An open index of dependabot pull requests across open source projects.

dev: bump the safe group across 1 directory with 31 updates

Open
Number: #7709
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 0
Created: September 03, 2025 at 01:38 AM UTC
(11 months ago)
Updated: September 03, 2025 at 01:38 AM UTC
(11 months ago)
Labels:
dependencies go
Description:

Bumps the safe group with 19 updates in the / directory:

Package From To
github.com/aws/aws-sdk-go 1.55.7 1.55.8
github.com/aws/aws-sdk-go-v2/config 1.29.12 1.31.6
github.com/aws/aws-sdk-go-v2/service/s3 1.78.2 1.87.3
github.com/emersion/go-smtp 0.22.0 0.24.0
github.com/getsentry/sentry-go 0.34.1 0.35.1
github.com/grpc-ecosystem/grpc-gateway/v2 2.27.1 2.27.2
github.com/jarcoal/httpmock 1.4.0 1.4.1
github.com/nats-io/nats-server/v2 2.11.4 2.11.8
github.com/prometheus/client_golang 1.22.0 1.23.0
github.com/redis/go-redis/v9 9.11.0 9.12.1
github.com/spf13/cobra 1.9.1 1.10.1
github.com/throttled/throttled/v2 2.13.0 2.15.0
github.com/uptrace/bun 1.2.14 1.2.15
github.com/uptrace/bun/dialect/pgdialect 1.2.14 1.2.15
github.com/uptrace/bun/driver/pgdriver 1.2.14 1.2.15
go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux 0.62.0 0.63.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.62.0 0.63.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.62.0 0.63.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 1.37.0 1.38.0

Updates github.com/aws/aws-sdk-go from 1.55.7 to 1.55.8

Release notes

Sourced from github.com/aws/aws-sdk-go's releases.

Release v1.55.8 (2025-07-31)

SDK Features

  • Mark the module and all packages as deprecated.
    • This SDK has entered end-of-support.
Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.29.12 to 1.31.6

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.78.2 to 1.87.3

Commits

Updates github.com/emersion/go-smtp from 0.22.0 to 0.24.0

Commits
  • ab24fe7 Remove superfluous validateLine() calls in sendMail()
  • 6944e33 Implement MT-PRIORITY (RFC 6710)
  • 54dd31d Implement DELIVERBY (RFC 2852)
  • See full diff in compare view

Updates github.com/getsentry/sentry-go from 0.34.1 to 0.35.1

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.35.1

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.35.1.

Bug Fixes

  • Fix race conditions when accessing the scope during logging operations (#1050)
  • Fix nil pointer dereference with malformed URLs when tracing is enabled in fasthttp and fiber integrations (#1055)

Misc

  • Bump github.com/gofiber/fiber/v2 from 2.52.5 to 2.52.9 in /fiber (#1067)

0.35.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.35.0.

Breaking Changes

  • Changes to the logging API (#1046)

The logging API now supports a fluent interface for structured logging with attributes:

// usage before
logger := sentry.NewLogger(ctx)
// attributes weren't being set permanently
logger.SetAttributes(
    attribute.String("version", "1.0.0"),
)
logger.Infof(ctx, "Message with parameters %d and %d", 1, 2)

// new behavior
ctx := context.Background()
logger := sentry.NewLogger(ctx)

// Set permanent attributes on the logger
logger.SetAttributes(
attribute.String("version", "1.0.0"),
)

// Chain attributes on individual log entries
logger.Info().
String("key.string", "value").
Int("key.int", 42).
Bool("key.bool", true).
Emitf("Message with parameters %d and %d", 1, 2)

Bug Fixes

  • Correctly serialize FailureIssueThreshold and RecoveryThreshold onto check-in payloads (#1060)
Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.35.1

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.35.1.

Bug Fixes

  • Fix race conditions when accessing the scope during logging operations (#1050)
  • Fix nil pointer dereference with malformed URLs when tracing is enabled in fasthttp and fiber integrations (#1055)

Misc

  • Bump github.com/gofiber/fiber/v2 from 2.52.5 to 2.52.9 in /fiber (#1067)

0.35.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.35.0.

Breaking Changes

  • Changes to the logging API (#1046)

The logging API now supports a fluent interface for structured logging with attributes:

// usage before
logger := sentry.NewLogger(ctx)
// attributes weren't being set permanently
logger.SetAttributes(
    attribute.String("version", "1.0.0"),
)
logger.Infof(ctx, "Message with parameters %d and %d", 1, 2)

// new behavior
ctx := context.Background()
logger := sentry.NewLogger(ctx)

// Set permanent attributes on the logger
logger.SetAttributes(
attribute.String("version", "1.0.0"),
)

// Chain attributes on individual log entries
logger.Info().
String("key.string", "value").
Int("key.int", 42).
Bool("key.bool", true).
Emitf("Message with parameters %d and %d", 1, 2)

Bug Fixes

... (truncated)

Commits

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.1 to 2.27.2

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.27.2

What's Changed

New Contributors

Full Changelog: https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.27.1...v2.27.2

Commits
  • 91958df chore(deps): update dependency rules_shell to v0.6.0 (#5862)
  • 74cf2e0 Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v3 (#5857)
  • 2fba191 chore(deps): update googleapis digest to 3b2a2ae (#5860)
  • ed12336 fix(deps): update module google.golang.org/grpc to v1.75.0 (#5859)
  • c2a8616 chore(deps): update googleapis digest to 2032c33 (#5858)
  • 77e504f Fix nested schema definition for body parameter (#3058) (#5827)
  • 7df4168 fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 3122310...
  • 6d1d1fc fix(deps): update google.golang.org/genproto/googleapis/api digest to 3122310...
  • ec3d9b2 chore(deps): update googleapis digest to d869249 (#5852)
  • 8499438 chore(deps): update googleapis digest to 6429996 (#5851)
  • Additional commits viewable in compare view

Updates github.com/jarcoal/httpmock from 1.4.0 to 1.4.1

Release notes

Sourced from github.com/jarcoal/httpmock's releases.

v1.4.1

What's Changed

New Contributors

Full Changelog: https://github.com/jarcoal/httpmock/compare/v1.4.0...v1.4.1

Commits
  • 314d58a fix: protect all body-related methods with mutext
  • e482896 fix: avoid data race when closing body
  • c977145 test: also test with go v1.25 and use golangci-lint v2.4.0
  • See full diff in compare view

Updates github.com/nats-io/nats-server/v2 from 2.11.4 to 2.11.8

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.11.8

Changelog

Refer to the 2.11 Upgrade Guide for backwards compatibility notes with 2.10.x.

Go Version

Dependencies

  • golang.org/x/crypto v0.41.0 (#7166)
  • golang.org/x/sys v0.35.0 (#7166)

Added

General

  • Community-contributed support for building on Solaris and Illumos (#7122, thanks to @​jwntree)

Fixed

General

  • String-to-integer parsing has been improved in various places to prevent overflows/underflows (#7145)

JetStream

  • Fixed an incorrectly formatted log line when failing to load a block when recovering TTLs (#7150)
  • Raft will now step down if a higher term is detected during a catchup (#7151)
  • Raft will now more reliably ignore entries from previous/cancelled catchups that arrive late (#7151)
  • Fix a potential panic that could happen by a division by zero when applying Raft entries (#7151)
  • The healthcheck endpoint should no longer report transient errors for newly created or recently deleted consumers (#7154)
  • Fix a potential panic when trying to truncate a filestore block that doesn't exist (#7162)
  • Clean up stale index.db file when truncating so that it is not inconsistent if the truncate operation is interrupted (#7162)
  • Fix an off-by-one problem when Raft truncates to the correct index at startup (#7162)
  • Ephemeral consumers will always select an online server when created on a replicated stream (#7165)

Tests

  • Tests have been improved (#7140)

Complete Changes

https://github.com/nats-io/nats-server/compare/v2.11.7...v2.11.8

Release v2.11.8-RC.1

Changelog

Refer to the 2.11 Upgrade Guide for backwards compatibility notes with 2.10.x.

... (truncated)

Commits
  • ec0d7e3 Release v2.11.8
  • 819047d Release v2.11.8-RC.1
  • 031e636 Cherry-picks for 2.11.8-RC.1 (#7168)
  • bfb410e [FIXED] Ephemeral consumers always selects an online server
  • 50876ed [FIXED] Truncate removes index.db first
  • f706551 [FIXED] NRG: Truncate to previous correct entry
  • df30f46 [FIXED] Truncate to removed block
  • 39a511a Update dependencies
  • dff3a6d Update golangci-lint
  • 5f61aa4 illumos build fix
  • Additional commits viewable in compare view

Updates github.com/nats-io/nats.go from 1.43.0 to 1.44.0

Release notes

Sourced from github.com/nats-io/nats.go's releases.

Release v1.44.0

Changelog

Overview

This PR adds a PushConsumer implementation to jetstream, allowing easier migration to new API while maintaining usage of push consumers. For now it only supports the callback-based Consume(), more consuming options will be added in future releases.

ADDED

  • Core NATS:
    • UserCredentialBytes() Conn option (#1877)
  • JetStream:
    • PushConsumer implementation in jetstream package
    • Expose ClientTrace in JetStreamOptions (#1886)
  • Service API:
    • Expose WithEndpointPendingLimits option (#1899)
  • Legacy KeyValue:
    • Error() method to KeyLister and KeyWatcher interfaces (#1889)

FIXED

  • Core NATS:
    • Fix timeoutWriter not recovering after first error (#1896)
  • JetStream:
    • Consumer.Next() hangs after connection is closed (#1883)
    • Fixed stream info request for strict mode (#1887)
    • Ordered consumer not closing on connection close (#1885)
    • Return a more appropriate error when Subject Transform is not supported (#1416)
    • Fix subject transform comparison. Thanks @​erikmansson for the contribution (#1907)
  • Legacy JetStream:
    • Use timeout from JetStreamContext if no deadline is set on ctx (#1909)
  • KeyValue:
    • Keys() and ListKeys() returning duplicates (#1884)
    • Fix subject prefix for the Create/Update operation in KV store. Thanks @​SalvaChiLlo for the contribution (#1903)

CHANGED

  • Change DefaultSubPendingMsgsLimit (#998)

Complete Changes

https://github.com/nats-io/nats.go/compare/v1.43.0...v1.44.0

Commits
  • 7a260b8 Release v1.44.0 (#1910)
  • dfcb02d [FIXED] Use mirror-aware prefix when updating KV key (#1903)
  • 0bba2a9 [ADDED] PushConsumer implementation in jetstream package (#1785)
  • 627a9f6 [FIXED] KeyValue Keys() and ListKeys() returning duplicates (#1884)
  • 9743171 Merge pull request #1909 from nats-io/fix-watcher-timeout
  • 3bd15a8 [FIXED] Use timeout from JetStreamContext if no deadline is set on ctx
  • 0fc96b1 [FIXED] Fix subject transform comparison (#1907)
  • ea3ef92 [IMPROVED] Change DefaultSubPendingMsgsLimit comment to reflect actual value ...
  • f038fb4 [FIXED] Return a more appropriate error when subject transforms are not suppo...
  • ad6e34e [FIXED] Ordered consumer not closing on connection close (#1885)
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.22.0 to 1.23.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.0 - 2025-07-30

  • [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812
  • [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766
  • [FEATURE] Add exemplars for native histograms #1686
  • [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823
  • [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833
  • [BUGFIX] exp/api: client prompt return on context cancellation #1729

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.0 / 2025-07-30

  • [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812
  • [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766
  • [FEATURE] Add exemplars for native histograms #1686
  • [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823
  • [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833
  • [BUGFIX] exp/api: client prompt return on context cancellation #1729
Commits

Updates github.com/redis/go-redis/v9 from 9.11.0 to 9.12.1

Release notes

Sourced from github.com/redis/go-redis/v9's releases.

9.12.1

🚀 Highlights

In the last version (9.12.0) the client introduced bigger write and read buffer sizes. The default value was 512KiB. However, users reported that this is too big for most use cases and can lead to high memory usage. In this version the default value is changed to 256KiB. The README.md was updated to reflect the correct default value and include a note that the default value can be changed.

🐛 Bug Fixes

  • fix(options): Add buffer sizes to failover. Update README (#3468)

🧰 Maintenance

  • fix(options): Add buffer sizes to failover. Update README (#3468)
  • chore: update & fix otel example (#3466)

Contributors

We'd like to thank all the contributors who worked on this release!

@​ndyakov and @​vmihailenco

9.12.0

🚀 Highlights

  • This release includes support for Redis 8.2.
  • Introduces an experimental Query Builders for FTSearch, FTAggregate and other search commands.
  • Adds support for EPSILON option in FT.VSIM.
  • Includes bug fixes and improvements contributed by the community related to ring and redisotel.

Changes

  • Improve stale issue workflow (#3458)
  • chore(ci): Add 8.2 rc2 pre build for CI (#3459)
  • Added new stream commands (#3450)
  • feat: Add "skip_verify" to Sentinel (#3428)
  • fix: errors.Join requires Go 1.20 or later (#3442)
  • DOC-4344 document quickstart examples (#3426)
  • feat(bitop): add support for the new bitop operations (#3409)

🚀 New Features

  • feat: recover addIdleConn may occur panic (#2445)
  • feat(ring): specify custom health check func via HeartbeatFn option (#2940)
  • Add Query Builder for RediSearch commands (#3436)
  • add configurable buffer sizes for Redis connections (#3453)
  • Add VAMANA vector type to RediSearch (#3449)
  • VSIM add EPSILON option (#3454)
  • Add closing support to otel metrics instrumentation (#3444)

🐛 Bug Fixes

... (truncated)

Changelog

Sourced from github.com/redis/go-redis/v9's changelog.

9.12.1 (2025-08-11)

🚀 Highlights

In the last version (9.12.0) the client introduced bigger write and read buffer sized. The default value we set was 512KiB. However, users reported that this is too big for most use cases and can lead to high memory usage. In this version the default value is changed to 256KiB. The README.md was updated to reflect the correct default value and include a note that the default value can be changed.

🐛 Bug Fixes

  • fix(options): Add buffer sizes to failover. Update README (#3468)

🧰 Maintenance

  • fix(options): Add buffer sizes to failover. Update README (#3468)
  • chore: update & fix otel example (#3466)

Contributors

We'd like to thank all the contributors who worked on this release!

@​ndyakov and @​vmihailenco

9.12.0 (2025-08-05)

🚀 Highlights

  • This release includes support for Redis 8.2.
  • Introduces an experimental Query Builders for FTSearch, FTAggregate and other search commands.
  • Adds support for EPSILON option in FT.VSIM.
  • Includes bug fixes and improvements contributed by the community related to ring and redisotel.

Changes

  • Improve stale issue workflow (#3458)
  • chore(ci): Add 8.2 rc2 pre build for CI (#3459)
  • Added new stream commands (#3450)
  • feat: Add "skip_verify" to Sentinel (#3428)
  • fix: errors.Join requires Go 1.20 or later (#3442)
  • DOC-4344 document quickstart examples (#3426)
  • feat(bitop): add support for the new bitop operations (#3409)

🚀 New Features

  • feat: recover addIdleConn may occur panic (#2445)
  • feat(ring): specify custom health check func via HeartbeatFn option (#2940)
  • Add Query Builder for RediSearch commands (#3436)
  • add configurable buffer sizes for Redis connections (#3453)
  • Add VAMANA vector type to RediSearch (#3449)
  • VSIM add EPSILON option (#3454)
  • Add closing support to otel metrics instrumentation (#3444)

🐛 Bug Fixes

... (truncated)

Commits
  • 7b4a537 chore(release): 9.12.1, failover client buffer size fixes (#3469)
  • 94cfffa fix(options): Add buffer sizes to failover. Update README (#3468)
  • 2c29ded chore(otel): upgrade otel example to Uptrace v2 (#3466)
  • b7838dc chore(release): 9.12.0 / redis 8.2 (#3464)
  • 6a48d3f feat: recover addIdleConn may occur panic (#2445)
  • 4767d9d fix(redisotel): fix buggy append in reportPoolStats (#3122)
  • 7158a8d feat(ring): specify custom health check func via HeartbeatFn option (#2940)
  • 8d15d03 chore(github): merges into one job with two steps (#3463)
  • 375fa5d chore(doc): improve code readability (#3446)
  • f006e94 chore(release): 9.12.0-beta.1 (#3460)
  • Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.9.1 to 1.10.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.1

🐛 Fix

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: https://github.com/spf13/cobra/compare/v1.10.0...v1.10.1

v1.10.0

What's Changed

🚨 Attention!

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

  • If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`
  • or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: spf13/cobra#2303

✨ Features

🐛 Fix

🪠 Testing

📝 Docs

New Contributors

... (truncated)

Commits
  • 7da941c chore: Bump pflag to v1.0.9 (#2305)
  • 51d6751 Bump pflag to 1.0.8 (#2303)
  • 3f3b818 Update README.md with new logo
  • dcaf42e Add Periscope to the list of projects using Cobra (#2299)
  • 6dec1ae The default ShellCompDirective can be customized for a command and its subcom...
  • c8289c1 chore(golangci-lint): add some exclusion presets
  • 4af7b64 refactor: apply golangci-lint autofixes, work around false positives
  • 75790e4 chore(golangci-lint): upgrade to v2
  • db3ddb5 Adding sponsorship to README.md
  • 67171d6 putting sponsorship below header
  • Additional commits viewable in compare view

Updates github.com/spf13/pflag from 1.0.6 to 1.0.9

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.9

What's Changed

Full Changelog: https://github.com/spf13/pflag/compare/v1.0.8...v1.0.9

v1.0.8

:warning: Breaking Change

This version, while only a patch bump, includes a (very minor) breaking change: the flag.ParseErrorsWhitelist struct and corresponding FlagSet.parseErrorsWhitelist field have been renamed to ParseErrorsAllowlist.

This should result in compilation errors in any code that uses these fields, which can be fixed by adjusting the names at call sites. There is no change in semantics or behavior of the struct or field referred to by these names. If your code compiles without errors after bumping to/past v1.0.8, you are not affected by this change.

The breaking change was reverted in v1.0.9, by means of re-introducing the old names with deprecation warnings. The plan is still to remove them in a future release, so if your code does depend on the old names, please change them to use the new names at your earliest convenience.

What's Changed

New Contributors

Full Changelog: https://github.com/spf13/pflag/compare/v1.0.7...v1.0.8

v1.0.7

What's Changed

New Contributors

... (truncated)

Commits
  • 1043857 Merge pull request #446 from spf13/fix-backwards-compat
  • 7412009 fix: Restore ParseErrorsWhitelist name for now
  • b9c16fa Merge pull request #444 from spf13/reset-args-even-if-empty
  • 40abc49 Merge pull request #443 from spf13/silence-errhelp
  • 1bf832c Use errors.Is instead of equality check
  • d25dd24 Reset args on re-parse even if empty
  • 094909d Merge pull request #365 from vaguecoder/str2str-sorted
  • ccb49e5 Print Default Values of String-to-String in Sorted Order
  • b55ffb6 fix: Don't print ErrHelp in ParseAll
  • 7c651d1 Merge pull request #407 from tmc/fix-errhelp
  • Additional commits viewable in compare view

Updates github.com/throttled/throttled/v2 from 2.13.0 to 2.15.0

Release notes

Sourced from github.com/throttled/throttled/v2's releases.Description has been truncated

Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+162
Deletions:
-183
Package Dependencies
Ecosystem:
go
Version Change:
1.78.2 → 1.87.3
Update Type:
Minor
Ecosystem:
go
Version Change:
1.9.1 → 1.10.1
Update Type:
Minor
Ecosystem:
go
Version Change:
1.22.0 → 1.23.0
Update Type:
Minor
Ecosystem:
go
Version Change:
9.11.0 → 9.12.1
Update Type:
Minor
Ecosystem:
go
Version Change:
0.62.0 → 0.63.0
Update Type:
Minor
Ecosystem:
go
Version Change:
1.37.0 → 1.38.0
Update Type:
Minor
Ecosystem:
go
Version Change:
1.55.7 → 1.55.8
Update Type:
Patch
Ecosystem:
go
Version Change:
0.62.0 → 0.63.0
Update Type:
Minor
Ecosystem:
go
Version Change:
1.29.12 → 1.31.6
Update Type:
Minor
Ecosystem:
go
Version Change:
0.34.1 → 0.35.1
Update Type:
Minor
Ecosystem:
go
Version Change:
2.27.1 → 2.27.2
Update Type:
Patch
Ecosystem:
go
Version Change:
2.11.4 → 2.11.8
Update Type:
Patch
Ecosystem:
go
Version Change:
0.62.0 → 0.63.0
Update Type:
Minor
Ecosystem:
go
Version Change:
1.4.0 → 1.4.1
Update Type:
Patch
Ecosystem:
go
Version Change:
0.22.0 → 0.24.0
Update Type:
Minor
Ecosystem:
go
Version Change:
1.2.14 → 1.2.15
Update Type:
Patch
Ecosystem:
go
Version Change:
1.2.14 → 1.2.15
Update Type:
Patch
Ecosystem:
go
Version Change:
1.2.14 → 1.2.15
Update Type:
Patch
Ecosystem:
go
Version Change:
2.13.0 → 2.15.0
Update Type:
Minor
Technical Details
ID: 6689261
UUID: 2794380302
Node ID: PR_kwDOCdvj-c6mjtwO
Host: GitHub
Repository: TheThingsNetwork/lorawan-stack
Merge State: Unknown