Repository navigation
build(deps): bump the go-minor-patch group across 1 directory with 9 updates - #131
Closed
dependabot[bot] wants to merge 44 commits into
Closed
dependabot[bot] wants to merge 44 commits into
dependabot[bot] wants to merge 44 commits into
Conversation
Bumps [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) from 6.0.6 to 7.0.0. - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/react@7.0.0/packages/integrations/react) --- updated-dependencies: - dependency-name: "@astrojs/react" dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [ip-address](https://github.com/beaugunderson/ip-address) from 10.4.0 to 10.7.2. - [Release notes](https://github.com/beaugunderson/ip-address/releases) - [Commits](beaugunderson/ip-address@v10.4.0...v10.7.2) --- updated-dependencies: - dependency-name: ip-address dependency-version: 10.7.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [devalue](https://github.com/sveltejs/devalue) from 5.9.2 to 5.9.4. - [Release notes](https://github.com/sveltejs/devalue/releases) - [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md) - [Commits](sveltejs/devalue@v5.9.2...v5.9.4) --- updated-dependencies: - dependency-name: devalue dependency-version: 5.9.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.7 to 3.1.8. - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.7...v3.1.8) --- updated-dependencies: - dependency-name: fast-uri dependency-version: 3.1.8 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 5.0.9 to 5.0.12. - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v5.0.9...v5.0.12) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 5.0.12 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…75/4176/4177 and PYSEC-2026-4141)
The test pinned 2026-04-01 as a recent capsule against a 180-day window, so it started failing on 2026-09-28 and has kept CI red since.
…updates Bumps the go-minor-patch group with 9 updates in the /collector directory: | Package | From | To | | --- | --- | --- | | [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) | `2.14.6` | `2.15.0` | | [github.com/nats-io/nats.go](https://github.com/nats-io/nats.go) | `1.53.1` | `1.54.0` | | [go.opentelemetry.io/collector/component](https://github.com/open-telemetry/opentelemetry-collector) | `1.66.0` | `1.68.0` | | [go.opentelemetry.io/collector/consumer](https://github.com/open-telemetry/opentelemetry-collector) | `1.66.0` | `1.68.0` | | [go.opentelemetry.io/collector/consumer/consumertest](https://github.com/open-telemetry/opentelemetry-collector) | `0.160.0` | `0.162.0` | | [go.opentelemetry.io/collector/otelcol](https://github.com/open-telemetry/opentelemetry-collector) | `0.160.0` | `0.162.0` | | [go.opentelemetry.io/collector/pdata](https://github.com/open-telemetry/opentelemetry-collector) | `1.66.0` | `1.68.0` | | [go.opentelemetry.io/collector/processor](https://github.com/open-telemetry/opentelemetry-collector) | `1.66.0` | `1.68.0` | | [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go) | `1.11.0` | `1.11.1` | Updates `github.com/nats-io/nats-server/v2` from 2.14.6 to 2.15.0 - [Release notes](https://github.com/nats-io/nats-server/releases) - [Changelog](https://github.com/nats-io/nats-server/blob/main/RELEASES.md) - [Commits](nats-io/nats-server@v2.14.6...v2.15.0) Updates `github.com/nats-io/nats.go` from 1.53.1 to 1.54.0 - [Release notes](https://github.com/nats-io/nats.go/releases) - [Commits](nats-io/nats.go@v1.53.1...v1.54.0) Updates `go.opentelemetry.io/collector/component` from 1.66.0 to 1.68.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md) - [Commits](open-telemetry/opentelemetry-collector@pdata/v1.66.0...pdata/v1.68.0) Updates `go.opentelemetry.io/collector/consumer` from 1.66.0 to 1.68.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md) - [Commits](open-telemetry/opentelemetry-collector@pdata/v1.66.0...pdata/v1.68.0) Updates `go.opentelemetry.io/collector/consumer/consumertest` from 0.160.0 to 0.162.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md) - [Commits](open-telemetry/opentelemetry-collector@v0.160.0...v0.162.0) Updates `go.opentelemetry.io/collector/otelcol` from 0.160.0 to 0.162.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md) - [Commits](open-telemetry/opentelemetry-collector@v0.160.0...v0.162.0) Updates `go.opentelemetry.io/collector/pdata` from 1.66.0 to 1.68.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md) - [Commits](open-telemetry/opentelemetry-collector@pdata/v1.66.0...pdata/v1.68.0) Updates `go.opentelemetry.io/collector/processor` from 1.66.0 to 1.68.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md) - [Commits](open-telemetry/opentelemetry-collector@pdata/v1.66.0...pdata/v1.68.0) Updates `go.opentelemetry.io/proto/otlp` from 1.11.0 to 1.11.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases) - [Commits](open-telemetry/opentelemetry-proto-go@v1.11.0...v1.11.1) --- updated-dependencies: - dependency-name: github.com/nats-io/nats-server/v2 dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: github.com/nats-io/nats.go dependency-version: 1.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/collector/component dependency-version: 1.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/collector/consumer dependency-version: 1.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/collector/consumer/consumertest dependency-version: 0.162.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/collector/otelcol dependency-version: 0.162.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/collector/pdata dependency-version: 1.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/collector/processor dependency-version: 1.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/proto/otlp dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps the actions group with 1 update in the / directory: [actions/upload-artifact](https://github.com/actions/upload-artifact). Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [source-map-js](https://github.com/7rulnik/source-map-js) from 1.2.1 to 1.2.2. - [Release notes](https://github.com/7rulnik/source-map-js/releases) - [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md) - [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2) --- updated-dependencies: - dependency-name: source-map-js dependency-version: 1.2.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [smol-toml](https://github.com/squirrelchat/smol-toml) from 1.7.1 to 1.9.0. - [Release notes](https://github.com/squirrelchat/smol-toml/releases) - [Commits](squirrelchat/smol-toml@v1.7.1...v1.9.0) --- updated-dependencies: - dependency-name: smol-toml dependency-version: 1.9.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [sharp](https://github.com/lovell/sharp) from 0.35.4 to 0.35.5. - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.35.4...v0.35.5) --- updated-dependencies: - dependency-name: sharp dependency-version: 0.35.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [proxy-addr](https://github.com/jshttp/proxy-addr) from 2.0.7 to 2.0.8. - [Release notes](https://github.com/jshttp/proxy-addr/releases) - [Changelog](https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md) - [Commits](jshttp/proxy-addr@v2.0.7...v2.0.8) --- updated-dependencies: - dependency-name: proxy-addr dependency-version: 2.0.8 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [compression](https://github.com/expressjs/compression) from 1.8.1 to 1.8.2. - [Release notes](https://github.com/expressjs/compression/releases) - [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md) - [Commits](expressjs/compression@v1.8.1...v1.8.2) --- updated-dependencies: - dependency-name: compression dependency-version: 1.8.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.1.8 to 3.1.9. - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@3.1.8...3.1.9) --- updated-dependencies: - dependency-name: werkzeug dependency-version: 3.1.9 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [mako](https://github.com/sqlalchemy/mako) from 1.4.1 to 1.4.2. - [Release notes](https://github.com/sqlalchemy/mako/releases) - [Changelog](https://github.com/sqlalchemy/mako/blob/main/CHANGES) - [Commits](https://github.com/sqlalchemy/mako/commits) --- updated-dependencies: - dependency-name: mako dependency-version: 1.4.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [multidict](https://github.com/aio-libs/multidict) from 6.7.1 to 6.9.1. - [Release notes](https://github.com/aio-libs/multidict/releases) - [Changelog](https://github.com/aio-libs/multidict/blob/master/CHANGES.rst) - [Commits](aio-libs/multidict@v6.7.1...v6.9.1) --- updated-dependencies: - dependency-name: multidict dependency-version: 6.9.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bump http-cache-semantics (4.3.0), source-map-js and brace-expansion in the dashboard and sdk-ts lockfiles via lockfile-only npm update. basic-ftp (GHSA-c475-qrg2-pj4r) has no reachable fix (dev-only lhci chain, newest get-uri still pins ^5.3.1): add a time-boxed waiver in the repo's established form.
…_environment The CI unit job failed three test_diff_environment cases because colour codes split the phrases the assertions search for. _flat() now removes SGR escapes first.
"produced by" next to a model-id field name matched the AI-attribution pattern; the line describes a file format, so say "emitted by".
…0 release and audit fixes)
Owner
CI repair update — 2026-10-08To remove shared baseline failures without losing Dependabot's Go update, merged the |
MSKazemi
added a commit
that referenced
this pull request
Oct 9, 2026
… and MetadataStore gates green - uv.lock: 104 minor/patch bumps within existing constraints (all stable; majors mcp 2, protobuf 7, filelock 4, setuptools 84 held). pip-audit gate: 0 findings. - npm: lockfile refreshes in ui/dashboard, packages/nova-dashboard (#154 floors + audit fix) and packages/nova-sdk-ts; all three npm-audit gates pass. New time-boxed waiver GHSA-c475-qrg2-pj4r (basic-ftp, dev-only lhci chain; newest get-uri still needs basic-ftp 5.x). - collector: the go-minor-patch set from #131 on the current module path, plus golang.org/x/net v0.60.0; CI Go 1.26.7 -> 1.26.9 for GO-2026-6617 and the GO-2026-6603..6613 stdlib advisories. vet, test -race, build, govulncheck clean. - ci.yml: the last actions/upload-artifact@v4 moves to @v7 like every other use. - sdk-ts: regenerate src/types.gen.ts from api/openapi.yaml (drift gate). - metadata store: novafabric_app was never granted DELETE, so ADR-0206 delete_run failed with permission denied under the real NOBYPASSRLS role. Migration v005 and bootstrap() grant DELETE on runs/capsules/signatures; the cross-tenant delete test now runs as novafabric_app instead of the superuser, which bypasses RLS and made the test fail on main without testing the policy. - dependabot.yml: ignore OpenTelemetry API/SDK/semconv and fastapi>=0.142 while google-adk caps OpenTelemetry at <=1.42.1; ignore the path-sourced novafabric in examples/plugin-hook-reference (re-locked to 0.104.0).
Contributor
Author
|
Looks like these dependencies are no longer updatable, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/go_modules/collector/go-minor-patch-4d7a01f0da
branch
October 9, 2026 09:53
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go-minor-patch group with 9 updates in the /collector directory:
2.14.62.15.01.53.11.54.01.66.01.68.01.66.01.68.00.160.00.162.00.160.00.162.01.66.01.68.01.66.01.68.01.11.01.11.1Updates
github.com/nats-io/nats-server/v2from 2.14.6 to 2.15.0Release notes
Sourced from github.com/nats-io/nats-server/v2's releases.
... (truncated)
Commits
eb76367Release v2.15.08f3f31b[FIXED] Config reload disconnects operator mode clients sending an nkey (#8609)7d77240[FIXED] Stream scale down into a missing account tier was accepted (#8608)e46d21f[FIXED] Concurrent account updates invalidating stream imports (#8610)2ecd77aDe-flake TestJetStreamClusterHardKillAfterStreamAdd901df78De-flake TestJetStreamClusterAccountMaxConnectionsReconnecte133a1fDe-flake TestJetStreamClusterMessageTTLCatchup2990f6c[FIXED] Concurrent account updates invalidating stream imports51fd55fDe-flake TestJWTImportsOnServerRestartAndClientsReconnect6a82cf9De-flake TestNoRaceRouteSendSubsUpdates
github.com/nats-io/nats.gofrom 1.53.1 to 1.54.0Release notes
Sourced from github.com/nats-io/nats.go's releases.
Commits
7a8404aRelease v1.54.0 (#2148)240fb1f[IMPROVED] Bump dependencies and update server version in CI (#2146)203d828[FIXED] Panic in DecodeHeadersMsg on status tokens shorter than 3 characters ...dc92fca[FIXED] Ordered consumer silently losing messages on slow consumer (#2137)e18cea8[IMPROVED] Prevent doErr closure escaping to heap (#2127)d8d8c09[ADDED]nats.MultipathTCP()for enabling or disabling MPTCP (#2145)e95c424[FIXED] Flaky cluster restart tests: waitForStream must see a stream leader (...e3abbf4[ADDED] Nats-Schedule-Rollup header const and publish options (#2142)f1289db[ADDED] Desired state, peer ID/pending and source seq in stream and consumer ...b84f783Ignore Claude Code local files and .worktrees (#2140)Updates
go.opentelemetry.io/collector/componentfrom 1.66.0 to 1.68.0Changelog
Sourced from go.opentelemetry.io/collector/component's changelog.
... (truncated)
Commits
62cdad2[chore] Prepare release v1.68.0/v0.162.0 (#16041)9857cff[exporterhelper] Drop only the oversized item when splitting a batch (#15937)3580e28[chore] Addwaiting-for-maintainerslabel support (#16025)53ca64f[receiver/otlphttp] Preserve status code in error handler for unsupported Con...5fbc5a6[chore] set path on upload/download (#16033)f575985[chore] Allow contrib generation to update modules (#16027)aaee1ae[extension/memorylimiter] Add refused requests metric to track rejected reque...e086e5f[chore] update perf workflow to address permission issues (#16032)a1d7ba1[pkg/confighttp] introduce pkg.confighttp.PrioritizeNewKeepalive feature gate...2d3f1f9ci: Improve renovate setup (#16028)Updates
go.opentelemetry.io/collector/consumerfrom 1.66.0 to 1.68.0Changelog
Sourced from go.opentelemetry.io/collector/consumer's changelog.
... (truncated)
Commits
62cdad2[chore] Prepare release v1.68.0/v0.162.0 (#16041)9857cff[exporterhelper] Drop only the oversized item when splitting a batch (#15937)3580e28[chore] Addwaiting-for-maintainerslabel support (#16025)53ca64f[receiver/otlphttp] Preserve status code in error handler for unsupported Con...5fbc5a6[chore] set path on upload/download (#16033)f575985[chore] Allow contrib generation to update modules (#16027)aaee1ae[extension/memorylimiter] Add refused requests metric to track rejected reque...e086e5f[chore] update perf workflow to address permission issues (#16032)a1d7ba1[pkg/confighttp] introduce pkg.confighttp.PrioritizeNewKeepalive feature gate...2d3f1f9ci: Improve renovate setup (#16028)Updates
go.opentelemetry.io/collector/consumer/consumertestfrom 0.160.0 to 0.162.0Release notes
Sourced from go.opentelemetry.io/collector/consumer/consumertest's releases.
... (truncated)
Changelog
Sourced from go.opentelemetry.io/collector/consumer/consumertest's changelog.
... (truncated)
Commits
62cdad2[chore] Prepare release v1.68.0/v0.162.0 (#16041)9857cff[exporterhelper] Drop only the oversized item when splitting a batch (#15937)3580e28[chore] Addwaiting-for-maintainerslabel support (#16025)53ca64f[receiver/otlphttp] Preserve status code in error handler for unsupported Con...5fbc5a6[chore] set path on upload/download (#16033)f575985[chore] Allow contrib generation to update modules (#16027)aaee1ae[extension/memorylimiter] Add refused requests metric to track rejected reque...e086e5f[chore] update perf workflow to address permission issues (#16032)a1d7ba1[pkg/confighttp] introduce pkg.confighttp.PrioritizeNewKeepalive feature gate...2d3f1f9ci: Improve renovate setup (#16028)Updates
go.opentelemetry.io/collector/otelcolfrom 0.160.0 to 0.162.0Release notes
Sourced from go.opentelemetry.io/collector/otelcol's releases.
... (truncated)
Changelog
Sourced from go.opentelemetry.io/collector/otelcol's changelog.
... (truncated)
Commits
62cdad2[chore] Prepare release v1.68.0/v0.162.0 (#16041)9857cff[exporterhelper] Drop only the oversized item when splitting a batch (#15937)3580e28[chore] Addwaiting-for-maintainerslabel support (#16025)53ca64f[receiver/otlphttp] Preserve status code in error handler for unsupported Con...5fbc5a6[chore] set path on upload/download (#16033)f575985[chore] Allow contrib generation to update modules (#16027)aaee1ae[extension/memorylimiter] Add refused requests metric to track rejected reque...e086e5f[chore] update perf workflow to address permission issues (#16032)a1d7ba1[pkg/confighttp] introduce pkg.confighttp.PrioritizeNewKeepalive feature gate...2d3f1f9ci: Improve renovate setup (#16028)Updates
go.opentelemetry.io/collector/pdatafrom 1.66.0 to 1.68.0Changelog
Sourced from go.opentelemetry.io/collector/pdata's changelog.