Skip to content

deps: bump the go-deps group across 1 directory with 16 updates - #983

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-254ed9009a
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-254ed9009a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-deps group with 16 updates in the / directory:

Package From To
github.com/ClickHouse/clickhouse-go/v2 2.49.0 2.50.0
github.com/MicahParks/jwkset 0.11.3 0.11.4
github.com/MicahParks/keyfunc/v3 3.8.2 3.9.1
github.com/aws/aws-sdk-go-v2 1.47.3 1.47.7
github.com/aws/aws-sdk-go-v2/config 1.33.9 1.33.15
github.com/aws/aws-sdk-go-v2/credentials 1.20.9 1.20.15
github.com/aws/aws-sdk-go-v2/service/dynamodb 1.70.3 1.73.1
github.com/aws/smithy-go 1.28.5 1.28.8
github.com/nats-io/jwt/v2 2.8.2 2.8.3
github.com/nats-io/nats-server/v2 2.15.1 2.15.2
github.com/nats-io/nats.go 1.54.0 1.55.0
github.com/nats-io/nkeys 0.4.16 0.4.17
github.com/samber/slog-multi 1.8.0 1.9.0
github.com/testcontainers/testcontainers-go 0.44.0 0.45.0
golang.org/x/sync 0.24.0 0.25.0
google.golang.org/grpc 1.84.0 1.85.0

Updates github.com/ClickHouse/clickhouse-go/v2 from 2.49.0 to 2.50.0

Release notes

Sourced from github.com/ClickHouse/clickhouse-go/v2's releases.

v2.50.0

What's Changed

Improvements 🚀

Bug Fixes 🐛

Other Changes 🛠

New Contributors

Full Changelog: ClickHouse/clickhouse-go@v2.49.0...v2.50.0

Changelog

Sourced from github.com/ClickHouse/clickhouse-go/v2's changelog.

v2.50.0, 2026-10-26

What's Changed

Improvements 🚀

Bug Fixes 🐛

Other Changes 🛠

New Contributors

Full Changelog: ClickHouse/clickhouse-go@v2.49.0...v2.50.0

Commits
  • 1c0a5f9 Update release notes
  • 619220c Merge pull request #2082 from ClickHouse/kavirajk/redact-parse-in-dsn-parse-e...
  • 413454d chore: fix the error message with more clear info
  • 7a89b7f chore: handle edge cases with ? param
  • 607e42e Merge pull request #2083 from ClickHouse/kavirajk/fix-potential-flaky-tests-c...
  • 649884b chore: add agent instructions
  • 098f98d chore: fix potential flaky cases on cloud
  • 5ff1fe7 chore: do further trace on other edge cases
  • 3a57d61 chore: address re-parse comment with tests
  • f0fc7b5 Merge pull request #2081 from ClickHouse/kavirajk/fix-flaky-async-tests-on-cloud
  • Additional commits viewable in compare view

Updates github.com/MicahParks/jwkset from 0.11.3 to 0.11.4

Release notes

Sourced from github.com/MicahParks/jwkset's releases.

v0.11.4

The purpose of this release is to stop waiting on the RefreshUnknownKID rate limiter when a key ID is unknown and there are no remote HTTP resources to refresh. Such reads now return ErrKeyNotFound right away.

This release also corrects the documented key priority for NewDefaultHTTPClient: keys from the given storage are read before keys from remote HTTP resources.

Relevant pull requests:

Commits
  • 949178f Skip the unknown key ID wait when there is nothing to refresh (#77)
  • 39e794c Correct NewDefaultHTTPClient's key priority in its doc comment (#76)
  • 42c9cff Update website (#73)
  • See full diff in compare view

Updates github.com/MicahParks/keyfunc/v3 from 3.8.2 to 3.9.1

Release notes

Sourced from github.com/MicahParks/keyfunc/v3's releases.

Skip the refresh wait when there is nothing to refresh

The purpose of this release is to stop waiting on the RefreshUnknownKID rate limiter when a key ID is unknown and there are no remote HTTP resources to refresh, such as NewDefaultOverrideCtx with Override.Given and no URLs. Such reads now fail right away.

This modified the HTTP client behavior in the jwkset project.

Relevant pull requests:

Expose Given and PrioritizeHTTP as options

The purpose of this release is to expose options to override the Given and PrioritizeHTTP options passed to jwkset.HTTPClientOptions.

Thank you @​sean-rn for the contribution!

Relevant pull requests:

Commits

Updates github.com/aws/aws-sdk-go-v2 from 1.47.3 to 1.47.7

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.9 to 1.33.15

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.20.9 to 1.20.15

Commits

Updates github.com/aws/aws-sdk-go-v2/service/dynamodb from 1.70.3 to 1.73.1

Commits

Updates github.com/aws/smithy-go from 1.28.5 to 1.28.8

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-11-03)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.8
    • Bug Fix: Preserve the exact value of numbers in JSON codec instead of automatically parsing to float64.

Release (2026-10-27)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.7
    • Bug Fix: Fix a panic or EOF error when deserializing a JSON union that contains a member not modeled by the client and whose value is not null.
    • Bug Fix: Log the underlying error when dumping an HTTP request or response for logging fails

Release (2026-10-21)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.6
    • Bug Fix: Enforce event stream header key value length limit instead of truncating
    • Bug Fix: Retain the value in a list with the zero value when encountering a null entry on a dense list. This matches how legacy code-generated JSON deserializers behaved.

Release (2026-10-09)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.5
    • Bug Fix: Retain the key with the zero value when encountering a null-value key in a dense map. This matches how legacy code-generated JSON deserializers behaved.

Release (2026-10-07)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.4
    • Bug Fix: Revert #698 that fixed JoinPath with trailing slash. This has a side effect on certain S3 API paths in the downstream SDK that need more consideration.

Release (2026-10-06)

General Highlights

... (truncated)

Commits
  • 5f09676 Release 2026-11-03
  • 022048e preserve number precision in json documents (#745)
  • 7f50fd8 fix event stream issues found during corpus protocol test (#743)
  • 8c9c804 fixup broken protocol test compilation (#740)
  • cf3594a Fix malformed JSON when serializing nil lists or maps in union members, map v...
  • 37210e1 Release 2026-10-27
  • d5b7eb0 fix(http): log the error when dumping a request or response for logging fails...
  • 02853b0 fix panic for unknown union member collection in json (#735)
  • f0c489f Release 2026-10-21
  • 43007bd Enforce event stream header key value length limit instead of truncating (#733)
  • Additional commits viewable in compare view

Updates github.com/nats-io/jwt/v2 from 2.8.2 to 2.8.3

Release notes

Sourced from github.com/nats-io/jwt/v2's releases.

v2.8.3

What's Changed

Full Changelog: nats-io/jwt@v2.8.2...v2.8.3

Commits

Updates github.com/nats-io/nats-server/v2 from 2.15.1 to 2.15.2

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.15.2

Changelog

Refer to the 2.15 Upgrade Guide for backwards compatibility notes with 2.14.x.

Go Version

  • 1.27.3, which contains mitigations for CVE-2026-111943 by distrusting eMudhra intermediate certificates (#8798)

Dependencies

  • github.com/klauspost/compress v1.20.3 (#8798)
  • golang.org/x/crypto v0.58.0 (#8798)
  • golang.org/x/sys v0.49.0 (#8798)

Fixed

General

  • Allowed connection types are now correctly respected in auth callout setups
  • Fixed a potential queue sub weight amplification in the sublist
  • OCSP responses are now correctly bound to the certificate serial number

JetStream

  • Restored v1 stream snapshots now correctly guard against excessive subject lengths, subject counts or block counts

Leafnodes

  • ACLs on leafnode connections no longer override allow/deny lists to implicitly allow $MQTT.> permissions

MQTT

  • OCSP verification for MQTT connections now correctly obeys the ocsp_peer option in the mqtt block

Complete Changes

nats-io/nats-server@v2.15.1...v2.15.2

Commits
  • 5a815f1 Release v2.15.2
  • ce74e90 Cherry-picks for 2.15.2
  • d607b66 [FIXED] OCSP peer debug log for invalid cached delegation missing fingerprint
  • d999a7c [IMPROVED] Reuse OCSP delegation check for route/gateway staples
  • 6fe5aa7 [FIXED] OCSP staple status accepted from signers not authorized by the CA
  • a9ea248 [FIXED] OCSP responses not bound to the certificate's serial number
  • 74a69e6 [FIXED] MQTT ocsp_peer ignored in favor of top-level TLS options
  • eb1459a [FIXED] Leafnode permissions bypassed for $MQTT. subjects
  • 2e6d391 [FIXED] Bound counts and lengths when recovering stream state
  • c33a421 [FIXED] Queue weight overflow withdrawing route and leaf interest
  • Additional commits viewable in compare view

Updates github.com/nats-io/nats.go from 1.54.0 to 1.55.0

Release notes

Sourced from github.com/nats-io/nats.go's releases.

Release v1.55.0

Changelog

This is the biggest nats.go release in a long time: 47 changes with more than half of them coming from 18 external contributors - thank you all!

Most of this release is a robustness effort. Nearly 30 bug fixes address deadlocks, goroutine and timer leaks, data races and stalls in reconnect and drain handling, pull and ordered consumers, async publish and service API. It also adds the FetchMaxBytes() option and Conn.RemoteAccount().

ADDED

  • Core NATS:
    • Conn.RemoteAccount() and ServerInfo.RemoteAccount exposing the account the client is bound to (#2156)
  • JetStream:
    • FetchMaxBytes() option to limit both the number of messages and total bytes in a single Fetch() request. Thanks @​manenim for the contribution (#2198)
    • StreamInfo.Domain, StreamInfo.Alternates, StreamState.Lost, StreamSourceInfo.External and StreamSourceInfo.Error in stream info (#2168)
    • ErrStreamMessageExceedsMaximum for JetStream error code 10054, returned when a message exceeds the stream's MaxMsgSize. Thanks @​matehsan for the contribution (#2110)

FIXED

  • Core NATS:
    • ForceReconnect() called while already reconnecting disabling ReconnectWait and custom reconnect delays, so the client dialed in a tight loop. Thanks @​Arsen302 for the contribution and @​MokiMeow for the diagnosis and test (#2179)
    • Connection closing for good instead of reconnecting after a partial write left a truncated message on the wire (#2169)
    • Connection status listeners losing an unread event and being unregistered when the next status was sent (#2193)
    • Message headers not counted against subscription pending byte limits, so header-heavy subscriptions could exceed the limit without reporting a slow consumer. Thanks @​Grivn for the contribution (#2200)
    • Requests interrupted by a reconnect returning ErrConnectionClosed instead of ErrDisconnected. Thanks @​AshSgDe29071999 for the contribution (#2129)
    • Default port added to the path instead of the host for server URLs with a path and no port, e.g. ws://host/nats. Thanks @​dannyshafer for the contribution (#2177)
    • Close() during Drain() flipping the closed connection back to DRAINING_PUBS and flushing on it. Thanks @​Kshot3000 for the contribution (#2163)
    • Drain() waiting for the full DrainTimeout when the connection was closed mid-drain (#2171)
    • IsSystemAccount() reset to false by async INFO updates, such as cluster topology changes or lame duck mode (#2156)
  • JetStream:
    • Pull consumer Consume() and Messages() deadlocking on Stop() or Drain() while buffered messages were still being delivered. Thanks @​clwluvw for the contribution (#2165)
    • Messages() iterator goroutines leaking after the connection is closed. Thanks @​clwluvw for the contribution (#2166)
    • Heartbeat timer and status listener left running when Consume() ends because the connection was closed. Thanks @​clwluvw for the contribution (#2164)
    • Messages() iterator returning ErrMsgIteratorClosed instead of the remaining buffered messages when Next() raced with Drain() (#2188)
    • Pull consumer with StopAfter stalling until the missed heartbeat check (30s by default) after a pull expired. Thanks @​huynguyen7 for the contribution (#2208)
    • Ordered consumer with StopAfter hanging on Stop()/Drain(), delivering too many or too few messages, or panicking after a consumer reset. Thanks @​clwluvw for the contribution (#2167)
    • Ordered consumer Fetch(), Next() and FetchBytes() blocking forever after returning ErrOrderedConsumerConcurrentRequests, and FetchNoWait() restarting from the beginning of the stream (#2211)
    • Ordered consumer Consume() and Messages() using the 15s pull consumer heartbeat instead of the 5s ordered default, so a stalled consumer was reset after ~30s instead of ~10s. Thanks @​arminazimi for the contribution (#2182)
    • PublishAsync() exceeding WithPublishAsyncMaxPending() under concurrent calls. Thanks @​ShravanthReddy for the contribution (#2126)
    • Async publish error callbacks for messages pending during a reconnect delayed until the publisher shut down. Thanks @​H-XX-D for the contribution (#2150)
    • Data race between Info() and CachedInfo() on streams and consumers. Thanks @​vulragrag-star for the contribution (#2152)
    • Reusing the same KeyValueConfig.Sources for several KeyValue buckets carrying the first bucket's subject transform into the next ones, so their reads returned ErrKeyNotFound. Thanks @​zhechen-cs for the contribution (#2190)
    • Object Store GetFile() leaving trailing bytes of an existing destination file when downloading a shorter object. Thanks @​zhechen-cs for the contribution (#2197)
  • Legacy JetStream:
    • Async publish error callbacks for messages pending during a reconnect delayed until the publisher shut down. Thanks @​H-XX-D for the contribution (#2150)
    • KeyValue Create() and Update() on a cross-domain mirrored bucket failing with nats: no response from stream. Thanks @​spicysharkco for the contribution (#2203)
    • Object Store GetFile() leaving trailing bytes of an existing destination file when downloading a shorter object. Thanks @​zhechen-cs for the contribution (#2197)
  • Service API:
    • Panic in AddService() on a closed connection (#2154)
    • Panic with send on closed channel when callbacks were queued during Stop() (#2173)
    • Service stopping on async errors from unrelated subscriptions with overlapping subjects. Async errors are now matched by subscription, recorded in endpoint stats and passed to ErrorHandler, and only a closed connection stops the service (#2174)

... (truncated)

Commits
  • 6068694 Release v1.55.0 (#2214)
  • 063b4ad [FIXED] Honor ReconnectWait after ForceReconnect during reconnect (#2179)
  • 0a4cfc1 [ADDED] JetStream: stream alternates, lost data, source external/error (#2168)
  • c3830a0 [IMPROVED] Document default MaxAckPending for legacy JetStream subscriptions ...
  • 2560ee4 [IMPROVED] Avoid per-message metadata allocations in JetStream consumers (#2212)
  • 8afc207 [FIXED] Ordered consumer Fetch deadlock and FetchNoWait redelivery (#2211)
  • d1936d7 [FIXED] Correct StopAfter pending accounting for pull consumers (#2208)
  • b431a07 [FIXED] micro: service and endpoint metadata can be changed after it is set (...
  • ef8ce42 [FIXED] micro: Reset clears the endpoint queue group in stats (#2195)
  • e28f7be [FIXED] Connection status listeners losing unread events (#2193)
  • Additional commits viewable in compare view

Updates github.com/nats-io/nkeys from 0.4.16 to 0.4.17

Release notes

Sourced from github.com/nats-io/nkeys's releases.

v0.4.17

What's Changed

New Contributors

Full Changelog: nats-io/nkeys@v0.4.16...v0.4.17

Commits
  • 3be1d3a ci: add claude code reviews on prs (#95)
  • 6f36262 Reject identity point or small order public keys (#93)
  • 266bdc5 ci: add claude code reviews on prs
  • 608f95d Reject identity point or small order public keys
  • c5b2ade Merge pull request #91 from nats-io/wq/ci-stable-go
  • 8047c0a ci: use stable Go from the build matrix
  • See full diff in compare view

Updates github.com/samber/slog-multi from 1.8.0 to 1.9.0

Release notes

Sourced from github.com/samber/slog-multi's releases.

v1.9.0

What's Changed

Dependencies

Other

New Contributors

Full Changelog: samber/slog-multi@v1.8.0...v1.9.0

Commits
  • 4589b66 bump v1.9.0
  • 2088477 fix(ci): grant contents write to release job
  • fcfaf1c fix: isolate attributes in pool and failover handlers (#67)
  • b2988f8 chore(deps): bump github.com/gorilla/websocket from 1.4.2 to 1.5.3 (#68)
  • f61d2e2 chore(deps): bump actions/checkout from 6 to 7 (#60)
  • 69c926d chore(deps): bump github.com/gorilla/websocket in /examples/firstmatch (#65)
  • 0f66207 chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 (#66)
  • 1bfe7ad chore(deps): bump actions/setup-go from 6 to 7 (#61)
  • 496352d chore(deps): bump codecov/codecov-action from 6 to 7 (#59)
  • bc7aab7 chore(deps): bump github.com/samber/lo from 1.47.0 to 1.53.0 (#57)
  • Additional commits viewable in compare view

Updates github.com/testcontainers/testcontainers-go from 0.44.0 to 0.45.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.45.0

What's Changed

⚠️ Breaking Changes

Client SDK dependencies have moved into separate examples modules. For CockroachDB, ConnectionConfig is now available through cockroachdbexamples.NewContainer(c) in modules/cockroachdb/examples. The parent’s ConnectionString and MustConnectionString now return PostgreSQL URLs instead of registered pgx handles, and importing the parent no longer registers the pgx SQL driver. Use the examples adapter to retain the previous SDK behavior, or configure the driver yourself.

For Dex, AddClient, RemoveClient, AddUser, and RemoveUser have moved from *dex.Container to dexexamples.NewAdminClient(c) in modules/dex/examples. Static configuration through WithClient and WithUser is unchanged.

For Cosmos DB, ContainerPolicy and NewContainerPolicy have moved from modules/azure/cosmosdb to modules/azure/examples/cosmosdb. Update the adapter import; its constructor still accepts the parent container. Run, Container, and ConnectionString remain unchanged in the parent module.

🔒 Security

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

... (truncated)

Commits
  • b4fe821 chore: use new version (v0.45.0) in modules and examples
  • d40be72 chore(deps): bump github.com/go-jose/go-jose/v4 in /modules/dex/examples (#4088)

Bumps the go-deps group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/ClickHouse/clickhouse-go/v2](https://github.com/ClickHouse/clickhouse-go) | `2.49.0` | `2.50.0` |
| [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) | `0.11.3` | `0.11.4` |
| [github.com/MicahParks/keyfunc/v3](https://github.com/MicahParks/keyfunc) | `3.8.2` | `3.9.1` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.47.3` | `1.47.7` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.9` | `1.33.15` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.20.9` | `1.20.15` |
| [github.com/aws/aws-sdk-go-v2/service/dynamodb](https://github.com/aws/aws-sdk-go-v2) | `1.70.3` | `1.73.1` |
| [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.28.5` | `1.28.8` |
| [github.com/nats-io/jwt/v2](https://github.com/nats-io/jwt) | `2.8.2` | `2.8.3` |
| [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) | `2.15.1` | `2.15.2` |
| [github.com/nats-io/nats.go](https://github.com/nats-io/nats.go) | `1.54.0` | `1.55.0` |
| [github.com/nats-io/nkeys](https://github.com/nats-io/nkeys) | `0.4.16` | `0.4.17` |
| [github.com/samber/slog-multi](https://github.com/samber/slog-multi) | `1.8.0` | `1.9.0` |
| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.44.0` | `0.45.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.24.0` | `0.25.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.84.0` | `1.85.0` |



Updates `github.com/ClickHouse/clickhouse-go/v2` from 2.49.0 to 2.50.0
- [Release notes](https://github.com/ClickHouse/clickhouse-go/releases)
- [Changelog](https://github.com/ClickHouse/clickhouse-go/blob/main/CHANGELOG.md)
- [Commits](ClickHouse/clickhouse-go@v2.49.0...v2.50.0)

Updates `github.com/MicahParks/jwkset` from 0.11.3 to 0.11.4
- [Release notes](https://github.com/MicahParks/jwkset/releases)
- [Commits](MicahParks/jwkset@v0.11.3...v0.11.4)

Updates `github.com/MicahParks/keyfunc/v3` from 3.8.2 to 3.9.1
- [Release notes](https://github.com/MicahParks/keyfunc/releases)
- [Commits](MicahParks/keyfunc@v3.8.2...v3.9.1)

Updates `github.com/aws/aws-sdk-go-v2` from 1.47.3 to 1.47.7
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.47.3...v1.47.7)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.9 to 1.33.15
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.33.9...config/v1.33.15)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.20.9 to 1.20.15
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.20.9...credentials/v1.20.15)

Updates `github.com/aws/aws-sdk-go-v2/service/dynamodb` from 1.70.3 to 1.73.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/emr/v1.70.3...service/s3/v1.73.1)

Updates `github.com/aws/smithy-go` from 1.28.5 to 1.28.8
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.28.5...v1.28.8)

Updates `github.com/nats-io/jwt/v2` from 2.8.2 to 2.8.3
- [Release notes](https://github.com/nats-io/jwt/releases)
- [Changelog](https://github.com/nats-io/jwt/blob/main/ReleaseNotes.md)
- [Commits](nats-io/jwt@v2.8.2...v2.8.3)

Updates `github.com/nats-io/nats-server/v2` from 2.15.1 to 2.15.2
- [Release notes](https://github.com/nats-io/nats-server/releases)
- [Changelog](https://github.com/nats-io/nats-server/blob/main/RELEASES.md)
- [Commits](nats-io/nats-server@v2.15.1...v2.15.2)

Updates `github.com/nats-io/nats.go` from 1.54.0 to 1.55.0
- [Release notes](https://github.com/nats-io/nats.go/releases)
- [Commits](nats-io/nats.go@v1.54.0...v1.55.0)

Updates `github.com/nats-io/nkeys` from 0.4.16 to 0.4.17
- [Release notes](https://github.com/nats-io/nkeys/releases)
- [Commits](nats-io/nkeys@v0.4.16...v0.4.17)

Updates `github.com/samber/slog-multi` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/samber/slog-multi/releases)
- [Commits](samber/slog-multi@v1.8.0...v1.9.0)

Updates `github.com/testcontainers/testcontainers-go` from 0.44.0 to 0.45.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.44.0...v0.45.0)

Updates `golang.org/x/sync` from 0.24.0 to 0.25.0
- [Commits](golang/sync@v0.24.0...v0.25.0)

Updates `google.golang.org/grpc` from 1.84.0 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.84.0...v1.85.0)

---
updated-dependencies:
- dependency-name: github.com/ClickHouse/clickhouse-go/v2
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/MicahParks/jwkset
  dependency-version: 0.11.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/MicahParks/keyfunc/v3
  dependency-version: 3.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.47.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.20.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/aws/aws-sdk-go-v2/service/dynamodb
  dependency-version: 1.73.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.28.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/nats-io/jwt/v2
  dependency-version: 2.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/nats-io/nats-server/v2
  dependency-version: 2.15.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/nats-io/nats.go
  dependency-version: 1.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/nats-io/nkeys
  dependency-version: 0.4.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/samber/slog-multi
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/sync
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: google.golang.org/grpc
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested review from a team and taitelee November 9, 2026 16:12
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Nov 9, 2026
@coderabbitai

coderabbitai Bot commented Nov 9, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 1b9f2e33-9b04-48ca-8ad6-8da50d8fa8f5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@github-code-quality

Copy link
Copy Markdown
Contributor

Code coverage overview

Languages: Go

Go

main 25e9986 dependabot/go_module... 4f81905 +/-
94% 94% 0%
View coverage of the 3 most impacted files.
File main 25e9986 dependabot/go_module... 4f81905 +/-
internal/mq/nats_permprobe.go 95% 93% -2%
internal/mq/embedded.go 90% 90% 0%
internal/ingest/worker.go 97% 98% +1%

ℹ️ Calculations represent line coverage. Results may change as calculations are updated.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

Status: Backlog

Development

Successfully merging this pull request may close these issues.

0 participants