Skip to content

dev: bump the safe group across 1 directory with 40 updates#7748

Closed
dependabot[bot] wants to merge 1 commit into
v3.35from
dependabot/go_modules/safe-aa63c896fe
Closed

dev: bump the safe group across 1 directory with 40 updates#7748
dependabot[bot] wants to merge 1 commit into
v3.35from
dependabot/go_modules/safe-aa63c896fe

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 27, 2025

Copy link
Copy Markdown
Contributor

Bumps the safe group with 27 updates in the / directory:

Package From To
github.com/KimMachineGun/automemlimit 0.7.4 0.7.5
github.com/aws/aws-sdk-go 1.55.7 1.55.8
github.com/aws/aws-sdk-go-v2/config 1.29.12 1.31.15
github.com/aws/aws-sdk-go-v2/service/s3 1.78.2 1.88.7
github.com/coder/websocket 1.8.13 1.8.14
github.com/eclipse/paho.mqtt.golang 1.5.0 1.5.1
github.com/emersion/go-smtp 0.22.0 0.24.0
github.com/getsentry/sentry-go 0.34.1 0.36.1
github.com/grpc-ecosystem/grpc-gateway/v2 2.27.1 2.27.3
github.com/jackc/pgx/v5 5.7.5 5.7.6
github.com/jarcoal/httpmock 1.4.0 1.4.1
github.com/klauspost/compress 1.18.0 1.18.1
github.com/nats-io/nats-server/v2 2.11.4 2.12.1
github.com/prometheus/client_golang 1.22.0 1.23.2
github.com/redis/go-redis/v9 9.11.0 9.16.0
github.com/spf13/cast 1.9.2 1.10.0
github.com/spf13/cobra 1.9.1 1.10.1
github.com/spf13/viper 1.20.1 1.21.0
github.com/throttled/throttled/v2 2.13.0 2.15.0
github.com/uptrace/bun 1.2.14 1.2.15
github.com/uptrace/bun/dialect/pgdialect 1.2.14 1.2.15
github.com/uptrace/bun/driver/pgdriver 1.2.14 1.2.15
go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux 0.62.0 0.63.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.62.0 0.63.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.62.0 0.63.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 1.37.0 1.38.0
golang.org/x/oauth2 0.30.0 0.32.0

Updates github.com/KimMachineGun/automemlimit from 0.7.4 to 0.7.5

Release notes

Sourced from github.com/KimMachineGun/automemlimit's releases.

v0.7.5

What's Changed

Full Changelog: KimMachineGun/automemlimit@v0.7.4...v0.7.5

Commits

Updates github.com/aws/aws-sdk-go from 1.55.7 to 1.55.8

Release notes

Sourced from github.com/aws/aws-sdk-go's releases.

Release v1.55.8 (2025-07-31)

SDK Features

  • Mark the module and all packages as deprecated.
    • This SDK has entered end-of-support.
Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.29.12 to 1.31.15

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.78.2 to 1.88.7

Commits

Updates github.com/coder/websocket from 1.8.13 to 1.8.14

Release notes

Sourced from github.com/coder/websocket's releases.

v1.8.14

Changes

New Contributors

Full Changelog: coder/websocket@v1.8.13...v1.8.14

Commits

Updates github.com/eclipse/paho.mqtt.golang from 1.5.0 to 1.5.1

Release notes

Sourced from github.com/eclipse/paho.mqtt.golang's releases.

v1.5.1

This is a minor release incorporating changes made in the 14 months since v1.5.0 (including updating dependencies, and raising the Go version to 1.24). The changes are relatively minor but address a potential security issue, possible panic, enable users to better monitor the connection status, and incorporate a few optimisations.

Thanks to those who have provided fixes/enhancements included in this release!

Special thanks to Paul Gerste at Sonar for reporting issue #730 via the Eclipse security team (fix was implemented in PR #714 in May, github issue created just prior to this release). This issue arose where a topic > 65535 bytes was passed to the Publish function, due to the way the data was encoded the topic could leak into the message body. Please see issue #730 for further details.

What's Changed

Full Changelog: eclipse-paho/paho.mqtt.golang@v1.5.0...v1.5.1

Commits
  • b305237 Update dependencies in docker examples
  • 35ee03d Potential panic when using manual ACK
  • 433bd22 address data race in test
  • 4debe3a Potential panic when using manual ACK
  • 601453b Resolve issues in fvt_client_test
  • 439e2ab Dependency update (also rise Go version to 1.24)
  • d276593 ConnectionNotificationHandler - generic callback for all types of connection ...
  • 8a350a9 notifications
  • 5620c5e notifications
  • 45048cc notifications
  • Additional commits viewable in compare view

Updates github.com/emersion/go-smtp from 0.22.0 to 0.24.0

Commits
  • ab24fe7 Remove superfluous validateLine() calls in sendMail()
  • 6944e33 Implement MT-PRIORITY (RFC 6710)
  • 54dd31d Implement DELIVERBY (RFC 2852)
  • See full diff in compare view

Updates github.com/getsentry/sentry-go from 0.34.1 to 0.36.1

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.36.1

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.36.1.

Bug Fixes

  • Prevent panic when converting error chains containing non-comparable error types by using a safe fallback for visited detection in exception conversion (#1113)

0.36.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.36.0.

Breaking Changes

  • Behavioral change for the MaxBreadcrumbs client option. Removed the hard limit of 100 breadcrumbs, allowing users to set a larger limit and also changed the default limit from 30 to 100 (#1106))

  • The changes to error handling (#1075) will affect issue grouping. It is expected that any wrapped and complex errors will be grouped under a new issue group.

Features

  • Add support for improved issue grouping with enhanced error chain handling (#1075)

    The SDK now provides better handling of complex error scenarios, particularly when dealing with multiple related errors or error chains. This feature automatically detects and properly structures errors created with Go's errors.Join() function and other multi-error patterns.

    // Multiple errors are now properly grouped and displayed in Sentry
    err1 := errors.New("err1")
    err2 := errors.New("err2") 
    combinedErr := errors.Join(err1, err2)
    // When captured, these will be shown as related exceptions in Sentry
    sentry.CaptureException(combinedErr)

  • Add TraceIgnoreStatusCodes option to allow filtering of HTTP transactions based on status codes (#1089)

    • Configure which HTTP status codes should not be traced by providing single codes or ranges
    • Example: TraceIgnoreStatusCodes: [][]int{{404}, {500, 599}} ignores 404 and server errors 500-599

Bug Fixes

  • Fix logs being incorrectly filtered by BeforeSend callback (#1109)
    • Logs now bypass the processEvent method and are sent directly to the transport
    • This ensures logs are only filtered by BeforeSendLog, not by the error/message BeforeSend callback

Misc

  • Add support for Go 1.25 and drop support for Go 1.22 (#1103)

0.35.3

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.35.3.

Bug Fixes

... (truncated)

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.36.1

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.36.1.

Bug Fixes

  • Prevent panic when converting error chains containing non-comparable error types by using a safe fallback for visited detection in exception conversion (#1113)

0.36.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.36.0.

Breaking Changes

  • Behavioral change for the MaxBreadcrumbs client option. Removed the hard limit of 100 breadcrumbs, allowing users to set a larger limit and also changed the default limit from 30 to 100 (#1106))

  • The changes to error handling (#1075) will affect issue grouping. It is expected that any wrapped and complex errors will be grouped under a new issue group.

Features

  • Add support for improved issue grouping with enhanced error chain handling (#1075)

    The SDK now provides better handling of complex error scenarios, particularly when dealing with multiple related errors or error chains. This feature automatically detects and properly structures errors created with Go's errors.Join() function and other multi-error patterns.

    // Multiple errors are now properly grouped and displayed in Sentry
    err1 := errors.New("err1")
    err2 := errors.New("err2") 
    combinedErr := errors.Join(err1, err2)
    // When captured, these will be shown as related exceptions in Sentry
    sentry.CaptureException(combinedErr)

  • Add TraceIgnoreStatusCodes option to allow filtering of HTTP transactions based on status codes (#1089)

    • Configure which HTTP status codes should not be traced by providing single codes or ranges
    • Example: TraceIgnoreStatusCodes: [][]int{{404}, {500, 599}} ignores 404 and server errors 500-599

Bug Fixes

  • Fix logs being incorrectly filtered by BeforeSend callback (#1109)
    • Logs now bypass the processEvent method and are sent directly to the transport
    • This ensures logs are only filtered by BeforeSendLog, not by the error/message BeforeSend callback

Misc

  • Add support for Go 1.25 and drop support for Go 1.22 (#1103)

0.35.3

... (truncated)

Commits

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.1 to 2.27.3

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.27.3

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.2...v2.27.3

v2.27.2

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.1...v2.27.2

Commits
  • ab243ac chore(deps): update googleapis digest to 9070e63 (#5970)
  • 30abf93 fix(deps): update module google.golang.org/protobuf to v1.36.10 (#5969)
  • b73048f chore(deps): update dependency bazel to v8.4.2 (#5968)
  • 95f123b chore(deps): update googleapis digest to 3990e05 (#5967)
  • fb9da67 chore(deps): update googleapis digest to 063f9e1 (#5966)
  • 208372a chore(deps): update googleapis digest to e78280f (#5965)
  • 1a315aa fix(deps): update google.golang.org/genproto/googleapis/api digest to 57b25ae...
  • b862f0b fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 57b25ae...
  • e6cdbc7 chore(deps): update googleapis digest to eab82ec (#5962)
  • 7fefac0 chore(deps): update googleapis digest to a4ded73 (#5961)
  • Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.7.5 to 5.7.6

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.7.6 (September 8, 2025)

  • Use ParseConfigError in pgx.ParseConfig and pgxpool.ParseConfig (Yurasov Ilia)
  • Add PrepareConn hook to pgxpool (Jonathan Hall)
  • Reduce allocations in QueryContext (Dominique Lefevre)
  • Add MarshalJSON and UnmarshalJSON for pgtype.Uint32 (Panos Koutsovasilis)
  • Configure ping behavior on pgxpool with ShouldPing (Christian Kiely)
  • zeronull int types implement Int64Valuer and Int64Scanner (Li Zeghong)
  • Fix panic when receiving terminate connection message during CopyFrom (Michal Drausowski)
  • Fix statement cache not being invalidated on error during batch (Muhammadali Nazarov)
Commits
  • a2fca03 Release v5.7.6
  • 95fc312 Add link to github.com/KoNekoD/pgx-colon-query-rewriter
  • 5534fa9 Improve Rows docs
  • a295d68 Merge pull request #2368 from zeghong/zeronull-int-valuer
  • 03f32c0 Merge branch 'master' into zeronull-int-valuer
  • 82fbe49 Merge pull request #2372 from WGH-/improve-batch-doc
  • 594d9d6 Merge pull request #2367 from zeghong/zeronull-int-scanner
  • 5a18241 Merge branch 'master' into zeronull-int-scanner
  • cc34da5 Merge pull request #2370 from Saurabh2402/improvement/setup-linters
  • dd81f81 Merge pull request #2369 from zeghong/go-doc-links
  • Additional commits viewable in compare view

Updates github.com/jarcoal/httpmock from 1.4.0 to 1.4.1

Release notes

Sourced from github.com/jarcoal/httpmock's releases.

v1.4.1

What's Changed

New Contributors

Full Changelog: jarcoal/httpmock@v1.4.0...v1.4.1

Commits
  • 314d58a fix: protect all body-related methods with mutext
  • e482896 fix: avoid data race when closing body
  • c977145 test: also test with go v1.25 and use golangci-lint v2.4.0
  • See full diff in compare view

Updates github.com/klauspost/compress from 1.18.0 to 1.18.1

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.1

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.0...v1.18.1

Commits

Updates github.com/nats-io/nats-server/v2 from 2.11.4 to 2.12.1

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.12.1

Changelog

Refer to the 2.12 Upgrade Guide for backwards compatibility notes with 2.11.x.

Go Version

Dependencies

  • github.com/google/go-tpm v0.9.6 (#7374)
  • github.com/nats-io/nats.go v1.46.0 (#7374)
  • golang.org/x/crypto v0.43.0 (#7423)
  • golang.org/x/sys v0.37.0 (#7423)
  • golang.org/x/time v0.14.0 (#7423)

Added

General

  • The NewServerFromConfig function has been added to the embedded server API for parsing an external configuration file when ConfigFile is supplied (#7364)
  • WebSocket leafnode connections can now use a HTTP proxy by specifying proxy settings in the leafnode remotes (#7242)
  • The write_deadline option in the cluster, leafnode and gateway config blocks allows configuring write deadlines on a finger-grained basis (#7405)

Improved

Monitoring

  • The jsz monitoring endpoint can now report leader counts (#7429)

JetStream

  • The store lock is no longer held while searching for TTL expiry tasks, improving performance (#7344)
  • Removing a message from the TTL state is now faster (#7344)
  • The filestore no longer performs heap allocations for hash checks (#7345)
  • The filestore now reuses pooled write cache allocations more efficiently (#7346)
  • Meta snapshot performance for a very large number of assets has been improved after a regression in v2.11.9 (#7350)
  • Sequence-from-timestamp lookups, such as those using opt_start_time on consumers or start_time on message get requests, now use a binary search for improved lookup performance (#7357)
  • Scheduled messages are now deactivated properly when followed up with another message on the same subject without a schedule (#7366)
  • Meta snapshots are no longer taken on every stream removal (#7373)
  • Filestore cache lookups can now return early for empty blocks (#7381)
  • Filestore meta files are now written using temporary staging, avoiding accidental truncation on crashes (#7388)
  • Atomic batch publish now supports deduplication with the Nats-Msg-Id header (#7391)
  • Cache-specific log lines in the filestore have been improved (#7396)
  • Log lines and errors related to offline/unsupported assets are now clearer (#7416, #7425)

Fixed

General

... (truncated)

Commits
  • fab5f99 Release v2.12.1
  • bf2c60a Cherry-picks for v2.12.1 (#7430)
  • 350d9d7 [FIXED] Filestore unlock when message erase fails
  • 18007b8 [IMPROVED] JSZ Raft leader stats
  • bc7407a Update to Go 1.25.3/1.24.9
  • ffbdb10 [FIXED] Trusted Proxies: Reload log message report added keys as removed
  • 59361c9 Release v2.12.1-RC.5
  • fd8c5b7 Cherry-picks for v2.12.1-RC.5 (#7426)
  • 6c9a051 feat: add riscv64 support
  • 84fe04a NRG: Parallel catchups can truncate committed
  • Additional commits viewable in compare view

Updates github.com/nats-io/nats.go from 1.43.0 to 1.46.1

Release notes

Sourced from github.com/nats-io/nats.go's releases.

Release v1.46.1

Changelog

FIXED

  • JetStream:
    • Add omitempty to AllowMsgTTL and AllowMsgCounter (#1947)

Complete Changes

nats-io/nats.go@v1.46.0...v1.46.1

Release v1.46.0

Changelog

Overview

This release enables features introduced in nats-server@v2.12.0.

Some features, while enabled in the client by adding relevant configuration, have APIs exposed in synadia-io/orbit.go, namely:

ADDED

  • JetStream:
    • Stream counters configuration option (#1932, #1939)
    • New fields in ClusterInfo (#1935)
    • AllowAtomicPublish stream configuration option (#1940)
    • PersistMode stream config option for configurable stream persistence settings (#1943)
    • AllowMsgSchedules stream configuration option to enable message scheduling (#1942)
    • Context and timeout options to Messages.Next() plus Fetch context support (#1938)
    • Support custom name prefix for ordered consumers (#1928)
    • Prioritized priority policy (#1937)
  • KeyValue:
    • Added KeyValue bucket metadada support (#1944)

IMPROVED

  • JetStream:
    • Add max consumers limit error (code=10026). Thanks @​Arlet2 for the contribution (#1922)
    • Return more specific cons info error on ordered consumer recreation (#1931)

Complete Changes

nats-io/nats.go@v1.45.0...v1.46.0

Release v1.45.0

Changelog

ADDED

  • Core NATS:
    • Handling for maximum account active connections exceeded (#1921)
  • JetStream:

... (truncated)

Commits
  • 4dc7f1e Release v1.46.1 (#1948)
  • 0bbc048 [FIXED] Add omitempty to AllowMsgTTL and AllowMsgCounter (#1947)
  • 41de016 Release v1.46.0
  • 2d3be0c [IMPROVED] Bump nats-server test dependency
  • 9726c6f [ADDED] AllowMsgSchedules field to enable message scheduling in stream config...
  • 5e67170 [FIXED] Revert leftover no headers support changes (#1941)
  • c85e275 [ADDED] Introduce PersistMode for configurable persistence settings in stream...
  • 13d3ae2 [ADDED] AllowAtomicPublish option on stream config (#1940)
  • 60f1718 [CHANGED] Remove no headers support (#1939)
  • ec9b58f [IMPROVED] Add test veryfying if mirror can be updated to regular stream (#1934)
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.22.0 to 1.23.2

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.2 - 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1 - 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

v1.23.0 - 2025-07-30

  • [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812
  • [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766
  • [FEATURE] Add exemplars for native histograms #1686
  • [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823
  • [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833
  • [BUGFIX] exp/api: client prompt return on context cancellation #1729

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

1.23.0 / 2025-07-30

  • [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812
  • [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766
  • [FEATURE] Add exemplars for native histograms #1686
  • [ENHANCEMENT] exp/api: Bubble up status code from writeResponse

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 27, 2025
@dependabot dependabot Bot requested a review from a team as a code owner October 27, 2025 23:38
@dependabot dependabot Bot requested a review from halimi October 27, 2025 23:38
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 27, 2025
@dependabot dependabot Bot force-pushed the dependabot/go_modules/safe-aa63c896fe branch from 9a6e7aa to 67927a9 Compare November 3, 2025 22:11
@dependabot dependabot Bot force-pushed the dependabot/go_modules/safe-aa63c896fe branch from 67927a9 to 01fce81 Compare November 10, 2025 22:13
Bumps the safe group with 27 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/KimMachineGun/automemlimit](https://github.com/KimMachineGun/automemlimit) | `0.7.4` | `0.7.5` |
| [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) | `1.55.7` | `1.55.8` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.29.12` | `1.31.15` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.78.2` | `1.88.7` |
| [github.com/coder/websocket](https://github.com/coder/websocket) | `1.8.13` | `1.8.14` |
| [github.com/eclipse/paho.mqtt.golang](https://github.com/eclipse/paho.mqtt.golang) | `1.5.0` | `1.5.1` |
| [github.com/emersion/go-smtp](https://github.com/emersion/go-smtp) | `0.22.0` | `0.24.0` |
| [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) | `0.34.1` | `0.36.1` |
| [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.27.1` | `2.27.3` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.7.5` | `5.7.6` |
| [github.com/jarcoal/httpmock](https://github.com/jarcoal/httpmock) | `1.4.0` | `1.4.1` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.0` | `1.18.1` |
| [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) | `2.11.4` | `2.12.1` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.22.0` | `1.23.2` |
| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.11.0` | `9.16.0` |
| [github.com/spf13/cast](https://github.com/spf13/cast) | `1.9.2` | `1.10.0` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.9.1` | `1.10.1` |
| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.20.1` | `1.21.0` |
| [github.com/throttled/throttled/v2](https://github.com/throttled/throttled) | `2.13.0` | `2.15.0` |
| [github.com/uptrace/bun](https://github.com/uptrace/bun) | `1.2.14` | `1.2.15` |
| [github.com/uptrace/bun/dialect/pgdialect](https://github.com/uptrace/bun) | `1.2.14` | `1.2.15` |
| [github.com/uptrace/bun/driver/pgdriver](https://github.com/uptrace/bun) | `1.2.14` | `1.2.15` |
| [go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.62.0` | `0.63.0` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.62.0` | `0.63.0` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.62.0` | `0.63.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.38.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.30.0` | `0.32.0` |



Updates `github.com/KimMachineGun/automemlimit` from 0.7.4 to 0.7.5
- [Release notes](https://github.com/KimMachineGun/automemlimit/releases)
- [Commits](KimMachineGun/automemlimit@v0.7.4...v0.7.5)

Updates `github.com/aws/aws-sdk-go` from 1.55.7 to 1.55.8
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG_PENDING.md)
- [Commits](aws/aws-sdk-go@v1.55.7...v1.55.8)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.29.12 to 1.31.15
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@config/v1.29.12...config/v1.31.15)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.78.2 to 1.88.7
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.78.2...service/s3/v1.88.7)

Updates `github.com/coder/websocket` from 1.8.13 to 1.8.14
- [Release notes](https://github.com/coder/websocket/releases)
- [Commits](coder/websocket@v1.8.13...v1.8.14)

Updates `github.com/eclipse/paho.mqtt.golang` from 1.5.0 to 1.5.1
- [Release notes](https://github.com/eclipse/paho.mqtt.golang/releases)
- [Commits](eclipse-paho/paho.mqtt.golang@v1.5.0...v1.5.1)

Updates `github.com/emersion/go-smtp` from 0.22.0 to 0.24.0
- [Release notes](https://github.com/emersion/go-smtp/releases)
- [Commits](emersion/go-smtp@v0.22.0...v0.24.0)

Updates `github.com/getsentry/sentry-go` from 0.34.1 to 0.36.1
- [Release notes](https://github.com/getsentry/sentry-go/releases)
- [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-go@v0.34.1...v0.36.1)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.1 to 2.27.3
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/main/.goreleaser.yml)
- [Commits](grpc-ecosystem/grpc-gateway@v2.27.1...v2.27.3)

Updates `github.com/jackc/pgx/v5` from 5.7.5 to 5.7.6
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.7.5...v5.7.6)

Updates `github.com/jarcoal/httpmock` from 1.4.0 to 1.4.1
- [Release notes](https://github.com/jarcoal/httpmock/releases)
- [Commits](jarcoal/httpmock@v1.4.0...v1.4.1)

Updates `github.com/klauspost/compress` from 1.18.0 to 1.18.1
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.18.0...v1.18.1)

Updates `github.com/nats-io/nats-server/v2` from 2.11.4 to 2.12.1
- [Release notes](https://github.com/nats-io/nats-server/releases)
- [Changelog](https://github.com/nats-io/nats-server/blob/main/.goreleaser.yml)
- [Commits](nats-io/nats-server@v2.11.4...v2.12.1)

Updates `github.com/nats-io/nats.go` from 1.43.0 to 1.46.1
- [Release notes](https://github.com/nats-io/nats.go/releases)
- [Commits](nats-io/nats.go@v1.43.0...v1.46.1)

Updates `github.com/prometheus/client_golang` from 1.22.0 to 1.23.2
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.22.0...v1.23.2)

Updates `github.com/redis/go-redis/v9` from 9.11.0 to 9.16.0
- [Release notes](https://github.com/redis/go-redis/releases)
- [Changelog](https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md)
- [Commits](redis/go-redis@v9.11.0...v9.16.0)

Updates `github.com/spf13/cast` from 1.9.2 to 1.10.0
- [Release notes](https://github.com/spf13/cast/releases)
- [Commits](spf13/cast@v1.9.2...v1.10.0)

Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.1
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.9.1...v1.10.1)

Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.9
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.6...v1.0.9)

Updates `github.com/spf13/viper` from 1.20.1 to 1.21.0
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](spf13/viper@v1.20.1...v1.21.0)

Updates `github.com/throttled/throttled/v2` from 2.13.0 to 2.15.0
- [Release notes](https://github.com/throttled/throttled/releases)
- [Changelog](https://github.com/throttled/throttled/blob/master/CHANGELOG.md)
- [Commits](throttled/throttled@v2.13.0...v2.15.0)

Updates `github.com/uptrace/bun` from 1.2.14 to 1.2.15
- [Release notes](https://github.com/uptrace/bun/releases)
- [Changelog](https://github.com/uptrace/bun/blob/master/CHANGELOG.md)
- [Commits](uptrace/bun@v1.2.14...v1.2.15)

Updates `github.com/uptrace/bun/dialect/pgdialect` from 1.2.14 to 1.2.15
- [Release notes](https://github.com/uptrace/bun/releases)
- [Changelog](https://github.com/uptrace/bun/blob/master/CHANGELOG.md)
- [Commits](uptrace/bun@v1.2.14...v1.2.15)

Updates `github.com/uptrace/bun/driver/pgdriver` from 1.2.14 to 1.2.15
- [Release notes](https://github.com/uptrace/bun/releases)
- [Changelog](https://github.com/uptrace/bun/blob/master/CHANGELOG.md)
- [Commits](uptrace/bun@v1.2.14...v1.2.15)

Updates `go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux` from 0.62.0 to 0.63.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.62.0...zpages/v0.63.0)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.62.0 to 0.63.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.62.0...zpages/v0.63.0)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.62.0 to 0.63.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.62.0...zpages/v0.63.0)

Updates `go.opentelemetry.io/otel` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.37.0...v1.38.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.37.0...v1.38.0)

Updates `go.opentelemetry.io/otel/exporters/stdout/stdouttrace` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.37.0...v1.38.0)

Updates `go.opentelemetry.io/otel/metric` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.37.0...v1.38.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.37.0...v1.38.0)

Updates `go.opentelemetry.io/otel/trace` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.37.0...v1.38.0)

Updates `golang.org/x/crypto` from 0.40.0 to 0.43.0
- [Commits](golang/crypto@v0.40.0...v0.43.0)

Updates `golang.org/x/net` from 0.42.0 to 0.45.0
- [Commits](golang/net@v0.42.0...v0.45.0)

Updates `golang.org/x/oauth2` from 0.30.0 to 0.32.0
- [Commits](golang/oauth2@v0.30.0...v0.32.0)

Updates `golang.org/x/sync` from 0.16.0 to 0.17.0
- [Commits](golang/sync@v0.16.0...v0.17.0)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250707201910-8d1bb00bc6a7 to 0.0.0-20250929231259-57b25ae835d4
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250707201910-8d1bb00bc6a7 to 0.0.0-20250929231259-57b25ae835d4
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.10

---
updated-dependencies:
- dependency-name: github.com/KimMachineGun/automemlimit
  dependency-version: 0.7.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: github.com/aws/aws-sdk-go
  dependency-version: 1.55.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.31.15
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.88.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: github.com/coder/websocket
  dependency-version: 1.8.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: github.com/eclipse/paho.mqtt.golang
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: github.com/emersion/go-smtp
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: github.com/getsentry/sentry-go
  dependency-version: 0.36.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.27.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: github.com/jarcoal/httpmock
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: github.com/nats-io/nats-server/v2
  dependency-version: 2.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: github.com/nats-io/nats.go
  dependency-version: 1.46.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.23.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: github.com/redis/go-redis/v9
  dependency-version: 9.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: github.com/spf13/cast
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: github.com/spf13/viper
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: github.com/throttled/throttled/v2
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: github.com/uptrace/bun
  dependency-version: 1.2.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: github.com/uptrace/bun/dialect/pgdialect
  dependency-version: 1.2.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: github.com/uptrace/bun/driver/pgdriver
  dependency-version: 1.2.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux
  dependency-version: 0.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-version: 0.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: go.opentelemetry.io/otel/exporters/stdout/stdouttrace
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: golang.org/x/crypto
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: golang.org/x/net
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: golang.org/x/sync
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20250929231259-57b25ae835d4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20250929231259-57b25ae835d4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/safe-aa63c896fe branch from 01fce81 to c061600 Compare November 17, 2025 22:13
@dependabot @github

dependabot Bot commented on behalf of github Nov 24, 2025

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 24, 2025
@dependabot dependabot Bot deleted the dependabot/go_modules/safe-aa63c896fe branch November 24, 2025 22:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants