(deps): bump the go_modules group across 4 directories with 15 updates - #3518

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/cli/go_modules-289b577507
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/cli/go_modules-289b577507

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026 •

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps the go_modules group with 12 updates in the /cli directory:

Package From To
github.com/go-git/go-git/v5 5.16.5 5.19.2
github.com/buger/jsonparser 1.1.1 1.1.2
github.com/cloudflare/circl 1.6.1 1.6.3
github.com/go-git/go-billy/v5 5.6.2 5.9.0
github.com/go-jose/go-jose/v4 4.1.3 4.1.6
github.com/klauspost/compress 1.18.1 1.18.7
go.mongodb.org/mongo-driver 1.8.3 1.17.7
go.opentelemetry.io/otel 1.39.0 1.41.0
go.opentelemetry.io/otel/sdk 1.39.0 1.45.0
golang.org/x/crypto 0.47.0 0.53.0
golang.org/x/net 0.49.0 0.56.0
google.golang.org/grpc 1.78.0 1.83.2
github.com/klauspost/compress 1.18.1 1.18.7
golang.org/x/crypto 0.47.0 0.55.0
golang.org/x/net 0.49.0 0.58.0
github.com/go-git/go-git/v5 5.16.5 5.19.2
github.com/cloudflare/circl 1.6.1 1.6.3
github.com/go-git/go-billy/v5 5.6.2 5.9.0
golang.org/x/crypto 0.47.0 0.55.0
golang.org/x/net 0.49.0 0.58.0
go.opentelemetry.io/otel 1.39.0 1.45.0
golang.org/x/crypto 0.47.0 0.55.0
golang.org/x/net 0.49.0 0.58.0
google.golang.org/grpc 1.78.0 1.83.2
golang.org/x/net 0.49.0 0.58.0
google.golang.org/grpc 1.78.0 1.83.2

Bumps the go_modules group with 6 updates in the /infra/blueprint-test directory:

Package From To
github.com/klauspost/compress 1.16.7 1.18.7
golang.org/x/crypto 0.47.0 0.52.0
golang.org/x/net 0.49.0 0.54.0
filippo.io/edwards25519 1.1.0 1.1.1
github.com/jackc/pgx/v5 5.7.1 5.9.2
github.com/klauspost/compress 1.16.7 1.18.7
github.com/moby/spdystream 0.5.0 0.5.1
golang.org/x/crypto 0.47.0 0.52.0
golang.org/x/net 0.49.0 0.54.0
golang.org/x/crypto 0.47.0 0.52.0
golang.org/x/net 0.49.0 0.54.0
golang.org/x/crypto 0.47.0 0.52.0
golang.org/x/net 0.49.0 0.54.0
golang.org/x/net 0.49.0 0.54.0

Bumps the go_modules group with 1 update in the /infra/utils/fbf directory: google.golang.org/grpc.
Bumps the go_modules group with 2 updates in the /tflint-ruleset-blueprint directory: golang.org/x/net and google.golang.org/grpc.

Updates github.com/go-git/go-git/v5 from 5.16.5 to 5.19.2

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.19.2

What's Changed

Full Changelog: go-git/go-git@v5.19.1...v5.19.2

v5.19.1

What's Changed

Full Changelog: go-git/go-git@v5.19.0...v5.19.1

v5.19.0

What's Changed

Full Changelog: go-git/go-git@v5.18.0...v5.19.0

v5.18.0

What's Changed

Full Changelog: go-git/go-git@v5.17.2...v5.18.0

... (truncated)

Commits
  • 3eeb238 Merge pull request #2277 from go-git/checkout-v5
  • 008a78f git: worktree, make the filesystem wrapper a symlink-safe boundary
  • 2263fb5 Merge pull request #2268 from go-git/renovate/releases/v5.x-go-golang.org-x-t...
  • 77b7625 build: Update module golang.org/x/text to v0.39.0 [SECURITY]
  • 85ea767 Merge pull request #2267 from go-git/renovate/releases/v5.x-go-golang.org-x-n...
  • 198675a build: Update module golang.org/x/net to v0.56.0 [SECURITY]
  • 4a0e66d Merge pull request #2254 from pjbgf/v5-dotgit-ref-name-containment
  • 3b306ef storage: dotgit, align reference-name safety with refname_is_safe
  • f3d0cc1 storage: dotgit, reject path traversal in reference names
  • 979cfe9 Merge pull request #2262 from joshblum/joshblum/to-slash-v5
  • Additional commits viewable in compare view

Updates github.com/buger/jsonparser from 1.1.1 to 1.1.2

Release notes

Sourced from github.com/buger/jsonparser's releases.

v1.1.2

What's Changed

New Contributors

Full Changelog: buger/jsonparser@v1.1.1...v1.1.2

Commits
  • a69e7e0 Merge pull request #276 from dbarrosop/master
  • d3eacc0 fix: prevent panic on negative slice index in Delete with malformed JSON (GO-...
  • 61b32cf Merge pull request #241 from unxcepted/master
  • 2181e83 Merge pull request #244 from ScaleChamp/patch-2
  • 1510b51 Added latest versions of go to tests
  • 6fc2e48 fix: eachkey allocation
  • a6f867e Merge pull request #239 from AdamKorcz/cifuzz1
  • cbc01fd Fuzzing: Add CIFuzz
  • dc92d69 Merge pull request #228 from jonomacd/null-handling
  • 2d9d634 Merge pull request #231 from carsonip/fix-parseint-overflow-check
  • Additional commits viewable in compare view

Updates github.com/cloudflare/circl from 1.6.1 to 1.6.3

Release notes

Sourced from github.com/cloudflare/circl's releases.

CIRCL v1.6.3

Fix a bug on ecc/p384 scalar multiplication.

What's Changed

Full Changelog: cloudflare/circl@v1.6.2...v1.6.3

CIRCL v1.6.2

  • New SLH-DSA, improvements in ML-DSA for arm64.
  • Tested compilation on WASM.

What's Changed

New Contributors

Full Changelog: cloudflare/circl@v1.6.1...v1.6.2

Commits
  • 24ae53c Release CIRCL v1.6.3
  • 581020b Rename method to oddMultiplesProjective.
  • 12209a4 Removing unused cmov for jacobian points.
  • fcba359 ecc/p384: use of complete projective formulas for scalar multiplication.
  • 5e1bae8 ecc/p384: handle point doubling in point addition with Jacobian coordinates.
  • 3416046 Check opts for nil value.
  • a763d47 Release CIRCL v1.6.2
  • 3c70bf9 Bump x/crypto x/sys dependencies.
  • 3f0f15b Revert to using package-declared HPKE errors for shortkem instead of standard...
  • 23491bd Adding generic Power2Round method.
  • Additional commits viewable in compare view

Updates github.com/go-git/go-billy/v5 from 5.6.2 to 5.9.0

Release notes

Sourced from github.com/go-git/go-billy/v5's releases.

v5.9.0

What's Changed

Full Changelog: go-git/go-billy@v5.8.0...v5.9.0

v5.8.0

What's Changed

Full Changelog: go-git/go-billy@v5.7.0...v5.8.0

v5.7.0

What's Changed

Full Changelog: go-git/go-billy@v5.6.2...v5.7.0

Commits
  • 237e529 Merge pull request #206 from pjbgf/v5-improvements
  • 04edb39 build: Add go-git integration test
  • d8efefd osfs: preserve empty ChrootOS base
  • 07f2a0b Merge pull request #205 from pjbgf/v5-improvements
  • 25207c8 build: Bump Go versions in workflows
  • 2fda229 osfs: ChrootOS eval baseDir on creation
  • 427b27f Merge pull request #203 from pjbgf/v5-improvements
  • 7d5a23e chroot: Reject symlink loops
  • 2c2287a util: avoid following symlinks in RemoveAll fallback
  • cbd88e9 Fix mount path handling
  • Additional commits viewable in compare view

Updates github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.6

Release notes

Sourced from github.com/go-jose/go-jose/v4's releases.

v4.1.6

Fixed Security Issues

This release contains a fix for GHSA-mgcc-cww5-fp2q

Breaking Changes

The fix for GHSA-mgcc-cww5-fp2q involves capping the size of the RSA modulus of keys accepted by JWK parsing. This limit is 4096 bits. If you need this to be higher, set MaxRSAModulusBits before performing any JWK parsing.

Changed

Full Changelog: go-jose/go-jose@v4.1.5...v4.1.6

v4.1.5

Fixed security issues

  • cipher/cbc_hmac: don't panic on empty ciphertext (#292)
  • cipher/cbc_hmac: don't panic on invalid key (#291)
  • json: limit stack depth (#290)
  • jwt: reject out-of-range NumericDate values (#278)
  • Check alg against pubkey curve during verify. (#293)
  • Reject malformed Ed25519 JWKs (#250)
  • jws: choose verification key per-signature (#243)

Breaking Changes

In #226, we un-exported jose.RandReader. This was used to be able to stub out the randomness function in tests, but is ignored as of Go 1.26 in some APIs, so no longer serves a useful function.

Changed

  • Verify OpaqueSigner's Public() return is public (#260)
  • jws: skip signature on ErrJWKSKidNotFound (#248)
  • Handle JWE JSON without protected header (#240)
  • jws: don't strip internal whitespace before parsing JSON (#239)
  • jws: fewer calls to OpaqueSigner.Public() (#224)
  • Return a specific error when parsing empty string (#216)
  • Reject typed nil at Verify time (#285)

v4.1.4

What's Changed

Fixes Panic in JWE decryption. See GHSA-78h2-9frx-2jm8

Full Changelog: go-jose/go-jose@v4.1.3...v4.1.4

Commits

Updates github.com/klauspost/compress from 1.18.1 to 1.18.7

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.7

  • Fix s2.NewDict OOB read.

Security release without other changes.

Full Changelog: klauspost/compress@v1.18.6...v1.18.7

v1.18.6

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.5...v1.18.6

v1.18.5

What's Changed

Full Changelog: klauspost/compress@v1.18.4...v1.18.5

v1.18.4

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.2...v1.18.4

v1.18.3

Downstream CVE-2025-61728

See golang/go#77102

Full Changelog: klauspost/compress@v1.18.2...v1.18.3

... (truncated)

Commits

Updates go.mongodb.org/mongo-driver from 1.8.3 to 1.17.7

Release notes

Sourced from go.mongodb.org/mongo-driver's releases.

MongoDB Go Driver 1.17.7

The MongoDB Go Driver Team is pleased to release version 1.17.7 of the official MongoDB Go Driver.

Release Highlights

This release removes the deprecation notice from options.MergeClientOptions and fixes buffer handling in GSSAPI error description and username functions.

What's Changed

🐛 Fixed

📝 Other Changes

Full Changelog: mongodb/mongo-go-driver@v1.17.6...v1.17.7

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. Questions and inquiries can be asked on the MongoDB Developer Community. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

MongoDB Go Driver 1.17.6

The MongoDB Go Driver Team is pleased to release version 1.17.6 of the official MongoDB Go Driver.

[!NOTE] Due to a bug in the Go Driver release automation, there is no 1.17.5 release.

Release Highlights

This release makes various maintainability improvements to the Go Driver development and release automation.

What's Changed

📝 Other Changes

Full Changelog: mongodb/mongo-go-driver@v1.17.4...v1.17.6

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. For issues with, questions about, or feedback for the Go Driver, please look into our support channels, including StackOverflow. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

MongoDB Go Driver 1.17.4

... (truncated)

Commits
  • eb01e7e BUMP v1.17.7
  • 3c55093 GODRIVER-3766 Remove deprecation notice for MergeClientOptions (#2294)
  • f6163bf GODRIVER-3770 Remove libasan from gssapi tests in CI (#2293)
  • 6798963 GODRIVER-3770 Fix buffer handling in GSSAPI error description and username fu...
  • c1e9575 Add more visible deprecation banner to the 1.17 readme (#2233)
  • d2fa0ab BUMP v1.17.6
  • f1d540b BUMP v1.17.5
  • b879028 GODRIVER-3654 Don't test v1 branches against latest server. (#2188)
  • 21f47d4 Allow ignore-for-release label to satisfy label checker (#2203)
  • 8708ca8 Disable merge-up from release/1.17 (#2202)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.39.0 to 1.41.0

Release notes

Sourced from go.opentelemetry.io/otel's releases.

v1.41.0/v0.63.0/v0.17.0/v0.0.15

This release is the last to support Go 1.24. The next release will require at least Go 1.25.

Added

Fixed

  • Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#7880)

What's Changed

…pdates

Bumps the go_modules group with 12 updates in the /cli directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.16.5` | `5.19.2` |
| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |
| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.6.1` | `1.6.3` |
| [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.6.2` | `5.9.0` |
| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.3` | `4.1.6` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.1` | `1.18.7` |
| [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) | `1.8.3` | `1.17.7` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.39.0` | `1.41.0` |
| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.39.0` | `1.45.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.47.0` | `0.53.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.49.0` | `0.56.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.78.0` | `1.83.2` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.1` | `1.18.7` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.47.0` | `0.55.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.49.0` | `0.58.0` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.16.5` | `5.19.2` |
| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.6.1` | `1.6.3` |
| [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.6.2` | `5.9.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.47.0` | `0.55.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.49.0` | `0.58.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.39.0` | `1.45.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.47.0` | `0.55.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.49.0` | `0.58.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.78.0` | `1.83.2` |
| [golang.org/x/net](https://github.com/golang/net) | `0.49.0` | `0.58.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.78.0` | `1.83.2` |

Bumps the go_modules group with 6 updates in the /infra/blueprint-test directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.16.7` | `1.18.7` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.47.0` | `0.52.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.49.0` | `0.54.0` |
| [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519) | `1.1.0` | `1.1.1` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.7.1` | `5.9.2` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.16.7` | `1.18.7` |
| [github.com/moby/spdystream](https://github.com/moby/spdystream) | `0.5.0` | `0.5.1` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.47.0` | `0.52.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.49.0` | `0.54.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.47.0` | `0.52.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.49.0` | `0.54.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.47.0` | `0.52.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.49.0` | `0.54.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.49.0` | `0.54.0` |

Bumps the go_modules group with 1 update in the /infra/utils/fbf directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Bumps the go_modules group with 2 updates in the /tflint-ruleset-blueprint directory: [golang.org/x/net](https://github.com/golang/net) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `github.com/go-git/go-git/v5` from 5.16.5 to 5.19.2
- [Release notes](https://github.com/go-git/go-git/releases)
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md)
- [Commits](go-git/go-git@v5.16.5...v5.19.2)

Updates `github.com/buger/jsonparser` from 1.1.1 to 1.1.2
- [Release notes](https://github.com/buger/jsonparser/releases)
- [Changelog](https://github.com/buger/jsonparser/blob/master/CHANGELOG.md)
- [Commits](buger/jsonparser@v1.1.1...v1.1.2)

Updates `github.com/cloudflare/circl` from 1.6.1 to 1.6.3
- [Release notes](https://github.com/cloudflare/circl/releases)
- [Commits](cloudflare/circl@v1.6.1...v1.6.3)

Updates `github.com/go-git/go-billy/v5` from 5.6.2 to 5.9.0
- [Release notes](https://github.com/go-git/go-billy/releases)
- [Commits](go-git/go-billy@v5.6.2...v5.9.0)

Updates `github.com/go-jose/go-jose/v4` from 4.1.3 to 4.1.6
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](go-jose/go-jose@v4.1.3...v4.1.6)

Updates `github.com/klauspost/compress` from 1.18.1 to 1.18.7
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.18.1...v1.18.7)

Updates `go.mongodb.org/mongo-driver` from 1.8.3 to 1.17.7
- [Release notes](https://github.com/mongodb/mongo-go-driver/releases)
- [Commits](mongodb/mongo-go-driver@v1.8.3...v1.17.7)

Updates `go.opentelemetry.io/otel` from 1.39.0 to 1.41.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.41.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.39.0 to 1.45.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.45.0)

Updates `golang.org/x/crypto` from 0.47.0 to 0.53.0
- [Commits](golang/crypto@v0.47.0...v0.53.0)

Updates `golang.org/x/net` from 0.49.0 to 0.56.0
- [Commits](golang/net@v0.49.0...v0.56.0)

Updates `google.golang.org/grpc` from 1.78.0 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.78.0...v1.83.2)

Updates `github.com/klauspost/compress` from 1.18.1 to 1.18.7
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.18.1...v1.18.7)

Updates `golang.org/x/crypto` from 0.47.0 to 0.55.0
- [Commits](golang/crypto@v0.47.0...v0.53.0)

Updates `golang.org/x/net` from 0.49.0 to 0.58.0
- [Commits](golang/net@v0.49.0...v0.56.0)

Updates `github.com/go-git/go-git/v5` from 5.16.5 to 5.19.2
- [Release notes](https://github.com/go-git/go-git/releases)
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md)
- [Commits](go-git/go-git@v5.16.5...v5.19.2)

Updates `github.com/cloudflare/circl` from 1.6.1 to 1.6.3
- [Release notes](https://github.com/cloudflare/circl/releases)
- [Commits](cloudflare/circl@v1.6.1...v1.6.3)

Updates `github.com/go-git/go-billy/v5` from 5.6.2 to 5.9.0
- [Release notes](https://github.com/go-git/go-billy/releases)
- [Commits](go-git/go-billy@v5.6.2...v5.9.0)

Updates `golang.org/x/crypto` from 0.47.0 to 0.55.0
- [Commits](golang/crypto@v0.47.0...v0.53.0)

Updates `golang.org/x/net` from 0.49.0 to 0.58.0
- [Commits](golang/net@v0.49.0...v0.56.0)

Updates `go.opentelemetry.io/otel` from 1.39.0 to 1.45.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.41.0)

Updates `golang.org/x/crypto` from 0.47.0 to 0.55.0
- [Commits](golang/crypto@v0.47.0...v0.53.0)

Updates `golang.org/x/net` from 0.49.0 to 0.58.0
- [Commits](golang/net@v0.49.0...v0.56.0)

Updates `google.golang.org/grpc` from 1.78.0 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.78.0...v1.83.2)

Updates `golang.org/x/net` from 0.49.0 to 0.58.0
- [Commits](golang/net@v0.49.0...v0.56.0)

Updates `google.golang.org/grpc` from 1.78.0 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.78.0...v1.83.2)

Updates `github.com/klauspost/compress` from 1.16.7 to 1.18.7
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.18.1...v1.18.7)

Updates `golang.org/x/crypto` from 0.47.0 to 0.52.0
- [Commits](golang/crypto@v0.47.0...v0.53.0)

Updates `golang.org/x/net` from 0.49.0 to 0.54.0
- [Commits](golang/net@v0.49.0...v0.56.0)

Updates `filippo.io/edwards25519` from 1.1.0 to 1.1.1
- [Commits](FiloSottile/edwards25519@v1.1.0...v1.1.1)

Updates `github.com/jackc/pgx/v5` from 5.7.1 to 5.9.2
- [Release notes](https://github.com/jackc/pgx/releases)
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.7.1...v5.9.2)

Updates `github.com/klauspost/compress` from 1.16.7 to 1.18.7
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.18.1...v1.18.7)

Updates `github.com/moby/spdystream` from 0.5.0 to 0.5.1
- [Release notes](https://github.com/moby/spdystream/releases)
- [Commits](moby/spdystream@v0.5.0...v0.5.1)

Updates `golang.org/x/crypto` from 0.47.0 to 0.52.0
- [Commits](golang/crypto@v0.47.0...v0.53.0)

Updates `golang.org/x/net` from 0.49.0 to 0.54.0
- [Commits](golang/net@v0.49.0...v0.56.0)

Updates `golang.org/x/crypto` from 0.47.0 to 0.52.0
- [Commits](golang/crypto@v0.47.0...v0.53.0)

Updates `golang.org/x/net` from 0.49.0 to 0.54.0
- [Commits](golang/net@v0.49.0...v0.56.0)

Updates `golang.org/x/crypto` from 0.47.0 to 0.52.0
- [Commits](golang/crypto@v0.47.0...v0.53.0)

Updates `golang.org/x/net` from 0.49.0 to 0.54.0
- [Commits](golang/net@v0.49.0...v0.56.0)

Updates `golang.org/x/net` from 0.49.0 to 0.54.0
- [Commits](golang/net@v0.49.0...v0.56.0)

Updates `google.golang.org/grpc` from 1.83.1 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.78.0...v1.83.2)

Updates `google.golang.org/grpc` from 1.83.1 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.78.0...v1.83.2)

Updates `google.golang.org/grpc` from 1.83.1 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.78.0...v1.83.2)

Updates `golang.org/x/net` from 0.44.0 to 0.55.0
- [Commits](golang/net@v0.49.0...v0.56.0)

Updates `google.golang.org/grpc` from 1.75.1 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.78.0...v1.83.2)

Updates `golang.org/x/net` from 0.44.0 to 0.58.0
- [Commits](golang/net@v0.49.0...v0.56.0)

Updates `golang.org/x/net` from 0.44.0 to 0.58.0
- [Commits](golang/net@v0.49.0...v0.56.0)

Updates `golang.org/x/net` from 0.44.0 to 0.58.0
- [Commits](golang/net@v0.49.0...v0.56.0)

Updates `google.golang.org/grpc` from 1.75.1 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.78.0...v1.83.2)

Updates `golang.org/x/net` from 0.44.0 to 0.58.0
- [Commits](golang/net@v0.49.0...v0.56.0)

Updates `google.golang.org/grpc` from 1.75.1 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.78.0...v1.83.2)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.19.2
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/buger/jsonparser
  dependency-version: 1.1.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/cloudflare/circl
  dependency-version: 1.6.3
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/go-git/go-billy/v5
  dependency-version: 5.9.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.6
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.7
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: go.mongodb.org/mongo-driver
  dependency-version: 1.17.7
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.41.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.45.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.53.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.56.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.7
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.55.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.19.2
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/cloudflare/circl
  dependency-version: 1.6.3
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/go-git/go-billy/v5
  dependency-version: 5.9.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.55.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.45.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.55.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.7
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.52.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.54.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: filippo.io/edwards25519
  dependency-version: 1.1.1
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.9.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.7
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/moby/spdystream
  dependency-version: 0.5.1
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.52.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.54.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.52.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.54.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.52.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.54.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.54.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.55.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested review from a team, apeabody, bharathkkb, g-awmalik and q2w as code owners November 10, 2026 18:53
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 10, 2026
@dpebot

dpebot commented Nov 10, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant