Skip to content

Bump the all-deps group across 1 directory with 13 updates#1375

Merged
roger2hk merged 5 commits intomasterfrom
dependabot/go_modules/all-deps-a2687b98dd
Apr 2, 2026
Merged

Bump the all-deps group across 1 directory with 13 updates#1375
roger2hk merged 5 commits intomasterfrom
dependabot/go_modules/all-deps-a2687b98dd

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2026

Bumps the all-deps group with 7 updates in the / directory:

Package From To
github.com/apache/beam/sdks/v2 2.68.0 2.72.0
github.com/google/certificate-transparency-go 1.3.2 1.3.3
github.com/google/trillian 1.7.2 1.7.3
github.com/mattn/go-sqlite3 1.14.32 1.14.38
github.com/transparency-dev/formats 0.0.0-20250723101439-be3b1008ec3a 0.1.0
github.com/u-root/u-root 0.15.0 0.16.0
github.com/usbarmory/tamago 1.25.1 1.26.1

Updates github.com/apache/beam/sdks/v2 from 2.68.0 to 2.72.0

Release notes

Sourced from github.com/apache/beam/sdks/v2's releases.

Beam 2.72.0 release

We are happy to present the new 2.72.0 release of Beam. This release includes both improvements and new functionality. See the download page for this release.

For more information on changes in 2.72.0, check out the detailed release notes.

Highlights

I/Os

  • Add Datadog IO support (Java) (#37318).
  • Remove Pubsublite IO support, since service will be deprecated in March 2026. (#37375).
  • (Java) ClickHouse - migrating from the legacy JDBC driver (v0.6.3) to ClickHouse Java Client v2 (v0.9.6). See the class documentation for migration guide (#37610).
  • (Java) Upgraded GoogleAdsIO to use GoogleAdsIO API v23 (#37620).

New Features / Improvements

  • (Python) Added exception chaining to preserve error context in CloudSQLEnrichmentHandler, processes utilities, and core transforms (#37422).
  • (Python) Added a pipeline option --experiments=pip_no_build_isolation to disable build isolation when installing dependencies in the runtime environment (#37331).

Deprecations

  • (Python) Removed previously deprecated list_prefix method for filesystem interfaces (#37587).

Bugfixes

  • Fixed (Yaml) issue with validate compatible method (#37588).
  • Fixed (Yaml) issue with Create transform dealing with different type elements (#37585).

Security Fixes

List of Contributors

According to git shortlog, the following people contributed to the 2.72.0 release. Thank you to all contributors!

Abdelrahman Ibrahim, Ahmed Abualsaud, Andrew Crites, Arun Pandian, Ben Feinstein, Bentsi Leviav, Celeste Zeng, Danny McCormick, Danny Mccormick, Derrick Williams, Elia LIU, Ganesh, Jack McCluskey, Kenneth Knowles, Labesse Kévin, M Junaid Shaukat, Mansi Singh, Mattie Fu, Nayan Mathur, Pablo Estrada, Pirzada Ahmad Faraz, Radek Stankiewicz, Radosław Stankiewicz, Robert Bradshaw, Rohan Sah, RuiLong J., Sakthivel Subramanian, Sam Whittle, Shaheer Amjad, Shunping Huang, Steven van Rossum, Tarun Annapareddy, Tobias Kaymak, Valentyn Tymofieiev, Vitaly Terentyev, Yi Hu, XQ Hu, ZIHAN DAI, apanich, chenxuesdu, claudevdm, franzonia137

Beam 2.71.0 release

We are happy to present the new 2.71.0 release of Beam. This release includes both improvements and new functionality.

... (truncated)

Changelog

Sourced from github.com/apache/beam/sdks/v2's changelog.

[2.72.0] - 2026-03-30

Highlights

I/Os

  • Add Datadog IO support (Java) (#37318).
  • Remove Pubsublite IO support, since service will be deprecated in March 2026. (#37375).
  • (Java) ClickHouse - migrating from the legacy JDBC driver (v0.6.3) to ClickHouse Java Client v2 (v0.9.6). See the class documentation for migration guide (#37610).
  • (Java) Upgraded GoogleAdsIO to use GoogleAdsIO API v23 (#37620).
  • (Java) Added support for withMinRowCountForPageSizeCheck to ParquetIO.Sink to avoid OOM when writing large columns (#37740).

New Features / Improvements

  • (Python) Added exception chaining to preserve error context in CloudSQLEnrichmentHandler, processes utilities, and core transforms (#37422).
  • (Python) Added a pipeline option --experiments=pip_no_build_isolation to disable build isolation when installing dependencies in the runtime environment (#37331).
  • (Python) Added support for tagged output typehints (#37434).

Deprecations

  • (Python) Removed previously deprecated list_prefix method for filesystem interfaces (#37587).

Bugfixes

  • Fixed (Yaml) issue with validate compatible method (#37588).
  • Fixed (Yaml) issue with Create transform dealing with different type elements (#37585).

Security Fixes

[2.71.0] - 2026-01-22

I/Os

  • (Java) Elasticsearch 9 Support (#36491).
  • (Java) Upgraded HCatalogIO to Hive 4.0.1 (#32189).

New Features / Improvements

  • Support configuring Firestore database on ReadFn transforms (Java) (#36904).
  • (Python) Inference args are now allowed in most model handlers, except where they are explicitly/intentionally disallowed (#37093).
  • (Python) Add support for EnvoyRateLimiter, to allow rate limiting in DoFns (#37135).
  • (Python) Add support for RateLimiting in Remote Model Handler (#37218).

Bugfixes

  • Fixed FirestoreV1 Beam connectors allow configuring inconsistent project/database IDs between RPC requests and routing headers #36895 (Java) (#36895).

... (truncated)

Commits

Updates github.com/google/certificate-transparency-go from 1.3.2 to 1.3.3

Release notes

Sourced from github.com/google/certificate-transparency-go's releases.

v1.3.3

What's Changed

CTFE

Tools

Log list library

Submission proxy

Other

Misc

Dependency updates

... (truncated)

Changelog

Sourced from github.com/google/certificate-transparency-go's changelog.

v1.3.3

CTFE

Tools

Log list library

Submission proxy

Other

Misc

Dependency updates

... (truncated)

Commits
  • e8f9317 Support tiled logs in the loglist3 logfilter functions (#1762)
  • f571c2e Cap request body size in submission proxy (#1754)
  • b0a55e9 Bump golangci-lint version to v2.10.1 (#1769)
  • f8d8cda Bump the docker-deps group across 2 directories with 2 updates (#1766)
  • e030cb1 Bump github/codeql-action from 4.32.0 to 4.32.4 in the all-deps group (#1767)
  • 537ff1f Bump the all-deps group with 7 updates (#1768)
  • 8c5792c Remove internal witness (#1765)
  • a599ccc Add FindTiledLog* functions (#1763)
  • 3782b4d Bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#1764)
  • a6d1ef5 Bump golang.org/x/crypto from 0.46.0 to 0.47.0 in the all-deps group (#1756)
  • Additional commits viewable in compare view

Updates github.com/google/trillian from 1.7.2 to 1.7.3

Release notes

Sourced from github.com/google/trillian's releases.

v1.7.3

What's Changed

  • Recommended go version for development: 1.25
    • This is the version used by the cloudbuild presubmits. Using a different version can lead to presubmits failing due to unexpected diffs.

Storage

  • PostgreSQL quota manager: Use SELECT(*) instead of ANALYZE up to 10,000 rows instead of 1,000 by @​robstradling in google/trillian#3813

  • Add TLS support for PostgreSQL by @​fghanmi in google/trillian#3831

    • --postgresql_tls_ca: users can provide a CA certificate, that is used to establish a secure communication with PostgreSQL server.
    • --postgresql_verify_full: users can enable full TLS verification for PostgreSQL (sslmode=verify-full). If false, only sslmode=verify-ca is used.

  • CloudSpanner: Many storage-specific options are deprecated and have likely been ineffective for some time in google/trillian#3860

Election system

Documentation

Misc

Dependency update

... (truncated)

Changelog

Sourced from github.com/google/trillian's changelog.

v1.7.3

  • Recommended go version for development: 1.25
    • This is the version used by the cloudbuild presubmits. Using a different version can lead to presubmits failing due to unexpected diffs.

Storage

  • PostgreSQL quota manager: Use SELECT(*) instead of ANALYZE up to 10,000 rows instead of 1,000 by @​robstradling in google/trillian#3813

  • Add TLS support for PostgreSQL by @​fghanmi in google/trillian#3831

    • --postgresql_tls_ca: users can provide a CA certificate, that is used to establish a secure communication with PostgreSQL server.
    • --postgresql_verify_full: users can enable full TLS verification for PostgreSQL (sslmode=verify-full). If false, only sslmode=verify-ca is used.

  • CloudSpanner: Many storage-specific options are deprecated and have likely been ineffective for some time in google/trillian#3860

Election system

Documentation

Misc

Dependency update

... (truncated)

Commits

Updates github.com/mattn/go-sqlite3 from 1.14.32 to 1.14.38

Commits
  • edadafa Merge pull request #1381 from mattn/eliminate-bounds-checks
  • 8f9f86e Eliminate unnecessary bounds checks in hot paths
  • 0d23881 Merge pull request #1379 from theimpostor/pr-1322-missing-constraint-op-types
  • 84bdc43 add missing index constraint op types
  • 57e5007 Merge pull request #1313 from Jaculabilis/json-example
  • bb8d0b2 Bump Go test matrix versions from 1.23-1.25 to 1.24-1.26
  • bc7436e Bump GitHub Actions versions to latest
  • 0f12d4e Ensure Close always removes runtime finalizer to prevent memory leak
  • d71eda8 Fix upgrade.sh: add already-up-to-date check and fix changelog URL format
  • 4ea2a9f Upgrade SQLite to version 3051003
  • Additional commits viewable in compare view

Updates github.com/transparency-dev/formats from 0.0.0-20250723101439-be3b1008ec3a to 0.1.0

Release notes

Sourced from github.com/transparency-dev/formats's releases.

v0.1.0

What's Changed

Deps

... (truncated)

Commits

Updates github.com/u-root/u-root from 0.15.0 to 0.16.0

Release notes

Sourced from github.com/u-root/u-root's releases.

last release before moving to go1.25

What's Changed

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 1, 2026
@dependabot dependabot bot requested a review from a team as a code owner April 1, 2026 05:01
@dependabot dependabot bot removed the request for review from a team April 1, 2026 05:01
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 1, 2026
@dependabot dependabot bot requested a review from AlCutter April 1, 2026 05:01
@dependabot dependabot bot added the go Pull requests that update Go code label Apr 1, 2026
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Apr 1, 2026

/gcbrun

2 similar comments
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Apr 2, 2026

/gcbrun

@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Apr 2, 2026

/gcbrun

dependabot bot and others added 3 commits April 2, 2026 10:16
@dependabot @roger2hk
Bump the all-deps group across 1 directory with 13 updates
8f50fa3 
Bumps the all-deps group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/apache/beam/sdks/v2](https://github.com/apache/beam) | `2.68.0` | `2.72.0` |
| [github.com/google/certificate-transparency-go](https://github.com/google/certificate-transparency-go) | `1.3.2` | `1.3.3` |
| [github.com/google/trillian](https://github.com/google/trillian) | `1.7.2` | `1.7.3` |
| [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.32` | `1.14.38` |
| [github.com/transparency-dev/formats](https://github.com/transparency-dev/formats) | `0.0.0-20250723101439-be3b1008ec3a` | `0.1.0` |
| [github.com/u-root/u-root](https://github.com/u-root/u-root) | `0.15.0` | `0.16.0` |
| [github.com/usbarmory/tamago](https://github.com/usbarmory/tamago) | `1.25.1` | `1.26.1` |



Updates `github.com/apache/beam/sdks/v2` from 2.68.0 to 2.72.0
- [Release notes](https://github.com/apache/beam/releases)
- [Changelog](https://github.com/apache/beam/blob/master/CHANGES.md)
- [Commits](apache/beam@v2.68.0...v2.72.0)

Updates `github.com/google/certificate-transparency-go` from 1.3.2 to 1.3.3
- [Release notes](https://github.com/google/certificate-transparency-go/releases)
- [Changelog](https://github.com/google/certificate-transparency-go/blob/master/CHANGELOG.md)
- [Commits](google/certificate-transparency-go@v1.3.2...v1.3.3)

Updates `github.com/google/trillian` from 1.7.2 to 1.7.3
- [Release notes](https://github.com/google/trillian/releases)
- [Changelog](https://github.com/google/trillian/blob/master/CHANGELOG.md)
- [Commits](google/trillian@v1.7.2...v1.7.3)

Updates `github.com/mattn/go-sqlite3` from 1.14.32 to 1.14.38
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](mattn/go-sqlite3@v1.14.32...v1.14.38)

Updates `github.com/transparency-dev/formats` from 0.0.0-20250723101439-be3b1008ec3a to 0.1.0
- [Release notes](https://github.com/transparency-dev/formats/releases)
- [Commits](https://github.com/transparency-dev/formats/commits/v0.1.0)

Updates `github.com/u-root/u-root` from 0.15.0 to 0.16.0
- [Release notes](https://github.com/u-root/u-root/releases)
- [Changelog](https://github.com/u-root/u-root/blob/main/RELEASES)
- [Commits](u-root/u-root@v0.15.0...v0.16.0)

Updates `github.com/usbarmory/tamago` from 1.25.1 to 1.26.1
- [Release notes](https://github.com/usbarmory/tamago/releases)
- [Commits](usbarmory/tamago@v1.25.1...v1.26.1)

Updates `golang.org/x/crypto` from 0.46.0 to 0.49.0
- [Commits](golang/crypto@v0.46.0...v0.49.0)

Updates `golang.org/x/mod` from 0.30.0 to 0.34.0
- [Commits](golang/mod@v0.30.0...v0.34.0)

Updates `golang.org/x/oauth2` from 0.34.0 to 0.36.0
- [Commits](golang/oauth2@v0.34.0...v0.36.0)

Updates `golang.org/x/sync` from 0.19.0 to 0.20.0
- [Commits](golang/sync@v0.19.0...v0.20.0)

Updates `google.golang.org/protobuf` from 1.36.10 to 1.36.11

Updates `k8s.io/klog/v2` from 2.130.1 to 2.140.0
- [Release notes](https://github.com/kubernetes/klog/releases)
- [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md)
- [Commits](kubernetes/klog@v2.130.1...2.140.0)

---
updated-dependencies:
- dependency-name: github.com/apache/beam/sdks/v2
  dependency-version: 2.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: github.com/google/certificate-transparency-go
  dependency-version: 1.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: github.com/google/trillian
  dependency-version: 1.7.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: github.com/mattn/go-sqlite3
  dependency-version: 1.14.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: github.com/transparency-dev/formats
  dependency-version: 0.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: github.com/u-root/u-root
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: github.com/usbarmory/tamago
  dependency-version: 1.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: golang.org/x/crypto
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: golang.org/x/mod
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: golang.org/x/sync
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: k8s.io/klog/v2
  dependency-version: 2.140.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@roger2hk
Bump golangci-lint to v2.11.4
23416c7
@roger2hk
Fix golangci-lint warnings
c891ae8
@roger2hk roger2hk force-pushed the dependabot/go_modules/all-deps-a2687b98dd branch from 1b39cd9 to c891ae8 Compare April 2, 2026 10:16
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Apr 2, 2026

/gcbrun

@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Apr 2, 2026

/gcbrun

@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Apr 2, 2026

/gcbrun

@roger2hk roger2hk merged commit 9c23b6c into master Apr 2, 2026
8 checks passed
@roger2hk roger2hk deleted the dependabot/go_modules/all-deps-a2687b98dd branch April 2, 2026 11:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@roger2hk roger2hk roger2hk approved these changes

@AlCutter AlCutter Awaiting requested review from AlCutter AlCutter is a code owner automatically assigned from google/trillian-examples-reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@dpebot @roger2hk