Skip to content

build(deps): bump the minor-and-patch group with 13 updates - #104

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/minor-and-patch-d2ce3bd0cf
Open

build(deps): bump the minor-and-patch group with 13 updates#104
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/minor-and-patch-d2ce3bd0cf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 13 updates:

Package From To
github.com/aws/aws-sdk-go-v2 1.45.1 1.47.0
github.com/aws/aws-sdk-go-v2/config 1.33.2 1.33.4
github.com/aws/aws-sdk-go-v2/credentials 1.20.2 1.20.4
github.com/aws/aws-sdk-go-v2/service/ec2 1.328.0 1.332.0
github.com/aws/aws-sdk-go-v2/service/s3 1.110.0 1.113.0
go-micro.dev/v5 5.3.0 5.30.0
go.mongodb.org/mongo-driver 1.17.9 1.17.10
golang.org/x/crypto 0.55.0 0.57.0
helm.sh/helm/v3 3.21.4 3.22.0
k8s.io/api 0.36.2 0.37.0
k8s.io/apiextensions-apiserver 0.36.2 0.37.0
k8s.io/apimachinery 0.36.2 0.37.0
k8s.io/client-go 0.36.2 0.37.0

Updates github.com/aws/aws-sdk-go-v2 from 1.45.1 to 1.47.0

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.2 to 1.33.4

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.20.2 to 1.20.4

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ec2 from 1.328.0 to 1.332.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.110.0 to 1.113.0

Commits

Updates go-micro.dev/v5 from 5.3.0 to 5.30.0

Release notes

Sourced from go-micro.dev/v5's releases.

v5.30.0

What's Changed

Full Changelog: micro/go-micro@v5.29.0...v5.30.0

v5.29.0

What's Changed

Full Changelog: micro/go-micro@v5.28.0...v5.29.0

v5.28.0

What's Changed

Full Changelog: micro/go-micro@v5.27.0...v5.28.0

v5.27.0

What's Changed

Full Changelog: micro/go-micro@v5.26.0...v5.27.0

v5.26.0

What's Changed

... (truncated)

Commits
  • 307b94a Implement A2A protocol gateway and update documentation (#2974)
  • 7ee32e8 Update changelog and enhance retrospective blog on agentic features (#2973)
  • 9fdcc24 Implement durable execution and scoped state management for flows (#2972)
  • 6b4ce55 Implement tool-execution wrappers and update documentation (#2971)
  • ce0741a Implement tool-execution wrappers and restructure ToolHandler (#2970)
  • 5e5d253 feat(agent): tool-execution wrappers via WrapTool (#2969)
  • e079e08 feat(agent): loop detection guardrail + document/blog agent guardrails (#2968)
  • a1a5779 Add payment requirements to tool catalog and implement x402 client (#2966)
  • e4d2a41 refactor(x402): Amount/Amounts naming + per-tool amounts + docs (#2965)
  • 9deac48 feat(x402): opt-in agent-native payments for tools (#2964)
  • Additional commits viewable in compare view

Updates go.mongodb.org/mongo-driver from 1.17.9 to 1.17.10

Release notes

Sourced from go.mongodb.org/mongo-driver's releases.

MongoDB Go Driver 1.17.10

The MongoDB Go Driver Team is pleased to release version 1.17.10 of the official MongoDB Go Driver.

Release Highlights

[!WARNING]
Go Driver versions v1.0.0 through v1.17.9 and v2.0.0 through v2.9.0 are affected by a security issue CVE-2026-88031 in the GridFS delete methods. This release resolves that security issue in Go Driver v1. Users are encouraged to upgrade to Go Driver v1.17.10 as soon as possible. For the fix in Go Driver v2, see the v2.9.1 release.

This release addresses CVE-2026-88031, a security issue in GridFS delete methods where the file ID lookup could match more loosely than intended, potentially causing unintended file (and chunk) deletions instead of an exact match on the given file ID.

Users can manually restrict the file ID with a $eq operator before passing it to GridFSBucket methods using code like the following.

func exactMatch(id any) bson.D {
	return bson.D{{"$eq", id}}
}
// e.g., for v1, (*Bucket).DeleteContext() with an exact match on the file ID.
bucket.DeleteContext(context.TODO(), exactMatch(id))

What's Changed

🐛 Fixed

  • GODRIVER-4081: Use exact match for file ID in GridFS delete methods. by @​qingyang-hu

Full Changelog: mongodb/mongo-go-driver@v1.17.9...v1.17.10

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. For issues with, questions about, or feedback for the Go Driver, please look into our support channels, including StackOverflow. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

Commits
  • d13e5a5 BUMP v1.17.10
  • 1cdec85 Merge pull request #2596 from prestonvasquez/pin-det-to-890a93bdb
  • 9635a5f Pin DET to 890a93bdb
  • 65af5ff bump github tools for release to 89904229
  • e8462ed bump github tools for release to 89904229
  • 2428d94 Merge commit from fork
  • 6da3d8f update spec test cases
  • 806e132 GODRIVER-4081 Use exact match for file ID in GridFS delete methods.
  • See full diff in compare view

Updates golang.org/x/crypto from 0.55.0 to 0.57.0

Commits
  • 3f62bf1 go.mod: update golang.org/x dependencies
  • 86efde5 ssh: reject unexpected message types on established channels
  • a6cdac6 ssh: drop traffic on undecided channels
  • 39dc44e ssh: don't skip the source-address critical option in CheckCert
  • afebf4c x509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+
  • 89f4e9b x509roots/fallback: update bundle
  • 71488c4 ssh/knownhosts: compare only public key portions for revocation
  • 82adefa ssh: synchronize unexpected response test
  • c757c98 all: upgrade go directive to at least 1.26.0 [generated]
  • 593c81a ssh: correctly ignore pre-banner lines
  • Additional commits viewable in compare view

Updates helm.sh/helm/v3 from 3.21.4 to 3.22.0

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.22.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • primarily dependency updates and k8s-io group to 0.37.0

Installation and Upgrading

Download Helm v3.22.0. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.3.1 and 3.22.1 are the next patch releases scheduled for October 14, 2026
  • 4.4.0 is the next minor release scheduled for January 13, 2027. There will be no further Helm 3 minor releases (see https://helm.sh/blog/helm-v3-end-of-life)

Changelog

  • chore(deps): bump the k8s-io group across 1 directory with 6 updates 144ca65f8501953fa8b41cd1d37c7223051c85b7 (dependabot[bot])
  • bump version to 3.22 (#32606) b5de8bbe62975c8f9d4801fd7dfafacff462209f (Scott Rigby)
  • fix: set [pull,push] scope when helm push to a registry(use token auth) (backport) (#32362) 9dbcb9f1edb4cdf2b055870dc9a07e0c0f4b05d1 (kimsungmin1)
  • chore(deps): bump the github-actions group across 1 directory with 4 updates (#32575) 665ab55b05ce3d8c5a9d40e22b14f920d84fa68a (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates (#32573) 0841093658d96f4787cc9599cd2a891a3c590971 (dependabot[bot])
  • chore(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#32563) d0569c7d625151ee8c7b858d87218dd06087d613 (dependabot[bot])

... (truncated)

Commits
  • 144ca65 chore(deps): bump the k8s-io group across 1 directory with 6 updates
  • b5de8bb bump version to 3.22 (#32606)
  • 9dbcb9f fix: set [pull,push] scope when helm push to a registry(use token auth) (back...
  • 665ab55 chore(deps): bump the github-actions group across 1 directory with 4 updates ...
  • 0841093 chore(deps): bump the k8s-io group with 7 updates (#32573)
  • d0569c7 chore(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#32563)
  • bcbdb1e chore(deps): bump the github-actions group across 1 directory with 4 updates ...
  • 6cdcc8f chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#32554)
  • 158719f chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#32542)
  • a442b8c [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061 ...
  • Additional commits viewable in compare view

Updates k8s.io/api from 0.36.2 to 0.37.0

Commits
  • 34b5cc4 Update dependencies to v0.37.0 tag
  • 72a1627 Merge pull request #140334 from nojnhuh/dra-workloadresourceclaims-beta
  • a713cf9 Merge pull request #139795 from omeryahud/worktree-kep-5963-device-compat-groups
  • 6caf352 Merge pull request #134639 from AkihiroSuda/rootless-beta
  • 51815c0 Merge pull request #140029 from gauravkghildiyal/derived-attributes
  • fce58fa DRA: regenerate code for the compatibility-groups API
  • 7500b7a DRA: add CompatibilityGroups to the resource.k8s.io API
  • de863e3 KEP-5729: Promote DRAWorkloadResourceClaims to beta
  • 6e847e1 api: Run make-update to regenerate API files
  • 1de5bcf api: add DRADerivedAttributes feature gate and API types
  • Additional commits viewable in compare view

Updates k8s.io/apiextensions-apiserver from 0.36.2 to 0.37.0

Commits
  • 78b5577 Update dependencies to v0.37.0 tag
  • 29d19cf Fix unit test compile failure under the fieldsv1string build tag
  • 1aa2717 Merge pull request #140205 from pohly/cel-deps
  • b51744f dependencies: cel-go v0.29.2
  • f416935 Merge pull request #140782 from dims/update-kube-openapi
  • 19c0db2 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
  • 8ed17b6 Merge pull request #140774 from dims/prom-client-v1.24.0
  • 48a6e2f Update prometheus/client_golang to 1.24.0
  • e7c1b62 Merge pull request #139821 from pohly/client-go-informers-type-safety
  • e86edad Merge pull request #140740 from dims/update-grpc-1.82.1
  • Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.36.2 to 0.37.0

Commits
  • 7164e39 Update dependencies to v0.37.0 tag
  • e55f9ba feat(api): Update node restriction admission to use new API
  • cb0680d Merge pull request #129125 from pohly/log-client-go-tools-apis
  • 97b2132 Merge pull request #140194 from gnufied/implement-volume-health-api
  • f21afab Add validation for camelcase in reason field
  • d7ad413 Merge pull request #140782 from dims/update-kube-openapi
  • e15ad7c Merge pull request #138808 from chenk008/cbor-streaminglist
  • 464b5d1 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
  • 0de14ec Merge pull request #140732 from thockin/dv-add-prefixed-label-key
  • 95258eb Merge pull request #134037 from ibihim/ibihim/2025-09-09_unsafe-delete-of-cor...
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.36.2 to 0.37.0

Commits
  • 2807644 Update dependencies to v0.37.0 tag
  • 50c6f9b metrics: Register: Fix incorrect assignment
  • 49f0a7b Merge pull request #140931 from pohly/client-go-changelog-adding-apigroups
  • 74d4b1e Merge pull request #140966 from alancaldelas/client-go-fakecustomstore-store
  • 2bf14f2 Merge pull request #140990 from xigang/revert-140448
  • 7b892fe Revert "Merge pull request #140448 from xigang/event_broadcaster_goroutine_leak"
  • df92378 Merge pull request #140334 from nojnhuh/dra-workloadresourceclaims-beta
  • 45a0ff1 client-go: restore FakeCustomStore conformance to cache.Store
  • 9d3b531 Merge pull request #139795 from omeryahud/worktree-kep-5963-device-compat-groups
  • 694f4eb apidiff: ignore adding entirely new API groups
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the minor-and-patch group with 13 updates
3425c35 
Bumps the minor-and-patch group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.45.1` | `1.47.0` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.2` | `1.33.4` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.20.2` | `1.20.4` |
| [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) | `1.328.0` | `1.332.0` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.110.0` | `1.113.0` |
| [go-micro.dev/v5](https://github.com/micro/go-micro) | `5.3.0` | `5.30.0` |
| [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) | `1.17.9` | `1.17.10` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.55.0` | `0.57.0` |
| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.21.4` | `3.22.0` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.36.2` | `0.37.0` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.36.2` | `0.37.0` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.36.2` | `0.37.0` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.2` | `0.37.0` |


Updates `github.com/aws/aws-sdk-go-v2` from 1.45.1 to 1.47.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.45.1...v1.47.0)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.2 to 1.33.4
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.33.2...config/v1.33.4)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.20.2 to 1.20.4
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.20.2...service/mq/v1.20.4)

Updates `github.com/aws/aws-sdk-go-v2/service/ec2` from 1.328.0 to 1.332.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ec2/v1.328.0...service/ec2/v1.332.0)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.110.0 to 1.113.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.110.0...service/s3/v1.113.0)

Updates `go-micro.dev/v5` from 5.3.0 to 5.30.0
- [Release notes](https://github.com/micro/go-micro/releases)
- [Changelog](https://github.com/micro/go-micro/blob/master/CHANGELOG.md)
- [Commits](micro/go-micro@v5.3.0...v5.30.0)

Updates `go.mongodb.org/mongo-driver` from 1.17.9 to 1.17.10
- [Release notes](https://github.com/mongodb/mongo-go-driver/releases)
- [Commits](mongodb/mongo-go-driver@v1.17.9...v1.17.10)

Updates `golang.org/x/crypto` from 0.55.0 to 0.57.0
- [Commits](golang/crypto@v0.55.0...v0.57.0)

Updates `helm.sh/helm/v3` from 3.21.4 to 3.22.0
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.21.4...v3.22.0)

Updates `k8s.io/api` from 0.36.2 to 0.37.0
- [Commits](kubernetes/api@v0.36.2...v0.37.0)

Updates `k8s.io/apiextensions-apiserver` from 0.36.2 to 0.37.0
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.36.2...v0.37.0)

Updates `k8s.io/apimachinery` from 0.36.2 to 0.37.0
- [Commits](kubernetes/apimachinery@v0.36.2...v0.37.0)

Updates `k8s.io/client-go` from 0.36.2 to 0.37.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.36.2...v0.37.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.20.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2
  dependency-version: 1.332.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.113.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: go-micro.dev/v5
  dependency-version: 5.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: go.mongodb.org/mongo-driver
  dependency-version: 1.17.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/crypto
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: k8s.io/api
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: k8s.io/client-go
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 14, 2026
@dependabot
dependabot Bot requested review from a team and raven-pan as code owners September 14, 2026 09:15
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@raven-pan raven-pan Awaiting requested review from raven-pan raven-pan is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants