An open index of dependabot pull requests across open source projects.

dev: bump the safe group across 1 directory with 21 updates

Open
Number: #7702
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 1
Created: August 26, 2025 at 03:50 PM UTC
(11 months ago)
Updated: September 02, 2025 at 04:11 AM UTC
(11 months ago)
Labels:
dependencies go
Description:

Bumps the safe group with 16 updates in the / directory:

Package From To
github.com/aws/aws-sdk-go 1.55.7 1.55.8
github.com/aws/aws-sdk-go-v2/config 1.29.12 1.31.2
github.com/aws/aws-sdk-go-v2/service/s3 1.78.2 1.87.1
github.com/emersion/go-smtp 0.22.0 0.24.0
github.com/getsentry/sentry-go 0.34.1 0.35.1
github.com/grpc-ecosystem/grpc-gateway/v2 2.27.1 2.27.2
github.com/jarcoal/httpmock 1.4.0 1.4.1
github.com/nats-io/nats-server/v2 2.11.4 2.11.8
github.com/prometheus/client_golang 1.22.0 1.23.0
github.com/redis/go-redis/v9 9.11.0 9.12.1
github.com/spf13/pflag 1.0.6 1.0.7
github.com/throttled/throttled/v2 2.13.0 2.15.0
github.com/uptrace/bun 1.2.14 1.2.15
github.com/uptrace/bun/dialect/pgdialect 1.2.14 1.2.15
github.com/uptrace/bun/driver/pgdriver 1.2.14 1.2.15
golang.org/x/net 0.42.0 0.43.0

Updates github.com/aws/aws-sdk-go from 1.55.7 to 1.55.8

Release notes

Sourced from github.com/aws/aws-sdk-go's releases.

Release v1.55.8 (2025-07-31)

SDK Features

  • Mark the module and all packages as deprecated.
    • This SDK has entered end-of-support.
Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.29.12 to 1.31.2

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.78.2 to 1.87.1

Commits

Updates github.com/emersion/go-smtp from 0.22.0 to 0.24.0

Commits
  • ab24fe7 Remove superfluous validateLine() calls in sendMail()
  • 6944e33 Implement MT-PRIORITY (RFC 6710)
  • 54dd31d Implement DELIVERBY (RFC 2852)
  • See full diff in compare view

Updates github.com/getsentry/sentry-go from 0.34.1 to 0.35.1

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.35.1

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.35.1.

Bug Fixes

  • Fix race conditions when accessing the scope during logging operations (#1050)
  • Fix nil pointer dereference with malformed URLs when tracing is enabled in fasthttp and fiber integrations (#1055)

Misc

  • Bump github.com/gofiber/fiber/v2 from 2.52.5 to 2.52.9 in /fiber (#1067)

0.35.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.35.0.

Breaking Changes

  • Changes to the logging API (#1046)

The logging API now supports a fluent interface for structured logging with attributes:

// usage before
logger := sentry.NewLogger(ctx)
// attributes weren't being set permanently
logger.SetAttributes(
    attribute.String("version", "1.0.0"),
)
logger.Infof(ctx, "Message with parameters %d and %d", 1, 2)

// new behavior
ctx := context.Background()
logger := sentry.NewLogger(ctx)

// Set permanent attributes on the logger
logger.SetAttributes(
attribute.String("version", "1.0.0"),
)

// Chain attributes on individual log entries
logger.Info().
String("key.string", "value").
Int("key.int", 42).
Bool("key.bool", true).
Emitf("Message with parameters %d and %d", 1, 2)

Bug Fixes

  • Correctly serialize FailureIssueThreshold and RecoveryThreshold onto check-in payloads (#1060)
Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.35.1

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.35.1.

Bug Fixes

  • Fix race conditions when accessing the scope during logging operations (#1050)
  • Fix nil pointer dereference with malformed URLs when tracing is enabled in fasthttp and fiber integrations (#1055)

Misc

  • Bump github.com/gofiber/fiber/v2 from 2.52.5 to 2.52.9 in /fiber (#1067)

0.35.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.35.0.

Breaking Changes

  • Changes to the logging API (#1046)

The logging API now supports a fluent interface for structured logging with attributes:

// usage before
logger := sentry.NewLogger(ctx)
// attributes weren't being set permanently
logger.SetAttributes(
    attribute.String("version", "1.0.0"),
)
logger.Infof(ctx, "Message with parameters %d and %d", 1, 2)

// new behavior
ctx := context.Background()
logger := sentry.NewLogger(ctx)

// Set permanent attributes on the logger
logger.SetAttributes(
attribute.String("version", "1.0.0"),
)

// Chain attributes on individual log entries
logger.Info().
String("key.string", "value").
Int("key.int", 42).
Bool("key.bool", true).
Emitf("Message with parameters %d and %d", 1, 2)

Bug Fixes

... (truncated)

Commits

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.1 to 2.27.2

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.27.2

What's Changed

New Contributors

Full Changelog: https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.27.1...v2.27.2

Commits
  • 91958df chore(deps): update dependency rules_shell to v0.6.0 (#5862)
  • 74cf2e0 Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v3 (#5857)
  • 2fba191 chore(deps): update googleapis digest to 3b2a2ae (#5860)
  • ed12336 fix(deps): update module google.golang.org/grpc to v1.75.0 (#5859)
  • c2a8616 chore(deps): update googleapis digest to 2032c33 (#5858)
  • 77e504f Fix nested schema definition for body parameter (#3058) (#5827)
  • 7df4168 fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 3122310...
  • 6d1d1fc fix(deps): update google.golang.org/genproto/googleapis/api digest to 3122310...
  • ec3d9b2 chore(deps): update googleapis digest to d869249 (#5852)
  • 8499438 chore(deps): update googleapis digest to 6429996 (#5851)
  • Additional commits viewable in compare view

Updates github.com/jarcoal/httpmock from 1.4.0 to 1.4.1

Release notes

Sourced from github.com/jarcoal/httpmock's releases.

v1.4.1

What's Changed

New Contributors

Full Changelog: https://github.com/jarcoal/httpmock/compare/v1.4.0...v1.4.1

Commits
  • 314d58a fix: protect all body-related methods with mutext
  • e482896 fix: avoid data race when closing body
  • c977145 test: also test with go v1.25 and use golangci-lint v2.4.0
  • See full diff in compare view

Updates github.com/nats-io/nats-server/v2 from 2.11.4 to 2.11.8

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.11.8

Changelog

Refer to the 2.11 Upgrade Guide for backwards compatibility notes with 2.10.x.

Go Version

Dependencies

  • golang.org/x/crypto v0.41.0 (#7166)
  • golang.org/x/sys v0.35.0 (#7166)

Added

General

  • Community-contributed support for building on Solaris and Illumos (#7122, thanks to @​jwntree)

Fixed

General

  • String-to-integer parsing has been improved in various places to prevent overflows/underflows (#7145)

JetStream

  • Fixed an incorrectly formatted log line when failing to load a block when recovering TTLs (#7150)
  • Raft will now step down if a higher term is detected during a catchup (#7151)
  • Raft will now more reliably ignore entries from previous/cancelled catchups that arrive late (#7151)
  • Fix a potential panic that could happen by a division by zero when applying Raft entries (#7151)
  • The healthcheck endpoint should no longer report transient errors for newly created or recently deleted consumers (#7154)
  • Fix a potential panic when trying to truncate a filestore block that doesn't exist (#7162)
  • Clean up stale index.db file when truncating so that it is not inconsistent if the truncate operation is interrupted (#7162)
  • Fix an off-by-one problem when Raft truncates to the correct index at startup (#7162)
  • Ephemeral consumers will always select an online server when created on a replicated stream (#7165)

Tests

  • Tests have been improved (#7140)

Complete Changes

https://github.com/nats-io/nats-server/compare/v2.11.7...v2.11.8

Release v2.11.8-RC.1

Changelog

Refer to the 2.11 Upgrade Guide for backwards compatibility notes with 2.10.x.

... (truncated)

Commits
  • ec0d7e3 Release v2.11.8
  • 819047d Release v2.11.8-RC.1
  • 031e636 Cherry-picks for 2.11.8-RC.1 (#7168)
  • bfb410e [FIXED] Ephemeral consumers always selects an online server
  • 50876ed [FIXED] Truncate removes index.db first
  • f706551 [FIXED] NRG: Truncate to previous correct entry
  • df30f46 [FIXED] Truncate to removed block
  • 39a511a Update dependencies
  • dff3a6d Update golangci-lint
  • 5f61aa4 illumos build fix
  • Additional commits viewable in compare view

Updates github.com/nats-io/nats.go from 1.43.0 to 1.44.0

Release notes

Sourced from github.com/nats-io/nats.go's releases.

Release v1.44.0

Changelog

Overview

This PR adds a PushConsumer implementation to jetstream, allowing easier migration to new API while maintaining usage of push consumers. For now it only supports the callback-based Consume(), more consuming options will be added in future releases.

ADDED

  • Core NATS:
    • UserCredentialBytes() Conn option (#1877)
  • JetStream:
    • PushConsumer implementation in jetstream package
    • Expose ClientTrace in JetStreamOptions (#1886)
  • Service API:
    • Expose WithEndpointPendingLimits option (#1899)
  • Legacy KeyValue:
    • Error() method to KeyLister and KeyWatcher interfaces (#1889)

FIXED

  • Core NATS:
    • Fix timeoutWriter not recovering after first error (#1896)
  • JetStream:
    • Consumer.Next() hangs after connection is closed (#1883)
    • Fixed stream info request for strict mode (#1887)
    • Ordered consumer not closing on connection close (#1885)
    • Return a more appropriate error when Subject Transform is not supported (#1416)
    • Fix subject transform comparison. Thanks @​erikmansson for the contribution (#1907)
  • Legacy JetStream:
    • Use timeout from JetStreamContext if no deadline is set on ctx (#1909)
  • KeyValue:
    • Keys() and ListKeys() returning duplicates (#1884)
    • Fix subject prefix for the Create/Update operation in KV store. Thanks @​SalvaChiLlo for the contribution (#1903)

CHANGED

  • Change DefaultSubPendingMsgsLimit (#998)

Complete Changes

https://github.com/nats-io/nats.go/compare/v1.43.0...v1.44.0

Commits
  • 7a260b8 Release v1.44.0 (#1910)
  • dfcb02d [FIXED] Use mirror-aware prefix when updating KV key (#1903)
  • 0bba2a9 [ADDED] PushConsumer implementation in jetstream package (#1785)
  • 627a9f6 [FIXED] KeyValue Keys() and ListKeys() returning duplicates (#1884)
  • 9743171 Merge pull request #1909 from nats-io/fix-watcher-timeout
  • 3bd15a8 [FIXED] Use timeout from JetStreamContext if no deadline is set on ctx
  • 0fc96b1 [FIXED] Fix subject transform comparison (#1907)
  • ea3ef92 [IMPROVED] Change DefaultSubPendingMsgsLimit comment to reflect actual value ...
  • f038fb4 [FIXED] Return a more appropriate error when subject transforms are not suppo...
  • ad6e34e [FIXED] Ordered consumer not closing on connection close (#1885)
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.22.0 to 1.23.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.0 - 2025-07-30

  • [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812
  • [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766
  • [FEATURE] Add exemplars for native histograms #1686
  • [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823
  • [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833
  • [BUGFIX] exp/api: client prompt return on context cancellation #1729

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.0 / 2025-07-30

  • [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812
  • [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766
  • [FEATURE] Add exemplars for native histograms #1686
  • [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823
  • [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833
  • [BUGFIX] exp/api: client prompt return on context cancellation #1729
Commits

Updates github.com/redis/go-redis/v9 from 9.11.0 to 9.12.1

Release notes

Sourced from github.com/redis/go-redis/v9's releases.

9.12.1

🚀 Highlights

In the last version (9.12.0) the client introduced bigger write and read buffer sizes. The default value was 512KiB. However, users reported that this is too big for most use cases and can lead to high memory usage. In this version the default value is changed to 256KiB. The README.md was updated to reflect the correct default value and include a note that the default value can be changed.

🐛 Bug Fixes

  • fix(options): Add buffer sizes to failover. Update README (#3468)

🧰 Maintenance

  • fix(options): Add buffer sizes to failover. Update README (#3468)
  • chore: update & fix otel example (#3466)

Contributors

We'd like to thank all the contributors who worked on this release!

@​ndyakov and @​vmihailenco

9.12.0

🚀 Highlights

  • This release includes support for Redis 8.2.
  • Introduces an experimental Query Builders for FTSearch, FTAggregate and other search commands.
  • Adds support for EPSILON option in FT.VSIM.
  • Includes bug fixes and improvements contributed by the community related to ring and redisotel.

Changes

  • Improve stale issue workflow (#3458)
  • chore(ci): Add 8.2 rc2 pre build for CI (#3459)
  • Added new stream commands (#3450)
  • feat: Add "skip_verify" to Sentinel (#3428)
  • fix: errors.Join requires Go 1.20 or later (#3442)
  • DOC-4344 document quickstart examples (#3426)
  • feat(bitop): add support for the new bitop operations (#3409)

🚀 New Features

  • feat: recover addIdleConn may occur panic (#2445)
  • feat(ring): specify custom health check func via HeartbeatFn option (#2940)
  • Add Query Builder for RediSearch commands (#3436)
  • add configurable buffer sizes for Redis connections (#3453)
  • Add VAMANA vector type to RediSearch (#3449)
  • VSIM add EPSILON option (#3454)
  • Add closing support to otel metrics instrumentation (#3444)

🐛 Bug Fixes

... (truncated)

Changelog

Sourced from github.com/redis/go-redis/v9's changelog.

9.12.1 (2025-08-11)

🚀 Highlights

In the last version (9.12.0) the client introduced bigger write and read buffer sized. The default value we set was 512KiB. However, users reported that this is too big for most use cases and can lead to high memory usage. In this version the default value is changed to 256KiB. The README.md was updated to reflect the correct default value and include a note that the default value can be changed.

🐛 Bug Fixes

  • fix(options): Add buffer sizes to failover. Update README (#3468)

🧰 Maintenance

  • fix(options): Add buffer sizes to failover. Update README (#3468)
  • chore: update & fix otel example (#3466)

Contributors

We'd like to thank all the contributors who worked on this release!

@​ndyakov and @​vmihailenco

9.12.0 (2025-08-05)

🚀 Highlights

  • This release includes support for Redis 8.2.
  • Introduces an experimental Query Builders for FTSearch, FTAggregate and other search commands.
  • Adds support for EPSILON option in FT.VSIM.
  • Includes bug fixes and improvements contributed by the community related to ring and redisotel.

Changes

  • Improve stale issue workflow (#3458)
  • chore(ci): Add 8.2 rc2 pre build for CI (#3459)
  • Added new stream commands (#3450)
  • feat: Add "skip_verify" to Sentinel (#3428)
  • fix: errors.Join requires Go 1.20 or later (#3442)
  • DOC-4344 document quickstart examples (#3426)
  • feat(bitop): add support for the new bitop operations (#3409)

🚀 New Features

  • feat: recover addIdleConn may occur panic (#2445)
  • feat(ring): specify custom health check func via HeartbeatFn option (#2940)
  • Add Query Builder for RediSearch commands (#3436)
  • add configurable buffer sizes for Redis connections (#3453)
  • Add VAMANA vector type to RediSearch (#3449)
  • VSIM add EPSILON option (#3454)
  • Add closing support to otel metrics instrumentation (#3444)

🐛 Bug Fixes

... (truncated)

Commits
  • 7b4a537 chore(release): 9.12.1, failover client buffer size fixes (#3469)
  • 94cfffa fix(options): Add buffer sizes to failover. Update README (#3468)
  • 2c29ded chore(otel): upgrade otel example to Uptrace v2 (#3466)
  • b7838dc chore(release): 9.12.0 / redis 8.2 (#3464)
  • 6a48d3f feat: recover addIdleConn may occur panic (#2445)
  • 4767d9d fix(redisotel): fix buggy append in reportPoolStats (#3122)
  • 7158a8d feat(ring): specify custom health check func via HeartbeatFn option (#2940)
  • 8d15d03 chore(github): merges into one job with two steps (#3463)
  • 375fa5d chore(doc): improve code readability (#3446)
  • f006e94 chore(release): 9.12.0-beta.1 (#3460)
  • Additional commits viewable in compare view

Updates github.com/spf13/pflag from 1.0.6 to 1.0.7

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.7

What's Changed

New Contributors

Full Changelog: https://github.com/spf13/pflag/compare/v1.0.6...v1.0.7

Commits
  • f9cbdd9 Merge pull request #348 from max-frank/add-time-flag-support
  • e3be2eb Reduce duplication by forwarding to sibling functions
  • 7cc25e3 Don't export TimeValue (yet)
  • d15848d Remove unnecessary time test stderr dev null redirect
  • c5ce22e Use time.Time for expectations in time flag tests
  • 1992c5a Add support for time.Time flags
  • 1c62fb2 Merge pull request #431 from LeGEC/430-fix-usage-message-for-func-flags
  • 1a4b5b2 fix discrepancy in order of arguments for Func() and BoolFunc() #433
  • 4730aa0 fix help message for Func and BoolFunc flags #430
  • f4c97c2 minor: fix typos in comments
  • Additional commits viewable in compare view

Updates github.com/throttled/throttled/v2 from 2.13.0 to 2.15.0

Release notes

Sourced from github.com/throttled/throttled/v2's releases.

v2.15.0

  • #108 Return RetryAfter when peeking

v2.14.0

  • #110 Setup minimum bound to Go 1.18
Changelog

Sourced from github.com/throttled/throttled/v2's changelog.

2.15.0 - 2025-08-23

  • #108 Return RetryAfter when peeking

2.14.0 - 2025-08-22

  • #110 Setup minimum bound to Go 1.18
Commits

Updates github.com/uptrace/bun from 1.2.14 to 1.2.15

Release notes

Sourced from github.com/uptrace/bun's releases.

v1.2.15

Please refer to CHANGELOG.md for details

Changelog

Sourced from github.com/uptrace/bun's changelog.

1.2.15 (2025-07-17)

Bug Fixes

  • pgdriver: add mandatory space before negative numbers to resolve CVE-2024-34359 (8067a8f)

Features

  • db: rename CleanQueryHook to ResetQueryHooks (cb17679)
  • db: support clean query hooks (a5f19a7), closes #1226
  • dialect: return default on update/delete when create table (d347b48), closes #1212
Commits
  • 29e836e Merge pull request #1240 from uptrace/release/v1.2.15
  • 5c5af41 chore: release v1.2.15 (release.sh)
  • 9464a84 Merge pull request #1230 from kissejau/master
  • 16b9ca4 Merge pull request #1225 from thunderkatz/master
  • cb17679 feat(db): rename CleanQueryHook to ResetQueryHooks
  • 8067a8f fix(pgdriver): add mandatory space before negative numbers to resolve CVE-202...
  • 225bab0 Merge pull request #1236 from uptrace/feat-hook-support-clean
  • a5f19a7 feat(db): support clean query hooks
  • 7a28883 Merge pull request #1217 from uptrace/feat-dialect-support-on-update-delete
  • 32d85ae chore: rename Listener.Channel to Listener.CreateChannel
  • Additional commits viewable in compare view

Updates github.com/uptrace/bun/dialect/pgdialect from 1.2.14 to 1.2.15

Release notes

Sourced from github.com/uptrace/bun/dialect/pgdialect's releases.

v1.2.15

Please refer to CHANGELOG.md for details

Changelog

Sourced from github.com/uptrace/bun/dialect/pgdialect's changelog.

1.2.15 (2025-07-17)

Bug Fixes

  • pgdriver: add mandatory space before negative numbers to resolve CVE-2024-34359 (8067a8f)

Features

  • db: rename CleanQueryHook to ResetQueryHooks (cb17679)
  • db: support clean query hooks (a5f19a7), closes #1226
  • dialect: return default on update/delete when create table (d347b48), closes #1212
Commits
  • 29e836e Merge pull request #1240 from uptrace/release/v1.2.15
  • 5c5af41 chore: release v1.2.15 (release.sh)
  • 9464a84 Merge pull request #1230 from kissejau/master
  • 16b9ca4 Merge pull request #1225 from thunderkatz/master
  • cb17679 feat(db): rename CleanQueryHook to ResetQueryHooks
  • 8067a8f fix(pgdriver): add mandatory space before negative numbers to resolve CVE-202...
  • 225bab0 Merge pull request #1236 from uptrace/feat-hook-support-clean
  • a5f19a7 feat(db): support clean query hooks
  • 7a28883 Merge pull request #1217 from uptrace/feat-dialect-support-on-update-delete
  • 32d85ae chore: rename Listener.Channel to Lis...

    Description has been truncated

Pull Request Statistics
Commits:
0
Files Changed:
0
Additions:
+0
Deletions:
-0
Package Dependencies
Ecosystem:
go
Version Change:
0.42.0 → 0.43.0
Update Type:
Minor
Ecosystem:
go
Version Change:
1.78.2 → 1.87.1
Update Type:
Minor
Ecosystem:
go
Version Change:
1.22.0 → 1.23.0
Update Type:
Minor
Ecosystem:
go
Version Change:
9.11.0 → 9.12.1
Update Type:
Minor
Ecosystem:
go
Version Change:
1.55.7 → 1.55.8
Update Type:
Patch
Ecosystem:
go
Version Change:
1.0.6 → 1.0.7
Update Type:
Patch
Ecosystem:
go
Version Change:
1.29.12 → 1.31.2
Update Type:
Minor
Ecosystem:
go
Version Change:
0.34.1 → 0.35.1
Update Type:
Minor
Ecosystem:
go
Version Change:
2.27.1 → 2.27.2
Update Type:
Patch
Ecosystem:
go
Version Change:
2.11.4 → 2.11.8
Update Type:
Patch
Ecosystem:
go
Version Change:
1.4.0 → 1.4.1
Update Type:
Patch
Ecosystem:
go
Version Change:
0.22.0 → 0.24.0
Update Type:
Minor
Ecosystem:
go
Version Change:
1.2.14 → 1.2.15
Update Type:
Patch
Ecosystem:
go
Version Change:
1.2.14 → 1.2.15
Update Type:
Patch
Ecosystem:
go
Version Change:
1.2.14 → 1.2.15
Update Type:
Patch
Ecosystem:
go
Version Change:
2.13.0 → 2.15.0
Update Type:
Minor
Technical Details
ID: 6560883
UUID: 3356221602
Node ID: PR_kwDOCdvj-c6lcTP9
Host: GitHub
Repository: TheThingsNetwork/lorawan-stack