Skip to content

build(deps): bump the go-dependencies group across 1 directory with 13 updates#4880

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-dependencies-bbaea866e7
Open

build(deps): bump the go-dependencies group across 1 directory with 13 updates#4880
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-dependencies-bbaea866e7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 9 updates in the / directory:

Package From To
cloud.google.com/go/auth 0.20.0 0.22.0
cloud.google.com/go/iam 1.11.0 1.12.0
cloud.google.com/go/storage 1.62.3 1.63.1
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric 0.57.0 0.58.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/trace 1.33.0 1.34.0
github.com/prometheus/common 0.68.1 0.70.0
golang.org/x/sync 0.21.0 0.22.0
golang.org/x/sys 0.46.0 0.47.0
golang.org/x/text 0.38.0 0.40.0

Updates cloud.google.com/go/auth from 0.20.0 to 0.22.0

Release notes

Sourced from cloud.google.com/go/auth's releases.

gkehub: v0.22.0

0.22.0 (2026-07-13)

Features

Changelog

Sourced from cloud.google.com/go/auth's changelog.

v0.22.0

  • bigtable:

    • cbt: Support cells per column limit for row read.
    • bttest: Correctly handle empty RowSet.
    • Fix ReadModifyWrite operation in emulator.
    • Fix API path in GetCluster.

  • bigquery:

    • BEHAVIOR CHANGE: Retry on 503 status code.
    • Add dataset.DeleteWithContents.
    • Add SchemaUpdateOptions for query jobs.
    • Add Timeline to QueryStatistics.
    • Add more stats to ExplainQueryStage.
    • Support Parquet data format.

  • datastore:

    • Support omitempty for times.

  • dlp:

    • BREAKING CHANGE: Remove v1beta1 client. Please migrate to the v2 client, which is now out of beta.
    • Add v2 client.

  • firestore:

    • BEHAVIOR CHANGE: Treat set({}, MergeAll) as valid.

  • iam:

    • Support JWT signing via SignJwt callopt.

  • profiler:

    • BEHAVIOR CHANGE: PollForSerialOutput returns an error when context.Done.
    • BEHAVIOR CHANGE: Increase the initial backoff to 1 minute.
    • Avoid returning empty serial port output.

  • pubsub:

    • BEHAVIOR CHANGE: Don't backoff during next retryable error once stream is healthy.
    • BEHAVIOR CHANGE: Don't backoff on EOF.
    • pstest: Support Acknowledge and ModifyAckDeadline RPCs.

  • redis:

    • Add v1 beta Redis client.

  • spanner:

    • Support SessionLabels.

  • speech:

    • Add api v1 beta1 client.

  • storage:

... (truncated)

Commits
  • 056a55f README: update news for next release
  • 634c646 httpreplay: fix test to use creds file
  • e7bc581 run-tests.sh: fix comment
  • 8861f7b profiler: reduce verbosity of e2e output
  • e9284ba Add SlotMillis to QueryStatistics.
  • d5b54ef httpreplay: part 4: httpr
  • d00f0ac httpreplay: part 3: in-memory API
  • adb76f7 httpreplay: part 2: proxy for replaying
  • 63fd17b httpreplay: part 1: proxy for recording
  • 5c31045 redis: add v1 beta redis client
  • Additional commits viewable in compare view

Updates cloud.google.com/go/iam from 1.11.0 to 1.12.0

Release notes

Sourced from cloud.google.com/go/iam's releases.

config: v1.12.0

1.12.0 (2026-07-13)

Features

gkemulticloud: v1.12.0

1.12.0 (2026-07-13)

Features

iam: v1.12.0

1.12.0 (2026-07-13)

Features

optimization: v1.12.0

1.12.0 (2026-07-13)

Features

support: v1.12.0

1.12.0 (2026-07-13)

Features

Changelog

Sourced from cloud.google.com/go/iam's changelog.

1.12.0 (2022-11-16)

Features

  • documentai: added TrainProcessorVersion, EvaluateProcessorVersion, GetEvaluation, and ListEvaluations v1beta3 APIs feat: added evaluation.proto feat: added document_schema field in ProcessorVersion processor.proto feat: added image_quality_scores field in Document.Page in document.proto feat: added font_family field in Document.Style in document.proto (ac0c5c2)
Commits
  • e4aa8d3 chore: release main (#12671)
  • 7616e81 feat(aiplatform): Add API for Gen AI Evaluation in Tuning (#12692)
  • ee98351 chore(main): release 0.121.5 (#12678)
  • aa31abc perf(bigtable): Create attributes only when enabled (#12647)
  • 3f4a99b chore(internal/librariangen): optimize Docker build for caching (#12699)
  • 5c507d4 chore(internal/librariangen): Update Dockerfile to MOSS-compliant base image ...
  • 53f9781 feat(aiplatform): Added document_name for vertex ai search as part of retriev...
  • 2adb6f9 fix(internal/librariangen): update source_paths to source_roots in generate-r...
  • 1197ebc fix(auth): set Content-Type in userTokenProvider.exchangeToken (#12634)
  • 56d1157 chore(all): update deps (#12681)
  • Additional commits viewable in compare view

Updates cloud.google.com/go/storage from 1.62.3 to 1.63.1

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.63.1

1.63.1 (2026-07-13)

Features

Bug Fixes

Commits

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric from 0.57.0 to 0.58.0

Commits

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/trace from 1.33.0 to 1.34.0

Release notes

Sourced from github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/trace's releases.

v1.5.1 and v0.29.1

What's Changed

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v1.5.0...v1.5.1

v1.5.0 and v0.29.0

What's Changed

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v1.4.0...v1.5.0

v1.4.0 and v0.28.0

What's Changed

... (truncated)

Commits

Updates github.com/googleapis/gax-go/v2 from 2.22.0 to 2.23.0

Release notes

Sourced from github.com/googleapis/gax-go/v2's releases.

v2.23.0

2.23.0 (2026-07-07)

Features

  • v2: add http.response.status_code to TransportTelemetryData (#513) (7d5554f)

Bug Fixes

Commits

Updates github.com/prometheus/common from 0.68.1 to 0.70.0

Release notes

Sourced from github.com/prometheus/common's releases.

v0.70.0

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.69.0...v0.70.0

v0.69.0

What's Changed

Full Changelog: prometheus/common@v0.68.1...v0.69.0

Changelog

Sourced from github.com/prometheus/common's changelog.

v0.70.0 / 2026-07-10

Enhancements

  • route: add support for the QUERY HTTP method. #932

Bugfixes

  • config: fix TLSVersion.String() printing a pointer address instead of the numeric version for unknown TLS versions. #929

Internal

  • expfmt: add BenchmarkConvertMetricFamily comparing the Prometheus text and OpenMetrics 1.0 encoders. #943
  • Update Go dependencies. #933 #934
  • Synchronize common files from prometheus/prometheus. #923 #927 #930 #937
  • Update GitHub Actions. #938 #939 #940 #941 #942

Full Changelog: prometheus/common@v0.69.0...v0.70.0

v0.69.0 / 2026-06-17

Security / behavior changes

  • config: credentials are no longer forwarded across cross-host redirects. When FollowRedirects is enabled, the HTTP client now strips Authorization, Cookie, Proxy-Authorization and other sensitive headers, and skips basic-auth, bearer-token and OAuth2 credentials, when a redirect points to a different host. This aligns with Go's net/http behavior. Callers that relied on credentials being sent to a redirect target on another host will need to target that host directly. #901 #920 #921
  • config: LoadHTTPConfigFile now resolves relative file paths (e.g. *_file credentials, http_headers files) against the config file's own directory instead of its parent directory. Configs that worked around the old behavior by prefixing paths with the config's directory name must drop that prefix. #925

Bugfixes

  • expfmt: fix nil pointer panic when parsing empty braces {}. #922
  • model: fix Time.UnmarshalJSON for larger negative numbers. #918

Performance

  • model: reduce allocations in Time.UnmarshalJSON. #918

Internal

  • Synchronize common files from prometheus/prometheus. #917
  • Modernize Go. #919

Full Changelog: prometheus/common@v0.68.1...v0.69.0

v0.67.2 / 2025-10-28

What's Changed

New Contributors

... (truncated)

Commits
  • 5eff7a8 Merge pull request #941 from prometheus/dependabot/github_actions/actions/che...
  • a23c5b3 Merge pull request #939 from prometheus/dependabot/github_actions/ossf/scorec...
  • 9e1eb87 Merge pull request #942 from prometheus/dependabot/github_actions/actions/upl...
  • ab2736d Merge pull request #940 from prometheus/dependabot/github_actions/actions/set...
  • e596873 Merge pull request #938 from prometheus/dependabot/github_actions/codeql-ac07...
  • 97c066a Add BenchmarkConvertMetricFamily comparing Prometheus text and OpenMetrics 1....
  • 62e9d0f Merge pull request #932 from roidelapluie/roidelapluie/route-query
  • 6c31239 build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1
  • 755e9d6 build(deps): bump actions/checkout from 3.1.0 to 7.0.0
  • 556d740 build(deps): bump actions/setup-go from 6.2.0 to 6.5.0
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.55.0 to 0.56.0

Commits
  • 9e7fdbf internal/http3: fix wrong argument being given when validating header value
  • b686e5f internal/http3: add gzip support to transport
  • 8a34885 go.mod: update golang.org/x dependencies
  • 72eaf98 dns/dnsmessage: correctly validate SVCB record parameter order
  • 82e7868 dns/dnsmessage: avoid panic when parsing SVCB record with truncated data
  • b64f1fa internal/http3: add server support for "Trailer:" magic prefix
  • 2707ee2 internal/http3: implement HTTP/3 clientConn methods
  • 31358cc internal/http3: snapshot response headers at WriteHeader time
  • 8ecbaa9 html: don't adjust xml:base
  • 8ae811a html: properly handle end script tag in fragment mode
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.21.0 to 0.22.0

Commits

Updates golang.org/x/sys from 0.46.0 to 0.47.0

Commits
  • 9e7e939 cpu: handle vendor suffixes in parseRelease
  • f6fb8a1 unix: use epoll_pwait rather than epoll_wait
  • f3eeabf windows: avoid length overflow in NewNTString
  • 3cb6647 unix: update glibc to 2.43
  • c507910 windows: document safe usage of TrusteeValue
  • See full diff in compare view

Updates golang.org/x/text from 0.38.0 to 0.40.0

Commits
  • 724af9c go.mod: update golang.org/x dependencies
  • bf5b9d6 internal/export/idna: always treat Punycode encoding pure ASCII as an error
  • b326f3d go.mod: update golang.org/x dependencies
  • 5ae8e57 unicode/norm: avoid infinite loop on invalid input
  • 0dc94a2 all: fix some comments
  • See full diff in compare view

Updates google.golang.org/api from 0.283.0 to 0.287.1

Release notes

Sourced from google.golang.org/api's releases.

v0.287.1

0.287.1 (2026-07-07)

Documentation

v0.287.0

0.287.0 (2026-06-30)

Features

v0.286.0

0.286.0 (2026-06-22)

Features

v0.285.0

0.285.0 (2026-06-16)

Features

v0.284.0

0.284.0 (2026-06-09)

Features

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.287.1 (2026-07-07)

Documentation

0.287.0 (2026-06-30)

Features

0.286.0 (2026-06-22)

Features

0.285.0 (2026-06-16)

Features

0.284.0 (2026-06-09)

Features

Commits

Updates google.golang.org/grpc from 1.81.1 to 1.82.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.0

Behavior Changes

  • server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)
  • transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)
  • balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 14, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 14, 2026 09:24
@dependabot
dependabot Bot requested a review from raj-prince July 14, 2026 09:24
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 14, 2026
@codecov

codecov Bot commented Jul 14, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 83.85%. Comparing base (508b315) to head (47f7550).

Additional details and impacted files 
@@            Coverage Diff             @@
##           master    #4880      +/-   ##
==========================================
+ Coverage   83.84%   83.85%   +0.01%     
==========================================
  Files         173      173              
  Lines       21083    21083              
==========================================
+ Hits        17676    17679       +3     
+ Misses       2748     2746       -2     
+ Partials      659      658       -1
Flag Coverage Δ
unittests 83.85% <ø> (+0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dependabot
build(deps): bump the go-dependencies group across 1 directory with 1…
47f7550 
…3 updates

Bumps the go-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/auth](https://github.com/googleapis/google-cloud-go) | `0.20.0` | `0.22.0` |
| [cloud.google.com/go/iam](https://github.com/googleapis/google-cloud-go) | `1.11.0` | `1.12.0` |
| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.62.3` | `1.63.1` |
| [github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go) | `0.57.0` | `0.58.0` |
| [github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/trace](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go) | `1.33.0` | `1.34.0` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.68.1` | `0.70.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.21.0` | `0.22.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.46.0` | `0.47.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.38.0` | `0.40.0` |



Updates `cloud.google.com/go/auth` from 0.20.0 to 0.22.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@v0.20.0...v0.22.0)

Updates `cloud.google.com/go/iam` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@dlp/v1.11.0...run/v1.12.0)

Updates `cloud.google.com/go/storage` from 1.62.3 to 1.63.1
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@storage/v1.62.3...storage/v1.63.1)

Updates `github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric` from 0.57.0 to 0.58.0
- [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/releases)
- [Commits](GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0...v0.58.0)

Updates `github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/trace` from 1.33.0 to 1.34.0
- [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/releases)
- [Commits](GoogleCloudPlatform/opentelemetry-operations-go@detectors/gcp/v1.33.0...detectors/gcp/v1.34.0)

Updates `github.com/googleapis/gax-go/v2` from 2.22.0 to 2.23.0
- [Release notes](https://github.com/googleapis/gax-go/releases)
- [Commits](googleapis/gax-go@v2.22.0...v2.23.0)

Updates `github.com/prometheus/common` from 0.68.1 to 0.70.0
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.68.1...v0.70.0)

Updates `golang.org/x/net` from 0.55.0 to 0.56.0
- [Commits](golang/net@v0.55.0...v0.56.0)

Updates `golang.org/x/sync` from 0.21.0 to 0.22.0
- [Commits](golang/sync@v0.21.0...v0.22.0)

Updates `golang.org/x/sys` from 0.46.0 to 0.47.0
- [Commits](golang/sys@v0.46.0...v0.47.0)

Updates `golang.org/x/text` from 0.38.0 to 0.40.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.38.0...v0.40.0)

Updates `google.golang.org/api` from 0.283.0 to 0.287.1
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.283.0...v0.287.1)

Updates `google.golang.org/grpc` from 1.81.1 to 1.82.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.81.1...v1.82.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/auth
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: cloud.google.com/go/iam
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.63.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/googleapis/gax-go/v2
  dependency-version: 2.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/trace
  dependency-version: 1.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/prometheus/common
  dependency-version: 0.70.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: google.golang.org/api
  dependency-version: 0.287.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.82.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-bbaea866e7 branch from a0a6ece to 47f7550 Compare July 14, 2026 12:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@raj-prince raj-prince Awaiting requested review from raj-prince raj-prince is a code owner automatically assigned from GoogleCloudPlatform/gcsfuse-codeowners

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants