Repository navigation
chore(deps): bump the go-modules group across 1 directory with 9 updates - #459
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the go-modules group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.6` | `1.33.8` | | [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.20.6` | `1.20.8` | | [github.com/aws/aws-sdk-go-v2/service/route53](https://github.com/aws/aws-sdk-go-v2) | `1.70.1` | `1.70.3` | | [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.51.1` | `1.51.3` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.24.1` | `1.25.0` | | [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go) | `1.11.0` | `1.11.1` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.48.0` | `0.49.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.46.0` | `0.47.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.42.0` | `0.43.0` | Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.6 to 1.33.8 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.33.6...config/v1.33.8) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.20.6 to 1.20.8 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/mq/v1.20.6...service/kms/v1.20.8) Updates `github.com/aws/aws-sdk-go-v2/service/route53` from 1.70.1 to 1.70.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/ec2/v1.70.1...service/emr/v1.70.3) Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.51.1 to 1.51.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.51.1...service/s3/v1.51.3) Updates `github.com/prometheus/client_golang` from 1.24.1 to 1.25.0 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/v1.25.0/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.24.1...v1.25.0) Updates `go.opentelemetry.io/proto/otlp` from 1.11.0 to 1.11.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases) - [Commits](open-telemetry/opentelemetry-proto-go@v1.11.0...v1.11.1) Updates `golang.org/x/sys` from 0.48.0 to 0.49.0 - [Commits](golang/sys@v0.48.0...v0.49.0) Updates `golang.org/x/term` from 0.46.0 to 0.47.0 - [Commits](golang/term@v0.46.0...v0.47.0) Updates `golang.org/x/text` from 0.42.0 to 0.43.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.42.0...v0.43.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.33.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.20.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/service/route53 dependency-version: 1.70.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/service/sts dependency-version: 1.51.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/prometheus/client_golang dependency-version: 1.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/proto/otlp dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: golang.org/x/sys dependency-version: 0.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/term dependency-version: 0.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/text dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
This was referenced Oct 27, 2026
Member
|
the proposed Go updates are reconciled in stacked draft #481 above #470. x/sys, x/term, and x/text were already advanced by the targeted x/net v0.62.0 security fix; the remaining compatible AWS, Prometheus, and OTLP updates are applied on top, with the separate disposable harness module updated too. the existing x/net/x/crypto security floor is retained. routine Go, full Go races, harness races, lint, and govulncheck passed (zero reachable vulnerabilities; one uncalled required-module advisory remains). native real-control integration is still running. neither this PR nor #481 has been merged. |
Member
|
superseded by #489 at signed d5e5bca, rebuilt directly on current main and independently reviewed. all nine proposed Go updates are retained with matching disposable-harness dependencies and the x/net security floor. original source and comments are preserved in the reconstruction inventory. all non-skipped checks on #489 now pass. #481 remains open until its non-dependency correctness and runtime ancestry have verified replacement homes. |
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/go_modules/go-modules-28a9fbfd37
branch
October 28, 2026 13:05
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go-modules group with 9 updates in the / directory:
1.33.61.33.81.20.61.20.81.70.11.70.31.51.11.51.31.24.11.25.01.11.01.11.10.48.00.49.00.46.00.47.00.42.00.43.0Updates
github.com/aws/aws-sdk-go-v2/configfrom 1.33.6 to 1.33.8Commits
c88f24bRelease 2026-10-08236b4e5Regenerated Clients1935912Update API modelab2110bUpdate to smithy-go v1.28.4 (#3584)313f364Release 2026-10-06bf149b2Regenerated Clientsb156ac5Update endpoints modelb04b157Update API modelc088188fix bad defaults in backup (#3583)3207b1cClose resp body when interceptor after deserializer returns error (#3582)Updates
github.com/aws/aws-sdk-go-v2/credentialsfrom 1.20.6 to 1.20.8Commits
390cf19Release 2023-03-21c37c72aRegenerated Clientsd1e5193Update endpoints model2506101Update API modelc93b5ccMerge pull request #2051 from aws/add100ContinueCustomizationc01aac6Keep one changelog for PR3780faaKeep one changelog for PRb94b5b7Merge remote-tracking branch 'origin/add100ContinueCustomization' into add100...6174ff2Change some variable name and use operation shape id to represent operation s...83491fcadd changelog to last commitUpdates
github.com/aws/aws-sdk-go-v2/service/route53from 1.70.1 to 1.70.3Commits
c88f24bRelease 2026-10-08236b4e5Regenerated Clients1935912Update API modelab2110bUpdate to smithy-go v1.28.4 (#3584)313f364Release 2026-10-06bf149b2Regenerated Clientsb156ac5Update endpoints modelb04b157Update API modelc088188fix bad defaults in backup (#3583)3207b1cClose resp body when interceptor after deserializer returns error (#3582)Updates
github.com/aws/aws-sdk-go-v2/service/stsfrom 1.51.1 to 1.51.3Commits
bd15f86Release 2024-03-053bfebf4Regenerated Clients6875e64Update API model4d72062Update bug-report.ymlbe1a076Update bug-report.ymle197198Update bug-report.yml (#2532)a663046Restore 'AddAsIsPresigingMiddleware' (sic) for backwards compatibility (#2530)ec41b9fRelease 2024-03-0457954c3Regenerated Clients91dd60aUpdate API modelUpdates
github.com/prometheus/client_golangfrom 1.24.1 to 1.25.0Release notes
Sourced from github.com/prometheus/client_golang's releases.
... (truncated)
Changelog
Sourced from github.com/prometheus/client_golang's changelog.
Commits
0d88875Cut v1.25.0 (#2164)e9946eeCut v1.25.0-rc.0 (#2154)de866d6Merge pull request #2152 from prometheus/dependabot/go_modules/api/prometheus...a37302fprometheus: fix modernize lint findings (#2151)a3fa380build(deps): bump google.golang.org/grpc9da3fccfix: updates for tsdb blocks handling (#1928)0ecb5c2api: match complete URL placeholders (#2136)2ad001aexp/api/remote: reset buffer before generic marshal (#2139)0db8d43promhttp: vary negotiated metrics responses (#2142)b1f9c7aMerge pull request #2144 from prometheus/dependabot/go_modules/exp/github.com...Updates
go.opentelemetry.io/proto/otlpfrom 1.11.0 to 1.11.1Release notes
Sourced from go.opentelemetry.io/proto/otlp's releases.
... (truncated)
Commits
56a07c4Release v1.11.1 (#724)5f91619chore(deps): update module github.com/protonmail/go-crypto to v1.5.2 (#721)3354765chore(deps): update open-telemetry/shared-workflows action to v0.17.0 (#722)63fe26dchore(deps): update googleapis to 8a89bd6 (#723)1b6d220fix(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.31.0...10f903echore(deps): update module github.com/protonmail/go-crypto to v1.5.1 (#719)9a22ab7chore(deps): update module github.com/protonmail/go-crypto to v1.5.0 (#718)a448d91chore(deps): update open-telemetry/shared-workflows action to v0.16.0 (#717)0dc2393chore(deps): update open-telemetry/shared-workflows action to v0.15.0 (#716)47c34efchore(deps): update googleapis to b142276 (#715)Updates
golang.org/x/sysfrom 0.48.0 to 0.49.0Commits
b6b8557unix/linux: unify ppc64x syscall wrappersaab6988unix: add PrctlArg5Ptrcdfd984unix: pass fcntl data as unsafe.Pointer in FcntlF{lock,store} on darwin782b836unix/linux: don't warn about closed stderr from child process61592fbunix: return syscall error in *listxattrNS on BSDc136fdaunix/linux/Dockerfile: update to Go 1.26.8f1d0d79unix: pass xattr data as unsafe.Pointer in BSD xattr syscalls67f850bunix: update linux to v7.2eb1f659unix: add O_EXEC and O_SEARCH on darwin51bc731unix: add Mmsghdr for linuxUpdates
golang.org/x/termfrom 0.46.0 to 0.47.0Commits
0851034go.mod: update golang.org/x dependenciesUpdates
golang.org/x/textfrom 0.42.0 to 0.43.0Commits
ac40b0fgo.mod: update golang.org/x dependencies6dcc5b6unicode/bidi: avoid quadratic behavior in Paragraph.Order and Paragraph.Lined0ecd29secure/bidirule: lazily precompute ASCII tableYou can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions