Skip to content

chore(deps): Update go minor and patch (main) #9523

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): Update go minor and patch (main) #9523

wants to merge 1 commit into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 1, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/IBM/sarama v1.46.1 -> v1.46.3 age confidence require patch
github.com/blevesearch/bleve/v2 v2.5.2 -> v2.5.4 age confidence require patch
github.com/dgraph-io/dgo/v250 v250.0.0-preview7 -> v250.0.0 age confidence require patch
github.com/docker/docker v28.4.0+incompatible -> v28.5.2+incompatible age confidence require minor
github.com/go-jose/go-jose/v4 v4.1.2 -> v4.1.3 age confidence require patch
github.com/golang/geo 247f399 -> 5906ab3 age confidence require digest
github.com/hashicorp/vault/api v1.21.0 -> v1.22.0 age confidence require minor
github.com/klauspost/compress v1.18.0 -> v1.18.1 age confidence require patch
github.com/mark3labs/mcp-go v0.41.0 -> v0.43.0 age confidence require minor
github.com/minio/minio-go/v7 v7.0.95 -> v7.0.97 age confidence require patch
go.etcd.io/etcd/raft/v3 v3.5.23 -> v3.5.24 age confidence require patch
golang.org/x/crypto v0.42.0 -> v0.43.0 age confidence require minor
golang.org/x/exp df92998 -> a4bb9ff age confidence require digest
golang.org/x/mod v0.28.0 -> v0.29.0 age confidence require minor
golang.org/x/net v0.44.0 -> v0.46.0 age confidence require minor
golang.org/x/sync v0.17.0 -> v0.18.0 age confidence require minor
golang.org/x/sys v0.36.0 -> v0.38.0 age confidence require minor
golang.org/x/term v0.35.0 -> v0.36.0 age confidence require minor
golang.org/x/text v0.29.0 -> v0.30.0 age confidence require minor
golang.org/x/tools v0.37.0 -> v0.38.0 age confidence require minor
google.golang.org/grpc v1.75.1 -> v1.76.0 age confidence require minor
google.golang.org/protobuf v1.36.9 -> v1.36.10 age confidence require patch

Release Notes

IBM/sarama (github.com/IBM/sarama)

v1.46.3: Version 1.46.3 (2025-10-26)

Compare Source

What's Changed

🐛 Fixes
📦 Dependency updates
🔧 Maintenance
  • chore(ci): extract tool versions and add renovate customManagers by @​dnwe in #​3346

Full Changelog: IBM/sarama@v1.46.2...v1.46.3

v1.46.2: Version 1.46.2 (2025-10-10)

Compare Source

What's Changed

A big focus on improving our support for newer protocol versions in this release, particularly supporting a wider range of flexible versions

🎉 New Features / Improvements
🐛 Fixes
📦 Dependency updates
🔧 Maintenance
➕ Other Changes

Full Changelog: IBM/sarama@v1.46.1...v1.46.2

blevesearch/bleve (github.com/blevesearch/bleve/v2)

v2.5.4

Compare Source

What's Changed

New Contributors

Milestone: https://github.com/blevesearch/bleve/milestone/28
Full Changelog: blevesearch/bleve@v2.5.3...v2.5.4

v2.5.3

Compare Source

Bug Fixes
  • Address a performance regression in GeoShape queries introduced in v2.5.1 and affects v2.5.2 as well. This is captured in #​2210. The fix blevesearch/geo#28 has been included with #​2214.
Milestone
dgraph-io/dgo (github.com/dgraph-io/dgo/v250)

v250.0.0: dgo v250.0.0

Compare Source

What's Changed

New Contributors

Full Changelog: dgraph-io/dgo@v240.2.0...v250.0.0

docker/docker (github.com/docker/docker)

v28.5.2+incompatible

Compare Source

v28.5.1+incompatible

Compare Source

v28.5.0+incompatible

Compare Source

go-jose/go-jose (github.com/go-jose/go-jose/v4)

v4.1.3

Compare Source

This release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop x/crypto and no longer have any external dependencies in go-jose outside of the standard library!

This release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.

What's Changed

Full Changelog: go-jose/go-jose@v4.1.2...v4.1.3

klauspost/compress (github.com/klauspost/compress)

v1.18.1

Compare Source

What's Changed
New Contributors

Full Changelog: klauspost/compress@v1.18.0...v1.18.1

mark3labs/mcp-go (github.com/mark3labs/mcp-go)

v0.43.0

Compare Source

What's Changed

New Contributors

Full Changelog: mark3labs/mcp-go@v0.42.0...v0.43.0

v0.42.0

Compare Source

What's Changed

New Contributors

Full Changelog: mark3labs/mcp-go@v0.41.1...v0.42.0

v0.41.1

Compare Source

What's Changed

  • fix: replace bufio.Scanner with bufio.Reader to support large message… by @​ezynda3 in #​603

Full Changelog: mark3labs/mcp-go@v0.41.0...v0.41.1

minio/minio-go (github.com/minio/minio-go/v7)

v7.0.97

Compare Source

v7.0.96

Compare Source

etcd-io/etcd (go.etcd.io/etcd/raft/v3)

v3.5.24

Compare Source

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux
ETCD_VER=v3.5.24

# choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}

rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test

curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz

/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version

# start a local etcd server
/tmp/etcd-download-test/etcd

# write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo
macOS (Darwin)
ETCD_VER=v3.5.24

# choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}

rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test

curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64

/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
Docker

etcd uses gcr.io/etcd-development/etcd as a primary container registry, and quay.io/coreos/etcd as secondary.

ETCD_VER=v3.5.24

rm -rf /tmp/etcd-data.tmp && mkdir -p /tmp/etcd-data.tmp && \
  docker rmi gcr.io/etcd-development/etcd:${ETCD_VER} || true && \
  docker run \
  -p 2379:2379 \
  -p 2380:2380 \
  --mount type=bind,source=/tmp/etcd-data.tmp,destination=/etcd-data \
  --name etcd-gcr-${ETCD_VER} \
  gcr.io/etcd-development/etcd:${ETCD_VER} \
  /usr/local/bin/etcd \
  --name s1 \
  --data-dir /etcd-data \
  --listen-client-urls http://0.0.0.0:2379 \
  --advertise-client-urls http://0.0.0.0:2379 \
  --listen-peer-urls http://0.0.0.0:2380 \
  --initial-advertise-peer-urls http://0.0.0.0:2380 \
  --initial-cluster s1=http://0.0.0.0:2380 \
  --initial-cluster-token tkn \
  --initial-cluster-state new \
  --log-level info \
  --logger zap \
  --log-outputs stderr

docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcd --version
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdctl version
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdutl version
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdctl endpoint health
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdctl put foo bar
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdctl get foo
grpc/grpc-go (google.golang.org/grpc)

v1.76.0: Release 1.76.0

Compare Source

Dependencies

Bug Fixes

  • client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#​8523)
  • client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#​8518)
  • pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#​8615)

New Features

  • credentials: Add credentials/jwt package providing file-based JWT PerRPCCredentials (A97). (#​8431)

Performance Improvements

  • client: Improve HTTP/2 header size estimate to reduce re-allocations. (#​8547)
  • encoding/proto: Avoid redundant message size calculation when marshaling. (#​8569)
protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.10

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.9...v1.36.10

Bug fixes:
CL/704415: reflect/protodesc: edition-2024-specific properties should not be lost when converting FileDescriptorProto to protoreflect.FileDescriptor

Maintenance:
CL/708555: internal/race_test: add missing impl.LazyEnabled() t.Skip
CL/703295: proto: add more invalid group encoding test cases
CL/703276: internal/impl: verify lazy unmarshal on Deterministic encoding
CL/703275: internal/impl: stop using deprecated .Field in lazy_test.go
CL/702795: all: update to latest github.com/google/go-cmp

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Contributor Author

renovate bot commented Nov 1, 2025 •
edited
Loading

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated

Details:

Package Change
github.com/blevesearch/bleve_index_api v1.2.8 -> v1.2.10
github.com/minio/crc64nvme v1.0.2 -> v1.1.0

@renovate renovate bot force-pushed the renovate/main-go-minor-and-patch branch 5 times, most recently from 05f7971 to 396dbef Compare November 8, 2025 14:05
@renovate renovate bot force-pushed the renovate/main-go-minor-and-patch branch from 396dbef to f65aa41 Compare November 8, 2025 16:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant