Skip to content

chore(deps): bump the go-minor group across 1 directory with 13 updates - #7115

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-ef3b7f34e5
Open

chore(deps): bump the go-minor group across 1 directory with 13 updates#7115
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-ef3b7f34e5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 5, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-minor group with 10 updates in the / directory:

Package From To
github.com/aws/aws-lambda-go 1.54.0 1.55.0
github.com/aws/aws-sdk-go-v2 1.43.2 1.45.1
github.com/aws/aws-sdk-go-v2/config 1.32.33 1.33.2
github.com/aws/aws-sdk-go-v2/service/ecr 1.60.2 1.63.0
github.com/coreos/go-oidc/v3 3.20.0 3.21.0
github.com/fluxcd/pkg/kustomize 1.39.0 1.40.0
github.com/google/go-containerregistry 0.21.7 0.22.0
github.com/klauspost/compress 1.19.2 1.20.0
github.com/oapi-codegen/runtime 1.6.0 1.7.0
google.golang.org/api 0.292.0 0.297.0

Updates github.com/aws/aws-lambda-go from 1.54.0 to 1.55.0

Release notes

Sourced from github.com/aws/aws-lambda-go's releases.

v1.55.0

What's changed

  • Bump min go version to 1.26 (#638) — @​maxday
  • Enable Go 1.27 compatibility & fix serialization test bugs (#637) — @​djedward
    • Fixed TestMalformedJson to correctly pass a pointer to json.Unmarshal, matching the intended behavior after Go 1.27's JSON library changes.
    • Relaxed error-message matching in tests so both Go 1.27 and earlier versions pass.
    • Hardened flaky integration tests (TestEnableSigterm, TestConcurrencyWithRIE) with polling and increased timeouts.
  • Add missing userNotFound field to Cognito auth trigger requests (#630) — @​anzheyazzz
    • Adds 3 missing userNotFound fields to the Cognito auth trigger request events.
  • Pin GitHub Actions to commit SHAs (#623) — @​maxday
    • Hardens CI supply-chain security by pinning actions to their SHAs.

Full changelog: aws/aws-lambda-go@v1.54.0...v1.55.0

Commits
  • 6800157 feat: bump min go version to 1.26 (#638)
  • f0e2311 Fix serialization test bugs and enable Go 1.27 compat (#637)
  • 87e344b Merge pull request #630 from aws/fix/cognito-usernotfound-missing-fields
  • d6f4d23 Add missing userNotFound field to Cognito auth trigger requests
  • 815d21f fix: pin github actions sha (#623)
  • See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.43.2 to 1.45.1

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.33 to 1.33.2

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.32 to 1.20.2

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.60.2 to 1.63.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.45.2 to 1.48.0

Commits

Updates github.com/aws/smithy-go from 1.27.5 to 1.28.1

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-08-26)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.1
    • Bug Fix: Fix broken AddLogger middleware since its insert point was removed.

Release (2026-08-25.2)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.0
    • Feature: Set Content-Length inline when the request body is set via SetStream. The ComputeContentLength middleware is now deprecated.

Release (2026-08-25)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.10
    • Bug Fix: Fix a data race on the underlying writer when an event stream is closed while an event write is in flight.
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-21)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.9
    • Bug Fix: Fix a generic event stream exception not carrying the error code and message from its payload.
    • Bug Fix: Fix an event stream not being closed when its connection is lost, which would cause a caller writing to the stream to block indefinitely.
    • Bug Fix: Fix deserialization of an empty list producing a nil slice instead of an empty one.
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-14)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.8
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-07)

... (truncated)

Commits

Updates github.com/coreos/go-oidc/v3 from 3.20.0 to 3.21.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.21.0

What's Changed

New Contributors

Full Changelog: coreos/go-oidc@v3.20.0...v3.21.0

Commits
  • c914bd3 oidc: ignore JWKs with unsupported key types rather than failing
  • See full diff in compare view

Updates github.com/fluxcd/pkg/kustomize from 1.39.0 to 1.40.0

Commits
  • 992c220 Merge pull request #1283 from fluxcd/release-main
  • a26a27b Prepare for release
  • 6864165 Merge pull request #1275 from arpitjain099/fix/envsubst-negative-substr-length
  • d051a03 envsubst: support a negative substring length instead of panicking
  • 1d136f7 Merge pull request #1285 from fluxcd/backport
  • 271b023 Update backport workflow to use v0.14.0
  • c41b16d Merge pull request #1281 from fluxcd/kubeconfig-file-refs
  • e2ee0ac runtime/client: Reject file references in kubeconfigs
  • dfc427c Merge pull request #1274 from fluxcd/fix-e2e-azure
  • a20ff3a Fix Azure e2e tests after new major version with breaking changes
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.21.7 to 0.22.0

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.22.0

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.9...v0.21.10

v0.21.9

What's Changed

Full Changelog: google/go-containerregistry@v0.21.8...v0.21.9

v0.21.8

The artifacts attached to this release are missing SLSA provenance, see #2390.

What's Changed

... (truncated)

Commits
  • 3f4ff3c fix(build): unify new build flow into cloudbuild_v2.yaml (#2419)
  • c6b5acd fix(build): correct Cloud Build schema options and source provenance hash (#2...
  • 8f4a85d go.mod: bump Go version + add toolchain directive to replace .go-version file...
  • 5481560 build(deps): bump the go-deps group across 1 directory with 3 updates (#2415)
  • 5b5c272 build(deps): bump the actions group across 1 directory with 8 updates (#2405)
  • 66dd454 remote: retry failed Puller and Pusher initialization (#2406)
  • 3f47f91 fix: add missing substitutions and workspace cleanup to new build files (#2413)
  • 4cb3583 Allow single-character repository paths (#2407)
  • 82cc428 remote: resolve push-check credentials against the repository (#2411)
  • 97815aa build: add multi-architecture Cloud Build configurations for crane, gcrane, a...
  • Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.19.2 to 1.20.0

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.20.0

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.19.2...v1.20.0

Commits
  • 9d8ccb1 flate: Writer with a preset dictionary emits the dictionary into the output s...
  • f93f23a build(deps): bump the github-actions group with 6 updates (#1200)
  • 42f9d96 xpress: add Microsoft XPRESS (MS-XCA) decompression (#1195)
  • 629c2ea zstd/huff0: break false partial-register dependencies in seqdec/4X decoders (...
  • ba74977 ci: test against go1.27.x, drop go1.24.x (#1198)
  • f5c1529 zstd/huff0: pin avo peephole folds, regenerate arm64 (#1199)
  • 73508b2 s2: arm64 assembly encoders, lowered from the amd64 avo program (#1187)
  • 0e43f04 xxhash: bound input of non-preemptive assembly (#1196)
  • 4005c15 s2: clamp the Go EncodeBetter skip to match the assembly (#1190)
  • dd6de45 gzhttp: limit jitter hash to jitterBuffer bytes (#1192)
  • Additional commits viewable in compare view

Updates github.com/oapi-codegen/runtime from 1.6.0 to 1.7.0

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

v1.7.0: Extensions for OpenAPI 3.1 parameter binding

This release teaches the parameter binders about OpenAPI 3.1 multi-type unions, and fixes a long-standing panic on the request binding path. As with v1.6.0, new behavior is controlled by explicit settings rather than assumptions: binding stays exactly as it was unless the new options are used.

Notable Changes

Binding OpenAPI 3.1 multi-type union parameters

OpenAPI 3.1 allows a parameter's type to be a list, such as type: [string, integer]. Go has no type meaning "one of these", so generated code maps such parameters to any — which the binders previously rejected outright with can not bind to destination of type: interface, making these parameters unusable.

The binder options structs (BindStyledParameterOptions, BindQueryParameterOptions, BindStringToObjectOptions) gain a Types []string field carrying the union's member list. It is only consulted when the destination is an any; binding into every concrete Go type is completely unchanged. The value binds to the first member that parses, trying boolean, integer, number, then string — most restrictive first, since a string always parses. Member detection follows the JSON number grammar (RFC 8259), so values like 007 or +1 bind as strings rather than being silently reinterpreted as numbers.

The bound value's dynamic type is always one of bool, int64, float64, string, or (with format: byte) []byte, so a handler's type switch is stable regardless of what the spec's format says. Applications that want format: int32 / format: float to narrow the produced types to int32 / float32 can opt in via a new package-level setting, following the same pattern as DefaultQueryEncoder from v1.6.0:

func init() {
    runtime.NarrowUnionNumericFormats = true
}

Generator support for emitting Types is landing in oapi-codegen separately; the runtime side ships first so generated code can rely on it. Arrays of unions and deepObject-style parameters are not covered yet — see the Types field documentation for the exact scope.

Fix for a panic when binding numeric values into slice destinations

Since v1.2.0, binding a string that happens to parse as an integer into a non-[]byte slice destination panicked with reflect: call of reflect.Value.OverflowInt on slice Value, instead of returning an error. This was reachable from generated code on the request path: a nullable.Nullable[[]string] query parameter using the default form/explode serialization would panic on ?p=123 while returning a normal binding error on ?p=abc. These cases now return a clean can not bind to destination of type: slice error.

🚀 New features and improvements

🐛 Bug fixes

✍ Other changes

📦 Dependency updates

... (truncated)

Commits
  • 25e2d35 Fix panic binding numeric values into non-byte slice destinations (#156)
  • f2e468c Bind OpenAPI 3.1 multi-type union parameters into any destinations (#154)
  • 611503e chore(deps): update github/codeql-action action to v4.37.7 (#152)
  • d8c6443 chore(deps): update release-drafter/release-drafter action to v7.7.0 (#151)
  • 0caa035 chore(deps): update github/codeql-action action to v4.37.5 (#150)
  • 95ed734 fix(deps): update module github.com/labstack/echo/v5 to v5.3.1 (#149)
  • 2f68f55 chore: use go mod tidy instead of tidied (#148)
  • 03f0d06 chore(deps): update release-drafter/release-drafter action to v7.6.0 (#147)
  • 99e61d7 chore(deps): update github/codeql-action action to v4.37.2 (#146)
  • See full diff in compare view

Updates google.golang.org/api from 0.292.0 to 0.297.0

Release notes

Sourced from google.golang.org/api's releases.

v0.297.0

0.297.0 (2026-09-01)

Features

  • Move to go1.26.0 as the lowest supported go version (#3724) (7770e01)

v0.296.0

0.296.0 (2026-08-31)

Features

v0.295.0

0.295.0 (2026-08-28)

Features

v0.294.0

0.294.0 (2026-08-26)

Features

v0.293.0

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.297.0 (2026-09-01)

Features

  • Move to go1.26.0 as the lowest supported go version (#3724) (7770e01)

0.296.0 (2026-08-31)

Features

0.295.0 (2026-08-28)

Features

0.294.0 (2026-08-26)

Features

0.293.0 (2026-08-11)

Features

... (truncated)

Commits
  • dfa9e13 chore(main): release 0.297.0 (#3725)
  • 7770e01 feat: move to...

    Description has been truncated

@dependabot
chore(deps): bump the go-minor group across 1 directory with 13 updates
cebb568 
Bumps the go-minor group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-lambda-go](https://github.com/aws/aws-lambda-go) | `1.54.0` | `1.55.0` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.43.2` | `1.45.1` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.33` | `1.33.2` |
| [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.60.2` | `1.63.0` |
| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.20.0` | `3.21.0` |
| [github.com/fluxcd/pkg/kustomize](https://github.com/fluxcd/pkg) | `1.39.0` | `1.40.0` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.7` | `0.22.0` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.19.2` | `1.20.0` |
| [github.com/oapi-codegen/runtime](https://github.com/oapi-codegen/runtime) | `1.6.0` | `1.7.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.292.0` | `0.297.0` |



Updates `github.com/aws/aws-lambda-go` from 1.54.0 to 1.55.0
- [Release notes](https://github.com/aws/aws-lambda-go/releases)
- [Commits](aws/aws-lambda-go@v1.54.0...v1.55.0)

Updates `github.com/aws/aws-sdk-go-v2` from 1.43.2 to 1.45.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.43.2...v1.45.1)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.33 to 1.33.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.33...config/v1.33.2)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.32 to 1.20.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.19.32...v1.20.2)

Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.60.2 to 1.63.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ssm/v1.60.2...service/s3/v1.63.0)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.45.2 to 1.48.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ecr/v1.45.2...service/s3/v1.48.0)

Updates `github.com/aws/smithy-go` from 1.27.5 to 1.28.1
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.27.5...v1.28.1)

Updates `github.com/coreos/go-oidc/v3` from 3.20.0 to 3.21.0
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](coreos/go-oidc@v3.20.0...v3.21.0)

Updates `github.com/fluxcd/pkg/kustomize` from 1.39.0 to 1.40.0
- [Commits](fluxcd/pkg@kustomize/v1.39.0...kustomize/v1.40.0)

Updates `github.com/google/go-containerregistry` from 0.21.7 to 0.22.0
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.7...v0.22.0)

Updates `github.com/klauspost/compress` from 1.19.2 to 1.20.0
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.19.2...v1.20.0)

Updates `github.com/oapi-codegen/runtime` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/oapi-codegen/runtime/releases)
- [Commits](oapi-codegen/runtime@v1.6.0...v1.7.0)

Updates `google.golang.org/api` from 0.292.0 to 0.297.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.292.0...v0.297.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-lambda-go
  dependency-version: 1.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.45.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.20.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr
  dependency-version: 1.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: github.com/fluxcd/pkg/kustomize
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: github.com/oapi-codegen/runtime
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: google.golang.org/api
  dependency-version: 0.297.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file; mainly used by Dependabot go Pull requests that update Go code labels Sep 5, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 5, 2026 17:47
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file; mainly used by Dependabot go Pull requests that update Go code labels Sep 5, 2026
@kargo-governance-bot kargo-governance-bot Bot added needs/area Issue or PR needs to be labeled to indicate what parts of the code base are affected needs/kind Issue or PR needs to be labeled to clarify its nature labels Sep 5, 2026
@netlify

netlify Bot commented Sep 5, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for docs-kargo-io ready!

Name Link
🔨 Latest commit cebb568
🔍 Latest deploy log https://app.netlify.com/projects/docs-kargo-io/deploys/6a9c55ce4005a40008102bf9
😎 Deploy Preview https://deploy-preview-7115.docs.kargo.io
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@kargo-governance-bot kargo-governance-bot Bot added the needs/priority Priority has not yet been determined; a good signal that maintainers aren't fully committed label Sep 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file; mainly used by Dependabot go Pull requests that update Go code needs/area Issue or PR needs to be labeled to indicate what parts of the code base are affected needs/kind Issue or PR needs to be labeled to clarify its nature needs/priority Priority has not yet been determined; a good signal that maintainers aren't fully committed

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants