Skip to content

build(deps): bump the go-dependencies group across 1 directory with 9 updates#312

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-9c5b6c7c65
Open

build(deps): bump the go-dependencies group across 1 directory with 9 updates#312
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-9c5b6c7c65

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 28, 2026 •
edited
Loading

Bumps the go-dependencies group with 7 updates in the / directory:

Package From To
github.com/gabriel-vasile/mimetype 1.4.12 1.4.13
github.com/google/go-jsonnet 0.21.0 0.22.0
github.com/gruntwork-io/terratest 0.47.2 1.0.0
github.com/hashicorp/go-getter 1.8.4 1.8.6
github.com/hashicorp/go-version 1.8.0 1.9.0
github.com/invopop/jsonschema 0.13.0 0.14.0
github.com/stuart-warren/yamlfmt 0.1.2 0.2.0

Updates github.com/gabriel-vasile/mimetype from 1.4.12 to 1.4.13

Release notes

Sourced from github.com/gabriel-vasile/mimetype's releases.

Support for .hlp, .inf, .fm, .bufr

What's Changed

New Contributors

Full Changelog: gabriel-vasile/mimetype@v1.4.12...v1.4.13

Commits
  • 8822588 build(deps): bump the github-actions group across 1 directory with 3 updates
  • dfcfd00 m3u: check NL after signature for fewer false-positives
  • b40e4de ndjson: remove duplicate testcase
  • b9d4202 m3u: add x-mpegurl alias (#755)
  • 913ef6e Extend: Ensure MIME string normalization (#756)
  • 02cce61 bufr: add support (#754)
  • fe42f3e framemaker: add support (#752)
  • 0beb64f ttf: use ints instead of string for better performance (#751)
  • 3e267fc fonts: harden TTF and OTF detection (#750)
  • 789eb1d misc: remove an outdated TODO
  • Additional commits viewable in compare view

Updates github.com/google/go-jsonnet from 0.21.0 to 0.22.0

Release notes

Sourced from github.com/google/go-jsonnet's releases.

v0.22.0

The Python module can be found at https://pypi.org/project/gojsonnet/0.22.0/

What's Changed (since v0.21.0)

  • Updates since Release Candidate 1

    • Apply nesting depth limit when manifesting objects to TOML, YAML, or JSON (#866)
    • Publish pre-built Python wheels (binary packages) for Linux aarch64 (ARM) (#865)

  • Possibly breaking changes

    • Required Go version is increased to 1.24 (https://go.dev/doc/devel/release#go1.24.0) (#850)
    • When evaluating in --multi --string mode, output files now have an extra (trailing) newline added. If you do not want this, you can use --no-trailing-newline. (#819, #843)
    • Output files in --multi mode are restricted to the specified output directory (and subdirectories)
    • Pre-built binary archive names have changed (#848, #814)

  • Language changes, new features, etc

    • Numbers in Jsonnet code can now be written with underscore used to separate groups of digits (e.g., 1_500_000) (#760)
    • New function std.isNull (#806)
    • Bitwise operation arguments are now limited to the "safe-integer" range (google/go-jsonnet#859)
    • jsonnet CLI: New flag --no-trailing-newline - this disables the final newline that is normally included in the output of any Jsonnet evaluation. This option is also added to the API (#819, #843)
    • jsonnetfmt CLI: Names of unclean files are printed to stdout when using --test or --in-place mode (#863)
    • API: FindDependencies can now optionally follow symlinks (#730)
    • Restrict file writes to the specified output directory for --multi (google/go-jsonnet#850)

  • Bug fixes

  • Build systems, testing, CI, internal

Full commit history: google/go-jsonnet@v0.21.0...v0.22.0

New Contributors

... (truncated)

Commits
  • 567b61a release: v0.22.0
  • 456331f refactor: use MaxStack as depth limit instead of fixed constant
  • 502106b fix: add missing linter golden files for cyclic tests
  • 033195b fix: add stack frame accounting to manifest builtins
  • 86c6dc1 Extend "Build and Publish Python Package" workflow to build Linux aarch64 wheels
  • b5ef4cd release: prepare to release v0.22.0-rc1
  • 160987f deps: update referenced github actions to latest
  • 7b3fbdd update cpp-jsonnet to (unreleased) 3a7b2a565827635615f8a9432d94941e2a827c70
  • 154626d print names of reformatted files when using jsonnetfmt --test or --in-place
  • 509404f update cpp-jsonnet to (unreleased) 833f18402b6b6a2da0b2fae75446a1e14b9116dd
  • Additional commits viewable in compare view

Updates github.com/gruntwork-io/terratest from 0.47.2 to 1.0.0

Release notes

Sourced from github.com/gruntwork-io/terratest's releases.

v1.0.0

Terratest 1.0.0 is the first stable release of the project. From this release forward, Terratest follows semantic versioning: breaking changes are restricted to major releases, and renamed or replaced symbols stay around as deprecated aliases in the v1 line. See the v1.0 announcement post for the narrative; the notes below cover what shipped.

✨ Highlights

  • Context plumbing throughout. Every cloud-API helper now takes an explicit context.Context as its second argument. FooContext (fail-fast) and FooContextE (returns the error) are the canonical entrypoints; the bare Foo and FooE forms remain as deprecated aliases.
  • Mockable SDK clients. Most Azure and GCP helpers that previously hid SDK client construction now ship with a WithClient sibling that accepts an injected client. Drive Terratest against Azure's azfake server or a GCP test double for fast unit tests with zero credentials.
  • Modern, supported underlying SDKs. modules/azure migrated off Microsoft's archived "track 1" SDK onto sdk/resourcemanager; AWS S3 helpers moved off the deprecated s3/manager to s3/transfermanager.
  • Terragrunt v1.0 feature parity. The terragrunt module fully supports Terragrunt v1.0's CLI redesign with new wrappers and single-unit variants. Terragrunt-specific code is separated from modules/terraform into its own module.
  • Reliability fixes. EC2 list calls paginate, OPA policy downloads deduplicate, several panics on empty SDK responses are now errors.

⚠️ Breaking Changes

Azure SDK migration

modules/azure moved off the archived "track 1" Azure SDK onto the actively maintained sdk/resourcemanager. Users who import the underlying SDK directly need to update import paths, move field access under .Properties, and replace iterators with pagers. The release also dropped 8 deprecated Get*ClientE getters in favor of Create*ClientE, renamed 4 CreateNew*Client* factories (with deprecated aliases), fixed the NsgRuleSummary.SourceAdresssPrefixes typo, and changed GetVirtualMachineImage{,E} to return *VMImage. See the Azure migration guide for full mechanics.

AWS S3 uploader

The four NewS3Uploader* helpers now return *transfermanager.Client instead of *manager.Uploader. The call shape moves from uploader.Upload(ctx, &s3.PutObjectInput{...}) to client.UploadObject(ctx, &transfermanager.UploadObjectInput{...}). Types live under github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager.

GCP Pub/Sub

modules/gcp/pubsub.go moved from cloud.google.com/go/pubsub v1 to v2. Wrapper shapes are unchanged, but callers driving the underlying client directly switch from client.Topic("name") / client.Subscription("name") handles to TopicAdminClient / SubscriptionAdminClient calls that take fully qualified resource names.

Terragrunt module split

Terragrunt-specific helpers were removed from modules/terraform/ and modules/test-structure/ in favor of the dedicated modules/terragrunt/ package: TgApplyAll, TgDestroyAll, TgPlanAllExitCode, ValidateInputs, InitAndValidateInputs, AssertTgPlanAllExitCode, TgInvalidBinary, TerragruntDefaultPath, ExtraArgs.ValidateInputs, NewTerragruntValidationOptions, and the TG constant. Terragrunt stack output keys were also renamed. See the terragrunt module migration table.

Kubernetes kubeconfig handling

GetKubernetesClientFromOptionsContextE now logs the kubeconfig load error before falling back to in-cluster authentication; previously the fallback was silent. A new KubectlOptions.InClusterAuth = true opt-in skips kubeconfig loading entirely for callers who want fully explicit auth.

testing.TestingT adoption

Helper signatures consistently take testing.TestingT (an interface) instead of the concrete *testing.T. Calls from *testing.T are unaffected; callers that wrap or substitute the test handle may need updates.

✨ New Features

WithClient injection helpers across Azure and GCP

Most Azure and GCP helpers now ship with a *WithClient sibling that accepts a pre-built SDK client, enabling unit testing against Azure's azfake server, GCP test doubles, and similar fakes without standing up real cloud resources or providing credentials.

Terragrunt v1.0 feature parity

All terraform-passthrough commands use terragrunt run -- <command> and multi-unit functions use terragrunt run --all -- <command>. Generic Run / RunE provide an escape hatch. New command wrappers: Render, RenderJSON, Graph, HclValidate, OutputAllJson, plus single-unit variants for Init, Plan, Apply, Destroy, Validate, and OutputJson.

GCP Pub/Sub helpers

AssertTopicExists and AssertSubscriptionExists added to modules/gcp/pubsub.go. Thanks to @​Amit2465 for the contribution.

... (truncated)

Commits
  • ab607e4 chore: bump Terragrunt pin to 1.0.4 (#1819)
  • 88378bb feat(k8s): add WaitUntilDaemonSetAvailable helpers (#1815)
  • ac1e875 feat(aws): add AssertS3BucketServerSideEncryption helpers (#1816)
  • 90c46d7 docs: add version pinning guide (#1806)
  • 7a0028a Merge pull request #1817 from gruntwork-io/dependabot/bundler/docs/nokogiri-1...
  • ed0dea6 chore(deps-dev): bump nokogiri from 1.18.9 to 1.19.3 in /docs
  • f606889 fix(aws): paginate IAM, RDS, and ECR list calls (#1812)
  • 99e37e8 Merge pull request #1792 from james00012/james/oss-3157-automate-pin-update-f...
  • 1feb1c2 Merge branch 'main' into james/oss-3157-automate-pin-update-for-terragrunt-re...
  • e6d0e15 fix(azure): guard nil Properties on availability set responses (#1811)
  • Additional commits viewable in compare view

Updates github.com/hashicorp/go-getter from 1.8.4 to 1.8.6

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.8.6

No release notes provided.

v1.8.5

What's Changed

NOTES:

Binary Distribution Update: To streamline our release process and align with other HashiCorp tools, all release binaries will now be published exclusively to the official HashiCorp release site. We will no longer attach release assets to GitHub Releases.

New Contributors

Full Changelog: hashicorp/go-getter@v1.8.4...v1.8.5

Commits
  • d23bff4 Merge pull request #608 from hashicorp/dependabot/go_modules/go-security-9c51...
  • 2c4aba8 Merge pull request #613 from hashicorp/pull/v1.8.6
  • fe61ed9 Merge pull request #611 from hashicorp/SECVULN-41053
  • d533656 Merge pull request #606 from hashicorp/pull/CRT
  • 388f23d Additional test for local branch and head
  • b7ceaa5 harden checkout ref handling and added regression tests
  • 769cc14 Release version bump up
  • 6086a6a Review Comments Addressed
  • e02063c Revert "SECVULN Fix for git checkout argument injection enables arbitrary fil...
  • c93084d [chore] : Bump google.golang.org/grpc
  • Additional commits viewable in compare view

Updates github.com/hashicorp/go-version from 1.8.0 to 1.9.0

Release notes

Sourced from github.com/hashicorp/go-version's releases.

v1.9.0

What's Changed

Enhancements

Internal

New Contributors

Full Changelog: hashicorp/go-version@v1.8.0...v1.9.0

Changelog

Sourced from github.com/hashicorp/go-version's changelog.

1.9.0 (Mar 30, 2026)

ENHANCEMENTS:

Support parsing versions with custom prefixes via opt-in option in hashicorp/go-version#79

INTERNAL:

Commits
  • b80b1e6 Update CHANGELOG for version 1.9.0 (#187)
  • e93736f Bump the github-actions-backward-compatible group across 1 directory with 2 u...
  • c009de0 Bump actions/upload-artifact from 6.0.0 to 7.0.0 in the github-actions-breaki...
  • 0474357 Update GitHub Actions to trigger on pull requests and update go version (#185)
  • b4ab5fc Support parsing versions with custom prefixes via opt-in option (#79)
  • 25c683b Merge pull request #182 from hashicorp/dependabot/github_actions/github-actio...
  • 4f2bcd8 Bump the github-actions-backward-compatible group with 3 updates
  • acb8b18 Merge pull request #180 from hashicorp/dependabot/github_actions/github-actio...
  • 0394c4f Merge pull request #179 from hashicorp/dependabot/github_actions/github-actio...
  • b2fbaa7 Bump the github-actions-backward-compatible group across 1 directory with 2 u...
  • Additional commits viewable in compare view

Updates github.com/invopop/jsonschema from 0.13.0 to 0.14.0

Release notes

Sourced from github.com/invopop/jsonschema's releases.

v0.14.0

What's Changed

New Contributors

Full Changelog: invopop/jsonschema@v0.13.0...v0.14.0

Commits
  • 2c57d60 Merge pull request #189 from invopop/replace-wk8-with-pb33f-ordered-map
  • d8cc8eb Replace wk8/go-ordered-map with pb33f/ordered-map
  • 0d5bd75 Merge pull request #186 from edznux-dd/fix/expanded-struct-nil-deref
  • 3d69373 Merge pull request #173 from liorokman/escape-extras-tags
  • b43264d Silence revive unused-parameter on fuzz callback
  • 7b21bb5 Merge remote-tracking branch 'origin/main' into pr-186-expanded-struct
  • 0487398 Fix ExtraWithComman typo in test struct field
  • bc93236 Merge remote-tracking branch 'origin/main' into pr-173-escape-extras
  • d39f13c Merge pull request #183 from fengxsong/feat/reflect-json-string-for-integers
  • f2e2b91 Extend json:",string" support to number and boolean fields
  • Additional commits viewable in compare view

Updates github.com/stuart-warren/yamlfmt from 0.1.2 to 0.2.0

Release notes

Sourced from github.com/stuart-warren/yamlfmt's releases.

v0.2.0

Changelog

  • ab65392 Disable sorting by default, but add a sort flag [@​lollipopman]
  • 0e09bf1 Update README.md
  • fcd6028 Update go.yml
  • 6cfb236 fix: Dockerfile to reduce vulnerabilities
  • d64ddd1 fix: Dockerfile to reduce vulnerabilities
Commits
  • 0e09bf1 Update README.md
  • 45bd3f3 Merge pull request #16 from lollipopman/make-sorting-optional
  • 322c5b6 Merge branch 'master' into make-sorting-optional
  • fcd6028 Update go.yml
  • ab65392 Disable sorting by default, but add a sort flag
  • dc0d738 Merge pull request #21 from stuart-warren/snyk-fix-2e3b8e21e39ef6a48e143f8642...
  • 6cfb236 fix: Dockerfile to reduce vulnerabilities
  • 7c58a37 Merge pull request #18 from stuart-warren/snyk-fix-4524030d46df0670339b0d91e4...
  • d64ddd1 fix: Dockerfile to reduce vulnerabilities
  • See full diff in compare view

Updates golang.org/x/sync from 0.19.0 to 0.20.0

Commits
  • ec11c4a errgroup: fix a typo in the documentation
  • 1a58307 all: modernize interface{} -> any
  • 3172ca5 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates golang.org/x/text from 0.33.0 to 0.35.0

Commits
  • 7ca2c6d go.mod: update golang.org/x dependencies
  • 73d1ba9 all: upgrade go directive to at least 1.25.0 [generated]
  • 817fba9 go.mod: update golang.org/x dependencies
  • 3264de9 all: clean up old Go hacks
  • 74af298 all: fix tags in remaining Unicode tables
  • 117e03b all: delete old Unicode tables
  • 9463ea4 all: update to Unicode 17
  • 7278b25 internal/export/idna: update for post-Unicode 10 idna changes
  • f964ad8 internal/export/idna: delete old code
  • 678d34e unicode/norm: preserve QC Maybe bit in packed forminfo
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 28, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 28, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented Apr 28, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
boilerplate Error Error May 19, 2026 9:42am

Request Review

@dependabot
build(deps): bump the go-dependencies group across 1 directory with 9…
4608e92 
… updates

Bumps the go-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) | `1.4.12` | `1.4.13` |
| [github.com/google/go-jsonnet](https://github.com/google/go-jsonnet) | `0.21.0` | `0.22.0` |
| [github.com/gruntwork-io/terratest](https://github.com/gruntwork-io/terratest) | `0.47.2` | `1.0.0` |
| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.8.4` | `1.8.6` |
| [github.com/hashicorp/go-version](https://github.com/hashicorp/go-version) | `1.8.0` | `1.9.0` |
| [github.com/invopop/jsonschema](https://github.com/invopop/jsonschema) | `0.13.0` | `0.14.0` |
| [github.com/stuart-warren/yamlfmt](https://github.com/stuart-warren/yamlfmt) | `0.1.2` | `0.2.0` |



Updates `github.com/gabriel-vasile/mimetype` from 1.4.12 to 1.4.13
- [Release notes](https://github.com/gabriel-vasile/mimetype/releases)
- [Commits](gabriel-vasile/mimetype@v1.4.12...v1.4.13)

Updates `github.com/google/go-jsonnet` from 0.21.0 to 0.22.0
- [Release notes](https://github.com/google/go-jsonnet/releases)
- [Commits](google/go-jsonnet@v0.21.0...v0.22.0)

Updates `github.com/gruntwork-io/terratest` from 0.47.2 to 1.0.0
- [Release notes](https://github.com/gruntwork-io/terratest/releases)
- [Commits](gruntwork-io/terratest@v0.47.2...v1.0.0)

Updates `github.com/hashicorp/go-getter` from 1.8.4 to 1.8.6
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Commits](hashicorp/go-getter@v1.8.4...v1.8.6)

Updates `github.com/hashicorp/go-version` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/hashicorp/go-version/releases)
- [Changelog](https://github.com/hashicorp/go-version/blob/main/CHANGELOG.md)
- [Commits](hashicorp/go-version@v1.8.0...v1.9.0)

Updates `github.com/invopop/jsonschema` from 0.13.0 to 0.14.0
- [Release notes](https://github.com/invopop/jsonschema/releases)
- [Commits](invopop/jsonschema@v0.13.0...v0.14.0)

Updates `github.com/stuart-warren/yamlfmt` from 0.1.2 to 0.2.0
- [Release notes](https://github.com/stuart-warren/yamlfmt/releases)
- [Commits](stuart-warren/yamlfmt@v0.1.2...v0.2.0)

Updates `golang.org/x/sync` from 0.19.0 to 0.20.0
- [Commits](golang/sync@v0.19.0...v0.20.0)

Updates `golang.org/x/text` from 0.33.0 to 0.35.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.33.0...v0.35.0)

---
updated-dependencies:
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-version: 1.4.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/google/go-jsonnet
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/gruntwork-io/terratest
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/hashicorp/go-getter
  dependency-version: 1.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/hashicorp/go-version
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/invopop/jsonschema
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/stuart-warren/yamlfmt
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-9c5b6c7c65 branch from 35a664f to 4608e92 Compare May 19, 2026 08:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@gruntwork-codeowner gruntwork-codeowner Awaiting requested review from gruntwork-codeowner gruntwork-codeowner is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants