chore(deps): update go dependencies by red-hat-konflux[bot] · Pull Request #430 · securesign/gitsign

red-hat-konflux · 2026-10-09T02:48:01Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go	indirect	patch	`v1.36.11-20260415201107-50325440f8f2.1` → `v1.36.12-20260825204119-511051f7f437.2`
cloud.google.com/go/auth	indirect	minor	`v0.20.0` → `v0.24.3`
cloud.google.com/go/auth/oauth2adapt	indirect	minor	`v0.2.8` → `v0.3.1`
cloud.google.com/go/compute/metadata	indirect	minor	`v0.9.0` → `v0.10.0`
cloud.google.com/go/iam	indirect	minor	`v1.11.0` → `v1.15.1`
cloud.google.com/go/kms	indirect	minor	`v1.31.0` → `v1.36.1`
cloud.google.com/go/longrunning	indirect	minor	`v1.0.0` → `v1.5.0`
connectrpc.com/connect	indirect	major	`v1.20.0` → `v2.0.2`
github.com/Azure/azure-sdk-for-go/sdk/azcore	indirect	minor	`v1.22.0` → `v1.24.0`
github.com/Azure/azure-sdk-for-go/sdk/azidentity	indirect	minor	`v1.14.0` → `v1.15.0`
github.com/Azure/azure-sdk-for-go/sdk/internal	indirect	minor	`v1.12.0` → `v1.13.0`
github.com/Azure/go-ansiterm	indirect	digest	`faa5f7b` → `51075c6`
github.com/AzureAD/microsoft-authentication-library-for-go	indirect	minor	`v1.7.2` → `v1.10.1`
github.com/Microsoft/go-winio	indirect	patch	`v0.6.2` → `v0.6.4`
github.com/ProtonMail/go-crypto	indirect	minor	`v1.4.1` → `v1.5.2`
github.com/ThalesIgnite/crypto11	indirect	minor	`v1.2.5` → `v1.6.8`
github.com/alibabacloud-go/cr-20160607	indirect	major	`v1.0.1` → `v2.0.0`
github.com/alibabacloud-go/cr-20181201	indirect	major	`v1.0.10` → `v3.2.3`
github.com/alibabacloud-go/darabonba-openapi	indirect	major	`v0.2.1` → `v2.2.5`
github.com/alibabacloud-go/openapi-util	indirect	patch	`v0.1.1` → `v0.1.2`
github.com/alibabacloud-go/tea	indirect	minor	`v1.3.14` → `v1.5.4`
github.com/alibabacloud-go/tea-utils	indirect	major	`v1.4.5` → `v2.0.9`
github.com/aliyun/credentials-go	indirect	patch	`v1.4.10` → `v1.4.14`
github.com/aws/aws-sdk-go-v2	indirect	minor	`v1.42.0` → `v1.47.8`
github.com/aws/aws-sdk-go-v2/config	indirect	minor	`v1.32.25` → `v1.33.16`	`v1.33.17`
github.com/aws/aws-sdk-go-v2/credentials	indirect	minor	`v1.19.24` → `v1.20.16`	`v1.20.17`
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	indirect	minor	`v1.18.29` → `v1.20.8`
github.com/aws/aws-sdk-go-v2/internal/configsources	indirect	minor	`v1.4.29` → `v1.5.11`
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	indirect	minor	`v2.7.29` → `v2.8.11`
github.com/aws/aws-sdk-go-v2/internal/v4a	indirect	minor	`v1.4.30` → `v1.5.11`
github.com/aws/aws-sdk-go-v2/service/ecr	indirect	minor	`v1.55.3` → `v1.67.5`
github.com/aws/aws-sdk-go-v2/service/ecrpublic	indirect	minor	`v1.38.10` → `v1.47.11`
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	indirect	patch	`v1.13.12` → `v1.13.24`
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	indirect	minor	`v1.13.29` → `v1.14.11`
github.com/aws/aws-sdk-go-v2/service/kms	indirect	minor	`v1.53.4` → `v1.62.5`
github.com/aws/aws-sdk-go-v2/service/signin	indirect	minor	`v1.2.0` → `v1.12.4`	`v1.13.0`
github.com/aws/aws-sdk-go-v2/service/sso	indirect	minor	`v1.31.3` → `v1.39.4`
github.com/aws/aws-sdk-go-v2/service/ssooidc	indirect	minor	`v1.36.6` → `v1.44.4`
github.com/aws/aws-sdk-go-v2/service/sts	indirect	minor	`v1.43.3` → `v1.51.9`
github.com/aws/smithy-go	indirect	minor	`v1.27.2` → `v1.28.8`	`v1.28.9`
github.com/buildkite/agent/v3	indirect	major	`v3.130.0` → `v4.10.1`	`v4.10.2`
github.com/buildkite/go-pipeline	indirect	minor	`v0.17.1` → `v0.18.1`
github.com/cenkalti/backoff/v4	indirect	major	`v4.3.0` → `v7.0.3`
github.com/cenkalti/backoff/v5	indirect	major	`v5.0.3` → `v7.0.3`
github.com/cloudflare/circl	indirect	patch	`v1.6.3` → `v1.6.5`
github.com/coreos/go-oidc/v3	require	minor	`v3.20.0` → `v3.21.0`
github.com/cyberphone/json-canonicalization	indirect	digest	`19d51d7` → `32a4819`
github.com/cyphar/filepath-securejoin	indirect	minor	`v0.6.1` → `v0.7.0`
github.com/digitorus/pkcs7	indirect	digest	`ffadbf3` → `a476de3`
github.com/digitorus/timestamp	indirect	digest	`c455327` → `b4b58b9`
github.com/dimchansky/utfbom	indirect	minor	`v1.1.1` → `v1.2.0`
github.com/docker/cli	indirect	minor	`v29.5.3+incompatible` → `v29.9.3+incompatible`
github.com/docker/docker-credential-helpers	indirect	patch	`v0.9.5` → `v0.9.12`
github.com/dustin/go-humanize	indirect	minor	`v1.0.1` → `v1.1.0`
github.com/emicklei/go-restful/v3	indirect	minor	`v3.13.0` → `v3.14.0`
github.com/felixge/httpsnoop	indirect	minor	`v1.0.4` → `v1.1.0`
github.com/fxamacker/cbor/v2	indirect	minor	`v2.9.0` → `v2.10.0`
github.com/go-chi/chi/v5	indirect	minor	`v5.3.0` → `v5.5.0`
github.com/go-git/gcfg	indirect	major	`v1.5.1-0.20230307220236-3a3c6141e376` → `v2.0.2`
github.com/go-git/go-billy/v5	require	patch	`v5.9.1` → `v5.9.2`
github.com/go-git/go-git/v5	require	patch	`v5.19.2` → `v5.19.3`
github.com/go-jose/go-jose/v4	indirect	patch	`v4.1.4` → `v4.1.9`
github.com/go-openapi/analysis	indirect	major	`v0.25.5` → `v1.0.1`
github.com/go-openapi/errors	indirect	patch	`v0.22.8` → `v0.22.9`
github.com/go-openapi/jsonpointer	indirect	patch	`v1.0.0` → `v1.0.2`
github.com/go-openapi/jsonreference	indirect	patch	`v1.0.0` → `v1.0.3`
github.com/go-openapi/loads	indirect	patch	`v0.25.0` → `v0.25.3`
github.com/go-openapi/runtime	require	minor	`v0.32.6` → `v0.33.4`
github.com/go-openapi/runtime/server-middleware	indirect	minor	`v0.30.0` → `v0.33.4`
github.com/go-openapi/spec	indirect	major	`v0.22.9` → `v1.0.1`
github.com/go-openapi/strfmt	require	patch	`v0.27.0` → `v0.27.4`
github.com/go-openapi/swag	indirect	minor	`v0.26.1` → `v0.29.2`
github.com/go-openapi/swag/cmdutils	indirect	minor	`v0.26.1` → `v0.29.2`
github.com/go-openapi/swag/conv	require	minor	`v0.27.3` → `v0.29.2`
github.com/go-openapi/swag/fileutils	indirect	minor	`v0.27.3` → `v0.29.2`
github.com/go-openapi/swag/jsonname	indirect	minor	`v0.26.1` → `v0.29.2`
github.com/go-openapi/swag/jsonutils	indirect	minor	`v0.27.3` → `v0.29.2`
github.com/go-openapi/swag/loading	indirect	minor	`v0.27.3` → `v0.29.2`
github.com/go-openapi/swag/mangling	indirect	minor	`v0.27.3` → `v0.29.2`
github.com/go-openapi/swag/netutils	indirect	minor	`v0.26.1` → `v0.29.2`
github.com/go-openapi/swag/pools	indirect	minor	`v0.27.3` → `v0.29.2`
github.com/go-openapi/swag/stringutils	indirect	minor	`v0.27.3` → `v0.29.2`
github.com/go-openapi/swag/typeutils	indirect	minor	`v0.27.3` → `v0.29.2`
github.com/go-openapi/swag/yamlutils	indirect	minor	`v0.27.3` → `v0.29.2`
github.com/go-openapi/validate	indirect	major	`v0.26.1` → `v1.0.1`
github.com/golang-jwt/jwt/v4	indirect	major	`v4.5.2` → `v5.3.1`
github.com/google/certificate-transparency-go	indirect	minor	`v1.3.3` → `v1.4.0`
github.com/google/go-containerregistry	indirect	minor	`v0.21.7` → `v0.22.1`
github.com/google/go-github/v88	indirect	major	`v88.0.0` → `v93.0.0`
github.com/google/s2a-go	indirect	patch	`v0.1.9` → `v0.1.11`
github.com/google/trillian	indirect	minor	`v1.7.3` → `v1.8.0`
github.com/googleapis/enterprise-certificate-proxy	indirect	patch	`v0.3.16` → `v0.3.25`
github.com/googleapis/gax-go/v2	indirect	minor	`v2.22.0` → `v2.27.0`
github.com/grpc-ecosystem/go-grpc-middleware	indirect	major	`v1.4.0` → `v2.3.4`
github.com/grpc-ecosystem/grpc-gateway/v2	indirect	minor	`v2.29.0` → `v2.33.0`
github.com/hashicorp/go-rootcerts	indirect	minor	`v1.0.2` → `v1.1.0`
github.com/hashicorp/hcl	indirect	major	`v1.0.1-vault-7` → `v2.25.0`
github.com/hashicorp/vault/api	indirect	minor	`v1.22.0` → `v1.23.0`
github.com/jedisct1/go-minisign	indirect	digest	`d2f9f49` → `a09352b`
github.com/jellydator/ttlcache/v3	indirect	patch	`v3.4.0` → `v3.4.1`
github.com/klauspost/compress	indirect	minor	`v1.18.6` → `v1.20.3`	`v1.20.4`
github.com/klauspost/cpuid/v2	indirect	minor	`v2.3.0` → `v2.4.2`
github.com/mattn/go-isatty	indirect	patch	`v0.0.20` → `v0.0.24`
github.com/mattn/go-tty	require	major	`v0.0.8` → `v2.0.2`
github.com/mozillazg/docker-credential-acr-helper	indirect	patch	`v0.4.0` → `v0.4.2`
github.com/oklog/ulid/v2	indirect	patch	`v2.1.1` → `v2.1.2`
github.com/pelletier/go-toml/v2	indirect	minor	`v2.2.4` → `v2.4.3`
github.com/pjbgf/sha1cd	indirect	minor	`v0.6.0` → `v0.7.0`
github.com/secure-systems-lab/go-securesystemslib	require	patch	`v0.11.0` → `v0.11.1`
github.com/sigstore/cosign/v3	require	patch	`v3.1.2` → `v3.1.4`
github.com/sigstore/fulcio	require	minor	`v1.8.8` → `v1.9.1`	`v1.10.0`
github.com/sigstore/protobuf-specs	require	patch	`v0.5.1` → `v0.5.2`
github.com/sigstore/rekor	require	patch	`v1.5.3` → `v1.5.5`	`v1.5.6`
github.com/sigstore/rekor-tiles/v2	indirect	minor	`v2.3.0` → `v2.4.1`
github.com/sigstore/sigstore	require	minor	`v1.10.9-0.20260728171319-05a1d9750eaf` → `v1.11.3`
github.com/sigstore/sigstore-go	require	minor	`v1.2.2` → `v1.4.0`
github.com/sigstore/sigstore/pkg/signature/kms/aws	indirect	minor	`v1.10.8` → `v1.11.3`
github.com/sigstore/sigstore/pkg/signature/kms/azure	indirect	minor	`v1.10.8` → `v1.11.3`
github.com/sigstore/sigstore/pkg/signature/kms/gcp	indirect	minor	`v1.10.8` → `v1.11.3`
github.com/sigstore/sigstore/pkg/signature/kms/hashivault	indirect	minor	`v1.10.8` → `v1.11.3`
github.com/sigstore/timestamp-authority/v2	indirect	minor	`v2.1.2` → `v2.2.0`
github.com/sirupsen/logrus	indirect	minor	`v1.9.4` → `v1.10.2`
github.com/skeema/knownhosts	indirect	patch	`v1.3.2` → `v1.3.3`
github.com/spf13/pflag	require	minor	`v1.0.10` → `v1.1.0`
github.com/spiffe/go-spiffe/v2	indirect	minor	`v2.7.0` → `v2.9.0`
github.com/theupdateframework/go-tuf	indirect	major	`v0.7.0` → `v2.4.2`
github.com/tink-crypto/tink-go-gcpkms/v2	indirect	minor	`v2.2.0` → `v2.4.0`
github.com/tink-crypto/tink-go/v2	indirect	minor	`v2.6.0` → `v2.9.0`
github.com/tjfoc/gmsm	indirect	major	`v1.4.1` → `v2.0.0`
gitlab.com/gitlab-org/api/client-go	indirect	major	`v1.46.0` → `v3.44.0`	`v3.46.1` (+2)
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	indirect	minor	`v0.68.0` → `v0.72.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.69.0` → `v0.72.0`
go.opentelemetry.io/otel	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/metric	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/trace	indirect	minor	`v1.44.0` → `v1.47.0`
go.step.sm/crypto	indirect	minor	`v0.81.0` → `v0.92.0`
go.yaml.in/yaml/v2	indirect	major	`v2.4.4` → `v4.0.0`
go.yaml.in/yaml/v3	indirect	major	`v3.0.4` → `v4.0.0`
golang.org/x/crypto	indirect	minor	`v0.57.0` → `v0.58.0`
golang.org/x/mod	indirect	minor	`v0.41.0` → `v0.42.0`	`v0.43.0`
golang.org/x/net	indirect	minor	`v0.60.0` → `v0.62.0`
golang.org/x/oauth2	require	minor	`v0.36.0` → `v0.38.0`
golang.org/x/sync	indirect	minor	`v0.23.0` → `v0.25.0`
golang.org/x/sys	indirect	minor	`v0.48.0` → `v0.50.0`
golang.org/x/term	indirect	minor	`v0.46.0` → `v0.47.0`	`v0.48.0`
golang.org/x/text	indirect	minor	`v0.42.0` → `v0.43.0`	`v0.44.0`
golang.org/x/time	indirect	minor	`v0.15.0` → `v0.16.0`
google.golang.org/api	indirect	minor	`v0.286.0` → `v0.311.0`
google.golang.org/genproto	indirect	digest	`6f92a3b` → `d1e00e9`
google.golang.org/genproto/googleapis/api	indirect	digest	`3dc84a4` → `d1e00e9`
google.golang.org/genproto/googleapis/rpc	indirect	digest	`7ab31c2` → `d1e00e9`
google.golang.org/grpc	indirect	minor	`v1.83.2` → `v1.85.0`
google.golang.org/protobuf	require	patch	`v1.36.12-0.20260120151049-f2248ac996af` → `v1.36.12`
gopkg.in/evanphx/json-patch.v4	indirect	major	`v4.13.0` → `v5.9.11`
k8s.io/api	indirect	minor	`v0.36.2` → `v0.37.2`
k8s.io/apimachinery	indirect	minor	`v0.36.2` → `v0.37.2`
k8s.io/client-go	indirect	minor	`v0.36.2` → `v0.37.2`
k8s.io/kube-openapi	indirect	digest	`43fb72c` → `5bee61f`
k8s.io/utils	indirect	digest	`b8788ab` → `ca04ba5`
sigs.k8s.io/json	indirect	digest	`2d32026` → `11ed52e`
sigs.k8s.io/release-utils	indirect	patch	`v0.12.4` → `v0.12.5`
sigs.k8s.io/structured-merge-diff/v6	indirect	major	`v6.3.2` → `v7.0.1`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

googleapis/google-cloud-go (cloud.google.com/go/auth)

`v0.24.3`: auth: v0.24.3

Bug Fixes

auth: Strip -fips suffix from AWS service name in SigV4 signer (#20805) (7a1474c)

`v0.24.2`: auth: v0.24.2

Bug Fixes

Adds additional validation for REST RPC requests (#20753) (7827181)
auth/grpctransport: Use storage-direct authority for Interconnect (#20738) (232cbe4)

`v0.24.1`: auth: v0.24.1

Bug Fixes

auth: Return empty tls.Certificate on secureconnect helper failure (#20632) (1cdb61a), refs #20593

`v0.24.0`

bigquery: Support for the NUMERIC type.
bigtable:
- cbt: Optionally specify columns for read/lookup
- Support instance-level administration.
oslogin: New client for the OS Login API.
pubsub:
- The package is now stable. There will be no further breaking changes.
- Internal changes to improve Subscription.Receive behavior.
storage: Support updating bucket lifecycle config.
spanner: Support struct-typed parameter bindings.
texttospeech: New client for the Text-to-Speech API.

`v0.23.3`: auth: v0.23.3

Bug Fixes

Handle secureconnect helper failures gracefully (c2794c6)
Handle secureconnect helper failures gracefully (#20443) (c2794c6)

`v0.23.2`: auth: v0.23.2

Bug Fixes

auth: Eliminate timing race conditions in grpctransport otel tests (#20175) (#20382) (637505e)

`v0.23.1`: auth: v0.23.1

Bug Fixes

auth: Fix OpenTelemetry test flake in grpctransport (#20191) (e43ce28)

`v0.23.0`

Compare Source

bigquery: Add DDL stats to query statistics.
bigtable:
- cbt: Add cells-per-column limit for row lookup.
- cbt: Make it possible to combine read filters.
dlp: v2beta2 client removed. Use the v2 client instead.
firestore, spanner: Fix compilation errors due to protobuf changes.

`v0.22.0`

Compare Source

bigtable:
- cbt: Support cells per column limit for row read.
- bttest: Correctly handle empty RowSet.
- Fix ReadModifyWrite operation in emulator.
- Fix API path in GetCluster.
bigquery:
- BEHAVIOR CHANGE: Retry on 503 status code.
- Add dataset.DeleteWithContents.
- Add SchemaUpdateOptions for query jobs.
- Add Timeline to QueryStatistics.
- Add more stats to ExplainQueryStage.
- Support Parquet data format.
datastore:
- Support omitempty for times.
dlp:
- BREAKING CHANGE: Remove v1beta1 client. Please migrate to the v2 client,
  which is now out of beta.
- Add v2 client.
firestore:
- BEHAVIOR CHANGE: Treat set({}, MergeAll) as valid.
iam:
- Support JWT signing via SignJwt callopt.
profiler:
- BEHAVIOR CHANGE: PollForSerialOutput returns an error when context.Done.
- BEHAVIOR CHANGE: Increase the initial backoff to 1 minute.
- Avoid returning empty serial port output.
pubsub:
- BEHAVIOR CHANGE: Don't backoff during next retryable error once stream is healthy.
- BEHAVIOR CHANGE: Don't backoff on EOF.
- pstest: Support Acknowledge and ModifyAckDeadline RPCs.
redis:
- Add v1 beta Redis client.
spanner:
- Support SessionLabels.
speech:
- Add api v1 beta1 client.
storage:
- BEHAVIOR CHANGE: Retry reads when retryable error occurs.
- Fix delete of object in requester-pays bucket.
- Support KMS integration.

`v0.21.0`

Compare Source

bigquery:
- Add OpenCensus tracing.
firestore:
- BREAKING CHANGE: If a document does not exist, return a DocumentSnapshot
  whose Exists method returns false. DocumentRef.Get and Transaction.Get
  return the non-nil DocumentSnapshot in addition to a NotFound error.
  DocumentRef.GetAll and Transaction.GetAll return a non-nil
  DocumentSnapshot instead of nil.
- Add DocumentIterator.Stop. Call Stop whenever you are done with a
  DocumentIterator.
- Added Query.Snapshots and DocumentRef.Snapshots, which provide realtime
  notification of updates. See https://cloud.google.com/firestore/docs/query-data/listen.
- Canceling an RPC now always returns a grpc.Status with codes.Canceled.
spanner:
- Add CommitTimestamp, which supports inserting the commit timestamp of a
  transaction into a column.

connectrpc/connect-go (connectrpc.com/connect)

`v2.0.2`

Compare Source

What's Changed

Bugfixes

Fix data race reading ClientInfo after a cancelled call by @emcfarlane in #1036
List JSON charset variants in Accept-Post by @emcfarlane in #1037
Flush response headers in ServerStream.SendHeaders over HTTP by @raveesh-me in #1035
Stop reading oversized messages after rejecting them by @stefanvanburen in #1039

New Contributors

@raveesh-me made their first contribution in #1035

Full Changelog: connectrpc/connect-go@v2.0.1...v2.0.2

`v2.0.1`

Compare Source

What's Changed

Bugfixes

Stop draining gRPC response body after rejecting a message by @stefanvanburen in #1004
Keep sending unary request bodies after an early response by @stefanvanburen in #1007
Report truncated envelopes as internal errors by @stefanvanburen in #1012
Return the end-stream error when the body read fails after it by @stepan-romankov in #1024

New Contributors

@stepan-romankov made their first contribution in #1024

Full Changelog: connectrpc/connect-go@v2.0.0...v2.0.1

`v2.0.0`

Compare Source

What's new in version 2

connect-go v2 is a new major version of the Go API, not of ConnectRPC. The wire protocol, gRPC compatibility, and the rest of the ecosystem are unchanged. v1 remains supported on the v1 branch and the two versions can be used in the same module.

Generated code takes and returns plain messages. The connect.Request[T] and connect.Response[T] wrappers are gone, so the simple option is now the only shape:

-func (s *PingServer) Ping(ctx context.Context, req *connect.Request[pingv1.PingRequest]) (*connect.Response[pingv1.PingResponse], error) {
-	return connect.NewResponse(&pingv1.PingResponse{Number: req.Msg.Number}), nil
+func (s *PingServer) Ping(ctx context.Context, req *pingv1.PingRequest) (*pingv1.PingResponse, error) {
+	return &pingv1.PingResponse{Number: req.Number}, nil
 }

The core is now transport-agnostic. Generated code talks to a small Transport interface instead of net/http. connecthttp serves and calls Connect, gRPC, and gRPC-Web over net/http, and connectinprocess calls a server directly in the same process.

Servers register on a *connect.Server and clients are built from a transport:

server := connect.NewServer(validate.NewServerInterceptor())
pingv1connect.RegisterPingServiceHandler(server, &PingServer{})
connecthttp.Mount(mux, server)

client := connect.NewClient(connecthttp.NewTransport(http.DefaultClient, "http://localhost:8080"))
pingClient := pingv1connect.NewPingServiceClient(client)
res, err := pingClient.Ping(ctx, &pingv1.PingRequest{Number: 42})

Test without a network

connectinprocess connects a client to a server in the same process. Tests no longer need httptest.Server or a loopback listener:

server := connect.NewServer()
pingv1connect.RegisterPingServiceHandler(server, &PingServer{})
client := pingv1connect.NewPingServiceClient(connect.NewClient(connectinprocess.New(server)))

Interceptors wrap the whole call

Interceptors run before any decompression or unmarshaling. An auth check can reject a call from its headers alone, without separate HTTP middleware:

func authInterceptor(next connect.ServerFunc) connect.ServerFunc {
	return func(ctx context.Context, spec connect.Spec, stream connect.ServerStream) error {
		info, _ := connect.CallInfoForServerContext(ctx)
		if info.RequestHeader().Get("Authorization") == "" {
			return connect.NewError(connect.CodeUnauthenticated, "missing credentials")
		}
		return next(ctx, spec, stream)
	}
}

Errors don't leak by accident

Only a *connect.Error you create sends its message to the client. Any other error, including one returned from a downstream RPC, reaches the client as a bare code with no message. Attach the original error with WithCause to keep it for errors.Is and errors.As on the server:

if err := store(ctx, req.Number); err != nil {
	return nil, connect.NewError(connect.CodeInternal, "store failed").WithCause(err)
}

Smaller binaries and a smaller API

Without generic client instantiation, the compiler no longer emits a client per RPC. Moving the Buf CLI to v2 shrinks its binary by about 10%. The core package exports about 25 identifiers, down from about 180 in v1, and stream types are interfaces that can be faked in tests.

The v2 guide explains what changed and why.

[!TIP]
If you already use connect-go, see the migration guide. The connect-go-v2-migrate tool updates buf.gen.yaml and rewrites most of your code.

To upgrade, run:

go install connectrpc.com/connect/v2/cmd/connect-go-v2-migrate@latest
connect-go-v2-migrate -w
buf generate
connect-go-v2-migrate -w
go mod tidy

v1 is still supported

v1 remains stable and supported indefinitely. It lives on the v1 branch and will keep receiving bug fixes and security patches as connectrpc.com/connect v1.x releases. There is no deadline to migrate. v1 and v2 have different module paths, so both can be used in the same module and services can move one at a time.

Full Changelog: connectrpc/connect-go@v1.21.0...v2.0.0

`v1.21.1`

Compare Source

What's Changed

Bugfixes

Stop draining gRPC response body after rejecting a message by @stefanvanburen in #1005
Keep sending unary request bodies after an early response by @stefanvanburen in #1008
Report truncated envelopes as internal errors by @stefanvanburen in #1015
Fix removing all compressors on unary Connect clients by @emcfarlane in #1016
Reject a negative Connect-Timeout-Ms instead of expiring the context by @emcfarlane in #1017
Set Connect-Timeout-Ms when less than a millisecond remains by @emcfarlane in #1018
Improve http2 client disconnect error handling by @emcfarlane in #1019
Return the end-stream error when the body read fails after it by @stepan-romankov in #1014
Guard against typed nil *connect.Error by @emcfarlane in #1020
Enforce read max limit on unary errors by @emcfarlane in #1022
Send a minimal end of stream when over WithSendMaxBytes by @emcfarlane in #1023

Full Changelog: connectrpc/connect-go@v1.21.0...v1.21.1

`v1.21.0`

Compare Source

What's Changed

[!IMPORTANT]

This release adds a security-related feature for servers. The new handler option WithRequestGate runs after the request headers are available and before any message is received. Use this new option to register checks (e.g. authentication) that should happen before the request is decompressed or unmarshaled, and before any interceptors are run. See the documentation for details.

Governance

Add pkwarren as a maintainer by @bufdev in #929 🎉

Enhancements

Add WithRequestGate handler option by @emcfarlane in #962
Create release binary for protoc-gen-connect-go by @emcfarlane in #966

Bugfixes

Fix issue with user-agent getting inappropriately injected into request headers by @jhump in #934
Fix client streaming operations blocking indefinitely after context cancellation by @haru0017 in #937
Fix flaky HTTP2 testcase assertion by @emcfarlane in #940
Fix data race and connection leak in duplexHTTPCall by @emcfarlane in #938
Fix off-by-one in WithHTTPGetMaxURLSize URL length check by @fchimpan in #955
Fix connect.WithGRPC typo in the missing client option error by @NotAFlightRisk in #956
Only send a 304 when the request was a GET by @NotAFlightRisk in #957
Fix panic in stream Spec and Peer when client construction failed by @NotAFlightRisk in #959
Fix dropped headers on errStreamingClientConn by @mohit-bhandari45 in #964

New Contributors

@haru0017 made their first contribution in #937
@dongjiang1989 made their first contribution in #945
@fchimpan made their first contribution in #955
@NotAFlightRisk made their first contribution in #956
@mohit-bhandari45 made their first contribution in #964

Full Changelog: connectrpc/connect-go@v1.20.0...v1.21.0

Azure/azure-sdk-for-go (github.com/Azure/azure-sdk-for-go/sdk/azcore)

`v1.24.0`

1.24.0 (2026-11-02)

Features Added

Added tracing.WrapTracer to decorate a tracer while preserving attribute override ordering.
Added supporting infrastructure for SSE responses. This includes streaming types, runtime support, and fakes.
Added arm.ResourceID.ValidateResourceTypeChain to validate complete resource-type ancestry.

Bugs Fixed

Client tracing spans now redact the request URL in error descriptions using the pipeline's query parameter allow list.
Retry logging now uses the pipeline's query parameter allow list and redacts request URLs in errors.

Other Changes

Upgraded to Go 1.26.0.
Upgraded dependencies.

`v1.23.3`

1.23.3 (2026-10-06)

Bugs Fixed

Fixed arm.ResourceID.Location being empty when the locations segment uses different casing.

Other Changes

Added azure-deprecating to the default set of allowed (non-redacted) response headers for logging.
Replaced internal default HTTP client with the one from sdk/internal.

`v1.23.2`

1.23.2 (2026-09-28)

Bugs Fixed

Fixed unmarshalling datetime.RFC7231 to use a fixed GMT zone.

`v1.23.1`

1.23.1 (2026-08-27)

Other Changes

Upgraded dependencies.

`v1.23.0`

1.23.0 (2026-08-11)

Features Added

Helper method runtime.NewRequestForNextLink for creating requests for pageable operations that uses a next link. It handles absolute and relative next links.

Bugs Fixed

Fixed an issue where runtime.Pager[T].More could return true indefinitely after NextPage failed to retrieve the first page, causing for pager.More() loops to spin. After a page fetch returns an error the Pager now enters a terminal state: More returns false and subsequent NextPage calls return the same error without invoking the fetcher again.

AzureAD/microsoft-authentication-library-for-go (github.com/AzureAD/microsoft-authentication-library-for-go)

`v1.10.1`

Compare Source

What's Changed

Prepare v1.10.1 and retract v1.10.0 by @4gust in #682

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.10.0...v1.10.1

`v1.10.0`

Compare Source

What's Changed

Resolve Go lint backlog and enforce formatting in CI by @Robbie-Microsoft in #667
Add ClientConfigurer interface by @jhendrixMSFT in #669
Pin GitHub Actions to full-length commit SHAs by @4gust in #677
Normalize sovereign aliases before regional instance discovery by @Robbie-Microsoft in #674
Validate issuer before caching discovered endpoints by @Robbie-Microsoft in #675
Fix proactive refresh grant selection by @4gust in #676
Fix attribute-aware app-token cache isolation by @4gust in #679
Bump SDK SKU version to v1.10.0 by @4gust in #680

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.9.0...v1.10.0

`v1.9.0`

Compare Source

What's Changed

ci: stage MSAL Go pipeline + add Managed Identity IMDS & Azure Arc E2E tests by @gladjohn in #641
Fix intermittent "context canceled" token failures in managed identity retry() by @4gust in #642
Add user-assigned managed identity (UAMI) support for Azure Arc (MSAL.NET #6128 parity) by @gladjohn in #644
Reject legacy RFC 1423 encrypted PEM in CertFromPEM by @Robbie-Microsoft in #645
Harden regional authority validation by @4gust in #650
fix(managedidentity): pin Service Fabric TLS certificate by @4gust in #656
Fix ID token credential type casing by @4gust in #657
Fix WS-Trust endpoint selection helper by @4gust in #655
Prepare MSAL Go 1.9.0 release by @4gust in #658

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.8.0...v1.9.0

`v1.8.0`

Compare Source

What's Changed

Recover from panics in json.Unmarshal to prevent token-cache crashes (fixes #579) by @4gust in #614
fix(base.go): empty partition key causing external cache miss by @MatteoCalabro-TomTom in #615
Add User Federated Identity Credential (user_fic) grant type support by @Avery-Dunn in #619

New Contributors

@MatteoCalabro-TomTom made their first contribution in #615

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.7.2...1.8.0

Microsoft/go-winio (github.com/Microsoft/go-winio)

`v0.6.4`

Compare Source

What's Changed

Bump golang.org/x/sys from 0.48.0 to 0.49.0 by @dependabot[bot] in microsoft#393
Fix regression in mkwinsyscall for non SystemDLLs by @jterry75 in microsoft#394

Full Changelog: microsoft/go-winio@v0.6.3...v0.6.4

`v0.6.3`

Compare Source

What's Changed

switch back from golang.org/x/sys/execabs to os/exec (go1.19) by @thaJeztah in microsoft#317
Add Go wrappers for Get/SetVirtualDiskInformation win32 APIs. by @ambarve in microsoft#334
Add support for LX symlinks (0xA000001D) for WSL/MSYS2 compatibility by @vagokuln-msft in microsoft#336
backuptar: fix sparse stream handling in seekable exports by @rzlink in microsoft#375
Bump github.com/sirupsen/logrus from 1.9.3 to 1.10.2 by @dependabot[bot] in microsoft#374
Pin GitHub Actions to full-length commit SHAs by @danfiedler-msft in microsoft#373
ci: add windows-2025, remove windows-2019 by @thaJeztah in microsoft#378
Bump actions/checkout from 4.4.0 to 7.0.1 by @dependabot[bot] in microsoft#380
Bump actions/setup-go from 5.6.0 to 7.0.0 by @dependabot[bot] in microsoft#381
go.mod: raise minimum go version to go1.24 and use tools directive by @thaJeztah in microsoft#348
Restrict CI workflow token permissions by @jterry75 with @Copilot in microsoft#382
Use go tool to run stringer by @thaJeztah in microsoft#383
ci: update actions and golangci-lint, and fix linting by @thaJeztah in microsoft#349
fix linting issues by @thaJeztah in microsoft#325
Bump golang.org/x/tools to v0.50.0 by @jterry75 in microsoft#385
Resolves race in makeConnectedServerPipe / Close by @jterry75 in microsoft#388
tools/mkwinsyscall: remove errnoERROR_IO_PENDING const by @thaJeztah in microsoft#260
linting: enable dupword, intrange, mirror, gocritic by @alexandear in microsoft#387
improve interoperability with stdlib sentinel errors and deprecate aliases by @thaJeztah in microsoft#392

New Contributors

@vagokuln-msft made their firs

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-10-09T02:48:05Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: github.com/ThalesIgnite/crypto11@v1.6.8: parsing go.mod:
	module declares its path as: github.com/eclipse-keypont/crypto11
	        but was required as: github.com/ThalesIgnite/crypto11

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot added the dependencies label Oct 9, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.5/go-deps branch 8 times, most recently from af67e72 to 6ed8305 Compare October 17, 2026 03:20

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.5/go-deps branch 9 times, most recently from 6c0b258 to 7154ed8 Compare October 23, 2026 02:55

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.5/go-deps branch 8 times, most recently from 5574bbc to ffced2a Compare October 31, 2026 03:08

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.5/go-deps branch 3 times, most recently from 015badd to c04840c Compare November 3, 2026 03:21

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.5/go-deps branch 8 times, most recently from 7bd2cc7 to 7b92414 Compare November 9, 2026 06:30

chore(deps): update go dependencies

8c759fa

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.5/go-deps branch from 7b92414 to 8c759fa Compare November 10, 2026 03:43

Navigation Menu

Repository navigation

chore(deps): update go dependencies - #430

chore(deps): update go dependencies#430
red-hat-konflux[bot] wants to merge 1 commit into
release-1.5from
konflux/mintmaker/release-1.5/go-deps

red-hat-konflux Bot commented Oct 9, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Oct 9, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux Bot commented Oct 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.24.3: auth: v0.24.3

Bug Fixes

v0.24.2: auth: v0.24.2

Bug Fixes

v0.24.1: auth: v0.24.1

Bug Fixes

v0.23.3: auth: v0.23.3

Bug Fixes

v0.23.2: auth: v0.23.2

Bug Fixes

v0.23.1: auth: v0.23.1

Bug Fixes

What's Changed

Bugfixes

New Contributors

What's Changed

Bugfixes

New Contributors

What's new in version 2

Test without a network

Interceptors wrap the whole call

Errors don't leak by accident

Smaller binaries and a smaller API

v1 is still supported

What's Changed

Bugfixes

What's Changed

Governance

Enhancements

Bugfixes

New Contributors

1.24.0 (2026-11-02)

Features Added

Bugs Fixed

Other Changes

1.23.3 (2026-10-06)

Bugs Fixed

Other Changes

1.23.2 (2026-09-28)

Bugs Fixed

1.23.1 (2026-08-27)

Other Changes

1.23.0 (2026-08-11)

Features Added

Bugs Fixed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

Configuration

Documentation

Uh oh!

red-hat-konflux Bot commented Oct 9, 2026

⚠️ Artifact update problem

File name: go.sum

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux Bot commented Oct 9, 2026 •

edited

Loading

`v0.24.3`: auth: v0.24.3

`v0.24.2`: auth: v0.24.2

`v0.24.1`: auth: v0.24.1

`v0.23.3`: auth: v0.23.3

`v0.23.2`: auth: v0.23.2

`v0.23.1`: auth: v0.23.1