Skip to content

build(deps): bump the dependencies group across 1 directory with 6 updates - #236

Merged
toga4-bot[bot] merged 1 commit into
mainfrom
dependabot/go_modules/dependencies-5b7bbe4133
Sep 9, 2026
Merged

build(deps): bump the dependencies group across 1 directory with 6 updates#236
toga4-bot[bot] merged 1 commit into
mainfrom
dependabot/go_modules/dependencies-5b7bbe4133

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 4 updates in the / directory: cloud.google.com/go/spanner, github.com/testcontainers/testcontainers-go/modules/gcloud, golang.org/x/sync and google.golang.org/api.

Updates cloud.google.com/go/spanner from 1.94.0 to 1.95.0

Release notes

Sourced from cloud.google.com/go/spanner's releases.

spanner: v1.95.0

1.95.0 (2026-08-24)

Features

  • spanner: Penalize channels that returned Unavailable or ResourceExhausted in the dynamic channel pool picker (#20390) (e1feec4)
  • spanner: Support caller-owned OpenTelemetry client metrics (#20388) (f1e77ce)

Bug Fixes

  • spanner: Stop leaking endpointLatencyRegistry cleanup goroutine (#20416) (95bbcc7), refs #14488
Commits
  • 54e5a42 chore(main): release spanner 1.95.0 (#20415)
  • f1e77ce feat(spanner): support caller-owned OpenTelemetry client metrics (#20388)
  • 95bbcc7 fix(spanner): stop leaking endpointLatencyRegistry cleanup goroutine (#20416)
  • e1feec4 feat(spanner): penalize channels that returned Unavailable or ResourceExhaust...
  • 661b4f0 chore(agentplatform): Remove the stale memorybanks Go file
  • 85eac2b chore: release main (#20384)
  • f059575 chore(main): release pubsub 1.51.1 (#20400)
  • 0d7bd01 chore: send developerknowledge docs to the developers bucket (#20405)
  • 56250a2 feat(google/developers/knowledge/v1): onboard developerknowledge library (#20...
  • f9efbe7 feat(google/maps/mapmanagement/v2): onboard a new library (#20402)
  • Additional commits viewable in compare view

Updates github.com/testcontainers/testcontainers-go/modules/gcloud from 0.43.0 to 0.44.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go/modules/gcloud's releases.

v0.44.0

What's Changed

🔒 Security

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

... (truncated)

Commits
  • 007bd6b chore: use new version (v0.44.0) in modules and examples
  • 6fdd2fd feat: allow overriding the session ID (#3051)
  • 0cfd2f9 chore(deps): bump slackapi/slack-github-action from 3.0.3 to 4.0.0 (#3788)
  • 5dda4cd chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#3789)
  • 8cfecf9 chore(deps): bump docker/setup-docker-action from 5.1.0 to 5.4.0 (#3790)
  • 1d054f6 fix: escape the container name in the Docker name filter (#3837)
  • 2f869d6 fix: should print max information by default (#3459)
  • 62941e8 chore(azurite): tidy module dependencies (#3838)
  • 632ee7b security: fix Dependabot alerts for grpc and OTel (#3835)
  • caa68c6 chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1...
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.22.0 to 0.23.0

Commits
  • f75267d semaphore: panic on negative capacity
  • 3ffd83c all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Updates google.golang.org/api from 0.291.0 to 0.297.0

Release notes

Sourced from google.golang.org/api's releases.

v0.297.0

0.297.0 (2026-09-01)

Features

  • Move to go1.26.0 as the lowest supported go version (#3724) (7770e01)

v0.296.0

0.296.0 (2026-08-31)

Features

v0.295.0

0.295.0 (2026-08-28)

Features

v0.294.0

0.294.0 (2026-08-26)

Features

v0.293.0

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.297.0 (2026-09-01)

Features

  • Move to go1.26.0 as the lowest supported go version (#3724) (7770e01)

0.296.0 (2026-08-31)

Features

0.295.0 (2026-08-28)

Features

0.294.0 (2026-08-26)

Features

0.293.0 (2026-08-11)

Features

... (truncated)

Commits

Updates google.golang.org/grpc from 1.83.0 to 1.83.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)

Release 1.83.1

Security

  • xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
  • xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
  • xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
  • xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
  • xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Performance

  • transport: Restrict memory overhead of buffering small data frames. (#9331)
Commits

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates

Bumps the dependencies group with 4 updates in the / directory: [cloud.google.com/go/spanner](https://github.com/googleapis/google-cloud-go), [github.com/testcontainers/testcontainers-go/modules/gcloud](https://github.com/testcontainers/testcontainers-go), [golang.org/x/sync](https://github.com/golang/sync) and [google.golang.org/api](https://github.com/googleapis/google-api-go-client).


Updates `cloud.google.com/go/spanner` from 1.94.0 to 1.95.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@spanner/v1.94.0...spanner/v1.95.0)

Updates `github.com/testcontainers/testcontainers-go/modules/gcloud` from 0.43.0 to 0.44.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.43.0...v0.44.0)

Updates `golang.org/x/sync` from 0.22.0 to 0.23.0
- [Commits](golang/sync@v0.22.0...v0.23.0)

Updates `google.golang.org/api` from 0.291.0 to 0.297.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.291.0...v0.297.0)

Updates `google.golang.org/grpc` from 1.83.0 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.0...v1.83.2)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

---
updated-dependencies:
- dependency-name: cloud.google.com/go/spanner
  dependency-version: 1.95.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/testcontainers/testcontainers-go/modules/gcloud
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: google.golang.org/api
  dependency-version: 0.297.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 9, 2026
@toga4-bot
toga4-bot Bot enabled auto-merge September 9, 2026 00:26
@toga4-bot
toga4-bot Bot merged commit 7ec3695 into main Sep 9, 2026
4 checks passed
@toga4-bot
toga4-bot Bot deleted the dependabot/go_modules/dependencies-5b7bbe4133 branch September 9, 2026 00:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants