build(deps): bump the minor-and-patch group across 1 directory with 16 updates #356

dependabot · 2025-11-02T02:11:35Z

Bumps the minor-and-patch group with 14 updates in the / directory:

Package	From	To
github.com/99designs/gqlgen	`0.17.76`	`0.17.81`
github.com/avast/retry-go/v4	`4.6.1`	`4.7.0`
github.com/aws/aws-sdk-go	`1.55.7`	`1.55.8`
github.com/docker/go-connections	`0.5.0`	`0.6.0`
github.com/getsentry/sentry-go	`0.34.1`	`0.36.2`
github.com/go-playground/validator/v10	`10.27.0`	`10.28.0`
github.com/golang-jwt/jwt/v5	`5.2.3`	`5.3.0`
github.com/mattn/go-sqlite3	`1.14.28`	`1.14.32`
github.com/prometheus/client_golang	`1.22.0`	`1.23.2`
github.com/spf13/cobra	`1.9.1`	`1.10.1`
github.com/spf13/viper	`1.20.1`	`1.21.0`
github.com/testcontainers/testcontainers-go	`0.37.0`	`0.39.0`
github.com/vektah/gqlparser/v2	`2.5.30`	`2.5.31`
github.com/vikstrous/dataloadgen	`0.0.9`	`0.0.10`

Updates github.com/99designs/gqlgen from 0.17.76 to 0.17.81

Release notes

Sourced from github.com/99designs/gqlgen's releases.

v0.17.81

What's Changed

Fix a high severity CSRF vulnerability in the Apollo Embedded Sandbox code. This was reported to Apollo last week. Full details here: GHSA-w87v-7w53-wwxv. Fixes #3847 in next two items

Add tool for updating Apollo Sandbox by @StevenACoffman in 99designs/gqlgen#3848

remove trailing duplicate script in apollo playground embedd by @opensaucerer in 99designs/gqlgen#3849

feat: new federation.options.entity_resolver_multi option by @atzedus in 99designs/gqlgen#3852

New Contributors

@opensaucerer made their first contribution in 99designs/gqlgen#3849

Full Changelog: 99designs/gqlgen@v0.17.80...v0.17.81

v0.17.80

What's Changed

Fix context not being captured for field directives by @dloukadakis in 99designs/gqlgen#3843

Test propagating context to resolvers from directive by @g1ntas in 99designs/gqlgen#3842

New Contributors

@g1ntas made their first contribution in 99designs/gqlgen#3842

Full Changelog: 99designs/gqlgen@v0.17.79...v0.17.80

v0.17.79

What's Changed

Added new Maintainer @UnAfraid 🥳

Add server GraphQL rules customization by @StevenACoffman in 99designs/gqlgen#3779

Fixed benchmark not awaiting dispatched operation by @UnAfraid in 99designs/gqlgen#3781

Better duration documentation by @StevenACoffman in 99designs/gqlgen#3812

Documentation of the Omittable type by @evellior in 99designs/gqlgen#3813

fix: handle nil-return from field hooks to omit a field from code generation by @7opf in 99designs/gqlgen#3814

Add Support For All SIgned and Unsigned Integers by @rodneyosodo in 99designs/gqlgen#3787

Updated federation integration tests by @UnAfraid in 99designs/gqlgen#3829

Updated integration tests by @UnAfraid in 99designs/gqlgen#3831

fix generating enum maps for slices by @adamgonen in 99designs/gqlgen#3830

Move field generated code to graphql package by @dloukadakis in 99designs/gqlgen#3832

Drop support for Go 1.23 and Add support for Go 1.25 by @StevenACoffman in 99designs/gqlgen#3833

Pin GitHub Actions to SHA1 with human readable comments for security, lint actions by @StevenACoffman in 99designs/gqlgen#3834

Fix test coverage script by @StevenACoffman in 99designs/gqlgen#3838

Try alternative coverage package include/exclude by @StevenACoffman in 99designs/gqlgen#3839

chore(deps-dev): bump @apollo/client from 3.13.8 to 3.13.9 in /integration by @dependabot[bot] in 99designs/gqlgen#3783

chore(deps): bump @apollo/server from 4.12.2 to 5.0.0 in /_examples/federation by @dependabot[bot] in 99designs/gqlgen#3785

chore(deps-dev): bump typescript from 5.8.3 to 5.9.2 in /integration by @dependabot[bot] in 99designs/gqlgen#3786

chore(deps-dev): bump vite from 7.0.4 to 7.0.6 in /integration by @dependabot[bot] in 99designs/gqlgen#3782

chore(deps-dev): bump graphql-ws from 6.0.5 to 6.0.6 in /integration by @dependabot[bot] in 99designs/gqlgen#3784

chore(deps-dev): bump vite from 7.0.6 to 7.1.1 in /integration by @dependabot[bot] in 99designs/gqlgen#3790

chore(deps-dev): bump urql from 4.2.2 to 5.0.0 in /integration by @dependabot[bot] in 99designs/gqlgen#3791

chore(deps): bump the npm_and_yarn group in /integration with 2 updates by @dependabot[bot] in 99designs/gqlgen#3793

chore(deps): bump golang.org/x/text from 0.27.0 to 0.28.0 in /_examples by @dependabot[bot] in 99designs/gqlgen#3792

chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in 99designs/gqlgen#3795

chore(deps-dev): bump vite from 7.1.1 to 7.1.2 in /integration by @dependabot[bot] in 99designs/gqlgen#3797

... (truncated)

Commits

4ded4eb release v0.17.81
4c8f4ac feat: new federation.options.entity_resolver_multi option (#3852)
9926de9 fix: update apollo_sandbox_playground.go (#3849)
769933d Add tool for updating Apollo Sandbox (#3848)
0b12f80 v0.17.80 postrelease bump
e7100c2 release v0.17.80
3f9488d Test propagating context to resolvers from directive (#3842)
d9a190e Fix context not being captured for field directives (#3843)
522517d v0.17.79 postrelease bump
d83cd09 release v0.17.79
Additional commits viewable in compare view

Updates github.com/avast/retry-go/v4 from 4.6.1 to 4.7.0

Release notes

Sourced from github.com/avast/retry-go/v4's releases.

v4.7.0

What's Changed

support context cancel cause by @NivKeidan in avast/retry-go#117

Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @dependabot[bot] in avast/retry-go#136

Add FullJitterBackoffDelay by @amirrezafahimi in avast/retry-go#128

No delay after final retry on max attempts by @StounhandJ in avast/retry-go#129

BackOffDelay multiplies attempts from zero by @StounhandJ in avast/retry-go#130

add Go version 1.25 to test matrix for expanded compatibility testing by @JaSei in avast/retry-go#142

New Contributors

@NivKeidan made their first contribution in avast/retry-go#117

@amirrezafahimi made their first contribution in avast/retry-go#128

@StounhandJ made their first contribution in avast/retry-go#129

Full Changelog: avast/retry-go@4.6.1...v4.7.0

Commits

375037b bump version
306fcee Merge pull request #142 from avast/go_1_25_test_environment
0bdef9c ci(workflow): add Go version 1.25 to test matrix for expanded compatibility t...
66013da Merge pull request #130 from StounhandJ/back_off_delay
9e5d0d6 Merge pull request #129 from StounhandJ/master
5068e50 Merge pull request #128 from amirrezafahimi/master
22920c3 Merge pull request #136 from avast/dependabot/go_modules/github.com/stretchr/...
459fade Bump github.com/stretchr/testify from 1.10.0 to 1.11.1
6c62c20 BackOffDelay multiplies attempts from zero
e330bce no delay after final retry on max attempts
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go from 1.55.7 to 1.55.8

Release notes

Sourced from github.com/aws/aws-sdk-go's releases.

Release v1.55.8 (2025-07-31)

SDK Features

Mark the module and all packages as deprecated.

This SDK has entered end-of-support.

Commits

070853e release v1.55.8 (2025-07-31)
bb0168e Add deprecation warnings everywhere and remove some README content
7ce44f3 aws
6d9a26d remove doc issue tmpl
239002f deprecate service packages and HLLs
70c4177 deprecate main runtime packages
bbdd4e9 deprecate
See full diff in compare view

Updates github.com/docker/go-connections from 0.5.0 to 0.6.0

Commits

42faf79 Merge pull request #138 from thaJeztah/sockets_move_unix_options
9ffab7e sockets: make NewUnixSocket, WithChown, WithChmod unix-only
6bb1d15 Merge pull request #135 from thaJeztah/rename_test_files
b6c843d sockets: rename files to be considered test files
80898b6 Merge pull request #133 from thaJeztah/deprecate_socket_dialpipe
a4399e5 socket: deprecate DialPipe
b071e04 Merge pull request #128 from thaJeztah/remove_old_cyphers
578bfde Merge pull request #132 from thaJeztah/optimize_ParsePortSpec
deccd71 tlsconfig: align client and server defaults, remove weak CBC ciphers
30b91c8 nat: ParsePortSpec: combine some conditions
Additional commits viewable in compare view

Updates github.com/getsentry/sentry-go from 0.34.1 to 0.36.2

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.36.2

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.36.2.

Bug Fixes

Fix context propagation for logs to ensure logger instances correctly inherit span and hub information from their creation context (#1118)

Logs now properly propagate trace context from the logger's original context, even when emitted in a different context

The logger will first check the emission context, then fall back to its creation context, and finally to the current hub

0.36.1

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.36.1.

Bug Fixes

Prevent panic when converting error chains containing non-comparable error types by using a safe fallback for visited detection in exception conversion (#1113)

0.36.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.36.0.

Breaking Changes

Behavioral change for the MaxBreadcrumbs client option. Removed the hard limit of 100 breadcrumbs, allowing users to set a larger limit and also changed the default limit from 30 to 100 (#1106))

The changes to error handling (#1075) will affect issue grouping. It is expected that any wrapped and complex errors will be grouped under a new issue group.

Features
Add support for improved issue grouping with enhanced error chain handling (#1075)

The SDK now provides better handling of complex error scenarios, particularly when dealing with multiple related errors or error chains. This feature automatically detects and properly structures errors created with Go's errors.Join() function and other multi-error patterns.
// Multiple errors are now properly grouped and displayed in Sentry
err1 := errors.New("err1")
err2 := errors.New("err2") 
combinedErr := errors.Join(err1, err2)
// When captured, these will be shown as related exceptions in Sentry
sentry.CaptureException(combinedErr)
Add TraceIgnoreStatusCodes option to allow filtering of HTTP transactions based on status codes (#1089)

Configure which HTTP status codes should not be traced by providing single codes or ranges

Example: TraceIgnoreStatusCodes: [][]int{{404}, {500, 599}} ignores 404 and server errors 500-599
Bug Fixes

Fix logs being incorrectly filtered by BeforeSend callback (#1109)

Logs now bypass the processEvent method and are sent directly to the transport

This ensures logs are only filtered by BeforeSendLog, not by the error/message BeforeSend callback

... (truncated)

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.36.2

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.36.2.

Bug Fixes

Fix context propagation for logs to ensure logger instances correctly inherit span and hub information from their creation context (#1118)

Logs now properly propagate trace context from the logger's original context, even when emitted in a different context

The logger will first check the emission context, then fall back to its creation context, and finally to the current hub

0.36.1

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.36.1.

Bug Fixes

Prevent panic when converting error chains containing non-comparable error types by using a safe fallback for visited detection in exception conversion (#1113)

0.36.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.36.0.

Breaking Changes

Behavioral change for the MaxBreadcrumbs client option. Removed the hard limit of 100 breadcrumbs, allowing users to set a larger limit and also changed the default limit from 30 to 100 (#1106))

The changes to error handling (#1075) will affect issue grouping. It is expected that any wrapped and complex errors will be grouped under a new issue group.

Features
Add support for improved issue grouping with enhanced error chain handling (#1075)

The SDK now provides better handling of complex error scenarios, particularly when dealing with multiple related errors or error chains. This feature automatically detects and properly structures errors created with Go's errors.Join() function and other multi-error patterns.
// Multiple errors are now properly grouped and displayed in Sentry
err1 := errors.New("err1")
err2 := errors.New("err2") 
combinedErr := errors.Join(err1, err2)
// When captured, these will be shown as related exceptions in Sentry
sentry.CaptureException(combinedErr)
Add TraceIgnoreStatusCodes option to allow filtering of HTTP transactions based on status codes (#1089)

Configure which HTTP status codes should not be traced by providing single codes or ranges

Example: TraceIgnoreStatusCodes: [][]int{{404}, {500, 599}} ignores 404 and server errors 500-599
Bug Fixes

... (truncated)

Commits

2aecd6e release: 0.36.2
a30c2b8 Prepare 0.36.2 (#1119)
97e65bf fix: add correct context propagation for logs (#1118)
c982e6f feat: add new envelope transport (#1094)
10448bc feat: add ring buffers (#1093)
839f710 Merge branch 'release/0.36.1'
1bdc7aa release: 0.36.1
fb7dacf Prepare 0.36.1 (#1114)
11f2790 fix: add fallback on non hashable errors (#1113)
2cf1dc0 Merge branch 'release/0.36.0'
Additional commits viewable in compare view

Updates github.com/go-playground/validator/v10 from 10.27.0 to 10.28.0

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

Release 10.28.0

What's Changed

Update workflow.yml to support 2 most recent major versions by @nodivbyzero in go-playground/validator#1417

Bump actions/checkout from 4 to 5 by @dependabot[bot] in go-playground/validator#1456

Go 1.25 support by @nodivbyzero in go-playground/validator#1459

Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.10 by @dependabot[bot] in go-playground/validator#1463

Bump golang.org/x/text from 0.22.0 to 0.29.0 by @dependabot[bot] in go-playground/validator#1464

Bump actions/setup-go from 5 to 6 by @dependabot[bot] in go-playground/validator#1465

Bump golang.org/x/crypto from 0.33.0 to 0.42.0 by @dependabot[bot] in go-playground/validator#1467

fix: should panic when define duplicate field param in required_if by @duyquang6 in go-playground/validator#1468

Fixed missing keys from returned errors in map validation by @gelozr in go-playground/validator#1284

Added https_url tag by @ahmedkamalio in go-playground/validator#1461

docs: add description for 'port' validator by @nodivbyzero in go-playground/validator#1435

Add alphaspace validator by @takaaa220 in go-playground/validator#1343

New Contributors

@duyquang6 made their first contribution in go-playground/validator#1468

@gelozr made their first contribution in go-playground/validator#1284

@ahmedkamalio made their first contribution in go-playground/validator#1461

@takaaa220 made their first contribution in go-playground/validator#1343

Full Changelog: go-playground/validator@v10.27.0...v10.28.0

Commits

bdc3a7d Add alphaspace validator (#1343)
63594a0 docs: add description for 'port' validator (#1435)
45f3a8e Added https_url tag (#1461)
7a23bca Remove Go version 1.23 from CI workflow
13130d2 Fixed missing keys from returned errors in map validation (#1284)
94e89f0 fix: should panic when define duplicate field param in required_if (#1468)
6905468 Bump golang.org/x/crypto from 0.33.0 to 0.42.0 (#1467)
77ef70e Bump actions/setup-go from 5 to 6 (#1465)
78d05ae Bump golang.org/x/text from 0.22.0 to 0.29.0 (#1464)
34aea1f Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.10 (#1463)
Additional commits viewable in compare view

Updates github.com/golang-jwt/jwt/v5 from 5.2.3 to 5.3.0

Release notes

Sourced from github.com/golang-jwt/jwt/v5's releases.

v5.3.0

This release is almost identical to to v5.2.3 but now correctly indicates Go 1.21 as minimum requirement.

What's Changed

Create CODEOWNERS by @oxisto in golang-jwt/jwt#449

Bump Go version to indicate correct minimum requirement by @oxisto in golang-jwt/jwt#452

Full Changelog: golang-jwt/jwt@v5.2.3...v5.3.0

Commits

e9547a1 Bump Go version to indicate correct minimum requirement (#452)
3839817 Create CODEOWNERS (#449)
See full diff in compare view

Updates github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.32

Commits

8bf7a8a update amalgamation code
2e165e0 fix syntax error
e63a0c3 fix test
a9775d4 return error
c857a95 drop call of AuthEnabled()
eb86f08 check authEnabled
4372bf2 enable test for sqlite_userauth but it is dropped at least
69a843e fix GitHub workflow
4c1ac1e fix GitHub workflow
a8be3f8 fix GitHub workflow
Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.22.0 to 1.23.2

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.2 - 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

[release-1.23] Upgrade to prometheus/[email protected] by @aknuds1 in prometheus/client_golang#1869

[release-1.23] Cut v1.23.2 by @aknuds1 in prometheus/client_golang#1870

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1 - 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

[release-1.23] Upgrade to prometheus/common v0.66 by @aknuds1 in prometheus/client_golang#1866

[release-1.23] Cut v1.23.1 by @aknuds1 in prometheus/client_golang#1867

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

v1.23.0 - 2025-07-30

[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812

[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766

[FEATURE] Add exemplars for native histograms #1686

[ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823

[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833

[BUGFIX] exp/api: client prompt return on context cancellation #1729

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

1.23.0 / 2025-07-30

[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812

[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766

[FEATURE] Add exemplars for native histograms #1686

[ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823

[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833

[BUGFIX] exp/api: client prompt return on context cancellation #1729

Commits

8179a56 Cut v1.23.2 (#1870)
4142b59 Merge pull request #1869 from prometheus/arve/upgrade-common
4ff40f0 Cut v1.23.1 (#1867)
989b029 Upgrade to prometheus/common v0.66 (#1866)
e4b2208 Cut v1.23.0 (#1848)
d9492af cut v1.23.0-rc.1 (#1842)
aeae8a0 Cut v1.23.0-rc.0 (#1837)
b157309 Update common Prometheus files (#1832)
a704e28 build(deps): bump the github-actions group with 3 updates (#1826)
c774311 Fix errNotImplemented reference (#1835)
Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.9.1 to 1.10.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.1

🐛 Fix

chore: upgrade pflags v1.0.9 by @jpmcb in spf13/cobra#2305

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

What's Changed

🚨 Attention!

Bump pflag to 1.0.8 by @tomasaschan in spf13/cobra#2303

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`

or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: spf13/cobra#2303

✨ Features

Flow context to command in SetHelpFunc by @Frassle in spf13/cobra#2241

The default ShellCompDirective can be customized for a command and its subcommands by @albers in spf13/cobra#2238

🐛 Fix

Upgrade golangci-lint to v2, address findings by @scop in spf13/cobra#2279

🪠 Testing

Test with Go 1.24 by @harryzcy in spf13/cobra#2236

chore: Rm GitHub Action PR size labeler by @jpmcb in spf13/cobra#2256

📝 Docs

Remove traling curlybrace by @yedayak in spf13/cobra#2237

Update command.go by @styee in spf13/cobra#2248

feat: Add security policy by @jpmcb in spf13/cobra#2253

Update Readme (Warp) by @ericdachen in spf13/cobra#2267

Add Periscope to the list of projects using Cobra by @anishathalye in spf13/cobra#2299

New Contributors

@harryzcy made their first contribution in spf13/cobra#2236

@yedayak made their first contribution in spf13/cobra#2237

@Frassle made their first contribution in spf13/cobra#2241

... (truncated)

Commits

7da941c chore: Bump pflag to v1.0.9 (#2305)
51d6751 Bump pflag to 1.0.8 (#2303)
3f3b818 Update README.md with new logo
dcaf42e Add Periscope to the list of projects using Cobra (#2299)
6dec1ae The default ShellCompDirective can be customized for a command and its subcom...
c8289c1 chore(golangci-lint): add some exclusion presets
4af7b64 refactor: apply golangci-lint autofixes, work around false positives
75790e4 chore(golangci-lint): upgrade to v2
db3ddb5 Adding sponsorship to README.md
67171d6 putting sponsorship below header
Additional commits viewable in compare view

Updates github.com/spf13/viper from 1.20.1 to 1.21.0

Release notes

Sourced from github.com/spf13/viper's releases.

v1.21.0

What's Changed

Enhancements 🚀

Add support for flags pflag.BoolSlice, pflag.UintSlice and pflag.Float64Slice by @nmvalera in spf13/viper#2015

feat: use maintained yaml library by @sagikazarmark in spf13/viper#2040

Bug Fixes 🐛

fix(config): get config type from v.configType or config file ext by @GuillaumeBAECHLER in spf13/viper#2003

fix: config type check when loading any config by @sagikazarmark in spf13/viper#2007

Dependency Updates ⬆️

Update dependencies by @sagikazarmark in spf13/viper#1993

build(deps): bump github.com/spf13/cast from 1.7.1 to 1.8.0 by @dependabot[bot] in spf13/viper#2017

build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.3 to 2.2.4 by @dependabot[bot] in spf13/viper#2013

build(deps): bump github.com/sagikazarmark/locafero from 0.8.0 to 0.9.0 by @dependabot[bot] in spf13/viper#2008

build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 in /remote by @dependabot[bot] in spf13/viper#2016

build(deps): bump github.com/spf13/cast from 1.8.0 to 1.9.2 by @dependabot[bot] in spf13/viper#2020

build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 by @dependabot[bot] in spf13/viper#2028

build(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 by @dependabot[bot] in spf13/viper#2035

build(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7 by @dependabot[bot] in spf13/viper#2036

build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 by @dependabot[bot] in spf13/viper#2012

build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @dependabot[bot] in spf13/viper#2052

build(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 in /remote by @dependabot[bot] in spf13/viper#2048

build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10 by @dependabot[bot] in spf13/viper#2056

chore: update dependencies by @sagikazarmark in spf13/viper#2057

Other Changes

Update update guide with mapstructure package replacement. by @aldas in spf13/viper#2004

refactor: use the built-in max/min to simplify the code by @yingshanghuangqiao in spf13/viper#2029

New Contributors

@GuillaumeBAECHLER made their first contribution in spf13/viper#2003

@aldas made their first contribution in spf13/viper#2004

@nmvalera made their first contribution in spf13/viper#2015

@yingshanghuangqiao made their first contribution in spf13/viper#2029

@ccoVeille made their first contribution in spf13/viper#2046

@spacez320 made their first contribution in spf13/viper#2050

Full Changelog: spf13/viper@v1.20.0...v1.21.0

Commits

394040c ci: build on go 1.25
812f548 chore: update dependencies
d5271ef ci: update stale workflow
dff303b feat: add a stale issue scheduled action
1287976 build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10
38932cd build(deps): bump github.com/go-viper/mapstructure/v2 in /remote
6d014be build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1
b74c7ee build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0
acd05e1 fix: linting issues
ae5a8e2 ci: upgrade golangci-lint
Additional commits viewable in compare view

Updates github.com/testcontainers/testcontainers-go from 0.37.0 to 0.39.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.39.0

What's Changed

🚀 Features

feat(atlaslocal): add MongoDB Atlas Local module (#3254) @prestonvasquez

feat: allow saving specific platforms for an image (#3218) @LaurentGoderre

feat(redpanda): add support for http proxy (#3258) @simon0191

feat(nebulagraph): add NebulaGraph module (#3266) @egasimov

feat(registry): add helper functions to pull and tag images (#3275) @mdelapenya

feat: add Solace pubsub+ module (#3230) @unicod3

feat(options): ad...
Description has been truncated

socket-security · 2025-11-02T02:12:12Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Maintenance
github.com/prometheus/client_golang@v1.22.0 ⏵ v1.23.2	⁺¹
github.com/99designs/gqlgen@v0.17.76 ⏵ v0.17.83
github.com/getsentry/sentry-go@v0.34.1 ⏵ v0.38.0	^-6
github.com/aws/aws-sdk-go@v1.55.7 ⏵ v1.55.8	⁺¹
golang.org/x/text@v0.27.0 ⏵ v0.30.0	⁺¹
github.com/mattn/go-sqlite3@v1.14.28 ⏵ v1.14.32		⁺²⁵
github.com/go-playground/validator/v10@v10.27.0 ⏵ v10.28.0	⁺¹
github.com/testcontainers/testcontainers-go@v0.37.0 ⏵ v0.40.0	⁺¹
github.com/docker/go-connections@v0.5.0 ⏵ v0.6.0	^-1
github.com/spf13/cobra@v1.9.1 ⏵ v1.10.1	⁺¹
github.com/golang-jwt/jwt/v5@v5.2.3 ⏵ v5.3.0
github.com/avast/retry-go/v4@v4.6.1 ⏵ v4.7.0	⁺¹
github.com/spf13/viper@v1.20.1 ⏵ v1.21.0	⁺¹
github.com/vektah/gqlparser/v2@v2.5.30 ⏵ v2.5.31
golang.org/x/term@v0.33.0 ⏵ v0.36.0	⁺¹
github.com/vikstrous/dataloadgen@v0.0.9 ⏵ v0.0.10

View full report

dependabot · 2025-11-13T18:38:22Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

…6 updates Bumps the minor-and-patch group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/99designs/gqlgen](https://github.com/99designs/gqlgen) | `0.17.76` | `0.17.81` | | [github.com/avast/retry-go/v4](https://github.com/avast/retry-go) | `4.6.1` | `4.7.0` | | [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) | `1.55.7` | `1.55.8` | | [github.com/docker/go-connections](https://github.com/docker/go-connections) | `0.5.0` | `0.6.0` | | [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) | `0.34.1` | `0.36.2` | | [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.27.0` | `10.28.0` | | [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.2.3` | `5.3.0` | | [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.28` | `1.14.32` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.22.0` | `1.23.2` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.9.1` | `1.10.1` | | [github.com/spf13/viper](https://github.com/spf13/viper) | `1.20.1` | `1.21.0` | | [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.37.0` | `0.39.0` | | [github.com/vektah/gqlparser/v2](https://github.com/vektah/gqlparser) | `2.5.30` | `2.5.31` | | [github.com/vikstrous/dataloadgen](https://github.com/vikstrous/dataloadgen) | `0.0.9` | `0.0.10` | Updates `github.com/99designs/gqlgen` from 0.17.76 to 0.17.81 - [Release notes](https://github.com/99designs/gqlgen/releases) - [Changelog](https://github.com/99designs/gqlgen/blob/master/CHANGELOG.md) - [Commits](99designs/gqlgen@v0.17.76...v0.17.81) Updates `github.com/avast/retry-go/v4` from 4.6.1 to 4.7.0 - [Release notes](https://github.com/avast/retry-go/releases) - [Commits](avast/retry-go@4.6.1...4.7.0) Updates `github.com/aws/aws-sdk-go` from 1.55.7 to 1.55.8 - [Release notes](https://github.com/aws/aws-sdk-go/releases) - [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG_PENDING.md) - [Commits](aws/aws-sdk-go@v1.55.7...v1.55.8) Updates `github.com/docker/go-connections` from 0.5.0 to 0.6.0 - [Commits](docker/go-connections@v0.5.0...v0.6.0) Updates `github.com/getsentry/sentry-go` from 0.34.1 to 0.36.2 - [Release notes](https://github.com/getsentry/sentry-go/releases) - [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-go@v0.34.1...v0.36.2) Updates `github.com/go-playground/validator/v10` from 10.27.0 to 10.28.0 - [Release notes](https://github.com/go-playground/validator/releases) - [Commits](go-playground/validator@v10.27.0...v10.28.0) Updates `github.com/golang-jwt/jwt/v5` from 5.2.3 to 5.3.0 - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md) - [Commits](golang-jwt/jwt@v5.2.3...v5.3.0) Updates `github.com/mattn/go-sqlite3` from 1.14.28 to 1.14.32 - [Release notes](https://github.com/mattn/go-sqlite3/releases) - [Commits](mattn/go-sqlite3@v1.14.28...v1.14.32) Updates `github.com/prometheus/client_golang` from 1.22.0 to 1.23.2 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.22.0...v1.23.2) Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.1 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.9.1...v1.10.1) Updates `github.com/spf13/viper` from 1.20.1 to 1.21.0 - [Release notes](https://github.com/spf13/viper/releases) - [Commits](spf13/viper@v1.20.1...v1.21.0) Updates `github.com/testcontainers/testcontainers-go` from 0.37.0 to 0.39.0 - [Release notes](https://github.com/testcontainers/testcontainers-go/releases) - [Commits](testcontainers/testcontainers-go@v0.37.0...v0.39.0) Updates `github.com/vektah/gqlparser/v2` from 2.5.30 to 2.5.31 - [Release notes](https://github.com/vektah/gqlparser/releases) - [Commits](vektah/gqlparser@v2.5.30...v2.5.31) Updates `github.com/vikstrous/dataloadgen` from 0.0.9 to 0.0.10 - [Commits](vikstrous/dataloadgen@v0.0.9...v0.0.10) Updates `golang.org/x/term` from 0.33.0 to 0.35.0 - [Commits](golang/term@v0.33.0...v0.35.0) Updates `golang.org/x/text` from 0.27.0 to 0.29.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.27.0...v0.29.0) --- updated-dependencies: - dependency-name: github.com/99designs/gqlgen dependency-version: 0.17.81 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: github.com/avast/retry-go/v4 dependency-version: 4.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: github.com/aws/aws-sdk-go dependency-version: 1.55.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: github.com/docker/go-connections dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: github.com/getsentry/sentry-go dependency-version: 0.36.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: github.com/go-playground/validator/v10 dependency-version: 10.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: github.com/golang-jwt/jwt/v5 dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: github.com/mattn/go-sqlite3 dependency-version: 1.14.32 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: github.com/prometheus/client_golang dependency-version: 1.23.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: github.com/spf13/cobra dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: github.com/spf13/viper dependency-version: 1.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: github.com/testcontainers/testcontainers-go dependency-version: 0.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: github.com/vektah/gqlparser/v2 dependency-version: 2.5.31 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: github.com/vikstrous/dataloadgen dependency-version: 0.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: golang.org/x/term dependency-version: 0.35.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: golang.org/x/text dependency-version: 0.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-11-19T19:35:05Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 2, 2025

dependabot bot force-pushed the dependabot/go_modules/minor-and-patch-b646670b8e branch 3 times, most recently from c6b8098 to b9a3bea Compare November 13, 2025 18:23

dependabot bot force-pushed the dependabot/go_modules/minor-and-patch-b646670b8e branch from b9a3bea to 18aa2b6 Compare November 18, 2025 17:10

dependabot bot closed this Nov 19, 2025

dependabot bot deleted the dependabot/go_modules/minor-and-patch-b646670b8e branch November 19, 2025 19:35

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the minor-and-patch group across 1 directory with 16 updates #356

build(deps): bump the minor-and-patch group across 1 directory with 16 updates #356

Uh oh!

dependabot bot commented on behalf of github Nov 2, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Nov 2, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Nov 13, 2025

Uh oh!

dependabot bot commented on behalf of github Nov 19, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

build(deps): bump the minor-and-patch group across 1 directory with 16 updates #356

build(deps): bump the minor-and-patch group across 1 directory with 16 updates #356

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.17.81

What's Changed

New Contributors

v0.17.80

What's Changed

New Contributors

v0.17.79

What's Changed

v4.7.0

What's Changed

New Contributors

Release v1.55.8 (2025-07-31)

SDK Features

0.36.2

Bug Fixes

0.36.1

Bug Fixes

0.36.0

Breaking Changes

Features

Bug Fixes

0.36.2

Bug Fixes

0.36.1

Bug Fixes

0.36.0

Breaking Changes

Features

Bug Fixes

Release 10.28.0

What's Changed

New Contributors

v5.3.0

What's Changed

v1.23.2 - 2025-09-05

v1.23.1 - 2025-09-04

v1.23.0 - 2025-07-30

1.23.2 / 2025-09-05

1.23.1 / 2025-09-04

1.23.0 / 2025-07-30

v1.10.1

🐛 Fix

v1.10.0

What's Changed

🚨 Attention!

✨ Features

🐛 Fix

🪠 Testing

📝 Docs

New Contributors

v1.21.0

What's Changed

Enhancements 🚀

Bug Fixes 🐛

Dependency Updates ⬆️

Other Changes

New Contributors

v0.39.0

What's Changed

🚀 Features

Uh oh!

socket-security bot commented Nov 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

dependabot bot commented on behalf of github Nov 13, 2025

Uh oh!

dependabot bot commented on behalf of github Nov 19, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

dependabot bot commented on behalf of github Nov 2, 2025 •

edited

Loading

socket-security bot commented Nov 2, 2025 •

edited

Loading