Skip to content

chore(deps): bump the minor-and-patch group with 5 updates - #728

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/minor-and-patch-0e19f1fe1d
Open

chore(deps): bump the minor-and-patch group with 5 updates#728
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/minor-and-patch-0e19f1fe1d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 6, 2026

Copy link
Copy Markdown

Bumps the minor-and-patch group with 5 updates:

Package From To
github.com/coreos/go-oidc/v3 3.20.0 3.21.0
github.com/go-playground/validator/v10 10.30.3 10.30.4
github.com/go-sql-driver/mysql 1.10.0 1.10.1
github.com/shamaton/msgpack/v2 2.4.1 2.4.2
golang.org/x/crypto 0.55.0 0.56.0

Updates github.com/coreos/go-oidc/v3 from 3.20.0 to 3.21.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.21.0

What's Changed

New Contributors

Full Changelog: coreos/go-oidc@v3.20.0...v3.21.0

Commits
  • c914bd3 oidc: ignore JWKs with unsupported key types rather than failing
  • See full diff in compare view

Updates github.com/go-playground/validator/v10 from 10.30.3 to 10.30.4

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

v10.30.4

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.30.3...v10.30.4

Commits
  • dfe35cf ci: Fix the linter version (#1617)
  • facf128 feat(translations): add Armenian translations (#1604)
  • 961375b docs: clarify fieldexcludes behavior (#1610)
  • 74dd82a test: cover startsnotwith/endsnotwith, RegisterStructValidationMapRules, and ...
  • 379edc8 chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#1612)
  • f9944c5 fix: use idiomatic "at most" in English max/lte messages (#1600)
  • 67e37d6 fix(fqdn): enforce maximum DNS name length (#1603)
  • 6b571d1 chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.13 to 1.4.15 (#...
  • 8455180 chore(deps): bump github.com/leodido/go-urn from 1.4.0 to 1.5.0 (#1606)
  • fd8bd3c chore(deps): bump actions/setup-go from 6 to 7 (#1601)
  • Additional commits viewable in compare view

Updates github.com/go-sql-driver/mysql from 1.10.0 to 1.10.1

Release notes

Sourced from github.com/go-sql-driver/mysql's releases.

v1.10.1

What's Changed

New Contributors

Full Changelog: go-sql-driver/mysql@v1.10.0...v1.10.1

Changelog

Sourced from github.com/go-sql-driver/mysql's changelog.

v1.10.1 (2026-09-02)

  • Fix Config.FormatDSN() dropping Addr when Net is empty. It now uses the default tcp network so configs with only Addr round-trip correctly. (#1770)

  • Fix typed-nil json.RawMessage with interpolateParams=true being interpolated as an empty string. It is now interpolated as SQL NULL, matching server-side prepared statements. (#1782)

  • Add MariaDB 11.8 and 12.3 to the test matrix. (#1774)

Commits
  • 7ca26e8 release v1.10.1 (#1801)
  • 87dcb95 doc: clarify timeTruncate units and when to use it (#1792)
  • 1d9c421 codeql: remove custom workflow (#1799)
  • 532b8e5 Bump the all-dependencies group with 3 updates (#1796)
  • fe209cc Bump the all-dependencies group with 5 updates (#1795)
  • 03d76c7 Bump the all-dependencies group with 3 updates (#1794)
  • c426bd9 Bump the all-dependencies group across 1 directory with 5 updates (#1791)
  • 416cd99 Bump actions/setup-go from 6.5.0 to 7.0.0 in the all-dependencies group (#1783)
  • b96d415 Interpolate typed-nil json.RawMessage as NULL (#1782)
  • dec193d Bump the all-dependencies group with 3 updates (#1780)
  • Additional commits viewable in compare view

Updates github.com/shamaton/msgpack/v2 from 2.4.1 to 2.4.2

Release notes

Sourced from github.com/shamaton/msgpack/v2's releases.

v2.4.2

What's Changed

Full Changelog: shamaton/msgpack@v2.4.1...v2.4.2

Changelog

Sourced from github.com/shamaton/msgpack/v2's changelog.

v2.4.2 - 2026-08-30

Commits
  • 9212d7d Release for v2.4.2 (#116)
  • ab24666 Merge pull request #115 from shamaton/GHSA-hfpf-8g2f-p4mx-v2-fix
  • e943674 chore: use macos-15 for test runner as a work around.
  • c69ea06 fix: bound streaming decoder allocations against declared lengths (v2)
  • See full diff in compare view

Updates golang.org/x/crypto from 0.55.0 to 0.56.0

Commits
  • 86efde5 ssh: reject unexpected message types on established channels
  • a6cdac6 ssh: drop traffic on undecided channels
  • 39dc44e ssh: don't skip the source-address critical option in CheckCert
  • afebf4c x509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+
  • 89f4e9b x509roots/fallback: update bundle
  • 71488c4 ssh/knownhosts: compare only public key portions for revocation
  • 82adefa ssh: synchronize unexpected response test
  • c757c98 all: upgrade go directive to at least 1.26.0 [generated]
  • 593c81a ssh: correctly ignore pre-banner lines
  • 46efc8b acme: add crypto.SignMessage test coverage
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.20.0` | `3.21.0` |
| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.30.3` | `10.30.4` |
| [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) | `1.10.0` | `1.10.1` |
| [github.com/shamaton/msgpack/v2](https://github.com/shamaton/msgpack) | `2.4.1` | `2.4.2` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.55.0` | `0.56.0` |


Updates `github.com/coreos/go-oidc/v3` from 3.20.0 to 3.21.0
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](coreos/go-oidc@v3.20.0...v3.21.0)

Updates `github.com/go-playground/validator/v10` from 10.30.3 to 10.30.4
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.30.3...v10.30.4)

Updates `github.com/go-sql-driver/mysql` from 1.10.0 to 1.10.1
- [Release notes](https://github.com/go-sql-driver/mysql/releases)
- [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md)
- [Commits](go-sql-driver/mysql@v1.10.0...v1.10.1)

Updates `github.com/shamaton/msgpack/v2` from 2.4.1 to 2.4.2
- [Release notes](https://github.com/shamaton/msgpack/releases)
- [Changelog](https://github.com/shamaton/msgpack/blob/v2.4.2/CHANGELOG.md)
- [Commits](shamaton/msgpack@v2.4.1...v2.4.2)

Updates `golang.org/x/crypto` from 0.55.0 to 0.56.0
- [Commits](golang/crypto@v0.55.0...v0.56.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/go-playground/validator/v10
  dependency-version: 10.30.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/go-sql-driver/mysql
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/shamaton/msgpack/v2
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/crypto
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 6, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 6, 2026 22:03
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 6, 2026
@kw-security

kw-security commented Sep 6, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant