Skip to content

chore(deps): bump the go-modules group across 1 directory with 20 updates - #2022

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-3dae3c4301
Closed

chore(deps): bump the go-modules group across 1 directory with 20 updates#2022
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-3dae3c4301

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-modules group with 18 updates in the / directory:

Package From To
cloud.google.com/go/cloudsqlconn 1.21.2 1.22.1
cloud.google.com/go/storage 1.62.3 1.63.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity 1.13.1 1.14.0
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys 1.4.0 1.5.0
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob 1.7.0 1.8.0
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs 1.75.2 1.78.0
github.com/aws/aws-sdk-go-v2/service/eks 1.84.6 1.87.0
github.com/flanksource/clicky 1.21.18 1.21.33
github.com/labstack/echo/v4 4.15.2 4.15.4
github.com/onsi/ginkgo/v2 2.29.0 2.32.0
github.com/onsi/gomega 1.40.0 1.42.1
github.com/prometheus/common 0.68.1 0.69.0
github.com/testcontainers/testcontainers-go 0.42.0 0.43.0
gorm.io/gorm 1.31.1 1.31.2
k8s.io/api 0.36.1 0.36.2
k8s.io/client-go 0.36.1 0.36.2
modernc.org/sqlite 1.51.0 1.53.0
github.com/aws/aws-sdk-go-v2/service/s3 1.102.2 1.104.0

Updates cloud.google.com/go/cloudsqlconn from 1.21.2 to 1.22.1

Release notes

Sourced from cloud.google.com/go/cloudsqlconn's releases.

v1.22.1

1.22.1 (2026-06-25)

Bug Fixes

v1.22.0

1.22.0 (2026-06-11)

Features

  • Support AI Developer Edition connections through the Cloud SQL Auth Proxy (#1108) (116b2e5)
Changelog

Sourced from cloud.google.com/go/cloudsqlconn's changelog.

1.22.1 (2026-06-25)

Bug Fixes

1.22.0 (2026-06-11)

Features

  • Support AI Developer Edition connections through the Cloud SQL Auth Proxy (#1108) (116b2e5)
Commits

Updates cloud.google.com/go/storage from 1.62.3 to 1.63.0

Release notes

Sourced from cloud.google.com/go/storage's releases.

compute: v1.63.0

v1.63.0 (2026-05-14)

Features

storage: v1.63.0

1.63.0 (2026-06-25)

Features

  • go: Add full object checksum for negative offsets > size (#20026) (a04d980)
  • storage: Add client feature tracking in HTTP client (#14691) (319cc4c)
  • storage: App Centric Observability (#14685) (c3273bb)
  • storage: Read checksums in gRPC partial reads (#14586) (d29f68a)
  • storage: Support deleteSourceObjects option in object compose (#14704) (0d2d680)
  • Update API sources and regenerate (#14701) (a9b7921)

Bug Fixes

  • storage: Add server closed idle connection to retriable errors (#14594) (a6bd392)
  • storage: Fix race condition during retries in gRPC writer (#14649) (c781a75)
Commits
  • 66803b9 chore(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 in /inter...
  • 86eb615 chore: bulk promote stable 0.x libraries to v1.0.0 (#14562)
  • 942bbc1 feat: Add ListSkills and DeleteSkill methods in Vertex AI Skill Registry SDK
  • 14ea3de fix: Fix name collision on SandboxEnvironment.state by renaming enum to Sandb...
  • d9de3a5 test(spanner): skip DirectPath-incompatible tests when DirectPath is enabled ...
  • 043aa71 test(spanner): fix nil pointer panic in TestNewBuiltinMetricsTracerFactory un...
  • d6f00a2 test(spanner): disable TestIntegration_QueueMutations (#14550)
  • d10add3 refactor(pubsub/v2/pstest): implement custom filter parser (#14497)
  • 94d24ca chore: librarian release pull request: 20260507T184113Z (#14549)
  • 541569e docs: update README to reflect Gemini Enterprise Agent Platform
  • Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.13.1 to 1.14.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.14.0

1.14.0 (2026-06-15)

Breaking Changes

These changes affect only code written against a beta version such as v1.14.0-beta.3

  • Removed WorkloadIdentityCredentialOptions.EnableAzureProxy. It will return in v1.15.0-beta.1

Bugs Fixed

  • AzureDeveloperCLICredential improved reporting of error messages returned from azd

Other Changes

  • Returned azidentity errors include links to the troubleshooting guide when appropriate
  • This module now requires a minimum Go version of 1.25
  • Upgraded dependencies
Commits

Updates github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys from 1.4.0 to 1.5.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys's releases.

sdk/security/keyvault/azadmin/v1.5.0

1.5.0 (2026-05-25)

Other Changes

  • Upgraded to API service version 2025-07-01

sdk/security/keyvault/azkeys/v1.5.0

1.5.0 (2026-05-25)

Other Changes

  • Upgraded to API service version 2025-07-01

sdk/security/keyvault/azcertificates/v1.5.0

1.5.0 (2026-05-26)

Features Added

  • Includes all changes from 1.5.0-beta.1.

sdk/security/keyvault/azsecrets/v1.5.0

1.5.0 (2026-05-26)

Features Added

  • Includes all changes from 1.5.0-beta.1.

sdk/data/azcosmos/v1.5.0-beta.7

1.5.0-beta.7 (2026-06-02)

Features Added

  • Added retry policy for transient 500, 502, and 504 server errors on read requests. The request is retried once in the current region and, if applicable, once against the next preferred region. Writes are not retried. This matches the behavior of the .NET, Java, and Python Cosmos SDKs. See PR 26821.

Bugs Fixed

  • Fixed missing OTel tracing spans for internal queries executed by ReadManyItems. Each per-partition query page now creates a query_items span, matching the tracing behavior of NewQueryItemsPager. See PR 26813.
  • 403/WriteForbidden retries refresh the global endpoint manager fire-and-forget (CAS-gated) instead of blocking on a synchronous gem.Update. See PR 26889.
  • Connection-error retry policy now attempts up to 3 retries against the current region before failing over, and performs at most one cross-region failover per call. Cross-region failover for writes only occurs when the error proves the request never reached the service (DNS, dial, TLS handshake, ECONNREFUSED, etc.); writes on ambiguous transport failures (e.g. ECONNRESET, EOF, transport-level timeouts) no longer fail over to another region, avoiding potential duplicate writes. Reads still fail over for any transport error. Caller-set context deadlines or cancellations short-circuit the policy without consuming the caller's budget with retries. See PR 26858 and PR 26915.
  • HTTP 408 Request Timeout responses are now handled by the Cosmos client retry policy: reads are retried exactly once against another region, and writes are returned to the caller immediately to avoid potential duplicates. See PR 26858.
  • Fixed excessive GetDatabaseAccount HTTP calls when using preferred regions, and stopped data-plane retries from trailing into the customer-supplied (default) endpoint once account topology is populated. See PR 26815.
  • Partition key range cache now serves concurrent callers from a single in-flight refresh per container, and the cached routing map remains readable while a refresh is in progress. The refresh runs on a detached background context.Background() so a caller's cancellation no longer aborts the shared fetch for other waiters; each caller continues to honor its own context deadline. See PR 26855.
  • Partition key range cache change-feed pagination is now resilient to mid-drain throttling. 429 responses are retried indefinitely (with capped linear backoff + jitter) since the service is explicitly asking the client to slow down, and the pages already accumulated are preserved instead of restarting the drain from page 1 on the next refresh. See PR 26855.

Other Changes

  • Tightened the default HTTP client: 5s dial timeout (down from azcore's 30s), 65s http.Client.Timeout wall-clock cap per HTTP attempt (was unbounded), larger idle connection pool (1000 total / 100 per host, up from azcore's 100 / 10), and faster HTTP/2 health checks. Caller-supplied Transport and shorter context deadlines are unaffected. See PR 26856.

sdk/resourcemanager/networkcloud/armnetworkcloud/v1.5.0-beta.1

1.5.0-beta.1 (2026-05-06)

Features Added

  • New value CloudServicesNetworkStorageStatusStatusInitializing, CloudServicesNetworkStorageStatusStatusNone, CloudServicesNetworkStorageStatusStatusRepairing added to enum type CloudServicesNetworkStorageStatusStatus

... (truncated)

Commits

Updates github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/storage/azblob's releases.

sdk/storage/azblob/v1.8.0

1.8.0 (2026-06-15)

Features Added

  • Includes all features from 1.8.0-beta.1 and 1.8.0-beta.2

sdk/storage/azblob/v1.8.0-beta.2

1.8.0-beta.2 (2026-06-03)

Features Added

  • Added support for the Expect: 100-continue HTTP header on requests with a body. The new ExpectContinueBehavior field on ClientOptions configures the behavior via ExpectContinueOptions. By default (ExpectContinueModeApplyOnThrottle) the header is sent for one minute after a 429, 500, or 503 response is received; the interval can be overridden via ExpectContinueOptions.ThrottleInterval. Other modes are ExpectContinueModeOn (always send) and ExpectContinueModeOff (never send). Set the environment variable AZURE_STORAGE_DISABLE_EXPECT_CONTINUE_HEADER=true to disable the feature regardless of ClientOptions.
Commits

Updates github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.75.2 to 1.78.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/eks from 1.84.6 to 1.87.0

Commits

Updates github.com/flanksource/clicky from 1.21.18 to 1.21.33

Release notes

Sourced from github.com/flanksource/clicky's releases.

v1.21.33

1.21.33 (2026-06-28)

⚠ BREAKING CHANGES

  • prompt: PromptSelect, PromptMultiSelect, and PromptText now delegate to context-aware internal functions; behavior is unchanged for callers without a Scope.

✨ Features

  • exec: add bidirectional stdio pipes for long-lived processes (e93b8ca)
  • prompt: add context-aware prompt routing and interactive sink support (07e5ab6)

🐛 Bug Fixes

  • ci,prompt,exec: tidy go.mod and address review findings (c1a9660)
  • ci: tidy example submodule go.mod files (fa5980c)

🔧 Maintenance

  • release: pin sub-modules to v1.21.32 [skip ci] (216e838)

v1.21.32

1.21.32 (2026-06-26)

👷 CI/CD

  • release: check out branch tip for GoReleaser and decouple submodule tags (7cb946d)

v1.21.31

1.21.31 (2026-06-26)

👷 CI/CD

  • release: rename goreleaser folder field to directory (29bb8d6)

v1.21.30

1.21.30 (2026-06-26)

🐛 Bug Fixes

  • aichat: pin clicky require to v1.21.29 so go get works (95378c7)

v1.21.29

1.21.29 (2026-06-26)

... (truncated)

Changelog

Sourced from github.com/flanksource/clicky's changelog.

1.21.33 (2026-06-28)

⚠ BREAKING CHANGES

  • prompt: PromptSelect, PromptMultiSelect, and PromptText now delegate to context-aware internal functions; behavior is unchanged for callers without a Scope.

✨ Features

  • exec: add bidirectional stdio pipes for long-lived processes (e93b8ca)
  • prompt: add context-aware prompt routing and interactive sink support (07e5ab6)

🐛 Bug Fixes

  • ci,prompt,exec: tidy go.mod and address review findings (c1a9660)
  • ci: tidy example submodule go.mod files (fa5980c)

🔧 Maintenance

  • release: pin sub-modules to v1.21.32 [skip ci] (216e838)

1.21.32 (2026-06-26)

👷 CI/CD

  • release: check out branch tip for GoReleaser and decouple submodule tags (7cb946d)

1.21.31 (2026-06-26)

👷 CI/CD

  • release: rename goreleaser folder field to directory (29bb8d6)

1.21.30 (2026-06-26)

🐛 Bug Fixes

  • aichat: pin clicky require to v1.21.29 so go get works (95378c7)

1.21.29 (2026-06-26)

⚠ BREAKING CHANGES

  • cli: Removed SourceMarkdown field from markdown Node and Document structures; removed PreserveSource option from markdown parser. Parser provenance fields are no longer included in clicky-json output.

... (truncated)

Commits
  • 27d907d chore(release): 1.21.33 [skip ci]
  • fa5980c fix(ci): tidy example submodule go.mod files
  • c1a9660 fix(ci,prompt,exec): tidy go.mod and address review findings
  • 07e5ab6 feat(prompt): add context-aware prompt routing and interactive sink support
  • e93b8ca feat(exec): add bidirectional stdio pipes for long-lived processes
  • 216e838 chore(release): pin sub-modules to v1.21.32 [skip ci]
  • 4c7b29c chore(release): 1.21.32 [skip ci]
  • 7cb946d ci(release): check out branch tip for GoReleaser and decouple submodule tags
  • b4f0402 chore(release): 1.21.31 [skip ci]
  • 29bb8d6 ci(release): rename goreleaser folder field to directory
  • Additional commits viewable in compare view

Updates github.com/labstack/echo/v4 from 4.15.2 to 4.15.4

Release notes

Sourced from github.com/labstack/echo/v4's releases.

v4.15.4

Security

Fixes GHSA-vfp3-v2gw-7wfq: an encoded path separator (%2F or %5C) in a static file URL could bypass route-level middleware (e.g. authentication on a sibling route) and disclose static files. Both StaticDirectoryHandler (used by Static/StaticFS) and the Static middleware are affected. Backport of the v5 fix (#3016, released in v5.2.1). Thanks to @​a-tt-om and @​oran-gugu for reporting.

Make serving static file releated methods and middleware not unescape path by default - so how the way Router interprets paths and Static methods/middleware is consistent.

Given following situation:

// 0.
// given folder structure:
// private.txt
// public/
// public/index.html
// public/text.txt
// public/admin/private.txt
// 1. share public/ folder contents from the server root. This folder actually contains subfolder admin which
// contents we want to forbid from downloading
e.Static("/", "public")
// 2. naively assume that everything under /admin folder is now forbidden
e.GET("/admin/*", func(c *Context) error {
return ErrForbidden
})

Then requests to /admin%2fprivate.txt would not be matched to GET /admin/* route (routing does not look unescaped path) and static file serving will use unescaped path to serve the file.

Note: this way of "guarding" subfolders will never work for for paths like /assets/../admin%2fprivate.txt which will path.Clean("/assets/../admin%2fprivate.txt") to /admin/private.txt and are servable if static file serving is configured to unescape paths.

If you want to guard routes - use middlewares on Static* methods and before Static middleware.

Breaking change / migration: If you serve files whose names contain URL-encoded characters (e.g., /hello%20world.txt → hello world.txt), you must now opt in:

	e := echo.New()
	e.EnablePathUnescapingStaticFiles = true  // <-- enable old behavior
	e.Static("/", "public")

for static middleware

	e.Use(middleware.StaticWithConfig(middleware.StaticConfig{
		EnablePathUnescaping: true, // <-- enable old behavior
	}))

... (truncated)

Changelog

Sourced from github.com/labstack/echo/v4's changelog.

v4.15.4 - 2026-06-15

Security

Fixes GHSA-vfp3-v2gw-7wfq

Make serving static file releated methods and middleware not unescape path by default - so how the way Router interprets paths and Static methods/middleware is consistent.

Given following situation:

// 0.
// given folder structure:
// private.txt
// public/
// public/index.html
// public/text.txt
// public/admin/private.txt
// 1. share public/ folder contents from the server root. This folder actually contains subfolder admin which
// contents we want to forbid from downloading
e.Static("/", "public")
// 2. naively assume that everything under /admin folder is now forbidden
e.GET("/admin/*", func(c *Context) error {
return ErrForbidden
})

Then requests to /admin%2fprivate.txt would not be matched to GET /admin/* route (routing does not look unescaped path) and static file serving will use unescaped path to serve the file.

Note: this way of "guarding" subfolders will never work for for paths like /assets/../admin%2fprivate.txt which will path.Clean("/assets/../admin%2fprivate.txt") to /admin/private.txt and are servable if static file serving is configured to unescape paths.

If you want to guard routes - use middlewares on Static* methods and before Static middleware.

Breaking change / migration: If you serve files whose names contain URL-encoded characters (e.g., /hello%20world.txt → hello world.txt), you must now opt in:

	e := echo.New()
	e.EnablePathUnescapingStaticFiles = true  // <-- enable old behavior
	e.Static("/", "public")

for static middleware

	e.Use(middleware.StaticWithConfig(middleware.StaticConfig{
		EnablePathUnescaping: true, // <-- enable old behavior
	}))

v4.15.3 - 2026-06-14

... (truncated)

Commits
  • ec79b58 Merge pull request #3020 from aldas/v4_v4-15-4_changelog
  • 2714c07 Changelog for v4.15.4 - security fix
  • 13f0ed1 Merge pull request #3019 from aldas/v4_backport_3016
  • d16a4ec backport PR 3016 from v4
  • 8f167b9 Merge pull request #3018 from aldas/v4_remove_v5_dep
  • 9afa4ba remove dependency on labstack/echo v5 introduced in go.mod and go.sum
  • 1e05f63 Merge pull request #3017 from aldas/v4_ci_updates
  • 11a3cc4 Update dependencies and add ignore for linting
  • 26bd016 Update CI action versions
  • aa52f6a ci: run workflows on the v4 branch, not just master (#3013)
  • Additional commits viewable in compare view

Updates github.com/onsi/ginkgo/v2 from 2.29.0 to 2.32.0

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.32.0

2.32.0

-fd generate RSpec-style documentation output. Thank @​woodie ! --sleep-on-failure pauses a failed spec before teardown. Thanks @​qinqon !

v2.31.0

2.31.0

Add a bunch of Claude Skills via the marketplace:

/plugin marketplace add onsi/ginkgo
/plugin install ginkgo@ginkgo

v2.30.0

2.30.0

Features

Ginkgo now allows extentions/global.Reset to support running multiple suites from within a single process. This may take some massaging on your part (see 1672) but can dramatically speed up codebases with O(hundreds) of test suites.

Thanks @​lawrencejones !

Fixes

  • Fix nested --github-output group for progress report nested inside timeline [4f62d7a]
Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.32.0

-fd generate RSpec-style documentation output. Thank @​woodie ! --sleep-on-failure pauses a failed spec before teardown. Thanks @​qinqon !

2.31.0

Add a bunch of Claude Skills via the marketplace:

/plugin marketplace add onsi/ginkgo
/plugin install ginkgo@ginkgo

2.30.0

Features

Ginkgo now allows extentions/global.Reset to support running multiple suites from within a single process. This may take some massaging on your part (see 1672) but can dramatically speed up codebases with O(hundreds) of test suites.

Thanks @​lawrencejones !

Fixes

  • Fix nested --github-output group for progress report nested inside timeline [4f62d7a]
Commits
  • 9ff1646 v2.32.0
  • 0491f2a Make -fd exclusive of -p/-procs and -randomize-all
  • 334f74a respect SilenceSkips in fd mode, add test
  • 21047ce No need for a new method.
  • 7d281e1 Break out to two methods.
  • 5313727 More integration, fewer changes.
  • b83f524 Fewer new methods.
  • 73c59df feat: add -fd flag for RSpec-style documentation output
  • 76a2074 feat: add --sleep-on-failure to pause a failed spec before teardown
  • 3c7bde4 v2.31.0
  • Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.40.0 to 1.42.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.42.1

1.42.1

Bump Dependencies

v1.42.0

1.42.0

Add a set of Claude skill as a marketplace plugin

v1.41.0

No release notes provided.

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.42.1

Bump Dependencies

1.42.0

Add a set of Claude skill as a marketplace plugin

1.41.0

Features

Add BeASlice and BeAnArray matchers

Fixes

Object formatting now detects pointer cycles to avoid runaway formatting output.

Commits

Updates github.com/prometheus/common from 0.68.1 to 0.69.0

Release notes

Sourced from github.com/prometheus/common's releases.

v0.69.0

What's Changed

Full Changelog: prometheus/common@v0.68.1...v0.69.0

Changelog

Sourced from github.com/prometheus/common's changelog.

v0.69.0 / 2026-06-17

Security / behavior changes

  • config: credentials are no longer forwarded across cross-host redirects. When FollowRedirects is enabled, the HTTP client now strips Authorization, Cookie, Proxy-Authorization and other sensitive headers, and skips basic-auth, bearer-token and OAuth2 credentials, when a redirect points to a different host. This aligns with Go's net/http behavior. Callers that relied on credentials being sent to a redirect target on another host will need to target that host directly. #901 #920 #921
  • config: LoadHTTPConfigFile now resolves relative file paths (e.g. *_file credentials, http_headers files) against the config file's own directory instead of its parent directory. Configs that worked around the old behavior by prefixing paths with the config's directory name must drop that prefix. #925

Bugfixes

  • expfmt: fix nil pointer panic when parsing empty braces {}. #922
  • model: fix Time.UnmarshalJSON for larger negative numbers. #918

Performance

  • model: reduce allocations in Time.UnmarshalJSON. #918

Internal

  • Synchronize common files from prometheus/prometheus. #917
  • Modernize Go. #919

Full Changelog: prometheus/common@v0.68.1...v0.69.0

v0.67.2 / 2025-10-28

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.67.1...v0.67.2

v0.67.1 / 2025-10-07

What's Changed

Full Changelog: prometheus/common@v0.67.0...v0.67.1

v0.67.0 / 2025-10-07

What's Changed

... (truncated)

Commits
  • e3c14a0 Merge pull request #925 from roidelapluie/roidelapluie/fix-loadhttpconfigfile...
  • a7b791d config: resolve LoadHTTPConfigFile paths relative to the config file
  • f84efec Merge pull request #918 from prometheus/time-split
  • 2269d3d Merge pull request #922 from roidelapluie/roidelapluie/fix-textparse-empty-br...
  • a1600af expfmt: fix nil pointer panic when parsing empty braces "{}"
  • 56fe395 Merge pull request #921 from roidelapluie/roidelapluie/oauth2-cross-host-check
  • 0fcda47 Merge pull request #920 from roidelapluie/roidelapluie/cross-host-sticky
  • 30ba470 Merge pull request #919 from prometheus/superq/modernize
  • 2b55b3e config: check cross-host redirect before OAuth2 token fetch
  • 428856f config: make isCrossHostRedirect sticky across the redirect chain
  • Additional commits viewable in compare view

Updates github.com/testcontainers/testcontainers-go from 0.42.0 to 0.43.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.43.0

What's Changed

⚠️ Breaking Changes

  • chore(wait)!: change url callback in wait.ForSQL to accept network.Port (#3650) @​thaJeztah

Users of wait.ForSQL need to follow the new API contract, using Moby's network.Port instead of string when building the callback function to check the URL. Please see https://golang.testcontainers.org/features/wait/sql/

Users implementing their own testcontainers.ImageProvider need to implement the new PullImageWithPlatform method introduced by this PR.

🚀 FeaturesDescription has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 26, 2026
@github-actions

github-actions Bot commented Jun 26, 2026 •
edited
Loading

Copy link
Copy Markdown

Benchstat (Other)

Base: 096470a123058529652c2f249b2126b32d720af2
Head: 0a00c845a07ee465ab55ec7f3f0440f0eb06a36c

📊 2 minor regression(s) (all within 5% threshold)

Benchmark Base Head Change p-value
ResourceSelectorQueryBuild/name-4 43.55µ 43.86µ +0.72% 0.009
ResourceSelectorQueryBuild/name_and_type-4 63.37µ 63.64µ +0.44% 0.026
✅ 1 improvement(s)
Benchmark Base Head Change p-value
ResourceSelectorQueryBuild/tags-4 17.58µ 17.35µ -1.31% 0.002
Full benchstat output 
goos: linux
goarch: amd64
pkg: github.com/flanksource/duty/bench
cpu: AMD EPYC 7763 64-Core Processor                
                                                       │ bench-base.txt │           bench-head.txt           │
                                                       │     sec/op     │    sec/op     vs base              │
InsertionForRowsWithAliases/external_users.aliases-4       590.1µ ±  2%   587.4µ ± 12%       ~ (p=0.818 n=6)
InsertionForRowsWithAliases/config_items.external_id-4     1.089m ± 11%   1.086m ± 12%       ~ (p=1.000 n=6)
InsertionOfConfigsWithProperties-4                         3.714m ±  1%   3.712m ±  1%       ~ (p=0.937 n=6)
UpdateOfConfigsWithProperties-4                            7.405m ±  0%   7.477m ±  3%       ~ (p=0.065 n=6)
ResourceSelectorConfigs/name-4                             222.1µ ±  3%   222.0µ ±  2%       ~ (p=0.589 n=6)
ResourceSelectorConfigs/name_and_type-4                    243.2µ ±  3%   240.4µ ±  7%       ~ (p=0.394 n=6)
ResourceSelectorConfigs/tags-4                             29.64m ±  4%   28.95m ±  2%       ~ (p=0.093 n=6)
ResourceSelectorQueryBuild/name-4                          43.55µ ±  1%   43.86µ ±  1%  +0.72% (p=0.009 n=6)
ResourceSelectorQueryBuild/name_and_type-4                 63.37µ ±  1%   63.64µ ±  3%  +0.44% (p=0.026 n=6)
ResourceSelectorQueryBuild/tags-4                          17.58µ ±  1%   17.35µ ±  0%  -1.31% (p=0.002 n=6)
geomean                                                    517.3µ         515.5µ        -0.35%

@github-actions

github-actions Bot commented Jun 26, 2026 •
edited
Loading

Copy link
Copy Markdown

Benchstat (RLS)

Base: 096470a123058529652c2f249b2126b32d720af2
Head: 0a00c845a07ee465ab55ec7f3f0440f0eb06a36c

📊 7 minor regression(s) (all within 5% threshold)

Benchmark Base Head Change p-value
RLS/Sample-15000/config_names/Without_RLS-4 13.29m 13.91m +4.67% 0.002
RLS/Sample-15000/config_summary/With_RLS-4 705.4m 728.5m +3.27% 0.002
RLS/Sample-15000/analysis_types/With_RLS-4 3.874m 3.951m +1.99% 0.041
RLS/Sample-15000/change_types/With_RLS-4 5.224m 5.296m +1.38% 0.002
RLS/Sample-15000/config_summary/Without_RLS-4 97.22m 98.42m +1.24% 0.026
RLS/Sample-15000/config_detail/With_RLS-4 136.5m 138.0m +1.09% 0.002
RLS/Sample-15000/configs/With_RLS-4 135.8m 136.7m +0.67% 0.004
✅ 4 improvement(s)
Benchmark Base Head Change p-value
RLS/Sample-15000/config_detail/Without_RLS-4 4.829m 4.716m -2.34% 0.002
RLS/Sample-15000/config_names/With_RLS-4 139.9m 137.7m -1.58% 0.002
RLS/Sample-15000/config_changes/With_RLS-4 142.1m 140.3m -1.27% 0.004
RLS/Sample-15000/config_changes/Without_RLS-4 5.252m 5.204m -0.91% 0.009
Full benchstat output 
goos: linux
goarch: amd64
pkg: github.com/flanksource/duty/bench
cpu: AMD EPYC 7763 64-Core Processor                
                                               │ bench-base.txt │          bench-head.txt           │
                                               │     sec/op     │   sec/op     vs base              │
RLS/Sample-15000/catalog_changes/Without_RLS-4      5.262m ± 1%   5.252m ± 1%       ~ (p=0.485 n=6)
RLS/Sample-15000/catalog_changes/With_RLS-4         140.8m ± 1%   141.0m ± 0%       ~ (p=0.394 n=6)
RLS/Sample-15000/config_changes/Without_RLS-4       5.252m ± 1%   5.204m ± 1%  -0.91% (p=0.009 n=6)
RLS/Sample-15000/config_changes/With_RLS-4          142.1m ± 1%   140.3m ± 1%  -1.27% (p=0.004 n=6)
RLS/Sample-15000/config_detail/Without_RLS-4        4.829m ± 1%   4.716m ± 1%  -2.34% (p=0.002 n=6)
RLS/Sample-15000/config_detail/With_RLS-4           136.5m ± 0%   138.0m ± 1%  +1.09% (p=0.002 n=6)
RLS/Sample-15000/config_names/Without_RLS-4         13.29m ± 1%   13.91m ± 2%  +4.67% (p=0.002 n=6)
RLS/Sample-15000/config_names/With_RLS-4            139.9m ± 1%   137.7m ± 1%  -1.58% (p=0.002 n=6)
RLS/Sample-15000/config_summary/Without_RLS-4       97.22m ± 1%   98.42m ± 4%  +1.24% (p=0.026 n=6)
RLS/Sample-15000/config_summary/With_RLS-4          705.4m ± 1%   728.5m ± 1%  +3.27% (p=0.002 n=6)
RLS/Sample-15000/configs/Without_RLS-4              7.961m ± 1%   7.975m ± 1%       ~ (p=0.589 n=6)
RLS/Sample-15000/configs/With_RLS-4                 135.8m ± 1%   136.7m ± 1%  +0.67% (p=0.004 n=6)
RLS/Sample-15000/analysis_types/Without_RLS-4       3.886m ± 0%   3.897m ± 2%       ~ (p=0.180 n=6)
RLS/Sample-15000/analysis_types/With_RLS-4          3.874m ± 4%   3.951m ± 2%  +1.99% (p=0.041 n=6)
RLS/Sample-15000/analyzer_types/Without_RLS-4       3.757m ± 0%   3.726m ± 1%       ~ (p=0.065 n=6)
RLS/Sample-15000/analyzer_types/With_RLS-4          3.751m ± 0%   3.761m ± 0%       ~ (p=0.132 n=6)
RLS/Sample-15000/change_types/Without_RLS-4         5.238m ± 1%   5.220m ± 1%       ~ (p=0.093 n=6)
RLS/Sample-15000/change_types/With_RLS-4            5.224m ± 1%   5.296m ± 4%  +1.38% (p=0.002 n=6)
RLS/Sample-15000/config_classes/Without_RLS-4       4.074m ± 1%   4.082m ± 4%       ~ (p=0.132 n=6)
RLS/Sample-15000/config_classes/With_RLS-4          137.5m ± 0%   137.4m ± 1%       ~ (p=0.818 n=6)
RLS/Sample-15000/config_types/Without_RLS-4         4.759m ± 1%   4.777m ± 1%       ~ (p=0.180 n=6)
RLS/Sample-15000/config_types/With_RLS-4            136.9m ± 0%   137.6m ± 1%       ~ (p=0.093 n=6)
geomean                                             20.86m        20.94m       +0.39%

@socket-security

socket-security Bot commented Jun 26, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedgithub.com/​onsi/​gomega@​v1.40.0 ⏵ v1.42.171 -1100100100100
Updatedgithub.com/​labstack/​echo/​v4@​v4.15.2 ⏵ v4.15.472 +1100100100100
Updatedgithub.com/​flanksource/​clicky@​v1.21.18 ⏵ v1.21.3374 +1100100100100
Updatedk8s.io/​apimachinery@​v0.36.1 ⏵ v0.36.274100100100100
Updatedk8s.io/​client-go@​v0.36.1 ⏵ v0.36.27510010075100
Updatedcloud.google.com/​go/​storage@​v1.62.3 ⏵ v1.63.076 -2100100100100
Updatedk8s.io/​api@​v0.36.1 ⏵ v0.36.276100100100100
Updatedgoogle.golang.org/​api@​v0.283.0 ⏵ v0.286.079 +1100100100100
Updatedgithub.com/​prometheus/​common@​v0.68.1 ⏵ v0.69.09210010010080
Updatedmodernc.org/​sqlite@​v1.51.0 ⏵ v1.53.084 +910010010080
Updatedgithub.com/​Azure/​azure-sdk-for-go/​sdk/​storage/​azblob@​v1.7.0 ⏵ v1.8.082 -2100100100100
Updatedgorm.io/​gorm@​v1.31.1 ⏵ v1.31.282 +1100100100100
Updatedgithub.com/​Azure/​azure-sdk-for-go/​sdk/​azidentity@​v1.13.1 ⏵ v1.14.082 -3100100100100
Updatedgithub.com/​onsi/​ginkgo/​v2@​v2.29.0 ⏵ v2.32.084 +1100100100100
Updatedgithub.com/​testcontainers/​testcontainers-go@​v0.42.0 ⏵ v0.43.087100100100100
Updatedgithub.com/​aws/​aws-sdk-go-v2/​service/​s3@​v1.102.2 ⏵ v1.104.093100100100100
Updatedcloud.google.com/​go/​cloudsqlconn@​v1.21.2 ⏵ v1.22.194100100100100
Updatedgithub.com/​aws/​aws-sdk-go-v2/​service/​eks@​v1.84.6 ⏵ v1.87.099 +1100100100100
Updatedgithub.com/​aws/​aws-sdk-go-v2/​service/​cloudwatchlogs@​v1.75.2 ⏵ v1.78.099 +1100100100100
Updatedgithub.com/​Azure/​azure-sdk-for-go/​sdk/​security/​keyvault/​azkeys@​v1.4.0 ⏵ v1.5.099100100100100

View full report

@socket-security

socket-security Bot commented Jun 26, 2026 •
edited
Loading

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: golang k8s.io/client-go is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: go.mod → golang/k8s.io/client-go@v0.36.2

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/k8s.io/client-go@v0.36.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: golang modernc.org/libc is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → golang/modernc.org/sqlite@v1.53.0 → golang/modernc.org/libc@v1.73.4

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/modernc.org/libc@v1.73.4. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: golang modernc.org/libc is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → golang/modernc.org/sqlite@v1.53.0 → golang/modernc.org/libc@v1.73.4

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/modernc.org/libc@v1.73.4. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@github-actions

github-actions Bot commented Jun 26, 2026 •
edited
Loading

Copy link
Copy Markdown

Gavel results

Gavel exited with code .

View full results

@dependabot
chore(deps): bump the go-modules group across 1 directory with 20 upd…
0a00c84 
…ates

Bumps the go-modules group with 18 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/cloudsqlconn](https://github.com/googlecloudplatform/cloud-sql-go-connector) | `1.21.2` | `1.22.1` |
| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.62.3` | `1.63.0` |
| [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.13.1` | `1.14.0` |
| [github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys](https://github.com/Azure/azure-sdk-for-go) | `1.4.0` | `1.5.0` |
| [github.com/Azure/azure-sdk-for-go/sdk/storage/azblob](https://github.com/Azure/azure-sdk-for-go) | `1.7.0` | `1.8.0` |
| [github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs](https://github.com/aws/aws-sdk-go-v2) | `1.75.2` | `1.78.0` |
| [github.com/aws/aws-sdk-go-v2/service/eks](https://github.com/aws/aws-sdk-go-v2) | `1.84.6` | `1.87.0` |
| [github.com/flanksource/clicky](https://github.com/flanksource/clicky) | `1.21.18` | `1.21.33` |
| [github.com/labstack/echo/v4](https://github.com/labstack/echo) | `4.15.2` | `4.15.4` |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.29.0` | `2.32.0` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.40.0` | `1.42.1` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.68.1` | `0.69.0` |
| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.43.0` |
| [gorm.io/gorm](https://github.com/go-gorm/gorm) | `1.31.1` | `1.31.2` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.36.1` | `0.36.2` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.1` | `0.36.2` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.51.0` | `1.53.0` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.102.2` | `1.104.0` |



Updates `cloud.google.com/go/cloudsqlconn` from 1.21.2 to 1.22.1
- [Release notes](https://github.com/googlecloudplatform/cloud-sql-go-connector/releases)
- [Changelog](https://github.com/GoogleCloudPlatform/cloud-sql-go-connector/blob/main/CHANGELOG.md)
- [Commits](GoogleCloudPlatform/cloud-sql-go-connector@v1.21.2...v1.22.1)

Updates `cloud.google.com/go/storage` from 1.62.3 to 1.63.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@storage/v1.62.3...compute/v1.63.0)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.13.1 to 1.14.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azidentity/v1.13.1...sdk/azcore/v1.14.0)

Updates `github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.4.0...sdk/azcore/v1.5.0)

Updates `github.com/Azure/azure-sdk-for-go/sdk/storage/azblob` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.7.0...sdk/azcore/v1.8.0)

Updates `github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs` from 1.75.2 to 1.78.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.75.2...service/s3/v1.78.0)

Updates `github.com/aws/aws-sdk-go-v2/service/eks` from 1.84.6 to 1.87.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/eks/v1.84.6...service/s3/v1.87.0)

Updates `github.com/flanksource/clicky` from 1.21.18 to 1.21.33
- [Release notes](https://github.com/flanksource/clicky/releases)
- [Changelog](https://github.com/flanksource/clicky/blob/main/CHANGELOG.md)
- [Commits](flanksource/clicky@v1.21.18...v1.21.33)

Updates `github.com/labstack/echo/v4` from 4.15.2 to 4.15.4
- [Release notes](https://github.com/labstack/echo/releases)
- [Changelog](https://github.com/labstack/echo/blob/v4.15.4/CHANGELOG.md)
- [Commits](labstack/echo@v4.15.2...v4.15.4)

Updates `github.com/onsi/ginkgo/v2` from 2.29.0 to 2.32.0
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.29.0...v2.32.0)

Updates `github.com/onsi/gomega` from 1.40.0 to 1.42.1
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.40.0...v1.42.1)

Updates `github.com/prometheus/common` from 0.68.1 to 0.69.0
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.68.1...v0.69.0)

Updates `github.com/testcontainers/testcontainers-go` from 0.42.0 to 0.43.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.42.0...v0.43.0)

Updates `google.golang.org/api` from 0.283.0 to 0.286.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.283.0...v0.286.0)

Updates `gorm.io/gorm` from 1.31.1 to 1.31.2
- [Release notes](https://github.com/go-gorm/gorm/releases)
- [Commits](go-gorm/gorm@v1.31.1...v1.31.2)

Updates `k8s.io/api` from 0.36.1 to 0.36.2
- [Commits](kubernetes/api@v0.36.1...v0.36.2)

Updates `k8s.io/apimachinery` from 0.36.1 to 0.36.2
- [Commits](kubernetes/apimachinery@v0.36.1...v0.36.2)

Updates `k8s.io/client-go` from 0.36.1 to 0.36.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.36.1...v0.36.2)

Updates `modernc.org/sqlite` from 1.51.0 to 1.53.0
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.51.0...v1.53.0)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.102.2 to 1.104.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.102.2...service/s3/v1.104.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/cloudsqlconn
  dependency-version: 1.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/eks
  dependency-version: 1.87.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.104.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/storage/azblob
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/flanksource/clicky
  dependency-version: 1.21.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/labstack/echo/v4
  dependency-version: 4.15.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.42.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/prometheus/common
  dependency-version: 0.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/api
  dependency-version: 0.286.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: gorm.io/gorm
  dependency-version: 1.31.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: k8s.io/api
  dependency-version: 0.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: k8s.io/client-go
  dependency-version: 0.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: modernc.org/sqlite
  dependency-version: 1.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-modules-3dae3c4301 branch from 7449096 to 0a00c84 Compare June 29, 2026 09:47
@dependabot @github

dependabot Bot commented on behalf of github Jun 30, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 30, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-modules-3dae3c4301 branch June 30, 2026 09:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants