Skip to content

build(deps): bump the go-minor-patch group across 13 directories with 31 updates - #7372

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-minor-patch-8ae3694047
Closed

build(deps): bump the go-minor-patch group across 13 directories with 31 updates#7372
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-minor-patch-8ae3694047

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-minor-patch group with 18 updates in the / directory:

Package From To
github.com/DataDog/datadog-api-client-go 1.0.0-beta.16 1.16.0
github.com/Masterminds/sprig/v3 3.2.2 3.3.0
github.com/coreos/go-oidc/v3 3.20.0 3.21.0
github.com/creasty/defaults 1.6.0 1.8.0
github.com/envoyproxy/go-control-plane/envoy 1.37.0 1.39.0
github.com/fsouza/fake-gcs-server 1.21.0 1.56.1
github.com/go-logr/logr 1.4.3 1.4.4
github.com/go-sql-driver/mysql 1.10.0 1.10.1
github.com/goccy/go-yaml 1.9.8 1.19.2
github.com/golang-jwt/jwt/v5 5.2.2 5.3.1
github.com/hashicorp/hcl/v2 2.0.0 2.24.0
github.com/ory/dockertest/v3 3.9.1 3.12.0
github.com/prometheus/client_golang 1.12.1 1.24.1
github.com/slack-go/slack 0.24.0 0.29.0
go.opentelemetry.io/otel 1.44.0 1.46.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 1.28.0 1.46.0
golang.org/x/oauth2 0.36.0 0.37.0
golang.org/x/sync 0.22.0 0.23.0

Bumps the go-minor-patch group with 3 updates in the /pkg/app/pipedv1/plugin/analysis directory: github.com/prometheus/common, go.uber.org/zap and golang.org/x/sync.
Bumps the go-minor-patch group with 2 updates in the /pkg/app/pipedv1/plugin/cloudrun directory: github.com/creasty/defaults and github.com/pipe-cd/piped-plugin-sdk-go.
Bumps the go-minor-patch group with 5 updates in the /pkg/app/pipedv1/plugin/ecs directory:

Package From To
github.com/creasty/defaults 1.6.0 1.8.0
github.com/stretchr/testify 1.11.1 1.12.1
go.uber.org/zap 1.19.1 1.28.0
github.com/pipe-cd/piped-plugin-sdk-go 0.3.0 0.4.0
github.com/pipe-cd/pipecd 0.54.0-rc1.0.20250912082650-0b949bb7aac9 0.58.0

Bumps the go-minor-patch group with 2 updates in the /pkg/app/pipedv1/plugin/kubernetes directory: golang.org/x/mod and golang.org/x/sync.
Bumps the go-minor-patch group with 4 updates in the /pkg/app/pipedv1/plugin/kubernetes_multicluster directory: github.com/creasty/defaults, golang.org/x/mod, golang.org/x/sync and github.com/pipe-cd/pipecd.
Bumps the go-minor-patch group with 1 update in the /pkg/app/pipedv1/plugin/scriptrun directory: github.com/creasty/defaults.
Bumps the go-minor-patch group with 3 updates in the /pkg/app/pipedv1/plugin/terraform directory: github.com/creasty/defaults, github.com/hashicorp/hcl/v2 and go.uber.org/zap.
Bumps the go-minor-patch group with 2 updates in the /pkg/app/pipedv1/plugin/wait directory: github.com/creasty/defaults and go.uber.org/zap.
Bumps the go-minor-patch group with 2 updates in the /pkg/app/pipedv1/plugin/waitapproval directory: github.com/creasty/defaults and go.uber.org/zap.
Bumps the go-minor-patch group with 4 updates in the /pkg/plugin/sdk directory: github.com/spf13/cobra, go.uber.org/zap, golang.org/x/sync and github.com/pipe-cd/pipecd.
Bumps the go-minor-patch group with 2 updates in the /tool/actions-gh-release directory: github.com/creasty/defaults and golang.org/x/oauth2.
Bumps the go-minor-patch group with 1 update in the /tool/actions-plan-preview directory: github.com/pipe-cd/pipecd.

Updates github.com/DataDog/datadog-api-client-go from 1.0.0-beta.16 to 1.16.0

Release notes

Sourced from github.com/DataDog/datadog-api-client-go's releases.

v1.16.0

What's Changed

Fixed

Added

Changed

Full Changelog: DataDog/datadog-api-client-go@v1.15.1...v1.16.0

v1.15.1

What's Changed

Fixed

Full Changelog: DataDog/datadog-api-client-go@v1.15.0...v1.15.1

v1.15.0

What's Changed

Fixed

Added

... (truncated)

Changelog

Sourced from github.com/DataDog/datadog-api-client-go's changelog.

1.16.0 / 2022-07-20

Fixed

Added

Changed

Full Changelog: DataDog/datadog-api-client-go@v1.15.1...v1.16.0

1.15.1 / 2022-07-11

Fixed

Full Changelog: DataDog/datadog-api-client-go@v1.15.0...v1.15.1

1.15.0 / 2022-07-04

Fixed

Added

... (truncated)

Commits

Updates github.com/Masterminds/sprig/v3 from 3.2.2 to 3.3.0

Release notes

Sourced from github.com/Masterminds/sprig/v3's releases.

v3.3.0

What's Changed

New Contributors

Full Changelog: Masterminds/sprig@v3.2.3...v3.3.0

v3.2.3

Changed

Changelog

Sourced from github.com/Masterminds/sprig/v3's changelog.

Release 3.3.0 (2024-08-29)

Added

Changed

  • #407: Removed duplicate documentation (functions were documentated in 2 places)
  • #290: Corrected copy/paster oops in math documentation (thanks @​zzhu41)
  • #369: Corrected template reference in docs (thanks @​chey)
  • #375: Added link to URL documenation (thanks @​carlpett)
  • #406: Updated the mergo dependency which had a breaking change (which was accounted for)
  • #376: Fixed documentation error (thanks @​jheyduk)
  • #404: Updated dependency tree
  • #391: Fixed misspelling (thanks @​chrishalbert)
  • #405: Updated Go versions used in testing

Release 3.2.3 (2022-11-29)

Changed

Commits
  • e708470 Merge pull request #408 from mattfarina/update-changelog-3.3
  • 8fc4354 Updating the changelog for the 3.3.0 release
  • cb81a32 Merge pull request #407 from mattfarina/remove-dup-math-functions
  • 2637693 Removing duplicate documentation
  • 06b9a87 Merge pull request #290 from zzhu41/patch-1
  • e663ec6 Merge pull request #369 from chey/patch-1
  • bb2f73f Merge pull request #375 from carlpett/patch-1
  • f07659e Merge pull request #400 from itzik-elayev/master
  • 98b35c1 Add closing bracket
  • 7a88928 Merge pull request #406 from mattfarina/update-mergo
  • Additional commits viewable in compare view

Updates github.com/coreos/go-oidc/v3 from 3.20.0 to 3.21.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.21.0

What's Changed

New Contributors

Full Changelog: coreos/go-oidc@v3.20.0...v3.21.0

Commits
  • c914bd3 oidc: ignore JWKs with unsupported key types rather than failing
  • See full diff in compare view

Updates github.com/creasty/defaults from 1.6.0 to 1.8.0

Release notes

Sourced from github.com/creasty/defaults's releases.

v1.8.0

v1.7.0

Commits
  • abebf4b Merge pull request #46 from orangejohny/master
  • 586c267 fix: don't pass slice's defaultVal to setField func
  • 5220e08 Merge pull request #43 from rfyiamcool/docs/code
  • db193a3 feat: add example
  • 82cd96d docs: complete example
  • 3f98836 Merge pull request #40 from HRogge/master
  • 325dfb4 Fix CI: golint -> golangci-lint
  • d1d4e26 Allow defaults library to use UnmarshalText() and UnmarshalJSON() interface t...
  • bf90154 Update
  • See full diff in compare view

Updates github.com/envoyproxy/go-control-plane/envoy from 1.37.0 to 1.39.0

Release notes

Sourced from github.com/envoyproxy/go-control-plane/envoy's releases.

envoy/v1.39.0

Full Changelog: envoy/v1.38.0...envoy/v1.39.0

envoy/v1.38.0

Full Changelog: envoy/v1.37.0...envoy/v1.38.0

Commits
  • ca8ce17 Mirrored from envoyproxy/envoy @ c7c7b0d009e6006844a31715ddeef62ed5c79c0a
  • 7c0c2c3 Mirrored from envoyproxy/envoy @ 04c2a8607d7c7d46e514e685df67d21f79025c2c
  • 3646432 Mirrored from envoyproxy/envoy @ b4a3bc04a05d0f6af320a909ed1a00ec700174fd
  • 84b538a Mirrored from envoyproxy/envoy @ dd2a9b54f6128d27e49a224588778fb9ec77d130
  • 2e68dcf build(deps): Bump golang.org/x/crypto in /internal/tools (#1518)
  • 673be72 Mirrored from envoyproxy/envoy @ fa68fb65fd52289ba01cd26363a6c17e382a2bb5
  • 1b5055a Mirrored from envoyproxy/envoy @ 223721f2fce6222ceddb02342c642fe448b2bd82
  • 7c8f6f1 Mirrored from envoyproxy/envoy @ 187301f5233356c05fbc3655ffe64ff23f95b80b
  • 375ba04 Mirrored from envoyproxy/envoy @ d6d968b3eedd150ab62e2a54906bf1dd0be27eb8
  • 6747796 Mirrored from envoyproxy/envoy @ b5de3aaa3a38d625c49d051f55e64547072be589
  • Additional commits viewable in compare view

Updates github.com/fsouza/fake-gcs-server from 1.21.0 to 1.56.1

Release notes

Sourced from github.com/fsouza/fake-gcs-server's releases.

v1.56.1

What's Changed

Full Changelog: fsouza/fake-gcs-server@v1.56.0...v1.56.1

v1.56.0

What's Changed

... (truncated)

Commits
  • 896ece5 internal: fix vet violations in tests
  • 168c3cc fakestorage: fix vet violations in tests
  • 0fd8f94 Go 1.27 is out, drop 1.26
  • 853ebda build(deps): bump cloud.google.com/go/pubsub/v2 from 2.6.1 to 2.6.2 (#2338)
  • 21db263 build(deps): bump @​google-cloud/storage in /examples/node (#2337)
  • b5c218b build(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1 (#2339)
  • e1f11fe build(deps): bump golang from 1.26 to 1.27 (#2336)
  • b6b5c38 build(deps): bump cloud.google.com/go/storage from 1.64.0 to 1.65.0 (#2340)
  • 64fe9e7 Honor the generation parameter on object ACL endpoints (#2335)
  • b8deb04 perf: move an object to delete it instead of copying it (#2334)
  • Additional commits viewable in compare view

Updates github.com/go-logr/logr from 1.4.3 to 1.4.4

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.4

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

Commits
  • 96a9aba Fix lint
  • 51c6302 Better implementation of pointer recursion checking
  • c667114 funcr: Handle and test recursive values
  • f7ffadb Add benchmark for pointer args
  • e2a3c8e funcr: bound slog.Group nesting depth to prevent stack overflow
  • 2886d2b build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
  • 0b40896 build(deps): bump github/codeql-action/upload-sarif
  • 77f671b Bump to Go 1.26
  • cce283f build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
  • 3832a11 build(deps): bump github/codeql-action/upload-sarif
  • Additional commits viewable in compare view

Updates github.com/go-sql-driver/mysql from 1.10.0 to 1.10.1

Release notes

Sourced from github.com/go-sql-driver/mysql's releases.

v1.10.1

What's Changed

New Contributors

Full Changelog: go-sql-driver/mysql@v1.10.0...v1.10.1

Changelog

Sourced from github.com/go-sql-driver/mysql's changelog.

v1.10.1 (2026-09-02)

  • Fix Config.FormatDSN() dropping Addr when Net is empty. It now uses the default tcp network so configs with only Addr round-trip correctly. (#1770)

  • Fix typed-nil json.RawMessage with interpolateParams=true being interpolated as an empty string. It is now interpolated as SQL NULL, matching server-side prepared statements. (#1782)

  • Add MariaDB 11.8 and 12.3 to the test matrix. (#1774)

Commits
  • 7ca26e8 release v1.10.1 (#1801)
  • 87dcb95 doc: clarify timeTruncate units and when to use it (Description has been truncated

@dependabot
build(deps): bump the go-minor-patch group across 13 directories with…
8b8b8a4 
… 31 updates

Bumps the go-minor-patch group with 18 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/DataDog/datadog-api-client-go](https://github.com/DataDog/datadog-api-client-go) | `1.0.0-beta.16` | `1.16.0` |
| [github.com/Masterminds/sprig/v3](https://github.com/Masterminds/sprig) | `3.2.2` | `3.3.0` |
| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.20.0` | `3.21.0` |
| [github.com/creasty/defaults](https://github.com/creasty/defaults) | `1.6.0` | `1.8.0` |
| [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) | `1.37.0` | `1.39.0` |
| [github.com/fsouza/fake-gcs-server](https://github.com/fsouza/fake-gcs-server) | `1.21.0` | `1.56.1` |
| [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.3` | `1.4.4` |
| [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) | `1.10.0` | `1.10.1` |
| [github.com/goccy/go-yaml](https://github.com/goccy/go-yaml) | `1.9.8` | `1.19.2` |
| [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.2.2` | `5.3.1` |
| [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl) | `2.0.0` | `2.24.0` |
| [github.com/ory/dockertest/v3](https://github.com/ory/dockertest) | `3.9.1` | `3.12.0` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.12.1` | `1.24.1` |
| [github.com/slack-go/slack](https://github.com/slack-go/slack) | `0.24.0` | `0.29.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.46.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.28.0` | `1.46.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.36.0` | `0.37.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.22.0` | `0.23.0` |

Bumps the go-minor-patch group with 3 updates in the /pkg/app/pipedv1/plugin/analysis directory: [github.com/prometheus/common](https://github.com/prometheus/common), [go.uber.org/zap](https://github.com/uber-go/zap) and [golang.org/x/sync](https://github.com/golang/sync).
Bumps the go-minor-patch group with 2 updates in the /pkg/app/pipedv1/plugin/cloudrun directory: [github.com/creasty/defaults](https://github.com/creasty/defaults) and [github.com/pipe-cd/piped-plugin-sdk-go](https://github.com/pipe-cd/piped-plugin-sdk-go).
Bumps the go-minor-patch group with 5 updates in the /pkg/app/pipedv1/plugin/ecs directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/creasty/defaults](https://github.com/creasty/defaults) | `1.6.0` | `1.8.0` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` |
| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.19.1` | `1.28.0` |
| [github.com/pipe-cd/piped-plugin-sdk-go](https://github.com/pipe-cd/piped-plugin-sdk-go) | `0.3.0` | `0.4.0` |
| [github.com/pipe-cd/pipecd](https://github.com/pipe-cd/pipecd) | `0.54.0-rc1.0.20250912082650-0b949bb7aac9` | `0.58.0` |

Bumps the go-minor-patch group with 2 updates in the /pkg/app/pipedv1/plugin/kubernetes directory: [golang.org/x/mod](https://github.com/golang/mod) and [golang.org/x/sync](https://github.com/golang/sync).
Bumps the go-minor-patch group with 4 updates in the /pkg/app/pipedv1/plugin/kubernetes_multicluster directory: [github.com/creasty/defaults](https://github.com/creasty/defaults), [golang.org/x/mod](https://github.com/golang/mod), [golang.org/x/sync](https://github.com/golang/sync) and [github.com/pipe-cd/pipecd](https://github.com/pipe-cd/pipecd).
Bumps the go-minor-patch group with 1 update in the /pkg/app/pipedv1/plugin/scriptrun directory: [github.com/creasty/defaults](https://github.com/creasty/defaults).
Bumps the go-minor-patch group with 3 updates in the /pkg/app/pipedv1/plugin/terraform directory: [github.com/creasty/defaults](https://github.com/creasty/defaults), [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl) and [go.uber.org/zap](https://github.com/uber-go/zap).
Bumps the go-minor-patch group with 2 updates in the /pkg/app/pipedv1/plugin/wait directory: [github.com/creasty/defaults](https://github.com/creasty/defaults) and [go.uber.org/zap](https://github.com/uber-go/zap).
Bumps the go-minor-patch group with 2 updates in the /pkg/app/pipedv1/plugin/waitapproval directory: [github.com/creasty/defaults](https://github.com/creasty/defaults) and [go.uber.org/zap](https://github.com/uber-go/zap).
Bumps the go-minor-patch group with 4 updates in the /pkg/plugin/sdk directory: [github.com/spf13/cobra](https://github.com/spf13/cobra), [go.uber.org/zap](https://github.com/uber-go/zap), [golang.org/x/sync](https://github.com/golang/sync) and [github.com/pipe-cd/pipecd](https://github.com/pipe-cd/pipecd).
Bumps the go-minor-patch group with 2 updates in the /tool/actions-gh-release directory: [github.com/creasty/defaults](https://github.com/creasty/defaults) and [golang.org/x/oauth2](https://github.com/golang/oauth2).
Bumps the go-minor-patch group with 1 update in the /tool/actions-plan-preview directory: [github.com/pipe-cd/pipecd](https://github.com/pipe-cd/pipecd).


Updates `github.com/DataDog/datadog-api-client-go` from 1.0.0-beta.16 to 1.16.0
- [Release notes](https://github.com/DataDog/datadog-api-client-go/releases)
- [Changelog](https://github.com/DataDog/datadog-api-client-go/blob/master/CHANGELOG.md)
- [Commits](DataDog/datadog-api-client-go@v1.0.0-beta.16...v1.16.0)

Updates `github.com/Masterminds/sprig/v3` from 3.2.2 to 3.3.0
- [Release notes](https://github.com/Masterminds/sprig/releases)
- [Changelog](https://github.com/Masterminds/sprig/blob/master/CHANGELOG.md)
- [Commits](Masterminds/sprig@v3.2.2...v3.3.0)

Updates `github.com/coreos/go-oidc/v3` from 3.20.0 to 3.21.0
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](coreos/go-oidc@v3.20.0...v3.21.0)

Updates `github.com/creasty/defaults` from 1.6.0 to 1.8.0
- [Release notes](https://github.com/creasty/defaults/releases)
- [Commits](creasty/defaults@v1.6.0...v1.8.0)

Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.37.0 to 1.39.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.37.0...envoy/v1.39.0)

Updates `github.com/fsouza/fake-gcs-server` from 1.21.0 to 1.56.1
- [Release notes](https://github.com/fsouza/fake-gcs-server/releases)
- [Commits](fsouza/fake-gcs-server@v1.21.0...v1.56.1)

Updates `github.com/go-logr/logr` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](go-logr/logr@v1.4.3...v1.4.4)

Updates `github.com/go-sql-driver/mysql` from 1.10.0 to 1.10.1
- [Release notes](https://github.com/go-sql-driver/mysql/releases)
- [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md)
- [Commits](go-sql-driver/mysql@v1.10.0...v1.10.1)

Updates `github.com/goccy/go-yaml` from 1.9.8 to 1.19.2
- [Release notes](https://github.com/goccy/go-yaml/releases)
- [Changelog](https://github.com/goccy/go-yaml/blob/master/CHANGELOG.md)
- [Commits](goccy/go-yaml@v1.9.8...v1.19.2)

Updates `github.com/golang-jwt/jwt/v5` from 5.2.2 to 5.3.1
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Commits](golang-jwt/jwt@v5.2.2...v5.3.1)

Updates `github.com/hashicorp/hcl/v2` from 2.0.0 to 2.24.0
- [Release notes](https://github.com/hashicorp/hcl/releases)
- [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md)
- [Commits](hashicorp/hcl@v2.0.0...v2.24.0)

Updates `github.com/minio/minio-go/v7` from 7.0.5 to 7.3.0
- [Release notes](https://github.com/minio/minio-go/releases)
- [Commits](minio/minio-go@v7.0.5...v7.3.0)

Updates `github.com/ory/dockertest/v3` from 3.9.1 to 3.12.0
- [Release notes](https://github.com/ory/dockertest/releases)
- [Commits](ory/dockertest@v3.9.1...v3.12.0)

Updates `github.com/prometheus/client_golang` from 1.12.1 to 1.24.1
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.12.1...v1.24.1)

Updates `github.com/prometheus/common` from 0.32.1 to 0.70.1
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.70.1...v0.71.0)

Updates `github.com/slack-go/slack` from 0.24.0 to 0.29.0
- [Release notes](https://github.com/slack-go/slack/releases)
- [Changelog](https://github.com/slack-go/slack/blob/master/CHANGELOG.md)
- [Commits](slack-go/slack@v0.24.0...v0.29.0)

Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.2
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.9.1...v1.10.2)

Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.10
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.6...v1.0.10)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

Updates `go.opentelemetry.io/otel` from 1.44.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.46.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.28.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.28.0...v1.46.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.44.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.46.0)

Updates `go.opentelemetry.io/otel/trace` from 1.44.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.46.0)

Updates `go.uber.org/zap` from 1.19.1 to 1.27.0
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.19.1...v1.28.0)

Updates `golang.org/x/crypto` from 0.53.0 to 0.55.0
- [Commits](golang/crypto@v0.53.0...v0.55.0)

Updates `golang.org/x/mod` from 0.36.0 to 0.38.0
- [Commits](golang/mod@v0.40.0...v0.41.0)

Updates `golang.org/x/net` from 0.56.0 to 0.58.0
- [Commits](golang/net@v0.56.0...v0.58.0)

Updates `golang.org/x/oauth2` from 0.36.0 to 0.37.0
- [Commits](golang/oauth2@v0.36.0...v0.37.0)

Updates `golang.org/x/sync` from 0.22.0 to 0.23.0
- [Commits](golang/sync@v0.22.0...v0.23.0)

Updates `github.com/prometheus/common` from 0.70.1 to 0.71.0
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.70.1...v0.71.0)

Updates `go.uber.org/zap` from 1.19.1 to 1.28.0
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.19.1...v1.28.0)

Updates `golang.org/x/sync` from 0.22.0 to 0.23.0
- [Commits](golang/sync@v0.22.0...v0.23.0)

Updates `github.com/creasty/defaults` from 1.6.0 to 1.8.0
- [Release notes](https://github.com/creasty/defaults/releases)
- [Commits](creasty/defaults@v1.6.0...v1.8.0)

Updates `github.com/pipe-cd/piped-plugin-sdk-go` from 0.0.0-20250813060314-58a44ff1d325 to 0.4.0
- [Release notes](https://github.com/pipe-cd/piped-plugin-sdk-go/releases)
- [Commits](https://github.com/pipe-cd/piped-plugin-sdk-go/commits/v0.4.0)

Updates `github.com/creasty/defaults` from 1.6.0 to 1.8.0
- [Release notes](https://github.com/creasty/defaults/releases)
- [Commits](creasty/defaults@v1.6.0...v1.8.0)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

Updates `go.uber.org/zap` from 1.19.1 to 1.28.0
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.19.1...v1.28.0)

Updates `golang.org/x/sync` from 0.20.0 to 0.22.0
- [Commits](golang/sync@v0.22.0...v0.23.0)

Updates `github.com/pipe-cd/piped-plugin-sdk-go` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/pipe-cd/piped-plugin-sdk-go/releases)
- [Commits](https://github.com/pipe-cd/piped-plugin-sdk-go/commits/v0.4.0)

Updates `github.com/pipe-cd/pipecd` from 0.54.0-rc1.0.20250912082650-0b949bb7aac9 to 0.58.0
- [Release notes](https://github.com/pipe-cd/pipecd/releases)
- [Changelog](https://github.com/pipe-cd/pipecd/blob/master/RELEASES.md)
- [Commits](https://github.com/pipe-cd/pipecd/commits/v0.58.0)

Updates `golang.org/x/mod` from 0.40.0 to 0.41.0
- [Commits](golang/mod@v0.40.0...v0.41.0)

Updates `golang.org/x/sync` from 0.22.0 to 0.23.0
- [Commits](golang/sync@v0.22.0...v0.23.0)

Updates `github.com/creasty/defaults` from 1.6.0 to 1.8.0
- [Release notes](https://github.com/creasty/defaults/releases)
- [Commits](creasty/defaults@v1.6.0...v1.8.0)

Updates `golang.org/x/mod` from 0.40.0 to 0.41.0
- [Commits](golang/mod@v0.40.0...v0.41.0)

Updates `golang.org/x/sync` from 0.22.0 to 0.23.0
- [Commits](golang/sync@v0.22.0...v0.23.0)

Updates `github.com/pipe-cd/pipecd` from 0.57.0 to 0.58.0
- [Release notes](https://github.com/pipe-cd/pipecd/releases)
- [Changelog](https://github.com/pipe-cd/pipecd/blob/master/RELEASES.md)
- [Commits](https://github.com/pipe-cd/pipecd/commits/v0.58.0)

Updates `github.com/creasty/defaults` from 1.6.0 to 1.8.0
- [Release notes](https://github.com/creasty/defaults/releases)
- [Commits](creasty/defaults@v1.6.0...v1.8.0)

Updates `github.com/creasty/defaults` from 1.6.0 to 1.8.0
- [Release notes](https://github.com/creasty/defaults/releases)
- [Commits](creasty/defaults@v1.6.0...v1.8.0)

Updates `github.com/hashicorp/hcl/v2` from 2.0.0 to 2.24.0
- [Release notes](https://github.com/hashicorp/hcl/releases)
- [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md)
- [Commits](hashicorp/hcl@v2.0.0...v2.24.0)

Updates `go.uber.org/zap` from 1.19.1 to 1.28.0
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.19.1...v1.28.0)

Updates `github.com/creasty/defaults` from 1.6.0 to 1.8.0
- [Release notes](https://github.com/creasty/defaults/releases)
- [Commits](creasty/defaults@v1.6.0...v1.8.0)

Updates `go.uber.org/zap` from 1.19.1 to 1.28.0
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.19.1...v1.28.0)

Updates `github.com/creasty/defaults` from 1.6.0 to 1.8.0
- [Release notes](https://github.com/creasty/defaults/releases)
- [Commits](creasty/defaults@v1.6.0...v1.8.0)

Updates `go.uber.org/zap` from 1.19.1 to 1.28.0
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.19.1...v1.28.0)

Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.2
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.9.1...v1.10.2)

Updates `go.uber.org/zap` from 1.19.1 to 1.28.0
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.19.1...v1.28.0)

Updates `golang.org/x/sync` from 0.22.0 to 0.23.0
- [Commits](golang/sync@v0.22.0...v0.23.0)

Updates `github.com/pipe-cd/pipecd` from 0.57.0 to 0.58.0
- [Release notes](https://github.com/pipe-cd/pipecd/releases)
- [Changelog](https://github.com/pipe-cd/pipecd/blob/master/RELEASES.md)
- [Commits](https://github.com/pipe-cd/pipecd/commits/v0.58.0)

Updates `github.com/creasty/defaults` from 1.5.2 to 1.8.0
- [Release notes](https://github.com/creasty/defaults/releases)
- [Commits](creasty/defaults@v1.6.0...v1.8.0)

Updates `golang.org/x/oauth2` from 0.30.0 to 0.37.0
- [Commits](golang/oauth2@v0.36.0...v0.37.0)

Updates `golang.org/x/oauth2` from 0.30.0 to 0.36.0
- [Commits](golang/oauth2@v0.36.0...v0.37.0)

Updates `github.com/pipe-cd/pipecd` from 0.53.0 to 0.58.0
- [Release notes](https://github.com/pipe-cd/pipecd/releases)
- [Changelog](https://github.com/pipe-cd/pipecd/blob/master/RELEASES.md)
- [Commits](https://github.com/pipe-cd/pipecd/commits/v0.58.0)

---
updated-dependencies:
- dependency-name: github.com/DataDog/datadog-api-client-go
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/Masterminds/sprig/v3
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/creasty/defaults
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/fsouza/fake-gcs-server
  dependency-version: 1.56.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/go-logr/logr
  dependency-version: 1.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/go-sql-driver/mysql
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/goccy/go-yaml
  dependency-version: 1.19.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-version: 5.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/hashicorp/hcl/v2
  dependency-version: 2.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/minio/minio-go/v7
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/ory/dockertest/v3
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/prometheus/common
  dependency-version: 0.70.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/slack-go/slack
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.uber.org/zap
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/crypto
  dependency-version: 0.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/mod
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/sync
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/prometheus/common
  dependency-version: 0.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.uber.org/zap
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/sync
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/creasty/defaults
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/pipe-cd/piped-plugin-sdk-go
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/creasty/defaults
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.uber.org/zap
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/sync
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/pipe-cd/piped-plugin-sdk-go
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/pipe-cd/pipecd
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/mod
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/sync
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/creasty/defaults
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/mod
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/sync
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/pipe-cd/pipecd
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/creasty/defaults
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/creasty/defaults
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/hashicorp/hcl/v2
  dependency-version: 2.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.uber.org/zap
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/creasty/defaults
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.uber.org/zap
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/creasty/defaults
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.uber.org/zap
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.uber.org/zap
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/sync
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/pipe-cd/pipecd
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/creasty/defaults
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/pipe-cd/pipecd
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI lite review requested due to automatic review settings September 10, 2026 14:02
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 10, 2026
@dependabot
dependabot Bot requested review from a team as code owners September 10, 2026 14:02
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 10, 2026
@dependabot dependabot Bot mentioned this pull request Sep 10, 2026
Closed
@netlify

netlify Bot commented Sep 10, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for pipecd-site canceled.

Name Link
🔨 Latest commit 8b8b8a4
🔍 Latest deploy log https://app.netlify.com/projects/pipecd-site/deploys/6aa2b86aac4d61000820bae7

This was referenced Sep 10, 2026
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Copilot AI reviewed Sep 10, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

At least one updated submodule (pkg/app/pipedv1/plugin/cloudrun) appears to have stale indirect requirements after the SDK bump (suggesting go mod tidy wasn’t applied), which can lead to CI failures and inconsistent dependency resolution.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

This PR updates Go module dependencies across the main module plus several submodules (plugins and tooling) in the PipeCD monorepo, primarily to keep dependencies current and consistent across independently versioned Go modules.

Changes:

  • Bump a wide set of dependencies in the root go.mod (observability, Prometheus, OIDC/JWT, YAML, HCL, Dockertest, Slack, etc.).
  • Update Go module dependencies for multiple pipedv1 plugin submodules (kubernetes, multicluster, ecs, wait*, terraform, analysis, cloudrun) and the plugin SDK module.
  • Refresh go.sum entries for affected submodules/tools to match the updated dependency graph.
File summaries
File Description
tool/actions-plan-preview/go.mod Bumps pipecd + oauth2 and indirect deps for the plan-preview GitHub Action tool module.
tool/actions-plan-preview/go.sum Updates checksums for the plan-preview tool module after dependency bumps.
tool/actions-gh-release/go.mod Bumps defaults + oauth2 and related indirect deps for the gh-release GitHub Action tool module.
tool/actions-gh-release/go.sum Updates checksums for the gh-release tool module after dependency bumps.
pkg/plugin/sdk/go.mod Bumps plugin SDK dependencies (pipecd, cobra, zap, x/sync, Prometheus/OpenTelemetry-related indirects).
pkg/app/pipedv1/plugin/analysis/go.mod Bumps analysis plugin deps (Prometheus common, zap, x/sync, protobuf).
pkg/app/pipedv1/plugin/analysis/go.sum Updates checksums for the analysis plugin after dependency bumps.
pkg/app/pipedv1/plugin/cloudrun/go.mod Bumps defaults + SDK for cloudrun plugin module; indirect deps remain partially stale.
pkg/app/pipedv1/plugin/ecs/go.mod Bumps defaults/testify/zap/sync and upgrades SDK; also updates direct pipecd dependency.
pkg/app/pipedv1/plugin/kubernetes/go.mod Bumps x/mod and x/sync and refreshes various indirect dependency versions.
pkg/app/pipedv1/plugin/kubernetes/go.sum Updates checksums for the kubernetes plugin module after dependency bumps.
pkg/app/pipedv1/plugin/kubernetes_multicluster/go.mod Bumps defaults/pipecd/x/mod/x/sync and other indirect deps for multicluster plugin module.
pkg/app/pipedv1/plugin/kubernetes_multicluster/go.sum Updates checksums for the multicluster plugin module after dependency bumps.
pkg/app/pipedv1/plugin/scriptrun/go.mod Bumps defaults and refreshes indirect dependency versions for the scriptrun plugin module.
pkg/app/pipedv1/plugin/terraform/go.mod Bumps defaults/hcl/zap/x/sync and adjusts indirect deps (incl. go-textseg major version).
pkg/app/pipedv1/plugin/wait/go.mod Bumps defaults/zap and refreshes indirect dependency versions for the wait plugin module.
pkg/app/pipedv1/plugin/waitapproval/go.mod Bumps defaults/zap and refreshes indirect dependency versions for the waitapproval plugin module.
go.mod Bumps root module dependencies across many subsystems (auth, metrics, otel, tooling libs, etc.).
Review details
  • Files reviewed: 13/26 changed files
  • Comments generated: 4
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread pkg/app/pipedv1/plugin/cloudrun/go.mod
Comment on lines 5 to 9
require (
github.com/creasty/defaults v1.6.0
github.com/pipe-cd/piped-plugin-sdk-go v0.0.0-20250813060314-58a44ff1d325
github.com/creasty/defaults v1.8.0
github.com/pipe-cd/piped-plugin-sdk-go v0.4.0
github.com/stretchr/testify v1.12.1
)
Comment thread pkg/app/pipedv1/plugin/ecs/go.mod
Comment on lines +11 to 15
github.com/creasty/defaults v1.8.0
github.com/go-playground/assert/v2 v2.2.0
github.com/pipe-cd/pipecd v0.54.0-rc1.0.20250912082650-0b949bb7aac9
github.com/pipe-cd/piped-plugin-sdk-go v0.3.0
github.com/pipe-cd/pipecd v0.58.0
github.com/pipe-cd/piped-plugin-sdk-go v0.4.0
github.com/pmezard/go-difflib v1.0.0
Comment thread pkg/app/pipedv1/plugin/kubernetes_multicluster/go.mod
Comment on lines +6 to 10
github.com/creasty/defaults v1.8.0
github.com/go-logr/logr v1.4.4
github.com/google/go-cmp v0.7.0
github.com/pipe-cd/pipecd v0.57.0
github.com/pipe-cd/pipecd v0.58.0
github.com/pipe-cd/piped-plugin-sdk-go v0.4.0
Comment thread go.mod
Comment on lines 55 to +62
go.uber.org/atomic v1.11.0
go.uber.org/mock v0.6.0
go.uber.org/zap v1.19.1
golang.org/x/crypto v0.53.0
golang.org/x/mod v0.36.0
golang.org/x/net v0.56.0
golang.org/x/oauth2 v0.36.0
golang.org/x/sync v0.22.0
google.golang.org/api v0.287.1
google.golang.org/grpc v1.82.1
google.golang.org/protobuf v1.36.11
go.uber.org/zap v1.27.0
golang.org/x/crypto v0.55.0
golang.org/x/mod v0.38.0
golang.org/x/net v0.58.0
golang.org/x/oauth2 v0.37.0
golang.org/x/sync v0.23.0
@dependabot @github

dependabot Bot commented on behalf of github Sep 22, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 22, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-minor-patch-8ae3694047 branch September 22, 2026 13:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort, defaults to Lite
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@Warashi Warashi Awaiting requested review from Warashi Warashi is a code owner automatically assigned from pipe-cd/pipecd-approvers
@khanhtc1202 khanhtc1202 Awaiting requested review from khanhtc1202 khanhtc1202 is a code owner automatically assigned from pipe-cd/pipecd-approvers
@armistcxy armistcxy Awaiting requested review from armistcxy armistcxy is a code owner automatically assigned from pipe-cd/pipecd-approvers

Assignees

No one assigned

Labels

area/go area/pipedv1 area/plugin-sdk piped-plugin-sdk area/tool dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant