Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 17 updates - #121

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/minor-and-patch-91054bbbfb
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/minor-and-patch-91054bbbfb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 17 updates in the / directory:

Package From To
github.com/go-webauthn/webauthn 0.17.4 0.18.2
github.com/xraph/chronicle 1.6.2 1.6.4
github.com/xraph/forge/extensions/auth 1.11.0 1.12.0
github.com/xraph/grove 1.6.3 1.7.0
github.com/xraph/grove/drivers/mongodriver 1.6.3 1.7.0
github.com/xraph/grove/drivers/pgdriver 1.6.3 1.7.0
github.com/xraph/grove/drivers/sqlitedriver 1.6.3 1.7.0
github.com/xraph/herald 1.6.1 1.6.2
github.com/xraph/keysmith 1.6.2 1.6.3
github.com/xraph/relay 1.6.2 1.6.3
github.com/xraph/warden 1.6.2 1.6.4
go.mongodb.org/mongo-driver/v2 2.8.0 2.9.1
golang.org/x/crypto 0.55.0 0.57.0
golang.org/x/oauth2 0.36.0 0.37.0
github.com/xraph/dispatch 1.6.2 1.6.7
github.com/xraph/ledger 1.6.1 1.6.4
github.com/xraph/vault 1.6.1 1.6.4

Updates github.com/go-webauthn/webauthn from 0.17.4 to 0.18.2

Release notes

Sourced from github.com/go-webauthn/webauthn's releases.

v0.18.2

v0.18.2 (2026-09-19)

Bug Fixes

  • protocol: accept anonca attestation trust anchors (#801) (b1dfbf2)
  • protocol: convey safetynet attestation trust path (#800) (5f8a38c)
  • protocol: validate fido-u2f credential curve and certificate validity (#802) (55d49f8)
  • protocol: validate safetynet version and response age (#799) (dda068d)
  • protocol: validate tpm aik certificate validity period (#797) (9ab858d)
  • webauthn: require authorization to initialize uv (#795) (597882d)
  • webauthn: validate session challenge when finishing ceremonies (#794) (bbe2902)

Features

  • protocol: determine fido-u2f attestation type from metadata (#798) (ccbbb4b)
  • protocol: validate authenticator data against metadata (#793) (1ee00cf)

v0.18.1

0.18.1 (2026-09-10)

This release just updates dependencies.

v0.18.0

0.18.0 (2026-08-27)

This release is a fairly major milestone in the development of this library. It has quite a few breaking changes but has added support for most if not all of the extension requirements natively, and adds formal support for Post-Quantum Cryptography with support for ML-DSA-44, ML-DSA-65, and ML-DSA-87 when used with go 1.27.

Details on the migration requirements for this version can be found int https://github.com/go-webauthn/webauthn/blob/HEAD/MIGRATION.md as they are substantial between ths version and prior versions.

Bug Fixes

  • metadata: align members with mds 3.1.1 and ctap 2.3 (#739) (397152c)
  • metadata: consistent revocation policy and client timeouts (#740) (34d324b)
  • metadata: handle certificate chains of any depth (#737) (309ea69)
  • metadata: honour status report order and effective dates (#736) (8be5355)
  • metadata: mds3 parsing conformance and cache integrity (#735) (8115143)
  • metadata: prevent panic corrupt blob (#698) (c5fd013)
  • metadata: report malformed status report urls (#738) (ed82f7c)
  • protocol: allow any attestation eku (#728) (f4e33fc)
  • protocol: androidkey missing authorization list member (#727) (9b02b19)
  • protocol: androidkey union generated (#729) (3ed3e75)
  • protocol: bind credential public key curve to its algorithm (#752) (314c2be)
  • protocol: compound attestation sub-statement unmarshalling (#751) (a582ecf)
  • protocol: compound returns incorrect type (#731) (025d897)

... (truncated)

Changelog

Sourced from github.com/go-webauthn/webauthn's changelog.

v0.18.2 (2026-09-19)

Bug Fixes

  • protocol: accept anonca attestation trust anchors (#801) (b1dfbf2)
  • protocol: convey safetynet attestation trust path (#800) (5f8a38c)
  • protocol: validate fido-u2f credential curve and certificate validity (#802) (55d49f8)
  • protocol: validate safetynet version and response age (#799) (dda068d)
  • protocol: validate tpm aik certificate validity period (#797) (9ab858d)
  • webauthn: require authorization to initialize uv (#795) (597882d)
  • webauthn: validate session challenge when finishing ceremonies (#794) (bbe2902)

Features

  • protocol: determine fido-u2f attestation type from metadata (#798) (ccbbb4b)
  • protocol: validate authenticator data against metadata (#793) (1ee00cf)

0.18.1 (2026-09-10)

This release just updates dependencies.

0.18.0 (2026-08-27)

This release is a fairly major milestone in the development of this library. It has quite a few breaking changes but has added support for most if not all of the extension requirements natively, and adds formal support for Post-Quantum Cryptography with support for ML-DSA-44, ML-DSA-65, and ML-DSA-87 when used with go 1.27.

Details on the migration requirements for this version can be found int [MIGRATION.md] as they are substantial between ths version and prior versions.

Bug Fixes

  • metadata: align members with mds 3.1.1 and ctap 2.3 (#739) (397152c)
  • metadata: consistent revocation policy and client timeouts (#740) (34d324b)
  • metadata: handle certificate chains of any depth (#737) (309ea69)
  • metadata: honour status report order and effective dates (#736) (8be5355)
  • metadata: mds3 parsing conformance and cache integrity (#735) (8115143)
  • metadata: prevent panic corrupt blob (#698) (c5fd013)
  • metadata: report malformed status report urls (#738) (ed82f7c)
  • protocol: allow any attestation eku (#728) (f4e33fc)
  • protocol: androidkey missing authorization list member (#727) (9b02b19)
  • protocol: androidkey union generated (#729) (3ed3e75)
  • protocol: bind credential public key curve to its algorithm (#752) (314c2be)
  • protocol: compound attestation sub-statement unmarshalling (#751) (a582ecf)
  • protocol: compound returns incorrect type (#731) (025d897)
  • protocol: credential public key match limited to ECDSA (#732) (b4df26e)
  • protocol: harden credential response and options handling (#763) (de0ae6c)
  • protocol: missing tpm steps (#725) (f9a63f9)

... (truncated)

Commits
  • a4c6fc6 release: v0.18.2 (#803)
  • 55d49f8 fix(protocol): validate fido-u2f credential curve and certificate validity (#...
  • 5f8a38c fix(protocol): convey safetynet attestation trust path (#800)
  • b1dfbf2 fix(protocol): accept anonca attestation trust anchors (#801)
  • dda068d fix(protocol): validate safetynet version and response age (#799)
  • ccbbb4b feat(protocol): determine fido-u2f attestation type from metadata (#798)
  • 9ab858d fix(protocol): validate tpm aik certificate validity period (#797)
  • 1ee00cf feat(protocol): validate authenticator data against metadata (#793)
  • 3f8af2b build(deps): update github/codeql-action action to v4.38.1 (#796)
  • 597882d fix(webauthn): require authorization to initialize uv (#795)
  • Additional commits viewable in compare view

Updates github.com/xraph/chronicle from 1.6.2 to 1.6.4

Release notes

Sourced from github.com/xraph/chronicle's releases.

v1.6.4

Changes

  • ci: ran go mod tidy (c5ffddc)

Installation

go get github.com/xraph/chronicle@v1.6.4

Full Changelog: xraph/chronicle@v1.6.3...v1.6.4

v1.6.3

Changes

  • chore: bumped version of forge deps (7c50015)

Installation

go get github.com/xraph/chronicle@v1.6.3

Full Changelog: xraph/chronicle@v1.6.2...v1.6.3

Commits

Updates github.com/xraph/forge/extensions/auth from 1.11.0 to 1.12.0

Release notes

Sourced from github.com/xraph/forge/extensions/auth's releases.

v1.12.0

Forge Framework v1.12.0 (2026-10-02T00:42:06Z)

Welcome to this new release of Forge Framework!

Changelog

Bug Fixes

  • 4cee987c0884cca10f5b24304e5ca4a2fb222bb1: fix(dashboard): cap the contract envelope before decoding it (@​juicycleff)
  • 0b6d6c20349eba2ffa439c0d93436face181be81: fix(dashboard): discover remote contract contributors (@​juicycleff)
  • bd2ebddca2e9f2ef95247611e681c33596c1ec48: fix(hls): stop importing trove's forge extension (@​juicycleff)

Refactoring

  • b55066603d499bd8921e2708c85ce45dc5c9e310: refactor(dashboard)!: serve data only and remove templ (@​juicycleff)

Documentation Updates

  • 7a28ecfa857bdb7b2ee38b0c5d02d5a7615e7cdb: docs(changelog): update CHANGELOG.md for v1.11.2 (@​github-actions[bot])

Installation

Using Go Install

go install github.com/xraph/forge/cmd/forge@v1.12.0

Download Binary

Download the appropriate binary for your platform from the assets below.

Using Package Managers

# Homebrew (macOS/Linux)
brew install xraph/tap/forge
Scoop (Windows)
scoop bucket add xraph https://github.com/xraph/scoop-bucket
scoop install forge

What's Changed

Full changelog: xraph/forge@v1.11.2...v1.12.0

v1.11.2

Forge Framework v1.11.2 (2026-09-29T20:39:05Z)

Welcome to this new release of Forge Framework!

Changelog

New Features

  • 745441d174198232dc2b0cd6255589a2a8ef884e: feat(client): add generated cache and stream metadata (#109) (@​juicycleff)
  • 7138b0612fdd020172226f83bc943750d0f3972f: feat: redesign startup banner (#110) (@​juicycleff)

Bug Fixes

  • ce59927ec70ab49113d376737a07df180cc01a81: fix(client): read a duplex channel's directions from the operations that speak them (#108) (@​juicycleff)
  • 90d900f702b1aa47cd981c30bb5f2b798b0bc7ed: fix(dashboard): fixed the tracing middleware in dashboard (@​juicycleff)

... (truncated)

Changelog

Sourced from github.com/xraph/forge/extensions/auth's changelog.

1.12.0 (2026-10-02)

Refactoring

  • dashboard: refactor(dashboard)!: serve data only and remove templ (b5506660)

Maintenance

  • changelog: update CHANGELOG.md for v1.11.2 (7a28ecfa)

1.11.2 (2026-09-29)

Features

Bug Fixes

  • client: read a duplex channel's directions from the operations that speak them (#108) (ce59927e)

Maintenance

  • changelog: update CHANGELOG.md for v1.11.1 (974ab534)

1.11.1 (2026-09-15)

Features

  • client: duplex stream channels with a send path (#107) (d5c970e3)
  • client-devtools: feat(client-devtools)!: make /overlay the full panel, move the lean view to /mini (#104) (1c23a5c6)
  • cli: scaffold a Next.js dashboard with forge dashboard new --target=next (#103) (9523267b)
  • client-devtools: close the gap to the panel design (#102) (a4c59755)
  • client-devtools: causal trace, network view and control rail (#101) (a84dc2dc)

Bug Fixes

  • client-devtools: stop table columns collapsing, deprecate the lean view (#105) (d96026cc)
  • deps: move the last three modules onto forge v1.11.0 (4ee53c37)

Refactoring

... (truncated)

Commits
  • bd2ebdd fix(hls): stop importing trove's forge extension
  • 0b6d6c2 fix(dashboard): discover remote contract contributors
  • b550666 refactor(dashboard)!: serve data only and remove templ
  • 4cee987 fix(dashboard): cap the contract envelope before decoding it
  • 7a28ecf docs(changelog): update CHANGELOG.md for v1.11.2
  • 90d900f fix(dashboard): fixed the tracing middleware in dashboard
  • 7138b06 feat: redesign startup banner (#110)
  • ce59927 fix(client): read a duplex channel's directions from the operations that spea...
  • 745441d feat(client): add generated cache and stream metadata (#109)
  • 974ab53 docs(changelog): update CHANGELOG.md for v1.11.1
  • Additional commits viewable in compare view

Updates github.com/xraph/grove from 1.6.3 to 1.7.0

Release notes

Sourced from github.com/xraph/grove's releases.

v1.7.0

Changes

  • Fix/sqlite time utc (#32) (b233c5f)
  • Fix/kv namespace hooks (#33) (acdd8a3)

Installation

go get github.com/xraph/grove@v1.7.0

Driver sub-modules:

go get github.com/xraph/grove/drivers/pgdriver@v1.7.0
go get github.com/xraph/grove/drivers/mysqldriver@v1.7.0
go get github.com/xraph/grove/drivers/sqlitedriver@v1.7.0
go get github.com/xraph/grove/drivers/mongodriver@v1.7.0
go get github.com/xraph/grove/drivers/tursodriver@v1.7.0
go get github.com/xraph/grove/drivers/clickhousedriver@v1.7.0
go get github.com/xraph/grove/drivers/esdriver@v1.7.0

Forge extension:

go get github.com/xraph/grove/extension@v1.7.0

KV store:

go get github.com/xraph/grove/kv@v1.7.0

KV Forge extension:

go get github.com/xraph/grove/kv/extension@v1.7.0

KV driver sub-modules:

go get github.com/xraph/grove/kv/drivers/badgerdriver@v1.7.0
go get github.com/xraph/grove/kv/drivers/boltdriver@v1.7.0
go get github.com/xraph/grove/kv/drivers/dynamodriver@v1.7.0
go get github.com/xraph/grove/kv/drivers/memcacheddriver@v1.7.0
go get github.com/xraph/grove/kv/drivers/redisdriver@v1.7.0

... (truncated)

Commits
  • b233c5f Fix/sqlite time utc (#32)
  • acdd8a3 Fix/kv namespace hooks (#33)
  • 0fc7577 fix(sqlite): write times as UTC and read what t.String() left on disk (#31)
  • f8f9a8f fix(kv): hand the driver hook-rewritten keys on every command (#30)
  • See full diff in compare view

Updates github.com/xraph/grove/drivers/mongodriver from 1.6.3 to 1.7.0

Release notes

Sourced from github.com/xraph/grove/drivers/mongodriver's releases.

v1.7.0

Changes

  • Fix/sqlite time utc (#32) (b233c5f)
  • Fix/kv namespace hooks (#33) (acdd8a3)

Installation

go get github.com/xraph/grove@v1.7.0

Driver sub-modules:

go get github.com/xraph/grove/drivers/pgdriver@v1.7.0
go get github.com/xraph/grove/drivers/mysqldriver@v1.7.0
go get github.com/xraph/grove/drivers/sqlitedriver@v1.7.0
go get github.com/xraph/grove/drivers/mongodriver@v1.7.0
go get github.com/xraph/grove/drivers/tursodriver@v1.7.0
go get github.com/xraph/grove/drivers/clickhousedriver@v1.7.0
go get github.com/xraph/grove/drivers/esdriver@v1.7.0

Forge extension:

go get github.com/xraph/grove/extension@v1.7.0

KV store:

go get github.com/xraph/grove/kv@v1.7.0

KV Forge extension:

go get github.com/xraph/grove/kv/extension@v1.7.0

KV driver sub-modules:

go get github.com/xraph/grove/kv/drivers/badgerdriver@v1.7.0
go get github.com/xraph/grove/kv/drivers/boltdriver@v1.7.0
go get github.com/xraph/grove/kv/drivers/dynamodriver@v1.7.0
go get github.com/xraph/grove/kv/drivers/memcacheddriver@v1.7.0
go get github.com/xraph/grove/kv/drivers/redisdriver@v1.7.0

... (truncated)

Commits
  • b233c5f Fix/sqlite time utc (#32)
  • acdd8a3 Fix/kv namespace hooks (#33)
  • 0fc7577 fix(sqlite): write times as UTC and read what t.String() left on disk (#31)
  • f8f9a8f fix(kv): hand the driver hook-rewritten keys on every command (#30)
  • See full diff in compare view

Updates github.com/xraph/grove/drivers/pgdriver from 1.6.3 to 1.7.0

Release notes

Sourced from github.com/xraph/grove/drivers/pgdriver's releases.

v1.7.0

Changes

  • Fix/sqlite time utc (#32) (b233c5f)
  • Fix/kv namespace hooks (#33) (acdd8a3)

Installation

go get github.com/xraph/grove@v1.7.0

Driver sub-modules:

go get github.com/xraph/grove/drivers/pgdriver@v1.7.0
go get github.com/xraph/grove/drivers/mysqldriver@v1.7.0
go get github.com/xraph/grove/drivers/sqlitedriver@v1.7.0
go get github.com/xraph/grove/drivers/mongodriver@v1.7.0
go get github.com/xraph/grove/drivers/tursodriver@v1.7.0
go get github.com/xraph/grove/drivers/clickhousedriver@v1.7.0
go get github.com/xraph/grove/drivers/esdriver@v1.7.0

Forge extension:

go get github.com/xraph/grove/extension@v1.7.0

KV store:

go get github.com/xraph/grove/kv@v1.7.0

KV Forge extension:

go get github.com/xraph/grove/kv/extension@v1.7.0

KV driver sub-modules:

go get github.com/xraph/grove/kv/drivers/badgerdriver@v1.7.0
go get github.com/xraph/grove/kv/drivers/boltdriver@v1.7.0
go get github.com/xraph/grove/kv/drivers/dynamodriver@v1.7.0
go get github.com/xraph/grove/kv/drivers/memcacheddriver@v1.7.0
go get github.com/xraph/grove/kv/drivers/redisdriver@v1.7.0

... (truncated)

Commits
  • b233c5f Fix/sqlite time utc (#32)
  • acdd8a3 Fix/kv namespace hooks (#33)
  • 0fc7577 fix(sqlite): write times as UTC and read what t.String() left on disk (#31)
  • f8f9a8f fix(kv): hand the driver hook-rewritten keys on every command (#30)
  • See full diff in compare view

Updates github.com/xraph/grove/drivers/sqlitedriver from 1.6.3 to 1.7.0

Release notes

Sourced from github.com/xraph/grove/drivers/sqlitedriver's releases.

v1.7.0

Changes

  • Fix/sqlite time utc (#32) (b233c5f)
  • Fix/kv namespace hooks (#33) (acdd8a3)

Installation

go get github.com/xraph/grove@v1.7.0

Driver sub-modules:

go get github.com/xraph/grove/drivers/pgdriver@v1.7.0
go get github.com/xraph/grove/drivers/mysqldriver@v1.7.0
go get github.com/xraph/grove/drivers/sqlitedriver@v1.7.0
go get github.com/xraph/grove/drivers/mongodriver@v1.7.0
go get github.com/xraph/grove/drivers/tursodriver@v1.7.0
go get github.com/xraph/grove/drivers/clickhousedriver@v1.7.0
go get github.com/xraph/grove/drivers/esdriver@v1.7.0

Forge extension:

go get github.com/xraph/grove/extension@v1.7.0

KV store:

go get github.com/xraph/grove/kv@v1.7.0

KV Forge extension:

go get github.com/xraph/grove/kv/extension@v1.7.0

KV driver sub-modules:

go get github.com/xraph/grove/kv/drivers/badgerdriver@v1.7.0
go get github.com/xraph/grove/kv/drivers/boltdriver@v1.7.0
go get github.com/xraph/grove/kv/drivers/dynamodriver@v1.7.0
go get github.com/xraph/grove/kv/drivers/memcacheddriver@v1.7.0
go get github.com/xraph/grove/kv/drivers/redisdriver@v1.7.0

... (truncated)

Commits
  • b233c5f Fix/sqlite time utc (#32)
  • acdd8a3 Fix/kv namespace hooks (#33)
  • 0fc7577 fix(sqlite): write times as UTC and read what t.String() left on disk (#31)
  • f8f9a8f fix(kv): hand the driver hook-rewritten keys on every command (#30)
  • See full diff in compare view

Updates github.com/xraph/herald from 1.6.1 to 1.6.2

Release notes

Sourced from github.com/xraph/herald's releases.

v1.6.2

Changes

  • chore: updated forge deps (992da03)
  • build: require sibling modules at versions that exist (65fba95)

Installation

go get github.com/xraph/herald@v1.6.2

Full Changelog: xraph/herald@v1.6.1...v1.6.2

Commits

Updates github.com/xraph/keysmith from 1.6.2 to 1.6.3

Release notes

Sourced from github.com/xraph/keysmith's releases.

v1.6.3

Changes

  • chore: updated forge deps (55b057f)

Installation

go get github.com/xraph/keysmith@v1.6.3

Full Changelog: xraph/keysmith@v1.6.2...v1.6.3

Commits

Updates github.com/xraph/relay from 1.6.2 to 1.6.3

Release notes

Sourced from github.com/xraph/relay's releases.

v1.6.3

Changes

  • chore: updated forge deps (617d25b)
  • chore: bumped version of forge deps (8163f7c)
  • chore: updated gitignore (c6ee6b4)

Installation

go get github.com/xraph/relay@v1.6.3

Full Changelog: xraph/relay@v1.6.2...v1.6.3

Commits

Updates github.com/xraph/warden from 1.6.2 to 1.6.4

Release notes

Sourced from github.com/xraph/warden's releases.

v1.6.4

Warden v1.6.4 (2026-09-03T04:08:45Z)

Composable RBAC + ABAC + ReBAC + PBAC for Go, with a declarative .warden config language and language server in the box.

Changelog

Installation

Using go install

go install github.com/xraph/warden/cmd/warden@v1.6.4
go install github.com/xraph/warden/cmd/warden-lsp@v1.6.4

Pre-built binaries

Download the appropriate archive for your platform from the assets below. Each archive contains both warden and warden-lsp.

Verify checksums:

shasum -a 256 -c checksums.txt

VS Code extension

The companion VS Code extension is published as xraph.vscode-warden and released on its own vscode-warden/v*.*.* tag schedule. See the extension README.

What's Changed

Full changelog: xraph/warden@v1.6.3...v1.6.4

v1.6.3

Warden v1.6.3 (2026-08-26T14:01:05Z)

Composable RBAC + ABAC + ReBAC + PBAC for Go, with a declarative .warden config language and language server in the box.

Changelog

Installation

Using go install

... (truncated)

Commits

Updates go.mongodb.org/mongo-driver/v2 from 2.8.0 to 2.9.1

Release notes

Sourced from go.mongodb.org/mongo-driver/v2's releases.

MongoDB Go Driver 2.9.1

The MongoDB Go Driver Team is pleased to release version 2.9.1 of the official MongoDB Go Driver.

Release Highlights

[!WARNING]
Go Driver versions v1.0.0 through v1.17.9 and v2.0.0 through v2.9.0 are affected by a security issue CVE-2026-88031 in the GridFS delete methods. This release resolves that security issue in Go Driver v2. Users are encouraged to upgrade to Go Driver v2.9.1 as soon as possible. For the fix in Go Driver v1, see the v1.17.10 release.

This release addresses CVE-2026-88031, a security issue in GridFS delete methods where the file ID lookup could match more loosely than intended, potentially causing unintended file (and chunk) deletions instead of an exact match on the given file ID.

Users can manually restrict the file ID with a $eq operator before passing it to GridFSBucket methods using code like the following.

func exactMatch(id any) bson.D {
	return bson.D{{"$eq", id}}
}
// e.g., for v2, (*GridFSBucket).Delete() with an exact match on the file ID.
gridFSBucket.Delete(context.TODO(), exactMatch(id))

What's Changed

🐛 Fixed

  • GODRIVER-4081: Use exact match for file ID in GridFS delete methods. by @​qingyang-hu

Full Changelog: v2.9.0...v2.9.1

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. For issues with, questions about, or feedback for the Go Driver, please look into our support channels, including StackOverflow. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

MongoDB Go Driver 2.9.0

The MongoDB Go Driver Team is pleased to release version 2.9.0 of the official MongoDB Go Driver.

Release Highlights

[!WARNING] The minimum supported MongoDB server version is now 4.4.

[!WARNING] The minimum supported Go version is now 1.25. The Go Driver supports the last 2 Go minor versions.

New ext/awsauth module

The new ext/awsauth module adds support for all AWS authentication methods via the official AWS SDK for Go. Applications running on AWS can now use an awsauth.CredentialsProvider in ClientOptions, ClientEncryptionOptions, and AutoEncryptionOptions.

For example, to configure a mongo.Client with the new ext/awsauth module:

import (
</tr></table> 

... (truncated)

Commits
  • 5d8c3a2 BUMP v2.9.1
  • ba2ddbf Merge commit from fork
  • 9a88e59 Merge branch 'release/2.9' into godriver4081-gridFsId
  • 099a81f BUMP v2.9.0
  • 3c87f21 GODRIVER-4101 Add tlsDisableCertificateRevocationCheck option. (#2571)
  • 5e5fba9 Bump testdata/specifications from d9d69f5 to 70a628b (#2576)
  • ac30cac GODRIVER-4109: Exclude OCSP errors from backpressure label (#2584)
  • 15ca7a0 GODRIVER-4096 Fix panic in Collection.insert on out-of-order write errors (#2...
  • 325f1ac Bump github/codeql-action from 4.37.8 to 4.37.9 in the actions group (#2583)
  • 4fe3377 GODRIVER-4062 Remove the ServerOverloadedError retry example. (#2568)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.55.0 to 0.57.0

Commits
  • 3f62bf1 go.mod: update golang.org/x dependencies
  • 86efde5 ssh: reject unexpected message types on established channels
  • a6cdac6 ssh: drop traffic on undecided channels
  • 39dc44e ssh: don't skip the source-address critical option in CheckCert
  • afebf4c x509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+
  • 89f4e9b x509roots/fallback: update bundle
  • 71488c4 ssh/knownhosts: compare only public key portions for revocation
  • 82adefa ssh: synchronize unexpected response test
  • c757c98 all: upgrade go directive to at least 1.26.0 [generated]
  • 593c81a ssh: correctly ignore pre-banner lines
  • Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.36.0 to 0.37.0

Commits
  • c624b89 google: change the snake case endpoint to kebab-case
  • 09a82f6 all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Updates github.com/xraph/dispatch from 1.6.2 to 1.6.7

Release notes

Sourced from github.com/xraph/dispatch's releases.

v1.6.7

Changes

  • Merge pull request #32 from xraph/feat/redis-key-prefix (795bc0e)
  • feat(store/redis): namespace keys per tenant with WithKeyPrefix (b17fb95)

Installation

go get github.com/xraph/dispatch@v1.6.7

What's Changed

Full Changelog: xraph/dispatch@v1.6.5...v1.6.7

v1.6.6

Changes

  • feat(store/redis): namespace keys per tenant with WithKeyPrefix (b17fb95)

Installation

go get github.com/xraph/dispatch@v1.6.6

Full Changelog: xraph/dispatch@v1.6.5...v1.6.6

v1.6.5

Changes

  • Merge pull request #31 from xraph/fix/client-expired-context (a188970)
  • chore: bumped forge version (3defc4c)

Installation

go get github.com/xraph/dispatch@v1.6.5

... (truncated)

Commits
  • 795bc0e Merge pull request #32 from xraph/feat/redis-key-prefix
  • b17fb95 feat(store/redis): namespace keys per tenant with WithKeyPrefix
  • a188970 Merge pull request #31 from xraph/fix/client-expired-context
  • 3defc4c chore: bumped forge version
  • 79ea9be Merge pull request #30 from xraph/fix/client-expired-context
  • fdfc5ab fix(client): honour an already-cancelled context before sending
  • b529178 Merge pull request #29 from xraph/fix/shim-sigterm-exit-window
  • c1f25c5 fix(exec/subprocess): wait out the reap before probing the grandchild
  • 634bf87 chore(exec/shim): annotate the gosec findings that are false positives
  • 1ec1ed6 fix(exec/shim): stop a late SIGTERM killing a clean shutdown
  • Additional commits viewable in compare view

Updates github.com/xraph/ledger from 1.6.1 to 1.6.4

Release notes

Sourced from github.com/xraph/ledger's releases.

v1.6.4

Changes

  • chore: updated forge deps (7fe72a3)

Installation

go get github.com/xraph/ledger@v1.6.4

Full Changelog: xraph/ledger@v1.6.3...v1.6.4

v1.6.3

Changes

  • chore: go update the forge deps (867a57a)

Installation

go get github.com/xraph/ledger@v1.6.3

Full Changelog: xraph/ledger@v1.6.2...v1.6.3

v1.6.2

Changes

  • chore: bumoed version of forge deps (38f2381)

Installation

go get github.com/xraph/ledger@v1.6.2

Full Changelog: xraph/ledger@v1.6.1...v1.6.2

Commits

Updates github.com/xraph/vault from 1.6.1 to 1.6.4

Release notes

Sourced from github.com/xraph/vault's releases.

v1.6.4

Changes

  • Merge pull request #20 from xraph/wisdom/kin-169-fix-vault-postgres-setsecret-scalar-scan-breaks-all (b5f5d25)
  • fix(store): scan whole rows for version lookups so SetSecret works at all (c6a398b)

Installation

go get github.com/xraph/vault@v1.6.4

What's Changed

New Contributors

Full Changelog: xraph/vault@v1.6.3...v1.6.4

v1.6.3

Changes

  • ci: ran go mod tidy (2fa28e9)
  • ci: ran go mod tidy (61d85d6)

Installation

go get github.com/xraph/vault@v1.6.3

Full Changelog: xraph/vault@v1.6.2...v1.6.3

v1.6.2

Changes

  • chore: go update the forge deps (2c13355)

Installation

</tr></table> 

... (truncated)

C...

Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 5, 2026
…7 updates

Bumps the minor-and-patch group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-webauthn/webauthn](https://github.com/go-webauthn/webauthn) | `0.17.4` | `0.18.2` |
| [github.com/xraph/chronicle](https://github.com/xraph/chronicle) | `1.6.2` | `1.6.4` |
| [github.com/xraph/forge/extensions/auth](https://github.com/xraph/forge) | `1.11.0` | `1.12.0` |
| [github.com/xraph/grove](https://github.com/xraph/grove) | `1.6.3` | `1.7.0` |
| [github.com/xraph/grove/drivers/mongodriver](https://github.com/xraph/grove) | `1.6.3` | `1.7.0` |
| [github.com/xraph/grove/drivers/pgdriver](https://github.com/xraph/grove) | `1.6.3` | `1.7.0` |
| [github.com/xraph/grove/drivers/sqlitedriver](https://github.com/xraph/grove) | `1.6.3` | `1.7.0` |
| [github.com/xraph/herald](https://github.com/xraph/herald) | `1.6.1` | `1.6.2` |
| [github.com/xraph/keysmith](https://github.com/xraph/keysmith) | `1.6.2` | `1.6.3` |
| [github.com/xraph/relay](https://github.com/xraph/relay) | `1.6.2` | `1.6.3` |
| [github.com/xraph/warden](https://github.com/xraph/warden) | `1.6.2` | `1.6.4` |
| [go.mongodb.org/mongo-driver/v2](https://github.com/mongodb/mongo-go-driver) | `2.8.0` | `2.9.1` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.55.0` | `0.57.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.36.0` | `0.37.0` |
| [github.com/xraph/dispatch](https://github.com/xraph/dispatch) | `1.6.2` | `1.6.7` |
| [github.com/xraph/ledger](https://github.com/xraph/ledger) | `1.6.1` | `1.6.4` |
| [github.com/xraph/vault](https://github.com/xraph/vault) | `1.6.1` | `1.6.4` |



Updates `github.com/go-webauthn/webauthn` from 0.17.4 to 0.18.2
- [Release notes](https://github.com/go-webauthn/webauthn/releases)
- [Changelog](https://github.com/go-webauthn/webauthn/blob/master/CHANGELOG.md)
- [Commits](go-webauthn/webauthn@v0.17.4...v0.18.2)

Updates `github.com/xraph/chronicle` from 1.6.2 to 1.6.4
- [Release notes](https://github.com/xraph/chronicle/releases)
- [Commits](xraph/chronicle@v1.6.2...v1.6.4)

Updates `github.com/xraph/forge/extensions/auth` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/xraph/forge/releases)
- [Changelog](https://github.com/xraph/forge/blob/main/CHANGELOG.md)
- [Commits](xraph/forge@v1.11.0...v1.12.0)

Updates `github.com/xraph/grove` from 1.6.3 to 1.7.0
- [Release notes](https://github.com/xraph/grove/releases)
- [Commits](xraph/grove@v1.6.3...v1.7.0)

Updates `github.com/xraph/grove/drivers/mongodriver` from 1.6.3 to 1.7.0
- [Release notes](https://github.com/xraph/grove/releases)
- [Commits](xraph/grove@v1.6.3...v1.7.0)

Updates `github.com/xraph/grove/drivers/pgdriver` from 1.6.3 to 1.7.0
- [Release notes](https://github.com/xraph/grove/releases)
- [Commits](xraph/grove@v1.6.3...v1.7.0)

Updates `github.com/xraph/grove/drivers/sqlitedriver` from 1.6.3 to 1.7.0
- [Release notes](https://github.com/xraph/grove/releases)
- [Commits](xraph/grove@v1.6.3...v1.7.0)

Updates `github.com/xraph/herald` from 1.6.1 to 1.6.2
- [Release notes](https://github.com/xraph/herald/releases)
- [Changelog](https://github.com/xraph/herald/blob/main/CHANGELOG.md)
- [Commits](xraph/herald@v1.6.1...v1.6.2)

Updates `github.com/xraph/keysmith` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/xraph/keysmith/releases)
- [Commits](xraph/keysmith@v1.6.2...v1.6.3)

Updates `github.com/xraph/relay` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/xraph/relay/releases)
- [Commits](xraph/relay@v1.6.2...v1.6.3)

Updates `github.com/xraph/warden` from 1.6.2 to 1.6.4
- [Release notes](https://github.com/xraph/warden/releases)
- [Commits](xraph/warden@v1.6.2...v1.6.4)

Updates `go.mongodb.org/mongo-driver/v2` from 2.8.0 to 2.9.1
- [Release notes](https://github.com/mongodb/mongo-go-driver/releases)
- [Commits](mongodb/mongo-go-driver@v2.8.0...v2.9.1)

Updates `golang.org/x/crypto` from 0.55.0 to 0.57.0
- [Commits](golang/crypto@v0.55.0...v0.57.0)

Updates `golang.org/x/oauth2` from 0.36.0 to 0.37.0
- [Commits](golang/oauth2@v0.36.0...v0.37.0)

Updates `github.com/xraph/dispatch` from 1.6.2 to 1.6.7
- [Release notes](https://github.com/xraph/dispatch/releases)
- [Commits](xraph/dispatch@v1.6.2...v1.6.7)

Updates `github.com/xraph/ledger` from 1.6.1 to 1.6.4
- [Release notes](https://github.com/xraph/ledger/releases)
- [Commits](xraph/ledger@v1.6.1...v1.6.4)

Updates `github.com/xraph/vault` from 1.6.1 to 1.6.4
- [Release notes](https://github.com/xraph/vault/releases)
- [Commits](xraph/vault@v1.6.1...v1.6.4)

---
updated-dependencies:
- dependency-name: github.com/go-webauthn/webauthn
  dependency-version: 0.18.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/chronicle
  dependency-version: 1.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/dispatch
  dependency-version: 1.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/forge/extensions/auth
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/grove
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/grove/drivers/mongodriver
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/grove/drivers/pgdriver
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/grove/drivers/sqlitedriver
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/herald
  dependency-version: 1.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/keysmith
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/ledger
  dependency-version: 1.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/relay
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/vault
  dependency-version: 1.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/warden
  dependency-version: 1.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: go.mongodb.org/mongo-driver/v2
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/crypto
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/minor-and-patch-91054bbbfb branch from 2117fbc to 2f97d54 Compare October 6, 2026 23:41

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants