Skip to content

chore(deps): bump the go-modules group across 1 directory with 38 updates - #223

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-e3338a75b2
Open

chore(deps): bump the go-modules group across 1 directory with 38 updates#223
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-e3338a75b2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown

Bumps the go-modules group with 29 updates in the / directory:

Package From To
cloud.google.com/go/pubsub/v2 2.6.1 2.7.0
github.com/Azure/azure-sdk-for-go/sdk/azcore 1.23.0 1.23.1
github.com/Azure/azure-sdk-for-go/sdk/azidentity 1.14.0 1.14.1
github.com/aws/aws-lambda-go 1.54.0 1.55.0
github.com/aws/aws-sdk-go-v2 1.43.5 1.45.1
github.com/aws/aws-sdk-go-v2/config 1.32.36 1.33.2
github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue 1.20.60 1.21.2
github.com/aws/aws-sdk-go-v2/service/cloudwatch 1.66.4 1.70.0
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs 1.82.1 1.85.0
github.com/aws/aws-sdk-go-v2/service/sns 1.42.5 1.45.0
github.com/aws/aws-sdk-go-v2/service/sqs 1.46.5 1.50.0
github.com/dapr/dapr 1.18.2 1.18.3
github.com/getsentry/sentry-go 0.48.0 0.49.0
github.com/mmcdole/gofeed 1.3.0 1.4.2
github.com/modelcontextprotocol/go-sdk 1.6.0 1.7.0
github.com/posthog/posthog-go 1.23.0 1.25.1
github.com/quic-go/quic-go 0.61.0 0.62.0
github.com/rabbitmq/amqp091-go 1.13.0 1.14.0
github.com/redis/go-redis/v9 9.21.0 9.22.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.67.0 0.71.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc 1.45.0 1.46.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp 1.45.0 1.46.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace 1.45.0 1.46.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 1.45.0 1.46.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp 1.45.0 1.46.0
go.opentelemetry.io/otel/exporters/prometheus 0.67.0 0.68.0
k8s.io/apimachinery 0.36.3 0.37.0
k8s.io/client-go 0.36.3 0.37.0
modernc.org/sqlite 1.56.0 1.58.0

Updates cloud.google.com/go/pubsub/v2 from 2.6.1 to 2.7.0

Release notes

Sourced from cloud.google.com/go/pubsub/v2's releases.

pubsub: v2.7.0

2.7.0 (2026-08-26)

Features

pubsub: v2.6.2

2.6.2 (2026-08-19)

Bug Fixes

Commits
  • 7801736 chore(main): release pubsub 2.7.0 (#20429)
  • eb07af9 feat: update API sources and regenerate (#20427)
  • 3ab7d13 chore(main): release storage 1.65.1 (#20420)
  • 25e6d40 chore: update librarian to v0.39.0 (#20423)
  • 0d8983d chore(agentplatform): Remove the tools submodule from AgentPlatform.
  • 08d06c0 fix(internal/kokoro): skip testing modules with no Go source files (#20419)
  • 081d506 BREAKING_CHANGE(agentplatform): Migrate Memory Bank methods to `client.memory...
  • 574d42d chore(storage): remove redundant internal OTEL attributes (#20421)
  • dbb5f6f fix(storage): enforce gRPC writer chunk retry deadlines by tying timers to se...
  • 54e5a42 chore(main): release spanner 1.95.0 (#20415)
  • Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.23.0 to 1.23.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.23.1

1.23.1 (2026-08-27)

Other Changes

  • Upgraded dependencies.
Commits
  • d86ae78 Prep azcore for release (#27471)
  • 33dd768 [azwebpubsub] Fix GenerateClientAccessURL on the TokenCredential path (#27422)
  • a27ca57 Upgrade TypeSpec Go emitter dependencies (#27466)
  • af75eb0 [AutoPR sdk-resourcemanager/purestorageblock/armpurestorageblock]-generated-f...
  • 8dcff8c [AutoPR sdk-resourcemanager/redisenterprise/armredisenterprise]-generated-fro...
  • e4569f1 [AutoPR sdk-resourcemanager/chaos/armchaos]-generated-from-SDK Generation - G...
  • 7069bf8 [AutoPR sdk-resourcemanager/horizondb/armhorizondb]-generated-from-SDK Genera...
  • 5ceffce Bump gh-aw to v0.86.2 for mgmt review workflow (#27460)
  • 663b6ce Enhance azblob perf tests with OAuth, parallel setup, and profiling (#27324)
  • cf17431 [AutoPR sdk-resourcemanager/containerservice/armcontainerservice]-generated-f...
  • Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.14.0 to 1.14.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.14.1

1.14.1 (2026-08-27)

Other Changes

  • Upgraded dependencies
Commits
  • 920e79a Prep azidentity for release (#27473)
  • d86ae78 Prep azcore for release (#27471)
  • 33dd768 [azwebpubsub] Fix GenerateClientAccessURL on the TokenCredential path (#27422)
  • a27ca57 Upgrade TypeSpec Go emitter dependencies (#27466)
  • af75eb0 [AutoPR sdk-resourcemanager/purestorageblock/armpurestorageblock]-generated-f...
  • 8dcff8c [AutoPR sdk-resourcemanager/redisenterprise/armredisenterprise]-generated-fro...
  • e4569f1 [AutoPR sdk-resourcemanager/chaos/armchaos]-generated-from-SDK Generation - G...
  • 7069bf8 [AutoPR sdk-resourcemanager/horizondb/armhorizondb]-generated-from-SDK Genera...
  • 5ceffce Bump gh-aw to v0.86.2 for mgmt review workflow (#27460)
  • 663b6ce Enhance azblob perf tests with OAuth, parallel setup, and profiling (#27324)
  • Additional commits viewable in compare view

Updates github.com/aws/aws-lambda-go from 1.54.0 to 1.55.0

Release notes

Sourced from github.com/aws/aws-lambda-go's releases.

v1.55.0

What's changed

  • Bump min go version to 1.26 (#638) — @​maxday
  • Enable Go 1.27 compatibility & fix serialization test bugs (#637) — @​djedward
    • Fixed TestMalformedJson to correctly pass a pointer to json.Unmarshal, matching the intended behavior after Go 1.27's JSON library changes.
    • Relaxed error-message matching in tests so both Go 1.27 and earlier versions pass.
    • Hardened flaky integration tests (TestEnableSigterm, TestConcurrencyWithRIE) with polling and increased timeouts.
  • Add missing userNotFound field to Cognito auth trigger requests (#630) — @​anzheyazzz
    • Adds 3 missing userNotFound fields to the Cognito auth trigger request events.
  • Pin GitHub Actions to commit SHAs (#623) — @​maxday
    • Hardens CI supply-chain security by pinning actions to their SHAs.

Full changelog: aws/aws-lambda-go@v1.54.0...v1.55.0

Commits
  • 6800157 feat: bump min go version to 1.26 (#638)
  • f0e2311 Fix serialization test bugs and enable Go 1.27 compat (#637)
  • 87e344b Merge pull request #630 from aws/fix/cognito-usernotfound-missing-fields
  • d6f4d23 Add missing userNotFound field to Cognito auth trigger requests
  • 815d21f fix: pin github actions sha (#623)
  • See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.43.5 to 1.45.1

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.36 to 1.33.2

Commits

Updates github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue from 1.20.60 to 1.21.2

Commits

Updates github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.66.4 to 1.70.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.82.1 to 1.85.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/dynamodb from 1.63.2 to 1.66.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sns from 1.42.5 to 1.45.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sqs from 1.46.5 to 1.50.0

Commits

Updates github.com/dapr/dapr from 1.18.2 to 1.18.3

Release notes

Sourced from github.com/dapr/dapr's releases.

Dapr Runtime v1.18.3

Dapr 1.18.3

This update contains the following bug fixes:

Actor state store components cannot be hot reloaded

Problem

With hot reloading enabled, daprd refused to apply any change to a state store component that is, or would become, the actor state store. Creating, updating, or deleting such a component logged Aborting to hot-reload a state store component that is used as an actor state store and the change was silently ignored until daprd was restarted. In particular, a daprd which started without an actor state store could never gain working actor hosting or Workflow APIs: adding actorStateStore: "true" to a state store component had no effect, and every workflow operation kept failing with the state store is not configured to use the actor runtime.

Impact

You were affected if you relied on hot reloading to manage components and needed to introduce, replace, or remove the actor state store without restarting daprd; for example enabling workflows on a running sidecar by promoting an existing state store to the actor state store.

Root Cause

The restriction was added when the actors subsystem had no support for its state store changing at runtime: the store name was captured once at startup, the decision to enable actor hosting was made once at startup, and nothing reacted to the store later appearing, changing, or disappearing.

Solution

The actor state store can now be hot reloaded, and the actors subsystem reconciles hosting with the store at runtime:

  • Adding an actor state store (creating a marked component, or marking an existing state store) enables actor hosting: the app's actor types and the workflow actor types are advertised to placement, and the actor and Workflow APIs start working; including for workflow workers that connected before the store existed.
  • Removing the actor state store (deleting the component, or unmarking it) shuts down actor hosting in-process: hosted actors are drained and deactivated (the app receives deactivations), actor types are de-advertised from placement and the Scheduler (daprd remains an actor client and can still invoke actors hosted elsewhere), and actor state and Workflow APIs return the state store is not configured to use the actor runtime until a store is configured again. daprd itself keeps running, and hosting resumes automatically when a store returns, with no app or workflow-worker reconnection required.
  • Updating the actor state store component in place (for example a hot reload picking up a rotated secret referenced by the component) swaps the store instance without interrupting actor hosting: the store is resolved per call, so hosted actors and running workflows continue against the same backing store. Draining is reserved for the store being removed, unmarked, or replaced by a differently-named component.

Two further consistency fixes ride along with this change:

  • Actor types are now only advertised to placement while an actor state store is configured. Previously an app declaring actor entities with no actor state store at all would still receive actor invocations, despite actor state, reminders, and workflows being non-functional, contradicting the documented requirement and the actor hosting disabled log.
  • Hot loading a second component marked as the actor state store is skipped with an error log naming the existing actor state store, instead of the duplicate silently corrupting the component store bookkeeping.

... (truncated)

Commits

Updates github.com/getsentry/sentry-go from 0.48.0 to 0.49.0

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.49.0

Breaking Changes 🛠

  • removing DisableLogs and DisableMetrics client options. Sending metrics and logs is already gated by the usage of our APIs already, so having a global kill switch is counter intuitive. Users that won't to opt out should just not call the relevant APIs or setup the integrations. by @​giortzisg in #1392

New Features ✨

  • add WithProxyoption for OTLP. This allows setting an otlptracehttp.HTTPTransportProxyFunc for the span exporter by @​pierrre in #1377

Bug Fixes 🐛

  • (echo) Propagate span through request context by @​EricGusmao in #1385
  • Skip recover frames on panic. This changes stacktrace behavior for captured panics, removing sentry.Recover frames to focus on the actual panic frames. The changes might affect issue grouping. by @​giortzisg in #1364

Internal Changes 🔧

Deps

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.49.0

Breaking Changes 🛠

  • removing DisableLogs and DisableMetrics client options. Sending metrics and logs is already gated by the usage of our APIs already, so having a global kill switch is counter intuitive. Users that won't to opt out should just not call the relevant APIs or setup the integrations. by @​giortzisg in #1392

New Features ✨

  • add WithProxyoption for OTLP. This allows setting an otlptracehttp.HTTPTransportProxyFunc for the span exporter by @​pierrre in #1377

Bug Fixes 🐛

  • (echo) Propagate span through request context by @​EricGusmao in #1385
  • Skip recover frames on panic. This changes stacktrace behavior for captured panics, removing sentry.Recover frames to focus on the actual panic frames. The changes might affect issue grouping. by @​giortzisg in #1364

Internal Changes 🔧

Deps

Commits
  • 78b09d1 release: 0.49.0
  • eff9f37 build(deps): bump github.com/labstack/echo/v5 from 5.0.3 to 5.2.0 in /echo (#...
  • c60a2f6 feat!: remove DisableLogs and DisableMetrics options (#1392)
  • c3f2330 build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.3 (#1397)
  • 9bb14a7 fix(echo): propagate span through request context (#1385)
  • fb9acd8 build(deps): bump getsentry/craft from 2.26.6 to 2.27.2 (#1381)
  • 17f540e feat(otel/otlp): add WithProxy option to span exporter (#1377)
  • ed9834e build(deps): bump actions/setup-go from 6.4.0 to 7.0.0 (#1382)
  • af6d9db build(deps): bump actions/checkout from 6.0.3 to 7.0.1 (#1380)
  • 93223f7 build(deps): bump google.golang.org/grpc to 1.82.1 and golang.org/x/sys to 0....
  • Additional commits viewable in compare view

Updates github.com/mmcdole/gofeed from 1.3.0 to 1.4.2

Release notes

Sourced from github.com/mmcdole/gofeed's releases.

v1.4.2

This patch fixes two parser regressions. JSON feeds larger than the 4096-byte detection window are now detected and parsed completely, and RSS feeds with an unknown default namespace on <rss> are parsed as native RSS while recognized extension namespaces retain their meaning.

Changes

  • Detect JSON feeds larger than the sniffing window. (#348)
  • Tolerate an unknown default namespace on the RSS root. (#347)
  • Update actions/setup-go from v6 to v7. (#337)

Full changelog: mmcdole/gofeed@v1.4.1...v1.4.2

v1.4.1

This patch fixes namespace handling for Atom links embedded in RSS feeds. Atom self and WebSub hub links are now preserved in Feed.Extensions["atom"]["link"] even when a feed uses a local default namespace or a different prefix.

It also makes prefixed Atom and RDF documents parse consistently, preserves compatibility with commonly seen content:encoded namespace variants, and updates golang.org/x/net to v0.57.0.

Changes

  • Fix namespace-aware Atom extension parsing. (#339)
  • Update golang.org/x/net to v0.57.0. (#336)

Full changelog: mmcdole/gofeed@v1.4.0...v1.4.1

v1.4.0

This release focuses on bug fixes for malformed and off-spec feeds. Illegal XML control characters, unusual date formats, incorrectly typed JSON Feed fields, and unescaped ampersands in URLs could previously break a parse or silently drop content. The parser now handles these cases without failing the feed or losing the affected content.

It also fixes a lazy-initialization data race when a default-configured Parser is reused across goroutines (#278). Three new options give callers more control over resource use: an HTTP response-size limit, optional retention of the original source feed, and a switch to disable RSS content-image scanning.

For RSS and Atom, the universal Parser.Parse method no longer holds two complete copies of the raw feed in memory during format detection. It examines the first 4 KiB, detects the format, and then parses directly from the reader. The returned Feed is still fully materialized, so this is not a streaming API. JSON Feed decoding still buffers the complete document.

Compatibility

  • Go 1.25 or newer is required. v1.4.0 updates golang.org/x/net from v0.4.0 to v0.56.0 to resolve 22 reachable vulnerabilities reported by govulncheck; that release and its golang.org/x/text dependency require Go 1.25.
  • ParseURL now applies a 30-second request timeout. ParseURLWithContext continues to use the caller's context.
  • Parse now examines only the first 4 KiB to detect the feed type. RSS and Atom roots must begin within that window. In v1.4.0, a JSON Feed whose complete document does not fit within the window is not detected by the universal Parser and returns ErrFeedTypeNotDetected.
  • The text returned by ErrFeedTypeNotDetected.Error() now begins with lowercase failed.
  • No exported v1 identifier was removed. Feed now has private storage for the original source feed, so external positional Feed{...} literals no longer compile; keyed literals are unaffected.

Added

  • Add Parser.MaxByteSize and ErrResponseTooLarge to limit response bodies fetched by ParseURL and ParseURLWithContext. (#286)
  • Add Parser.KeepOriginalFeed and Feed.OriginalFeed() for access to the parsed *rss.Feed, *atom.Feed, or *json.Feed. (#289)
  • Add DefaultRSSTranslator.DisableContentImageScan to skip the HTML image fallback on large feeds while preserving existing behavior by default. (#330)

Parsing and translation fixes

  • Fix a data race when the same default-configured Parser is reused across goroutines. (#278)
  • Limit universal-parser format detection to a 4 KiB lookahead, parse RSS and Atom directly from the reader without retaining two complete raw copies, and propagate reader I/O errors. (#327)
  • Preserve parse errors when closing an HTTP response also returns an error.
  • Tolerate non-HTTP URI schemes and resolve RSS and Atom xml:base values without mutating sibling scope. (#240, #283, #290)

... (truncated)

Commits
  • c8090a6 Tolerate an unknown default namespace on the RSS root (#347)
  • 838c04c Detect JSON feeds larger than the sniffing window (#348)
  • 41f33bc Bump actions/setup-go from 6 to 7 (#337)
  • 06ac0aa Fix namespace-aware extension parsing (#339)
  • e010ca0 Bump golang.org/x/net from 0.56.0 to 0.57.0 (#336)
  • ec8fd42 Remove defunct Travis CI configuration (#335)
  • 16bfe36 Route the parser element loops through one shared helper (#333)
  • d9ae564 Flatten the translator micro-methods (#332)
  • 33df57e Add CONTRIBUTING.md (#331)
  • f8a5f28 Add DisableContentImageScan and drop the goquery dependency (#330)
  • Additional commits viewable in compare view

Updates github.com/modelcontextprotocol/go-sdk from 1.6.0 to 1.7.0

Release notes

Sourced from github.com/modelcontextprotocol/go-sdk's releases.

v1.7.0

This release brings full support for protocol version 2026-07-28. The wire protocol is largely rewritten: a stateless model with per-request _meta, a new server/discover RPC replacing the initialize handshake, multi-round-trip requests (MRTR) replacing server-initiated calls, a unified subscriptions/listen stream replacing free-floating change notifications, standardised HTTP headers, and the formal deprecation of the roots, sampling, and logging features.

The streamable HTTP transport accepts requests at protocol version 2026-07-28 only when StreamableHTTPOptions.Stateless = true. If you want to expose the new protocol over HTTP, set Stateless = true; if you want to keep stateful sessions, your clients will negotiate down to 2025-11-25.

Backward compatibility with 2025-11-25 and earlier is preserved on every endpoint. The SDK negotiates the highest mutually-supported version at connect time. The new protocol is enabled by default for new clients; existing legacy clients and servers continue to work unchanged.

This release consolidates everything shipped in v1.7.0-pre.1, v1.7.0-pre.2, and v1.7.0-pre.3. Thank you to everyone who exercised the pre-releases and filed feedback.

v1.7.0-pre.3 is already successfully used by GitHub, serving more than half a million users.

Make MCP Stateless (SEP-2575) & Sessionless (SEP-2567)

The initialize/notifications/initialized handshake is removed in 2026-07-28. Each request now carries _meta.io.modelcontextprotocol/{protocolVersion,clientInfo,clientCapabilities} so the server can validate the peer without state. A new server/discover RPC lets clients learn the server's supported versions and capabilities up front; the SDK falls back to legacy initialize if discover fails. Resumability (Last-Event-ID, standalone GET) is removed; ping, logging/setLevel, resources/subscribe, and resources/unsubscribe are also removed on this revision and rejected with MethodNotFound.

@dependabot
chore(deps): bump the go-modules group across 1 directory with 38 upd…
85333e0 
…ates

Bumps the go-modules group with 29 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/pubsub/v2](https://github.com/googleapis/google-cloud-go) | `2.6.1` | `2.7.0` |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.23.0` | `1.23.1` |
| [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.14.0` | `1.14.1` |
| [github.com/aws/aws-lambda-go](https://github.com/aws/aws-lambda-go) | `1.54.0` | `1.55.0` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.43.5` | `1.45.1` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.36` | `1.33.2` |
| [github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue](https://github.com/aws/aws-sdk-go-v2) | `1.20.60` | `1.21.2` |
| [github.com/aws/aws-sdk-go-v2/service/cloudwatch](https://github.com/aws/aws-sdk-go-v2) | `1.66.4` | `1.70.0` |
| [github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs](https://github.com/aws/aws-sdk-go-v2) | `1.82.1` | `1.85.0` |
| [github.com/aws/aws-sdk-go-v2/service/sns](https://github.com/aws/aws-sdk-go-v2) | `1.42.5` | `1.45.0` |
| [github.com/aws/aws-sdk-go-v2/service/sqs](https://github.com/aws/aws-sdk-go-v2) | `1.46.5` | `1.50.0` |
| [github.com/dapr/dapr](https://github.com/dapr/dapr) | `1.18.2` | `1.18.3` |
| [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) | `0.48.0` | `0.49.0` |
| [github.com/mmcdole/gofeed](https://github.com/mmcdole/gofeed) | `1.3.0` | `1.4.2` |
| [github.com/modelcontextprotocol/go-sdk](https://github.com/modelcontextprotocol/go-sdk) | `1.6.0` | `1.7.0` |
| [github.com/posthog/posthog-go](https://github.com/posthog/posthog-go) | `1.23.0` | `1.25.1` |
| [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) | `0.61.0` | `0.62.0` |
| [github.com/rabbitmq/amqp091-go](https://github.com/rabbitmq/amqp091-go) | `1.13.0` | `1.14.0` |
| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.21.0` | `9.22.0` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.67.0` | `0.71.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.45.0` | `1.46.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp](https://github.com/open-telemetry/opentelemetry-go) | `1.45.0` | `1.46.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.45.0` | `1.46.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.45.0` | `1.46.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.45.0` | `1.46.0` |
| [go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go) | `0.67.0` | `0.68.0` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.36.3` | `0.37.0` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.3` | `0.37.0` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.56.0` | `1.58.0` |



Updates `cloud.google.com/go/pubsub/v2` from 2.6.1 to 2.7.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@pubsub/v2.6.1...pubsub/v2.7.0)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.23.0 to 1.23.1
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.23.0...sdk/azcore/v1.23.1)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.14.0 to 1.14.1
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.14.0...sdk/azidentity/v1.14.1)

Updates `github.com/aws/aws-lambda-go` from 1.54.0 to 1.55.0
- [Release notes](https://github.com/aws/aws-lambda-go/releases)
- [Commits](aws/aws-lambda-go@v1.54.0...v1.55.0)

Updates `github.com/aws/aws-sdk-go-v2` from 1.43.5 to 1.45.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.43.5...v1.45.1)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.36 to 1.33.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.36...config/v1.33.2)

Updates `github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue` from 1.20.60 to 1.21.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@feature/dynamodb/attributevalue/v1.20.60...v1.21.2)

Updates `github.com/aws/aws-sdk-go-v2/service/cloudwatch` from 1.66.4 to 1.70.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/fsx/v1.66.4...service/s3/v1.70.0)

Updates `github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs` from 1.82.1 to 1.85.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ecs/v1.82.1...service/s3/v1.85.0)

Updates `github.com/aws/aws-sdk-go-v2/service/dynamodb` from 1.63.2 to 1.66.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.63.2...service/s3/v1.66.0)

Updates `github.com/aws/aws-sdk-go-v2/service/sns` from 1.42.5 to 1.45.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/amp/v1.42.5...v1.45.0)

Updates `github.com/aws/aws-sdk-go-v2/service/sqs` from 1.46.5 to 1.50.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/sqs/v1.46.5...service/s3/v1.50.0)

Updates `github.com/dapr/dapr` from 1.18.2 to 1.18.3
- [Release notes](https://github.com/dapr/dapr/releases)
- [Changelog](https://github.com/dapr/dapr/blob/master/RELEASE.md)
- [Commits](dapr/dapr@v1.18.2...v1.18.3)

Updates `github.com/getsentry/sentry-go` from 0.48.0 to 0.49.0
- [Release notes](https://github.com/getsentry/sentry-go/releases)
- [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-go@v0.48.0...v0.49.0)

Updates `github.com/mmcdole/gofeed` from 1.3.0 to 1.4.2
- [Release notes](https://github.com/mmcdole/gofeed/releases)
- [Commits](mmcdole/gofeed@v1.3.0...v1.4.2)

Updates `github.com/modelcontextprotocol/go-sdk` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/modelcontextprotocol/go-sdk/releases)
- [Commits](modelcontextprotocol/go-sdk@v1.6.0...v1.7.0)

Updates `github.com/posthog/posthog-go` from 1.23.0 to 1.25.1
- [Release notes](https://github.com/posthog/posthog-go/releases)
- [Changelog](https://github.com/PostHog/posthog-go/blob/main/CHANGELOG.md)
- [Commits](PostHog/posthog-go@v1.23.0...v1.25.1)

Updates `github.com/quic-go/quic-go` from 0.61.0 to 0.62.0
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](quic-go/quic-go@v0.61.0...v0.62.0)

Updates `github.com/rabbitmq/amqp091-go` from 1.13.0 to 1.14.0
- [Release notes](https://github.com/rabbitmq/amqp091-go/releases)
- [Changelog](https://github.com/rabbitmq/amqp091-go/blob/main/CHANGELOG.md)
- [Commits](rabbitmq/amqp091-go@v1.13.0...v1.14.0)

Updates `github.com/redis/go-redis/v9` from 9.21.0 to 9.22.0
- [Release notes](https://github.com/redis/go-redis/releases)
- [Changelog](https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md)
- [Commits](redis/go-redis@v9.21.0...v9.22.0)

Updates `github.com/stretchr/testify` from 1.12.0 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.12.0...v1.12.1)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.67.0 to 0.71.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.67.0...zpages/v0.71.0)

Updates `go.opentelemetry.io/otel` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.45.0...v1.46.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.45.0...v1.46.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.45.0...v1.46.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.45.0...v1.46.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.45.0...v1.46.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.45.0...v1.46.0)

Updates `go.opentelemetry.io/otel/exporters/prometheus` from 0.67.0 to 0.68.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@metric/x/v0.67.0...metric/x/v0.68.0)

Updates `go.opentelemetry.io/otel/metric` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.45.0...v1.46.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.45.0...v1.46.0)

Updates `go.opentelemetry.io/otel/sdk/metric` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.45.0...v1.46.0)

Updates `go.opentelemetry.io/otel/trace` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.45.0...v1.46.0)

Updates `google.golang.org/api` from 0.285.0 to 0.287.1
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.285.0...v0.287.1)

Updates `google.golang.org/grpc` from 1.83.0 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.0...v1.83.2)

Updates `k8s.io/apimachinery` from 0.36.3 to 0.37.0
- [Commits](kubernetes/apimachinery@v0.36.3...v0.37.0)

Updates `k8s.io/client-go` from 0.36.3 to 0.37.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.36.3...v0.37.0)

Updates `modernc.org/sqlite` from 1.56.0 to 1.58.0
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.56.0...v1.58.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/pubsub/v2
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-lambda-go
  dependency-version: 1.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.45.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue
  dependency-version: 1.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/cloudwatch
  dependency-version: 1.70.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/dynamodb
  dependency-version: 1.66.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sns
  dependency-version: 1.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sqs
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/dapr/dapr
  dependency-version: 1.18.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/getsentry/sentry-go
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/mmcdole/gofeed
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/modelcontextprotocol/go-sdk
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/posthog/posthog-go
  dependency-version: 1.25.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/rabbitmq/amqp091-go
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/redis/go-redis/v9
  dependency-version: 9.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/exporters/prometheus
  dependency-version: 0.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/sdk/metric
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/api
  dependency-version: 0.287.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: k8s.io/client-go
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: modernc.org/sqlite
  dependency-version: 1.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants