Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

dev: bump the safe group across 1 directory with 40 updates

Closed
Number: #7748
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 1
Created: October 27, 2025 at 11:38 PM UTC
(9 months ago)
Updated: November 24, 2025 at 10:28 PM UTC
(8 months ago)
Closed: November 24, 2025 at 10:28 PM UTC
(8 months ago)
Time to Close: 28 days
Labels:
dependencies go
Description:

Bumps the safe group with 27 updates in the / directory:

Package From To
github.com/KimMachineGun/automemlimit 0.7.4 0.7.5
github.com/aws/aws-sdk-go 1.55.7 1.55.8
github.com/aws/aws-sdk-go-v2/config 1.29.12 1.31.15
github.com/aws/aws-sdk-go-v2/service/s3 1.78.2 1.88.7
github.com/coder/websocket 1.8.13 1.8.14
github.com/eclipse/paho.mqtt.golang 1.5.0 1.5.1
github.com/emersion/go-smtp 0.22.0 0.24.0
github.com/getsentry/sentry-go 0.34.1 0.36.1
github.com/grpc-ecosystem/grpc-gateway/v2 2.27.1 2.27.3
github.com/jackc/pgx/v5 5.7.5 5.7.6
github.com/jarcoal/httpmock 1.4.0 1.4.1
github.com/klauspost/compress 1.18.0 1.18.1
github.com/nats-io/nats-server/v2 2.11.4 2.12.1
github.com/prometheus/client_golang 1.22.0 1.23.2
github.com/redis/go-redis/v9 9.11.0 9.16.0
github.com/spf13/cast 1.9.2 1.10.0
github.com/spf13/cobra 1.9.1 1.10.1
github.com/spf13/viper 1.20.1 1.21.0
github.com/throttled/throttled/v2 2.13.0 2.15.0
github.com/uptrace/bun 1.2.14 1.2.15
github.com/uptrace/bun/dialect/pgdialect 1.2.14 1.2.15
github.com/uptrace/bun/driver/pgdriver 1.2.14 1.2.15
go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux 0.62.0 0.63.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.62.0 0.63.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.62.0 0.63.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 1.37.0 1.38.0
golang.org/x/oauth2 0.30.0 0.32.0

Updates github.com/KimMachineGun/automemlimit from 0.7.4 to 0.7.5

Release notes

Sourced from github.com/KimMachineGun/automemlimit's releases.

v0.7.5

What's Changed

Full Changelog: https://github.com/KimMachineGun/automemlimit/compare/v0.7.4...v0.7.5

Commits

Updates github.com/aws/aws-sdk-go from 1.55.7 to 1.55.8

Release notes

Sourced from github.com/aws/aws-sdk-go's releases.

Release v1.55.8 (2025-07-31)

SDK Features

  • Mark the module and all packages as deprecated.
    • This SDK has entered end-of-support.
Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.29.12 to 1.31.15

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.78.2 to 1.88.7

Commits

Updates github.com/coder/websocket from 1.8.13 to 1.8.14

Release notes

Sourced from github.com/coder/websocket's releases.

v1.8.14

Changes

New Contributors

Full Changelog: https://github.com/coder/websocket/compare/v1.8.13...v1.8.14

Commits

Updates github.com/eclipse/paho.mqtt.golang from 1.5.0 to 1.5.1

Release notes

Sourced from github.com/eclipse/paho.mqtt.golang's releases.

v1.5.1

This is a minor release incorporating changes made in the 14 months since v1.5.0 (including updating dependencies, and raising the Go version to 1.24). The changes are relatively minor but address a potential security issue, possible panic, enable users to better monitor the connection status, and incorporate a few optimisations.

Thanks to those who have provided fixes/enhancements included in this release!

Special thanks to Paul Gerste at Sonar for reporting issue #730 via the Eclipse security team (fix was implemented in PR #714 in May, github issue created just prior to this release). This issue arose where a topic > 65535 bytes was passed to the Publish function, due to the way the data was encoded the topic could leak into the message body. Please see issue #730 for further details.

What's Changed

Full Changelog: https://github.com/eclipse-paho/paho.mqtt.golang/compare/v1.5.0...v1.5.1

Commits
  • b305237 Update dependencies in docker examples
  • 35ee03d Potential panic when using manual ACK
  • 433bd22 address data race in test
  • 4debe3a Potential panic when using manual ACK
  • 601453b Resolve issues in fvt_client_test
  • 439e2ab Dependency update (also rise Go version to 1.24)
  • d276593 ConnectionNotificationHandler - generic callback for all types of connection ...
  • 8a350a9 notifications
  • 5620c5e notifications
  • 45048cc notifications
  • Additional commits viewable in compare view

Updates github.com/emersion/go-smtp from 0.22.0 to 0.24.0

Commits
  • ab24fe7 Remove superfluous validateLine() calls in sendMail()
  • 6944e33 Implement MT-PRIORITY (RFC 6710)
  • 54dd31d Implement DELIVERBY (RFC 2852)
  • See full diff in compare view

Updates github.com/getsentry/sentry-go from 0.34.1 to 0.36.1

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.36.1

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.36.1.

Bug Fixes

  • Prevent panic when converting error chains containing non-comparable error types by using a safe fallback for visited detection in exception conversion (#1113)

0.36.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.36.0.

Breaking Changes

  • Behavioral change for the MaxBreadcrumbs client option. Removed the hard limit of 100 breadcrumbs, allowing users to set a larger limit and also changed the default limit from 30 to 100 (#1106))

  • The changes to error handling (#1075) will affect issue grouping. It is expected that any wrapped and complex errors will be grouped under a new issue group.

Features

  • Add support for improved issue grouping with enhanced error chain handling (#1075)

    The SDK now provides better handling of complex error scenarios, particularly when dealing with multiple related errors or error chains. This feature automatically detects and properly structures errors created with Go's errors.Join() function and other multi-error patterns.

    // Multiple errors are now properly grouped and displayed in Sentry
err1 := errors.New("err1")
err2 := errors.New("err2") 
combinedErr := errors.Join(err1, err2)

    // When captured, these will be shown as related exceptions in Sentry
sentry.CaptureException(combinedErr)

  • Add TraceIgnoreStatusCodes option to allow filtering of HTTP transactions based on status codes (#1089)

    • Configure which HTTP status codes should not be traced by providing single codes or ranges
    • Example: TraceIgnoreStatusCodes: [][]int{{404}, {500, 599}} ignores 404 and server errors 500-599

Bug Fixes

  • Fix logs being incorrectly filtered by BeforeSend callback (#1109)
    • Logs now bypass the processEvent method and are sent directly to the transport
    • This ensures logs are only filtered by BeforeSendLog, not by the error/message BeforeSend callback

Misc

  • Add support for Go 1.25 and drop support for Go 1.22 (#1103)

0.35.3

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.35.3.

Bug Fixes

... (truncated)

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.36.1

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.36.1.

Bug Fixes

  • Prevent panic when converting error chains containing non-comparable error types by using a safe fallback for visited detection in exception conversion (#1113)

0.36.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.36.0.

Breaking Changes

  • Behavioral change for the MaxBreadcrumbs client option. Removed the hard limit of 100 breadcrumbs, allowing users to set a larger limit and also changed the default limit from 30 to 100 (#1106))

  • The changes to error handling (#1075) will affect issue grouping. It is expected that any wrapped and complex errors will be grouped under a new issue group.

Features

  • Add support for improved issue grouping with enhanced error chain handling (#1075)

    The SDK now provides better handling of complex error scenarios, particularly when dealing with multiple related errors or error chains. This feature automatically detects and properly structures errors created with Go's errors.Join() function and other multi-error patterns.

    // Multiple errors are now properly grouped and displayed in Sentry
err1 := errors.New("err1")
err2 := errors.New("err2") 
combinedErr := errors.Join(err1, err2)

    // When captured, these will be shown as related exceptions in Sentry
sentry.CaptureException(combinedErr)

  • Add TraceIgnoreStatusCodes option to allow filtering of HTTP transactions based on status codes (#1089)

    • Configure which HTTP status codes should not be traced by providing single codes or ranges
    • Example: TraceIgnoreStatusCodes: [][]int{{404}, {500, 599}} ignores 404 and server errors 500-599

Bug Fixes

  • Fix logs being incorrectly filtered by BeforeSend callback (#1109)
    • Logs now bypass the processEvent method and are sent directly to the transport
    • This ensures logs are only filtered by BeforeSendLog, not by the error/message BeforeSend callback

Misc

  • Add support for Go 1.25 and drop support for Go 1.22 (#1103)

0.35.3

... (truncated)

Commits

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.1 to 2.27.3

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.27.3

What's Changed

New Contributors

Full Changelog: https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.27.2...v2.27.3

v2.27.2

What's Changed

New Contributors

Full Changelog: https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.27.1...v2.27.2

Commits
  • ab243ac chore(deps): update googleapis digest to 9070e63 (#5970)
  • 30abf93 fix(deps): update module google.golang.org/protobuf to v1.36.10 (#5969)
  • b73048f chore(deps): update dependency bazel to v8.4.2 (#5968)
  • 95f123b chore(deps): update googleapis digest to 3990e05 (#5967)
  • fb9da67 chore(deps): update googleapis digest to 063f9e1 (#5966)
  • 208372a chore(deps): update googleapis digest to e78280f (#5965)
  • 1a315aa fix(deps): update google.golang.org/genproto/googleapis/api digest to 57b25ae...
  • b862f0b fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 57b25ae...
  • e6cdbc7 chore(deps): update googleapis digest to eab82ec (#5962)
  • 7fefac0 chore(deps): update googleapis digest to a4ded73 (#5961)
  • Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.7.5 to 5.7.6

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.7.6 (September 8, 2025)

  • Use ParseConfigError in pgx.ParseConfig and pgxpool.ParseConfig (Yurasov Ilia)
  • Add PrepareConn hook to pgxpool (Jonathan Hall)
  • Reduce allocations in QueryContext (Dominique Lefevre)
  • Add MarshalJSON and UnmarshalJSON for pgtype.Uint32 (Panos Koutsovasilis)
  • Configure ping behavior on pgxpool with ShouldPing (Christian Kiely)
  • zeronull int types implement Int64Valuer and Int64Scanner (Li Zeghong)
  • Fix panic when receiving terminate connection message during CopyFrom (Michal Drausowski)
  • Fix statement cache not being invalidated on error during batch (Muhammadali Nazarov)
Commits
  • a2fca03 Release v5.7.6
  • 95fc312 Add link to github.com/KoNekoD/pgx-colon-query-rewriter
  • 5534fa9 Improve Rows docs
  • a295d68 Merge pull request #2368 from zeghong/zeronull-int-valuer
  • 03f32c0 Merge branch 'master' into zeronull-int-valuer
  • 82fbe49 Merge pull request #2372 from WGH-/improve-batch-doc
  • 594d9d6 Merge pull request #2367 from zeghong/zeronull-int-scanner
  • 5a18241 Merge branch 'master' into zeronull-int-scanner
  • cc34da5 Merge pull request #2370 from Saurabh2402/improvement/setup-linters
  • dd81f81 Merge pull request #2369 from zeghong/go-doc-links
  • Additional commits viewable in compare view

Updates github.com/jarcoal/httpmock from 1.4.0 to 1.4.1

Release notes

Sourced from github.com/jarcoal/httpmock's releases.

v1.4.1

What's Changed

New Contributors

Full Changelog: https://github.com/jarcoal/httpmock/compare/v1.4.0...v1.4.1

Commits
  • 314d58a fix: protect all body-related methods with mutext
  • e482896 fix: avoid data race when closing body
  • c977145 test: also test with go v1.25 and use golangci-lint v2.4.0
  • See full diff in compare view

Updates github.com/klauspost/compress from 1.18.0 to 1.18.1

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.1

What's Changed

New Contributors

Full Changelog: https://github.com/klauspost/compress/compare/v1.18.0...v1.18.1

Commits

Updates github.com/nats-io/nats-server/v2 from 2.11.4 to 2.12.1

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.12.1

Changelog

Refer to the 2.12 Upgrade Guide for backwards compatibility notes with 2.11.x.

Go Version

Dependencies

  • github.com/google/go-tpm v0.9.6 (#7374)
  • github.com/nats-io/nats.go v1.46.0 (#7374)
  • golang.org/x/crypto v0.43.0 (#7423)
  • golang.org/x/sys v0.37.0 (#7423)
  • golang.org/x/time v0.14.0 (#7423)

Added

General

  • The NewServerFromConfig function has been added to the embedded server API for parsing an external configuration file when ConfigFile is supplied (#7364)
  • WebSocket leafnode connections can now use a HTTP proxy by specifying proxy settings in the leafnode remotes (#7242)
  • The write_deadline option in the cluster, leafnode and gateway config blocks allows configuring write deadlines on a finger-grained basis (#7405)

Improved

Monitoring

  • The jsz monitoring endpoint can now report leader counts (#7429)

JetStream

  • The store lock is no longer held while searching for TTL expiry tasks, improving performance (#7344)
  • Removing a message from the TTL state is now faster (#7344)
  • The filestore no longer performs heap allocations for hash checks (#7345)
  • The filestore now reuses pooled write cache allocations more efficiently (#7346)
  • Meta snapshot performance for a very large number of assets has been improved after a regression in v2.11.9 (#7350)
  • Sequence-from-timestamp lookups, such as those using opt_start_time on consumers or start_time on message get requests, now use a binary search for improved lookup performance (#7357)
  • Scheduled messages are now deactivated properly when followed up with another message on the same subject without a schedule (#7366)
  • Meta snapshots are no longer taken on every stream removal (#7373)
  • Filestore cache lookups can now return early for empty blocks (#7381)
  • Filestore meta files are now written using temporary staging, avoiding accidental truncation on crashes (#7388)
  • Atomic batch publish now supports deduplication with the Nats-Msg-Id header (#7391)
  • Cache-specific log lines in the filestore have been improved (#7396)
  • Log lines and errors related to offline/unsupported assets are now clearer (#7416, #7425)

Fixed

General

... (truncated)

Commits
  • fab5f99 Release v2.12.1
  • bf2c60a Cherry-picks for v2.12.1 (#7430)
  • 350d9d7 [FIXED] Filestore unlock when message erase fails
  • 18007b8 [IMPROVED] JSZ Raft leader stats
  • bc7407a Update to Go 1.25.3/1.24.9
  • ffbdb10 [FIXED] Trusted Proxies: Reload log message report added keys as removed
  • 59361c9 Release v2.12.1-RC.5
  • fd8c5b7 Cherry-picks for v2.12.1-RC.5 (#7426)
  • 6c9a051 feat: add riscv64 support
  • 84fe04a NRG: Parallel catchups can truncate committed
  • Additional commits viewable in compare view

Updates github.com/nats-io/nats.go from 1.43.0 to 1.46.1

Release notes

Sourced from github.com/nats-io/nats.go's releases.

Release v1.46.1

Changelog

FIXED

  • JetStream:
    • Add omitempty to AllowMsgTTL and AllowMsgCounter (#1947)

Complete Changes

https://github.com/nats-io/nats.go/compare/v1.46.0...v1.46.1

Release v1.46.0

Changelog

Overview

This release enables features introduced in nats-server@v2.12.0.

Some features, while enabled in the client by adding relevant configuration, have APIs exposed in synadia-io/orbit.go, namely:

ADDED

  • JetStream:
    • Stream counters configuration option (#1932, #1939)
    • New fields in ClusterInfo (#1935)
    • AllowAtomicPublish stream configuration option (#1940)
    • PersistMode stream config option for configurable stream persistence settings (#1943)
    • AllowMsgSchedules stream configuration option to enable message scheduling (#1942)
    • Context and timeout options to Messages.Next() plus Fetch context support (#1938)
    • Support custom name prefix for ordered consumers (#1928)
    • Prioritized priority policy (#1937)
  • KeyValue:
    • Added KeyValue bucket metadada support (#1944)

IMPROVED

  • JetStream:
    • Add max consumers limit error (code=10026). Thanks @​Arlet2 for the contribution (#1922)
    • Return more specific cons info error on ordered consumer recreation (#1931)

Complete Changes

https://github.com/nats-io/nats.go/compare/v1.45.0...v1.46.0

Release v1.45.0

Changelog

ADDED

  • Core NATS:
    • Handling for maximum account active connections exceeded (#1921)
  • JetStream:

... (truncated)

Commits
  • 4dc7f1e Release v1.46.1 (#1948)
  • 0bbc048 [FIXED] Add omitempty to AllowMsgTTL and AllowMsgCounter (#1947)
  • 41de016 Release v1.46.0
  • 2d3be0c [IMPROVED] Bump nats-server test dependency
  • 9726c6f [ADDED] AllowMsgSchedules field to enable message scheduling in stream config...
  • 5e67170 [FIXED] Revert leftover no headers support changes (#1941)
  • c85e275 [ADDED] Introduce PersistMode for configurable persistence settings in stream...
  • 13d3ae2 [ADDED] AllowAtomicPublish option on stream config (#1940)
  • 60f1718 [CHANGED] Remove no headers support (#1939)
  • ec9b58f [IMPROVED] Add test veryfying if mirror can be updated to regular stream (#1934)
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.22.0 to 1.23.2

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.2 - 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

Full Changelog: https://github.com/prometheus/client_golang/compare/v1.23.1...v1.23.2

v1.23.1 - 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

Full Changelog: https://github.com/prometheus/client_golang/compare/v1.23.0...v1.23.1

v1.23.0 - 2025-07-30

  • [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812
  • [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766
  • [FEATURE] Add exemplars for native histograms #1686
  • [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823
  • [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833
  • [BUGFIX] exp/api: client prompt return on context cancellation #1729

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

1.23.0 / 2025-07-30

Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 11357531
UUID: 3559098680
Node ID: PR_kwDOCdvj-c6wBHTG
Host: GitHub
Repository: TheThingsNetwork/lorawan-stack