Skip to content

build(deps): bump the go-mod group across 1 directory with 10 updates#39

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-mod-fc851ce7c6
Open

build(deps): bump the go-mod group across 1 directory with 10 updates#39
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-mod-fc851ce7c6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-mod group with 9 updates in the / directory:

Package From To
github.com/99designs/gqlgen 0.17.89 0.17.91
github.com/DIMO-Network/cloudevent 0.2.7 1.0.4
github.com/caarlos0/env/v11 11.4.0 11.4.1
github.com/ethereum/go-ethereum 1.17.1 1.17.3
github.com/go-jose/go-jose/v3 3.0.4 3.0.5
github.com/gofiber/fiber/v2 2.52.12 2.52.13
github.com/modelcontextprotocol/go-sdk 1.4.1 1.6.1
github.com/rs/zerolog 1.34.0 1.35.1
golang.org/x/sync 0.20.0 0.21.0

Updates github.com/99designs/gqlgen from 0.17.89 to 0.17.91

Release notes

Sourced from github.com/99designs/gqlgen's releases.

v0.17.91

What's Changed

... (truncated)

Commits
  • 822e228 release v0.17.91
  • 837d8a7 Update gqlparser to v2.5.34 (#4210)
  • 7ab1571 chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#4207)
  • 9de7aa7 chore(deps-dev): bump shell-quote (#4209)
  • bcddd87 chore(deps-dev): bump @​graphql-codegen/client-preset in /integration (#4208)
  • f06fcae chore(deps-dev): bump @​apollo/client from 4.2.0 to 4.2.2 in /integration (#4206)
  • 9f8f94f graphql: add runtime non-null field support via MarkNonNull (#4138)
  • c1fa635 chore: remove deprecated GraphQL handler implementation from handler.go, tran...
  • e9f372e chore(deps-dev): bump @​graphql-codegen/cli in /integration (#4201)
  • 8888c7c chore(deps-dev): bump graphql from 16.14.0 to 16.14.1 in /integration (#4198)
  • Additional commits viewable in compare view

Updates github.com/DIMO-Network/cloudevent from 0.2.7 to 1.0.4

Release notes

Sourced from github.com/DIMO-Network/cloudevent's releases.

v0.2.11

Full Changelog: DIMO-Network/cloudevent@v0.2.10...v0.2.11

v0.2.10

Full Changelog: DIMO-Network/cloudevent@v0.2.9...v0.2.10

v0.2.9

What's Changed

Full Changelog: DIMO-Network/cloudevent@v0.2.8...v0.2.9

v0.2.8

What's Changed

Full Changelog: DIMO-Network/cloudevent@v0.2.7...v0.2.8

Commits

Updates github.com/caarlos0/env/v11 from 11.4.0 to 11.4.1

Release notes

Sourced from github.com/caarlos0/env/v11's releases.

v11.4.1

Changelog

Bug fixes

  • 6daeb06ac7e3c9532a7eaa5768d45917393b7480: fix: use Key instead of OwnKey in rawEnvVars to properly reference existing defaults in complex structs (#412) (@​AndrewChubatiuk)

Documentation updates

  • 1ff55e6c9733833ce75d62b345916a407dbe4158: docs: adaptive starchart (#416) (@​alexandear)

Other work

  • cf4a9682420b025e44b4773fd7ee0be48bb68b2f: ci(deps): bump the actions group with 3 updates (#411) (@​dependabot[bot])
  • 33faf6f333c2c3dacef2991825f8e03960a2c0cb: ci(deps): bump the actions group with 3 updates (#417) (@​dependabot[bot])
  • 0cb635b62488f4d310809a82a8832cedc9aa94eb: ci(deps): bump the actions group with 6 updates (#415) (@​dependabot[bot])
  • a72d89a8930fc800372a6a338a1acf33e5cc3a56: ci: update release config (@​caarlos0)

Released with GoReleaser Pro!

Commits
  • a72d89a ci: update release config
  • 6daeb06 fix: use Key instead of OwnKey in rawEnvVars to properly reference existing d...
  • 33faf6f ci(deps): bump the actions group with 3 updates (#417)
  • 1ff55e6 docs: adaptive starchart (#416)
  • 0cb635b ci(deps): bump the actions group with 6 updates (#415)
  • cf4a968 ci(deps): bump the actions group with 3 updates (#411)
  • See full diff in compare view

Updates github.com/ethereum/go-ethereum from 1.17.1 to 1.17.3

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Enzymatic Injector (v1.17.3)

This is a maintenance release with continued progress on the Amsterdam fork implementation. It also introduces ETH/70, which is now live on the network.

ethereum/execution-apis#762reexec has been removed from the tracing config:

  • memory: words are 0x-prefixed and padded to 32 bytes
  • storage: keys and values are 0x-prefixed
  • error: omitted when empty (previously serialized as "")

Geth

  • Add retry mechanism for checkpoint init in blsync (#33966)
  • Add subcommand for offline binary tree conversion (#33740)
  • Add code exporter for db export (#34696)

Core

  • Amsterdam fork updates:
  • Implement stack arena (#33960)
  • Implement EIP-7975: eth/70 partial block receipt lists (#33153)
  • Prerequisites of snap/2 protocol (#34083, #34649, #34654, #34874)
  • Implement history index pruner for path-mode archive nodes (#33999)
  • Add Prague chain segment pruning point for Hoodi (#34714)
  • Allow reorging head to parent within 32 blocks under ePBS (#34767)
  • Stop serving chain segment requests when data is unavailable (#34787)
  • Drop peers sending invalid bodies or receipts (#34745, #34870)
  • Add kzg4844 cell-related functions (#34766)
  • State database refactoring (#33102, #34700, #34763, #34724)
  • Binary trie improvements (#34055, #34110, #34670, #34676, #34680, #34690, #34754, #34758, #34777, #34794)
  • Merge EIP-4762 access events for all system calls (#34637)
  • Reject duplicate layers in the path database (#34642)
  • Omit empty slotNumber and fix block value collection in pre-Amsterdam engine API payloads (#34704)
  • Include the operand in EIP-8024 error messages (#34635)
  • Fix vmodule downgrades and propagate verbosity changes to derived loggers (#33111)
  • Fix incorrect fsync ordering for index file truncation (#34728)
  • Fix file descriptor leak in freezer error paths (#34735)
  • Fix size calculation in path database (#34828)
  • Fix gapped queue size cap in blobpool (#34831)
  • Improve txpool pending concurrency by using read-only locking (#32924)
  • Replace deprecated TypeMux with Feed (#32585)
  • Continue blob retrieval when individual cell proof extraction fails (#34891)
  • Use uint256 in core Message for faster gas calculations (#34934)

... (truncated)

Commits

Updates github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5

Release notes

Sourced from github.com/go-jose/go-jose/v3's releases.

v3.0.5

What's Changed

Fixes GHSA-78h2-9frx-2jm8

We recommend migrating from v3 to v4, and we will stop support v3 in the near future.

Full Changelog: go-jose/go-jose@v3.0.4...v3.0.5

Commits

Updates github.com/gofiber/fiber/v2 from 2.52.12 to 2.52.13

Release notes

Sourced from github.com/gofiber/fiber/v2's releases.

v2.52.13

What's Changed

🐛 Bug Fixes

Full Changelog: gofiber/fiber@v2.52.12...v2.52.13

Commits
  • 0c8cc20 Update fiber package version to 2.52.13
  • 616de00 Merge pull request #4232 from gofiber/update-html-format-to-escape-content
  • ba5a98e 🐛 bug: escape HTML output in Ctx.Format
  • See full diff in compare view

Updates github.com/modelcontextprotocol/go-sdk from 1.4.1 to 1.6.1

Release notes

Sourced from github.com/modelcontextprotocol/go-sdk's releases.

v1.6.1

This release adds an MCPGODEBUG flag to opt out of the Content-Type check on POST requests.

Behavior Changes

Prior to v1.6.0 (v1.4.0...v1.5.0), the Content-Type check on POST requests was gated by the same disablecrossoriginprotection MCPGODEBUG flag as the cross-origin protection. In v1.6.0, the cross-origin protection was disabled by default (replaced by the opt-in enableoriginverification flag), but the Content-Type check was kept on unconditionally, leaving no way to disable it. This release restores an escape hatch for both the Streamable HTTP and SSE transports: setting MCPGODEBUG=disablecontenttypecheck=1 skips the Content-Type: application/json validation on POST requests. See #957.

What's Changed

Full Changelog: modelcontextprotocol/go-sdk@v1.6.0...v1.6.1

v1.6.0

This release is equivalent to v1.6.0-pre.1. Thank you to those who tested the pre-release.

In this release we introduce several smaller fixes and improvements, and we started working for release 2026-06-30. The main new feature is the introduction of ClientCredentialsHandler for OAuth client credentials grant.

Add ClientCredentialsHandler for OAuth client credentials grant

Added ClientCredentialsHandler implementing auth.OAuthHandler using the OAuth 2.0 Client Credentials grant (RFC 6749 Section 4.4) for service-to-service authentication with pre-registered credentials.

2026-06-30 Release related PRs

  • feat: add automatic application_type inference by @​guglielmo-san in modelcontextprotocol/go-sdk#904

    New application_type field is added to the ClientRegistrationMetadata for DynamicClientRegistration. If not specified, the application_type will be inferred from the RedirectURIs. This implements SEP-837.

  • feat: HTTP Header Standardization for method and name by @​guglielmo-san in modelcontextprotocol/go-sdk#907

    By mirroring key fields from the JSON-RPC payload into HTTP headers, network intermediaries such as load balancers, proxies, and observability tools can route and process MCP traffic without deep packet inspection, reducing latency and computational overhead. This partially implements SEP-2243.

Behavior Changes

SetError Behavior Change

Previously the SetError method on CallToolResult always overwrote the Content field with the error text. Now SetError preserves the existing value if it has already been populated. You can restore the previous behavior by setting the environment variable seterroroverwrite=1.

Cross-Origin Protection Default Change

Previously (v1.4.1-v1.5.0) default (zero-value) cross-origin protection was applied when CrossOriginProtection in StreamableHTTPOptions was nil. Now cross-origin protection is not enabled by default when CrossOriginProtection is nil. You can restore the previous behavior (enable by default) by setting enableoriginverification=1.

... (truncated)

Commits
  • d454bba mcp: add MCPGPDEBUG for opt-in Content-Type check (#972)
  • f5f2015 MCPGODEBUG update for 1.6.0 (#893)
  • e01639a feat: HTTP Header Standardization for method and name (#907)
  • 93a41b2 internal/jsonrpc2: remove unused code (#910)
  • 446beae mcp: Upgrade jsonschema-go (#912)
  • 2e21834 extauth: add ClientCredentialsHandler for OAuth client credentials grant (#895)
  • 2643b22 feat: add automatic application_type inference (#904)
  • db50910 mcp: do not re-prompt OAuth after cancelled Authorize (#885)
  • 5f2cd8f mcp: preserve transport errors in Write error chain (#888)
  • 0edc597 Update README.md (#896)
  • Additional commits viewable in compare view

Updates github.com/rs/zerolog from 1.34.0 to 1.35.1

Commits
  • 116c806 event: restore Err() logging when ErrorStackMarshaler returns nil (#763)
  • 1396655 Bump CI Go matrix minimum from 1.21 to 1.23
  • 4b65a2f Bump actions/cache from 4 to 5 (#741)
  • b835796 Bump actions/setup-go from 5 to 6 (#742)
  • 134caf8 Added sanitization of journald keys (#751)
  • e133b6a Added variadic StrsV, ObjectsV, and StringersV (#752)
  • 82017d8 Bump github.com/coreos/go-systemd/v22 from 22.6.0 to 22.7.0 (#753)
  • 2f5b8a9 fix: UpdateContext skips Nop and zero-value loggers (#754)
  • d64c9a7 Add slog.Handler implementation for zerolog (#755)
  • a0d61dc fix: return dict to Event pool (#749)
  • Additional commits viewable in compare view

Updates github.com/vektah/gqlparser/v2 from 2.5.32 to 2.5.34

Release notes

Sourced from github.com/vektah/gqlparser/v2's releases.

v2.5.34

What's Changed

New Contributors

Full Changelog: vektah/gqlparser@v2.5.33...v2.5.34

v2.5.33

What's Changed

New Contributors

Full Changelog: vektah/gqlparser@v2.5.32...v2.5.33

Commits
  • 807d627 fix: reject duplicate enum values and repeated non-repeatable directives (#436)
  • 06ffafa Remove github.com/andreyvit/diff dependency (#430)
  • 40b51d7 build(deps): bump the actions-deps group across 1 directory with 7 updates (#...
  • 34d0454 build(deps): bump golangci/golangci-lint-action (#433)
  • 49ea804 build(deps): bump @​babel/preset-env (#429)
  • 9e555b8 build(deps): bump @​babel/preset-env (#427)
  • e723cfd build(deps): bump @​babel/plugin-transform-modules-systemjs (#428)
  • 84821cc Fix fragment definition directive variable usage (#426)
  • 41b7913 Bump minimatch from 3.0.4 to 3.1.5 in /validator/imported (#417)
  • 3c33bbe Bump prettier in /validator/imported in the actions-deps group (#425)
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.20.0 to 0.21.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the go-mod group across 1 directory with 10 updates
9d607fc 
Bumps the go-mod group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/99designs/gqlgen](https://github.com/99designs/gqlgen) | `0.17.89` | `0.17.91` |
| [github.com/DIMO-Network/cloudevent](https://github.com/DIMO-Network/cloudevent) | `0.2.7` | `1.0.4` |
| [github.com/caarlos0/env/v11](https://github.com/caarlos0/env) | `11.4.0` | `11.4.1` |
| [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) | `1.17.1` | `1.17.3` |
| [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) | `3.0.4` | `3.0.5` |
| [github.com/gofiber/fiber/v2](https://github.com/gofiber/fiber) | `2.52.12` | `2.52.13` |
| [github.com/modelcontextprotocol/go-sdk](https://github.com/modelcontextprotocol/go-sdk) | `1.4.1` | `1.6.1` |
| [github.com/rs/zerolog](https://github.com/rs/zerolog) | `1.34.0` | `1.35.1` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.20.0` | `0.21.0` |



Updates `github.com/99designs/gqlgen` from 0.17.89 to 0.17.91
- [Release notes](https://github.com/99designs/gqlgen/releases)
- [Changelog](https://github.com/99designs/gqlgen/blob/master/CHANGELOG.md)
- [Commits](99designs/gqlgen@v0.17.89...v0.17.91)

Updates `github.com/DIMO-Network/cloudevent` from 0.2.7 to 1.0.4
- [Release notes](https://github.com/DIMO-Network/cloudevent/releases)
- [Commits](https://github.com/DIMO-Network/cloudevent/commits)

Updates `github.com/caarlos0/env/v11` from 11.4.0 to 11.4.1
- [Release notes](https://github.com/caarlos0/env/releases)
- [Commits](caarlos0/env@v11.4.0...v11.4.1)

Updates `github.com/ethereum/go-ethereum` from 1.17.1 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.1...v1.17.3)

Updates `github.com/go-jose/go-jose/v3` from 3.0.4 to 3.0.5
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](go-jose/go-jose@v3.0.4...v3.0.5)

Updates `github.com/gofiber/fiber/v2` from 2.52.12 to 2.52.13
- [Release notes](https://github.com/gofiber/fiber/releases)
- [Commits](gofiber/fiber@v2.52.12...v2.52.13)

Updates `github.com/modelcontextprotocol/go-sdk` from 1.4.1 to 1.6.1
- [Release notes](https://github.com/modelcontextprotocol/go-sdk/releases)
- [Commits](modelcontextprotocol/go-sdk@v1.4.1...v1.6.1)

Updates `github.com/rs/zerolog` from 1.34.0 to 1.35.1
- [Commits](rs/zerolog@v1.34.0...v1.35.1)

Updates `github.com/vektah/gqlparser/v2` from 2.5.32 to 2.5.34
- [Release notes](https://github.com/vektah/gqlparser/releases)
- [Commits](vektah/gqlparser@v2.5.32...v2.5.34)

Updates `golang.org/x/sync` from 0.20.0 to 0.21.0
- [Commits](golang/sync@v0.20.0...v0.21.0)

---
updated-dependencies:
- dependency-name: github.com/99designs/gqlgen
  dependency-version: 0.17.91
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/DIMO-Network/cloudevent
  dependency-version: 1.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: go-mod
- dependency-name: github.com/caarlos0/env/v11
  dependency-version: 11.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/go-jose/go-jose/v3
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/gofiber/fiber/v2
  dependency-version: 2.52.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/modelcontextprotocol/go-sdk
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/rs/zerolog
  dependency-version: 1.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/vektah/gqlparser/v2
  dependency-version: 2.5.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: golang.org/x/sync
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jun 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants