chore(deps): bump the others group across 1 directory with 10 updates by dependabot[bot] · Pull Request #2595 · future-architect/vuls

dependabot · 2026-07-02T08:51:18Z

Bumps the others group with 6 updates in the / directory:

Package	From	To
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob	`1.6.4`	`1.8.0`
github.com/aws/aws-sdk-go-v2	`1.41.7`	`1.42.0`
github.com/aws/aws-sdk-go-v2/config	`1.32.17`	`1.32.25`
github.com/aws/aws-sdk-go-v2/service/s3	`1.101.0`	`1.104.0`
github.com/google/go-containerregistry	`0.21.6`	`0.21.7`
go.etcd.io/bbolt	`1.4.3`	`1.5.0`

Updates github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.6.4 to 1.8.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/storage/azblob's releases.

sdk/storage/azblob/v1.8.0

1.8.0 (2026-06-15)

Features Added

Includes all features from 1.8.0-beta.1 and 1.8.0-beta.2

sdk/storage/azblob/v1.8.0-beta.2

1.8.0-beta.2 (2026-06-03)

Features Added

Added support for the Expect: 100-continue HTTP header on requests with a body. The new ExpectContinueBehavior field on ClientOptions configures the behavior via ExpectContinueOptions. By default (ExpectContinueModeApplyOnThrottle) the header is sent for one minute after a 429, 500, or 503 response is received; the interval can be overridden via ExpectContinueOptions.ThrottleInterval. Other modes are ExpectContinueModeOn (always send) and ExpectContinueModeOff (never send). Set the environment variable AZURE_STORAGE_DISABLE_EXPECT_CONTINUE_HEADER=true to disable the feature regardless of ClientOptions.

sdk/storage/azfile/v1.7.0

1.7.0 (2026-06-15)

Features Added

Includes all features from 1.7.0-beta.1

Commits

42def97 Add breaking changes to release notes (#21696)
112db83 Azcore v1.8.0 (#21694)
204a3c4 Prep azcore v1.7.2 for release (#21506)
89497f5 Add changelog entry for WASM fix (#21493)
0414a4b Transport dialer: setting nil for wasm build (#21451)
b1db0be Enable TLS renegotiation (#21182)
624baba bump azcore version number
ce7217c Prep for azcore v1.7.0 release (#21149)
62a8079 Add support for shallow cloning azcore.Client instances (#21065) (#21098)
47286b0 Add flag to enable skipping of dependency checks (#21146)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.41.7 to 1.42.0

Commits

9a3190f Release 2026-06-08
b20dd5b Regenerated Clients
75a45ea Update API model
e736f55 Add preview of changes for standard retry mode behind flag (#3400)
ba08dc9 Release 2026-06-05.2
9a67e21 Revert schema serde (#3442)
51692f8 s3/transfermanager: avoid double-closing concurrentReader channel after read ...
f696d5b Release 2026-06-05
7efb8fd Regenerated Clients
1a420c5 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.17 to 1.32.25

Commits

0016334 Release 2026-06-10
396a182 Regenerated Clients
3eb8533 Update API model
7bbea79 Release 2026-06-09
1fefa6c Regenerated Clients
a2cf49f Update endpoints model
d87be68 Update API model
9a3190f Release 2026-06-08
b20dd5b Regenerated Clients
75a45ea Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.16 to 1.19.24

Commits

0016334 Release 2026-06-10
396a182 Regenerated Clients
3eb8533 Update API model
7bbea79 Release 2026-06-09
1fefa6c Regenerated Clients
a2cf49f Update endpoints model
d87be68 Update API model
9a3190f Release 2026-06-08
b20dd5b Regenerated Clients
75a45ea Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.101.0 to 1.104.0

Commits

99943aa Release 2026-06-16
8594135 Regenerated Clients
14151e5 Update endpoints model
f43e77c Update API model
9fcc53a Release 2026-06-15
65154c1 Regenerated Clients
b86c7b9 Update API model
750e42a Release 2026-06-12
f64ce2c Regenerated Clients
04e9755 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.42.1 to 1.43.3

Commits

fa369bd Release 2026-06-03
960ee4d Regenerated Clients
4b6df8b Update endpoints model
30b15dd Update API model
e8c72af enable schema-serde (#3421)
b4d02c5 Release 2026-06-02
48e375b Regenerated Clients
b8a4fc1 Update API model
e8627b4 Merge pull request #3430 from aws/fix-remove-ioutil
4e258a3 chore: update changelog description per review
Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.21.6 to 0.21.7

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.7

What's Changed

tarball: return error instead of panicking on missing rootfs.diff_ids by @iahsanGill in google/go-containerregistry#2304

gcrane: honor --platform flag in copy by @iahsanGill in google/go-containerregistry#2307

mutate: verify layer digests in Extract and Time by @momenashrafff in google/go-containerregistry#2303

tarball: close layer readers during Write by @nandbhat in google/go-containerregistry#2308

build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in google/go-containerregistry#2311

build(deps): bump github.com/docker/cli from 29.4.3+incompatible to 29.5.2+incompatible in the go-deps group across 1 directory by @dependabot[bot] in google/go-containerregistry#2312

BUGFIX: Fail with error when read exceeds maximum by @inteon in google/go-containerregistry#2328

build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in google/go-containerregistry#2327

fix(name): anchor loopback registry detection by @rohan-patnaik in google/go-containerregistry#2314

Reject symlinks in OCI layout blobs by @mosskappa in google/go-containerregistry#2306

fix(crane): avoid creating export tar on pull failure by @Haihan-Jiang in google/go-containerregistry#2318

feat(kubernetes): allow ignoring pull secrets by @rohan-patnaik in google/go-containerregistry#2315

fix(name): preserve localhost registry references by @rohan-patnaik in google/go-containerregistry#2316

pkg/registry: export ErrNotFound by @malt3 in google/go-containerregistry#2176

pkg/registry: export RedirectError by @malt3 in google/go-containerregistry#2177

build(deps): bump the go-deps group across 1 directory with 2 updates by @dependabot[bot] in google/go-containerregistry#2343

build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in google/go-containerregistry#2344

fix: prevent SSRF in google.List() pagination by @tufstraka in google/go-containerregistry#2332

internal/gzip: fix goroutine leak in ReadCloserLevel by @amarkdotdev in google/go-containerregistry#2347

fix(transport): apply refreshed bearer token after cross-host redirect by @64johnlee in google/go-containerregistry#2337

build(deps): bump the go-deps group across 3 directories with 4 updates by @dependabot[bot] in google/go-containerregistry#2348

fix(tarball): normalize paths when matching files by @bstoll in google/go-containerregistry#2334

transport: do not re-attach bearer token after cross-host redirect by @evilgensec in google/go-containerregistry#2349

Bump CI go version to 1.26.4 by @Subserial in google/go-containerregistry#2350

New Contributors

@momenashrafff made their first contribution in google/go-containerregistry#2303

@nandbhat made their first contribution in google/go-containerregistry#2308

@inteon made their first contribution in google/go-containerregistry#2328

@rohan-patnaik made their first contribution in google/go-containerregistry#2314

@mosskappa made their first contribution in google/go-containerregistry#2306

@Haihan-Jiang made their first contribution in google/go-containerregistry#2318

@tufstraka made their first contribution in google/go-containerregistry#2332

@amarkdotdev made their first contribution in google/go-containerregistry#2347

@64johnlee made their first contribution in google/go-containerregistry#2337

@bstoll made their first contribution in google/go-containerregistry#2334

Full Changelog: google/go-containerregistry@v0.21.6...v0.21.7

Commits

c68d899 Bump go version to 1.26.4 (#2350)
da61d86 transport: do not re-attach bearer token after cross-host redirect (#2349)
09fe1e5 fix(tarball): normalize paths when matching files (#2334)
5baa399 build(deps): bump the go-deps group across 3 directories with 4 updates (#2348)
97a8a17 fix(transport): apply refreshed bearer token after cross-host redirect (#2337)
e963497 internal/gzip: fix goroutine leak in ReadCloserLevel (#2347)
02649ea fix: prevent SSRF in google.List() pagination (#2332)
7204b40 build(deps): bump the actions group across 1 directory with 2 updates (#2344)
4cfaa93 build(deps): bump the go-deps group across 1 directory with 2 updates (#2343)
6849394 pkg/registry: export RedirectError (#2177)
Additional commits viewable in compare view

Updates go.etcd.io/bbolt from 1.4.3 to 1.5.0

Release notes

Sourced from go.etcd.io/bbolt's releases.

v1.5.0

See the CHANGELOG/v1.5.0 for more details.

Commits

e7a8b2d Merge pull request #1217 from pjsharath28/update-go-release-1.5
a916f11 bump go 1.25.11
43ec888 Merge pull request #1212 from Elbehery/20260527_remove_maxSize_guard
d43321f chore(test): remove redundant MaxSize guard in TestDB_MaxSizeExceededDoesNotGrow
c13504d Merge pull request #1211 from ahrtr/20260526_maxsize_changelog
0a8fbd9 Merge pull request #1210 from Elbehery/20260526_support_data_size_limit
63896b7 Update changelog for the feature of supporting setting file size limit
a85b887 Reimplement the feature of support setting data file size limit
443486e test: add and update tests for MaxSize and MMap behavior
a1f42c4 Merge pull request #1208 from etcd-io/dependabot/github_actions/golangci/gola...
Additional commits viewable in compare view

Updates golang.org/x/term from 0.43.0 to 0.44.0

Commits

3b43943 go.mod: update golang.org/x dependencies
See full diff in compare view

Updates golang.org/x/text from 0.37.0 to 0.38.0

Commits

f4bb632 go.mod: update golang.org/x dependencies
See full diff in compare view

shino · 2026-07-02T09:07:04Z

@dependabot rebase

Bumps the others group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/Azure/azure-sdk-for-go/sdk/storage/azblob](https://github.com/Azure/azure-sdk-for-go) | `1.6.4` | `1.8.0` | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.7` | `1.42.0` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.17` | `1.32.25` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.101.0` | `1.104.0` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.6` | `0.21.7` | | [go.etcd.io/bbolt](https://github.com/etcd-io/bbolt) | `1.4.3` | `1.5.0` | Updates `github.com/Azure/azure-sdk-for-go/sdk/storage/azblob` from 1.6.4 to 1.8.0 - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Commits](Azure/azure-sdk-for-go@sdk/storage/azblob/v1.6.4...sdk/azcore/v1.8.0) Updates `github.com/aws/aws-sdk-go-v2` from 1.41.7 to 1.42.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.41.7...v1.42.0) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.17 to 1.32.25 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.17...config/v1.32.25) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.16 to 1.19.24 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@credentials/v1.19.16...credentials/v1.19.24) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.101.0 to 1.104.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.101.0...service/s3/v1.104.0) Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.42.1 to 1.43.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.42.1...service/amp/v1.43.3) Updates `github.com/google/go-containerregistry` from 0.21.6 to 0.21.7 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.21.6...v0.21.7) Updates `go.etcd.io/bbolt` from 1.4.3 to 1.5.0 - [Release notes](https://github.com/etcd-io/bbolt/releases) - [Commits](etcd-io/bbolt@v1.4.3...v1.5.0) Updates `golang.org/x/term` from 0.43.0 to 0.44.0 - [Commits](golang/term@v0.43.0...v0.44.0) Updates `golang.org/x/text` from 0.37.0 to 0.38.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.37.0...v0.38.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: others - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.25 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: others - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.19.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: others - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.104.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: others - dependency-name: github.com/aws/aws-sdk-go-v2/service/sts dependency-version: 1.43.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: others - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/storage/azblob dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: others - dependency-name: github.com/google/go-containerregistry dependency-version: 0.21.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: others - dependency-name: go.etcd.io/bbolt dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: others - dependency-name: golang.org/x/term dependency-version: 0.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: others - dependency-name: golang.org/x/text dependency-version: 0.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: others ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 2, 2026

shino self-assigned this Jul 2, 2026

dependabot Bot force-pushed the dependabot/go_modules/master/others-91b4f42cd9 branch from 2d5e666 to 100298b Compare July 2, 2026 09:15

shino approved these changes Jul 3, 2026

View reviewed changes

shino merged commit 698946a into master Jul 3, 2026
8 checks passed

shino deleted the dependabot/go_modules/master/others-91b4f42cd9 branch July 3, 2026 02:31

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): bump the others group across 1 directory with 10 updates#2595

chore(deps): bump the others group across 1 directory with 10 updates#2595
shino merged 1 commit into
masterfrom
dependabot/go_modules/master/others-91b4f42cd9

dependabot Bot commented on behalf of github Jul 2, 2026 •

edited

Loading

Uh oh!

shino commented Jul 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

sdk/storage/azblob/v1.8.0

1.8.0 (2026-06-15)

Features Added

sdk/storage/azblob/v1.8.0-beta.2

1.8.0-beta.2 (2026-06-03)

Features Added

sdk/storage/azfile/v1.7.0

1.7.0 (2026-06-15)

Features Added

v0.21.7

What's Changed

New Contributors

v1.5.0

Uh oh!

shino commented Jul 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 2, 2026 •

edited

Loading