Skip to content

Bump the all-deps group across 1 directory with 9 updates - #1392

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/all-deps-488a6d35f0
Open

Bump the all-deps group across 1 directory with 9 updates#1392
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/all-deps-488a6d35f0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all-deps group with 6 updates in the / directory:

Package From To
github.com/apache/beam/sdks/v2 2.73.0 2.76.0
github.com/mattn/go-sqlite3 1.14.44 1.14.50
github.com/transparency-dev/formats 0.1.0 0.1.1
github.com/usbarmory/tamago 1.26.3 1.27.0
google.golang.org/grpc 1.83.1 1.83.2
google.golang.org/protobuf 1.36.11 1.36.12

Updates github.com/apache/beam/sdks/v2 from 2.73.0 to 2.76.0

Release notes

Sourced from github.com/apache/beam/sdks/v2's releases.

Beam 2.76.0 release

We are happy to present the new 2.76.0 release of Beam. This release includes both improvements and new functionality. See the download page for this release.

For more information on changes in 2.76.0, check out the detailed release notes.

Highlights

  • Added a full Iceberg batch and streaming changelog source (CDC) (#38831)
  • (Java) Added per-element OpenTelemetry trace propagation across stages in the Dataflow Streaming Runner. Enable it with --experiments=enable_otel_defaults,element_metadata_supported,disable_portable_worker. Cloud Trace incurs additional cost. (#33176)
  • (Java) Added OpenTelemetry header propagation support for both reads and writes in KafkaIO and PubSubIO. (#33176)
  • (Java) Added OpenTelemetry tracing support for SpannerIO change streams (#33176)
  • (Python) JmsIO (IBM MQ, ActiveMQ, and other providers) is now supported in Python via cross-language (#30716).

I/Os

  • Upgraded Iceberg dependency to 1.11.0 (Java) (#38925).
  • Add ArrowFlight IO (Java) (#20116).
  • Added a Delta Lake batch changelog source (CDC) (#39492)

New Features / Improvements

  • Added GroupIntoBatches transform and the standard beam:coder:sharded_key:v1 coder to the Go SDK, along with beam.Coder.IsDeterministic, beam.PCollection.WindowingStrategy, and coder.RegisterDeterministicCoder for opt-in deterministic custom coders (Go) (#19868).
  • TriggerStateMachineRunner changes from BitSetCoder to SentinelBitSetCoder to encode finished bitset. SentinelBitSetCoder and BitSetCoder are state compatible. Both coders can decode encoded bytes from the other coder (#38139).
  • (Python) Removed the envoy-data-plane (and transitive betterproto) dependency; EnvoyRateLimiter now uses a small vendored protobuf definition instead, resolving dependency conflicts for downstream projects (#37854).
  • (Java) Supported acknowledge mode for JmsIO (#39253).
  • (Python) Staged files directory is now automatically added to sys.path on the Python SDK worker at startup. This makes Python files provided via the '--files_to_stage' pipeline option importable in the pipeline code and makes it easier to initialize Python SDK harness at startup via the --beam_plugins pipeline option. For more information, see the Staging Individual Files section of the dependency management docs. This behavior can be disabled by passing the '--experiments=no_staged_dir_in_sys_path' pipeline option (#39431).
  • (Python) Added equal_to_approx, an assert_that matcher that compares numeric pipeline outputs with a configurable tolerance (#18028).
  • (Python) Timestamp now supports variable subsecond precision, up to nanoseconds. The portable beam:logical_type:timestamp:v1 logical type now maps to Python's Timestamp (#39344).
  • (Python) Added UnboundedSource, an interface for reading an infinite stream of records with checkpointing, watermark reporting, and bundle finalization. Read one with beam.io.Read (#19137).
  • (Python) Added Watch, a transform that polls a growing set of outputs for each input element, deduplicates outputs across poll rounds, and stops per a user-supplied termination condition (#21521).
  • (Python) Added support to analyze core dumps created after python worker segmentation faults with pystack (or gdb if installed) using the --profiler_agent=coredump pipeline option. (#39484).
  • (Python) Added Sample.Any, the Python equivalent of Java's Sample.any, which returns up to n arbitrary elements from a PCollection (#18552).

Breaking Changes

  • (Python) Removed google-perftools from the SDK container images. Users who wish to use --profiler_agent=tcmalloc should install google-perftools APT package in their custom container images separately (#39323).

... (truncated)

Changelog

Sourced from github.com/apache/beam/sdks/v2's changelog.

[2.76.0] - 2026-08-31

Highlights

  • Added a full Iceberg batch and streaming changelog source (CDC) (#38831)
  • (Java) Added per-element OpenTelemetry trace propagation across stages in the Dataflow Streaming Runner. Enable it with --experiments=enable_otel_defaults,element_metadata_supported,disable_portable_worker. Cloud Trace incurs additional cost. (#33176)
  • (Java) Added OpenTelemetry header propagation support for both reads and writes in KafkaIO and PubSubIO. (#33176)
  • (Java) Added OpenTelemetry tracing support for SpannerIO change streams (#33176)
  • (Python) JmsIO (IBM MQ, ActiveMQ, and other providers) is now supported in Python via cross-language (#30716).

I/Os

  • Upgraded Iceberg dependency to 1.11.0 (Java) (#38925).
  • Add ArrowFlight IO (Java) (#20116).
  • Added a Delta Lake batch changelog source (CDC) (#39492)

New Features / Improvements

  • Added automatic caching of bounded, single-pane side-input views for classic Java Flink DataStream execution (#39866).
  • Added GroupIntoBatches transform and the standard beam:coder:sharded_key:v1 coder to the Go SDK, along with beam.Coder.IsDeterministic, beam.PCollection.WindowingStrategy, and coder.RegisterDeterministicCoder for opt-in deterministic custom coders (Go) (#19868).
  • TriggerStateMachineRunner changes from BitSetCoder to SentinelBitSetCoder to encode finished bitset. SentinelBitSetCoder and BitSetCoder are state compatible. Both coders can decode encoded bytes from the other coder (#38139).
  • (Python) Removed the envoy-data-plane (and transitive betterproto) dependency; EnvoyRateLimiter now uses a small vendored protobuf definition instead, resolving dependency conflicts for downstream projects (#37854).
  • (Java) Supported acknowledge mode for JmsIO (#39253).
  • (Python) Staged files directory is now automatically added to sys.path on the Python SDK worker at startup. This makes Python files provided via the '--files_to_stage' pipeline option importable in the pipeline code and makes it easier to initialize Python SDK harness at startup via the --beam_plugins pipeline option. For more information, see the Staging Individual Files section of the dependency management docs. This behavior can be disabled by passing the '--experiments=no_staged_dir_in_sys_path' pipeline option (#39431).
  • (Python) Added equal_to_approx, an assert_that matcher that compares numeric pipeline outputs with a configurable tolerance (#18028).
  • (Python) Timestamp now supports variable subsecond precision, up to nanoseconds. The portable beam:logical_type:timestamp:v1 logical type now maps to Python's Timestamp (#39344).
  • (Python) Added UnboundedSource, an interface for reading an infinite stream of records with checkpointing, watermark reporting, and bundle finalization. Read one with beam.io.Read (#19137).
  • (Python) Added Watch, a transform that polls a growing set of outputs for each input element, deduplicates outputs across poll rounds, and stops per a user-supplied termination condition (#21521).
  • (Python) Added support to analyze core dumps created after python worker segmentation faults with pystack (or gdb if installed) using the --profiler_agent=coredump pipeline option. (#39484).
  • (Python) Added Sample.Any, the Python equivalent of Java's Sample.any, which returns up to n arbitrary elements from a PCollection (#18552).

Breaking Changes

  • (Python) Removed google-perftools from the SDK container images. Users who wish to use --profiler_agent=tcmalloc should install google-perftools APT package in their custom container images separately (#39323).
  • [IcebergIO] Reading a timestamptz column will now return a Timestamp.MICROS Beam logical type to preserve microseconds (the old Beam Schema.FieldType#DATETIME primitive type truncates past milliseconds). This may break the following use cases when a timestamptz column is present:
    • Existing streaming read pipelines.
    • Managed Iceberg batch reads when upgraded from an older SDK.
    • Python reads.

... (truncated)

Commits

Updates github.com/mattn/go-sqlite3 from 1.14.44 to 1.14.50

Release notes

Sourced from github.com/mattn/go-sqlite3's releases.

1.14.50

What's Changed

New Contributors

Full Changelog: mattn/go-sqlite3@v1.14.49...v1.14.50

1.14.49

What's Changed

Full Changelog: mattn/go-sqlite3@v1.14.48...v1.14.49

1.14.48

What's Changed

... (truncated)

Commits
  • 58c8e14 Merge pull request #1446 from 0xCarbon/fix/vtable-destroy-handle
  • e27b5e9 fix: keep vtab handle registered when xDestroy fails
  • f9fc7aa Merge pull request #1443 from mattn/add-release-workflow
  • a93a209 Fail closed on release lookup errors and serialize runs per tag
  • 485f31f Add workflow to create releases on tag push
  • 9415230 Merge pull request #1441 from mattn/fix-json-example-scan
  • cc41b8c Merge pull request #1442 from mattn/sqlite-amalgamation-3053004
  • 18308a8 Upgrade SQLite to version 3053004
  • c1a1466 Merge pull request #1440 from mattn/fix-limit-example-stmt-leak
  • 18f2ec3 Assert the expected too many SQL variables error
  • Additional commits viewable in compare view

Updates github.com/transparency-dev/formats from 0.1.0 to 0.1.1

Release notes

Sourced from github.com/transparency-dev/formats's releases.

v0.1.1

What's Changed

Deps

New Contributors

Full Changelog: transparency-dev/formats@v0.1.0...v0.1.1

Commits
  • f8d9ded Remove unused RSA 6962 support (#256)
  • 17c221a 🌱(deps): Bump golang.org/x/crypto (#254)
  • 157a44d 🌱(deps): Bump the all-gha-deps group with 3 updates (#255)
  • a97bebf 🌱(deps): Bump github/codeql-action in the all-gha-deps group (#253)
  • 909dc91 🌱(deps): Bump github/codeql-action in the all-gha-deps group (#252)
  • dc73bfb 🌱(deps): Bump the all-go-deps group with 2 updates (#251)
  • 1e3a4ad Improve generate func name (#250)
  • 7f7fdcf Add func to generate MLDSA key pairs (#249)
  • 8446089 🌱(deps): Bump github/codeql-action in the all-gha-deps group (#248)
  • e6e205e Add MLDSA-44 cosigner implementation (#247)
  • Additional commits viewable in compare view

Updates github.com/usbarmory/tamago from 1.26.3 to 1.27.0

Release notes

Sourced from github.com/usbarmory/tamago's releases.

v1.27.0

This release aligns the tamago library to the new runtime API introduced in tamago-go1.27.0.

Major changes for tamago package API:

Major changes for tamago internal packages:

Full Changelog: usbarmory/tamago@v1.26.6...v1.27.0

This release requires GOOS=tamago support in the Go distribution with tamago-go1.27.0 or later releases.

v1.26.6

This release features:

  • support for a new architecture and related SoC: LoongArch 64-bit on Loongson 3A5000/3A6000 + LS7A
  • major improvements to Microchip LAN969x support
  • transition of Ethernet PHY drivers to its own phy package

Major changes for tamago package API on loong64 platforms:

Major changes for tamago package API to improve Microchip support:

Major changes for tamago package API on amd64 platforms:

... (truncated)

Commits

Updates golang.org/x/crypto from 0.52.0 to 0.54.0

Commits
  • cdce021 go.mod: update golang.org/x dependencies
  • d9474cc openpgp: make the deprecation message more explicit
  • 7626c50 ssh: verify declared key type matches decoded key in authorized_keys
  • 0471e79 ssh/agent: enforce strict limits on DSA key parameters
  • 6435c37 ssh: sanitize client disconnect messages
  • 7d695da ssh/agent: drain channel stderr in agent forwarders
  • 5b7f841 acme/autocert: fix data race in Manager.createCert
  • 0b316e7 argon2: update RFC 9106 parameter recommendations
  • 55aec0a x509roots/fallback: update bundle
  • 5f2de1a internal: remove wycheproof tests
  • Additional commits viewable in compare view

Updates golang.org/x/mod from 0.36.0 to 0.37.0

Commits
  • deb1dfc go.mod: update golang.org/x dependencies
  • 087f651 modfile: use slices.Backward
  • 343ee60 x/mod: allow for aggressively conslidating requires
  • See full diff in compare view

Updates golang.org/x/sync from 0.20.0 to 0.22.0

Commits
  • 1eb64d4 semaphore: panic on negative weights
  • 5071ed6 all: fix some comments to improve readability
  • See full diff in compare view

Updates google.golang.org/grpc from 1.83.1 to 1.83.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)
Commits

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 1, 2026 04:46
@dependabot
dependabot Bot removed the request for review from a team September 1, 2026 04:46
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 1, 2026
@dependabot
dependabot Bot requested a review from AlCutter September 1, 2026 04:46
@dependabot dependabot Bot added the go Pull requests that update Go code label Sep 1, 2026
@dpebot

dpebot commented Sep 1, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@dependabot
Bump the all-deps group across 1 directory with 9 updates
08cc918 
Bumps the all-deps group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/apache/beam/sdks/v2](https://github.com/apache/beam) | `2.73.0` | `2.76.0` |
| [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.44` | `1.14.50` |
| [github.com/transparency-dev/formats](https://github.com/transparency-dev/formats) | `0.1.0` | `0.1.1` |
| [github.com/usbarmory/tamago](https://github.com/usbarmory/tamago) | `1.26.3` | `1.27.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.1` | `1.83.2` |
| google.golang.org/protobuf | `1.36.11` | `1.36.12` |



Updates `github.com/apache/beam/sdks/v2` from 2.73.0 to 2.76.0
- [Release notes](https://github.com/apache/beam/releases)
- [Changelog](https://github.com/apache/beam/blob/master/CHANGES.md)
- [Commits](apache/beam@v2.73.0...v2.76.0)

Updates `github.com/mattn/go-sqlite3` from 1.14.44 to 1.14.50
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](mattn/go-sqlite3@v1.14.44...v1.14.50)

Updates `github.com/transparency-dev/formats` from 0.1.0 to 0.1.1
- [Release notes](https://github.com/transparency-dev/formats/releases)
- [Commits](transparency-dev/formats@v0.1.0...v0.1.1)

Updates `github.com/usbarmory/tamago` from 1.26.3 to 1.27.0
- [Release notes](https://github.com/usbarmory/tamago/releases)
- [Commits](usbarmory/tamago@v1.26.3...v1.27.0)

Updates `golang.org/x/crypto` from 0.52.0 to 0.54.0
- [Commits](golang/crypto@v0.52.0...v0.54.0)

Updates `golang.org/x/mod` from 0.36.0 to 0.37.0
- [Commits](golang/mod@v0.36.0...v0.37.0)

Updates `golang.org/x/sync` from 0.20.0 to 0.22.0
- [Commits](golang/sync@v0.20.0...v0.22.0)

Updates `google.golang.org/grpc` from 1.83.1 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.1...v1.83.2)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

---
updated-dependencies:
- dependency-name: github.com/apache/beam/sdks/v2
  dependency-version: 2.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: github.com/mattn/go-sqlite3
  dependency-version: 1.14.50
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: github.com/transparency-dev/formats
  dependency-version: 0.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: github.com/usbarmory/tamago
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: golang.org/x/crypto
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: golang.org/x/mod
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: golang.org/x/sync
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/all-deps-488a6d35f0 branch from 647a465 to 08cc918 Compare September 2, 2026 10:28
@dpebot

dpebot commented Sep 2, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@AlCutter AlCutter Awaiting requested review from AlCutter AlCutter is a code owner automatically assigned from google/trillian-examples-reviews

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@dpebot