Skip to content

chore(deps): bump the go-modules group with 22 updates - #220

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-926a575071
Open

chore(deps): bump the go-modules group with 22 updates#220
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-926a575071

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown

Bumps the go-modules group with 22 updates:

Package From To
cloud.google.com/go/pubsub/v2 2.6.1 2.6.2
github.com/aws/aws-sdk-go-v2 1.43.5 1.43.7
github.com/aws/aws-sdk-go-v2/config 1.32.36 1.32.38
github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue 1.20.60 1.20.62
github.com/aws/aws-sdk-go-v2/service/cloudwatch 1.66.4 1.66.6
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs 1.82.1 1.82.3
github.com/aws/aws-sdk-go-v2/service/dynamodb 1.63.2 1.63.4
github.com/aws/aws-sdk-go-v2/service/sns 1.42.5 1.42.7
github.com/aws/aws-sdk-go-v2/service/sqs 1.46.5 1.46.7
github.com/dapr/dapr 1.18.2 1.18.3
github.com/mmcdole/gofeed 1.3.0 1.4.2
github.com/modelcontextprotocol/go-sdk 1.6.0 1.7.0
github.com/posthog/posthog-go 1.23.0 1.23.1
github.com/rabbitmq/amqp091-go 1.13.0 1.14.0
github.com/redis/go-redis/v9 9.21.0 9.22.0
github.com/stretchr/testify 1.12.0 1.12.1
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.67.0 0.70.0
google.golang.org/api 0.285.0 0.287.1
google.golang.org/grpc 1.83.0 1.83.1
k8s.io/apimachinery 0.36.3 0.36.4
k8s.io/client-go 0.36.3 0.36.4
modernc.org/sqlite 1.56.0 1.57.0

Updates cloud.google.com/go/pubsub/v2 from 2.6.1 to 2.6.2

Release notes

Sourced from cloud.google.com/go/pubsub/v2's releases.

pubsub: v2.6.2

2.6.2 (2026-08-19)

Bug Fixes

Commits

Updates github.com/aws/aws-sdk-go-v2 from 1.43.5 to 1.43.7

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.36 to 1.32.38

Commits

Updates github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue from 1.20.60 to 1.20.62

Commits

Updates github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.66.4 to 1.66.6

Commits

Updates github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.82.1 to 1.82.3

Commits

Updates github.com/aws/aws-sdk-go-v2/service/dynamodb from 1.63.2 to 1.63.4

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sns from 1.42.5 to 1.42.7

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sqs from 1.46.5 to 1.46.7

Commits

Updates github.com/dapr/dapr from 1.18.2 to 1.18.3

Release notes

Sourced from github.com/dapr/dapr's releases.

Dapr Runtime v1.18.3

Dapr 1.18.3

This update contains the following bug fixes:

Actor state store components cannot be hot reloaded

Problem

With hot reloading enabled, daprd refused to apply any change to a state store component that is, or would become, the actor state store. Creating, updating, or deleting such a component logged Aborting to hot-reload a state store component that is used as an actor state store and the change was silently ignored until daprd was restarted. In particular, a daprd which started without an actor state store could never gain working actor hosting or Workflow APIs: adding actorStateStore: "true" to a state store component had no effect, and every workflow operation kept failing with the state store is not configured to use the actor runtime.

Impact

You were affected if you relied on hot reloading to manage components and needed to introduce, replace, or remove the actor state store without restarting daprd; for example enabling workflows on a running sidecar by promoting an existing state store to the actor state store.

Root Cause

The restriction was added when the actors subsystem had no support for its state store changing at runtime: the store name was captured once at startup, the decision to enable actor hosting was made once at startup, and nothing reacted to the store later appearing, changing, or disappearing.

Solution

The actor state store can now be hot reloaded, and the actors subsystem reconciles hosting with the store at runtime:

  • Adding an actor state store (creating a marked component, or marking an existing state store) enables actor hosting: the app's actor types and the workflow actor types are advertised to placement, and the actor and Workflow APIs start working; including for workflow workers that connected before the store existed.
  • Removing the actor state store (deleting the component, or unmarking it) shuts down actor hosting in-process: hosted actors are drained and deactivated (the app receives deactivations), actor types are de-advertised from placement and the Scheduler (daprd remains an actor client and can still invoke actors hosted elsewhere), and actor state and Workflow APIs return the state store is not configured to use the actor runtime until a store is configured again. daprd itself keeps running, and hosting resumes automatically when a store returns, with no app or workflow-worker reconnection required.
  • Updating the actor state store component in place (for example a hot reload picking up a rotated secret referenced by the component) swaps the store instance without interrupting actor hosting: the store is resolved per call, so hosted actors and running workflows continue against the same backing store. Draining is reserved for the store being removed, unmarked, or replaced by a differently-named component.

Two further consistency fixes ride along with this change:

  • Actor types are now only advertised to placement while an actor state store is configured. Previously an app declaring actor entities with no actor state store at all would still receive actor invocations, despite actor state, reminders, and workflows being non-functional, contradicting the documented requirement and the actor hosting disabled log.
  • Hot loading a second component marked as the actor state store is skipped with an error log naming the existing actor state store, instead of the duplicate silently corrupting the component store bookkeeping.

... (truncated)

Commits

Updates github.com/mmcdole/gofeed from 1.3.0 to 1.4.2

Release notes

Sourced from github.com/mmcdole/gofeed's releases.

v1.4.2

This patch fixes two parser regressions. JSON feeds larger than the 4096-byte detection window are now detected and parsed completely, and RSS feeds with an unknown default namespace on <rss> are parsed as native RSS while recognized extension namespaces retain their meaning.

Changes

  • Detect JSON feeds larger than the sniffing window. (#348)
  • Tolerate an unknown default namespace on the RSS root. (#347)
  • Update actions/setup-go from v6 to v7. (#337)

Full changelog: mmcdole/gofeed@v1.4.1...v1.4.2

v1.4.1

This patch fixes namespace handling for Atom links embedded in RSS feeds. Atom self and WebSub hub links are now preserved in Feed.Extensions["atom"]["link"] even when a feed uses a local default namespace or a different prefix.

It also makes prefixed Atom and RDF documents parse consistently, preserves compatibility with commonly seen content:encoded namespace variants, and updates golang.org/x/net to v0.57.0.

Changes

  • Fix namespace-aware Atom extension parsing. (#339)
  • Update golang.org/x/net to v0.57.0. (#336)

Full changelog: mmcdole/gofeed@v1.4.0...v1.4.1

v1.4.0

This release focuses on bug fixes for malformed and off-spec feeds. Illegal XML control characters, unusual date formats, incorrectly typed JSON Feed fields, and unescaped ampersands in URLs could previously break a parse or silently drop content. The parser now handles these cases without failing the feed or losing the affected content.

It also fixes a lazy-initialization data race when a default-configured Parser is reused across goroutines (#278). Three new options give callers more control over resource use: an HTTP response-size limit, optional retention of the original source feed, and a switch to disable RSS content-image scanning.

For RSS and Atom, the universal Parser.Parse method no longer holds two complete copies of the raw feed in memory during format detection. It examines the first 4 KiB, detects the format, and then parses directly from the reader. The returned Feed is still fully materialized, so this is not a streaming API. JSON Feed decoding still buffers the complete document.

Compatibility

  • Go 1.25 or newer is required. v1.4.0 updates golang.org/x/net from v0.4.0 to v0.56.0 to resolve 22 reachable vulnerabilities reported by govulncheck; that release and its golang.org/x/text dependency require Go 1.25.
  • ParseURL now applies a 30-second request timeout. ParseURLWithContext continues to use the caller's context.
  • Parse now examines only the first 4 KiB to detect the feed type. RSS and Atom roots must begin within that window. In v1.4.0, a JSON Feed whose complete document does not fit within the window is not detected by the universal Parser and returns ErrFeedTypeNotDetected.
  • The text returned by ErrFeedTypeNotDetected.Error() now begins with lowercase failed.
  • No exported v1 identifier was removed. Feed now has private storage for the original source feed, so external positional Feed{...} literals no longer compile; keyed literals are unaffected.

Added

  • Add Parser.MaxByteSize and ErrResponseTooLarge to limit response bodies fetched by ParseURL and ParseURLWithContext. (#286)
  • Add Parser.KeepOriginalFeed and Feed.OriginalFeed() for access to the parsed *rss.Feed, *atom.Feed, or *json.Feed. (#289)
  • Add DefaultRSSTranslator.DisableContentImageScan to skip the HTML image fallback on large feeds while preserving existing behavior by default. (#330)

Parsing and translation fixes

  • Fix a data race when the same default-configured Parser is reused across goroutines. (#278)
  • Limit universal-parser format detection to a 4 KiB lookahead, parse RSS and Atom directly from the reader without retaining two complete raw copies, and propagate reader I/O errors. (#327)
  • Preserve parse errors when closing an HTTP response also returns an error.
  • Tolerate non-HTTP URI schemes and resolve RSS and Atom xml:base values without mutating sibling scope. (#240, #283, #290)

... (truncated)

Commits
  • c8090a6 Tolerate an unknown default namespace on the RSS root (#347)
  • 838c04c Detect JSON feeds larger than the sniffing window (#348)
  • 41f33bc Bump actions/setup-go from 6 to 7 (#337)
  • 06ac0aa Fix namespace-aware extension parsing (#339)
  • e010ca0 Bump golang.org/x/net from 0.56.0 to 0.57.0 (#336)
  • ec8fd42 Remove defunct Travis CI configuration (#335)
  • 16bfe36 Route the parser element loops through one shared helper (#333)
  • d9ae564 Flatten the translator micro-methods (#332)
  • 33df57e Add CONTRIBUTING.md (#331)
  • f8a5f28 Add DisableContentImageScan and drop the goquery dependency (#330)
  • Additional commits viewable in compare view

Updates github.com/modelcontextprotocol/go-sdk from 1.6.0 to 1.7.0

Release notes

Sourced from github.com/modelcontextprotocol/go-sdk's releases.

v1.7.0

This release brings full support for protocol version 2026-07-28. The wire protocol is largely rewritten: a stateless model with per-request _meta, a new server/discover RPC replacing the initialize handshake, multi-round-trip requests (MRTR) replacing server-initiated calls, a unified subscriptions/listen stream replacing free-floating change notifications, standardised HTTP headers, and the formal deprecation of the roots, sampling, and logging features.

The streamable HTTP transport accepts requests at protocol version 2026-07-28 only when StreamableHTTPOptions.Stateless = true. If you want to expose the new protocol over HTTP, set Stateless = true; if you want to keep stateful sessions, your clients will negotiate down to 2025-11-25.

Backward compatibility with 2025-11-25 and earlier is preserved on every endpoint. The SDK negotiates the highest mutually-supported version at connect time. The new protocol is enabled by default for new clients; existing legacy clients and servers continue to work unchanged.

This release consolidates everything shipped in v1.7.0-pre.1, v1.7.0-pre.2, and v1.7.0-pre.3. Thank you to everyone who exercised the pre-releases and filed feedback.

v1.7.0-pre.3 is already successfully used by GitHub, serving more than half a million users.

Make MCP Stateless (SEP-2575) & Sessionless (SEP-2567)

The initialize/notifications/initialized handshake is removed in 2026-07-28. Each request now carries _meta.io.modelcontextprotocol/{protocolVersion,clientInfo,clientCapabilities} so the server can validate the peer without state. A new server/discover RPC lets clients learn the server's supported versions and capabilities up front; the SDK falls back to legacy initialize if discover fails. Resumability (Last-Event-ID, standalone GET) is removed; ping, logging/setLevel, resources/subscribe, and resources/unsubscribe are also removed on this revision and rejected with MethodNotFound.

Subscriptions listen (SEP-2575)

The legacy tools/list_changed, prompts/list_changed, resources/list_changed, and resources/updated notifications are replaced by a single long-lived subscriptions/listen request whose response stream multiplexes every change notification the client opted into, each tagged with io.modelcontextprotocol/subscriptionId. The SDK opens this stream automatically on Client.Connect when the corresponding list-changed handler is set; servers route notifications only to subscribed sessions.

Multi Round-Trip Requests (SEP-2322)

Server-to-client requests for elicitation, sampling, and roots are no longer issued as fresh JSON-RPC requests. Instead a tool/prompt/resource handler returns an InputRequiredResult whose inputRequests field carries the requests; the client fulfils each and retries the original call with inputResponses populated. The SDK ships client- and server-side middleware that handles this transparently in both directions, including a server-side compatibility shim that lets MRTR handlers also work against legacy clients.

Cacheable list results (SEP-2549)

tools/list, prompts/list, resources/list, resources/templates/list, resources/read, and server/discover results now carry ttlMs and cacheScope fields. Clients honour them as freshness hints to reduce polling; shared intermediaries use cacheScope to decide whether responses may be cached.

HTTP standardization (SEP-2243)

The streamable HTTP transport now mirrors selected fields from the JSON-RPC body into HTTP headers (Mcp-Method, Mcp-Name, Mcp-Protocol-Version, Mcp-Param-*) so network intermediaries can route and observe MCP traffic without deep packet inspection. Tools can declare per-parameter passthrough via x-mcp-header annotations on their input schema. Body↔header mismatches return -32020 HeaderMismatch.

... (truncated)

Commits

Updates github.com/posthog/posthog-go from 1.23.0 to 1.23.1

Release notes

Sourced from github.com/posthog/posthog-go's releases.

1.23.1

Unreleased

Changelog

Sourced from github.com/posthog/posthog-go's changelog.

1.23.1

Patch Changes

  • ec8f6c0: Normalize event timestamps to the equivalent UTC instant before serializing legacy batch and Capture V1 payloads.
Commits
  • 608be68 chore: release v1.23.1 [version bump] [skip ci]
  • ec8f6c0 fix: normalize SDK timestamps to UTC (#284)
  • 7fb10e6 ci: remove automerge from upgrade workflow (#282)
  • 4127d7d ci: Upgrade posthog-go in the PostHog monorepo after releases (#281)
  • f7b86e8 chore(deps): bump the github-actions group with 3 updates (#280)
  • a02322f chore: group Dependabot updates (#278)
  • e6df366 chore(deps): bump github/codeql-action/analyze from 4.35.5 to 4.37.4 (#274)
  • 3a67823 chore(deps-dev): bump @​changesets/cli from 2.31.0 to 2.31.1 (#269)
  • f2742c5 chore(deps): bump github.com/goccy/go-json from 0.10.5 to 0.10.6 (#271)
  • 5bb890e chore(deps): bump actions/checkout from 6.0.2 to 7.0.1 (#273)
  • Additional commits viewable in compare view

Updates github.com/rabbitmq/amqp091-go from 1.13.0 to 1.14.0

Release notes

Sourced from github.com/rabbitmq/amqp091-go's releases.

v1.14.0

What's Changed

Full Changelog: rabbitmq/amqp091-go@v1.13.0...v1.14.0

Changelog

Sourced from github.com/rabbitmq/amqp091-go's changelog.

v1.14.0 (2026-08-18)

Full Changelog

Implemented enhancements:

  • refactor: extract shared close prologue into beginClose() #376 (suchitd)

Fixed bugs:

  • Retry consumer recovery instead of cancelling on a failed re-subscribe #380 (lukebakken)
  • Fix auto-recovery correctness gaps #379 (suchitd)
  • Enforce frame size in pre-negotiation state #377 (Zerpet)
  • test: retry cleanup connection after clearing memory alarm #375 (suchitd)
  • fix: eliminate flakiness in TestTLSHandshake #373 (suchitd)
  • fix: close goroutine leaks from Close()/Reconnect() races #372 (suchitd)

Merged pull requests:

  • chore(deps): reduce github-actions dependabot updates to weekly #384 (suchitd)
  • chore(deps): bump github/codeql-action from 4.37.5 to 4.37.6 in the github-actions group #383 (dependabot[bot])
  • docs: update CLAUDE.md with lifecycle/log files and updated recovery details #382 (suchitd)
  • chore(deps): bump github/codeql-action from 4.37.4 to 4.37.5 in the github-actions group #381 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.37.3 to 4.37.4 in the github-actions group #378 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4 to 4.37.3 in the github-actions group #374 (dependabot[bot])
Commits
  • 387d77a Release v1.14.0
  • 20e2bed Merge pull request #384 from rabbitmq/ci/gha-weekly-bump
  • 77f00bf chore(deps): reduce github-actions dependabot updates to weekly
  • b54f1b2 chore(deps): bump github/codeql-action in the github-actions group (#383)
    • ...

    Description has been truncated

@dependabot
chore(deps): bump the go-modules group with 22 updates
1421f39 
Bumps the go-modules group with 22 updates:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/pubsub/v2](https://github.com/googleapis/google-cloud-go) | `2.6.1` | `2.6.2` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.43.5` | `1.43.7` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.36` | `1.32.38` |
| [github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue](https://github.com/aws/aws-sdk-go-v2) | `1.20.60` | `1.20.62` |
| [github.com/aws/aws-sdk-go-v2/service/cloudwatch](https://github.com/aws/aws-sdk-go-v2) | `1.66.4` | `1.66.6` |
| [github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs](https://github.com/aws/aws-sdk-go-v2) | `1.82.1` | `1.82.3` |
| [github.com/aws/aws-sdk-go-v2/service/dynamodb](https://github.com/aws/aws-sdk-go-v2) | `1.63.2` | `1.63.4` |
| [github.com/aws/aws-sdk-go-v2/service/sns](https://github.com/aws/aws-sdk-go-v2) | `1.42.5` | `1.42.7` |
| [github.com/aws/aws-sdk-go-v2/service/sqs](https://github.com/aws/aws-sdk-go-v2) | `1.46.5` | `1.46.7` |
| [github.com/dapr/dapr](https://github.com/dapr/dapr) | `1.18.2` | `1.18.3` |
| [github.com/mmcdole/gofeed](https://github.com/mmcdole/gofeed) | `1.3.0` | `1.4.2` |
| [github.com/modelcontextprotocol/go-sdk](https://github.com/modelcontextprotocol/go-sdk) | `1.6.0` | `1.7.0` |
| [github.com/posthog/posthog-go](https://github.com/posthog/posthog-go) | `1.23.0` | `1.23.1` |
| [github.com/rabbitmq/amqp091-go](https://github.com/rabbitmq/amqp091-go) | `1.13.0` | `1.14.0` |
| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.21.0` | `9.22.0` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.12.0` | `1.12.1` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.67.0` | `0.70.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.285.0` | `0.287.1` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.0` | `1.83.1` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.36.3` | `0.36.4` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.3` | `0.36.4` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.56.0` | `1.57.0` |


Updates `cloud.google.com/go/pubsub/v2` from 2.6.1 to 2.6.2
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@pubsub/v2.6.1...pubsub/v2.6.2)

Updates `github.com/aws/aws-sdk-go-v2` from 1.43.5 to 1.43.7
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.43.5...v1.43.7)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.36 to 1.32.38
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.36...config/v1.32.38)

Updates `github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue` from 1.20.60 to 1.20.62
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@feature/dynamodb/attributevalue/v1.20.60...feature/dynamodb/attributevalue/v1.20.62)

Updates `github.com/aws/aws-sdk-go-v2/service/cloudwatch` from 1.66.4 to 1.66.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/fsx/v1.66.4...service/fsx/v1.66.6)

Updates `github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs` from 1.82.1 to 1.82.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ecs/v1.82.1...service/ecs/v1.82.3)

Updates `github.com/aws/aws-sdk-go-v2/service/dynamodb` from 1.63.2 to 1.63.4
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.63.2...service/ecs/v1.63.4)

Updates `github.com/aws/aws-sdk-go-v2/service/sns` from 1.42.5 to 1.42.7
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/amp/v1.42.5...service/amp/v1.42.7)

Updates `github.com/aws/aws-sdk-go-v2/service/sqs` from 1.46.5 to 1.46.7
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/sqs/v1.46.5...service/sqs/v1.46.7)

Updates `github.com/dapr/dapr` from 1.18.2 to 1.18.3
- [Release notes](https://github.com/dapr/dapr/releases)
- [Changelog](https://github.com/dapr/dapr/blob/master/RELEASE.md)
- [Commits](dapr/dapr@v1.18.2...v1.18.3)

Updates `github.com/mmcdole/gofeed` from 1.3.0 to 1.4.2
- [Release notes](https://github.com/mmcdole/gofeed/releases)
- [Commits](mmcdole/gofeed@v1.3.0...v1.4.2)

Updates `github.com/modelcontextprotocol/go-sdk` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/modelcontextprotocol/go-sdk/releases)
- [Commits](modelcontextprotocol/go-sdk@v1.6.0...v1.7.0)

Updates `github.com/posthog/posthog-go` from 1.23.0 to 1.23.1
- [Release notes](https://github.com/posthog/posthog-go/releases)
- [Changelog](https://github.com/PostHog/posthog-go/blob/main/CHANGELOG.md)
- [Commits](PostHog/posthog-go@v1.23.0...v1.23.1)

Updates `github.com/rabbitmq/amqp091-go` from 1.13.0 to 1.14.0
- [Release notes](https://github.com/rabbitmq/amqp091-go/releases)
- [Changelog](https://github.com/rabbitmq/amqp091-go/blob/main/CHANGELOG.md)
- [Commits](rabbitmq/amqp091-go@v1.13.0...v1.14.0)

Updates `github.com/redis/go-redis/v9` from 9.21.0 to 9.22.0
- [Release notes](https://github.com/redis/go-redis/releases)
- [Changelog](https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md)
- [Commits](redis/go-redis@v9.21.0...v9.22.0)

Updates `github.com/stretchr/testify` from 1.12.0 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.12.0...v1.12.1)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.67.0 to 0.70.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.67.0...zpages/v0.70.0)

Updates `google.golang.org/api` from 0.285.0 to 0.287.1
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.285.0...v0.287.1)

Updates `google.golang.org/grpc` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.0...v1.83.1)

Updates `k8s.io/apimachinery` from 0.36.3 to 0.36.4
- [Commits](kubernetes/apimachinery@v0.36.3...v0.36.4)

Updates `k8s.io/client-go` from 0.36.3 to 0.36.4
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.36.3...v0.36.4)

Updates `modernc.org/sqlite` from 1.56.0 to 1.57.0
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.56.0...v1.57.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/pubsub/v2
  dependency-version: 2.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.43.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue
  dependency-version: 1.20.62
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/cloudwatch
  dependency-version: 1.66.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs
  dependency-version: 1.82.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/dynamodb
  dependency-version: 1.63.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sns
  dependency-version: 1.42.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sqs
  dependency-version: 1.46.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/dapr/dapr
  dependency-version: 1.18.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/mmcdole/gofeed
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/modelcontextprotocol/go-sdk
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/posthog/posthog-go
  dependency-version: 1.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/rabbitmq/amqp091-go
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/redis/go-redis/v9
  dependency-version: 9.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.70.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/api
  dependency-version: 0.287.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: k8s.io/client-go
  dependency-version: 0.36.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: modernc.org/sqlite
  dependency-version: 1.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants