Skip to content

Bump the all-deps group across 1 directory with 12 updates - #1400

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/all-deps-ca149b52dc
Closed

Bump the all-deps group across 1 directory with 12 updates#1400
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/all-deps-ca149b52dc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all-deps group with 12 updates in the / directory:

Package From To
github.com/apache/beam/sdks/v2 2.73.0 2.76.0
github.com/go-sql-driver/mysql 1.10.0 1.10.1
github.com/google/trillian 1.7.3 1.8.0
github.com/mattn/go-sqlite3 1.14.44 1.14.52
github.com/transparency-dev/formats 0.1.0 0.1.1
github.com/usbarmory/tamago 1.26.3 1.27.1
golang.org/x/crypto 0.55.0 0.57.0
golang.org/x/mod 0.38.0 0.41.0
golang.org/x/oauth2 0.36.0 0.37.0
golang.org/x/sync 0.22.0 0.23.0
google.golang.org/grpc 1.83.2 1.84.0
google.golang.org/protobuf 1.36.11 1.36.12

Updates github.com/apache/beam/sdks/v2 from 2.73.0 to 2.76.0

Release notes

Sourced from github.com/apache/beam/sdks/v2's releases.

Beam 2.76.0 release

We are happy to present the new 2.76.0 release of Beam. This release includes both improvements and new functionality. See the download page for this release.

For more information on changes in 2.76.0, check out the detailed release notes.

Highlights

  • Added a full Iceberg batch and streaming changelog source (CDC) (#38831)
  • (Java) Added per-element OpenTelemetry trace propagation across stages in the Dataflow Streaming Runner. Enable it with --experiments=enable_otel_defaults,element_metadata_supported,disable_portable_worker. Cloud Trace incurs additional cost. (#33176)
  • (Java) Added OpenTelemetry header propagation support for both reads and writes in KafkaIO and PubSubIO. (#33176)
  • (Java) Added OpenTelemetry tracing support for SpannerIO change streams (#33176)
  • (Python) JmsIO (IBM MQ, ActiveMQ, and other providers) is now supported in Python via cross-language (#30716).

I/Os

  • Upgraded Iceberg dependency to 1.11.0 (Java) (#38925).
  • Add ArrowFlight IO (Java) (#20116).
  • Added a Delta Lake batch changelog source (CDC) (#39492)

New Features / Improvements

  • Added GroupIntoBatches transform and the standard beam:coder:sharded_key:v1 coder to the Go SDK, along with beam.Coder.IsDeterministic, beam.PCollection.WindowingStrategy, and coder.RegisterDeterministicCoder for opt-in deterministic custom coders (Go) (#19868).
  • TriggerStateMachineRunner changes from BitSetCoder to SentinelBitSetCoder to encode finished bitset. SentinelBitSetCoder and BitSetCoder are state compatible. Both coders can decode encoded bytes from the other coder (#38139).
  • (Python) Removed the envoy-data-plane (and transitive betterproto) dependency; EnvoyRateLimiter now uses a small vendored protobuf definition instead, resolving dependency conflicts for downstream projects (#37854).
  • (Java) Supported acknowledge mode for JmsIO (#39253).
  • (Python) Staged files directory is now automatically added to sys.path on the Python SDK worker at startup. This makes Python files provided via the '--files_to_stage' pipeline option importable in the pipeline code and makes it easier to initialize Python SDK harness at startup via the --beam_plugins pipeline option. For more information, see the Staging Individual Files section of the dependency management docs. This behavior can be disabled by passing the '--experiments=no_staged_dir_in_sys_path' pipeline option (#39431).
  • (Python) Added equal_to_approx, an assert_that matcher that compares numeric pipeline outputs with a configurable tolerance (#18028).
  • (Python) Timestamp now supports variable subsecond precision, up to nanoseconds. The portable beam:logical_type:timestamp:v1 logical type now maps to Python's Timestamp (#39344).
  • (Python) Added UnboundedSource, an interface for reading an infinite stream of records with checkpointing, watermark reporting, and bundle finalization. Read one with beam.io.Read (#19137).
  • (Python) Added Watch, a transform that polls a growing set of outputs for each input element, deduplicates outputs across poll rounds, and stops per a user-supplied termination condition (#21521).
  • (Python) Added support to analyze core dumps created after python worker segmentation faults with pystack (or gdb if installed) using the --profiler_agent=coredump pipeline option. (#39484).
  • (Python) Added Sample.Any, the Python equivalent of Java's Sample.any, which returns up to n arbitrary elements from a PCollection (#18552).

Breaking Changes

  • (Python) Removed google-perftools from the SDK container images. Users who wish to use --profiler_agent=tcmalloc should install google-perftools APT package in their custom container images separately (#39323).

... (truncated)

Changelog

Sourced from github.com/apache/beam/sdks/v2's changelog.

[2.76.0] - 2026-08-31

Highlights

  • Added a full Iceberg batch and streaming changelog source (CDC) (#38831)
  • (Java) Added per-element OpenTelemetry trace propagation across stages in the Dataflow Streaming Runner. Enable it with --experiments=enable_otel_defaults,element_metadata_supported,disable_portable_worker. Cloud Trace incurs additional cost. (#33176)
  • (Java) Added OpenTelemetry header propagation support for both reads and writes in KafkaIO and PubSubIO. (#33176)
  • (Java) Added OpenTelemetry tracing support for SpannerIO change streams (#33176)
  • (Python) JmsIO (IBM MQ, ActiveMQ, and other providers) is now supported in Python via cross-language (#30716).

I/Os

  • Upgraded Iceberg dependency to 1.11.0 (Java) (#38925).
  • Add ArrowFlight IO (Java) (#20116).
  • Added a Delta Lake batch changelog source (CDC) (#39492)

New Features / Improvements

  • Added GroupIntoBatches transform and the standard beam:coder:sharded_key:v1 coder to the Go SDK, along with beam.Coder.IsDeterministic, beam.PCollection.WindowingStrategy, and coder.RegisterDeterministicCoder for opt-in deterministic custom coders (Go) (#19868).
  • TriggerStateMachineRunner changes from BitSetCoder to SentinelBitSetCoder to encode finished bitset. SentinelBitSetCoder and BitSetCoder are state compatible. Both coders can decode encoded bytes from the other coder (#38139).
  • (Python) Removed the envoy-data-plane (and transitive betterproto) dependency; EnvoyRateLimiter now uses a small vendored protobuf definition instead, resolving dependency conflicts for downstream projects (#37854).
  • (Java) Supported acknowledge mode for JmsIO (#39253).
  • (Python) Staged files directory is now automatically added to sys.path on the Python SDK worker at startup. This makes Python files provided via the '--files_to_stage' pipeline option importable in the pipeline code and makes it easier to initialize Python SDK harness at startup via the --beam_plugins pipeline option. For more information, see the Staging Individual Files section of the dependency management docs. This behavior can be disabled by passing the '--experiments=no_staged_dir_in_sys_path' pipeline option (#39431).
  • (Python) Added equal_to_approx, an assert_that matcher that compares numeric pipeline outputs with a configurable tolerance (#18028).
  • (Python) Timestamp now supports variable subsecond precision, up to nanoseconds. The portable beam:logical_type:timestamp:v1 logical type now maps to Python's Timestamp (#39344).
  • (Python) Added UnboundedSource, an interface for reading an infinite stream of records with checkpointing, watermark reporting, and bundle finalization. Read one with beam.io.Read (#19137).
  • (Python) Added Watch, a transform that polls a growing set of outputs for each input element, deduplicates outputs across poll rounds, and stops per a user-supplied termination condition (#21521).
  • (Python) Added support to analyze core dumps created after python worker segmentation faults with pystack (or gdb if installed) using the --profiler_agent=coredump pipeline option. (#39484).

Breaking Changes

  • (Python) Removed google-perftools from the SDK container images. Users who wish to use --profiler_agent=tcmalloc should install google-perftools APT package in their custom container images separately (#39323).

  • [IcebergIO] Reading a timestamptz column will now return a Timestamp.MICROS Beam logical type to preserve microseconds (the old Beam Schema.FieldType#DATETIME primitive type truncates past milliseconds). This may break the following use cases when a timestamptz column is present:

    • Existing streaming read pipelines.
    • Managed Iceberg batch reads when upgraded from an older SDK.
    • Python reads.

    Use pipeline option --updateCompatibilityVersion=2.75.0 (or any older version) to keep the old behavior (#39344).

... (truncated)

Commits

Updates github.com/go-sql-driver/mysql from 1.10.0 to 1.10.1

Release notes

Sourced from github.com/go-sql-driver/mysql's releases.

v1.10.1

What's Changed

New Contributors

Full Changelog: go-sql-driver/mysql@v1.10.0...v1.10.1

Changelog

Sourced from github.com/go-sql-driver/mysql's changelog.

v1.10.1 (2026-09-02)

  • Fix Config.FormatDSN() dropping Addr when Net is empty. It now uses the default tcp network so configs with only Addr round-trip correctly. (#1770)

  • Fix typed-nil json.RawMessage with interpolateParams=true being interpolated as an empty string. It is now interpolated as SQL NULL, matching server-side prepared statements. (#1782)

  • Add MariaDB 11.8 and 12.3 to the test matrix. (#1774)

Commits
  • 7ca26e8 release v1.10.1 (#1801)
  • 87dcb95 doc: clarify timeTruncate units and when to use it (#1792)
  • 1d9c421 codeql: remove custom workflow (#1799)
  • 532b8e5 Bump the all-dependencies group with 3 updates (#1796)
  • fe209cc Bump the all-dependencies group with 5 updates (#1795)
  • 03d76c7 Bump the all-dependencies group with 3 updates (#1794)
  • c426bd9 Bump the all-dependencies group across 1 directory with 5 updates (#1791)
  • 416cd99 Bump actions/setup-go from 6.5.0 to 7.0.0 in the all-dependencies group (#1783)
  • b96d415 Interpolate typed-nil json.RawMessage as NULL (#1782)
  • dec193d Bump the all-dependencies group with 3 updates (#1780)
  • Additional commits viewable in compare view

Updates github.com/google/trillian from 1.7.3 to 1.8.0

Release notes

Sourced from github.com/google/trillian's releases.

v1.8.0

API

Features

Claimant Model

Fixes

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from github.com/google/trillian's changelog.

v1.8.0

  • Recommended go version for development: 1.26
  • Bump golang to 1.26, golangci-lint to v2.10.1.
  • Filter mastership election event watching by lease name
  • Remove OpenCensus tracing support and associated instrumentation hooks by @​phb
    • Removed internal tracing packages (monitoring/trace.go and monitoring/opencensus/), command-line --tracing flags, and spanFor / StartSpan instrumentation across server, tree, and storage entrypoints.
  • Allow unencrypted PEM private key files by @​JasonPowr
    • ReadPrivateKeyFile and FromProto (via PEMKeyFile) now accept an empty password, treating the key as unencrypted. Previously, an empty password was rejected with an error.
  • Replace deprecated golang.org/x/crypto/ed25519 with stdlib crypto/ed25519 by @​JasonPowr
Commits
  • 0362d55 CHANGELOG.md update ahead of v1.8 (#3933)
  • 0d6fa8f Bump the go-deps group across 1 directory with 20 updates AND bump go to 1.26...
  • 5061cfc Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc (#3927)
  • 999a06b Remove tracing support, which drops aws SDK and prometheus deps. (#3912)
  • e9b1644 Bump google.golang.org/grpc from 1.83.1 to 1.83.2 (#3923)
  • 70e3cce Bump the docker-deps group across 6 directories with 5 updates (#3918)
  • 87ef5b5 Bump the github-actions-deps group with 4 updates (#3921)
  • c537cd6 Bump google.golang.org/grpc from 1.82.1 to 1.83.1 (#3922)
  • 02b853b Bump the github-actions-deps group across 1 directory with 7 updates (#3910)
  • 416e64c offer batching for mysql quota provider (#3917)
  • Additional commits viewable in compare view

Updates github.com/mattn/go-sqlite3 from 1.14.44 to 1.14.52

Release notes

Sourced from github.com/mattn/go-sqlite3's releases.

1.14.52

What's Changed

Full Changelog: mattn/go-sqlite3@v1.14.51...v1.14.52

1.14.51

What's Changed

New Contributors

Full Changelog: mattn/go-sqlite3@v1.14.50...v1.14.51

1.14.50

What's Changed

New Contributors

Full Changelog: mattn/go-sqlite3@v1.14.49...v1.14.50

1.14.49

What's Changed

... (truncated)

Commits
  • b0be46f Merge pull request #1454 from mattn/fix-stmt-cache-probe-cost
  • c8212b8 Replace schema probe with eager first step for cached statements
  • d7f5da7 Merge pull request #1452 from mattn/fix-stmt-cache-schema-change
  • 6428cad Merge pull request #1444 from bradengroom/codex/efficient-query-cancellation
  • be93f7a Merge pull request #1453 from mattn/fix-handle-map-quadratic
  • 5b285a1 Merge branch 'master' into codex/efficient-query-cancellation
  • 2294cd9 Replace copy-on-write handle map with sync.Map
  • 5341cee Gate cache on runtime version and skip probing in transactions
  • c7ed68d Flush statement cache when the schema changes
  • 6507893 Merge pull request #1367 from kberov/typos
  • Additional commits viewable in compare view

Updates github.com/transparency-dev/formats from 0.1.0 to 0.1.1

Release notes

Sourced from github.com/transparency-dev/formats's releases.

v0.1.1

What's Changed

Deps

New Contributors

Full Changelog: transparency-dev/formats@v0.1.0...v0.1.1

Commits
  • f8d9ded Remove unused RSA 6962 support (#256)
  • 17c221a 🌱(deps): Bump golang.org/x/crypto (#254)
  • 157a44d 🌱(deps): Bump the all-gha-deps group with 3 updates (#255)
  • a97bebf 🌱(deps): Bump github/codeql-action in the all-gha-deps group (#253)
  • 909dc91 🌱(deps): Bump github/codeql-action in the all-gha-deps group (#252)
  • dc73bfb 🌱(deps): Bump the all-go-deps group with 2 updates (#251)
  • 1e3a4ad Improve generate func name (#250)
  • 7f7fdcf Add func to generate MLDSA key pairs (#249)
  • 8446089 🌱(deps): Bump github/codeql-action in the all-gha-deps group (#248)
  • e6e205e Add MLDSA-44 cosigner implementation (#247)
  • Additional commits viewable in compare view

Updates github.com/usbarmory/tamago from 1.26.3 to 1.27.1

Release notes

Sourced from github.com/usbarmory/tamago's releases.

v1.27.1

This release applies the following contributed bug fixes:

Full Changelog: usbarmory/tamago@v1.27.0...v1.27.1

This release requires GOOS=tamago support in the Go distribution with tamago-go1.27.0 or later releases, it has been tested with tamago-go1.27.1.

v1.27.0

This release aligns the tamago library to the new runtime API introduced in tamago-go1.27.0.

Major changes for tamago package API:

Major changes for tamago package internals:

Full Changelog: usbarmory/tamago@v1.26.6...v1.27.0

This release requires GOOS=tamago support in the Go distribution with tamago-go1.27.0 or later releases.

v1.26.6

This release features:

  • support for a new architecture and related SoC: LoongArch 64-bit on Loongson 3A5000/3A6000 + LS7A
  • major improvements to Microchip LAN969x support
  • transition of Ethernet PHY drivers to its own phy package

Major changes for tamago package API on loong64 platforms:

Major changes for tamago package API to improve Microchip support:

@dependabot
Bump the all-deps group across 1 directory with 12 updates
5080819 
Bumps the all-deps group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/apache/beam/sdks/v2](https://github.com/apache/beam) | `2.73.0` | `2.76.0` |
| [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) | `1.10.0` | `1.10.1` |
| [github.com/google/trillian](https://github.com/google/trillian) | `1.7.3` | `1.8.0` |
| [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.44` | `1.14.52` |
| [github.com/transparency-dev/formats](https://github.com/transparency-dev/formats) | `0.1.0` | `0.1.1` |
| [github.com/usbarmory/tamago](https://github.com/usbarmory/tamago) | `1.26.3` | `1.27.1` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.55.0` | `0.57.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.38.0` | `0.41.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.36.0` | `0.37.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.22.0` | `0.23.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.2` | `1.84.0` |
| google.golang.org/protobuf | `1.36.11` | `1.36.12` |



Updates `github.com/apache/beam/sdks/v2` from 2.73.0 to 2.76.0
- [Release notes](https://github.com/apache/beam/releases)
- [Changelog](https://github.com/apache/beam/blob/master/CHANGES.md)
- [Commits](apache/beam@v2.73.0...v2.76.0)

Updates `github.com/go-sql-driver/mysql` from 1.10.0 to 1.10.1
- [Release notes](https://github.com/go-sql-driver/mysql/releases)
- [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md)
- [Commits](go-sql-driver/mysql@v1.10.0...v1.10.1)

Updates `github.com/google/trillian` from 1.7.3 to 1.8.0
- [Release notes](https://github.com/google/trillian/releases)
- [Changelog](https://github.com/google/trillian/blob/master/CHANGELOG.md)
- [Commits](google/trillian@v1.7.3...v1.8.0)

Updates `github.com/mattn/go-sqlite3` from 1.14.44 to 1.14.52
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](mattn/go-sqlite3@v1.14.44...v1.14.52)

Updates `github.com/transparency-dev/formats` from 0.1.0 to 0.1.1
- [Release notes](https://github.com/transparency-dev/formats/releases)
- [Commits](transparency-dev/formats@v0.1.0...v0.1.1)

Updates `github.com/usbarmory/tamago` from 1.26.3 to 1.27.1
- [Release notes](https://github.com/usbarmory/tamago/releases)
- [Commits](usbarmory/tamago@v1.26.3...v1.27.1)

Updates `golang.org/x/crypto` from 0.55.0 to 0.57.0
- [Commits](golang/crypto@v0.55.0...v0.57.0)

Updates `golang.org/x/mod` from 0.38.0 to 0.41.0
- [Commits](golang/mod@v0.38.0...v0.41.0)

Updates `golang.org/x/oauth2` from 0.36.0 to 0.37.0
- [Commits](golang/oauth2@v0.36.0...v0.37.0)

Updates `golang.org/x/sync` from 0.22.0 to 0.23.0
- [Commits](golang/sync@v0.22.0...v0.23.0)

Updates `google.golang.org/grpc` from 1.83.2 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.2...v1.84.0)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

---
updated-dependencies:
- dependency-name: github.com/apache/beam/sdks/v2
  dependency-version: 2.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: github.com/go-sql-driver/mysql
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: github.com/google/trillian
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: github.com/mattn/go-sqlite3
  dependency-version: 1.14.52
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: github.com/transparency-dev/formats
  dependency-version: 0.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: github.com/usbarmory/tamago
  dependency-version: 1.27.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: golang.org/x/crypto
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: golang.org/x/mod
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: golang.org/x/sync
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: google.golang.org/grpc
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 1, 2026 04:47
@dependabot
dependabot Bot requested review from AlCutter and removed request for a team October 1, 2026 04:47
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 1, 2026
@dpebot

dpebot commented Oct 1, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@dependabot @github

dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 1, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/all-deps-ca149b52dc branch November 1, 2026 04:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@AlCutter AlCutter Awaiting requested review from AlCutter AlCutter is a code owner automatically assigned from google/trillian-examples-reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@dpebot