Skip to content

build(deps): bump the go-minor-patch group across 1 directory with 17 updates - #340

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-minor-patch-3a7a603e22
Open

build(deps): bump the go-minor-patch group across 1 directory with 17 updates#340
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-minor-patch-3a7a603e22

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-minor-patch group with 13 updates in the / directory:

Package From To
github.com/coreos/go-oidc/v3 3.18.0 3.20.0
github.com/ethpandaops/tracoor 0.0.32 0.0.33
github.com/getkin/kin-openapi 0.135.0 0.146.0
github.com/go-chi/chi/v5 5.3.0 5.3.1
github.com/grpc-ecosystem/grpc-gateway/v2 2.27.5 2.30.0
github.com/mark3labs/mcp-go 0.54.1 0.57.0
github.com/moby/moby/api 1.54.2 1.55.0
github.com/moby/moby/client 0.4.1 0.5.1
github.com/prometheus/client_golang 1.23.2 1.24.1
github.com/redis/go-redis/v9 9.20.0 9.22.0
github.com/stretchr/testify 1.11.1 1.12.0
github.com/testcontainers/testcontainers-go 0.42.0 0.44.0
github.com/yuin/goldmark 1.8.2 1.8.5

Updates github.com/coreos/go-oidc/v3 from 3.18.0 to 3.20.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.20.0

What's Changed

Full Changelog: coreos/go-oidc@v3.19.0...v3.20.0

v3.19.0

What's Changed

New Contributors

Full Changelog: coreos/go-oidc@v3.18.0...v3.19.0

Commits
  • 75dfa5c oidc: add constants for "email" and "profile" scopes
  • a89f046 oidc: add API for determining when issuer URLs mismatch
  • 6a69b6d readme: update README and docs
  • f9049c9 oidc: ignore JWKs with unknown signing algorithms rather than failing
  • 2f178e0 SECURITY.md: add a security policy and point to project-level reporting
  • b3bc7da oidc: improve documentation for APIs
  • 0db9053 oidc: modernize with new Go APIs
  • 4204f0b oidc: add support for validating back-channel logout tokens
  • f77e01c fix: Key refresh should set no-cache to get most up to date keys
  • See full diff in compare view

Updates github.com/ethpandaops/tracoor from 0.0.32 to 0.0.33

Release notes

Sourced from github.com/ethpandaops/tracoor's releases.

v0.0.33

What's Changed

New Contributors

Full Changelog: ethpandaops/tracoor@v0.0.32...v0.0.33

Commits
  • 9a96583 fix: subscribe only to beacon event topics that are actually used (#55)
  • aff69be Merge pull request #54 from ethpandaops/fix/update-kurtosis-apt-source
  • 966886a fix(golang-test.yaml): update test running command to use tee for simultaneou...
  • 8f52e38 chore(smoke-test.yaml): remove deprecated EthereumJS and Nimbus configuration...
  • dbca20f fix: resolve golangci-lint issues (gosec G703, prealloc)
  • bd6e49c fix: update kurtosis apt source to sdk.kurtosis.com
  • See full diff in compare view

Updates github.com/getkin/kin-openapi from 0.135.0 to 0.146.0

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.146.0

What's Changed

Full Changelog: getkin/kin-openapi@v0.145.0...v0.146.0

v0.145.0

What's Changed

Full Changelog: getkin/kin-openapi@v0.144.0...v0.145.0

v0.144.0

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.143.0...v0.144.0

v0.143.0

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.142.0...v0.143.0

v0.142.0

What's Changed

... (truncated)

Commits
  • 335f4e6 openapi3: store field locations in a slice, not a map (#1235)
  • f5441d6 Merge commit from fork
  • d090e36 Merge commit from fork
  • 947498e openapi3: keep a document's origin tree only when it can be read (#1234)
  • 88aa64c Merge commit from fork
  • f1a5b52 Merge commit from fork
  • 27bc028 openapi3: stop InternalizeRefs panicking on unresolved discriminator mappings...
  • f0407d5 Merge commit from fork
  • c947670 some fixes to please my moulinette (#1232)
  • 68ac2af Merge commit from fork
  • Additional commits viewable in compare view

Updates github.com/go-chi/chi/v5 from 5.3.0 to 5.3.1

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.3.1

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.3.0...v5.3.1

Commits
  • 8b258c7 ci: pin GitHub Actions to full commit SHAs (#1116)
  • caf87e6 feat(mux): support http QUERY method ietf rfc10008 (#1132)
  • 7fcb8a2 middleware: document printPrettyStack and harden NoColor panic test (#1131)
  • 878fe71 Fix defaultLogEntry.Panic not respecting NoColor setting (#1050)
  • d7b767b feat(middleware): add text/xml and application/xml to default compressible ty...
  • 3b50c7c Tidy build directives (#1113)
  • 2b9fca2 Honor Discard() in httpFancyWriter.ReadFrom (#1110)
  • See full diff in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.5 to 2.30.0

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.30.0

New Features

  • protoc-gen-openapiv3: Brand new minimal OpenAPI v3 generator (#6623), plus follow-ups:
    • Visibility selectors (#6673)
    • disable_default_errors option (#6672)
    • Annotation support (#6681)
    • Improved plugin error surfacing (#6937)
    • field_behavior REQUIRED support for query parameters (#7180) — @​maydietwice
  • openapiv3-merge: New standalone tool for merging OpenAPI v3 documents (#6771) — @​johanbrandhorst
  • protoc-gen-openapiv2 moved to the protoc toolchain (#6988) — @​EliSauder

Fixes

Change PR Contributor
OpenAPI v2: messages sorted before rendering definitions for determinism #6732 @​alliasgher
OpenAPI v2: enum comments now go to description instead of title #6785 @​superShen0916
OpenAPI v2: include field schema metadata on parameters #6894 @​puneetdixit200
OpenAPI v2: omit empty body objects for nested path parameters #7065 @​alliasgher
OpenAPI v3: omit empty body objects for nested path parameters #7068 @​alliasgher
OpenAPI v2: preserve x-nullable when use_allof_for_refs wraps a $ref #7026 @​pkhanaljc
OpenAPI v2: fix path joining for colon-prefixed segments #7191 @​Ritik100-AIT
Prioritize OpenAPI config options over proto options #6973 @​maskedmaxx
Support Service doc comments for OpenAPI/Swagger generation #6200 @​majiayu000
Fix nested body path initialization for oneof fields #6948 @​cyphercodes
Remove redundant enum assignment for nested proto3 fields #7059 @​abhishek-dalbanjan
Drain request only after ParseForm in generated code #7192 @​paskozdilar
Support field extensions with use_allof_for_refs #3100 @​same-id
Ignore M import-path mappings in openapiv3 plugin params #6936 @​johanbrandhorst

Documentation

Tests / CI / Infra

New Contributors

@​alliasgher, @​superShen0916, @​puneetdixit200, @​ketpatil77, @​EliSauder, @​maskedmaxx, @​hawk-roy, @​viniciusmtsantos, @​cyphercodes, @​abhishek-dalbanjan, @​hsdfat, @​ZayanKhan-12, @​dlanov, @​maydietwice, @​pkhanaljc, @​Ritik100-AIT

... (truncated)

Commits
  • 1debdea Fix openapiv2 path joining for colon-prefixed segments (#7191)
  • 561f393 Drain request only after ParseForm in generated code (#7192)
  • a16cad8 fix(openapiv2): preserve x-nullable when use_allof_for_refs wraps $ref (#7026)
  • 544d99d openapiv3: support field_behavior REQUIRED for query parameters (#7180)
  • 89a9e41 chore(deps): update google/oss-fuzz digest to 3ea2a9b (#7195)
  • 42ced5f fix(deps): update opentelemetry-go-contrib monorepo to v0.70.0 (#7194)
  • c63e364 chore(deps): update googleapis digest to 5739471 (#7193)
  • 873f41a chore(deps): update google/oss-fuzz digest to 8d292af (#7190)
  • f56f8ad chore(deps): update googleapis digest to f3ff3a1 (#7189)
  • 3087cc7 build(deps-dev): bump fast-uri in /examples/internal/browser (#7187)
  • Additional commits viewable in compare view

Updates github.com/mark3labs/mcp-go from 0.54.1 to 0.57.0

Release notes

Sourced from github.com/mark3labs/mcp-go's releases.

Release v0.57.0

What's Changed

New Contributors

Full Changelog: mark3labs/mcp-go@v0.56.0...v0.57.0

Release v0.56.0

What's Changed

Full Changelog: mark3labs/mcp-go@v0.55.1...v0.56.0

Release v0.55.1

What's Changed

New Contributors

Full Changelog: mark3labs/mcp-go@v0.55.0...v0.55.1

Release v0.55.0

What's Changed

New Contributors

... (truncated)

Commits
  • e395444 fmt
  • bab128e fix: deliver server notifications to in-process transport clients (#919)
  • 7f2ae01 fix(transport): concatenate multi-line SSE data fields instead of overwriting...
  • fb74297 docs(examples): fix stale struct tags in structured_input_and_output (#923)
  • e9a7bad feat(server): add streamable HTTP stream resumability via pluggable EventStor...
  • 6d95048 fix(mcp): unmarshal embedded resource contents (#938)
  • f665845 fix(server): label client JSON-RPC errors by method in streamable HTTP (#924)
  • c84d6ef fix(client): accept Content-Type parameters on GET listening stream (#925)
  • 87e3e86 fix(streamable_http): close active sessions before Shutdown (#926)
  • 9e699d3 fix(mcp): support jsonschema_description and enum struct tags (#931)
  • Additional commits viewable in compare view

Updates github.com/moby/moby/api from 1.54.2 to 1.55.0

Release notes

Sourced from github.com/moby/moby/api's releases.

api/v1.55.0

1.55.0

Changelog

  • POST /containers/{id}/update now supports per-device blkio resource settingss. moby/moby#52651
  • The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636
  • docs: clarify swarm join required fields. moby/moby#52763

api/v1.55.0-rc.1

1.55.0-rc.1

Changelog

  • POST /containers/{id}/update now supports per-device blkio resource settingss. moby/moby#52651
  • The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636
  • docs: clarify swarm join required fields. moby/moby#52763
Commits
  • b6c53c2 Merge pull request #52773 from vvoland/c8d-amd64-variants
  • 01115e8 Merge pull request #52906 from vvoland/fix-TestContainerWithConflictingNoneNe...
  • b36296f Merge pull request #52913 from thaJeztah/windows_does_stats
  • a81aa78 TestContainerWithConflictingNoneNetwork: Extend Windows timeout
  • 908a35a Merge pull request #52914 from thaJeztah/no_stderr
  • 04d33b5 Merge pull request #52912 from thaJeztah/cleanup_GenerateRandomAlphaOnlyString
  • 3b2f557 Merge pull request #52722 from notandruu/integration/migrate-TestInspectAPIIm...
  • 62b3aae Merge pull request #52901 from vvoland/c8d-imageusage
  • 11d3342 integration-cli: un-skip stats tests on Windows
  • a47b1b2 Merge pull request #52891 from smerkviladze/attestations-clearer-blob-missing...
  • Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.4.1 to 0.5.1

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.5.1

0.5.1

Changelog

  • client/pkg/jsonmessage: Display: fix godoc link. moby/moby#53070
  • client: ServiceCreate, ServiceUpdate: fix duplicate and 'unkown' platforms. moby/moby#53012
  • client: ServiceInspect, ContainerCommit: omit optional query args if not set. moby/moby#53010
  • golangci-lint: enable perfsprint linter. moby/moby#53016

client/0.5.0

0.5.0

Changelog

  • The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636

client/v0.5.0-rc.1

0.5.0-rc.1

Changelog

  • The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636
Changelog

Sourced from github.com/moby/moby/client's changelog.

0.5.1 (2013-07-30)

  • API: Docker client now sets useragent (RFC 2616)
  • Runtime: Add ps args to docker top
  • Runtime: Add support for container ID files (pidfile like)
  • Runtime: Add container=lxc in default env
  • Runtime: Support networkless containers with docker run -n and docker -d -b=none
  • API: Add /events endpoint
  • Builder: ADD command now understands URLs
  • Builder: CmdAdd and CmdEnv now respect Dockerfile-set ENV variables
  • Hack: Simplify unit tests with helpers
  • Hack: Improve docker.upstart event
  • Hack: Add coverage testing into docker-ci
  • Runtime: Stdout/stderr logs are now stored in the same file as JSON
  • Runtime: Allocate a /16 IP range by default, with fallback to /24. Try 12 ranges instead of 3.
  • Runtime: Change .dockercfg format to json and support multiple auth remote
  • Runtime: Do not override volumes from config
  • Runtime: Fix issue with EXPOSE override
  • Builder: Create directories with 755 instead of 700 within ADD instruction

0.5.0 (2013-07-17)

  • Runtime: List all processes running inside a container with 'docker top'
  • Runtime: Host directories can be mounted as volumes with 'docker run -v'
  • Runtime: Containers can expose public UDP ports (eg, '-p 123/udp')
  • Runtime: Optionally specify an exact public port (eg. '-p 80:4500')
  • Registry: New image naming scheme inspired by Go packaging convention allows arbitrary combinations of registries
  • Builder: ENTRYPOINT instruction sets a default binary entry point to a container
  • Builder: VOLUME instruction marks a part of the container as persistent data
  • Builder: 'docker build' displays the full output of a build by default
  • Runtime: 'docker login' supports additional options
  • Runtime: Dont save a container's hostname when committing an image.
  • Registry: Fix issues when uploading images to a private registry

0.4.8 (2013-07-01)

  • Builder: New build operation ENTRYPOINT adds an executable entry point to the container.
  • Runtime: Fix a bug which caused 'docker run -d' to no longer print the container ID.
  • Tests: Fix issues in the test suite

0.4.7 (2013-06-28)

  • Registry: easier push/pull to a custom registry
  • Remote API: the progress bar updates faster when downloading and uploading large files
  • Remote API: fix a bug in the optional unix socket transport
  • Runtime: improve detection of kernel version
  • Runtime: host directories can be mounted as volumes with 'docker run -b'
  • Runtime: fix an issue when only attaching to stdin
  • Runtime: use 'tar --numeric-owner' to avoid uid mismatch across multiple hosts
  • Hack: improve test suite and dev environment
  • Hack: remove dependency on unit tests on 'os/user'
  • Documentation: add terminology section

0.4.6 (2013-06-22)

... (truncated)

Commits

Updates github.com/oapi-codegen/runtime from 1.3.1 to 1.6.0

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

Allow customization of parameter encoding

This is a small release which adds a global encoding setting on the runtime, to allow users to customize how to handle spaces in query arguments. This is a new minor release, since we're adding new API, even though this is a very minor feature. I imagine that in the future, we will add more settings, rather than making behavior assumptions.

🚀 New features and improvements

📦 Dependency updates

  • chore(deps): update module github.com/golangci/golangci-lint to v2.12.2 (#112) @renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.

Sponsors

We would like to thank our sponsors for their support during this release.

v1.5.0: RFC3339 durations, and bug fixes

This is mainly a bugfix release, but we're bumping the minor version since we also introduce a new type, Duration into our types/ package, which allows for parsing and emitting RFC3339 durations. Rather than trying to parse a duration string into a time.Duration, which requires assumptions that may not be right for everyone, we decided not to make those decisions and just store all possible fields as provided. Users can convert this to Go Duration as they see fit.

🚀 New features and improvements

🐛 Bug fixes

📝 Documentation updates

... (truncated)

Commits
  • 01be2fa chore(deps): update module github.com/golangci/golangci-lint to v2.12.2 (#112)
  • 1463938 Allow customizing default query encoder (#145)
  • 540d34a fix(deps): update module github.com/labstack/echo/v5 to v5.3.0 (#142)
  • e89dbb8 Add types.Duration for the RFC 3339 duration format (#144)
  • 324e57f Let generated code declare whether styled parameter values are escaped (#143)
  • 95c13c0 Explain how to send nested objects when style serialization fails (#141)
  • 7c889f3 Prefer the form struct tag over json for form encoding (#140)
  • d0d5c3a chore(deps): update golang/govulncheck-action action to v1.1.0 (#137)
  • 67e86fd chore(deps): update oapi-codegen/actions action to v0.8.0 (#130)
  • df140cb fix(deps): update module github.com/labstack/echo/v5 to v5.2.1 (#126)
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.23.2 to 1.24.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.24.1 / 2026-07-23

Small bugfix release for promhttp.

What's Changed

[BUGFIX] promhttp: Fix panic on requests with nil URL. #2065

Full Changelog: prometheus/client_golang@v1.24.0...v1.24.1

v1.24.0 - 2026-07-20

Changes

  • [CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. #1862
  • [CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated model.NameValidationScheme global. Default behavior is unchanged; code that set NameValidationScheme = LegacyValidation no longer gets legacy enforcement at metric, label, and push-grouping construction. #2051
  • [CHANGE] api/prometheus/v1: Support matchers (matches[] parameter) in Rules method (Rules(ctx context.Context, matches []string) (RulesResult, error)). #1843
  • [CHANGE] api/prometheus/v1: Refactor LabelNames method to return model.LabelNames instead of []string for consistency across the API. #1850
  • [CHANGE] exp/api/remote: Simplify Store interface, rename Handler to WriteHandler, and encapsulat...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 17, 2026
@dependabot
build(deps): bump the go-minor-patch group across 1 directory with 17…
694126d 
… updates

Bumps the go-minor-patch group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.18.0` | `3.20.0` |
| [github.com/ethpandaops/tracoor](https://github.com/ethpandaops/tracoor) | `0.0.32` | `0.0.33` |
| [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) | `0.135.0` | `0.146.0` |
| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.3.0` | `5.3.1` |
| [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.27.5` | `2.30.0` |
| [github.com/mark3labs/mcp-go](https://github.com/mark3labs/mcp-go) | `0.54.1` | `0.57.0` |
| [github.com/moby/moby/api](https://github.com/moby/moby) | `1.54.2` | `1.55.0` |
| [github.com/moby/moby/client](https://github.com/moby/moby) | `0.4.1` | `0.5.1` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.23.2` | `1.24.1` |
| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.20.0` | `9.22.0` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.0` |
| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.44.0` |
| [github.com/yuin/goldmark](https://github.com/yuin/goldmark) | `1.8.2` | `1.8.5` |



Updates `github.com/coreos/go-oidc/v3` from 3.18.0 to 3.20.0
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](coreos/go-oidc@v3.18.0...v3.20.0)

Updates `github.com/ethpandaops/tracoor` from 0.0.32 to 0.0.33
- [Release notes](https://github.com/ethpandaops/tracoor/releases)
- [Commits](ethpandaops/tracoor@v0.0.32...v0.0.33)

Updates `github.com/getkin/kin-openapi` from 0.135.0 to 0.146.0
- [Release notes](https://github.com/getkin/kin-openapi/releases)
- [Commits](getkin/kin-openapi@v0.135.0...v0.146.0)

Updates `github.com/go-chi/chi/v5` from 5.3.0 to 5.3.1
- [Release notes](https://github.com/go-chi/chi/releases)
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md)
- [Commits](go-chi/chi@v5.3.0...v5.3.1)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.5 to 2.30.0
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Commits](grpc-ecosystem/grpc-gateway@v2.27.5...v2.30.0)

Updates `github.com/mark3labs/mcp-go` from 0.54.1 to 0.57.0
- [Release notes](https://github.com/mark3labs/mcp-go/releases)
- [Commits](mark3labs/mcp-go@v0.54.1...v0.57.0)

Updates `github.com/moby/moby/api` from 1.54.2 to 1.55.0
- [Release notes](https://github.com/moby/moby/releases)
- [Commits](moby/moby@api/v1.54.2...api/v1.55.0)

Updates `github.com/moby/moby/client` from 0.4.1 to 0.5.1
- [Release notes](https://github.com/moby/moby/releases)
- [Changelog](https://github.com/moby/moby/blob/v0.5.1/CHANGELOG.md)
- [Commits](moby/moby@v0.4.1...v0.5.1)

Updates `github.com/oapi-codegen/runtime` from 1.3.1 to 1.6.0
- [Release notes](https://github.com/oapi-codegen/runtime/releases)
- [Commits](oapi-codegen/runtime@v1.3.1...v1.6.0)

Updates `github.com/prometheus/client_golang` from 1.23.2 to 1.24.1
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.23.2...v1.24.1)

Updates `github.com/redis/go-redis/v9` from 9.20.0 to 9.22.0
- [Release notes](https://github.com/redis/go-redis/releases)
- [Changelog](https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md)
- [Commits](redis/go-redis@v9.20.0...v9.22.0)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.0)

Updates `github.com/testcontainers/testcontainers-go` from 0.42.0 to 0.44.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.42.0...v0.44.0)

Updates `github.com/yuin/goldmark` from 1.8.2 to 1.8.5
- [Release notes](https://github.com/yuin/goldmark/releases)
- [Commits](yuin/goldmark@v1.8.2...v1.8.5)

Updates `go.yaml.in/yaml/v3` from 3.0.4 to 3.0.5
- [Commits](yaml/go-yaml@v3.0.4...v3.0.5)

Updates `golang.org/x/crypto` from 0.52.0 to 0.54.0
- [Commits](golang/crypto@v0.52.0...v0.54.0)

Updates `golang.org/x/sys` from 0.45.0 to 0.47.0
- [Commits](golang/sys@v0.45.0...v0.47.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/ethpandaops/tracoor
  dependency-version: 0.0.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/getkin/kin-openapi
  dependency-version: 0.145.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/go-chi/chi/v5
  dependency-version: 5.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/mark3labs/mcp-go
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/moby/moby/api
  dependency-version: 1.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/moby/moby/client
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/oapi-codegen/runtime
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/redis/go-redis/v9
  dependency-version: 9.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/yuin/goldmark
  dependency-version: 1.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: go.yaml.in/yaml/v3
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/crypto
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/sys
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-minor-patch-3a7a603e22 branch from b3330e9 to 694126d Compare August 24, 2026 10:26
@redpandabot

redpandabot Bot commented Aug 24, 2026

Copy link
Copy Markdown

Summary

Mechanical dependabot bump of 17 Go dependencies (go.mod/go.sum only). I could not run go build here (no Go toolchain, download blocked), so I verified compatibility by downloading both old and new module zips from the Go proxy and checking every symbol the repo actually uses: mcp-go (0.54.1→0.57.0), kin-openapi (0.135.0→0.146.0), go-oidc, grpc-gateway, testcontainers, moby api/client (sandbox), oapi-codegen/runtime, redis, goldmark, chi, tracoor and tmp argon2 all keep the used APIs unchanged; the go.sum removals match testify 1.12.0 vendoring go-spew/go-difflib, and every go.mod require has a matching go.sum h1 entry. OSV is clean for every direct upgrade; the only outstanding advisory is an indirect, un-imported golang.org/x/mod below its fixed version.

Issues

  • 🟡 go.mod:138 — golang.org/x/mod bumped to 0.37.0 but the known fixes land in 0.40.0 — OSV reports GO-2026-6179 and GO-2026-6180 (sumdb tile-verification bypass, CVE-2026-56865/CVE-2026-56864) affecting all x/mod < 0.40.0, so the bump from 0.35.0 to 0.37.0 does not reach the patched version. This is not a blocker: no repo file imports golang.org/x/mod (grep confirms zero importers; it is a build-tooling-only // indirect dep) and go.mod pins go 1.26.6, which the advisory marks as the fixed cmd/go toolchain, so the sumdb code is unreachable in the shipped binaries — but flagging it so the author can decide whether to push x/tools/x/mod to the fixed versions.

Reviewed @ 694126d1
"The details are not the details. They make the design." — Charles Eames

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants