Bump the go-deps group across 1 directory with 21 updates by dependabot[bot] · Pull Request #3891 · google/trillian

dependabot · 2026-06-03T10:52:47Z

Bumps the go-deps group with 12 updates in the / directory:

Package	From	To
cloud.google.com/go/spanner	`1.89.0`	`1.91.0`
github.com/apache/beam/sdks/v2	`2.72.0`	`2.74.0`
github.com/jackc/pgx/v5	`5.9.2`	`5.10.0`
go.etcd.io/etcd/client/v3	`3.6.11`	`3.6.12`
go.etcd.io/etcd/etcdctl/v3	`3.6.11`	`3.6.12`
go.etcd.io/etcd/server/v3	`3.6.11`	`3.6.12`
go.etcd.io/etcd/v3	`3.6.11`	`3.6.12`
golang.org/x/sys	`0.44.0`	`0.45.0`
golang.org/x/tools	`0.44.0`	`0.45.0`
google.golang.org/grpc/cmd/protoc-gen-go-grpc	`1.6.1`	`1.6.2`
k8s.io/api	`0.35.3`	`0.36.1`
k8s.io/client-go	`0.35.3`	`0.36.1`

Updates cloud.google.com/go/spanner from 1.89.0 to 1.91.0

Commits

4ea7227 chore: librarian release pull request: 20260422T160822Z (#14471)
fbc7217 chore: update sources and regenerate (#14465)
8089b04 fix(bigquery): migrate usages of proto.Clone to proto.CloneOf (#14463)
b60a240 chore: update librarian to v0.10.2-0.20260421180302-dc35d110f9bb (#14464)
4b8c904 feat(firestore): support vector query in transactions (#14460)
8cc6e97 fix(spanner): add endpoint overload cooldown for location-aware routing (#14...
ec7c7d6 fix(storage): Set default chunkRetryDeadline to 32s in NewWriterFromAppendabl...
acbcf76 chore(librarian): update config tools (#14461)
1894ef5 chore(all): update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (...
8939ce1 chore(deps): bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0 in /inter...
Additional commits viewable in compare view

Updates github.com/apache/beam/sdks/v2 from 2.72.0 to 2.74.0

Release notes

Sourced from github.com/apache/beam/sdks/v2's releases.

Beam 2.74.0 release

We are happy to present the new 2.74.0 release of Beam. This release includes both improvements and new functionality. See the download page for this release.

For more information on changes in 2.74.0, check out the detailed release notes.

Highlights

Spark 4 runner support for Java SDK (#38255).

I/Os

IcebergIO: support declaring a table's sort order on dynamic table creation via the new sort_fields config (#38269).

IcebergIO: support writing with hash distribution mode, and with autosharding (#38061).

New Features / Improvements

Capability introduces an indicator for aggregations and timers firing during a pipeline drain, allowing users and sinks to recognize and appropriately handle potentially incomplete or partial data (#36884).

Added support for setting disk provisioned IOPS and throughput in Dataflow runner via --diskProvisionedIops and --diskProvisionedThroughputMibps pipeline options (Java/Go/Python) (#38349).

TriggerStateMachineRunner changes from BitSetCoder to SentinelBitSetCoder to encode finished bitset. SentinelBitSetCoder and BitSetCoder are state compatible. Both coders can decode encoded bytes from the other coder (#38139).

(Python) Added type alias for with_exception_handling to be used for typehints. (#38173).

(Java) BatchElements transform for Java SDK (#38369)

Added plugin mechanism to support different Lineage implementations (Java) (#36790).

(Python) Supported Python user type in Beam SQL. For example, SQL statements like SELECT some_field from PCOLLECTION can now operate a PCollection of Beam Row containing pickable Python user type (#20738).

(Python) Introduced beam.coders.registry.register_row as preferred API to register a named tuple or dataclass with a Beam Row. At pipelne runtime, the original type associated with the registered row are preserved across the serialization boundary (#38108).

Breaking Changes

(Python) Made Beartype the default fallback type checking tool. This can be disabled with the --disable_beartype pipeline option. (#38275)

Deprecations

Dropped Java 8 support (#31678).

Removed Samza Runner support (#35448).

Bugfixes

Fixed BigQueryEnrichmentHandler batch mode dropping earlier requests when multiple requests share the same enrichment key (Python) (#38035).

Added max_batch_duration_secs passthrough support in Python Enrichment BigQuery and CloudSQL handlers so batching duration can be forwarded to BatchElements (#38243).

According to git shortlog, the following people contributed to the 2.74.0 release. Thank you to all contributors!

Abdelrahman Ibrahim, Ahmed Abualsaud, Andrew Crites, Andrew Kabas, Arran Cudbard-Bell, Arun Pandian, Asish Kumar, Bentsi Leviav, Blake Jones, Bruno Volpato, Chris Jordan, Danny McCormick, Deji Ibrahim, Derrick Williams, Elia LIU, Ganesh Sivakumar, Jack McCluskey, Kenneth Knowles, Lalit Yadav, M Junaid Shaukat, Matej Aleksandrov, Prabhnoor Singh, Radek Stankiewicz, Radosław Stankiewicz, Reuven Lax, RuiLong J., Sam Whittle, Shunping Huang, Subramanya V, Tarun Annapareddy, Tobias Kaymak, TongruiLi, Valentyn Tymofieiev, Vitaly Terentyev, XQ Hu, Yi Hu, ZIHAN DAI, apanich, bambadiouf1, chenxuesdu, claudevdm, harshadkhetpal, johnjcasey, parveensania, tianz101

... (truncated)

Changelog

Sourced from github.com/apache/beam/sdks/v2's changelog.

[2.74.0] - 2026-06-02

Highlights

Spark 4 runner support for Java SDK (#38255).

I/Os

IcebergIO: support declaring a table's sort order on dynamic table creation via the new sort_fields config (#38269).

IcebergIO: support writing with hash distribution mode, and with autosharding (#38061).

New Features / Improvements

Capability introduces an indicator for aggregations and timers firing during a pipeline drain, allowing users and sinks to recognize and appropriately handle potentially incomplete or partial data (#36884).

Added support for setting disk provisioned IOPS and throughput in Dataflow runner via --diskProvisionedIops and --diskProvisionedThroughputMibps pipeline options (Java/Go/Python) (#38349).

TriggerStateMachineRunner changes from BitSetCoder to SentinelBitSetCoder to encode finished bitset. SentinelBitSetCoder and BitSetCoder are state compatible. Both coders can decode encoded bytes from the other coder (#38139).

(Python) Added type alias for with_exception_handling to be used for typehints. (#38173).

(Java) BatchElements transform for Java SDK (#38369)

Added plugin mechanism to support different Lineage implementations (Java) (#36790).

(Python) Supported Python user type in Beam SQL. For example, SQL statements like SELECT some_field from PCOLLECTION can now operate a PCollection of Beam Row containing pickable Python user type (#20738).

(Python) Introduced beam.coders.registry.register_row as preferred API to register a named tuple or dataclass with a Beam Row. At pipelne runtime, the original type associated with the registered row are preserved across the serialization boundary (#38108).

(Python) Added type_overrides parameter to WriteToBigQuery allowing users to specify custom BigQuery to Python type mappings when using Storage Write API. This enables support for types like DATE, DATETIME, and JSON (Python) (#25946).

Breaking Changes

(Python) Made Beartype the default fallback type checking tool. This can be disabled with the --disable_beartype pipeline option. (#38275)

Deprecations

Dropped Java 8 support (#31678).

Removed Samza Runner support (#35448).

Bugfixes

Fixed BigQueryEnrichmentHandler batch mode dropping earlier requests when multiple requests share the same enrichment key (Python) (#38035).

Added max_batch_duration_secs passthrough support in Python Enrichment BigQuery and CloudSQL handlers so batching duration can be forwarded to BatchElements (#38243).

[2.73.0] - 2026-04-29

Highlights

I/Os

DebeziumIO (Java): added OffsetRetainer interface and FileSystemOffsetRetainer implementation to persist and restore CDC offsets across pipeline restarts, and exposed withStartOffset / withOffsetRetainer on DebeziumIO.Read and the cross-language ReadBuilder (#28248).

New Features / Improvements

... (truncated)

Commits

76adea5 Set version for 2.74.0 RC3
e5c7051 #38708 Add Flink 2.0 to SDK pipeline options validation lists (#38726) (#38...
865955a [Release-2.74] Cherry-pick #38695 into release branch (#38727)
095f3ea Suppress log spams in gcsio 3.0 (#38588) (#38593)
b4d33c5 [Cherrypick] Configure JVM so that it exits upon OutOfMemoryError originating...
c372714 Make sure session creation happens before starting agent (#38477) (#38565)
61efb9f Merge pull request #38520 from Abacn/cp-38518
4cbe64c Fix pom involving maven-archetype and opentelemetry (#38518)
ed66941 Revert #37631 and #38497 in the release branch (#38514)
866f800 Merge pull request #38511 from apache/cp-38410
Additional commits viewable in compare view

Updates github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0

Release notes

Sourced from github.com/go-sql-driver/mysql's releases.

v1.10.0

What's Changed

add Go 1.24 to the test matrix by @shogo82148 in go-sql-driver/mysql#1681

modernize for Go 1.22 by @methane in go-sql-driver/mysql#1695

test stability improvement. by @methane in go-sql-driver/mysql#1698

simplify collation tests by @methane in go-sql-driver/mysql#1700

fix bigint unsigned null column scan to err type int64 by @elonnzhang in go-sql-driver/mysql#1612

Transaction Commit/Rollback returns conn's cached error, if present by @brad-defined in go-sql-driver/mysql#1691

add BenchmarkReceive10kRowsCompress by @methane in go-sql-driver/mysql#1704

optimize readPacket by @methane in go-sql-driver/mysql#1705

MariaDB Metadata skipping and DEPRECATE_EOF by @rusher in go-sql-driver/mysql#1708

Optimization: statements reuse previous column name by @methane in go-sql-driver/mysql#1711

update outdated MySQL internals documentation links by @demouth in go-sql-driver/mysql#1714

fix PING on compressed connections by @methane in go-sql-driver/mysql#1721

add DeepWiki badge by @methane in go-sql-driver/mysql#1722

Update edwards25519 dependency to v1.1.1 by @williamhaw in go-sql-driver/mysql#1749

Configure Dependabot for Go modules by @methane in go-sql-driver/mysql#1755

Bump dominikh/staticcheck-action from 1.3.1 to 1.4.1 by @dependabot[bot] in go-sql-driver/mysql#1759

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in go-sql-driver/mysql#1760

Bump actions/setup-go from 5 to 6 by @dependabot[bot] in go-sql-driver/mysql#1757

fix staticcheck error by @methane in go-sql-driver/mysql#1761

Bump actions/checkout from 4 to 6 by @dependabot[bot] in go-sql-driver/mysql#1758

Fix getSystemVar buffer reuse by @morgo in go-sql-driver/mysql#1754

Consolidate Dependabot update noise by grouping weekly dependency PRs by @Copilot in go-sql-driver/mysql#1762

Bump filippo.io/edwards25519 from 1.1.1 to 1.2.0 by @dependabot[bot] in go-sql-driver/mysql#1756

CI: Update GitHub Actions Go matrix to 1.24–1.26 by @Copilot in go-sql-driver/mysql#1763

Enhance interpolateParams to correctly handle placeholders by @rusher in go-sql-driver/mysql#1732

modernize by @methane in go-sql-driver/mysql#1764

release v1.10.0 by @methane in go-sql-driver/mysql#1765

New Contributors

@elonnzhang made their first contribution in go-sql-driver/mysql#1612

@brad-defined made their first contribution in go-sql-driver/mysql#1691

@rusher made their first contribution in go-sql-driver/mysql#1708

@demouth made their first contribution in go-sql-driver/mysql#1714

@williamhaw made their first contribution in go-sql-driver/mysql#1749

@dependabot[bot] made their first contribution in go-sql-driver/mysql#1759

@morgo made their first contribution in go-sql-driver/mysql#1754

@Copilot made their first contribution in go-sql-driver/mysql#1762

Full Changelog: go-sql-driver/mysql@v1.9.2...v1.10.0

Changelog

Sourced from github.com/go-sql-driver/mysql's changelog.

v1.10.0 (2026-04-28)

Fix getSystemVar("max_allowed_packet") potentially returned wrong value. (#1754) This affects only when maxAllowedPacket=0 is set.

Bump filippo.io/edwards25519 from 1.1.1 to 1.2.0. (#1756) While older versions have reported CVEs, they do not affect go-mysql.

Update Go versions to 1.24-1.26. (#1763)

Enhance interpolateParams to correctly handle placeholders. (#1732) The question mark (?) within strings and comments will no longer be treated as a placeholder.

Commits

a065b60 release v1.10.0 (#1765)
09e4187 modernize (#1764)
6c44a9a Enhance interpolateParams to correctly handle placeholders (#1732)
688ce56 Update supported Go version to 1.24–1.26 (#1763)
118d07f Bump filippo.io/edwards25519 from 1.1.1 to 1.2.0 (#1756)
d6b2d3e Consolidate Dependabot update noise by grouping weekly dependency PRs (#1762)
037dfd8 Fix getSystemVar buffer reuse (#1754)
900f330 Bump actions/checkout from 4 to 6 (#1758)
ab9e380 fix staticcheck error (#1761)
f298c66 Bump actions/setup-go from 5 to 6 (#1757)
Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.9.2 to 5.10.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.10.0 (June 3, 2026)

This release includes a significant amount of hardening against malicious or compromised PostgreSQL servers, contributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled message sizes, caps server-supplied SCRAM iteration counts, adds require_auth to restrict which authentication methods a server may use (mitigating downgrade attacks under sslmode=prefer), and ensures cancellation requests are sent over TLS when the original connection used TLS.

Features

Add require_auth to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)

Add ParseConfigOptions.ConnStringAllowedKeys to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)

Add StructArgs and StrictStructArgs for @-named queries (Tubelight30)

Add ErrConnClosed sentinel error and unwrap it from connLockError (Charlie Tonneslan)

pgxpool: check if connection is expired before acquire (arthurdotwork)

Security Hardening

Encrypt CancelRequest connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)

Cap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)

Default Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)

Bound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)

Bound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)

Bound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)

Bound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)

Document secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)

Fix panic on malformed geometric text; return an error instead (MaIII)

Fixes

Fix scanning "char" (OID 18) into *string in binary format (luongs3)

Fix handling of typed-nil driver.Valuer in array and composite codecs (Donncha Fahy)

Fix CopyData.Data hex decoding in UnmarshalJSON (Charlie Tonneslan)

Fix data race when context is cancelled during connect

Fix parseKeywordValueSettings rejecting trailing whitespace (alliasgher)

pgconn: preserve full error chain in normalizeTimeoutError (Charlie Tonneslan)

pgconn: use a fresh context for the fallback connection in connectPreferred (Charlie Tonneslan)

pgxpool: fix MaxLifetimeDestroyCount and ping order for acquire-time expiry check

Add missing error check of rows.Err to load types (Jen Altavilla)

Commits

7293fb1 Update changelog for v5.10.0
1ade285 pgconn: document secure connection configuration
b4d6d4d pgtype: bound range, multirange, and tsvector binary decoders
0639b37 pgconn: add ParseConfigOptions.ConnStringAllowedKeys
b28e65b pgtype: bound array element count against remaining message bytes
cd1f389 pgtype: bound array binary decode element length against remaining bytes
ff27b5b pgtype: bound hstore binary decode against malicious server input
a6002e1 pgproto3: default Frontend max message body length to ~1 GiB
44f6173 pgconn: cap server-supplied SCRAM iteration count
1a976f7 pgconn: add require_auth to restrict accepted server auth methods
Additional commits viewable in compare view

Updates github.com/lib/pq from 1.12.1 to 1.12.3

Release notes

Sourced from github.com/lib/pq's releases.

v1.12.3

Send datestyle startup parameter, improving compatbility with database engines that use a different default datestyle such as EnterpriseDB (#1312).

#1312: lib/pq#1312

v1.12.2

Treat io.ErrUnexpectedEOF as driver.ErrBadConn so database/sql discards the connection. Since v1.12.0 this could result in permanently broken connections, especially with CockroachDB which frequently sends partial messages (#1299).

#1299: lib/pq#1299

Changelog

Sourced from github.com/lib/pq's changelog.

v1.12.3 (2026-04-03)

Send datestyle startup parameter, improving compatbility with database engines that use a different default datestyle such as EnterpriseDB (#1312).

#1312: lib/pq#1312

v1.12.2 (2026-04-02)

Treat io.ErrUnexpectedEOF as driver.ErrBadConn so database/sql discards the connection. Since v1.12.0 this could result in permanently broken connections, especially with CockroachDB which frequently sends partial messages (#1299).

#1299: lib/pq#1299

Commits

1f3e3d9 Send datestyle as a startup parameter (#1312)
32ba56b Expand tests for multiple result sets
c2cfac1 Release v1.12.2
859f104 Test CockroachDB
12e464c Allow multiple matches and regexps in pqtest.ErrorContains()
6d77ced Treat io.ErrUnexpectedEOF as driver.ErrBadConn in handleError
71daecb Ensure transactions are closed in pqtest
8f44823 Set PGAPPNAME for tests
4af2196 Fix healthcheck
38a54e4 Split out testdata/init a bit
Additional commits viewable in compare view

Updates go.etcd.io/etcd/client/v3 from 3.6.11 to 3.6.12

Release notes

Sourced from go.etcd.io/etcd/client/v3's releases.

v3.6.12

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux

ETCD_VER=v3.6.12
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)

ETCD_VER=v3.6.12
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits

90b034a version: bump up to 3.6.12
8b95963 Merge pull request #21811 from Deln0r/release-3.6-backport-21666
576a6a0 server: allow non-admin maintenance status
2286051 Merge pull request #21794 from vivekpatani/cherry-pick-21788-release-3.6
e1468c8 client/pkg/fileutil: use os.Getuid() to skip TestIsDirWriteable as root
aaf38f8 Merge pull request #21768 from silentred/release-3.6-etcdutl-invalid-datadir
449e34b etcdutl: validate data file path and return consistent errors instead of pani...
00e1b15 Merge pull request #21736 from silentred/release-3.6-bugfix-memberupdate-learner
49cd4a4 bugfix: MemberUpdate implicitly and unexpectedly promotes a learner
9bbe31b Merge pull request #21727 from silentred/release-3.6-bump-go-1.25.10
Additional commits viewable in compare view

Updates go.etcd.io/etcd/etcdctl/v3 from 3.6.11 to 3.6.12

Release notes

Sourced from go.etcd.io/etcd/etcdctl/v3's releases.

v3.6.12

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux

ETCD_VER=v3.6.12
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)

ETCD_VER=v3.6.12
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits

90b034a version: bump up to 3.6.12
8b95963 Merge pull request #21811 from Deln0r/release-3.6-backport-21666
576a6a0 server: allow non-admin maintenance status
2286051 Merge pull request #21794 from vivekpatani/cherry-pick-21788-release-3.6
e1468c8 client/pkg/fileutil: use os.Getuid() to skip TestIsDirWriteable as root
aaf38f8 Merge pull request #21768 from silentred/release-3.6-etcdutl-invalid-datadir
449e34b etcdutl: validate data file path and return consistent errors instead of pani...
00e1b15 Merge pull request #21736 from silentred/release-3.6-bugfix-memberupdate-learner
49cd4a4 bugfix: MemberUpdate implicitly and unexpectedly promotes a learner
9bbe31b Merge pull request #21727 from silentred/release-3.6-bump-go-1.25.10
Additional commits viewable in compare view

Updates go.etcd.io/etcd/server/v3 from 3.6.11 to 3.6.12

Release notes

Sourced from go.etcd.io/etcd/server/v3's releases.

v3.6.12

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux

ETCD_VER=v3.6.12
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)

ETCD_VER=v3.6.12
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits

90b034a version: bump up to 3.6.12
8b95963 Merge pull request #21811 from Deln0r/release-3.6-backport-21666
576a6a0 server: allow non-admin maintenance status
2286051 Merge pull request #21794 from vivekpatani/cherry-pick-21788-release-3.6
e1468c8 client/pkg/fileutil: use os.Getuid() to skip TestIsDirWriteable as root
aaf38f8 Merge pull request #21768 from silentred/release-3.6-etcdutl-invalid-datadir
449e34b etcdutl: validate data file path and return consistent errors instead of pani...
00e1b15 Merge pull request #21736 from silentred/release-3.6-bugfix-memberupdate-learner
49cd4a4 bugfix: MemberUpdate implicitly and unexpectedly promotes a learner
9bbe31b Merge pull request #21727 from silentred/release-3.6-bump-go-1.25.10
Additional commits viewable in compare view

Updates go.etcd.io/etcd/v3 from 3.6.11 to 3.6.12

Release notes

Sourced from go.etcd.io/etcd/v3's releases.

v3.6.12

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux

ETCD_VER=v3.6.12
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)

ETCD_VER=v3.6.12
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits

90b034a version: bump up to 3.6.12
8b95963 Merge pull request #21811 from Deln0r/release-3.6-backport-21666
576a6a0 server: allow non-admin maintenance status
2286051 Merge pull request #21794 from vivekpatani/cherry-pick-21788-release-3.6
e1468c8 client/pkg/fileutil: use os.Getuid() to skip TestIsDirWriteable as root
aaf38f8 Merge pull request #21768 from silentred/release-3.6-etcdutl-invalid-datadir
449e34b etcdutl: validate data file path and return consistent errors instead of pani...
00e1b15 Merge pull request #21736 from silentred/release-3.6-bugfix-memberupdate-learner
49cd4a4 bugfix: MemberUpdate implicitly and unexpectedly promotes a learner
9bbe31b Merge pull request #21727 from silentred/release-3.6-bump-go-1.25.10
Additional commits viewable in compare view

Updates golang.org/x/sys from 0.44.0 to 0.45.0

Commits

397d5f8 unix: update to Linux kernel 7.0
0a387f7 cpu: detect zbc extension on riscv64
758f71c cpu: add LLACQ_SCREL, SCQ, DBAR_HINTS detection for loong64
99666ae unix: merge Linux readv/writev implementation with Darwin/OpenBSD
e4444cb windows: add NtSetEaFile, NtQueryEaFile and NtQueryInformationFile
04396e8 unix: add Readv, Writev, Preadv, Pwritev for OpenBSD
See full diff in compare view

Updates golang.org/x/tools from 0.44.0 to 0.45.0

Commits

2aabba0 go.mod: update golang.org/x dependencies
ef989b3 go/types/internal/play: show Info.Instances[Ident]
21d44f2 go/analysis/passes/inline: document skipping of TestF->F calls
ec83c21 go/analysis/passes/modernize: minmax: only remove exact userdefined
5625353 go/analysis/passes/modernize: improve value variable name generation
15a3bd5 gopls/internal/analysis/errorsastype: imporove example clarity
cd57ef8 go/packages: include dependency errors when CompiledGoFiles is missing
053fdbc go/analysis/passes/modernize: minmax: fix pure operands only
bf84681 go/analysis/passes/errorsas: add example of invalid errors.As use
23921d1 gopls: add errorsastype analyzer
Additional commits viewable in compare view

Updates google.golang.org/api from 0.273.1 to 0.279.0

Release notes

Sourced from google.golang.org/api's releases.

v0.279.0

0.279.0 (2026-05-12)

Features

all: Auto-regenerate discovery clients (#3585) (09db0e3)

all: Auto-regenerate discovery clients (#3587) (e87e376)

all: Auto-regenerate discovery clients (#3590) (d4241ea)

v0.278.0

0.278.0 (2026-05-05)

Features

all: Auto-regenerate discovery clients (#3582) (76b1187)

all: Auto-regenerate discovery clients (#3584) (e36c883)

v0.277.0

0.277.0 (2026-04-29)

Features

all: Auto-regenerate discovery clients (#3567) (Description has been truncated

Bumps the go-deps group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [cloud.google.com/go/spanner](https://github.com/googleapis/google-cloud-go) | `1.89.0` | `1.91.0` | | [github.com/apache/beam/sdks/v2](https://github.com/apache/beam) | `2.72.0` | `2.74.0` | | [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` | | [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) | `3.6.11` | `3.6.12` | | [go.etcd.io/etcd/etcdctl/v3](https://github.com/etcd-io/etcd) | `3.6.11` | `3.6.12` | | [go.etcd.io/etcd/server/v3](https://github.com/etcd-io/etcd) | `3.6.11` | `3.6.12` | | [go.etcd.io/etcd/v3](https://github.com/etcd-io/etcd) | `3.6.11` | `3.6.12` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.44.0` | `0.45.0` | | [golang.org/x/tools](https://github.com/golang/tools) | `0.44.0` | `0.45.0` | | [google.golang.org/grpc/cmd/protoc-gen-go-grpc](https://github.com/grpc/grpc-go) | `1.6.1` | `1.6.2` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.35.3` | `0.36.1` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.35.3` | `0.36.1` | Updates `cloud.google.com/go/spanner` from 1.89.0 to 1.91.0 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@spanner/v1.89.0...spanner/v1.91.0) Updates `github.com/apache/beam/sdks/v2` from 2.72.0 to 2.74.0 - [Release notes](https://github.com/apache/beam/releases) - [Changelog](https://github.com/apache/beam/blob/master/CHANGES.md) - [Commits](apache/beam@v2.72.0...v2.74.0) Updates `github.com/go-sql-driver/mysql` from 1.9.3 to 1.10.0 - [Release notes](https://github.com/go-sql-driver/mysql/releases) - [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md) - [Commits](go-sql-driver/mysql@v1.9.3...v1.10.0) Updates `github.com/jackc/pgx/v5` from 5.9.2 to 5.10.0 - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.9.2...v5.10.0) Updates `github.com/lib/pq` from 1.12.1 to 1.12.3 - [Release notes](https://github.com/lib/pq/releases) - [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md) - [Commits](lib/pq@v1.12.1...v1.12.3) Updates `go.etcd.io/etcd/client/v3` from 3.6.11 to 3.6.12 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.11...v3.6.12) Updates `go.etcd.io/etcd/etcdctl/v3` from 3.6.11 to 3.6.12 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.11...v3.6.12) Updates `go.etcd.io/etcd/server/v3` from 3.6.11 to 3.6.12 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.11...v3.6.12) Updates `go.etcd.io/etcd/v3` from 3.6.11 to 3.6.12 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.11...v3.6.12) Updates `golang.org/x/sys` from 0.44.0 to 0.45.0 - [Commits](golang/sys@v0.44.0...v0.45.0) Updates `golang.org/x/tools` from 0.44.0 to 0.45.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.44.0...v0.45.0) Updates `google.golang.org/api` from 0.273.1 to 0.279.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.273.1...v0.279.0) Updates `google.golang.org/genproto` from 0.0.0-20260316180232-0b37fe3546d5 to 0.0.0-20260319201613-d00831a3d3e7 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260316180232-0b37fe3546d5 to 0.0.0-20260401024825-9d38bb4040a9 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260319201613-d00831a3d3e7 to 0.0.0-20260427160629-7cedc36a6bc4 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.80.0 to 1.81.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.80.0...v1.81.0) Updates `google.golang.org/grpc/cmd/protoc-gen-go-grpc` from 1.6.1 to 1.6.2 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@cmd/protoc-gen-go-grpc/v1.6.1...cmd/protoc-gen-go-grpc/v1.6.2) Updates `k8s.io/api` from 0.35.3 to 0.36.1 - [Commits](kubernetes/api@v0.35.3...v0.36.1) Updates `k8s.io/apimachinery` from 0.35.3 to 0.36.1 - [Commits](kubernetes/apimachinery@v0.35.3...v0.36.1) Updates `k8s.io/client-go` from 0.35.3 to 0.36.1 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.35.3...v0.36.1) Updates `k8s.io/utils` from 0.0.0-20251002143259-bc988d571ff4 to 0.0.0-20260210185600-b8788abfbbc2 - [Commits](https://github.com/kubernetes/utils/commits) --- updated-dependencies: - dependency-name: cloud.google.com/go/spanner dependency-version: 1.91.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/apache/beam/sdks/v2 dependency-version: 2.74.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/go-sql-driver/mysql dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/lib/pq dependency-version: 1.12.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: go.etcd.io/etcd/client/v3 dependency-version: 3.6.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: go.etcd.io/etcd/etcdctl/v3 dependency-version: 3.6.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: go.etcd.io/etcd/server/v3 dependency-version: 3.6.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: go.etcd.io/etcd/v3 dependency-version: 3.6.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: golang.org/x/sys dependency-version: 0.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/tools dependency-version: 0.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: google.golang.org/api dependency-version: 0.279.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: google.golang.org/genproto dependency-version: 0.0.0-20260319201613-d00831a3d3e7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20260401024825-9d38bb4040a9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20260427160629-7cedc36a6bc4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/grpc dependency-version: 1.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: google.golang.org/grpc/cmd/protoc-gen-go-grpc dependency-version: 1.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: k8s.io/api dependency-version: 0.36.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: k8s.io/apimachinery dependency-version: 0.36.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: k8s.io/client-go dependency-version: 0.36.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: k8s.io/utils dependency-version: 0.0.0-20260210185600-b8788abfbbc2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dpebot · 2026-06-03T10:53:01Z

/gcbrun

dependabot · 2026-06-04T09:51:35Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 3, 2026

dependabot Bot requested a review from a team as a code owner June 3, 2026 10:52

dependabot Bot requested a review from roger2hk June 3, 2026 10:52

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 3, 2026

dependabot Bot closed this Jun 4, 2026

dependabot Bot deleted the dependabot/go_modules/go-deps-041519b915 branch June 4, 2026 09:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the go-deps group across 1 directory with 21 updates#3891

Bump the go-deps group across 1 directory with 21 updates#3891
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-deps-041519b915

dependabot Bot commented on behalf of github Jun 3, 2026 •

edited

Loading

Uh oh!

dpebot commented Jun 3, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Beam 2.74.0 release

Highlights

I/Os

New Features / Improvements

Breaking Changes

Deprecations

Bugfixes

[2.74.0] - 2026-06-02

Highlights

I/Os

New Features / Improvements

Breaking Changes

Deprecations

Bugfixes

[2.73.0] - 2026-04-29

Highlights

I/Os

New Features / Improvements

v1.10.0

What's Changed

New Contributors

v1.10.0 (2026-04-28)

5.10.0 (June 3, 2026)

Features

Security Hardening

Fixes

v1.12.3

v1.12.2

v1.12.3 (2026-04-03)

v1.12.2 (2026-04-02)

v3.6.12

Linux

macOS (Darwin)

v3.6.12

Linux

macOS (Darwin)

v3.6.12

Linux

macOS (Darwin)

v3.6.12

Linux

macOS (Darwin)

v0.279.0

0.279.0 (2026-05-12)

Features

v0.278.0

0.278.0 (2026-05-05)

Features

v0.277.0

0.277.0 (2026-04-29)

Features

Uh oh!

dpebot commented Jun 3, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jun 3, 2026 •

edited

Loading