Skip to content

Bump the go-deps group across 1 directory with 6 updates - #941

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-8692b26f18
Open

Bump the go-deps group across 1 directory with 6 updates#941
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-8692b26f18

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-deps group with 6 updates in the / directory:

Package From To
github.com/dgraph-io/badger/v4 4.9.1 4.9.6
github.com/elazarl/goproxy 1.8.4 1.9.2
github.com/fluxcd/pkg/auth 0.57.0 0.59.0
github.com/fluxcd/pkg/runtime 0.112.0 0.114.0
github.com/go-logr/logr 1.4.3 1.4.4
github.com/onsi/gomega 1.43.0 1.44.0

Updates github.com/dgraph-io/badger/v4 from 4.9.1 to 4.9.6

Release notes

Sourced from github.com/dgraph-io/badger/v4's releases.

v4.9.6

What's Changed

Full Changelog: dgraph-io/badger@v4.9.5...v4.9.6

v4.9.5

What's Changed

New Contributors

Full Changelog: dgraph-io/badger@v4.9.4...v4.9.5

v4.9.4

What's Changed

New Contributors

Full Changelog: dgraph-io/badger@v4.9.3...v4.9.4

v4.9.3

What's Changed

New Contributors

Full Changelog: dgraph-io/badger@v4.9.2...v4.9.3

v4.9.2

What's Changed

... (truncated)

Changelog

Sourced from github.com/dgraph-io/badger/v4's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog.

[4.9.4] - 2026-07-08

Fixed

  • fix(db): don't drop acknowledged writes during DropPrefix/DropAll (#2313)
  • fix: fix an issue where the compactor causes previously deleted data to reappear (#2278)

Docs

  • docs(changelog): backfill 4.9.2, add 4.9.3, fix 4.9.0 compare link (#2311)

Full Changelog: dgraph-io/badger@v4.9.3...v4.9.4

[4.9.3] - 2026-07-06

Performance

  • perf(db): signal-based L0 write backpressure (replace busy-sleeps) (#2308)

Fixed

  • fix(vlog): prevent deleted key from reappearing after value-log GC (#2310)

Docs

  • docs: update CONTRIBUTING (TOC, code style, license header, master→main) (#2300)

CI

  • chore(ci): add stale Action (#2302)
  • ci: keep required checks green on docs-only PRs (#2301)

Full Changelog: dgraph-io/badger@v4.9.2...v4.9.3

[4.9.2] - 2026-06-09

Fixed

  • fix: Prevent NPE on sync with inmemory DB (#2264)
  • fix: read only user should be able to open db on ReadOnly mode (#2268)
  • fix(compaction): clamp baseLevel to >=1 to prevent L0->L0 panic on large LSM trees (#2296)

Performance

... (truncated)

Commits
  • fbd8d2e fix(compaction): restore size-ratio base level selection, clamped to the firs...
  • 21c0bc6 fix: prevent nil deref when reading in-memory tables (#2316)
  • 4292e70 chore(deps): bump go.opentelemetry.io/otel to v1.41.0 (CVE-2026-29181) (#2323)
  • 0a02e66 ci: test PR's badger code against dgraph instead of main (#2320)
  • 9b0ef41 chore: prepare for release v4.9.4 (#2314)
  • bcef113 fix: fix an issue where the compactor causes previously deleted data to reapp...
  • 7df4b2f fix(db): don't drop acknowledged writes during DropPrefix/DropAll (#2313)
  • 45d5bd1 docs(changelog): backfill 4.9.2, add 4.9.3, fix 4.9.0 compare link (#2311)
  • c3489dc perf(db): signal-based L0 write backpressure (replace busy-sleeps) (#2308)
  • 34dba21 fix(vlog): prevent deleted key from reappearing after value-log GC (#2310)
  • Additional commits viewable in compare view

Updates github.com/elazarl/goproxy from 1.8.4 to 1.9.2

Release notes

Sourced from github.com/elazarl/goproxy's releases.

v1.9.2

What's Changed

New Contributors

Full Changelog: elazarl/goproxy@v1.9.1...v1.9.2

v1.9.1

What's Changed

New Contributors

Full Changelog: elazarl/goproxy@v1.9.0...v1.9.1

v1.9.0: HTTP/2 MITM Full Support

What's Changed

Full Changelog: elazarl/goproxy@v1.8.6...v1.9.0

Highlights & Acknowledgements

  • HTTP/2 MITM Support: This release introduces native support for inspecting and manipulating HTTP/2 traffic within GoProxy's MITM functionality. A special thanks to the team at @​LumiaSecurity (including @​omriza for the review) for supporting the development of these HTTP/2 MITM features and contributing to this major enhancement. Achieving full HTTP/2 MITM capability represents a huge milestone for GoProxy, taking our library to the next level for whoever needs it. To enable it, make sure that AllowHTTP2 is set to true in the proxy configuration.

⚠️ Possible Breaking Change

  • Previously there was an incomplete implementation of HTTP/2 inside the h2.go file, with an exported H2Transport struct. Probably no one was using it, but if you were, be careful that in this release it has been removed to create the full HTTP/2 MITM implementation.

v1.8.6

What's Changed

New Contributors

... (truncated)

Commits
  • a05e922 Forward buffered client bytes when starting MITM WebSocket relay (#805)
  • e24f2c7 Fix: prevent panic on malformed URL during MITM (#809)
  • 0108e0f Merge pull request #807 from haimingZZ/fix/whether-typos
  • ab155fe docs: fix typo 'wether' -> 'whether' in dispatcher.go comments
  • e540bd6 fix(mitm): never frame bodiless responses as chunked (#797)
  • 2b17647 Echo client HTTP version in CONNECT tunnel reply (#802) (#804)
  • 4c85e93 Fix: normalize req.URL.Host in MITM by prioritizing inner Host header (#799)
  • 6225cd3 Use Go standard library to check port (#795)
  • 5e44068 HTTP/2 MITM Full Support (#785)
  • a4bf432 Stream MITM response bodies (#794)
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/auth from 0.57.0 to 0.59.0

Commits
  • cde06a5 Merge pull request #1079 from fluxcd/kube-v0.35.0
  • 21a1946 auth: Fix Azure auth test for China and US Gov clouds
  • 125d607 Prepare for release
  • 4f26e76 Update dependencies to Kubernetes v0.35.0
  • 98667f8 Merge pull request #1069 from fluxcd/helm-4.1
  • 2aea89f Upgrade Helm to v4.1.0
  • 4895944 Merge pull request #1077 from fluxcd/ssa-custom-stage
  • 8a98478 ssa: introduce custom apply stage
  • 2818265 Merge pull request #1076 from fluxcd/gh-app-owner-helpers
  • b5e6bdd Prepare for release
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/runtime from 0.112.0 to 0.114.0

Commits
  • a1797f9 Merge pull request #1299 from fluxcd/release-main
  • 2240f6e Prepare for release
  • c8ffebb Merge pull request #1296 from Erik-Schuetze/githubapp-client-id
  • 7446dc3 Add githubAppClientID as an alternative to githubAppID
  • fc29ca0 Merge pull request #1293 from fluxcd/release-main
  • 98725a2 Prepare for release
  • 1e50081 Merge pull request #1144 from adri1197/event-api
  • 46f413f Migrate event recorder to events/v1 API
  • 46433b8 Merge pull request #1298 from dipti-pai/kustomize-substitute-with-vars
  • 56fb7e5 kustomize: add ContextWithSecretVarsCollector for LoadVariables
  • Additional commits viewable in compare view

Updates github.com/go-logr/logr from 1.4.3 to 1.4.4

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.4

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

Commits
  • 96a9aba Fix lint
  • 51c6302 Better implementation of pointer recursion checking
  • c667114 funcr: Handle and test recursive values
  • f7ffadb Add benchmark for pointer args
  • e2a3c8e funcr: bound slog.Group nesting depth to prevent stack overflow
  • 2886d2b build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
  • 0b40896 build(deps): bump github/codeql-action/upload-sarif
  • 77f671b Bump to Go 1.26
  • cce283f build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
  • 3832a11 build(deps): bump github/codeql-action/upload-sarif
  • Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.43.0 to 1.44.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.44.0

Fixes

  • BeNumerically compares signed and unsigned integers by value: -1 no longer equals uint64(math.MaxUint64) and uint(5) is now greater than -3 (#925) [26e3c6b]
  • BeNumerically("~") no longer overflows when computing the distance between extreme integers (#928) [1955764]
  • BeNumerically("==", x, threshold) now honors the threshold for floats, as it already did for integers (#927) [10e2aca]
  • HaveKeyWithValue succeeds if any key accepted by the key matcher has a matching value, rather than depending on map iteration order (#929) [ffc577a]
  • HaveKey and HaveKeyWithValue treat key and value matcher errors like ContainElement does: a match wins, and an error is only reported when nothing matches (#926) [dc91598]
  • MatchJSON no longer treats numbers too large for a float64 as equal to one another (#930) [9d619a5]
  • MatchJSON compares integers beyond ±2^53 exactly, so neighboring large integers (e.g. IDs) no longer match; all other numbers are still compared as float64s (#931) [8ef1aa7, 630fe12]
  • HaveExactElements reports missing or extra elements that start at index 0, and reports the first extra element's index rather than the last (#934) [af1b777]
  • MatchYAML compares every document in a multi-document stream rather than only the first; empty documents (e.g. a leading or trailing ---) are ignored (#933) [2773796]
  • MatchXML ignores namespace prefixes: elements and attributes are compared by namespace URI, and the URIs declared on each element must match whatever prefix they are bound to (#932) [c0dbd89, 2565350]

v1.43.1

Maintenance

  • Update go.yaml.in/yaml/v3 to v3.0.5 [d547015]
  • Releases are now cut by a GitHub Actions workflow (Actions -> Release -> Run workflow) rather than by hand, with changelog entries collected under ## Unreleased as the work happens. Releases still ship the stripped-down tree on master-lite - tests removed and Ginkgo dropped from go.mod - and the workflow now builds it and checks it on every push. See RELEASING.md. [e9dc84d]
Changelog

Sourced from github.com/onsi/gomega's changelog.

1.44.0

Fixes

  • BeNumerically compares signed and unsigned integers by value: -1 no longer equals uint64(math.MaxUint64) and uint(5) is now greater than -3 (#925) [26e3c6b]
  • BeNumerically("~") no longer overflows when computing the distance between extreme integers (#928) [1955764]
  • BeNumerically("==", x, threshold) now honors the threshold for floats, as it already did for integers (#927) [10e2aca]
  • HaveKeyWithValue succeeds if any key accepted by the key matcher has a matching value, rather than depending on map iteration order (#929) [ffc577a]
  • HaveKey and HaveKeyWithValue treat key and value matcher errors like ContainElement does: a match wins, and an error is only reported when nothing matches (#926) [dc91598]
  • MatchJSON no longer treats numbers too large for a float64 as equal to one another (#930) [9d619a5]
  • MatchJSON compares integers beyond ±2^53 exactly, so neighboring large integers (e.g. IDs) no longer match; all other numbers are still compared as float64s (#931) [8ef1aa7, 630fe12]
  • HaveExactElements reports missing or extra elements that start at index 0, and reports the first extra element's index rather than the last (#934) [af1b777]
  • MatchYAML compares every document in a multi-document stream rather than only the first; empty documents (e.g. a leading or trailing ---) are ignored (#933) [2773796]
  • MatchXML ignores namespace prefixes: elements and attributes are compared by namespace URI, and the URIs declared on each element must match whatever prefix they are bound to (#932) [c0dbd89, 2565350]

1.43.1

Maintenance

  • Update go.yaml.in/yaml/v3 to v3.0.5 [d547015]
  • Releases are now cut by a GitHub Actions workflow (Actions -> Release -> Run workflow) rather than by hand, with changelog entries collected under ## Unreleased as the work happens. Releases still ship the stripped-down tree on master-lite - tests removed and Ginkgo dropped from go.mod - and the workflow now builds it and checks it on every push. See RELEASING.md. [e9dc84d]
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the go-deps group across 1 directory with 6 updates
d73ac86 
Bumps the go-deps group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/dgraph-io/badger/v4](https://github.com/dgraph-io/badger) | `4.9.1` | `4.9.6` |
| [github.com/elazarl/goproxy](https://github.com/elazarl/goproxy) | `1.8.4` | `1.9.2` |
| [github.com/fluxcd/pkg/auth](https://github.com/fluxcd/pkg) | `0.57.0` | `0.59.0` |
| [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) | `0.112.0` | `0.114.0` |
| [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.3` | `1.4.4` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.43.0` | `1.44.0` |



Updates `github.com/dgraph-io/badger/v4` from 4.9.1 to 4.9.6
- [Release notes](https://github.com/dgraph-io/badger/releases)
- [Changelog](https://github.com/dgraph-io/badger/blob/main/CHANGELOG.md)
- [Commits](dgraph-io/badger@v4.9.1...v4.9.6)

Updates `github.com/elazarl/goproxy` from 1.8.4 to 1.9.2
- [Release notes](https://github.com/elazarl/goproxy/releases)
- [Commits](elazarl/goproxy@v1.8.4...v1.9.2)

Updates `github.com/fluxcd/pkg/auth` from 0.57.0 to 0.59.0
- [Commits](fluxcd/pkg@oci/v0.57.0...oci/v0.59.0)

Updates `github.com/fluxcd/pkg/runtime` from 0.112.0 to 0.114.0
- [Commits](fluxcd/pkg@runtime/v0.112.0...runtime/v0.114.0)

Updates `github.com/go-logr/logr` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](go-logr/logr@v1.4.3...v1.4.4)

Updates `github.com/onsi/gomega` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.43.0...v1.44.0)

---
updated-dependencies:
- dependency-name: github.com/dgraph-io/badger/v4
  dependency-version: 4.9.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/elazarl/goproxy
  dependency-version: 1.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/auth
  dependency-version: 0.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/runtime
  dependency-version: 0.114.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/go-logr/logr
  dependency-version: 1.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency label Oct 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants