Skip to content

chore(deps): Bump the go-dependencies group across 1 directory with 11 updates#7684

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-dependencies-bbb1bad440
Closed

chore(deps): Bump the go-dependencies group across 1 directory with 11 updates#7684
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-dependencies-bbb1bad440

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 10 updates in the / directory:

Package From To
github.com/hashicorp/consul/api 1.34.3 1.34.4
github.com/klauspost/compress 1.18.7 1.19.0
github.com/prometheus/common 0.69.0 0.70.0
golang.org/x/net 0.56.0 0.57.0
google.golang.org/grpc 1.81.1 1.82.0
github.com/aws/aws-sdk-go-v2 1.42.0 1.42.1
github.com/aws/aws-sdk-go-v2/config 1.32.26 1.32.30
github.com/aws/aws-sdk-go-v2/service/dynamodb 1.59.1 1.60.1
github.com/prometheus/procfs 0.21.0 0.21.1
go.opentelemetry.io/collector/pdata 1.61.0 1.62.0

Updates github.com/hashicorp/consul/api from 1.34.3 to 1.34.4

Commits
  • 50d22e5 sub module release go mod update
  • 5efece6 Backport of chore: update memberlist dependency from v0.5.4 to v0.6.0 across ...
  • c171789 Backport of update all actions which were using deprecated node20 to node24 i...
  • 8aef944 Backport of upgrade alpine base image to 3.24 into release/2.0.x (#23715)
  • 1f5b203 post release 2.0.1 changelog and version upgrade 2.0.2-dev (#23714)
  • 695e7a8 Backport of Consul ENT: Addition of ext-proc changes to consul into release/2...
  • 5c48b0b Backport of config-entry(api-gateway): add ext_authz filter surface (Enterpri...
  • 451537c Backport: Compatibility testing for nomad and vault versions with latest vers...
  • c9606f6 Backport of fix: don't request client cert SDS when only CAFile is set into r...
  • b80641a Backport of xds: return errors from public listener finalization into release...
  • Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.18.7 to 1.19.0

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.19.0

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.6...v1.19.0

Commits

Updates github.com/prometheus/common from 0.69.0 to 0.70.0

Release notes

Sourced from github.com/prometheus/common's releases.

v0.70.0

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.69.0...v0.70.0

Changelog

Sourced from github.com/prometheus/common's changelog.

v0.70.0 / 2026-07-10

Enhancements

  • route: add support for the QUERY HTTP method. #932

Bugfixes

  • config: fix TLSVersion.String() printing a pointer address instead of the numeric version for unknown TLS versions. #929

Internal

  • expfmt: add BenchmarkConvertMetricFamily comparing the Prometheus text and OpenMetrics 1.0 encoders. #943
  • Update Go dependencies. #933 #934
  • Synchronize common files from prometheus/prometheus. #923 #927 #930 #937
  • Update GitHub Actions. #938 #939 #940 #941 #942

Full Changelog: prometheus/common@v0.69.0...v0.70.0

Commits
  • 5eff7a8 Merge pull request #941 from prometheus/dependabot/github_actions/actions/che...
  • a23c5b3 Merge pull request #939 from prometheus/dependabot/github_actions/ossf/scorec...
  • 9e1eb87 Merge pull request #942 from prometheus/dependabot/github_actions/actions/upl...
  • ab2736d Merge pull request #940 from prometheus/dependabot/github_actions/actions/set...
  • e596873 Merge pull request #938 from prometheus/dependabot/github_actions/codeql-ac07...
  • 97c066a Add BenchmarkConvertMetricFamily comparing Prometheus text and OpenMetrics 1....
  • 62e9d0f Merge pull request #932 from roidelapluie/roidelapluie/route-query
  • 6c31239 build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1
  • 755e9d6 build(deps): bump actions/checkout from 3.1.0 to 7.0.0
  • 556d740 build(deps): bump actions/setup-go from 6.2.0 to 6.5.0
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.56.0 to 0.57.0

Commits
  • b8f09f6 go.mod: update golang.org/x dependencies
  • f05f21b idna: reject all-ASCII xn-- labels on all Go versions
  • 0f748cf internal/http3: clean up stream I/O methods usages in tests
  • 0bb961e internal/http3: add net/http.ResponseController support
  • 0ca694d webdav: document Dir's lack of defense against filesystem modification
  • bd5f1dc http2: initialize Transport on NewClientConn
  • 488ff63 bpf: add security considerations to package docs
  • 93d1f25 xsrftoken: avoid token collisions
  • 5a3baee internal/http3: prevent panic in QPACK decoder due to overflow
  • See full diff in compare view

Updates golang.org/x/sync from 0.21.0 to 0.22.0

Commits

Updates google.golang.org/grpc from 1.81.1 to 1.82.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.0

Behavior Changes

  • server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)
  • transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)
  • balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

  • experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)
  • client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)
  • server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)

Bug Fixes

  • xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)
  • grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)
  • stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)
  • encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#9135)
  • channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#9109)
Commits
  • bd23985 Change version to 1.82.0 (#9170)
  • 0f3086d Fix minor issues not covered by PR #9137 (#9147)
  • fef07fb internal: Split v3procservicepb import into pb and grpc for extproc (#9163)
  • 91dd64f transport: surface subsequent data when receiving non-gRPC header (#8929)
  • adc97de test/kokoro: add config for regional-td test (#9158)
  • 57c9ff1 xds: ensure full-string matching for RBAC Filter rules (#9148)
  • b58f32d server: Set a pprof label on new stream goroutines (#9082)
  • 6c98be3 refactor(transport): extract shared stream state handling logic in `loopyWrit...
  • bcaa6f4 rls: only reset backoff on recovery from TRANSIENT_FAILURE (#9137)
  • 429e6e0 balancer: expose endpoint weight and hostname as experimental APIs (#9074)
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.42.0 to 1.42.1

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.26 to 1.32.30

Commits

Updates github.com/aws/aws-sdk-go-v2/service/dynamodb from 1.59.1 to 1.60.1

Commits

Updates github.com/prometheus/procfs from 0.21.0 to 0.21.1

Commits

Updates go.opentelemetry.io/collector/pdata from 1.61.0 to 1.62.0

Release notes

Sourced from go.opentelemetry.io/collector/pdata's releases.

v1.62.0/v0.156.0

Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.156.0

End User Changelog

💡 Enhancements 💡

  • cmd/mdatagen: Add support for defining stability levels for resource attributes (#15312)
  • cmd/mdatagen: Add semantic convention reference to resource attributes (#15313)
  • processor/memory_limiter: Adding health events for the memorylimiter (#14700) Publish health event from memorylimiter using componentstatus.ReportStatus

🧰 Bug fixes 🧰

  • cmd/mdatagen: Removes the extra line in the documentation.md between extended description and table (#15458)

  • exporter/otlp_http: Treat errors parsing successful (2xx) HTTP response bodies as permanent errors to prevent retrying already-accepted data. (#15386) When a server returns a 2xx status but the response body exceeds the 64kB read limit, the body is truncated and proto unmarshaling fails. Previously this was treated as a retryable error, causing duplicate data to be exported. Now it is marked as a permanent error so the retry logic will not re-send data that was already accepted by the server.

  • pkg/config/configretry: Always validate BackOffConfig fields regardless of the Enabled flag. (#15437)

  • pkg/service: Ensure receivers always start after all other components (#15495) There was previously a race condition where multiple receivers using a shared internal implementation, such as the OTLP receiver, could start sending telemetry into a pipeline before all its components had fully started.

  • processor/memory_limiter: Fix degenerate collector performance when exporter has problems causing permanent CPU-burning GC loop (#4981) Forced GC runs now use exponential backoff when deemed ineffective (still above soft limit and less than 5% reclaimed) to avoid preventing recovery by overloading CPU with excessive GC runs. The cap on the backoff interval is exposed via max_gc_interval_when_soft_limited and max_gc_interval_when_hard_limited (both default 30s); set either to 0 to disable backoff on that path.

  • provider/env: Fix empty env var default resolving to nil instead of empty string (#14587) When using ${env:VAR:-} with an unset variable, the empty default now correctly resolves to an empty string instead of nil.

API Changelog

🛑 Breaking changes 🛑

  • pkg/pprofile: add bounds checks to FromAttributeIndices (#15517)

💡 Enhancements 💡

  • cmd/mdatagen: Add field_name field to go_struct config in metadata.yaml to allow customizing the Go struct field name for generated config properties. (#15486)

... (truncated)

Changelog

Sourced from go.opentelemetry.io/collector/pdata's changelog.

v1.62.0/v0.156.0

🛑 Breaking changes 🛑

  • pkg/pprofile: add bounds checks to FromAttributeIndices (#15517)

💡 Enhancements 💡

  • cmd/mdatagen: Add field_name field to go_struct config in metadata.yaml to allow customizing the Go struct field name for generated config properties. (#15486)
  • cmd/mdatagen: Handle enum validators in generated config structs (#14805) Supported validators include enum.
  • cmd/mdatagen: Generate named Go types for primitive exported config schemas. (#15487) Primitive exported configs for string, integer, number, and boolean schemas now produce distinct exported types while default values and validation remain on referencing fields.

🧰 Bug fixes 🧰

  • pkg/pprofile: fix wrong error sentinel in SetString (#15511)
Commits
  • 0a6056f [chore] Prepare release v1.62.0/v0.156.0 (#15546)
  • 00f6354 [chore] Add clarification about org membership check (#15533)
  • a6b5d5c Document that Patch releases of Go may be adopted (#15052)
  • 5d48fde [processor/memorylimiter] Fix degenerate GC loop when exporter has problems (...
  • 1bca59a Update module github.com/cenkalti/backoff/v6 to v7 (#15522)
  • 193fe1b [pdata/pprofile] add bounds checks to FromAttributeIndices (#15517)
  • 8100c50 Update All golang.org/x packages (#15515)
  • b5f3f35 Update github-actions deps (#15516)
  • eec2fa2 Update module github.com/klauspost/compress to v1.18.7 (#15518)
  • 956556f Update module google.golang.org/grpc to v1.82.0 (#15521)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 10, 2026
@dosubot dosubot Bot added the type/chore Something that needs to be done; not a bug or a feature label Jul 10, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-bbb1bad440 branch from 364eb39 to e4b9731 Compare July 13, 2026 13:30
@dependabot
chore(deps): Bump the go-dependencies group across 1 directory with 1…
a8930ce 
…1 updates

Bumps the go-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/hashicorp/consul/api](https://github.com/hashicorp/consul) | `1.34.3` | `1.34.4` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.7` | `1.19.0` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.69.0` | `0.70.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.56.0` | `0.57.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.81.1` | `1.82.0` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.42.0` | `1.42.1` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.26` | `1.32.30` |
| [github.com/aws/aws-sdk-go-v2/service/dynamodb](https://github.com/aws/aws-sdk-go-v2) | `1.59.1` | `1.60.1` |
| [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.21.0` | `0.21.1` |
| [go.opentelemetry.io/collector/pdata](https://github.com/open-telemetry/opentelemetry-collector) | `1.61.0` | `1.62.0` |



Updates `github.com/hashicorp/consul/api` from 1.34.3 to 1.34.4
- [Release notes](https://github.com/hashicorp/consul/releases)
- [Changelog](https://github.com/hashicorp/consul/blob/main/CHANGELOG.md)
- [Commits](hashicorp/consul@api/v1.34.3...api/v1.34.4)

Updates `github.com/klauspost/compress` from 1.18.7 to 1.19.0
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.18.7...v1.19.0)

Updates `github.com/prometheus/common` from 0.69.0 to 0.70.0
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.69.0...v0.70.0)

Updates `golang.org/x/net` from 0.56.0 to 0.57.0
- [Commits](golang/net@v0.56.0...v0.57.0)

Updates `golang.org/x/sync` from 0.21.0 to 0.22.0
- [Commits](golang/sync@v0.21.0...v0.22.0)

Updates `google.golang.org/grpc` from 1.81.1 to 1.82.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.81.1...v1.82.0)

Updates `github.com/aws/aws-sdk-go-v2` from 1.42.0 to 1.42.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.42.0...v1.42.1)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.26 to 1.32.30
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.26...config/v1.32.30)

Updates `github.com/aws/aws-sdk-go-v2/service/dynamodb` from 1.59.1 to 1.60.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ssm/v1.59.1...service/s3/v1.60.1)

Updates `github.com/prometheus/procfs` from 0.21.0 to 0.21.1
- [Release notes](https://github.com/prometheus/procfs/releases)
- [Commits](prometheus/procfs@v0.21.0...v0.21.1)

Updates `go.opentelemetry.io/collector/pdata` from 1.61.0 to 1.62.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md)
- [Commits](open-telemetry/opentelemetry-collector@pdata/v1.61.0...pdata/v1.62.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.42.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/dynamodb
  dependency-version: 1.60.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/hashicorp/consul/api
  dependency-version: 1.34.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/prometheus/common
  dependency-version: 0.70.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/prometheus/procfs
  dependency-version: 0.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: go.opentelemetry.io/collector/pdata
  dependency-version: 1.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.82.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-bbb1bad440 branch from e4b9731 to a8930ce Compare July 15, 2026 13:29
@dependabot @github

dependabot Bot commented on behalf of github Jul 16, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 16, 2026
@dependabot dependabot Bot deleted the dependabot/go_modules/go-dependencies-bbb1bad440 branch July 16, 2026 13:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code size/M type/chore Something that needs to be done; not a bug or a feature

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants