Bump the all-deps group across 1 directory with 13 updates by dependabot[bot] · Pull Request #1403 · google/trillian-examples

dependabot · 2026-11-01T04:43:54Z

Bumps the all-deps group with 13 updates in the / directory:

Package	From	To
github.com/apache/beam/sdks/v2	`2.73.0`	`2.77.0`
github.com/go-sql-driver/mysql	`1.10.0`	`1.10.1`
github.com/google/certificate-transparency-go	`1.3.3`	`1.4.0`
github.com/google/trillian	`1.7.3`	`1.8.0`
github.com/mattn/go-sqlite3	`1.14.44`	`1.14.52`
github.com/transparency-dev/formats	`0.1.0`	`0.1.1`
github.com/usbarmory/tamago	`1.26.3`	`1.27.3`
golang.org/x/crypto	`0.55.0`	`0.57.0`
golang.org/x/mod	`0.38.0`	`0.41.0`
golang.org/x/oauth2	`0.36.0`	`0.37.0`
golang.org/x/sync	`0.22.0`	`0.23.0`
google.golang.org/grpc	`1.83.2`	`1.85.0`
google.golang.org/protobuf	`1.36.11`	`1.36.12`

Updates github.com/apache/beam/sdks/v2 from 2.73.0 to 2.77.0

Release notes

Sourced from github.com/apache/beam/sdks/v2's releases.

Beam 2.77.0 release

We are happy to present the new 2.77.0 release of Beam. This release includes both improvements and new functionality. See the download page for this release.

For more information on changes in 2.77.0, check out the detailed release notes.

Highlights

I/Os

Added schema_update_options to WriteToBigQuery file loads, allowing BigQuery load jobs to add nullable fields or relax required fields when appending data (Python) (#21141).

BigQueryIO now supports reading BigQuery Lakehouse runtime catalog (BigLake metastore) Iceberg tables with the Storage Read API, using 4-part project.catalog.namespace.table identifiers (or a TableReference with a composite catalog.namespace dataset id). Previously such references were silently mis-parsed (Java) (#39597) .

SolaceIO now supports reading and writing binary and text content data payload (Java) (#39875).

ClickHouseIO: support writing Decimal(P, S) / Decimal32/64/128/256 columns (Java) (#39840).

SolaceIO now supports reading and writing user properties (message metadata) (Java) (#40099).

[IcebergIO] AddFiles (IcebergAddFiles in YAML) can evolve the table schema before registering files, with schema_evolution_options, required_columns, incompatible_schema_handling and unverifiable_file_handling (Java/YAML, batch only) (#40144).

New Features / Improvements

(Java/Python) Watch can bound its deduplication state by event time, retiring an output key once the greatest emitted timestamp has moved more than the allowed lateness past it. Java adds Watch.growthOf(...).withTimestampCursor(). Python adds allowed_lateness for the existing timestamp_cursor option (#18459).

(Java) Spark Structured Streaming runner: stateful ParDo with state, timers, @RequiresTimeSortedInput and tagged outputs is now supported in batch mode (#39779).

(Python) Added support for Vertex AI Model Monitoring V2 in RunInference (#39738).

[Flink Runner] Added opt-in static round-robin split assignment for small bounded sources via the new sourceStaticSplitThresholdMb pipeline option. The default of 0 keeps the existing lazy pull-based assignment (#39873).

Added automatic caching of bounded, single-pane side-input views for classic Java Flink DataStream execution (#39866).

(Python) Added Sample.Any, the Python equivalent of Java's Sample.any, which returns up to n arbitrary elements from a PCollection (#18552).

Breaking Changes

Portable Java SDK now encodes SchemaCoders in a portable way (#34672).

Original custom Java coder encoding can still be obtained using StreamingOptions.setUpdateCompatibilityVersion("2.76") (#34672).

Fixes (#36496), (#30276), (#29245).

(Python) TensorRTEngineHandlerNumPy now requires TensorRT 10 or later. TensorRT 8.x is no longer supported, since TensorRT 10 removed the engine binding API the handler was written against (#36306).

Engines serialized by TensorRT 8.x must be rebuilt, as an engine can only be deserialized by the major version that built it.

TensorRT 10 and later require a GPU with compute capability 7.5 or higher, which excludes NVIDIA Pascal and Volta GPUs.

If dropping TensorRT 8.x support is a hard blocker for you, please comment on (#36306).

Bugfixes

(Java) Fixed the Spark runner firing processing-time timers in reverse timestamp order (#39824).

(Java) Fixed the Spark runner dropping the stored watermark of a streaming source with no update in a batch (#39822).

(Python) Fixed incorrect profiler options handling on portable runners (#39613).

(Java) KafkaIO dynamic reads no longer require the obsolete beam_fn_api experiment (#29998).

(Prism) Self-checkpointing splittable DoFns now resume after their requested delay instead of immediately, so polling SDFs no longer busy-spin (#39848).

(Java) MongoDbIO read splitting now preserves non-ObjectId _id types (e.g. string ids) instead of failing to parse the generated range filters (#39900).

(Go) Fixed GCS glob matching silently dropping objects when the glob pattern contains multi-byte characters (#39969).

(Python) Fixed TensorRTEngineHandlerNumPy failing with CUDA_ERROR_INVALID_VALUE on models with a single-element input or output tensor (#36306).

(Python) Fixed PickleCoder/_MemoizingPickleCoder.as_deterministic_coder() raising TypeError instead of returning a working deterministic coder (#28558).

... (truncated)

Changelog

Sourced from github.com/apache/beam/sdks/v2's changelog.

[2.77.0] - 2026-10-07

I/Os

Added schema_update_options to WriteToBigQuery file loads, allowing BigQuery load jobs to add nullable fields or relax required fields when appending data (Python) (#21141).

BigQueryIO now supports reading BigQuery Lakehouse runtime catalog (BigLake metastore) Iceberg tables with the Storage Read API, using 4-part project.catalog.namespace.table identifiers (or a TableReference with a composite catalog.namespace dataset id). Previously such references were silently mis-parsed (Java) (#39597) .

SolaceIO now supports reading and writing binary and text content data payload (Java) (#39875).

ClickHouseIO: support writing Decimal(P, S) / Decimal32/64/128/256 columns (Java) (#39840).

SolaceIO now supports reading and writing user properties (message metadata) (Java) (#40099).

[IcebergIO] AddFiles (IcebergAddFiles in YAML) can evolve the table schema before registering files, with schema_evolution_options, required_columns, incompatible_schema_handling and unverifiable_file_handling (Java/YAML, batch only) (#40144).

[IcebergIO] Added batch and streaming CDC writes that applies INSERT/UPDATE_BEFORE/UPDATE_AFTER/DELETE changes to Iceberg V2+ tables by primary key. Invoke with IcebergIO.writeCdcRows (Java) or by setting mode: merge-on-read on the Managed ICEBERG write (Java, Python, YAML) (#39979).

[IcebergIO] Added an optional side-input table cache for writes to significantly reduce catalog and table requests for large pipelines. A single worker polls the table and broadcasts it to other workers in the pipeline. Enable with IcebergIO.writeRows(...).withSideInputTableCache() (Java) or by setting use_side_input_table_cache: true on the Managed ICEBERG write (Java, Python) (#39723).

New Features / Improvements

(Java/Python) Watch can bound its deduplication state by event time, retiring an output key once the greatest emitted timestamp has moved more than the allowed lateness past it. Java adds Watch.growthOf(...).withTimestampCursor(). Python adds allowed_lateness for the existing timestamp_cursor option (#18459).

(Java) Spark Structured Streaming runner: stateful ParDo with state, timers, @RequiresTimeSortedInput and tagged outputs is now supported in batch mode (#39779).

(Python) Added support for Vertex AI Model Monitoring V2 in RunInference (#39738).

[Flink Runner] Added opt-in static round-robin split assignment for small bounded sources via the new sourceStaticSplitThresholdMb pipeline option. The default of 0 keeps the existing lazy pull-based assignment (#39873).

Added automatic caching of bounded, single-pane side-input views for classic Java Flink DataStream execution (#39866).

(Python) Added Sample.Any, the Python equivalent of Java's Sample.any, which returns up to n arbitrary elements from a PCollection (#18552).

Breaking Changes

Portable Java SDK now encodes SchemaCoders in a portable way (#34672).

Original custom Java coder encoding can still be obtained using StreamingOptions.setUpdateCompatibilityVersion("2.76") (#34672).

Fixes (#36496), (#30276), (#29245).

(Python) TensorRTEngineHandlerNumPy now requires TensorRT 10 or later. TensorRT 8.x is no longer supported, since TensorRT 10 removed the engine binding API the handler was written against (#36306).

Engines serialized by TensorRT 8.x must be rebuilt, as an engine can only be deserialized by the major version that built it.

TensorRT 10 and later require a GPU with compute capability 7.5 or higher, which excludes NVIDIA Pascal and Volta GPUs.

If dropping TensorRT 8.x support is a hard blocker for you, please comment on (#36306).

Bugfixes

(Java) Fixed the Spark runner firing processing-time timers in reverse timestamp order (#39824).

(Java) Fixed the Spark runner dropping the stored watermark of a streaming source with no update in a batch (#39822).

(Python) Fixed incorrect profiler options handling on portable runners (#39613).

(Python) Fixed AsyncWrapper mixing results between keys or windows whose values or custom identifiers match, and cancelling work belonging to other windows (#39996).

(Java) KafkaIO dynamic reads no longer require the obsolete beam_fn_api experiment (#29998).

(Prism) Self-checkpointing splittable DoFns now resume after their requested delay instead of immediately, so polling SDFs no longer busy-spin (#39848).

(Java) MongoDbIO read splitting now preserves non-ObjectId _id types (e.g. string ids) instead of failing to parse the generated range filters (#39900).

(Go) Fixed GCS glob matching silently dropping objects when the glob pattern contains multi-byte characters (#39969).

(Python) Fixed TensorRTEngineHandlerNumPy failing with CUDA_ERROR_INVALID_VALUE on models with a single-element input or output tensor (#36306).

(Python) Fixed PickleCoder/_MemoizingPickleCoder.as_deterministic_coder() raising TypeError instead of returning a working deterministic coder (#28558).

[2.76.0] - 2026-08-31

Highlights

Added a full Iceberg batch and streaming changelog source (CDC) (#38831)

... (truncated)

Commits

1a6fce4 Set version for 2.77.0 RC4
5cd677e Merge pull request #40337 from claudevdm/cp-40252
be27783 Exposing evictWritersWhenFull in AvroIO (#40336) (#40338)
8c9d31e Merge pull request #40259 from reuvenlax/improve_gcp_presubmit_speed (#40342)
c45e45c Addfiles partition bounds fixes (#40252)
34e08cf Merge pull request #40287 from damccorm/cp-40205-40251-release-2.77
e1b0794 Merge pull request #40271 from ahmedabu98/cp40253
bcb44cf Time out RestrictionTrackers.trySplit after 5 minutes on lock contention (#40...
84da653 Return last evaluated progress on lock timeout in RestrictionTrackers.getProg...
396ae8e Merge branch 'release-2.77' of https://github.com/apache/beam into cp40253
Additional commits viewable in compare view

Updates github.com/go-sql-driver/mysql from 1.10.0 to 1.10.1

Release notes

Sourced from github.com/go-sql-driver/mysql's releases.

v1.10.1

What's Changed

dsn: default Net to tcp in NewConfig so Addr-only configs round-trip by @c-tonneslan in go-sql-driver/mysql#1770

Add LTS MariaDB 11.8 and 12.3 into the testing matrix by @pgporada in go-sql-driver/mysql#1774

Bump actions/checkout from 6 to 7 in the all-dependencies group by @dependabot[bot] in go-sql-driver/mysql#1777

ci: pin actions by @methane in go-sql-driver/mysql#1778

Bump the all-dependencies group with 3 updates by @dependabot[bot] in go-sql-driver/mysql#1779

Bump the all-dependencies group with 3 updates by @dependabot[bot] in go-sql-driver/mysql#1780

Interpolate typed-nil json.RawMessage as NULL by @oha-4 in go-sql-driver/mysql#1782

Bump actions/setup-go from 6.5.0 to 7.0.0 in the all-dependencies group by @dependabot[bot] in go-sql-driver/mysql#1783

Bump the all-dependencies group across 1 directory with 5 updates by @dependabot[bot] in go-sql-driver/mysql#1791

Bump the all-dependencies group with 3 updates by @dependabot[bot] in go-sql-driver/mysql#1794

Bump the all-dependencies group with 5 updates by @dependabot[bot] in go-sql-driver/mysql#1795

Bump the all-dependencies group with 3 updates by @dependabot[bot] in go-sql-driver/mysql#1796

codeql: remove custom workflow by @methane in go-sql-driver/mysql#1799

doc: clarify timeTruncate units and when to use it by @milanobrtlik in go-sql-driver/mysql#1792

release v1.10.1 by @methane in go-sql-driver/mysql#1801

New Contributors

@c-tonneslan made their first contribution in go-sql-driver/mysql#1770

@oha-4 made their first contribution in go-sql-driver/mysql#1782

@milanobrtlik made their first contribution in go-sql-driver/mysql#1792

Full Changelog: go-sql-driver/mysql@v1.10.0...v1.10.1

Changelog

Sourced from github.com/go-sql-driver/mysql's changelog.

v1.10.1 (2026-09-02)

Fix Config.FormatDSN() dropping Addr when Net is empty. It now uses the default tcp network so configs with only Addr round-trip correctly. (#1770)

Fix typed-nil json.RawMessage with interpolateParams=true being interpolated as an empty string. It is now interpolated as SQL NULL, matching server-side prepared statements. (#1782)

Add MariaDB 11.8 and 12.3 to the test matrix. (#1774)

Commits

7ca26e8 release v1.10.1 (#1801)
87dcb95 doc: clarify timeTruncate units and when to use it (#1792)
1d9c421 codeql: remove custom workflow (#1799)
532b8e5 Bump the all-dependencies group with 3 updates (#1796)
fe209cc Bump the all-dependencies group with 5 updates (#1795)
03d76c7 Bump the all-dependencies group with 3 updates (#1794)
c426bd9 Bump the all-dependencies group across 1 directory with 5 updates (#1791)
416cd99 Bump actions/setup-go from 6.5.0 to 7.0.0 in the all-dependencies group (#1783)
b96d415 Interpolate typed-nil json.RawMessage as NULL (#1782)
dec193d Bump the all-dependencies group with 3 updates (#1780)
Additional commits viewable in compare view

Updates github.com/google/certificate-transparency-go from 1.3.3 to 1.4.0

Release notes

Sourced from github.com/google/certificate-transparency-go's releases.

v1.4.0

Full Changelog: google/certificate-transparency-go@v1.3.3...v1.4.0

Changelog

Sourced from github.com/google/certificate-transparency-go's changelog.

CERTIFICATE-TRANSPARENCY-GO Changelog

HEAD

Bump trillian to v1.8.0, and drop tracing support by @phbnf

Fix tls.Unmarshal decoding a Uint24 field from the start of the buffer instead of the field's offset by @robstradling

Switch Ed25519 import from deprecated golang.org/x/crypto/ed25519 to stdlib crypto/ed25519 by @JasonPowr

Added --emit_proxy_headers flag to ctfe by @mhutchinson

Commits

063d68c default list of intermediates to block (#1843)
63a6029 Block submission per intermediate (#1842)
See full diff in compare view

Updates github.com/google/trillian from 1.7.3 to 1.8.0

Release notes

Sourced from github.com/google/trillian's releases.

v1.8.0

API

CHANGELOG.md update ahead of v1.8.0 by @phbnf in google/trillian#3933

Remove tracing support, which drops aws SDK and prometheus deps. by @phbnf in google/trillian#3912

Features

fix: swap ed25519 to standard lib by @JasonPowr in google/trillian#3886

fix: allow unencrypted PEM by @JasonPowr in google/trillian#3885

offer batching for mysql quota provider by @bobcallaway in google/trillian#3917

Bump to go 1.26

Claimant Model

[Claimant Model] Rewriting to make it easier to read by @mhutchinson in google/trillian#3877

[Claimant Model] Doc known external usages/refs by @mhutchinson in google/trillian#3895

Fixes

[CI] Fix govulncheck warning by @mhutchinson in google/trillian#3893

Bump the go-deps group across 1 directory with 20 updates AND bump go to 1.26 AND regenerate protos AND bump golangci-lint in tests AND tighter master election lease filtering AND migrate to etcd/server in tests by @dependabot[bot] in google/trillian#3931

What's Changed

Bump the go-deps group with 11 updates by @dependabot[bot] in google/trillian#3873

Bump the github-actions-deps group with 2 updates by @dependabot[bot] in google/trillian#3872

Bump ubuntu from ce4a593 to 5e5b128 in /examples/deployment/kubernetes/mysql/image in the docker-deps group across 1 directory by @dependabot[bot] in google/trillian#3874

Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in google/trillian#3875

Bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 by @dependabot[bot] in google/trillian#3876

Bump github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2 by @dependabot[bot] in google/trillian#3879

Bump the github-actions-deps group with 2 updates by @dependabot[bot] in google/trillian#3880

Bump go.etcd.io/etcd/v3 from 3.6.10 to 3.6.11 by @dependabot[bot] in google/trillian#3883

Bump golang.org/x/net to 0.54.0 by @AlCutter in google/trillian#3888

Bump the docker-deps group across 7 directories with 6 updates by @dependabot[bot] in google/trillian#3892

Bump the go-deps group across 1 directory with 20 updates by @dependabot[bot] in google/trillian#3894

Bump the github-actions-deps group across 1 directory with 3 updates by @dependabot[bot] in google/trillian#3890

Bump the github-actions-deps group with 7 updates by @dependabot[bot] in google/trillian#3897

Bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @dependabot[bot] in google/trillian#3901

Bump the docker-deps group across 6 directories with 5 updates by @dependabot[bot] in google/trillian#3898

Bump go.etcd.io/etcd/v3 from 3.6.12 to 3.6.14 by @dependabot[bot] in google/trillian#3907

Bump the github-actions-deps group across 1 directory with 7 updates by @dependabot[bot] in google/trillian#3910

Bump google.golang.org/grpc from 1.82.1 to 1.83.1 by @dependabot[bot] in google/trillian#3922

Bump the github-actions-deps group with 4 updates by @dependabot[bot] in google/trillian#3921

Bump the docker-deps group across 6 directories with 5 updates by @dependabot[bot] in google/trillian#3918

Bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @dependabot[bot] in google/trillian#3923

Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.34.0 to 1.45.0 by @dependabot[bot] in google/trillian#3927

Bump the go-deps group across 1 directory with 20 updates AND bump go to 1.26 AND regenerate protos AND bump golangci-lint in tests AND tighter master election lease filtering AND migrate to etcd/server in tests by @dependabot[bot] in google/trillian#3931

New Contributors

@JasonPowr made their first contribution in google/trillian#3886

... (truncated)

Changelog

Sourced from github.com/google/trillian's changelog.

v1.8.0

Recommended go version for development: 1.26

Bump golang to 1.26, golangci-lint to v2.10.1.

Filter mastership election event watching by lease name

Remove OpenCensus tracing support and associated instrumentation hooks by @phb

Removed internal tracing packages (monitoring/trace.go and monitoring/opencensus/), command-line --tracing flags, and spanFor / StartSpan instrumentation across server, tree, and storage entrypoints.

Allow unencrypted PEM private key files by @JasonPowr

ReadPrivateKeyFile and FromProto (via PEMKeyFile) now accept an empty password, treating the key as unencrypted. Previously, an empty password was rejected with an error.

Replace deprecated golang.org/x/crypto/ed25519 with stdlib crypto/ed25519 by @JasonPowr

Commits

0362d55 CHANGELOG.md update ahead of v1.8 (#3933)
0d6fa8f Bump the go-deps group across 1 directory with 20 updates AND bump go to 1.26...
5061cfc Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc (#3927)
999a06b Remove tracing support, which drops aws SDK and prometheus deps. (#3912)
e9b1644 Bump google.golang.org/grpc from 1.83.1 to 1.83.2 (#3923)
70e3cce Bump the docker-deps group across 6 directories with 5 updates (#3918)
87ef5b5 Bump the github-actions-deps group with 4 updates (#3921)
c537cd6 Bump google.golang.org/grpc from 1.82.1 to 1.83.1 (#3922)
02b853b Bump the github-actions-deps group across 1 directory with 7 updates (#3910)
416e64c offer batching for mysql quota provider (#3917)
Additional commits viewable in compare view

Updates github.com/mattn/go-sqlite3 from 1.14.44 to 1.14.52

Release notes

Sourced from github.com/mattn/go-sqlite3's releases.

1.14.52

What's Changed

Replace schema probe with eager first step for cached statements by @mattn in mattn/go-sqlite3#1454

Full Changelog: mattn/go-sqlite3@v1.14.51...v1.14.52

1.14.51

What's Changed

fix: Exec returns wrong arg count in "not enough args" error by @semihbkgr in mattn/go-sqlite3#1396

refactor: Clean up deprecated // +build legacy build tags by @zxysilent in mattn/go-sqlite3#1428

Fixed som typos and wrappings in sqlite3_func_crypt.go documentation. by @kberov in mattn/go-sqlite3#1367

Replace copy-on-write handle map with sync.Map by @mattn in mattn/go-sqlite3#1453

Avoid per-row goroutines for query cancellation by @bradengroom in mattn/go-sqlite3#1444

Flush statement cache when the schema changes by @mattn in mattn/go-sqlite3#1452

New Contributors

@semihbkgr made their first contribution in mattn/go-sqlite3#1396

@zxysilent made their first contribution in mattn/go-sqlite3#1428

@kberov made their first contribution in mattn/go-sqlite3#1367

@bradengroom made their first contribution in mattn/go-sqlite3#1444

Full Changelog: mattn/go-sqlite3@v1.14.50...v1.14.51

1.14.50

What's Changed

Handle NULL and BLOB values in json example Scan by @mattn in mattn/go-sqlite3#1441

Add workflow to create releases on tag push by @mattn in mattn/go-sqlite3#1443

fix: keep vtab handle registered when xDestroy fails by @canesin in mattn/go-sqlite3#1446

New Contributors

@canesin made their first contribution in mattn/go-sqlite3#1446

Full Changelog: mattn/go-sqlite3@v1.14.49...v1.14.50

1.14.49

What's Changed

Release vtable and cursor handles when SQLite destroys them by @mattn in mattn/go-sqlite3#1429

Do not clobber SQLite's default cost estimates in BestIndex by @mattn in mattn/go-sqlite3#1430

Translate SQL NULL filter arguments to nil like goVUpdate by @mattn in mattn/go-sqlite3#1431

Identify updated row by argv 0 in goVUpdate by @mattn in mattn/go-sqlite3#1432

Ignore Used for constraints SQLite marked not usable by @mattn in mattn/go-sqlite3#1433

Reject nil module and nil BestIndex result by @mattn in mattn/go-sqlite3#1434

Fail upgrade tool on download and write errors by @mattn in mattn/go-sqlite3#1435

Fix off-by-one truncating SQL in fuzz target by @mattn in mattn/go-sqlite3#1436

Fix wrong results and cursor state sharing in series example by @mattn in mattn/go-sqlite3#1437

Use the table name from xCreate args in vtable example by @mattn in mattn/go-sqlite3#1438

Close leaked rows in hook example by @mattn in mattn/go-sqlite3#1439

Close prepared statement and fail if limit is not enforced in limit example by @mattn in mattn/go-sqlite3#1440

Upgrade SQLite to version 3053004 by @mattn in mattn/go-sqlite3#1442

... (truncated)

Commits

b0be46f Merge pull request #1454 from mattn/fix-stmt-cache-probe-cost
c8212b8 Replace schema probe with eager first step for cached statements
d7f5da7 Merge pull request #1452 from mattn/fix-stmt-cache-schema-change
6428cad Merge pull request #1444 from bradengroom/codex/efficient-query-cancellation
be93f7a Merge pull request #1453 from mattn/fix-handle-map-quadratic
5b285a1 Merge branch 'master' into codex/efficient-query-cancellation
2294cd9 Replace copy-on-write handle map with sync.Map
5341cee Gate cache on runtime version and skip probing in transactions
c7ed68d Flush statement cache when the schema changes
6507893 Merge pull request #1367 from kberov/typos
Additional commits viewable in compare view

Updates github.com/transparency-dev/formats from 0.1.0 to 0.1.1

Release notes

Sourced from github.com/transparency-dev/formats's releases.

v0.1.1

What's Changed

Implement c2sp.org/tlog-proof by @Hayden-IO in transparency-dev/formats#228

Copy witness policy file format code from Tessera by @Hayden-IO in transparency-dev/formats#229

Bump Go to 1.25.0 by @roger2hk in transparency-dev/formats#242

Add MLDSA-44 cosigner implementation by @AlCutter in transparency-dev/formats#247

Add func to generate MLDSA key pairs by @AlCutter in transparency-dev/formats#249

Better MLDSA generate func name by @AlCutter in transparency-dev/formats#250

Remove unused RSA 6962 support by @AlCutter in transparency-dev/formats#256

Deps

🌱(deps): Bump golang.org/x/mod from 0.32.0 to 0.33.0 in the all-go-deps group by @dependabot[bot] in transparency-dev/formats#235

🌱(deps): Bump github/codeql-action from 4.32.2 to 4.32.3 in the all-gha-deps group by @dependabot[bot] in transparency-dev/formats#236

🌱(deps): Bump github/codeql-action from 4.32.3 to 4.32.4 in the all-gha-deps group by @dependabot[bot] in transparency-dev/formats#237

🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in transparency-dev/formats#238

🌱(deps): Bump github/codeql-action from 4.32.4 to 4.32.6 in the all-gha-deps group by @dependabot[bot] in transparency-dev/formats#239

🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in transparency-dev/formats#241

🌱(deps): Bump golang.org/x/mod from 0.33.0 to 0.34.0 in the all-go-deps group by @dependabot[bot] in transparency-dev/formats#240

🌱(deps): Bump the all-gha-deps group with 3 updates by @dependabot[bot] in transparency-dev/formats#243

🌱(deps): Bump actions/upload-artifact from 7.0.0 to 7.0.1 in the all-gha-deps group by @dependabot[bot] in transparency-dev/formats#245

🌱(deps): Bump golang.org/x/mod from 0.34.0 to 0.35.0 in the all-go-deps group across 1 directory by @dependabot[bot] in transparency-dev/formats#244

🌱(deps): Bump github/codeql-action from 4.35.1 to 4.35.2 in the all-gha-deps group by @dependabot[bot] in transparency-dev/formats#246

🌱(deps): Bump github/codeql-action from 4.35.2 to 4.35.3 in the all-gha-deps group by @dependabot[bot] in transparency-dev/formats#248

🌱(deps): Bump the all-go-deps group with 2 updates by @dependabot[bot] in transparency-dev/formats#251

🌱(deps): Bump github/codeql-action from 4.35.3 to 4.35.4 in the all-gha-deps group by @dependabot[bot] in transparency-dev/formats#252

🌱(deps): Bump github/codeql-action from 4.35.4 to 4.35.5 in the all-gha-deps group by @dependabot[bot] in transparency-dev/formats#253

🌱(deps): Bump the all-gha-deps group with 3 updates by @dependabot[bot] in transparency-dev/formats#255

🌱(deps): Bump golang.org/x/crypto from 0.51.0 to 0.52.0 in the all-go-deps group across 1 directory by @dependabot[bot] in transparency-dev/formats#254

New Contributors

@Hayden-IO made their first contribution in transparency-dev/formats#228

Full Changelog: transparency-dev/formats@v0.1.0...v0.1.1

Commits

f8d9ded Remove unused RSA 6962 support (#256)
17c221a 🌱(deps): Bump golang.org/x/crypto (#254)
157a44d 🌱(deps): Bump the all-gha-deps group with 3 updates (#255)
a97bebf 🌱(deps): Bump github/codeql-action in the all-gha-deps group (#253)
909dc91 🌱(deps): Bump github/codeql-action in the all-gha-deps group (#252)
dc73bfb 🌱(deps): Bump the all-go-deps group with 2 updates (#251)
1e3a4ad Improve generate func name (#250)
7f7fdcf Add func to generate MLDSA key pairs (#249)
8446089 🌱(deps): Bump github/codeql-action in the all-gha-deps group (#248)
e6e205e Add MLDSA-44 cosigner implementation (#247)
Additional commits viewable in compare view

Updates github.com/usbarmory/tamago from 1.26.3 to 1.27.3

Release notes

Sourced from github.com/usbarmory/tamago's releases.

v1.27.3

Major changes for tamago package API:

arm: (*CPU).SetAttribute fixed argument naming and implementation (usbarmory/tamago@ac3b111)

arm64: Busyloop new function for CPU wait without yielding (usbarmory/tamago@151778d)

arm64: (*CPU).CleanDataCache new function for cache management (usbarmory/tamago@f96b005)

arm64: (*CPU).InvalidateDataCache new function for cache management (usbarmory/tamago@f96b005)

dma: (*Region).Alignment new field for minimum alignment override (usbarmory/tamago@f96b005)

dma: (*Region).Clean new field for optional cache management (https://githu...
Description has been truncated

Bumps the all-deps group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/apache/beam/sdks/v2](https://github.com/apache/beam) | `2.73.0` | `2.77.0` | | [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) | `1.10.0` | `1.10.1` | | [github.com/google/certificate-transparency-go](https://github.com/google/certificate-transparency-go) | `1.3.3` | `1.4.0` | | [github.com/google/trillian](https://github.com/google/trillian) | `1.7.3` | `1.8.0` | | [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.44` | `1.14.52` | | [github.com/transparency-dev/formats](https://github.com/transparency-dev/formats) | `0.1.0` | `0.1.1` | | [github.com/usbarmory/tamago](https://github.com/usbarmory/tamago) | `1.26.3` | `1.27.3` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.55.0` | `0.57.0` | | [golang.org/x/mod](https://github.com/golang/mod) | `0.38.0` | `0.41.0` | | [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.36.0` | `0.37.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.22.0` | `0.23.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.2` | `1.85.0` | | google.golang.org/protobuf | `1.36.11` | `1.36.12` | Updates `github.com/apache/beam/sdks/v2` from 2.73.0 to 2.77.0 - [Release notes](https://github.com/apache/beam/releases) - [Changelog](https://github.com/apache/beam/blob/master/CHANGES.md) - [Commits](apache/beam@v2.73.0...v2.77.0) Updates `github.com/go-sql-driver/mysql` from 1.10.0 to 1.10.1 - [Release notes](https://github.com/go-sql-driver/mysql/releases) - [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md) - [Commits](go-sql-driver/mysql@v1.10.0...v1.10.1) Updates `github.com/google/certificate-transparency-go` from 1.3.3 to 1.4.0 - [Release notes](https://github.com/google/certificate-transparency-go/releases) - [Changelog](https://github.com/google/certificate-transparency-go/blob/master/CHANGELOG.md) - [Commits](google/certificate-transparency-go@v1.3.3...v1.4.0) Updates `github.com/google/trillian` from 1.7.3 to 1.8.0 - [Release notes](https://github.com/google/trillian/releases) - [Changelog](https://github.com/google/trillian/blob/master/CHANGELOG.md) - [Commits](google/trillian@v1.7.3...v1.8.0) Updates `github.com/mattn/go-sqlite3` from 1.14.44 to 1.14.52 - [Release notes](https://github.com/mattn/go-sqlite3/releases) - [Commits](mattn/go-sqlite3@v1.14.44...v1.14.52) Updates `github.com/transparency-dev/formats` from 0.1.0 to 0.1.1 - [Release notes](https://github.com/transparency-dev/formats/releases) - [Commits](transparency-dev/formats@v0.1.0...v0.1.1) Updates `github.com/usbarmory/tamago` from 1.26.3 to 1.27.3 - [Release notes](https://github.com/usbarmory/tamago/releases) - [Commits](usbarmory/tamago@v1.26.3...v1.27.3) Updates `golang.org/x/crypto` from 0.55.0 to 0.57.0 - [Commits](golang/crypto@v0.55.0...v0.57.0) Updates `golang.org/x/mod` from 0.38.0 to 0.41.0 - [Commits](golang/mod@v0.38.0...v0.41.0) Updates `golang.org/x/oauth2` from 0.36.0 to 0.37.0 - [Commits](golang/oauth2@v0.36.0...v0.37.0) Updates `golang.org/x/sync` from 0.22.0 to 0.23.0 - [Commits](golang/sync@v0.22.0...v0.23.0) Updates `google.golang.org/grpc` from 1.83.2 to 1.85.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.83.2...v1.85.0) Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12 --- updated-dependencies: - dependency-name: github.com/apache/beam/sdks/v2 dependency-version: 2.77.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: github.com/go-sql-driver/mysql dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: github.com/google/certificate-transparency-go dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: github.com/google/trillian dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: github.com/mattn/go-sqlite3 dependency-version: 1.14.52 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: github.com/transparency-dev/formats dependency-version: 0.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: github.com/usbarmory/tamago dependency-version: 1.27.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: golang.org/x/crypto dependency-version: 0.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: golang.org/x/mod dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: golang.org/x/oauth2 dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: golang.org/x/sync dependency-version: 0.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: google.golang.org/grpc dependency-version: 1.85.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: google.golang.org/protobuf dependency-version: 1.36.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dpebot · 2026-11-01T04:44:06Z

/gcbrun

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 1, 2026

dependabot Bot requested a review from a team as a code owner November 1, 2026 04:43

dependabot Bot requested review from AlCutter and removed request for a team November 1, 2026 04:43

Navigation Menu

Repository navigation

Bump the all-deps group across 1 directory with 13 updates - #1403

Bump the all-deps group across 1 directory with 13 updates#1403
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/all-deps-c480f3e2dd

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

dpebot commented Nov 1, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026

Beam 2.77.0 release

Highlights

I/Os

New Features / Improvements

Breaking Changes

Bugfixes

[2.77.0] - 2026-10-07

I/Os

New Features / Improvements

Breaking Changes

Bugfixes

[2.76.0] - 2026-08-31

Highlights

v1.10.1

What's Changed

New Contributors

v1.10.1 (2026-09-02)

v1.4.0

CERTIFICATE-TRANSPARENCY-GO Changelog

HEAD

v1.8.0

API

Features

Claimant Model

Fixes

What's Changed

New Contributors

v1.8.0

1.14.52

What's Changed

1.14.51

What's Changed

New Contributors

1.14.50

What's Changed

New Contributors

1.14.49

What's Changed

v0.1.1

What's Changed

Deps

New Contributors

v1.27.3

Uh oh!

dpebot commented Nov 1, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant