build(deps): bump the all group across 1 directory with 23 updates by dependabot[bot] · Pull Request #8018 · Checkmarx/kics

dependabot · 2026-03-27T23:45:47Z

Bumps the all group with 16 updates in the / directory:

Package	From	To
code.cloudfoundry.org/bytefmt	`0.35.0`	`0.67.0`
github.com/BurntSushi/toml	`1.5.0`	`1.6.0`
github.com/aws/aws-sdk-go-v2	`1.38.1`	`1.41.5`
github.com/emicklei/proto	`1.14.0`	`1.14.3`
github.com/getsentry/sentry-go	`0.31.2-0.20250102155933-f2d4348b0508`	`0.44.1`
github.com/gookit/color	`1.5.4`	`1.6.0`
github.com/hashicorp/go-getter	`1.8.1`	`1.8.5`
github.com/hashicorp/hcl/v2	`2.23.0`	`2.24.0`
github.com/hashicorp/terraform-json	`0.24.0`	`0.27.2`
github.com/mackerelio/go-osstat	`0.2.5`	`0.2.7`
github.com/moby/buildkit	`0.26.3`	`0.28.1`
github.com/rs/zerolog	`1.34.0`	`1.35.0`
github.com/spf13/cobra	`1.10.1`	`1.10.2`
github.com/tdewolff/minify/v2	`2.23.1`	`2.24.11`
helm.sh/helm/v3	`3.19.4`	`3.20.1`
mvdan.cc/sh/v3	`3.11.0`	`3.13.0`

Updates code.cloudfoundry.org/bytefmt from 0.35.0 to 0.67.0

Commits

0f0d1e6 Update go.mod dependencies
f6303d2 Update go.mod dependencies
3f9afd5 Update go.mod dependencies
f5d896b Update go.mod dependencies
6d93c37 Update go.mod dependencies
e56cf01 Update go.mod dependencies
1b52df0 Update go.mod dependencies
316458b Update go.mod dependencies
2d616b5 Update go.mod dependencies
8c74992 Update go.mod dependencies
Additional commits viewable in compare view

Updates github.com/BurntSushi/toml from 1.5.0 to 1.6.0

Release notes

Sourced from github.com/BurntSushi/toml's releases.

v1.6.0

TOML 1.1 is now enabled by default. The TOML changelog has an overview of changes: https://github.com/toml-lang/toml/blob/main/CHANGELOG.md

Also two small fixes:
Encode large floats as exponent syntax so that round-tripping things like 5e+22 is correct.
Using duplicate array keys would not give an error:
arr = [1]
arr = [2]
This will now correctly give a "Key 'arr' has already been defined" error.

Commits

5253492 Enable TOML 1.1 by default (#457)
e954445 Reject duplicate arrays (#455)
6b16cbd Update toml-test test cases from upstream (#456)
011fa2b Ensure constant format strings in wf calls
4b439bf Remove itemNil
a473c12 Add test for out of range float64
b535ff8 Add some boring tests for lex.go
6011ef0 Remove unreachable condition in lexTableNameStart
c8ca9e6 Remove unreachable condition
1121f81 Make tomlv read from stdin
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.38.1 to 1.41.5

Commits

90650dd Release 2026-03-26
dd88818 Regenerated Clients
b662c50 Update endpoints model
500a9cb Update API model
6221102 fix stale skew and delayed skew healing (#3359)
0a39373 fix order of generated event header handlers (#3361)
098f389 Only generate resolveAccountID when it's required (#3360)
6ebab66 Release 2026-03-25
b2ec3be Regenerated Clients
abc126f Update API model
Additional commits viewable in compare view

Updates github.com/emicklei/proto from 1.14.0 to 1.14.3

Changelog

Sourced from github.com/emicklei/proto's changelog.

v1.14.3 (2026-02-04)

handle double slash in single quotes (#152) (thanks AriehSchneier)

Handle comments at the end of an array (#151) (thanks AriehSchneier)

v1.14.2 (2025-06-18)

fix parsing options for extensions (ISSUE #150)

v1.14.1 (2025-04-29)

fix option name with brackets (ISSUE #148)

Commits

032dc91 update changelog
913a2f5 handle double slash in single quotes (#152)
5d9d844 Handle comments at the end of an array (#151)
bb2929c always run the checks for gh workflow
696d88d update hist
5abe978 fix issue #150, parsing extensions with options
31af4bf issue #148: fix option name parsing with bracket ident (#149)
See full diff in compare view

Updates github.com/getsentry/sentry-go from 0.31.2-0.20250102155933-f2d4348b0508 to 0.44.1

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.44.1

[!NOTE]
v0.44.0 had to be released as v0.44.1 due to a technical issue.

New Features ✨
Add RemoveAttribute api on the scope. by @giortzisg in #1224
Deprecate Scope.SetExtra, Scope.SetExtras, and Scope.RemoveExtra in favor of Scope.SetAttributes and Scope.RemoveAttribute by @giortzisg in #1224

The recommended migration path is to use SetAttributes to attach values to logs and metrics. Note that attributes do not appear on error events; if you only capture errors, use SetTag or SetContext instead.

Before:
scope.SetExtra("key.string", "str")
scope.SetExtra("key.int", 42)
After (for error events) — use tags and contexts:
scope.SetTag("key.string", "str")
scope.SetContext("my_data", sentry.Context{"key.int": 42})
After (for logs and metrics) — use attributes:
scope.SetAttributes(
    attribute.String("key.string", "str"),
    attribute.Int("key.int", 42),
)
Add support for homogenous arrays by @giortzisg in #1203

Add support for client reports by @giortzisg in #1192

Add org id propagation in sentry_baggage by @giortzisg in #1210

Add OrgID and StrictTraceContinuation client options. by @giortzisg in #1210

Add the option to set attributes on the scope by @giortzisg in #1208
Bug Fixes 🐛

(serialization) Pre-serialize mutable event fields to prevent race panics by @giortzisg in #1214

Use HEROKU_BUILD_COMMIT with HEROKU_SLUG_COMMIT as fallback by @ericapisani in #1220

Internal Changes 🔧

Ai

Add AGENTS.md and testing guidelines by @giortzisg in #1216

Add dotagents configuration by @giortzisg in #1211

Deps

Bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 in /zerolog by @dependabot in #1231

Bump github.com/gofiber/fiber/v2 from 2.52.11 to 2.52.12 in /fiber by @dependabot in #1209

Other

... (truncated)

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.44.1

[!NOTE]
The v0.44.0 is missing due to a technical issue and had to be released again as v0.44.1

New Features ✨
Add RemoveAttribute api on the scope. by @giortzisg in #1224
Deprecate Scope.SetExtra, Scope.SetExtras, and Scope.RemoveExtra in favor of Scope.SetAttributes and Scope.RemoveAttribute by @giortzisg in #1224

The recommended migration path is to use SetAttributes to attach values to logs and metrics. Note that attributes do not appear on error events; if you only capture errors, use SetTag or SetContext instead.

Before:
scope.SetExtra("key.string", "str")
scope.SetExtra("key.int", 42)
After (for error events) — use tags and contexts:
scope.SetTag("key.string", "str")
scope.SetContext("my_data", sentry.Context{"key.int": 42})
After (for logs and metrics) — use attributes:
scope.SetAttributes(
    attribute.String("key.string", "str"),
    attribute.Int("key.int", 42),
)
Add support for homogenous arrays by @giortzisg in #1203

Add support for client reports by @giortzisg in #1192

Add org id propagation in sentry_baggage by @giortzisg in #1210

Add OrgID and StrictTraceContinuation client options. by @giortzisg in #1210

Add the option to set attributes on the scope by @giortzisg in #1208
Bug Fixes 🐛

(serialization) Pre-serialize mutable event fields to prevent race panics by @giortzisg in #1214

Use HEROKU_BUILD_COMMIT with HEROKU_SLUG_COMMIT as fallback by @ericapisani in #1220

Internal Changes 🔧

Ai

Add AGENTS.md and testing guidelines by @giortzisg in #1216

Add dotagents configuration by @giortzisg in #1211

Deps

Bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 in /zerolog by @dependabot in #1231

Bump github.com/gofiber/fiber/v2 from 2.52.11 to 2.52.12 in /fiber by @dependabot in #1209

... (truncated)

Commits

See full diff in compare view

Updates github.com/google/pprof from 0.0.0-20250820193118-f64d9cf942d6 to 0.0.0-20260302011040-a15ffb7f9dcc

Commits

See full diff in compare view

Updates github.com/gookit/color from 1.5.4 to 1.6.0

Release notes

Sourced from github.com/gookit/color's releases.

v1.6.0

Change Log

Fixed

fix: fix slice init length (#97) gookit/color@d4a4cd9

fix: resolve color tag parsing issue in #52 (PR #98) gookit/color@bdf4489

Fix race condition in Theme.Tips method when called concurrently (#109) gookit/color@6de7584

Feature

✨ feat: add new convert func: HSVToRGB, RGBToHSV gookit/color@d95f213

Update

Optimize RenderCode performance with fast paths for string arguments (#110) gookit/color@e532935

🎨 up: Remove dependencies on stretchr/testify and use a lighter gookit/assert alternative. gookit/color@4ac4e07

👔 up: remove deprecated var isLikeInCmd, update some tests gookit/color@c5db0d0

👔 up: update detect env, use internal Level* instead of the terminfo.ColorLevel* gookit/color@173325a

🔥 chore: remove any.go, merge printer.go to quickstart.go gookit/color@f46f52e

Other

build(deps): bump WillAbides/setup-go-faster from 1.8.0 to 1.9.0 (#66) gookit/color@62dd3d2

build(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0 (#68) gookit/color@b79b464

build(deps): bump WillAbides/setup-go-faster from 1.9.0 to 1.9.1 (#69) gookit/color@ecb5570

build(deps): bump actions/checkout from 3 to 4 (#73) gookit/color@91529f0

build(deps): bump WillAbides/setup-go-faster from 1.9.1 to 1.10.1 (#71) gookit/color@3df6d41

build(deps): bump WillAbides/setup-go-faster from 1.10.1 to 1.11.0 (#74) gookit/color@8fa8954

build(deps): bump WillAbides/setup-go-faster from 1.11.0 to 1.12.0 (#75) gookit/color@9c0ef29

build(deps): bump golang.org/x/sys from 0.11.0 to 0.13.0 (#76) gookit/color@4af2bdd

build(deps): bump golang.org/x/sys from 0.13.0 to 0.14.0 (#77) gookit/color@44243ab

build(deps): bump golang.org/x/sys from 0.14.0 to 0.15.0 (#78) gookit/color@72fbeaf

build(deps): bump WillAbides/setup-go-faster from 1.12.0 to 1.13.0 (#79) gookit/color@0c83bae

build(deps): bump github/codeql-action from 2 to 3 (#80) gookit/color@1bc67c4

build(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0 (#81) gookit/color@23187d9

build(deps): bump WillAbides/setup-go-faster from 1.13.0 to 1.14.0 (#82) gookit/color@d7e962b

build(deps): bump golang.org/x/sys from 0.16.0 to 0.17.0 (#83) gookit/color@f6fd20f

build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0 (#86) gookit/color@18d84cb

build(deps): bump softprops/action-gh-release from 1 to 2 (#87) gookit/color@7e68fa7

build(deps): bump golang.org/x/sys from 0.18.0 to 0.19.0 (#88) gookit/color@532f1f3

build(deps): bump golang.org/x/sys from 0.19.0 to 0.20.0 (#89) gookit/color@c76538d

build(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0 (#90) gookit/color@7eaf97a

Update utils_test.go to allow running in read-only mode. (#91) gookit/color@fedc174

build(deps): bump golang.org/x/sys from 0.21.0 to 0.25.0 (#96) gookit/color@07ab70b

build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#85) gookit/color@4bcc6db

build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#99) gookit/color@992eecf

build(deps): bump golang.org/x/sys from 0.25.0 to 0.30.0 (#100) gookit/color@90a1068

build(deps): bump golang.org/x/sys from 0.30.0 to 0.31.0 (#101) gookit/color@860732e

📝 chore: add ci test on go1.21+, remove test on go1.18 gookit/color@5a49561

... (truncated)

Commits

0b1dc4c ✅ demo: update the examples deps and some codes
fa47891 ⬆️ dep: upgrade gookit/assert to v0.1.1, update some tests
d95f213 ✨ feat: add new convert func: HSVToRGB, RGBToHSV
173325a 👔 up: update detect env, use internal Level* instead of the terminfo....
c5db0d0 👔 up: remove deprecated var isLikeInCmd, update some tests
f46f52e 🔥 chore: remove any.go, merge printer.go to quickstart.go
cc45966 🎨 chore: update some go file code style
e532935 Optimize RenderCode performance with fast paths for string arguments (#110)
f14a7b8 📝 chore: update some code style and some tests
6de7584 Fix race condition in Theme.Tips method when called concurrently (#109)
Additional commits viewable in compare view

Updates github.com/hashicorp/go-getter from 1.8.1 to 1.8.5

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.8.5

What's Changed

[chore] : Bump the go group with 2 updates by @dependabot[bot] in hashicorp/go-getter#576

use %w to wrap error by @Ericwww in hashicorp/go-getter#475

fix: #538 http file download skipped if headResp.ContentLength is 0 by @martijnvdp in hashicorp/go-getter#539

chore: fix error message capitalization in checksum function by @ssagarverma in hashicorp/go-getter#578

[chore] : Bump the go group with 8 updates by @dependabot[bot] in hashicorp/go-getter#577

Fix git url with ambiguous ref by @nimasamii in hashicorp/go-getter#382

fix: resolve compilation errors in get_git_test.go by @CreatorHead in hashicorp/go-getter#579

[chore] : Bump the actions group with 2 updates by @dependabot[bot] in hashicorp/go-getter#582

[chore] : Bump the go group with 3 updates by @dependabot[bot] in hashicorp/go-getter#583

test that arbitrary files cannot be checksummed by @schmichael in hashicorp/go-getter#250

[chore] : Bump google.golang.org/api from 0.260.0 to 0.262.0 in the go group by @dependabot[bot] in hashicorp/go-getter#585

[chore] : Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group by @dependabot[bot] in hashicorp/go-getter#586

[chore] : Bump the go group with 3 updates by @dependabot[bot] in hashicorp/go-getter#588

[chore] : Bump actions/cache from 5.0.2 to 5.0.3 in the actions group by @dependabot[bot] in hashicorp/go-getter#589

[chore] : Bump aws-actions/configure-aws-credentials from 5.1.1 to 6.0.0 in the actions group by @dependabot[bot] in hashicorp/go-getter#592

[chore] : Bump google.golang.org/api from 0.264.0 to 0.265.0 in the go group by @dependabot[bot] in hashicorp/go-getter#591

[chore] : Bump the go group with 5 updates by @dependabot[bot] in hashicorp/go-getter#593

IND-6310 - CRT Onboarding by @nasareeny in hashicorp/go-getter#584

Fix crt build path by @ssagarverma in hashicorp/go-getter#594

[chore] : Bump the go group with 3 updates by @dependabot[bot] in hashicorp/go-getter#596

fix: remove checkout action from set-product-version job by @ssagarverma in hashicorp/go-getter#598

[chore] : Bump the actions group with 4 updates by @dependabot[bot] in hashicorp/go-getter#595

fix(deps): upgrade go.opentelemetry.io/otel/sdk to v1.40.0 (GO-2026-4394) by @ssagarverma in hashicorp/go-getter#599

Prepare go-getter for v1.8.5 release by @nasareeny in hashicorp/go-getter#597

[chore] : Bump the actions group with 2 updates by @dependabot[bot] in hashicorp/go-getter#600

sec: bump go and xrepos + redact aws tokens in url by @dduzgun-security in hashicorp/go-getter#604

NOTES:

Binary Distribution Update: To streamline our release process and align with other HashiCorp tools, all release binaries will now be published exclusively to the official HashiCorp release site. We will no longer attach release assets to GitHub Releases.

New Contributors

@Ericwww made their first contribution in hashicorp/go-getter#475

@martijnvdp made their first contribution in hashicorp/go-getter#539

@nimasamii made their first contribution in hashicorp/go-getter#382

@nasareeny made their first contribution in hashicorp/go-getter#584

Full Changelog: hashicorp/go-getter@v1.8.4...v1.8.5

v1.8.4

What's Changed

[IND-4227][COMPLIANCE] chore: Fix lint issues-build tags by @ssagarverma in hashicorp/go-getter#568

[IND-4227] [COMPLIANCE] Update Copyright Headers by @oss-core-libraries-dashboard[bot] in hashicorp/go-getter#566

[COMPLIANCE] Update Copyright Headers by @oss-core-libraries-dashboard[bot] in hashicorp/go-getter#571

[chore] : Bump the actions group across 1 directory with 3 updates by @dependabot[bot] in hashicorp/go-getter#567

fix: allow downloading S3 files from MinIO over http by @vsarunas in hashicorp/go-getter#570

[chore] : Bump the actions group across 1 directory with 6 updates by @dependabot[bot] in hashicorp/go-getter#574

[chore] : Bump the go group across 1 directory with 12 updates by @dependabot[bot] in hashicorp/go-getter#575

... (truncated)

Commits

c56e01f sec: bump go and xrepos + redact aws tokens in url (#604)
b83a3c7 [chore] : Bump the actions group with 2 updates (#600)
90c7d9c Prepare go-getter for v1.8.5 release (#597)
09c58f4 Merge pull request #599 from hashicorp/chore/upgrade-otel
93c75aa chore: upgrade OpenTelemetry dependencies to v1.40.0
d567899 Merge pull request #595 from hashicorp/dependabot/github_actions/actions-be91...
4d3358c fix: remove checkout action from set-product-version job (#598)
b9c8eab [chore] : Bump the go group with 3 updates (#596)
2ec0046 [chore] : Bump the actions group with 4 updates
8fa22a6 Merge pull request #594 from hashicorp/fix-crt-build-path
Additional commits viewable in compare view

Updates github.com/hashicorp/hcl/v2 from 2.23.0 to 2.24.0

Release notes

Sourced from github.com/hashicorp/hcl/v2's releases.

v2.24.0

Enhancements

Add support for decoding block and attribute source ranges when using gohcl. (#703)

hclsyntax: Detect and reject invalid nested splat result. (#724)

Bugs Fixed

Correct handling of unknown objects in Index function. (#763)

Changelog

Sourced from github.com/hashicorp/hcl/v2's changelog.

v2.24.0 (July 7, 2025)

Enhancements

Add support for decoding block and attribute source ranges when using gohcl. (#703)

hclsyntax: Detect and reject invalid nested splat result. (#724)

Bugs Fixed

Correct handling of unknown objects in Index function. (#763)

Commits

6b50680 Update CHANGELOG.md (#764)
77ef278 ops: handle unknown objects correctly when looking up by index (#763)
dfa124f [Compliance] - PR Template Changes Required (#761)
6b5c4c2 fix errors thrown by errcheck linter (#755)
61bd79d suppress and fix lint errors by unused (#754)
8b8cb9c build(deps): bump golangci/golangci-lint-action
aa4e447 build(deps): bump actions/setup-go
7244363 Update go-cty to latest (#749)
b4e27ae test_suite: refactor schema validation of diagnostic file range, pos (#750)
314d236 fix staticcheck lint errors
Additional commits viewable in compare view

Updates github.com/hashicorp/terraform-json from 0.24.0 to 0.27.2

Release notes

Sourced from github.com/hashicorp/terraform-json's releases.

v0.27.2

NOTES / BUG FIXES

UnmarshalLogMessage to use json.Number (instead of default float64) (#178)

This avoids precision related problems when decoding numbers in JSON data. This would impact only 0.27.1 consumers.

v0.27.1

What's Changed

ENHANCEMENTS

Replace json.RawMessage with any for list log messages by @dbanck in hashicorp/terraform-json#177

Full Changelog: hashicorp/terraform-json@v0.27.0...v0.27.1

v0.27.0

What's Changed

ENHANCEMENTS

logging: Introduce types for structured UI messages + UnmarshalLogMessage() by @radeksimko in hashicorp/terraform-json#167

logging: Add query related message types by @radeksimko in hashicorp/terraform-json#169

Add support for action schemas (unlinked) by @austinvalle in hashicorp/terraform-json#166

Add support for action invocation within Plan JSON by @mutahhir in hashicorp/terraform-json#172

tf query: add identity version for the list_resource_found message by @dsa0x in hashicorp/terraform-json#176

INTERNAL

go: Bump to 1.25 by @radeksimko in hashicorp/terraform-json#168

Bump actions/checkout from 4.2.2 to 5.0.0 in the github-actions-breaking group by @dependabot[bot] in hashicorp/terraform-json#170

Bump github.com/zclconf/go-cty from 1.16.3 to 1.16.4 by @dependabot[bot] in hashicorp/terraform-json#171

build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 in the github-actions-breaking group by @dependabot[bot] in hashicorp/terraform-json#174

New Contributors

@mutahhir made their first contribution in hashicorp/terraform-json#172

@dsa0x made their first contribution in hashicorp/terraform-json#176

Full Changelog: hashicorp/terraform-json@v0.26.0...v0.27.0

v0.26.0

ENHANCEMENTS:

Added: support for list resource by @anubhav-goel in hashicorp/terraform-json#165

INTERNAL:

Bump actions/setup-go from 5.4.0 to 5.5.0 in the github-actions-backward-compatible group by @dependabot[bot] in hashicorp/terraform-json#161

github: Add PR template with required fields for PCI compliance by @xiehan in hashicorp/terraform-json#162

Bump github.com/zclconf/go-cty from 1.16.2 to 1.16.3 by @dependabot[bot] in hashicorp/terraform-json#163

New Contributors

@anubhav-goel made their first contribution in hashicorp/terraform-json#165

... (truncated)

Commits

ef5e0b8 UnmarshalLogMessage to use json.Number (#178)
3fe6fb2 Replace json.RawMessage for list log messages (#177)
739a592 actions: remove action types from action schema (#175)
2eaedbe tf query: add identity version for the list_resource_found message (#176)
2fd2922 Merge pull request #172 from hashicorp/mutahhir/add-action-invocation
b539674 Add ConfigUnknown field
806b1a6 Fix tests after type change
23522f3 Change ConfigValues and ConfigSensitive to interfaces for redaction
dd0e457 Remove Action Invocation as a Resource Mode
4643c0f format plan.json for test
Additional commits viewable in compare view

Updates github.com/mackerelio/go-osstat from 0.2.5 to 0.2.7

Release notes

Sourced from github.com/mackerelio/go-osstat's releases.

v0.2.7

What's Changed

added dependabot cooldown by @yseto in mackerelio/go-osstat#68

update CI by @yseto in mackerelio/go-osstat#70

go fix ./... by @yseto in mackerelio/go-osstat#72

Bump mackerelio/workflows/.github/workflows/setup-go-matrix.yml from 1.6.0 to 1.8.0 by @dependabot[bot] in mackerelio/go-osstat#75

Bump mackerelio/workflows/.github/workflows/go-test.yml from 1.6.0 to 1.8.0 by @dependabot[bot] in mackerelio/go-osstat#74

Bump mackerelio/workflows/.github/workflows/go-lint.yml from 1.6.0 to 1.8.0 by @dependabot[bot] in mackerelio/go-osstat#73

Bump golang.org/x/sys from 0.33.0 to 0.38.0 by @dependabot[bot] in mackerelio/go-osstat#71

Bump golang.org/x/sys from 0.38.0 to 0.39.0 by @dependabot[bot] in mackerelio/go-osstat#76

Bump golang.org/x/sys from 0.39.0 to 0.40.0 by @dependabot[bot] in mackerelio/go-osstat#77

Bump golang.org/x/sys from 0.40.0 to 0.41.0 by @dependabot[bot] in mackerelio/go-osstat#78

Bump mackerelio/workflows/.github/workflows/go-lint.yml from 1.8.0 to 1.9.0 by @dependabot[bot] in mackerelio/go-osstat#81

Bump mackerelio/workflows/.github/workflows/setup-go-matrix.yml from 1.8.0 to 1.9.0 by @dependabot[bot] in mackerelio/go-osstat#79

Bump mackerelio/workflows/.github/workflows/go-test.yml from 1.8.0 to 1.9.0 by @dependabot[bot] in mackerelio/go-osstat#80

Bump golang.org/x/sys from 0.41.0 to 0.42.0 by @dependabot[bot] in mackerelio/go-osstat#82

Full Changelog: mackerelio/go-osstat@v0.2.6...v0.2.7

v0.2.6

What's Changed

use mackerelio/workflows@v1.2.0 by @yseto in mackerelio/go-osstat#59

remove coveralls status badge by @lufia in mackerelio/go-osstat#61

Bump golang.org/x/sys from 0.20.0 to 0.24.0 by @dependabot in mackerelio/go-osstat#58

Bump golang.org/x/sys from 0.24.0 to 0.33.0 by @dependabot in mackerelio/go-osstat#63

Bump mackerelio/workflows from 1.2.0 to 1.5.0 by @dependabot in mackerelio/go-osstat#64

Full Changelog: mackerelio/go-osstat@v0.2.5...v0.2.6

Commits

3faba1c Merge pull request #82 from mackerelio/dependabot/go_modules/golang.org/x/sys...
d0b3e2c Bump golang.org/x/sys from 0.41.0 to 0.42.0
540c3c7 Merge pull request #80 from mackerelio/dependabot/github_actions/mackerelio/w...
cc037b1 Bump mackerelio/workflows/.github/workflows/go-test.yml
0bd6904 Merge pull request #79 from mackerelio/dependabot/github_actions/mackerelio/w...
9c260fb Merge pull request #81 from mackerelio/dependabot/github_actions/mackerelio/w...
edcd9c1 Bump mackerelio/workflows/.github/workflows/go-lint.yml
7596564 Bump mackerelio/workflows/.github/workflows/setup-go-matrix.yml
890c54b Merge pull request #78 from mackerelio/dependabot/go_modules/golang.org/x/sys...

Bumps the all group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) | `0.35.0` | `0.67.0` | | [github.com/BurntSushi/toml](https://github.com/BurntSushi/toml) | `1.5.0` | `1.6.0` | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.38.1` | `1.41.5` | | [github.com/emicklei/proto](https://github.com/emicklei/proto) | `1.14.0` | `1.14.3` | | [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) | `0.31.2-0.20250102155933-f2d4348b0508` | `0.44.1` | | [github.com/gookit/color](https://github.com/gookit/color) | `1.5.4` | `1.6.0` | | [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.8.1` | `1.8.5` | | [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl) | `2.23.0` | `2.24.0` | | [github.com/hashicorp/terraform-json](https://github.com/hashicorp/terraform-json) | `0.24.0` | `0.27.2` | | [github.com/mackerelio/go-osstat](https://github.com/mackerelio/go-osstat) | `0.2.5` | `0.2.7` | | [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.26.3` | `0.28.1` | | [github.com/rs/zerolog](https://github.com/rs/zerolog) | `1.34.0` | `1.35.0` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.10.1` | `1.10.2` | | [github.com/tdewolff/minify/v2](https://github.com/tdewolff/minify) | `2.23.1` | `2.24.11` | | [helm.sh/helm/v3](https://github.com/helm/helm) | `3.19.4` | `3.20.1` | | [mvdan.cc/sh/v3](https://github.com/mvdan/sh) | `3.11.0` | `3.13.0` | Updates `code.cloudfoundry.org/bytefmt` from 0.35.0 to 0.67.0 - [Release notes](https://github.com/cloudfoundry/bytefmt/releases) - [Commits](cloudfoundry/bytefmt@v0.35.0...v0.67.0) Updates `github.com/BurntSushi/toml` from 1.5.0 to 1.6.0 - [Release notes](https://github.com/BurntSushi/toml/releases) - [Commits](BurntSushi/toml@v1.5.0...v1.6.0) Updates `github.com/aws/aws-sdk-go-v2` from 1.38.1 to 1.41.5 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.38.1...v1.41.5) Updates `github.com/emicklei/proto` from 1.14.0 to 1.14.3 - [Changelog](https://github.com/emicklei/proto/blob/master/CHANGES.md) - [Commits](emicklei/proto@v1.14.0...v1.14.3) Updates `github.com/getsentry/sentry-go` from 0.31.2-0.20250102155933-f2d4348b0508 to 0.44.1 - [Release notes](https://github.com/getsentry/sentry-go/releases) - [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-go/commits/v0.44.1) Updates `github.com/google/pprof` from 0.0.0-20250820193118-f64d9cf942d6 to 0.0.0-20260302011040-a15ffb7f9dcc - [Commits](https://github.com/google/pprof/commits) Updates `github.com/gookit/color` from 1.5.4 to 1.6.0 - [Release notes](https://github.com/gookit/color/releases) - [Commits](gookit/color@v1.5.4...v1.6.0) Updates `github.com/hashicorp/go-getter` from 1.8.1 to 1.8.5 - [Release notes](https://github.com/hashicorp/go-getter/releases) - [Commits](hashicorp/go-getter@v1.8.1...v1.8.5) Updates `github.com/hashicorp/hcl/v2` from 2.23.0 to 2.24.0 - [Release notes](https://github.com/hashicorp/hcl/releases) - [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md) - [Commits](hashicorp/hcl@v2.23.0...v2.24.0) Updates `github.com/hashicorp/terraform-json` from 0.24.0 to 0.27.2 - [Release notes](https://github.com/hashicorp/terraform-json/releases) - [Commits](hashicorp/terraform-json@v0.24.0...v0.27.2) Updates `github.com/mackerelio/go-osstat` from 0.2.5 to 0.2.7 - [Release notes](https://github.com/mackerelio/go-osstat/releases) - [Commits](mackerelio/go-osstat@v0.2.5...v0.2.7) Updates `github.com/moby/buildkit` from 0.26.3 to 0.28.1 - [Release notes](https://github.com/moby/buildkit/releases) - [Commits](moby/buildkit@v0.26.3...v0.28.1) Updates `github.com/rs/zerolog` from 1.34.0 to 1.35.0 - [Commits](rs/zerolog@v1.34.0...v1.35.0) Updates `github.com/spf13/cobra` from 1.10.1 to 1.10.2 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.10.1...v1.10.2) Updates `github.com/tdewolff/minify/v2` from 2.23.1 to 2.24.11 - [Release notes](https://github.com/tdewolff/minify/releases) - [Commits](tdewolff/minify@v2.23.1...v2.24.11) Updates `github.com/zclconf/go-cty` from 1.16.2 to 1.16.4 - [Release notes](https://github.com/zclconf/go-cty/releases) - [Changelog](https://github.com/zclconf/go-cty/blob/main/CHANGELOG.md) - [Commits](zclconf/go-cty@v1.16.2...v1.16.4) Updates `golang.org/x/net` from 0.47.0 to 0.52.0 - [Commits](golang/net@v0.47.0...v0.52.0) Updates `golang.org/x/text` from 0.31.0 to 0.35.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.31.0...v0.35.0) Updates `helm.sh/helm/v3` from 3.19.4 to 3.20.1 - [Release notes](https://github.com/helm/helm/releases) - [Commits](helm/helm@v3.19.4...v3.20.1) Updates `mvdan.cc/sh/v3` from 3.11.0 to 3.13.0 - [Release notes](https://github.com/mvdan/sh/releases) - [Changelog](https://github.com/mvdan/sh/blob/master/CHANGELOG.md) - [Commits](mvdan/sh@v3.11.0...v3.13.0) Updates `k8s.io/api` from 0.34.2 to 0.35.1 - [Commits](kubernetes/api@v0.34.2...v0.35.1) Updates `k8s.io/apimachinery` from 0.34.2 to 0.35.1 - [Commits](kubernetes/apimachinery@v0.34.2...v0.35.1) Updates `k8s.io/client-go` from 0.34.2 to 0.35.1 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.34.2...v0.35.1) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.67.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/BurntSushi/toml dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.41.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/emicklei/proto dependency-version: 1.14.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/getsentry/sentry-go dependency-version: 0.44.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/google/pprof dependency-version: 0.0.0-20260302011040-a15ffb7f9dcc dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/gookit/color dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/hashicorp/go-getter dependency-version: 1.8.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/hashicorp/hcl/v2 dependency-version: 2.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/hashicorp/terraform-json dependency-version: 0.27.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/mackerelio/go-osstat dependency-version: 0.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/moby/buildkit dependency-version: 0.28.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/rs/zerolog dependency-version: 1.35.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/spf13/cobra dependency-version: 1.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/tdewolff/minify/v2 dependency-version: 2.24.11 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/zclconf/go-cty dependency-version: 1.16.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: golang.org/x/net dependency-version: 0.52.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: golang.org/x/text dependency-version: 0.35.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: helm.sh/helm/v3 dependency-version: 3.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: mvdan.cc/sh/v3 dependency-version: 3.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: k8s.io/api dependency-version: 0.35.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: k8s.io/apimachinery dependency-version: 0.35.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: k8s.io/client-go dependency-version: 0.35.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 27, 2026

dependabot bot requested a review from a team as a code owner March 27, 2026 23:45

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 27, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the all group across 1 directory with 23 updates#8018

build(deps): bump the all group across 1 directory with 23 updates#8018
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/all-2517571765

dependabot bot commented on behalf of github Mar 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 27, 2026

v1.6.0

v1.14.3 (2026-02-04)

v1.14.2 (2025-06-18)

v1.14.1 (2025-04-29)

0.44.1

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Ai

Deps

Other

0.44.1

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Ai

Deps

v1.6.0

Change Log

Fixed

Feature

Update

Other

v1.8.5

What's Changed

New Contributors

v1.8.4

What's Changed

v2.24.0

Enhancements

Bugs Fixed

v2.24.0 (July 7, 2025)

Enhancements

Bugs Fixed

v0.27.2

v0.27.1

What's Changed

ENHANCEMENTS

v0.27.0

What's Changed

ENHANCEMENTS

INTERNAL

New Contributors

v0.26.0

ENHANCEMENTS:

INTERNAL:

New Contributors

v0.2.7

What's Changed

v0.2.6

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants