build(deps): bump the go group across 1 directory with 19 updates by dependabot[bot] · Pull Request #2599 · keboola/keboola-as-code

dependabot · 2026-05-11T19:33:50Z

Bumps the go group with 16 updates in the / directory:

Package	From	To
entgo.io/ent	`0.14.5`	`0.14.6`
github.com/DataDog/dd-trace-go/v2	`2.7.3`	`2.8.1`
github.com/keboola/go-utils	`1.4.0`	`1.4.1`
github.com/klauspost/compress	`1.18.5`	`1.18.6`
github.com/mattn/go-sqlite3	`1.14.42`	`1.14.44`
github.com/valyala/fasthttp	`1.70.0`	`1.71.0`
go.etcd.io/etcd/api/v3	`3.6.10`	`3.6.11`
go.etcd.io/etcd/client/v3	`3.6.10`	`3.6.11`
go.etcd.io/etcd/tests/v3	`3.6.10`	`3.6.11`
go.uber.org/zap	`1.27.1`	`1.28.0`
google.golang.org/grpc	`1.80.0`	`1.81.0`
github.com/fsnotify/fsnotify	`1.9.0`	`1.10.1`
golang.org/x/crypto	`0.50.0`	`0.51.0`
golang.org/x/net	`0.53.0`	`0.54.0`
golang.org/x/tools	`0.44.0`	`0.45.0`
github.com/Masterminds/semver/v3	`3.4.0`	`3.5.0`

Updates entgo.io/ent from 0.14.5 to 0.14.6

Commits

e0ba79d chore: bump tablewriter to latest version (#4490)
ab05406 entc/gen: support external ValueScanner for id field (#4487)
d056659 dialect/sql/sqlgraph: set schema when clearing foreign key edges (#4429)
2eb3641 entc/gen: add support for collation on edge schema (#4480)
397ebe9 dialect/sql/schema: allow running migration concurrently without copying the ...
49be309 doc: update list of tested pg versions (#4463)
ff2b4a6 doc/md: add the new CollectedFor annotation to graphql fields mapping (#4462)
cf1482e entc/gen: add support for custom collations on ID fields (#4453)
a777c08 Clean up old & irrelevant references to Facebook (#4452)
4d347ca doc: mention how to use schemaconfig with schema annotation (#4444)
Additional commits viewable in compare view

Updates github.com/DataDog/dd-trace-go/v2 from 2.7.3 to 2.8.1

Release notes

Sourced from github.com/DataDog/dd-trace-go/v2's releases.

v2.8.1

Application Performance Monitoring (APM)

Revert "fix(ddtrace/tracer): cache trace ID hex encoding (#4481)" by @darccio

fix(tracer): enforce baggage item and byte limits on extraction by @mtoffl01 in #4720

fix(tracer): drop dd= list-entries over 256 bytes from incoming tracestate by @mtoffl01 in #4721

Full Changelog: DataDog/dd-trace-go@v2.8.0...v2.8.1

v2.8.0

Summary

New integrations. Two new integrations land in this release: Azure API Management (APIM) callout processor for security (#4620), and twmb/franz-go for Kafka (#4250).

Data Streams Monitoring. All three major Kafka integrations — confluent-kafka-go (#4470), segmentio/kafka-go (#4477), and Sarama (#4560) — now attach kafka_cluster_id for cluster-level visibility. TrackDataStreamsTransaction also gains span tagging and custom timestamp support (#4499).

OpenTelemetry (OTel) and OTLP. The tracer can now export traces directly via the OpenTelemetry Protocol (OTLP), bypassing the Datadog Agent entirely (#4600, #4583). OTel process context v2 (OTLP proto format) is supported (#4478), and the parentbased_always_on sampler works in OTLP mode (#4567).

Large Language Model (LLM) Observability. Prompt tracking is now available for LLMObs spans (#4608). Experiment scope propagates from APM baggage into spans automatically (#4651).

Profiler. An experimental goroutine leak profile is available as opt-in (#4420). The goroutine wait profile type has been removed — this is a breaking change for anyone using it explicitly (#4589).

HTTP and tracing. A new environment variable DD_TRACE_HTTP_URL_QUERY_STRING_ALLOWLIST lets you whitelist query string parameters to keep unredacted (#4562). A new tracer.StartSpanFromPropagatedContext API simplifies span creation from propagated contexts (#4492). AWS EventBridge max payload size is bumped to 1 MB (#4458). Envoy Service Extensions integration gains Unix Domain Socket (UDS) support (#4463).

OpenFeature. Flag evaluation metrics now emit via OTel Metrics (#4489), with allocation key tagging (#4515) and Remote Configuration (RC) integration via FFE_FLAGS subscription at tracer startup (#4495).

Bug fixes. gorm now respects DD_TRACE_REMOVE_INTEGRATION_SERVICE_NAMES_ENABLED (#4618). Redis and Valkey pipeline commands are joined with newlines, fixing agent obfuscation (#4593). A race condition in HTTP client trace timings is resolved (#4591). AppSec block responses now include a correct Content-Length header (#4496), and spurious Remote Configuration errors are silenced when RC is disabled (#4612). ContextWithSpan no longer panics on nil context (#4313). The OTel bridge preserves keep/drop sampling decisions for unsampled spans (#4631). User-provided DogStatsD addresses now correctly take priority over defaults (#4575).

Performance. Trace ID hex encoding is cached (#4481), the span metadata map is preallocated (#4541), and locking is removed from both sampling priority access (#4546) and the internal logger (#4547) — reducing allocations and contention on hot paths.

CI Visibility. Bazel offline cache and payload-file modes are supported (#4503). Known test pagination is implemented for large test suites (#4509).

What's Changed

Application Performance Monitoring (APM)

feat: collect service override source by @raphaelgavache in DataDog/dd-trace-go#4500

feat: support service source for 19 integrations by @raphaelgavache in DataDog/dd-trace-go#4526

feat: support service source for 13integrations by @raphaelgavache in DataDog/dd-trace-go#4534

feat: add service source on 10 integrations by @raphaelgavache in DataDog/dd-trace-go#4540

feat: force usage of ServiceWithSource in contrib by @raphaelgavache in DataDog/dd-trace-go#4549

fix(eventbridge): update max payload size to 1m by @Dogbu-cyber in DataDog/dd-trace-go#4458

feat(telemetry): add stable session identifier headers by @khanayan123 in DataDog/dd-trace-go#4574

feat: collect service source in client stats by @raphaelgavache in DataDog/dd-trace-go#4519

feat: OTel process context v2 (otlp proto) by @nsavoire in DataDog/dd-trace-go#4478

fix: join redis and valkey pipeline commands with newlines for correct agent obfuscation by @rarguelloF in DataDog/dd-trace-go#4593

... (truncated)

Commits

2b2b2c2 chore: make fix-modules && make generate
21438ed internal/version: v2.8.1
0bc11f3 internal/orchestrion/_integration: v2.8.1-rc.2
f17a712 orchestrion/all: v2.8.1-rc.2
1b8d8e5 internal/traceprof/traceproftest: v2.8.1-rc.2
7b30b1f contrib/aws/datadog-lambda-go/test/integration_tests/error: v2.8.1-rc.2
96cc2a4 contrib/aws/datadog-lambda-go/test/integration_tests/hello: v2.8.1-rc.2
f3013b5 instrumentation/internal/validationtest: v2.8.1-rc.2
c9f9843 contrib/labstack/echo.v4: v2.8.1-rc.2
e07b30b contrib/valyala/fasthttp: v2.8.1-rc.2
Additional commits viewable in compare view

Updates github.com/keboola/go-utils from 1.4.0 to 1.4.1

Release notes

Sourced from github.com/keboola/go-utils's releases.

v1.4.1

What's Changed

fix: Array unmarshalling does not work properly by @Matovidlo in keboola/go-utils#60

Full Changelog: keboola/go-utils@v1.4.0...v1.4.1

Commits

9820639 Merge pull request #60 from keboola/fix-array-unmarshalling
eb4f3bf fix: Array unmarshalling does not work properly
See full diff in compare view

Updates github.com/klauspost/compress from 1.18.5 to 1.18.6

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.6

What's Changed

s2: Fix amd64 stack frame corruption by @klauspost in klauspost/compress#1145

gzhttp: Canonicalize ETag header by @justinmayhew in klauspost/compress#1139

perf: pool hash tables in Go encode paths to reduce allocations by @huynhanx03 in klauspost/compress#1143

New Contributors

@justinmayhew made their first contribution in klauspost/compress#1139

@huynhanx03 made their first contribution in klauspost/compress#1143

@thaJeztah made their first contribution in klauspost/compress#1144

Full Changelog: klauspost/compress@v1.18.5...v1.18.6

Commits

ac2f5e8 docs: use unix line-endings for markdown files (#1144)
620d7b5 s2: Fix amd64 stack frame corruption (#1145)
1b63f2f build(deps): bump the github-actions group with 2 updates (#1141)
3d86b89 s2: pool hash tables in Go encode paths to reduce allocations (#1143)
15967de gzhttp: Canonicalize ETag header (#1139)
See full diff in compare view

Updates github.com/mattn/go-sqlite3 from 1.14.42 to 1.14.44

Commits

20826e8 Merge pull request #1394 from mattn/sqlite-amalgamation-3053000
2d4d220 fix changelog URL when minor or patch version is zero
3761cf7 Upgrade SQLite to version 3053000
1aa7317 Merge pull request #1388 from mattn/stmt-cache-lru
c719e20 Merge pull request #1392 from mattn/fix-issue-1390-query-comment-panic
869e516 fix panic when querying input with no SQL (only comments/whitespace)
6690238 extract finalizeCachedStmt helper and drop redundant tail reset
59e8e75 only set stmt cacheKey when cache is enabled
2badb4c use slice len/cap for stmt cache instead of separate counters
7716c20 evict LRU stmt when stmt cache is full
Additional commits viewable in compare view

Updates github.com/valyala/fasthttp from 1.70.0 to 1.71.0

Release notes

Sourced from github.com/valyala/fasthttp's releases.

v1.71.0

What's Changed

feat(client): add RetryIfErrUpstream function to handle upstream information by @mdenushev in valyala/fasthttp#2176

Match net/http sensitive header redirect policy by @erikdubbelboer in valyala/fasthttp#2181

Sanitize first-line header setters to prevent CRLF injection by @erikdubbelboer in valyala/fasthttp#2182

server: apply ReadTimeout before first byte with ReduceMemoryUsage by @erikdubbelboer in valyala/fasthttp#2183

header: reject invalid trailer names by @erikdubbelboer in valyala/fasthttp#2188

header: reject pre-colon whitespace in request headers by @erikdubbelboer in valyala/fasthttp#2187

Sanitize redirect Location header to prevent CRLF injection by @erikdubbelboer in valyala/fasthttp#2186

server: keep hijacked reader out of pool by @erikdubbelboer in valyala/fasthttp#2184

Sanitize cookie setters to prevent CRLF injection by @erikdubbelboer in valyala/fasthttp#2185

feat: add ExpectHandler for richer Expect: 100-continue handling by @miretskiy in valyala/fasthttp#2175

http: reject whitespace before chunk extensions by @erikdubbelboer in valyala/fasthttp#2193

header: reject unsupported response Transfer-Encoding by @erikdubbelboer in valyala/fasthttp#2192

header: match net/http CL+TE handling by @erikdubbelboer in valyala/fasthttp#2190

chore(deps): bump securego/gosec from 2.25.0 to 2.26.1 by @dependabot[bot] in valyala/fasthttp#2195

chore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 by @dependabot[bot] in valyala/fasthttp#2196

feat(prefork): Enhance prefork management with WatchMaster, CommandProducer, and Windows support by @ReneWerner87 in valyala/fasthttp#2180

New Contributors

@miretskiy made their first contribution in valyala/fasthttp#2175

Full Changelog: valyala/fasthttp@v1.70.0...v1.71.0

Commits

e9208ec Revert "feat(prefork): graceful shutdown, leak fixes, hook robustness" commit
481e579 feat(prefork): Enhance prefork management with WatchMaster, CommandProducer, ...
805cd10 Add note on MaxResponseBodySize compatibility with StreamResponseBody
5b5c1be chore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 (#2196)
d6a99db chore(deps): bump securego/gosec from 2.25.0 to 2.26.1 (#2195)
f36c900 header: match net/http CL+TE handling (#2190)
0b4cede header: reject unsupported response Transfer-Encoding (#2192)
c497746 http: reject whitespace before chunk extensions (#2193)
97b38d3 server: document SaveMultipartFile path trust requirement
19e4b24 feat: add ExpectHandler for richer Expect: 100-continue handling (#2175)
Additional commits viewable in compare view

Updates go.etcd.io/etcd/api/v3 from 3.6.10 to 3.6.11

Release notes

Sourced from go.etcd.io/etcd/api/v3's releases.

v3.6.11

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux

ETCD_VER=v3.6.11
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)

ETCD_VER=v3.6.11
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits

ec166e2 version: bump up to 3.6.11
d671fd0 Merge pull request #21685 from ahrtr/20260429_auth_3.6
633de82 Fix the 'read via PrevKv' and 'Put with lease' in TXN bypass rbac check issue
fbbd0a1 Add an integration test to reproduce the issue of PutWithLease in a TXN bypas...
3fe5746 Add an integration test case to reproduce the read via PrevKv bypass rbac che...
16a8a36 Merge pull request #21681 from ahrtr/20260428_auth_refactor
c387fa5 Get all Put related auth check into a separate function 'checkPutAuth'
20e6f23 move function CheckTxnAuth from package txn to apply
7d4b175 Merge pull request #21667 from ahrtr/20260426_add_member
bc2482b Merge pull request #21668 from ahrtr/20260426_dep_3.6
Additional commits viewable in compare view

Updates go.etcd.io/etcd/client/v3 from 3.6.10 to 3.6.11

Release notes

Sourced from go.etcd.io/etcd/client/v3's releases.

v3.6.11

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux

ETCD_VER=v3.6.11
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)

ETCD_VER=v3.6.11
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits

ec166e2 version: bump up to 3.6.11
d671fd0 Merge pull request #21685 from ahrtr/20260429_auth_3.6
633de82 Fix the 'read via PrevKv' and 'Put with lease' in TXN bypass rbac check issue
fbbd0a1 Add an integration test to reproduce the issue of PutWithLease in a TXN bypas...
3fe5746 Add an integration test case to reproduce the read via PrevKv bypass rbac che...
16a8a36 Merge pull request #21681 from ahrtr/20260428_auth_refactor
c387fa5 Get all Put related auth check into a separate function 'checkPutAuth'
20e6f23 move function CheckTxnAuth from package txn to apply
7d4b175 Merge pull request #21667 from ahrtr/20260426_add_member
bc2482b Merge pull request #21668 from ahrtr/20260426_dep_3.6
Additional commits viewable in compare view

Updates go.etcd.io/etcd/tests/v3 from 3.6.10 to 3.6.11

Release notes

Sourced from go.etcd.io/etcd/tests/v3's releases.

v3.6.11

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux

ETCD_VER=v3.6.11
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)

ETCD_VER=v3.6.11
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits

ec166e2 version: bump up to 3.6.11
d671fd0 Merge pull request #21685 from ahrtr/20260429_auth_3.6
633de82 Fix the 'read via PrevKv' and 'Put with lease' in TXN bypass rbac check issue
fbbd0a1 Add an integration test to reproduce the issue of PutWithLease in a TXN bypas...
3fe5746 Add an integration test case to reproduce the read via PrevKv bypass rbac che...
16a8a36 Merge pull request #21681 from ahrtr/20260428_auth_refactor
c387fa5 Get all Put related auth check into a separate function 'checkPutAuth'
20e6f23 move function CheckTxnAuth from package txn to apply
7d4b175 Merge pull request #21667 from ahrtr/20260426_add_member
bc2482b Merge pull request #21668 from ahrtr/20260426_dep_3.6
Additional commits viewable in compare view

Updates go.uber.org/zap from 1.27.1 to 1.28.0

Release notes

Sourced from go.uber.org/zap's releases.

v1.28.0

Enhancements:

#1534[]: Add zapcore.CheckPreWriteHook and CheckedEntry.Before method for transforming entries before they are written to any Cores.

#1534: uber-go/zap#1534

Changelog

Sourced from go.uber.org/zap's changelog.

1.28.0 (27 Apr 2026)

Enhancements:

#1534[]: Add zapcore.CheckPreWriteHook and CheckedEntry.Before method for transforming entries before they are written to any Cores.

Commits

5b81b37 release v1.28.0 (#1547)
0ab0d5a zapcore: Add PreWriteHook for transforming entries before write (#1534)
d278c59 [chore] CI: test on Go 1.26 (#1535)
16fb16b chore(dep): replace archived gopkg.in/yaml.v3 with officially maintained go.y...
See full diff in compare view

Updates google.golang.org/grpc from 1.80.0 to 1.81.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.0

Behavior Changes

balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#8808)

Dependencies

Minimum supported Go version is now 1.25. (#8969)

Bug Fixes

xds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (#8956)

transport: Send a RST_STREAM when receiving an END_STREAM when the stream is not already half-closed. (#8832)

xds: Fix ADS resource name validation to prevent a panic. (#8970)

New Features

grpc/stats: Add support for custom labels in per-call metrics (gRFC A108). (#9008)

xds: Add support for Server Name Indication (SNI) and SAN validation (gRFC A101). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_SNI=true environment variable. (#9016)

xds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (gRFC A85). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true. (#9005)

xds: Add metrics to track xDS client connectivity and cached resource state (gRFC A78). (#8807)

stats/otel: Enhance grpc.subchannel.disconnections metric by adding disconnection reason to the grpc.disconnect_error label (gRFC A94). This provides granular insights into why subchannels are closing. (#8973)

mem: Add mem.Buffer.Slice() API to slice the buffer like a slice. (#8977)

Special Thanks: @ash2k

Performance Improvements

alts: Pool read buffers to lower memory utilization when sockets are unreadable. (#8964)

transport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false and report any issues. (#9032)

Commits

cb18228 Change version to 1.81.0 (#9062)
96748f9 Cherry-pick #9105 to 1.81.x (#9106)
9183222 Cherry pick #9055, #9032 to v1.81.x (#9095)
5cba6da Revert "deps: update dependencies for all modules (#9065)" (#9067)
af8a936 deps: update dependencies for all modules (#9065)
cdc60df transport: optimize heap allocations in ready reader and update syscall conne...
208d053 xds/resolver: pass complete XDSConfig in RPC context for HTTP filters (gRFC A...
50fe1cc test: Fix flaky test TestServerStreaming_ClientCallRecvMsgTwice in `end2end...
d574bad build(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 (#9050)
b8bf4d0 build(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 in /inte...
Additional commits viewable in compare view

Updates github.com/fsnotify/fsnotify from 1.9.0 to 1.10.1

Release notes

Sourced from github.com/fsnotify/fsnotify's releases.

v1.10.1

Changes and fixes

inotify: don't remove sibling watches sharing a path prefix (#754)

inotify, windows: don't rename sibling watches sharing a path prefix (#755)

#754: fsnotify/fsnotify#754 #755: fsnotify/fsnotify#755

v1.10.0

This version of fsnotify needs Go 1.23.

Changes and fixes

inotify: improve initialization error message (#731)

inotify: send Rename event if recursive watch is renamed (#696)

inotify: avoid copying event buffers when reading names (#741)

kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)

kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)

windows: fix nil pointer dereference in remWatch (#736)

windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)

#696: fsnotify/fsnotify#696 #709: fsnotify/fsnotify#709 #731: fsnotify/fsnotify#731 #736: fsnotify/fsnotify#736 #740: fsnotify/fsnotify#740 #741: fsnotify/fsnotify#741 #748: fsnotify/fsnotify#748 #749: fsnotify/fsnotify#749

Changelog

Sourced from github.com/fsnotify/fsnotify's changelog.

1.10.1 2026-05-04

Changes and fixes

inotify: don't remove sibling watches sharing a path prefix (#754)

inotify, windows: don't rename sibling watches sharing a path prefix (#755)

#754: fsnotify/fsnotify#754 #755: fsnotify/fsnotify#755

1.10.0 2026-04-30

This version of fsnotify needs Go 1.23.

Changes and fixes

inotify: improve initialization error message (#731)

inotify: send Rename event if recursive watch is renamed (#696)

inotify: avoid copying event buffers when reading names (#741)

kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)

kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)

windows: fix nil pointer dereference in remWatch (#736)

windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)

#696: fsnotify/fsnotify#696 #709: fsnotify/fsnotify#709 #731: fsnotify/fsnotify#731 #736: fsnotify/fsnotify#736 #740: fsnotify/fsnotify#740 #741: fsnotify/fsnotify#741 #748: fsnotify/fsnotify#748 #749: fsnotify/fsnotify#749

Commits

76b01a6 Release 1.10.1
fec150b Update changelog
162b421 inotify, windows: don't rename sibling watches sharing a path prefix (#755)
224257f inotify: don't remove sibling watches sharing a path prefix (#754)
e0c956c windows: document directory Write events and stabilize tests (#745)
8d01d7b Release 1.10.0
602284e Update changelog
7f03e59 kqueue: skip ENOENT entries in watchDirectoryFiles (#748)
dab9dde windows: lock watch field updates against concurrent WatchList (#709) (#749)
eadf267 kqueue: drop watches directly in Close() instead of going through remove() (#...
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.50.0 to 0.51.0

Commits

b8a14a8 go.mod: update golang.org/x dependencies
9d9d507 x509roots/fallback/bundle: fix bundle test with Go 1.27+
fd0b90d acme: include Problem in OrderError.Error
b9e5359 pbkdf2: turn into a wrapper for crypto/pbkdf2
cc0e4fc hkdf: forward Extract to the standard library
a8e9237 x509roots/fallback: update b...
Description has been truncated

Bumps the go group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [entgo.io/ent](https://github.com/ent/ent) | `0.14.5` | `0.14.6` | | [github.com/DataDog/dd-trace-go/v2](https://github.com/DataDog/dd-trace-go) | `2.7.3` | `2.8.1` | | [github.com/keboola/go-utils](https://github.com/keboola/go-utils) | `1.4.0` | `1.4.1` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.5` | `1.18.6` | | [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.42` | `1.14.44` | | [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) | `1.70.0` | `1.71.0` | | [go.etcd.io/etcd/api/v3](https://github.com/etcd-io/etcd) | `3.6.10` | `3.6.11` | | [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) | `3.6.10` | `3.6.11` | | [go.etcd.io/etcd/tests/v3](https://github.com/etcd-io/etcd) | `3.6.10` | `3.6.11` | | [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.1` | `1.28.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.80.0` | `1.81.0` | | [github.com/fsnotify/fsnotify](https://github.com/fsnotify/fsnotify) | `1.9.0` | `1.10.1` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.50.0` | `0.51.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.53.0` | `0.54.0` | | [golang.org/x/tools](https://github.com/golang/tools) | `0.44.0` | `0.45.0` | | [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) | `3.4.0` | `3.5.0` | Updates `entgo.io/ent` from 0.14.5 to 0.14.6 - [Release notes](https://github.com/ent/ent/releases) - [Commits](ent/ent@v0.14.5...v0.14.6) Updates `github.com/DataDog/dd-trace-go/v2` from 2.7.3 to 2.8.1 - [Release notes](https://github.com/DataDog/dd-trace-go/releases) - [Commits](DataDog/dd-trace-go@v2.7.3...v2.8.1) Updates `github.com/keboola/go-utils` from 1.4.0 to 1.4.1 - [Release notes](https://github.com/keboola/go-utils/releases) - [Commits](keboola/go-utils@v1.4.0...v1.4.1) Updates `github.com/klauspost/compress` from 1.18.5 to 1.18.6 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.18.5...v1.18.6) Updates `github.com/mattn/go-sqlite3` from 1.14.42 to 1.14.44 - [Release notes](https://github.com/mattn/go-sqlite3/releases) - [Commits](mattn/go-sqlite3@v1.14.42...v1.14.44) Updates `github.com/valyala/fasthttp` from 1.70.0 to 1.71.0 - [Release notes](https://github.com/valyala/fasthttp/releases) - [Commits](valyala/fasthttp@v1.70.0...v1.71.0) Updates `go.etcd.io/etcd/api/v3` from 3.6.10 to 3.6.11 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.10...v3.6.11) Updates `go.etcd.io/etcd/client/v3` from 3.6.10 to 3.6.11 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.10...v3.6.11) Updates `go.etcd.io/etcd/tests/v3` from 3.6.10 to 3.6.11 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.10...v3.6.11) Updates `go.uber.org/zap` from 1.27.1 to 1.28.0 - [Release notes](https://github.com/uber-go/zap/releases) - [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md) - [Commits](uber-go/zap@v1.27.1...v1.28.0) Updates `google.golang.org/grpc` from 1.80.0 to 1.81.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.80.0...v1.81.0) Updates `github.com/fsnotify/fsnotify` from 1.9.0 to 1.10.1 - [Release notes](https://github.com/fsnotify/fsnotify/releases) - [Changelog](https://github.com/fsnotify/fsnotify/blob/main/CHANGELOG.md) - [Commits](fsnotify/fsnotify@v1.9.0...v1.10.1) Updates `golang.org/x/crypto` from 0.50.0 to 0.51.0 - [Commits](golang/crypto@v0.50.0...v0.51.0) Updates `golang.org/x/net` from 0.53.0 to 0.54.0 - [Commits](golang/net@v0.53.0...v0.54.0) Updates `golang.org/x/sys` from 0.43.0 to 0.44.0 - [Commits](golang/sys@v0.43.0...v0.44.0) Updates `golang.org/x/term` from 0.42.0 to 0.43.0 - [Commits](golang/term@v0.42.0...v0.43.0) Updates `golang.org/x/text` from 0.36.0 to 0.37.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.36.0...v0.37.0) Updates `golang.org/x/tools` from 0.44.0 to 0.45.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.44.0...v0.45.0) Updates `github.com/Masterminds/semver/v3` from 3.4.0 to 3.5.0 - [Release notes](https://github.com/Masterminds/semver/releases) - [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md) - [Commits](Masterminds/semver@v3.4.0...v3.5.0) --- updated-dependencies: - dependency-name: entgo.io/ent dependency-version: 0.14.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/DataDog/dd-trace-go/v2 dependency-version: 2.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/keboola/go-utils dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/klauspost/compress dependency-version: 1.18.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/mattn/go-sqlite3 dependency-version: 1.14.44 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/valyala/fasthttp dependency-version: 1.71.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: go.etcd.io/etcd/api/v3 dependency-version: 3.6.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: go.etcd.io/etcd/client/v3 dependency-version: 3.6.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: go.etcd.io/etcd/tests/v3 dependency-version: 3.6.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: go.uber.org/zap dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/grpc dependency-version: 1.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fsnotify/fsnotify dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/crypto dependency-version: 0.51.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/net dependency-version: 0.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/sys dependency-version: 0.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/term dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/text dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/tools dependency-version: 0.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/Masterminds/semver/v3 dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 11, 2026

dependabot Bot requested review from Matovidlo, hosekpeter and jachym-tousek-keboola as code owners May 11, 2026 19:33

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 11, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the go group across 1 directory with 19 updates#2599

build(deps): bump the go group across 1 directory with 19 updates#2599
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-a79a81b277

dependabot Bot commented on behalf of github May 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 11, 2026

v2.8.1

Application Performance Monitoring (APM)

v2.8.0

Summary

What's Changed

Application Performance Monitoring (APM)

v1.4.1

What's Changed

v1.18.6

What's Changed

New Contributors

v1.71.0

What's Changed

New Contributors

v3.6.11

Linux

macOS (Darwin)

v3.6.11

Linux

macOS (Darwin)

v3.6.11

Linux

macOS (Darwin)

v1.28.0

1.28.0 (27 Apr 2026)

Release 1.81.0

Behavior Changes

Dependencies

Bug Fixes

New Features

Performance Improvements

v1.10.1

Changes and fixes

v1.10.0

Changes and fixes

1.10.1 2026-05-04

Changes and fixes

1.10.0 2026-04-30

Changes and fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants