Skip to content

Bump the support-dependencies group across 1 directory with 13 updates - #323

Merged
chocolatkey merged 1 commit into
developfrom
dependabot/go_modules/support-dependencies-fdcd52bad4
Aug 17, 2026
Merged

Bump the support-dependencies group across 1 directory with 13 updates#323
chocolatkey merged 1 commit into
developfrom
dependabot/go_modules/support-dependencies-fdcd52bad4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the support-dependencies group with 8 updates in the / directory:

Package From To
cloud.google.com/go/storage 1.63.0 1.64.0
github.com/antchfx/xpath 1.3.6 1.3.8
github.com/aws/aws-sdk-go-v2 1.42.0 1.43.5
github.com/aws/aws-sdk-go-v2/service/s3 1.104.1 1.107.1
github.com/pdfcpu/pdfcpu 0.13.0 0.15.0
github.com/relvacode/iso8601 1.7.0 1.8.0
github.com/stretchr/testify 1.11.1 1.12.0
golang.org/x/net 0.56.0 0.58.0

Updates cloud.google.com/go/storage from 1.63.0 to 1.64.0

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.64.0

1.64.0 (2026-07-21)

Features

  • storage: Accept CRC32C for appendable objects (#20104) (1b2f5af)

storage: v1.63.1

1.63.1 (2026-07-13)

Features

Bug Fixes

Commits
  • 1a476c1 chore: librarian release pull request: 20260521T182442Z (#14627)
  • dd8448b fix(pubsub/v2): manage exactly once spans properly on failure (#14559)
  • b54d7a4 feat(firestore): support Transaction ReadTime (#14615)
  • 6641db8 feat: update API sources and regenerate (#14621)
  • e753126 chore: librarian release pull request: 20260519T161341Z (#14617)
  • 593f67d chore: update librarian to v0.14.0 (#14619)
  • 66c66c5 feat(firestore): add Data and DataTo methods to AggregationResult (#14592)
  • 0a8d10d fix(datastore): detach rollback context from transaction cancellation (#14602)
  • d52fff4 chore(all): update module cloud.google.com/go/longrunning to v1 (main) (#14606)
  • d29f68a feat(storage): read checksums in gRPC partial reads (#14586)
  • Additional commits viewable in compare view

Updates github.com/antchfx/xpath from 1.3.6 to 1.3.8

Release notes

Sourced from github.com/antchfx/xpath's releases.

v1.3.8

What's Changed

v1.3.7

Merged PR:

Commits
  • d666d4b Merge PR #130: Fix name*expr lexing XPath §3.7 specification
  • bb27328 Merge PR #129: Fix handling of undeclared variables like $test in expressions
  • 4d32f25 Merge PR #128 (fix: round() and mod operator)
  • 401df59 Merge PR #127
  • 5c1d918 parse: '*' is not a name character (XPath 1.0 §3.7)
  • 52c3ea6 Reject undeclared variables nested in an expression
  • 0594b22 fix: round() and mod follow the XPath 1.0 numeric spec
  • 4b44084 fix XPath comparison coercion edge cases
  • 43837f1 #126，fix the following boolean expression: '14' > 0，'abc' = 1，`'2' < '10'...
  • 30af867 Merge PR #125
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.42.0 to 1.43.5

Commits
  • a14f5f1 Release 2026-08-10
  • 339f0b6 Regenerated Clients
  • 0978e3d Update API model
  • 3cc614d Fix codegen mp (#3508)
  • 1434b18 generate response snapshots for json (#3507)
  • ad58f77 Checkout smithy-go on PRs at the commit pointed out by SMITHY_GO_CODEGEN_VERS...
  • c002860 feat: move close-body, logger, and service-metadata work out of the middlewar...
  • f152336 Release 2026-08-07
  • 37d88d7 Regenerated Clients
  • c54b278 Update endpoints model
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.104.1 to 1.107.1

Commits
  • a14f5f1 Release 2026-08-10
  • 339f0b6 Regenerated Clients
  • 0978e3d Update API model
  • 3cc614d Fix codegen mp (#3508)
  • 1434b18 generate response snapshots for json (#3507)
  • ad58f77 Checkout smithy-go on PRs at the commit pointed out by SMITHY_GO_CODEGEN_VERS...
  • c002860 feat: move close-body, logger, and service-metadata work out of the middlewar...
  • f152336 Release 2026-08-07
  • 37d88d7 Regenerated Clients
  • c54b278 Update endpoints model
  • Additional commits viewable in compare view

Updates github.com/aws/smithy-go from 1.27.1 to 1.27.7

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-08-14)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.8
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-07)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.7
    • Bug Fix: Don't serialize unset JSON documents as nil in structure members.
    • Bug Fix: Fix a deserialization panic around collection members in recursive shape configs.

Release (2026-07-31)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.6
    • Bug Fix: Fix failure to deserialize any @httpPayload struct with a non-string member.
    • Bug Fix: Fix failure to serialize any @httpPayload struct with a nested struct.

Release (2026-07-27)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.5
    • Bug Fix: Fix a performance issue in awsQuery with large response payloads.

Release (2026-07-16)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go/aws-http-auth: v1.2.1
    • Bug Fix: Use r.URL.Host when r.Host is unset.
  • github.com/aws/smithy-go/aws-http-auth-schemes: v1.0.0
    • Release: Module github.com/aws/smithy-go/aws-http-auth-schemes adds generic smithy-go client support for AWS Sigv4 and Sigv4a.

Release (2026-06-26)

... (truncated)

Commits
  • c589db5 Release 2026-08-07
  • 6a87093 pool byte buffers on deserialize + string arena (#693)
  • f391c60 fixup json snaps and deser (#692)
  • 1380d84 feat: move close-body, logger, and service-metadata work out of the middlewar...
  • d35099b fix schema-serde sparse collection deser to not point to the same value (#691)
  • adb847f Release 2026-07-31
  • 96461b2 fix bad http binding deser (#690)
  • 055e50f handle null cbor struct val (#689)
  • 7016ea0 Release 2026-07-27
  • cb3e15c add fine-grained benchmark codegen (#688)
  • Additional commits viewable in compare view

Updates github.com/pdfcpu/pdfcpu from 0.13.0 to 0.15.0

Release notes

Sourced from github.com/pdfcpu/pdfcpu's releases.

v0.15.0

pdfcpu v0.15.0

This release is a focused follow-up to v0.14.0 improving diagnostics and observability for validating large PDF corpora. It also includes PDF processing hardening, CJK text wrapping for watermarks, and clearer signature-validation behavior.

v0.15.0 follows v0.14.0 by only one week because post-release corpus testing made an existing operational gap clear: large wildcard-driven validation runs delayed failure diagnostics until the full input set completed and provided no quiet-mode indication of the file currently being processed.

The changes are targeted and immediately useful to corpus testers, so holding them for a later feature release would unnecessarily delay feedback. The short interval is intentional and does not establish a weekly release routine.

Corpus validation diagnostics

Multi-file CLI validation now reports each failed input as soon as the failure is detected, continues with the remaining inputs, and exits nonzero with a compact summary:

validation failed: 66 of 463 files invalid

The new --progress flag identifies the active input during quiet validation runs. This is useful when a long-running corpus job stalls on a particular file:

pdfcpu validate -q --progress "**/*.pdf"

The quotes are intentional. They pass the recursive pattern to pdfcpu for internal expansion instead of asking the shell to expand thousands of paths into one command line, which may exceed the operating system's argument-size limit.

With -q --progress, progress and validation failures are written to standard error while standard output remains clean:

validating(mode=relaxed) path/to/input.pdf ...
validate path/to/input.pdf: validation error: ...

Corpus testing and issue reports

There is a new Corpus Validation guide documenting quick assessment, progress monitoring, logging, validation modes, result interpretation, and focused issue reporting.

A failed corpus run is diagnostic input, not an issue backlog. Public reports must isolate one manually verified and independently reproduced problem with the smallest shareable PDF. Include the relevant error and final summary, and attach large logs as compressed files instead of pasting them into an issue.

AI-generated, bulk-generated, or mechanically reformatted corpus reports will be closed immediately without investigation.

... (truncated)

Commits

Updates github.com/relvacode/iso8601 from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/relvacode/iso8601's releases.

v1.8.0

What's Changed

New Contributors

Full Changelog: relvacode/iso8601@v1.7.0...v1.8.0

Commits

Updates github.com/stretchr/testify from 1.11.1 to 1.12.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

New Contributors

... (truncated)

Commits
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • d2699be _codegen: modernize
  • a463c8c Merge pull request #1885 from stretchr/dolmen/ci-check-ghactions-hashes
  • Additional commits viewable in compare view

Updates golang.org/x/image from 0.43.0 to 0.44.0

Commits
  • 891abcb go.mod: update golang.org/x dependencies
  • f50490d font: document (lack of) security hardening in font packages
  • 7a0cfda webp: check for VP8L dimension mismatch before allocation
  • 4339315 tiff: consistently skip horizontal padding in tiled images
  • See full diff in compare view

Updates golang.org/x/net from 0.56.0 to 0.58.0

Commits
  • acc78e0 go.mod: update golang.org/x dependencies
  • 90d10f0 internal/http3: delete invalid Content-Length if declared in server handler
  • 08abf4d internal/http3: infer headers when Content-Encoding is set but is empty
  • 8d10596 http2: avoid deadlocks in wrapped ClientConn state callback
  • 99c3b0a http2/hpack: build the table lookup maps lazily, only for encoders
  • 5a920b1 http3: rework registration to allow using a fake network
  • 7fd2842 quic: return an error from Accept after PacketConn reader exits
  • 825111d quic: avoid busy-loop when keep-alive is blocked by congestion control
  • a02ddfa http/httpproxy: prioritize lowercase proxy environment variables
  • 574e5eb quic: halt conn goroutines on close when listener exits early
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.21.0 to 0.22.0

Commits

Updates golang.org/x/text from 0.38.0 to 0.41.0

Commits
  • acdba66 go.mod: update golang.org/x dependencies
  • 02aa981 secure/precis: fix short destination buffer handling in Nickname profile
  • 724af9c go.mod: update golang.org/x dependencies
  • bf5b9d6 internal/export/idna: always treat Punycode encoding pure ASCII as an error
  • b326f3d go.mod: update golang.org/x dependencies
  • 5ae8e57 unicode/norm: avoid infinite loop on invalid input
  • 0dc94a2 all: fix some comments
  • See full diff in compare view

Updates google.golang.org/api from 0.285.0 to 0.287.1

Release notes

Sourced from google.golang.org/api's releases.

v0.287.1

0.287.1 (2026-07-07)

Documentation

v0.287.0

0.287.0 (2026-06-30)

Features

v0.286.0

0.286.0 (2026-06-22)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.287.1 (2026-07-07)

Documentation

0.287.0 (2026-06-30)

Features

0.286.0 (2026-06-22)

Features

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 17, 2026
@chocolatkey

chocolatkey commented Aug 17, 2026

Copy link
Copy Markdown
Member

@dependabot recreate

@dependabot
Bump the support-dependencies group across 1 directory with 13 updates
c0184c0 
Bumps the support-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.63.0` | `1.64.0` |
| [github.com/antchfx/xpath](https://github.com/antchfx/xpath) | `1.3.6` | `1.3.8` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.42.0` | `1.43.5` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.104.1` | `1.107.1` |
| [github.com/pdfcpu/pdfcpu](https://github.com/pdfcpu/pdfcpu) | `0.13.0` | `0.15.0` |
| [github.com/relvacode/iso8601](https://github.com/relvacode/iso8601) | `1.7.0` | `1.8.0` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.56.0` | `0.58.0` |



Updates `cloud.google.com/go/storage` from 1.63.0 to 1.64.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@compute/v1.63.0...compute/v1.64.0)

Updates `github.com/antchfx/xpath` from 1.3.6 to 1.3.8
- [Release notes](https://github.com/antchfx/xpath/releases)
- [Commits](antchfx/xpath@v1.3.6...v1.3.8)

Updates `github.com/aws/aws-sdk-go-v2` from 1.42.0 to 1.43.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.42.0...v1.43.5)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.104.1 to 1.107.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.104.1...service/s3/v1.107.1)

Updates `github.com/aws/smithy-go` from 1.27.1 to 1.27.7
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.27.1...v1.27.7)

Updates `github.com/pdfcpu/pdfcpu` from 0.13.0 to 0.15.0
- [Release notes](https://github.com/pdfcpu/pdfcpu/releases)
- [Commits](pdfcpu/pdfcpu@v0.13.0...v0.15.0)

Updates `github.com/relvacode/iso8601` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/relvacode/iso8601/releases)
- [Commits](relvacode/iso8601@v1.7.0...v1.8.0)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.0)

Updates `golang.org/x/image` from 0.43.0 to 0.44.0
- [Commits](golang/image@v0.43.0...v0.44.0)

Updates `golang.org/x/net` from 0.56.0 to 0.58.0
- [Commits](golang/net@v0.56.0...v0.58.0)

Updates `golang.org/x/sync` from 0.21.0 to 0.22.0
- [Commits](golang/sync@v0.21.0...v0.22.0)

Updates `golang.org/x/text` from 0.38.0 to 0.41.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.38.0...v0.41.0)

Updates `google.golang.org/api` from 0.285.0 to 0.287.1
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.285.0...v0.287.1)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: support-dependencies
- dependency-name: github.com/antchfx/xpath
  dependency-version: 1.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: support-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.43.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: support-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.107.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: support-dependencies
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.27.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: support-dependencies
- dependency-name: github.com/pdfcpu/pdfcpu
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: support-dependencies
- dependency-name: github.com/relvacode/iso8601
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: support-dependencies
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: support-dependencies
- dependency-name: golang.org/x/image
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: support-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: support-dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: support-dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: support-dependencies
- dependency-name: google.golang.org/api
  dependency-version: 0.287.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: support-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/support-dependencies-fdcd52bad4 branch from 005b99c to c0184c0 Compare August 17, 2026 09:28
@chocolatkey
chocolatkey merged commit 298d30d into develop Aug 17, 2026
4 checks passed
@chocolatkey
chocolatkey deleted the dependabot/go_modules/support-dependencies-fdcd52bad4 branch August 17, 2026 09:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@chocolatkey