Skip to content

build(deps): bump the go-minor-and-patch group across 1 directory with 10 updates - #150

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-b1a0e7d856
Open

build(deps): bump the go-minor-and-patch group across 1 directory with 10 updates#150
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-b1a0e7d856

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-minor-and-patch group with 10 updates in the / directory:

Package From To
cloud.google.com/go/auth 0.23.1 0.23.2
github.com/Azure/azure-sdk-for-go/sdk/azcore 1.23.0 1.23.1
github.com/Azure/azure-sdk-for-go/sdk/azidentity 1.14.0 1.14.1
github.com/IBM/sarama 1.60.1 1.60.2
github.com/aws/aws-sdk-go-v2/config 1.32.37 1.33.1
github.com/aws/aws-sdk-go-v2/service/secretsmanager 1.44.6 1.46.1
github.com/godror/godror 0.51.0 0.51.4
github.com/microsoft/go-mssqldb 1.10.0 1.11.0
go.mongodb.org/mongo-driver/v2 2.8.0 2.8.2
google.golang.org/api 0.293.0 0.295.0

Updates cloud.google.com/go/auth from 0.23.1 to 0.23.2

Release notes

Sourced from cloud.google.com/go/auth's releases.

auth: v0.23.2

0.23.2 (2026-08-20)

Bug Fixes

  • auth: Eliminate timing race conditions in grpctransport otel tests (#20175) (#20382) (637505e)
Commits

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.23.0 to 1.23.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.23.1

1.23.1 (2026-08-27)

Other Changes

  • Upgraded dependencies.
Commits
  • d86ae78 Prep azcore for release (#27471)
  • 33dd768 [azwebpubsub] Fix GenerateClientAccessURL on the TokenCredential path (#27422)
  • a27ca57 Upgrade TypeSpec Go emitter dependencies (#27466)
  • af75eb0 [AutoPR sdk-resourcemanager/purestorageblock/armpurestorageblock]-generated-f...
  • 8dcff8c [AutoPR sdk-resourcemanager/redisenterprise/armredisenterprise]-generated-fro...
  • e4569f1 [AutoPR sdk-resourcemanager/chaos/armchaos]-generated-from-SDK Generation - G...
  • 7069bf8 [AutoPR sdk-resourcemanager/horizondb/armhorizondb]-generated-from-SDK Genera...
  • 5ceffce Bump gh-aw to v0.86.2 for mgmt review workflow (#27460)
  • 663b6ce Enhance azblob perf tests with OAuth, parallel setup, and profiling (#27324)
  • cf17431 [AutoPR sdk-resourcemanager/containerservice/armcontainerservice]-generated-f...
  • Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.14.0 to 1.14.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.14.1

1.14.1 (2026-08-27)

Other Changes

  • Upgraded dependencies
Commits
  • 920e79a Prep azidentity for release (#27473)
  • d86ae78 Prep azcore for release (#27471)
  • 33dd768 [azwebpubsub] Fix GenerateClientAccessURL on the TokenCredential path (#27422)
  • a27ca57 Upgrade TypeSpec Go emitter dependencies (#27466)
  • af75eb0 [AutoPR sdk-resourcemanager/purestorageblock/armpurestorageblock]-generated-f...
  • 8dcff8c [AutoPR sdk-resourcemanager/redisenterprise/armredisenterprise]-generated-fro...
  • e4569f1 [AutoPR sdk-resourcemanager/chaos/armchaos]-generated-from-SDK Generation - G...
  • 7069bf8 [AutoPR sdk-resourcemanager/horizondb/armhorizondb]-generated-from-SDK Genera...
  • 5ceffce Bump gh-aw to v0.86.2 for mgmt review workflow (#27460)
  • 663b6ce Enhance azblob perf tests with OAuth, parallel setup, and profiling (#27324)
  • Additional commits viewable in compare view

Updates github.com/IBM/sarama from 1.60.1 to 1.60.2

Release notes

Sourced from github.com/IBM/sarama's releases.

Version 1.60.2 (2026-08-24)

What's Changed

🐛 Fixes

📦 Dependency updates

🔧 Maintenance

New Contributors

Full Changelog: IBM/sarama@v1.60.1...v1.60.2

Commits
  • bff16a5 chore(ci): Update github/codeql-action action to v4.37.8
  • 32e4e30 chore(ci): Update registry.access.redhat.com/ubi9/ubi-minimal:9.8 Docker dige...
  • 872d9e1 chore(deps): update docker/setup-buildx-action action to v4.3.0
  • 249884c fix(deps): update module golang.org/x/net to v0.58.0
  • 4c1dc92 fix(deps): update module github.com/pierrec/lz4/v4 to v4.1.29
  • 4456862 fix(deps): update module github.com/stretchr/testify to v1.12.1
  • bc98b40 fix(consumer): repeat rejoin reason after KIP-394
  • 38661ce fix: correct JoinGroup v8 selection threshold to V3_2_0_0
  • b253385 test: reproduce JoinGroup v8 rejection for Config.Version 3.1.x
  • 1803679 chore(ci): bump golangci-lint to v2.13.1
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.37 to 1.33.1

Commits

Updates github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.44.6 to 1.46.1

Commits

Updates github.com/godror/godror from 0.51.0 to 0.51.4

Changelog

Sourced from github.com/godror/godror's changelog.

[v0.51.4]

Fixed

  • Add missing statementInnards.close in statement.closeNotLocking, which caused hanging sessions thus session buildup.
Commits
  • 5d2694b bump version
  • 1baef75 statement.Close: call statementInnards.Close
  • 5213b51 nicer conn.getOnInit (no pointer passing)
  • 6555853 Revert "Put back pooled session closing safeguard - but now only after lifeti...
  • d02eaf6 dsn: add IsZero to *Params
  • 5c3d436 Queue.DequeWithOptions: handle ORA-00942 (table not exist)
  • 26594e0 go fix
  • 475b337 Put back pooled session closing safeguard - but now only after lifetime reached
  • 394c6bb retract v0.51.1
  • 1fb7812 fix "ORA-00000: DPI-1018: array size of 0 is too small" introduced in 6197bb8...
  • Additional commits viewable in compare view

Updates github.com/microsoft/go-mssqldb from 1.10.0 to 1.11.0

Release notes

Sourced from github.com/microsoft/go-mssqldb's releases.

v1.11.0

1.11.0 (2026-08-23)

Features

  • add ADO.Net connection string synonyms (#374) (d72f750)

Bug Fixes

  • clarify NTLM URL encoding for URL DSNs (#378) (551d622)
  • close TCP connection on all connect() error paths (#367) (0e13fee)
  • isProc: add REVERT builtin command (#393) (31a9659)
  • prevent NTLM challenge out-of-bounds panic (DoS) (#411) (81df983)
  • prevent panic on overflowing PRELOGIN option offset and length (#415) (802d9f1)
  • prevent SQL Browser DAC response parsing panic (DoS) (#414) (bc4cbf2)
  • quote table name and ORDER columns in bulk copy (#416) (f925c53)
  • replace deprecated reflect.SliceHeader with unsafe.Slice (#366) (836048a), closes #272
  • return float64 for REAL columns in readFixedType (#381) (abddba8)
  • strip port from AKV URLs for AllowedLocations and endpoint (#369) (7fab98a)
  • types: cap initial PLP buffer allocation (#409) (f088291)

Performance Improvements

  • add comprehensive benchmark suite with CI regression detection (#376) (b935441)
  • fast path for pure ASCII decoding in CharsetToUTF8 (#431) (db51796)
Changelog

Sourced from github.com/microsoft/go-mssqldb's changelog.

1.11.0 (2026-08-23)

Features

  • add ADO.Net connection string synonyms (#374) (d72f750)

Bug Fixes

  • clarify NTLM URL encoding for URL DSNs (#378) (551d622)
  • close TCP connection on all connect() error paths (#367) (0e13fee)
  • isProc: add REVERT builtin command (#393) (31a9659)
  • prevent NTLM challenge out-of-bounds panic (DoS) (#411) (81df983)
  • prevent panic on overflowing PRELOGIN option offset and length (#415) (802d9f1)
  • prevent SQL Browser DAC response parsing panic (DoS) (#414) (bc4cbf2)
  • quote table name and ORDER columns in bulk copy (#416) (f925c53)
  • replace deprecated reflect.SliceHeader with unsafe.Slice (#366) (836048a), closes #272
  • return float64 for REAL columns in readFixedType (#381) (abddba8)
  • strip port from AKV URLs for AllowedLocations and endpoint (#369) (7fab98a)
  • types: cap initial PLP buffer allocation (#409) (f088291)

Performance Improvements

  • add comprehensive benchmark suite with CI regression detection (#376) (b935441)
  • fast path for pure ASCII decoding in CharsetToUTF8 (#431) (db51796)
Commits
  • ecf8560 chore(main): release 1.11.0 (#380)
  • 68c1f28 test: add TDS response fuzz harness and end-to-end target (layer 1/4) (#419)
  • 46b5c6a chore(deps): bump the golang-x group across 1 directory with 2 updates (#433)
  • 5e6cedb ci: run appveyor on SQL Server 2025 and drop the duplicate job (#436)
  • ae25ae5 ci: test the supported Go releases and drop the EOL toolchain pin (#439)
  • 6f21949 chore(deps): bump github.com/stretchr/testify in the testing group (#434)
  • 8bb55ef chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore (#432)
  • db51796 perf: fast path for pure ASCII decoding in CharsetToUTF8 (#431)
  • f925c53 fix: quote table name and ORDER columns in bulk copy (#416)
  • bc4cbf2 fix: prevent SQL Browser DAC response parsing panic (DoS) (#414)
  • Additional commits viewable in compare view

Updates go.mongodb.org/mongo-driver/v2 from 2.8.0 to 2.8.2

Release notes

Sourced from go.mongodb.org/mongo-driver/v2's releases.

MongoDB Go Driver 2.8.2

The MongoDB Go Driver Team is pleased to release version 2.8.2 of the official MongoDB Go Driver.

Release Highlights

[!WARNING] Driver versions v2.1.0 through v2.8.1 are affected by a security issue CVE-2026-81521 in Client.BulkWrite that is fixed in this release (v2.8.2). Users are encouraged to upgrade to this version as soon as possible.

This release addresses CVE-2026-81521, a security issue in calling Client.BulkWrite. A caller-controlled database name containing a period ('.') may be interpreted as a different namespace when forwarded to MongoDB. This could redirect operations to a database or collection other than the one intended by the application.

It also fixes a bug in Collection.BulkWrite where, for unordered bulk writes split across multiple batches, a write-concern error from an earlier batch could be non-deterministically silently dropped or replaced by subsequent batches. Now the operation will return the last non-nil writeConcern error, if one occured.

What's Changed

🐛 Fixed

Full Changelog: mongodb/mongo-go-driver@v2.8.1...v2.8.2

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. For issues with, questions about, or feedback for the Go Driver, please look into our support channels, including StackOverflow. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

MongoDB Go Driver 2.8.1

The MongoDB Go Driver Team is pleased to release version 2.8.1 of the official MongoDB Go Driver.

Release Highlights

This release fixes a bug where failed writes could look like they succeeded. If a write operation's first attempt failed with a NoWritesPerformed error label, the driver could return a nil/ErrNoDocuments result instead of the real failure, and the caller would end up decoding the server's error document as if it were a normal result. The bug has been fixed so the driver now surfaces the real server error, letting applications detect and retry the failure correctly.

What's Changed

🐛 Fixed

Full Changelog: mongodb/mongo-go-driver@v2.8.0...v2.8.1

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. For issues with, questions about, or feedback for the Go Driver, please look into our support channels, including StackOverflow. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

Commits
  • 1af6d00 BUMP v2.8.2
  • 2ccb9c0 Merge commit from fork
  • 0c032cb GODRIVER-4075 Return an error if there are invalid characters in the database...
  • faeba4a GODRIVER-4025 cherry-pick: Preserve the last non-nil WriteConcernError across...
  • 847433b BUMP v2.8.1
  • 1d6850a GODRIVER-4088 Return the server error when the first attempt fails with NoWri...
  • 6948126 GODRIVER-4064 Skip tests that fail due to SERVER-128517 (#2525)
  • 994762e GODRIVER-4026 [release/2.8] Use cmake<4.4 for libmongocrypt build. (#2487)
  • See full diff in compare view

Updates google.golang.org/api from 0.293.0 to 0.295.0

Release notes

Sourced from google.golang.org/api's releases.

v0.295.0

0.295.0 (2026-08-28)

Features

v0.294.0

0.294.0 (2026-08-26)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.295.0 (2026-08-28)

Features

0.294.0 (2026-08-26)

Features

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the go-minor-and-patch group across 1 directory wit…
65701b7 
…h 10 updates

Bumps the go-minor-and-patch group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/auth](https://github.com/googleapis/google-cloud-go) | `0.23.1` | `0.23.2` |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.23.0` | `1.23.1` |
| [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.14.0` | `1.14.1` |
| [github.com/IBM/sarama](https://github.com/IBM/sarama) | `1.60.1` | `1.60.2` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.37` | `1.33.1` |
| [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2) | `1.44.6` | `1.46.1` |
| [github.com/godror/godror](https://github.com/godror/godror) | `0.51.0` | `0.51.4` |
| [github.com/microsoft/go-mssqldb](https://github.com/microsoft/go-mssqldb) | `1.10.0` | `1.11.0` |
| [go.mongodb.org/mongo-driver/v2](https://github.com/mongodb/mongo-go-driver) | `2.8.0` | `2.8.2` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.293.0` | `0.295.0` |



Updates `cloud.google.com/go/auth` from 0.23.1 to 0.23.2
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@auth/v0.23.1...auth/v0.23.2)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.23.0 to 1.23.1
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.23.0...sdk/azcore/v1.23.1)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.14.0 to 1.14.1
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.14.0...sdk/azidentity/v1.14.1)

Updates `github.com/IBM/sarama` from 1.60.1 to 1.60.2
- [Release notes](https://github.com/IBM/sarama/releases)
- [Changelog](https://github.com/IBM/sarama/blob/main/CHANGELOG.md)
- [Commits](IBM/sarama@v1.60.1...v1.60.2)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.37 to 1.33.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.37...config/v1.33.1)

Updates `github.com/aws/aws-sdk-go-v2/service/secretsmanager` from 1.44.6 to 1.46.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ssm/v1.44.6...service/ivs/v1.46.1)

Updates `github.com/godror/godror` from 0.51.0 to 0.51.4
- [Changelog](https://github.com/godror/godror/blob/main/CHANGELOG.md)
- [Commits](godror/godror@v0.51.0...v0.51.4)

Updates `github.com/microsoft/go-mssqldb` from 1.10.0 to 1.11.0
- [Release notes](https://github.com/microsoft/go-mssqldb/releases)
- [Changelog](https://github.com/microsoft/go-mssqldb/blob/main/CHANGELOG.md)
- [Commits](microsoft/go-mssqldb@v1.10.0...v1.11.0)

Updates `go.mongodb.org/mongo-driver/v2` from 2.8.0 to 2.8.2
- [Release notes](https://github.com/mongodb/mongo-go-driver/releases)
- [Commits](mongodb/mongo-go-driver@v2.8.0...v2.8.2)

Updates `google.golang.org/api` from 0.293.0 to 0.295.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.293.0...v0.295.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/auth
  dependency-version: 0.23.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: github.com/IBM/sarama
  dependency-version: 1.60.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/secretsmanager
  dependency-version: 1.46.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/godror/godror
  dependency-version: 0.51.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: github.com/microsoft/go-mssqldb
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: go.mongodb.org/mongo-driver/v2
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: google.golang.org/api
  dependency-version: 0.295.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants