Skip to content

Bump the all-go-deps group across 1 directory with 7 updates - #1271

Merged
mhutchinson merged 1 commit into
mainfrom
dependabot/go_modules/all-go-deps-63366c6b75
Nov 9, 2026
Merged

mhutchinson merged 1 commit into
mainfrom
dependabot/go_modules/all-go-deps-63366c6b75

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 5, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the all-go-deps group with 7 updates in the / directory:

Package From To
github.com/aws/aws-sdk-go-v2 1.47.4 1.47.5
github.com/aws/aws-sdk-go-v2/config 1.33.10 1.33.12
github.com/aws/aws-sdk-go-v2/credentials 1.20.10 1.20.12
github.com/aws/aws-sdk-go-v2/service/s3 1.114.5 1.114.6
github.com/aws/smithy-go 1.28.6 1.28.7
google.golang.org/api 0.307.0 0.310.0
google.golang.org/grpc 1.84.0 1.85.0

Updates github.com/aws/aws-sdk-go-v2 from 1.47.4 to 1.47.5

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.10 to 1.33.12

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.20.10 to 1.20.12

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.114.5 to 1.114.6

Commits

Updates github.com/aws/smithy-go from 1.28.6 to 1.28.7

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-11-03)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.8
    • Bug Fix: Preserve the exact value of numbers in JSON codec instead of automatically parsing to float64.

Release (2026-10-27)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.7
    • Bug Fix: Fix a panic or EOF error when deserializing a JSON union that contains a member not modeled by the client and whose value is not null.
    • Bug Fix: Log the underlying error when dumping an HTTP request or response for logging fails

Release (2026-10-21)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.6
    • Bug Fix: Enforce event stream header key value length limit instead of truncating
    • Bug Fix: Retain the value in a list with the zero value when encountering a null entry on a dense list. This matches how legacy code-generated JSON deserializers behaved.

Release (2026-10-09)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.5
    • Bug Fix: Retain the key with the zero value when encountering a null-value key in a dense map. This matches how legacy code-generated JSON deserializers behaved.

Release (2026-10-07)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.4
    • Bug Fix: Revert #698 that fixed JoinPath with trailing slash. This has a side effect on certain S3 API paths in the downstream SDK that need more consideration.

Release (2026-10-06)

General Highlights

... (truncated)

Commits
  • 37210e1 Release 2026-10-27
  • d5b7eb0 fix(http): log the error when dumping a request or response for logging fails...
  • 02853b0 fix panic for unknown union member collection in json (#735)
  • See full diff in compare view

Updates google.golang.org/api from 0.307.0 to 0.310.0

Release notes

Sourced from google.golang.org/api's releases.

v0.310.0

0.310.0 (2026-10-28)

Features

v0.309.0

0.309.0 (2026-10-25)

Features

v0.308.0

0.308.0 (2026-10-22)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.310.0 (2026-10-28)

Features

0.309.0 (2026-10-25)

Features

0.308.0 (2026-10-22)

Features

Commits

Updates google.golang.org/grpc from 1.84.0 to 1.85.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.85.0

New Features

  • stats: Expose the effective client authority (sent on the wire as the HTTP/2 :authority header) in client stats.OutHeader events. (#9296)
  • metadata: Add ValueFromOutgoingContext, which reads a single metadata value from outgoing context without copying the entire outgoing metadata into a new map. (#9282)

Bug Fixes

  • transport: Refine control buffer throttling to only count peer-induced control frames, raise the default GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT from 100 to 10,000, and close client connections if reads remain throttled for 10s. (#9563)
  • server: Ensure Stop() forcefully terminates the server while GracefulStop() is waiting for active handlers to complete. (#9394)
  • server: Unconditionally increment the highest-seen stream ID on when handling HEADERS frames to comply with RFC 7540 §5.1.1. Previously, truncated HEADERS frames left the connection in an inconsistent state and allowed stream IDs to be reused by clients without resulting in a protocol error. (#9414)
  • server: Terminate streams immediately when a HEADERS frame includes the EndStream bit. Previously, this caused server handlers to hang when reading a message. (#9391)
  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (#9365)
  • xds: Fix a bug where route header matchers with non-lowercase names failed to match routes. (#9353)
  • client: Ensure retried RPCs use the correct :authority value specified by the LB policy instead of inheriting it from a previous attempt. (#9277)
  • transport: Fail streams with io.ErrUnexpectedEOF instead of io.EOF upon receiving truncated message headers or bodies after partial data has already been received. (#9204)
Commits

@dependabot
dependabot Bot requested a review from a team as a code owner November 5, 2026 20:32
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 5, 2026
@dependabot
dependabot Bot requested a review from mhutchinson November 5, 2026 20:32
@dependabot dependabot Bot added the go Pull requests that update Go code label Nov 5, 2026
@dependabot dependabot Bot changed the title Bump the all-go-deps group with 7 updates Bump the all-go-deps group across 1 directory with 7 updates Nov 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/all-go-deps-63366c6b75 branch from f5ce9bb to c9455c4 Compare November 6, 2026 15:15

@github-actions github-actions Bot left a comment •

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Performance Alert ⚠️

Possible performance regression was detected for benchmark.
Benchmark result of this commit is worse than the previous benchmark result exceeding threshold 1.50.

Benchmark suite Current: 926fc6e Previous: 686ef94 Ratio
BenchmarkMarshalTlogEntryBundle/entrySize=1024B (github.com/transparency-dev/tessera/storage/posix) - MB/s 6646.76 MB/s 3872.42 MB/s 1.72

This comment was automatically generated by workflow using github-action-benchmark.

@mhutchinson

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps the all-go-deps group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.47.4` | `1.47.5` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.10` | `1.33.12` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.20.10` | `1.20.12` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.114.5` | `1.114.6` |
| [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.28.6` | `1.28.7` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.307.0` | `0.310.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.84.0` | `1.85.0` |



Updates `github.com/aws/aws-sdk-go-v2` from 1.47.4 to 1.47.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.47.4...v1.47.5)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.10 to 1.33.12
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.33.10...config/v1.33.12)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.20.10 to 1.20.12
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/emr/v1.20.10...service/sso/v1.20.12)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.114.5 to 1.114.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.114.5...service/s3/v1.114.6)

Updates `github.com/aws/smithy-go` from 1.28.6 to 1.28.7
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.28.6...v1.28.7)

Updates `google.golang.org/api` from 0.307.0 to 0.310.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.307.0...v0.310.0)

Updates `google.golang.org/grpc` from 1.84.0 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.84.0...v1.85.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.47.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-deps
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-deps
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.20.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-deps
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.114.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-deps
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.28.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-deps
- dependency-name: google.golang.org/api
  dependency-version: 0.310.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-deps
- dependency-name: google.golang.org/grpc
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/all-go-deps-63366c6b75 branch from c9455c4 to 926fc6e Compare November 6, 2026 17:19
@mhutchinson
mhutchinson merged commit c5eff7d into main Nov 9, 2026
27 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/all-go-deps-63366c6b75 branch November 9, 2026 08:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant