Skip to content

chore(deps): bump the go group across 1 directory with 10 updates - #112

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-757f3cfcf5
Closed

chore(deps): bump the go group across 1 directory with 10 updates#112
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-757f3cfcf5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go group with 9 updates in the / directory:

Package From To
github.com/aws/aws-sdk-go-v2 1.42.1 1.45.1
github.com/aws/aws-sdk-go-v2/credentials 1.19.29 1.20.1
github.com/aws/aws-sdk-go-v2/service/s3 1.105.2 1.109.1
github.com/go-chi/chi/v5 5.3.1 5.3.2
github.com/prometheus/client_golang 1.24.0 1.24.1
github.com/qiniu/go-sdk/v7 7.26.17 7.27.0
github.com/tencentyun/cos-go-sdk-v5 0.7.74 0.7.75
github.com/zitadel/oidc/v3 3.47.9 3.49.4
golang.org/x/crypto 0.54.0 0.55.0

Updates github.com/aws/aws-sdk-go-v2 from 1.42.1 to 1.45.1

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.29 to 1.20.1

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.105.2 to 1.109.1

Commits

Updates github.com/go-chi/chi/v5 from 5.3.1 to 5.3.2

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.3.2

What's Changed

  • feat(middleware): add text/markdown, text/csv, text/vtt to default compressible types by @​VojtechVitek in go-chi/chi#1151
  • docs: deployment recipe for middleware.ClientIPFromXFFTrustedProxies() by @​VojtechVitek in go-chi/chi#1111
  • fix: don't drop handlers that collide with a Mount()/Route() pattern by @​VojtechVitek in go-chi/chi#1148
  • Don't duplicate methods in Allow: header for 405 responses by @​flimzy in go-chi/chi#1029
  • fix(middleware): reject catch-all compress wildcards by @​VojtechVitek in go-chi/chi#1156
    • middleware.NewCompressor(level, "/*") never worked and silently compressed nothing. Instead of turning it into a compress-everything catch-all (as proposed in go-chi/chi#868 and go-chi/chi#1121), we decided to reject both "/" and "/*" at construction and panic. Compressing every response wastes CPU on already-compressed types (zip, jpeg, png), which is why the middleware keeps a curated default list. Users should pass explicit content types.

Full Changelog: go-chi/chi@v5.3.1...v5.3.2

Commits
  • 3893906 fix(middleware): reject catch-all compress wildcards "/" and "/*" (#1156)
  • 9b6ddcd Don't duplicate methods in Allow: header for 405 responses (#1029)
  • 29164f0 fix: don't drop handlers that collide with a Mount()/Route() pattern (#1148)
  • bc02284 docs: deployment recipe + verify checklist for ClientIPFromXFFTrustedProxies ...
  • 60ecea5 feat(middleware): add text/markdown, text/csv, text/vtt to default compressib...
  • See full diff in compare view

Updates github.com/prometheus/client_golang from 1.24.0 to 1.24.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.24.1 / 2026-07-23

Small bugfix release for promhttp.

What's Changed

[BUGFIX] promhttp: Fix panic on requests with nil URL. #2065

Full Changelog: prometheus/client_golang@v1.24.0...v1.24.1

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.24.1 / 2026-07-23

  • [BUGFIX] promhttp: Fix panic on requests with nil URL. #2065
Commits

Updates github.com/qiniu/go-sdk/v7 from 7.26.17 to 7.27.0

Release notes

Sourced from github.com/qiniu/go-sdk/v7's releases.

Release v7.27.0

新增

  • sandbox: 为创建沙箱请求添加幂等键支持，未显式指定时自动生成。
  • sandbox: 为创建和连接沙箱增加可配置的自动重试。

完善

  • sandbox: 对 408、可重试的 5xx 和网络错误进行带抖动的指数退避重试，并在重试过程中响应 Context 取消。

行为变化

  • Create 和 Connect 默认最多重试 5 次；如需保持单次请求，可将 Config.RetryMax 设为 0。
  • Config.RetryMax 未设置时，可通过 SANDBOX_RETRY_MAX 配置重试次数。

相关 PR

Release v7.26.18

新增

  • sandbox: 支持查询系统默认模板列表。

完善

  • sandbox: 补充沙箱列表、请求注入与模板管理 API 的测试和示例。

相关 PR

Changelog

Sourced from github.com/qiniu/go-sdk/v7's changelog.

7.27.0

  • 新增
    • sandbox: 为创建沙箱请求添加幂等键支持，未显式指定时自动生成 UUID
    • sandbox: 为创建和连接沙箱增加可配置的自动重试，支持通过 RetryMax 和 RetryBackoff 控制重试次数与退避策略
  • 完善
    • sandbox: 对 408、可重试的 5xx 和网络错误进行带抖动的指数退避重试，并在重试过程中响应 Context 取消
  • 行为变更
    • sandbox: Create 和 Connect 默认最多重试 5 次；如需保持单次请求，可将 Config.RetryMax 设为 0
    • sandbox: Config.RetryMax 未设置时可通过 SANDBOX_RETRY_MAX 配置重试次数

7.26.18

  • 新增
    • sandbox: 支持查询系统默认模板列表
  • 完善
    • sandbox: 补充沙箱列表、请求注入与模板管理 API 的测试和示例
Commits

Updates github.com/tencentyun/cos-go-sdk-v5 from 0.7.74 to 0.7.75

Release notes

Sourced from github.com/tencentyun/cos-go-sdk-v5's releases.

v0.7.75

1、COS complete接口增加chunk回包错误重试；创桶时增加存储类型参数。 2、CI 新增HDR图片处理服务开关接口；内容审核响应补充命中详情字段；支持大模型批量图片分析；支持文档预览和媒体17.9.0。 3、列出Vector同增加过滤参数。

Changelog

Sourced from github.com/tencentyun/cos-go-sdk-v5's changelog.

v0.7.75 - 2026-07-24

1、CI 新增HDR图片处理服务开关接口；内容审核响应补充命中详情字段；支持大模型批量图片分析；支持文档预览和媒体17.9.0。 2、

Merged

Commits

  • 支持文档预览和媒体17.9.0 a263ced
  • 支持图片两个需求 ba8f476
  • feat(vector): list vectors filter field c1623a4
  • Updated CHANGELOG.md d21acb2
  • feat(ci): 内容审核响应补充命中详情字段 b4b57be
Commits
  • afa8dc3 Merge pull request #354 from agin719/master
  • f4e641c 针对complete接口chunk回包错误增加重试
  • e1d0b81 support bucket stroage class
  • 82afc9f Merge pull request #353 from vintmd/master
  • 1bc4e2f Merge branch 'jojoliang-dev' into 'master' (merge request !162)
  • 4bf0673 support bucket stroage class
  • 84ef6ec Merge pull request #352 from tencentyun/feature_wanjiewu_1500c3cf
  • b76080a Merge branch 'feature/media17.9.0doc9.4.0' into 'master' (merge request !166)
  • a263ced 支持文档预览和媒体17.9.0
  • c2bb148 Merge pull request #351 from tencentyun/feature_wanjiewu_67022268
  • Additional commits viewable in compare view

Updates github.com/zitadel/oidc/v3 from 3.47.9 to 3.49.4

Release notes

Sourced from github.com/zitadel/oidc/v3's releases.

v3.49.4

3.49.4 (2026-08-28)

Bug Fixes

  • client: avoid mutating caller http.Client in CallRevokeEndpoint (#963) (7a7a91d), closes #911

v3.49.3

3.49.3 (2026-08-27)

Bug Fixes

  • op: guard against nil claims for opaque access tokens in token exchange (#959) (611e1a6), closes #704

v3.49.2

3.49.2 (2026-08-07)

Bug Fixes

  • tracing key, doc rephrasing and guard slog.SetDefault against nil (#935) (65199e0)

v3.49.1

3.49.1 (2026-08-05)

Bug Fixes

  • op: reject requested_token_type that cannot be issued (#932) (1974dae)

v3.49.0

3.49.0 (2026-08-05)

Features

v3.48.1

3.48.1 (2026-07-27)

Bug Fixes

  • rp: use redirect host for CLI callback server (#926) (3c8b704)

v3.48.0

3.48.0 (2026-07-23)

... (truncated)

Commits
  • 7a7a91d fix(client): avoid mutating caller http.Client in CallRevokeEndpoint (#963)
  • 611e1a6 fix(op): guard against nil claims for opaque access tokens in token exchange ...
  • d4abab3 chore: drop v2 support (#960)
  • a1cfbc4 chore(deps): bump github.com/go-chi/chi/v5 from 5.3.1 to 5.3.2 (#956)
  • 101cf01 chore(deps): bump go.opentelemetry.io/otel/trace from 1.44.0 to 1.45.0 (#936)
  • 63d2662 chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 (#953)
  • 156df76 chore(deps): bump github/codeql-action from 4.37.6 to 4.37.8 (#958)
  • 81322d9 chore(deps): bump golang.org/x/text from 0.40.0 to 0.41.0 (#946)
  • c2ac7f1 chore(deps): bump github/codeql-action from 4.37.4 to 4.37.6 (#942)
  • 65199e0 fix: tracing key, doc rephrasing and guard slog.SetDefault against nil (#935)
  • Additional commits viewable in compare view

Updates go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5

Commits
  • e16c7af Remove empty go.sum file
  • 6abcd01 Fix unhandled nil-errors in tests
  • 9481db7 Remove suite_test.go and gopkg.in/check.v1
  • 485f5fc Use standard testing library for limit_test.go
  • 3e00046 Use standard testing library for node_test.go
  • f612058 Use standard testing library for decode_test.go
  • 078f958 Use standard testing library encode_test.go
  • 3847ac0 [v3] backport CodeQL workflow
  • 1666663 Revert incorrect gofmt changes
  • 73290cb Retract v3 tags that cannot be installed
  • See full diff in compare view

Updates golang.org/x/crypto from 0.54.0 to 0.55.0

Commits
  • f44d03d go.mod: update golang.org/x dependencies
  • 5ed4944 crypto/internal/poly1305: provide optimised assembly for riscv64
  • b07833c ssh: return window credit for discarded extended data
  • d701c51 acme: fix nil pointer dereference in pebble test error reporting
  • 999d053 ssh: fix parsing of GSSAPI payloads offering multiple mechanisms
  • 90f76b8 ssh: reject certificate signature keys before recursing
  • b53964a ssh: permit empty but non-nil HostKeyAlgorithms, KeyExchanges, Ciphers, MACs
  • 626e40f ssh: drain stderr on forwarded TCP and Unix channels
  • 31914c6 x509roots/fallback: update bundle
  • f2135b8 all: clean up minor issues found by staticcheck
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 26, 2026
@dependabot
chore(deps): bump the go group across 1 directory with 10 updates
cbda851 
Bumps the go group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.42.1` | `1.45.1` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.19.29` | `1.20.1` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.105.2` | `1.109.1` |
| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.3.1` | `5.3.2` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.24.0` | `1.24.1` |
| [github.com/qiniu/go-sdk/v7](https://github.com/qiniu/go-sdk) | `7.26.17` | `7.27.0` |
| [github.com/tencentyun/cos-go-sdk-v5](https://github.com/tencentyun/cos-go-sdk-v5) | `0.7.74` | `0.7.75` |
| [github.com/zitadel/oidc/v3](https://github.com/zitadel/oidc) | `3.47.9` | `3.49.4` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.54.0` | `0.55.0` |



Updates `github.com/aws/aws-sdk-go-v2` from 1.42.1 to 1.45.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.42.1...v1.45.1)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.29 to 1.20.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.19.29...v1.20.1)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.105.2 to 1.109.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.105.2...service/s3/v1.109.1)

Updates `github.com/go-chi/chi/v5` from 5.3.1 to 5.3.2
- [Release notes](https://github.com/go-chi/chi/releases)
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md)
- [Commits](go-chi/chi@v5.3.1...v5.3.2)

Updates `github.com/prometheus/client_golang` from 1.24.0 to 1.24.1
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.24.0...v1.24.1)

Updates `github.com/qiniu/go-sdk/v7` from 7.26.17 to 7.27.0
- [Release notes](https://github.com/qiniu/go-sdk/releases)
- [Changelog](https://github.com/qiniu/go-sdk/blob/master/CHANGELOG.md)
- [Commits](qiniu/go-sdk@v7.26.17...v7.27.0)

Updates `github.com/tencentyun/cos-go-sdk-v5` from 0.7.74 to 0.7.75
- [Release notes](https://github.com/tencentyun/cos-go-sdk-v5/releases)
- [Changelog](https://github.com/tencentyun/cos-go-sdk-v5/blob/master/CHANGELOG.md)
- [Commits](tencentyun/cos-go-sdk-v5@v0.7.74...v0.7.75)

Updates `github.com/zitadel/oidc/v3` from 3.47.9 to 3.49.4
- [Release notes](https://github.com/zitadel/oidc/releases)
- [Commits](zitadel/oidc@v3.47.9...v3.49.4)

Updates `go.yaml.in/yaml/v3` from 3.0.4 to 3.0.5
- [Commits](yaml/go-yaml@v3.0.4...v3.0.5)

Updates `golang.org/x/crypto` from 0.54.0 to 0.55.0
- [Commits](golang/crypto@v0.54.0...v0.55.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.43.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.19.37
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.107.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/go-chi/chi/v5
  dependency-version: 5.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/qiniu/go-sdk/v7
  dependency-version: 7.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/tencentyun/cos-go-sdk-v5
  dependency-version: 0.7.75
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/zitadel/oidc/v3
  dependency-version: 3.49.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.yaml.in/yaml/v3
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: golang.org/x/crypto
  dependency-version: 0.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-757f3cfcf5 branch from f91a72d to cbda851 Compare September 1, 2026 17:04
@dependabot @github

dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 8, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-757f3cfcf5 branch September 8, 2026 16:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants