Skip to content

deps(deps): bump the gomod-minor-and-patch group with 28 updates#236

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/gomod-minor-and-patch-fd3a0d643c
Open

deps(deps): bump the gomod-minor-and-patch group with 28 updates#236
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/gomod-minor-and-patch-fd3a0d643c

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 7, 2026

Bumps the gomod-minor-and-patch group with 28 updates:

Package From To
cloud.google.com/go/storage 1.49.0 1.62.1
github.com/MShekow/directory-checksum 1.4.9 1.4.17
github.com/aws/aws-lambda-go 1.47.0 1.54.0
github.com/aws/aws-sdk-go 1.50.36 1.55.8
github.com/aws/aws-secretsmanager-caching-go 1.1.3 1.2.0
github.com/cloudflare/cloudflare-go 0.104.0 0.116.0
github.com/disgoorg/disgo 0.18.5 0.19.3
github.com/fatih/color 1.18.0 1.19.0
github.com/go-git/go-billy/v5 5.8.0 5.9.0
github.com/go-git/go-git/v5 5.18.0 5.19.0
github.com/onsi/gomega 1.38.2 1.40.0
github.com/otiai10/copy 1.14.0 1.14.1
github.com/pulumi/pulumi-aws/sdk/v6 6.83.0 6.83.3
github.com/pulumi/pulumi-cloudflare/sdk/v6 6.2.0 6.15.0
github.com/pulumi/pulumi-docker/sdk/v4 4.5.8 4.11.2
github.com/pulumi/pulumi-gcp/sdk/v8 8.0.0 8.41.1
github.com/pulumi/pulumi-kubernetes/sdk/v4 4.18.1 4.30.0
github.com/pulumi/pulumi-mongodbatlas/sdk/v3 3.30.0 3.38.0
github.com/pulumi/pulumi-random/sdk/v4 4.17.0 4.19.2
github.com/pulumi/pulumi/pkg/v3 3.184.0 3.236.0
github.com/pulumi/pulumi/sdk/v3 3.184.0 3.236.0
github.com/samber/lo 1.38.1 1.53.0
github.com/tmc/langchaingo 0.1.13 0.1.14
go.mongodb.org/mongo-driver 1.16.1 1.17.9
golang.org/x/oauth2 0.35.0 0.36.0
google.golang.org/api 0.223.0 0.274.0
k8s.io/apimachinery 0.35.0 0.36.0
k8s.io/client-go 0.35.0 0.36.0

Updates cloud.google.com/go/storage from 1.49.0 to 1.62.1

Commits
  • f4b10ee chore: librarian release pull request: 20260413T041034Z (#14421)
  • dc245af feat(storage): add client feature tracking support (#14320)
  • cfdd7ba chore(.github/CODEOWNERS): Add AION SDK as code owners for the auth library (...
  • e2d578c test(datastore): skip flaky tests due to datastore contention (#14416)
  • 56e1a62 chore: librarian release pull request: 20260409T222456Z (#14413)
  • 5ca653a chore: regenerate libraries using protobuf 31, and update generation check wo...
  • b4c40aa chore(all): update module go.opentelemetry.io/otel/sdk to v1.43.0 [SECURITY] ...
  • eb896d0 chore(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 in /comp...
  • 26c0341 chore(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 in /cont...
  • 8a7febc feat(firestore): Implement Search pipeline stage and related expressions (#14...
  • Additional commits viewable in compare view

Updates github.com/MShekow/directory-checksum from 1.4.9 to 1.4.17

Release notes

Sourced from github.com/MShekow/directory-checksum's releases.

v1.4.17

Changelog

  • b5ec9cb649e9298e020b860d44de3655d8dc99db chore(deps): pin GitHub Actions digests (#117)
  • 9e14614cba7ea4d2e45bff7d898976b472033023 chore: configure Renovate to pin GitHub Action digests
  • d0db2cce14af7ef180eab64db0a8f413a1b0a2bf chore(deps): update dependency go to v1.26.2 (#116)
  • e7b210875c142a2858cccb0988451491413f064e chore(deps): update anchore/scan-action action to v7.4.0 (#115)
  • ebcb84ba64784235854e0e9aeed2270a8af825ad chore(deps): update anchore/sbom-action action to v0.24.0 (#114)
  • db43f1ecb8acf2c8cf9fa982f75aa762503a563b chore(deps): update actions/setup-go action to v6.4.0 (#113)
  • a3f08e15d4a61e1c01cd0fb911db75b13cf66145 chore(deps): update anchore/sbom-action action to v0.23.1 (#112)
  • 3dac27826410e350598c6aa2176dbaa05f6310f6 chore(deps): update dominikh/staticcheck-action action to v1.4.1 (#111)
  • 1c6495a73c454eac1d963a6d8c4e3eda0fb04ec6 chore(deps): update actions/attest-build-provenance action to v4.1.0 (#110)
  • b51cc5cb9a579d6c7ba0d18da8d3ce983e46cfba chore(deps): update actions/attest-build-provenance action to v4 (#109)
  • 6c3b5f1771cf4d51dc2ed21e63a8f480b7a7d728 chore(deps): update actions/setup-go action to v6.3.0 (#108)

v1.4.16

Changelog

  • 17f5c9e9ca5e402a02dddc513b235dbb27eac6c6 chore(deps): update anchore/sbom-action action to v0.23.0 (#107)
  • 05a7b47be8bcdaaf7107212e8304adae17cf9675 chore(deps): update dependency go to v1.26.1 (#106)
  • 1138ae7b4da6bea17e4c4cf98cf44f88de52f26b chore(deps): update goreleaser/goreleaser-action action to v7 (#105)

v1.4.15

Changelog

  • d3231e88115606eff0747a131104d3405d941633 chore(renovate): remove digest pinning from GHA
  • f821a8b45ec07ed8545950646f4bd61115595e00 chore: delete accidentally-committed file
  • 068c44d880c0d8638e88d6f2a829f1fe0e20f159 ci: update GitHub action versions from digest to concrete semantic version
  • afc8dbe2c5780828c308a177d2db27bd44c90022 chore(deps): update dependency go to v1.26.0 (#99)
  • 0f4f17bdc2cf7aa323ba33c43bdf5506f594afd2 chore(deps): update anchore/sbom-action digest to deef08a (#89)
  • 72ecf231f53888d31e777f32feeceb9f5b83543b chore(deps): update anchore/scan-action digest to 8d2fce0 (#90)
  • e65eaab36e0cbbdc3f2018c39695cd63be4d4fac chore(deps): update actions/setup-go digest to 7a3fe6c (#91)

v1.4.14

Changelog

  • 835dc1df98d09ea8dcb689bf7ec52255722d5118 chore(deps): update dependency go to v1.25.6 (#95)
  • 1f0a046b816e12c7d68aeb5b4e22d48de5f8d784 chore(deps): update dependency go to v1.25.6 (#94)
  • 1be2511f81925c1af8724c79af0791e39e24b228 chore(deps): update actions/checkout action to v6 (#93)

v1.4.13

Changelog

  • f138506bd6dac9fd15ba9aa284ac96e1f0087f21 chore(deps): update dependency go to v1.25.5 (#92)
  • bca7d0f7ddedd418cd3ce2cd34795a1e6eab7478 chore(deps): update dependency go (#87)
  • 8626fc7cf66f87d73abdf757cf0ee18155dac816 chore(deps): update actions/checkout digest to 93cb6ef (#88)
  • a82ae184c179610d72dda62204e0065c391232b9 chore(deps): update dependency go to v1.25.4 (#86)

v1.4.12

Changelog

  • 147bef464eed96afce83257301c3f81788a0fc61 chore(deps): update anchore/scan-action digest to 568b89d (#84)
  • 6e4a504e0f8d654d7f8930910a5a3be4bed5f2f0 chore(deps): update anchore/sbom-action digest to 8e94d75 (#83)
  • 8e956b0eb27b362519e7b20278c17070dcccf4cc chore(deps): update anchore/scan-action digest to a5605eb (#82)
  • a83ce2fe0cb61eeba51f89f111d5362d225e8d87 chore(deps): update anchore/sbom-action digest to aa0e114 (#81)
  • 2a79ea045218561596fe6dc734581e4b25d58843 chore(deps): update anchore/scan-action digest to 9e84288 (#80)

... (truncated)

Commits
  • b5ec9cb chore(deps): pin GitHub Actions digests (#117)
  • 9e14614 chore: configure Renovate to pin GitHub Action digests
  • d0db2cc chore(deps): update dependency go to v1.26.2 (#116)
  • e7b2108 chore(deps): update anchore/scan-action action to v7.4.0 (#115)
  • ebcb84b chore(deps): update anchore/sbom-action action to v0.24.0 (#114)
  • db43f1e chore(deps): update actions/setup-go action to v6.4.0 (#113)
  • a3f08e1 chore(deps): update anchore/sbom-action action to v0.23.1 (#112)
  • 3dac278 chore(deps): update dominikh/staticcheck-action action to v1.4.1 (#111)
  • 1c6495a chore(deps): update actions/attest-build-provenance action to v4.1.0 (#110)
  • b51cc5c chore(deps): update actions/attest-build-provenance action to v4 (#109)
  • Additional commits viewable in compare view

Updates github.com/aws/aws-lambda-go from 1.47.0 to 1.54.0

Release notes

Sourced from github.com/aws/aws-lambda-go's releases.

v1.54.0

What's Changed

New Contributors

Full Changelog: aws/aws-lambda-go@v1.54.0...v1.53.0

v1.53.0

What's Changed

New Contributors

Full Changelog: aws/aws-lambda-go@v1.53.0...v1.52.0

v1.52.0

What's Changed

New Contributors

Full Changelog: aws/aws-lambda-go@v1.51.2...v1.52.0

v1.51.2

What's Changed

New Contributors

Full Changelog: aws/aws-lambda-go@v1.51.1...v1.51.2

v1.51.1

What's Changed

Full Changelog: aws/aws-lambda-go@v1.51.0...v1.51.1

v1.51.0

What's Changed

... (truncated)

Commits
  • ca19f6f Allow ClientContext.Custom unmarshaling for non-string (JSON) values (#620)
  • 9c32960 Merge pull request #619 from maximrub/inbound-federation
  • ebe38d9 add support for Cognito Inbound federation Lambda trigger
  • 71624ac Fix spelling typos (#616)
  • 33e4dc3 Update workflows for go 1.26 (#617)
  • e1cb461 Merge pull request #612 from yhamano0312/feat/add-s3-event-fields
  • a66ce2d Merge branch 'main' into feat/add-s3-event-fields
  • 9dac8a5 Add structured logging helper (#614)
  • 6252f73 fix: always return PhysicalResourceID for CFn CustomResources (#613)
  • be52e48 feat: add lifecycle event data structure and corresponding test for S3 events
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go from 1.50.36 to 1.55.8

Release notes

Sourced from github.com/aws/aws-sdk-go's releases.

Release v1.55.8 (2025-07-31)

SDK Features

  • Mark the module and all packages as deprecated.
    • This SDK has entered end-of-support.

Release v1.55.7 (2025-04-22)

SDK Bugs

  • service/s3/s3manager: Abort multipart download if object is modified during download

Release v1.55.6 (2025-01-15)

SDK Bugs

  • Fix broken printf for go1.24

Release v1.55.5 (2024-07-30)

Service Client Updates

  • service/appstream: Updates service API and documentation
    • Added support for Red Hat Enterprise Linux 8 on Amazon AppStream 2.0
  • service/autoscaling: Updates service API and documentation
    • Increase the length limit for VPCZoneIdentifier from 2047 to 5000
  • service/codepipeline: Updates service API, documentation, and paginators
    • AWS CodePipeline V2 type pipelines now support stage level conditions to enable development teams to safely release changes that meet quality and compliance requirements.
  • service/elasticache: Updates service documentation
    • Doc only update for changes to deletion API.
  • service/elasticloadbalancing: Updates service API
  • service/eventbridge: Updates service API
  • service/logs: Updates service API
    • Add v2 smoke tests and smithy smokeTests trait for SDK testing.
  • service/models.lex.v2: Updates service API and documentation
  • service/rolesanywhere: Updates service API and documentation
  • service/tnb: Updates service API and documentation
  • service/workspaces: Updates service documentation
    • Removing multi-session as it isn't supported for pools

Release v1.55.4 (2024-07-29)

Service Client Updates

  • service/elasticache: Updates service documentation
    • Renaming full service name as it appears in developer documentation.
  • service/memorydb: Updates service API and documentation

... (truncated)

Commits
  • 070853e release v1.55.8 (2025-07-31)
  • bb0168e Add deprecation warnings everywhere and remove some README content
  • 7ce44f3 aws
  • 6d9a26d remove doc issue tmpl
  • 239002f deprecate service packages and HLLs
  • 70c4177 deprecate main runtime packages
  • bbdd4e9 deprecate
  • 163aada release v1.55.7 (2025-04-22) (#5346)
  • 9eb2bfd Abort multi part download if the object is modified during download
  • 8d203cc Update bug-report.yml
  • Additional commits viewable in compare view

Updates github.com/aws/aws-secretsmanager-caching-go from 1.1.3 to 1.2.0

Release notes

Sourced from github.com/aws/aws-secretsmanager-caching-go's releases.

v1.2.0

What's Changed

New Contributors

Full Changelog: aws/aws-secretsmanager-caching-go@v1.1.3...v1.2.0

Commits

Updates github.com/cloudflare/cloudflare-go from 0.104.0 to 0.116.0

Release notes

Sourced from github.com/cloudflare/cloudflare-go's releases.

v0.116.0

ENHANCEMENTS:

  • access_service_tokens: Added graceful rotation support for client secrets (#4189)

v0.115.0

ENHANCEMENTS:

  • access_service_token: add last_seen_at field (#3838)
  • dns: Add settings to DNSRecord (#3670)
  • teams_rules: add support for biso admin controls v2 (#3848)

DEPENDENCIES:

  • deps: bumps dependabot/fetch-metadata from 2.2.0 to 2.3.0 (#3865)
  • deps: bumps github.com/go-git/go-git/v5 from 5.11.0 to 5.13.0 (#3869)
  • deps: bumps github.com/goccy/go-json from 0.10.4 to 0.10.5 (#3870)
  • deps: bumps golang.org/x/net from 0.25.0 to 0.33.0 (#3868)

v0.114.0

NOTES:

  • rulesets: remove http_request_sbfm phase (#3824)
  • workers: The placement_mode attribute in script upload responses has been deprecated. The new attribute placement.mode should be used instead. (#3825)

ENHANCEMENTS:

  • access_application: added more fields to private destinations (#3829)
  • teams_rules: add support for resolve_dns_internally settings on dns_resolver rules (#3779)
  • waiting_room: add waiting room turnstile integration fields (#3764)
  • workers: Add new placement attribute object in script upload responses. It contains the mode and status attributes. (#3825)

DEPENDENCIES:

  • deps: bumps golang.org/x/net from 0.33.0 to 0.34.0 (#3796)
  • deps: bumps golang.org/x/time from 0.8.0 to 0.9.0 (#3783)

v0.113.0

ENHANCEMENTS:

  • teams_location: make location parameters optional (#3758)

DEPENDENCIES:

  • deps: bumps golang.org/x/net from 0.32.0 to 0.33.0 (#3756)

v0.112.0

ENHANCEMENTS:

  • access_application: support Access service token + multi-valued authentication for SCIM provisioning (#3708)

... (truncated)

Changelog

Sourced from github.com/cloudflare/cloudflare-go's changelog.

0.116.0 (September 5th, 2025)

ENHANCEMENTS:

  • access_service_tokens: Added graceful rotation support for client secrets (#4189)

0.115.0 (January 29th, 2025)

ENHANCEMENTS:

  • access_service_token: add last_seen_at field (#3838)
  • dns: Add settings to DNSRecord (#3670)
  • teams_rules: add support for biso admin controls v2 (#3848)

DEPENDENCIES:

  • deps: bumps dependabot/fetch-metadata from 2.2.0 to 2.3.0 (#3865)
  • deps: bumps github.com/go-git/go-git/v5 from 5.11.0 to 5.13.0 (#3869)
  • deps: bumps github.com/goccy/go-json from 0.10.4 to 0.10.5 (#3870)
  • deps: bumps golang.org/x/net from 0.25.0 to 0.33.0 (#3868)

0.114.0 (January 15th, 2025)

NOTES:

  • rulesets: remove http_request_sbfm phase (#3824)
  • workers: The placement_mode attribute in script upload responses has been deprecated. The new attribute placement.mode should be used instead. (#3825)

ENHANCEMENTS:

  • access_application: added more fields to private destinations (#3829)
  • teams_rules: add support for resolve_dns_internally settings on dns_resolver rules (#3779)
  • waiting_room: add waiting room turnstile integration fields (#3764)
  • workers: Add new placement attribute object in script upload responses. It contains the mode and status attributes. (#3825)

DEPENDENCIES:

  • deps: bumps golang.org/x/net from 0.33.0 to 0.34.0 (#3796)
  • deps: bumps golang.org/x/time from 0.8.0 to 0.9.0 (#3783)

0.113.0 (January 1st, 2025)

ENHANCEMENTS:

  • teams_location: make location parameters optional (#3758)

DEPENDENCIES:

  • deps: bumps golang.org/x/net from 0.32.0 to 0.33.0 (#3756)

... (truncated)

Commits
  • 1eda786 Update CHANGELOG.md
  • 1317436 Update CHANGELOG.md for #4189
  • fd41d6b Merge pull request #4189 from GreenStage/aholland/client_secret_version
  • 8f93e33 Bump golangci/golangci-lint-action to fix CI errors
  • d5bd4b9 Add graceful rotation support for client secrets
  • 57714bf Update CHANGELOG.md
  • b063df7 generate changelog
  • 46140a1 Merge pull request #3870 from cloudflare/dependabot/go_modules/github.com/goc...
  • 3abb34b add CHANGELOG for #3870
  • c726fce Bump github.com/goccy/go-json from 0.10.4 to 0.10.5
  • Additional commits viewable in compare view

Updates github.com/disgoorg/disgo from 0.18.5 to 0.19.3

Release notes

Sourced from github.com/disgoorg/disgo's releases.

v0.19.3

What's Changed

New Contributors

Full Changelog: disgoorg/disgo@v0.19.2...v0.19.3

v0.19.2

What's Changed

Full Changelog: disgoorg/disgo@v0.19.1...v0.19.2

v0.19.1

What's Changed

Full Changelog: disgoorg/disgo@v0.19.0...v0.19.1

v0.19.0

What's Changed

[!NOTE] This release includes support DAVE (E2EE voice) which will be required for all voice connections starting on March 1st 2026. If you need help or found issues with our implementation please reach out to us via GitHub issues/discussions or our support server (see README.md for invite link). For a basic example see: https://github.com/disgoorg/disgo/blob/v0.19.0/_examples/voice/main.go

[!WARNING] This release includes breaking changes. Please review the Breaking Changes section below for details. If you need help migrating please reach out to us via GitHub discussions or our support server (see README.md for invite link).

Added

... (truncated)

Commits

Updates github.com/fatih/color from 1.18.0 to 1.19.0

Release notes

Sourced from github.com/fatih/color's releases.

v1.19.0

What's Changed

New Contributors

Full Changelog: fatih/color@v1.18.0...v1.19.0

Commits
  • ca25f6e Merge pull request #266 from fatih/dependabot/github_actions/actions/setup-go-6
  • 1205984 Bump actions/setup-go from 5 to 6
  • 5715c20 Merge pull request #269 from UnSubble/main
  • 2f6e200 Merge branch 'main' into main
  • f72ec94 Merge pull request #273 from fatih/dependabot/github_actions/actions/checkout-6
  • 848e633 Merge branch 'main' into main
  • 4c2cd34 Add tests
  • 7f812f0 Bump actions/checkout from 4 to 6
  • b7fc9f9 Merge pull request #259 from fatih/dependabot/github_actions/dominikh/staticc...
  • 239a88f Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0
  • Additional commits viewable in compare view

Updates github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0

Release notes

Sourced from github.com/go-git/go-billy/v5's releases.

v5.9.0

What's Changed

Full Changelog: go-git/go-billy@v5.8.0...v5.9.0

Commits
  • 237e529 Merge pull request #206 from pjbgf/v5-improvements
  • 04edb39 build: Add go-git integration test
  • d8efefd osfs: preserve empty ChrootOS base
  • 07f2a0b Merge pull request #205 from pjbgf/v5-improvements
  • 25207c8 build: Bump Go versions in workflows
  • 2fda229 osfs: ChrootOS eval baseDir on creation
  • 427b27f Merge pull request #203 from pjbgf/v5-improvements
  • 7d5a23e chroot: Reject symlink loops
  • 2c2287a util: avoid following symlinks in RemoveAll fallback
  • cbd88e9 Fix mount path handling
  • Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.19.0

What's Changed

Full Changelog: go-git/go-git@v5.18.0...v5.19.0

Commits
  • bc930f4 Merge pull request #2065 from go-git/commit-v5
  • d315264 plumbing: object, Reset object before decode
  • 6e1d348 plumbing: object, Align Tree handling with upstream
  • e134ba3 tests: Skip double checks in Git v2.11
  • 1971422 tests: Add git conformance tests for signing verification
  • a387aa8 plumbing: object, Add ErrMalformedTag
  • f415670 plumbing: object, Decode Tag headers via a state machine
  • 5b0cd38 plumbing: object, Reject multi-signature commits at Verify
  • fe8ed62 plumbing: object, Align Tag.EncodeWithoutSignature with Commit
  • 98e337d plumbing: object, Add support for Tag.SignatureSHA256
  • Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.38.2 to 1.40.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.40.0

1.40.0

We're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega. It is a limitation of the go mod toolchain that test subdependencies of your project's direct dependencies get pulled in as indirect dependencies. In the case of Gomega, this ends up pulling in all of Ginkgo into your go.mod even if you are only using Gomega (Gomega uses Ginkgo for its own tests).

Going forward, releases will strip out all tests, tidy up the go.mod and then push this stripped down version to a new master-lite branch. These stripped-down versions will receive the vx.y.z git tag and will be picked up by the go toolchain.

Please open an issue if this new release process causes unexpected changes for your projects.

v1.39.1

1.39.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

v1.39.0

1.39.0

Features

Add MatchErrorStrictly which only passes if errors.Is(actual, expected) returns true. MatchError, by contrast, will fallback to string comparison.

v1.38.3

1.38.3

Fixes

make string formatitng more consistent for users who use format.Object directly

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.40.0

We're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega. It is a limitation of the go mod toolchain that test subdependencies of your project's direct dependencies get pulled in as indirect dependencies. In the case of Gomega, this ends up pulling in all of Ginkgo into your go.mod even if you are only using Gomega (Gomega uses Ginkgo for its own tests).

Going forward, releases will strip out all tests, tidy up the go.mod and then push this stripped down version to a new master-lite branch. These stripped-down versions will receive the vx.y.z git tag and will be picked up by the go toolchain.

Please open an issue if this new release process causes unexpected changes for your projects.

1.39.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

1.39.0

Features

Add MatchErrorStrictly which only passes if errors.Is(actual, expected) returns true. MatchError, by contrast, will fallback to string comparison.

1.38.3

Fixes

make string formatitng more consistent for users who use format.Object directly

Commits
  • 87ee9d3 v1.40.0
  • ea66027 v1.40.0 (full)
  • e3fd789 update docs to reflect new versioning strategy
  • 7d4ee30 first push to master-lite
  • e4a82d1 Bump github/codeql-action from 3 to 4 (#875)
  • af62723 Bump rexml from 3.4.0 to 3.4.2 in /docs (#870)
  • e164221 Bump github.com/onsi/ginkgo/v2 from 2.28.0 to 2.28.1 (#895)
  • 334a282 Bump faraday from 2.12.2 to 2.14.1 in /docs (Description has been truncated

Bumps the gomod-minor-and-patch group with 28 updates:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.49.0` | `1.62.1` |
| [github.com/MShekow/directory-checksum](https://github.com/MShekow/directory-checksum) | `1.4.9` | `1.4.17` |
| [github.com/aws/aws-lambda-go](https://github.com/aws/aws-lambda-go) | `1.47.0` | `1.54.0` |
| [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) | `1.50.36` | `1.55.8` |
| [github.com/aws/aws-secretsmanager-caching-go](https://github.com/aws/aws-secretsmanager-caching-go) | `1.1.3` | `1.2.0` |
| [github.com/cloudflare/cloudflare-go](https://github.com/cloudflare/cloudflare-go) | `0.104.0` | `0.116.0` |
| [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo) | `0.18.5` | `0.19.3` |
| [github.com/fatih/color](https://github.com/fatih/color) | `1.18.0` | `1.19.0` |
| [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.8.0` | `5.9.0` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.18.0` | `5.19.0` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.38.2` | `1.40.0` |
| [github.com/otiai10/copy](https://github.com/otiai10/copy) | `1.14.0` | `1.14.1` |
| [github.com/pulumi/pulumi-aws/sdk/v6](https://github.com/pulumi/pulumi-aws) | `6.83.0` | `6.83.3` |
| [github.com/pulumi/pulumi-cloudflare/sdk/v6](https://github.com/pulumi/pulumi-cloudflare) | `6.2.0` | `6.15.0` |
| [github.com/pulumi/pulumi-docker/sdk/v4](https://github.com/pulumi/pulumi-docker) | `4.5.8` | `4.11.2` |
| [github.com/pulumi/pulumi-gcp/sdk/v8](https://github.com/pulumi/pulumi-gcp) | `8.0.0` | `8.41.1` |
| [github.com/pulumi/pulumi-kubernetes/sdk/v4](https://github.com/pulumi/pulumi-kubernetes) | `4.18.1` | `4.30.0` |
| [github.com/pulumi/pulumi-mongodbatlas/sdk/v3](https://github.com/pulumi/pulumi-mongodbatlas) | `3.30.0` | `3.38.0` |
| [github.com/pulumi/pulumi-random/sdk/v4](https://github.com/pulumi/pulumi-random) | `4.17.0` | `4.19.2` |
| [github.com/pulumi/pulumi/pkg/v3](https://github.com/pulumi/pulumi) | `3.184.0` | `3.236.0` |
| [github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi) | `3.184.0` | `3.236.0` |
| [github.com/samber/lo](https://github.com/samber/lo) | `1.38.1` | `1.53.0` |
| [github.com/tmc/langchaingo](https://github.com/tmc/langchaingo) | `0.1.13` | `0.1.14` |
| [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) | `1.16.1` | `1.17.9` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.35.0` | `0.36.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.223.0` | `0.274.0` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.35.0` | `0.36.0` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.35.0` | `0.36.0` |


Updates `cloud.google.com/go/storage` from 1.49.0 to 1.62.1
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@pubsub/v1.49.0...storage/v1.62.1)

Updates `github.com/MShekow/directory-checksum` from 1.4.9 to 1.4.17
- [Release notes](https://github.com/MShekow/directory-checksum/releases)
- [Commits](MShekow/directory-checksum@v1.4.9...v1.4.17)

Updates `github.com/aws/aws-lambda-go` from 1.47.0 to 1.54.0
- [Release notes](https://github.com/aws/aws-lambda-go/releases)
- [Commits](aws/aws-lambda-go@v1.47.0...v1.54.0)

Updates `github.com/aws/aws-sdk-go` from 1.50.36 to 1.55.8
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG_PENDING.md)
- [Commits](aws/aws-sdk-go@v1.50.36...v1.55.8)

Updates `github.com/aws/aws-secretsmanager-caching-go` from 1.1.3 to 1.2.0
- [Release notes](https://github.com/aws/aws-secretsmanager-caching-go/releases)
- [Commits](aws/aws-secretsmanager-caching-go@v1.1.3...v1.2.0)

Updates `github.com/cloudflare/cloudflare-go` from 0.104.0 to 0.116.0
- [Release notes](https://github.com/cloudflare/cloudflare-go/releases)
- [Changelog](https://github.com/cloudflare/cloudflare-go/blob/v0.116.0/CHANGELOG.md)
- [Commits](cloudflare/cloudflare-go@v0.104.0...v0.116.0)

Updates `github.com/disgoorg/disgo` from 0.18.5 to 0.19.3
- [Release notes](https://github.com/disgoorg/disgo/releases)
- [Commits](disgoorg/disgo@v0.18.5...v0.19.3)

Updates `github.com/fatih/color` from 1.18.0 to 1.19.0
- [Release notes](https://github.com/fatih/color/releases)
- [Commits](fatih/color@v1.18.0...v1.19.0)

Updates `github.com/go-git/go-billy/v5` from 5.8.0 to 5.9.0
- [Release notes](https://github.com/go-git/go-billy/releases)
- [Commits](go-git/go-billy@v5.8.0...v5.9.0)

Updates `github.com/go-git/go-git/v5` from 5.18.0 to 5.19.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md)
- [Commits](go-git/go-git@v5.18.0...v5.19.0)

Updates `github.com/onsi/gomega` from 1.38.2 to 1.40.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.38.2...v1.40.0)

Updates `github.com/otiai10/copy` from 1.14.0 to 1.14.1
- [Release notes](https://github.com/otiai10/copy/releases)
- [Commits](otiai10/copy@v1.14.0...v1.14.1)

Updates `github.com/pulumi/pulumi-aws/sdk/v6` from 6.83.0 to 6.83.3
- [Release notes](https://github.com/pulumi/pulumi-aws/releases)
- [Changelog](https://github.com/pulumi/pulumi-aws/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-aws@v6.83.0...v6.83.3)

Updates `github.com/pulumi/pulumi-cloudflare/sdk/v6` from 6.2.0 to 6.15.0
- [Release notes](https://github.com/pulumi/pulumi-cloudflare/releases)
- [Changelog](https://github.com/pulumi/pulumi-cloudflare/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-cloudflare@v6.2.0...v6.15.0)

Updates `github.com/pulumi/pulumi-docker/sdk/v4` from 4.5.8 to 4.11.2
- [Release notes](https://github.com/pulumi/pulumi-docker/releases)
- [Changelog](https://github.com/pulumi/pulumi-docker/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-docker@v4.5.8...v4.11.2)

Updates `github.com/pulumi/pulumi-gcp/sdk/v8` from 8.0.0 to 8.41.1
- [Release notes](https://github.com/pulumi/pulumi-gcp/releases)
- [Changelog](https://github.com/pulumi/pulumi-gcp/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-gcp@v8.0.0...v8.41.1)

Updates `github.com/pulumi/pulumi-kubernetes/sdk/v4` from 4.18.1 to 4.30.0
- [Release notes](https://github.com/pulumi/pulumi-kubernetes/releases)
- [Changelog](https://github.com/pulumi/pulumi-kubernetes/blob/master/CHANGELOG.md)
- [Commits](pulumi/pulumi-kubernetes@v4.18.1...v4.30.0)

Updates `github.com/pulumi/pulumi-mongodbatlas/sdk/v3` from 3.30.0 to 3.38.0
- [Release notes](https://github.com/pulumi/pulumi-mongodbatlas/releases)
- [Changelog](https://github.com/pulumi/pulumi-mongodbatlas/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-mongodbatlas@v3.30.0...v3.38.0)

Updates `github.com/pulumi/pulumi-random/sdk/v4` from 4.17.0 to 4.19.2
- [Release notes](https://github.com/pulumi/pulumi-random/releases)
- [Changelog](https://github.com/pulumi/pulumi-random/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-random@v4.17.0...v4.19.2)

Updates `github.com/pulumi/pulumi/pkg/v3` from 3.184.0 to 3.236.0
- [Release notes](https://github.com/pulumi/pulumi/releases)
- [Changelog](https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md)
- [Commits](pulumi/pulumi@v3.184.0...v3.236.0)

Updates `github.com/pulumi/pulumi/sdk/v3` from 3.184.0 to 3.236.0
- [Release notes](https://github.com/pulumi/pulumi/releases)
- [Changelog](https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md)
- [Commits](pulumi/pulumi@v3.184.0...v3.236.0)

Updates `github.com/samber/lo` from 1.38.1 to 1.53.0
- [Release notes](https://github.com/samber/lo/releases)
- [Commits](samber/lo@v1.38.1...v1.53.0)

Updates `github.com/tmc/langchaingo` from 0.1.13 to 0.1.14
- [Release notes](https://github.com/tmc/langchaingo/releases)
- [Commits](tmc/langchaingo@v0.1.13...v0.1.14)

Updates `go.mongodb.org/mongo-driver` from 1.16.1 to 1.17.9
- [Release notes](https://github.com/mongodb/mongo-go-driver/releases)
- [Commits](mongodb/mongo-go-driver@v1.16.1...v1.17.9)

Updates `golang.org/x/oauth2` from 0.35.0 to 0.36.0
- [Commits](golang/oauth2@v0.35.0...v0.36.0)

Updates `google.golang.org/api` from 0.223.0 to 0.274.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.223.0...v0.274.0)

Updates `k8s.io/apimachinery` from 0.35.0 to 0.36.0
- [Commits](kubernetes/apimachinery@v0.35.0...v0.36.0)

Updates `k8s.io/client-go` from 0.35.0 to 0.36.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.35.0...v0.36.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.62.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/MShekow/directory-checksum
  dependency-version: 1.4.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/aws/aws-lambda-go
  dependency-version: 1.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/aws/aws-sdk-go
  dependency-version: 1.55.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/aws/aws-secretsmanager-caching-go
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/cloudflare/cloudflare-go
  dependency-version: 0.116.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/disgoorg/disgo
  dependency-version: 0.19.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/fatih/color
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/go-git/go-billy/v5
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/otiai10/copy
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/pulumi/pulumi-aws/sdk/v6
  dependency-version: 6.83.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/pulumi/pulumi-cloudflare/sdk/v6
  dependency-version: 6.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/pulumi/pulumi-docker/sdk/v4
  dependency-version: 4.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/pulumi/pulumi-gcp/sdk/v8
  dependency-version: 8.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/pulumi/pulumi-kubernetes/sdk/v4
  dependency-version: 4.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/pulumi/pulumi-mongodbatlas/sdk/v3
  dependency-version: 3.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/pulumi/pulumi-random/sdk/v4
  dependency-version: 4.19.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/pulumi/pulumi/pkg/v3
  dependency-version: 3.236.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/pulumi/pulumi/sdk/v3
  dependency-version: 3.236.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/samber/lo
  dependency-version: 1.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/tmc/langchaingo
  dependency-version: 0.1.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-minor-and-patch
- dependency-name: go.mongodb.org/mongo-driver
  dependency-version: 1.17.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: google.golang.org/api
  dependency-version: 0.274.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: k8s.io/client-go
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 7, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 7, 2026

Semgrep Scan Results

Repository: api | Commit: a2e4eb0

Check Status Details
⚠️ Semgrep Warning 26 warning(s), 50 total

Scanned at 2026-05-07 20:46 UTC

@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 7, 2026

Security Scan Results

Repository: api | Commit: a2e4eb0

Check Status Details
🚨 Secret Scan SECRETS FOUND 1 potential secret(s) detected
⚠️ Dependencies (Trivy) High 1 high, 2 total
⚠️ Dependencies (Grype) High 1 high, 2 total
📦 SBOM Generated 487 components (CycloneDX)

Scanned at 2026-05-07 20:46 UTC

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants