Skip to content

Bump the go-sdk-dependency-updates group across 1 directory with 10 updates - #70973

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-sdk/go-sdk-dependency-updates-fb1eca83c9
Closed

Bump the go-sdk-dependency-updates group across 1 directory with 10 updates#70973
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-sdk/go-sdk-dependency-updates-fb1eca83c9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-sdk-dependency-updates group with 10 updates in the /go-sdk directory:

Package From To
github.com/cappuccinotm/slogx 1.4.2 1.5.0
github.com/golang-jwt/jwt/v5 5.3.0 5.3.1
github.com/hashicorp/go-plugin 1.7.0 1.8.0
github.com/oapi-codegen/runtime 1.1.1 1.6.0
github.com/spf13/cobra 1.10.1 1.10.2
github.com/spf13/viper 1.20.1 1.21.0
google.golang.org/grpc 1.82.1 1.83.0
resty.dev/v3 3.0.0-beta.2 3.0.0-rc.3
github.com/jarcoal/httpmock 1.4.0 1.4.2
github.com/samber/slog-http 1.8.2 1.12.1

Updates github.com/cappuccinotm/slogx from 1.4.2 to 1.5.0

Release notes

Sourced from github.com/cappuccinotm/slogx's releases.

Version 1.5.0

What's Changed

New Contributors

Full Changelog: cappuccinotm/slogx@v1.4.2...v1.5.0

Commits
  • 7acd40b fix: panic in logging round tripper if request body is passed as nil, instead...
  • 0ed7588 chore: move ApplyHandler to slogm and check handler is enabled (#12)
  • d71464b upgrade to go 1.26 (#13)
  • f6f9865 feat: add wrapper for Middleware (#11)
  • See full diff in compare view

Updates github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1

Release notes

Sourced from github.com/golang-jwt/jwt/v5's releases.

v5.3.1

What's Changed

🔐 Features

👒 Dependencies

New Contributors

Full Changelog: golang-jwt/jwt@v5.3.0...v5.3.1

Commits
  • 7ceae61 Add release.yml for changelog configuration
  • dce8e4d Set token.Signature in ParseUnverified (#414)
  • 8889e20 Save signature to Token struct after successful signing (#417)
  • d237f82 ci: update github-actions schedule interval to monthly
  • d8dce95 Bump crate-ci/typos from 1.41.0 to 1.42.1 (#492)
  • e931803 Bump crate-ci/typos from 1.40.0 to 1.41.0 (#490)
  • e6a0afa Bump actions/checkout from 5 to 6 (#487)
  • 9f85c9e Bump crate-ci/typos from 1.39.0 to 1.40.0 (#488)
  • 60a8669 Bump actions/setup-go from 5 to 6 (#469)
  • 76f5828 Remove misleading ParserOptions documentation (#484)
  • Additional commits viewable in compare view

Updates github.com/hashicorp/go-plugin from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/hashicorp/go-plugin's releases.

v1.8.0

What’s Changed

Compliance & Maintenance

  • updated copyright and license headers
  • Modernized build tags
  • Multiple GitHub Actions and dependency bumps

Fixes & Improvements

  • Fixed concurrency issue with pipesWaitGroup
  • Prevented pidfd leak in cmdrunner
  • Reduced logging configuration noise

Enhancements

  • Updated go_package to full path in proto
  • Improved gRPC example (plugin selection + encoding fix)
  • Added gRPC streaming example

Dependencies Upgrade

  • Upgraded protobuf
  • Several CI/CD action updates

New Contributors

Changelog

Sourced from github.com/hashicorp/go-plugin's changelog.

Unreleased

SECURITY:

  • deps: Updated google.golang.org/grpc to v1.81.1 [GH-383]

ENHANCEMENTS:

  • deps: Removed direct use of deprecated github.com/golang/protobuf in favour of google.golang.org/protobuf [GH-388]
Commits
  • 155dcdd cmdrunner: release process handle in _pidAlive to avoid pidfd leak (#378)
  • 96d18ee [chore] : Bump actions/upload-artifact in the actions group (#376)
  • a0c251c [chore] : Bump actions/setup-go from 6.3.0 to 6.4.0 in the actions group (#375)
  • 6a56553 [chore] : Bump the actions group with 2 updates (#373)
  • abeb978 Bump protobuf from 4.25.8 to 5.29.6 in /examples/grpc/plugin-python (#372)
  • a4c9002 examples: Add gRPC streaming example (#339)
  • 0ac49e2 [chore] : Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group (#370)
  • d662936 logging: lower priority of configuring messages (#311)
  • c57bf64 [chore] : Bump actions/setup-go from 6.1.0 to 6.2.0 in the actions group (#369)
  • a33e454 chore: add plugin selection and fix encoding in gRPC example (#368)
  • Additional commits viewable in compare view

Updates github.com/oapi-codegen/runtime from 1.1.1 to 1.6.0

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

Allow customization of parameter encoding

This is a small release which adds a global encoding setting on the runtime, to allow users to customize how to handle spaces in query arguments. This is a new minor release, since we're adding new API, even though this is a very minor feature. I imagine that in the future, we will add more settings, rather than making behavior assumptions.

🚀 New features and improvements

📦 Dependency updates

  • chore(deps): update module github.com/golangci/golangci-lint to v2.12.2 (#112) @renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.

Sponsors

We would like to thank our sponsors for their support during this release.

v1.5.0: RFC3339 durations, and bug fixes

This is mainly a bugfix release, but we're bumping the minor version since we also introduce a new type, Duration into our types/ package, which allows for parsing and emitting RFC3339 durations. Rather than trying to parse a duration string into a time.Duration, which requires assumptions that may not be right for everyone, we decided not to make those decisions and just store all possible fields as provided. Users can convert this to Go Duration as they see fit.

🚀 New features and improvements

🐛 Bug fixes

📝 Documentation updates

... (truncated)

Commits
  • 01be2fa chore(deps): update module github.com/golangci/golangci-lint to v2.12.2 (#112)
  • 1463938 Allow customizing default query encoder (#145)
  • 540d34a fix(deps): update module github.com/labstack/echo/v5 to v5.3.0 (#142)
  • e89dbb8 Add types.Duration for the RFC 3339 duration format (#144)
  • 324e57f Let generated code declare whether styled parameter values are escaped (#143)
  • 95c13c0 Explain how to send nested objects when style serialization fails (#141)
  • 7c889f3 Prefer the form struct tag over json for form encoding (#140)
  • d0d5c3a chore(deps): update golang/govulncheck-action action to v1.1.0 (#137)
  • 67e86fd chore(deps): update oapi-codegen/actions action to v0.8.0 (#130)
  • df140cb fix(deps): update module github.com/labstack/echo/v5 to v5.2.1 (#126)
  • Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.10.1 to 1.10.2

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.2

🔧 Dependencies

  • chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @​dims in spf13/cobra#2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

Commits

Updates github.com/spf13/viper from 1.20.1 to 1.21.0

Release notes

Sourced from github.com/spf13/viper's releases.

v1.21.0

What's Changed

Enhancements 🚀

Bug Fixes 🐛

Dependency Updates ⬆️

Other Changes

New Contributors

Full Changelog: spf13/viper@v1.20.0...v1.21.0

Commits
  • 394040c ci: build on go 1.25
  • 812f548 chore: update dependencies
  • d5271ef ci: update stale workflow
  • dff303b feat: add a stale issue scheduled action
  • 1287976 build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10
  • 38932cd build(deps): bump github.com/go-viper/mapstructure/v2 in /remote
  • 6d014be build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1
  • b74c7ee build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0
  • acd05e1 fix: linting issues
  • ae5a8e2 ci: upgrade golangci-lint
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.82.1 to 1.83.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.0

Security

  • server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
  • xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
  • xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
  • xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.
  • xds: Fix panic when parsing route header matchers configured with empty exact_match, prefix_match, or suffix_match strings. (#9223)

New Features

  • xds/googlec2p: Enable DirectPath over Interconnect support for on-premises clients via the force-xds target URI query parameter. (#9133)
  • xds: Enable xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports. (#9145)
  • authz: Add OnPolicyUpdate callback to FileWatcherOptions to notify when an authz policy is loaded or updated. (#9142)
  • xds: Add support for the GCP Authentication HTTP Filter, which automatically fetches and attaches GCP Service Account Identity JWT tokens to outgoing RPCs.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#9119)
  • xds: Add support for xDS-based HTTP CONNECT proxies.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (#9151)
  • xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

  • credentials/alts: Fix panic when processing malformed frames by validating that the message frame length exceeds the message type field size. (#9197)
  • grpc: Fix compilation on Plan 9 targets (GOOS=plan9), broken since v1.81.0. (#9255)
Commits
  • 4c226da Change version to 1.83.0 (#9228)
  • c198988 Cherrypick 9223 into v1.83.x (#9279)
  • 8ce3ebf Cherrypick PR 9255 into v1.83.x (#9263)
  • e393849 Cherry-pick recent changes from master (#9240)
  • 2a112a8 authz: add onPolicyUpdate callback to authz file watcher (#9142)
  • 1a80fca vet: adds a check to disallow usage of regex.Compile in xDS code (#9216)
  • 26ffdb3 [tls] Add safety check in custom cert verification that peer cert chain is no...
  • 5013974 internal/grpcsync: add ScheduleAndWait to CallbackSerializer (#9162)
  • bd58bc0 internal/transport: increase test timeout locally in TestAccountCheckWindowSi...
  • 484f150 httpfilter/extproc: add check to ensure that response trailer mode must be SE...
  • Additional commits viewable in compare view

Updates resty.dev/v3 from 3.0.0-beta.2 to 3.0.0-rc.3

Release notes

Sourced from resty.dev/v3's releases.

v3.0.0-rc.3

v3 Release Candidate 3

v3 Guide

Bug Fixes

Enhancements

Tests

New Contributors

Full Changelog: go-resty/resty@v3.0.0-rc.2...v3.0.0-rc.3

v3.0.0-rc.2

v3 Release Candidate 2

v3 Guide

Bug Fixes

  • fix: content decoder not found error when do not parse response is enabled and unsupported content-encoding header present by @​jeevatkm in go-resty/resty#1169
  • fix: panics and state corruption in Request.Clone, Client.Close, SSE default logger, and invalid HTTP method handling by @​g3m0sis in go-resty/resty#1172

New Contributors

Full Changelog: go-resty/resty@v3.0.0-rc.1...v3.0.0-rc.2

v3.0.0-rc.1

v3 Release Candidate 1

v3 Guide

Bug Fixes

... (truncated)

Commits
  • d48da64 release: version bump to v3.0.0-rc.3 (#1182)
  • 3f32051 fix(retry): protect parseRetryAfterHeader from integer and time duration over...
  • 5a34452 feat(enhancement): improve string request body parsing memory allocs (#1180)
  • e0d82c2 test: cover cancellation on nil resp body (#1179)
  • b17d8b0 fix: context cancellation leak (#1177)
  • b5060b2 chore: bump version to 3.0.0-rc.2+devrc3 for next dev iteration (#1175)
  • c72afa4 release: version bump to v3.0.0-rc.2 (#1174)
  • 22ccb8e fix: panics and state corruption in Request.Clone, Client.Close, SSE default ...
  • 80fd29d fix: content decoder not found error when do not parse response is enabled (#...
  • e674e0b chore: bump version to 3.0.0-rc.1+devrc2 for next dev iteration (#1171)
  • Additional commits viewable in compare view

Updates github.com/jarcoal/httpmock from 1.4.0 to 1.4.2

Release notes

Sourced from github.com/jarcoal/httpmock's releases.

v1.4.2

What's Changed

Full Changelog: jarcoal/httpmock@v1.4.1...v1.4.2

v1.4.1

What's Changed

New Contributors

Full Changelog: jarcoal/httpmock@v1.4.0...v1.4.1

Commits
  • 1ddfb9e feat: Responder.Delay can be interrupted by context cancellation (#169)
  • a796508 test: update install-go
  • 52e7107 test: use golangci-lint v2.12.2
  • 0147409 test: also test with go v1.26 and use golangci-lint v2.9.0
  • 314d58a fix: protect all body-related methods with mutext
  • e482896 fix: avoid data race when closing body
  • c977145 test: also test with go v1.25 and use golangci-lint v2.4.0
  • See full diff in compare view

Updates github.com/samber/slog-http from 1.8.2 to 1.12.1

Release notes

Sourced from github.com/samber/slog-http's releases.

v1.12.1

  • Fix Filter suffix operations
  • Optimize Filter performance

Full Changelog: samber/slog-http@v1.12.0...v1.12.1

v1.12.0

What's Changed

Full Changelog: samber/slog-http@v1.11.1...v1.12.0

v1.11.1

What's Changed

Full Changelog: samber/slog-http@v1.11.0...v1.11.1

v1.11.0

What's Changed

New Contributors

Full Changelog: samber/slog-http@v1.10.0...v1.11.0

v1.10.0

What's Changed

New Contributors

Full Changelog: samber/slog-http@v1.9.0...v1.10.0

v1.9.0

feat: add variadic parameters to AddCustomAttributes and AddContextAttributes

Commits
  • 0c7441d bump v1.12.1
  • c523af0 fix(filters): fix suffix filters and perf optimizations
  • c253d3d fix: add default value of WithCustomMessage (#19)
  • 6727a4c fix: avoid infinite recursion when recording body with Readfrom (#18)
  • fa15b80 fix: implement io.ReaderFrom in wrapped response (compat with other middlewar...
  • e3b9add Update README.md
  • 32ac81c feat: add WithClientIP property (#16)
  • 2f02e32 fix: recovery handler suppresses http.ErrAbortHandler (#12)
  • c945fd6 feat: variadic slog.Attr arg list to Add*Attributes functions (#11)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the go-sdk-dependency-updates group across 1 directory with 10 u…
24b657d 
…pdates

Bumps the go-sdk-dependency-updates group with 10 updates in the /go-sdk directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/cappuccinotm/slogx](https://github.com/cappuccinotm/slogx) | `1.4.2` | `1.5.0` |
| [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.3.0` | `5.3.1` |
| [github.com/hashicorp/go-plugin](https://github.com/hashicorp/go-plugin) | `1.7.0` | `1.8.0` |
| [github.com/oapi-codegen/runtime](https://github.com/oapi-codegen/runtime) | `1.1.1` | `1.6.0` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.10.1` | `1.10.2` |
| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.20.1` | `1.21.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.82.1` | `1.83.0` |
| [resty.dev/v3](https://github.com/go-resty/resty) | `3.0.0-beta.2` | `3.0.0-rc.3` |
| [github.com/jarcoal/httpmock](https://github.com/jarcoal/httpmock) | `1.4.0` | `1.4.2` |
| [github.com/samber/slog-http](https://github.com/samber/slog-http) | `1.8.2` | `1.12.1` |



Updates `github.com/cappuccinotm/slogx` from 1.4.2 to 1.5.0
- [Release notes](https://github.com/cappuccinotm/slogx/releases)
- [Commits](cappuccinotm/slogx@v1.4.2...v1.5.0)

Updates `github.com/golang-jwt/jwt/v5` from 5.3.0 to 5.3.1
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Commits](golang-jwt/jwt@v5.3.0...v5.3.1)

Updates `github.com/hashicorp/go-plugin` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/hashicorp/go-plugin/releases)
- [Changelog](https://github.com/hashicorp/go-plugin/blob/main/CHANGELOG.md)
- [Commits](hashicorp/go-plugin@v1.7.0...v1.8.0)

Updates `github.com/oapi-codegen/runtime` from 1.1.1 to 1.6.0
- [Release notes](https://github.com/oapi-codegen/runtime/releases)
- [Commits](oapi-codegen/runtime@v1.1.1...v1.6.0)

Updates `github.com/spf13/cobra` from 1.10.1 to 1.10.2
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.10.1...v1.10.2)

Updates `github.com/spf13/viper` from 1.20.1 to 1.21.0
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](spf13/viper@v1.20.1...v1.21.0)

Updates `google.golang.org/grpc` from 1.82.1 to 1.83.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.82.1...v1.83.0)

Updates `resty.dev/v3` from 3.0.0-beta.2 to 3.0.0-rc.3
- [Release notes](https://github.com/go-resty/resty/releases)
- [Commits](go-resty/resty@v3.0.0-beta.2...v3.0.0-rc.3)

Updates `github.com/jarcoal/httpmock` from 1.4.0 to 1.4.2
- [Release notes](https://github.com/jarcoal/httpmock/releases)
- [Commits](jarcoal/httpmock@v1.4.0...v1.4.2)

Updates `github.com/samber/slog-http` from 1.8.2 to 1.12.1
- [Release notes](https://github.com/samber/slog-http/releases)
- [Commits](samber/slog-http@v1.8.2...v1.12.1)

---
updated-dependencies:
- dependency-name: github.com/cappuccinotm/slogx
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-sdk-dependency-updates
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-version: 5.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-sdk-dependency-updates
- dependency-name: github.com/hashicorp/go-plugin
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-sdk-dependency-updates
- dependency-name: github.com/oapi-codegen/runtime
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-sdk-dependency-updates
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-sdk-dependency-updates
- dependency-name: github.com/spf13/viper
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-sdk-dependency-updates
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-sdk-dependency-updates
- dependency-name: resty.dev/v3
  dependency-version: 3.0.0-rc.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-sdk-dependency-updates
- dependency-name: github.com/jarcoal/httpmock
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-sdk-dependency-updates
- dependency-name: github.com/samber/slog-http
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-sdk-dependency-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 3, 2026
@dependabot
dependabot Bot requested a review from ashb as a code owner August 3, 2026 08:51
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 3, 2026
@dependabot dependabot Bot added the go Pull requests that update go code label Aug 3, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor Author

The group that created this PR has been removed from your configuration.

@dependabot dependabot Bot closed this Aug 3, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-sdk/go-sdk-dependency-updates-fb1eca83c9 branch August 3, 2026 22:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ashb ashb Awaiting requested review from ashb ashb is a code owner
@amoghrajesh amoghrajesh Awaiting requested review from amoghrajesh amoghrajesh is a code owner
@jason810496 jason810496 Awaiting requested review from jason810496 jason810496 is a code owner

Assignees

No one assigned

Labels

area:go-sdk dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants