Bump the go-dependencies group across 1 directory with 32 updates #7214

dependabot · 2026-01-14T13:32:54Z

Bumps the go-dependencies group with 20 updates in the / directory:

Package	From	To
github.com/go-openapi/strfmt	`0.24.0`	`0.25.0`
github.com/golang-migrate/migrate/v4	`4.18.1`	`4.19.1`
github.com/hashicorp/consul/api	`1.32.0`	`1.33.2`
github.com/klauspost/compress	`1.18.0`	`1.18.2`
github.com/minio/minio-go/v7	`7.0.93`	`7.0.97`
github.com/opentracing-contrib/go-stdlib	`1.1.0`	`1.1.1`
github.com/prometheus/alertmanager	`0.29.0`	`0.30.1`
github.com/spf13/afero	`1.11.0`	`1.15.0`
go.etcd.io/etcd/api/v3	`3.5.17`	`3.6.7`
go.etcd.io/etcd/client/pkg/v3	`3.5.17`	`3.6.7`
go.etcd.io/etcd/client/v3	`3.5.17`	`3.6.7`
go.opentelemetry.io/contrib/propagators/aws	`1.36.0`	`1.39.0`
go.opentelemetry.io/otel/bridge/opentracing	`1.36.0`	`1.39.0`
golang.org/x/net	`0.47.0`	`0.49.0`
github.com/VictoriaMetrics/fastcache	`1.12.2`	`1.13.2`
github.com/aws/aws-sdk-go-v2/service/dynamodb	`1.50.1`	`1.53.6`
github.com/parquet-go/parquet-go	`0.26.4`	`0.27.0`
github.com/prometheus/procfs	`0.16.1`	`0.19.2`
github.com/tjhop/slog-gokit	`0.1.4`	`0.1.5`
go.opentelemetry.io/collector/pdata	`1.35.0`	`1.49.0`

Updates github.com/go-openapi/strfmt from 0.24.0 to 0.25.0

Commits

a235dd3 tests: replaced stretchr/testify by go-openapi/testify
b93d88e chore: updated license marks in source files
398a468 build(deps): bump go.mongodb.org/mongo-driver
68b6683 feat(format): add uuid7 string format support
ad12a81 build(deps): bump golang.org/x/net in the golang-org-dependencies group
5c9b6bd chore(refact): assembled bson-dependent methods and tests
5e4146b chore(deps): removed dependency to govalidator
See full diff in compare view

Updates github.com/golang-migrate/migrate/v4 from 4.18.1 to 4.19.1

Release notes

Sourced from github.com/golang-migrate/migrate/v4's releases.

v4.19.1

What's Changed

Bump github.com/dvsekhvalnov/jose2go from 1.6.0 to 1.7.0 by @dependabot[bot] in golang-migrate/migrate#1334

Update docker image to use go 1.25, addressing vulnerabilities by @matsoob in golang-migrate/migrate#1333

Bump golang.org/x/crypto from 0.36.0 to 0.45.0 by @dependabot[bot] in golang-migrate/migrate#1335

fix linter issues by @HaraldNordgren in golang-migrate/migrate#1325

Rename databaseName to databaseDriverName by @iamonah in golang-migrate/migrate#1304

chore: Update cloud.google.com/go/spanner version by @jferrl in golang-migrate/migrate#1330

Bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @dependabot[bot] in golang-migrate/migrate#1336

chore: remove dependency on "hashicorp/go-multierror" by @leonklingele in golang-migrate/migrate#1322

New Contributors

@matsoob made their first contribution in golang-migrate/migrate#1333

@iamonah made their first contribution in golang-migrate/migrate#1304

@jferrl made their first contribution in golang-migrate/migrate#1330

@leonklingele made their first contribution in golang-migrate/migrate#1322

Full Changelog: golang-migrate/migrate@v4.19.0...v4.19.1

v4.19.0

What's Changed

Fixed sqlserver not actually getting a lock if lock is already set by @urbim in golang-migrate/migrate#1186

Bump golang.org/x/oauth2 from 0.18.0 to 0.27.0 by @dependabot[bot] in golang-migrate/migrate#1299

Update apt-key to gpg by @sandhilt in golang-migrate/migrate#1277

Update dktest to v0.4.6 for docker vuln fix by @dhui in golang-migrate/migrate#1309

refactor: Remove go.uber.org/atomic in favor of std sync/atomic by @romshark in golang-migrate/migrate#1303

Ensure bufferWriter is always closed in Migration.Buffer and propagate close errors by @ckantcs in golang-migrate/migrate#1308

Add support for Go 1.25 and drop support for 1.23 by @dhui in golang-migrate/migrate#1310

New Contributors

@urbim made their first contribution in golang-migrate/migrate#1186

@sandhilt made their first contribution in golang-migrate/migrate#1277

@romshark made their first contribution in golang-migrate/migrate#1303

@ckantcs made their first contribution in golang-migrate/migrate#1308

Full Changelog: golang-migrate/migrate@v4.18.3...v4.19.0

v4.18.3

Changelog

a4d0a1b Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2

f37ef79 Bump golang.org/x/crypto from 0.31.0 to 0.35.0

5b97c92 Bump golang.org/x/net from 0.33.0 to 0.38.0

e6d84f6 Drop support for Go 1.22 and add support for Go 1.24

fccd197 Mention CLI install instructions in main README

34c2b4a Remove redundant build tags

a868033 Update FAQ.md - typo

7269490 Update golangci-lint version used in GitHub Actions

c5137c4 Update migrate -help output for the readme file

033835a Update to dktest v0.4.5

8b09191 fix: typo limited not limitted

... (truncated)

Commits

89e308c chore: remove dependency on "hashicorp/go-multierror" (#1322)
472ef2e Merge pull request #1336 from golang-migrate/dependabot/go_modules/golang.org...
8d76259 Bump golang.org/x/crypto from 0.43.0 to 0.45.0
9f9df7c chore: Update cloud.google.com/go/spanner version (#1330)
a371c8e Merge pull request #1304 from iamonah/fix/clarify-databaseName-meaning
43cc3b3 Merge pull request #1325 from HaraldNordgren/linter_issues
f939a89 Merge pull request #1335 from golang-migrate/dependabot/go_modules/golang.org...
6dd86e0 Bump golang.org/x/crypto from 0.36.0 to 0.45.0
70e6d6d Merge pull request #1333 from matsoob/updateGoInBaseImage
a51d0da Merge pull request #1334 from golang-migrate/dependabot/go_modules/github.com...
Additional commits viewable in compare view

Updates github.com/hashicorp/consul/api from 1.32.0 to 1.33.2

Commits

ea9de3f aub module version update
c80d83f Backport of Changing acl not found error in maskResultsFilteredByACLs to debu...
3b259d3 Backport of List Imported Services Changes into release/1.22.x (#23142)
6b9d1a0 Backport of fixing go binary and container cve's into release/1.22.x (#23140)
c606ef1 Backport of remove: hcp related code in agent for HCP consul EoL into release...
a1b7f0f bugfix: Prevent default TCP checks from being re-added on reload/restart (#23...
116c5c7 Envoy Version Upgrade (#23118)
b6f9a51 Backport of Update Go version to 1.25.5 into release/1.22.x (#23116)
6760eb2 Backport of splitter-failover-retry fix for aggregate cluster into release/1....
19d499a Backport of fix cves into release/1.22.x (#23086)
Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.18.0 to 1.18.2

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.2

What's Changed

flate: Fix invalid encoding on level 9 with single value input by @klauspost in klauspost/compress#1115

flate: reduce stateless allocations by @RXamzin in klauspost/compress#1106

build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 in the github-actions group by @dependabot[bot] in klauspost/compress#1111

v1.18.1 is marked "retracted" due to invalid flate/zip/gzip encoding.

New Contributors

@RXamzin made their first contribution in klauspost/compress#1106

Full Changelog: klauspost/compress@v1.18.1...v1.18.2

v1.18.1

What's Changed

zstd: Fix incorrect buffer size in dictionary encodes by @klauspost in klauspost/compress#1059

s2: check for cap, not len of buffer in EncodeBetter/Best by @vdarulis in klauspost/compress#1080

zstd: Add simple zstd EncodeTo/DecodeTo functions by @klauspost in klauspost/compress#1079

zlib: Avoiding extra allocation in zlib.reader.Reset by @travelpolicy in klauspost/compress#1086

gzhttp: remove redundant err check in zstdReader by @ryanfowler in klauspost/compress#1090

Run modernize. Deprecate Go 1.22 by @klauspost in klauspost/compress#1095

flate: Simplify matchlen by @klauspost in klauspost/compress#1101

flate: Add examples by @klauspost in klauspost/compress#1102

flate: Use exact sizes for huffman tables by @klauspost in klauspost/compress#1103

flate: Faster load+store by @klauspost in klauspost/compress#1104

Add notice to S2 about MinLZ by @klauspost in klauspost/compress#1065

New Contributors

@wooffie made their first contribution in klauspost/compress#1069

@vdarulis made their first contribution in klauspost/compress#1080

@travelpolicy made their first contribution in klauspost/compress#1086

@ryanfowler made their first contribution in klauspost/compress#1090

Full Changelog: klauspost/compress@v1.18.0...v1.18.1

Commits

444d5d9 Fix invalid encoding on level 9 with single value input (#1115)
503c028 build(deps): bump github/codeql-action in the github-actions group (#1111)
701ca28 flate: reduce stateless allocations (#1106)
e0b47ff Update changelog
d10b525 build(deps): bump the github-actions group with 2 updates (#1105)
3c0d308 flate: Faster load+st0re (#1104)
6e2f5d5 flate: Use exact sizes for huffman tables (#1103)
bda824b flate: Add examples (#1102)
f44517c flate: Simplify matchlen (#1101)
54cb7a5 build(deps): bump the github-actions group with 3 updates (#1096)
Additional commits viewable in compare view

Updates github.com/minio/minio-go/v7 from 7.0.93 to 7.0.97

Release notes

Sourced from github.com/minio/minio-go/v7's releases.

Bugfix Release

What's Changed

test: add test for PresignedPostPolicy with empty fileName by @jiuker in minio/minio-go#2119

fix: prefix should use stringLike when new a bucketPolicy (2) by @mannreis in minio/minio-go#2124

update all deps by @harshavardhana in minio/minio-go#2125

set checksum headers requested properly by @harshavardhana in minio/minio-go#2130

fix: missing append() API behavior by @harshavardhana in minio/minio-go#2131

extend more missing headers for PartUploads by @harshavardhana in minio/minio-go#2132

fix: explicitly use UTC for expiration field when marshaling PostPolicy by @qwwqe in minio/minio-go#2135

fix: DurationSeconds is a QueryValues not a Form data (#2128) by @vlaborie in minio/minio-go#2129

make sure to avoid closing the input reader by @harshavardhana in minio/minio-go#2137

New Contributors

@mannreis made their first contribution in minio/minio-go#2124

@qwwqe made their first contribution in minio/minio-go#2135

@vlaborie made their first contribution in minio/minio-go#2129

Full Changelog: minio/minio-go@v7.0.94...v7.0.95

Bugfix Release

What's Changed

fix: canceled context should not start list before do listObjects by @jiuker in minio/minio-go#2122

Full Changelog: minio/minio-go@v7.0.93...v7.0.94

Commits

83bf4e2 Wrap brackets only for IPv6 address (#2176)
f14663f fix: putObjectMultipartStreamFromReadAt goroutine leak (#2170)
6217ce2 Add ConfigName option to LDAP STS request (#2173)
9207380 removed NodeHostname from InventoryJobStatus (#2172)
785b638 update InventoryJobStatus field ExecutionTime from time.Duration to string (#...
a5f6380 Added fields to InventoryJobStatus (#2168)
f4c4350 update all missing docs
af6dc51 feat: add error reporting fields to InventoryJobStatus (#2164)
ec35de6 Add QOS API's (#2148)
ec103a7 add AGENTS.md and also updated API documentation
Additional commits viewable in compare view

Updates github.com/opentracing-contrib/go-stdlib from 1.1.0 to 1.1.1

Release notes

Sourced from github.com/opentracing-contrib/go-stdlib's releases.

v1.1.1

What's Changed

🔨 Maintenance

Fix lint errors and add lint workflow by @lucacome in opentracing-contrib/go-stdlib#78

Update golangci-lint to v2 by @lucacome in opentracing-contrib/go-stdlib#81

Fix lint errors by @lucacome in opentracing-contrib/go-stdlib#92

📝 Documentation

Add pkg badge by @lucacome in opentracing-contrib/go-stdlib#79

⬆️ Dependencies

Update lucacome/draft-release action to v2 by @renovate[bot] in opentracing-contrib/go-stdlib#77, opentracing-contrib/go-stdlib#88

Update golangci/golangci-lint-action action to v9 by @renovate[bot] in opentracing-contrib/go-stdlib#83, opentracing-contrib/go-stdlib#90

Update actions/checkout action to v6 by @renovate[bot] in opentracing-contrib/go-stdlib#91

Update actions/labeler action to v6 by @renovate[bot] in opentracing-contrib/go-stdlib#85

Update actions/setup-go action to v6 by @renovate[bot] in opentracing-contrib/go-stdlib#86

Update github/codeql-action action to v4 by @renovate[bot] in opentracing-contrib/go-stdlib#89

Full Changelog: opentracing-contrib/go-stdlib@v1.1.0...v1.1.1

Commits

e560980 Update golangci/golangci-lint-action action to v9 (#90)
dbc73e2 Fix lint errors (#92)
364cfa9 Update github/codeql-action action to v4 (#89)
202ca3d Update actions/setup-go action to v6 (#86)
9d6c70a Update actions/labeler action to v6 (#85)
c1c1eac Update actions/checkout action to v6 (#91)
2782175 Update lucacome/draft-release action to v2 (#88)
a91258e Update golangci/golangci-lint-action action to v8 (#83)
7754fed Update golangci-lint to v2 (#81)
200b2ae Add pkg badge (#79)
Additional commits viewable in compare view

Updates github.com/prometheus/alertmanager from 0.29.0 to 0.30.1

Release notes

Sourced from github.com/prometheus/alertmanager's releases.

0.30.1 / 2026-01-12

[BUGFIX] Fix memory leak in tracing client. #4828

0.30.0 / 2025-12-15

[CHANGE] Don't allow calling qids with an empty ids list. #4707

[FEATURE] Add mattermost integration. #4090

[FEATURE] Add saturday to the first day of the week options. #4473

[FEATURE] Add templating functions for working with urls. #4625

[FEATURE] cluster: Allow persistent peer names. #4636

[FEATURE] dispatch: Add start delay. #4704

[FEATURE] provider: Add subscriber channel metrics. #4630

[FEATURE] template: Add tojson function. #4773

[FEATURE] Add api http metrics. #4162

[FEATURE] Add distributed tracing support. #4745

[FEATURE] Add names to inhibit rules. #4628

[FEATURE] Add timeout option for pagerduty notifier. #4354

[FEATURE] Add timeout option for slack notifier. #4355

[FEATURE] Allow nested details fields in pagerduty. #3944

[FEATURE] Implement phantom_threading to group email alerts into threads. #4623

[FEATURE] gc: Report errors, but remove erroneous silences and continue. #4724

[FEATURE] jira: Template customfields. #4029

[FEATURE] jira: Allow configuring issue update via parameter. #4621

[FEATURE] Slack app support. #4211

[ENHANCEMENT] Add comment about smtp plain authentication. #4741

[ENHANCEMENT] Add documentation about high availability. #4708

[ENHANCEMENT] Add documentation for client_allowed_sans. #4706

[ENHANCEMENT] Improve logging around webhook dispatch failure. #4511

[ENHANCEMENT] Compile silence matchers when the silence is added. #4695

[ENHANCEMENT] Fix 's/client/alerts_api/g' broken link in 0.29. #4718

[ENHANCEMENT] Fix rocketchat_config docs. #4767

[ENHANCEMENT] Fix: <mute_time_interval> was renamed. #4729

[ENHANCEMENT] Improve inhibition performance. #4607

[ENHANCEMENT] Loadsnapshot: update matcher index properly while not holding lock. #4714

[ENHANCEMENT] Logging improvements. #4113

[ENHANCEMENT] Move query locking back into private query function. #4694

[ENHANCEMENT] Optimize the new inhibitor implementation for ~2.5x performance improvement. #4668

[ENHANCEMENT] Reduce the time dispatch.group holds the mutex. #4670

[ENHANCEMENT] Use b.loop() to simplify the code and improve performance. #4642

[ENHANCEMENT] Remove duplicate slice during silences query. #4696

[ENHANCEMENT] Silences: optimize incremental mutes queries via a silence version index. #4723

[ENHANCEMENT] Update description for filter param in openapi. #4775

[BUGFIX] Add new behavior to avoid races on config reload. #4705

[BUGFIX] config: Fix duplicate header detection for all case variants. #2810

[BUGFIX] marker: Stop state leakage from aggregation groups. #4438

[BUGFIX] Fix pprof debug endpoints not working with --web.route-prefix. #4698

[BUGFIX] Set context timeout for resolvepeers. #4343

0.30.0-rc.0 / 2025-12-10

[CHANGE] Don't allow calling qids with an empty ids list. #4707

[FEATURE] Add mattermost integration. #4090

... (truncated)

Changelog

Sourced from github.com/prometheus/alertmanager's changelog.

0.30.1 / 2026-01-12

[BUGFIX] Fix memory leak in tracing client. #4828

0.30.0 / 2025-12-15

[CHANGE] Don't allow calling qids with an empty ids list. #4707

[FEATURE] Add mattermost integration. #4090

[FEATURE] Add saturday to the first day of the week options. #4473

[FEATURE] Add templating functions for working with urls. #4625

[FEATURE] cluster: Allow persistent peer names. #4636

[FEATURE] dispatch: Add start delay. #4704

[FEATURE] provider: Add subscriber channel metrics. #4630

[FEATURE] template: Add tojson function. #4773

[FEATURE] Add api http metrics. #4162

[FEATURE] Add distributed tracing support. #4745

[FEATURE] Add names to inhibit rules. #4628

[FEATURE] Add timeout option for pagerduty notifier. #4354

[FEATURE] Add timeout option for slack notifier. #4355

[FEATURE] Allow nested details fields in pagerduty. #3944

[FEATURE] Implement phantom_threading to group email alerts into threads. #4623

[FEATURE] gc: Report errors, but remove erroneous silences and continue. #4724

[FEATURE] jira: Template customfields. #4029

[FEATURE] jira: Allow configuring issue update via parameter. #4621

[FEATURE] Slack app support. #4211

[ENHANCEMENT] Add comment about smtp plain authentication. #4741

[ENHANCEMENT] Add documentation about high availability. #4708

[ENHANCEMENT] Add documentation for client_allowed_sans. #4706

[ENHANCEMENT] Improve logging around webhook dispatch failure. #4511

[ENHANCEMENT] Compile silence matchers when the silence is added. #4695

[ENHANCEMENT] Fix 's/client/alerts_api/g' broken link in 0.29. #4718

[ENHANCEMENT] Fix rocketchat_config docs. #4767

[ENHANCEMENT] Fix: <mute_time_interval> was renamed. #4729

[ENHANCEMENT] Improve inhibition performance. #4607

[ENHANCEMENT] Loadsnapshot: update matcher index properly while not holding lock. #4714

[ENHANCEMENT] Logging improvements. #4113

[ENHANCEMENT] Move query locking back into private query function. #4694

[ENHANCEMENT] Optimize the new inhibitor implementation for ~2.5x performance improvement. #4668

[ENHANCEMENT] Reduce the time dispatch.group holds the mutex. #4670

[ENHANCEMENT] Use b.loop() to simplify the code and improve performance. #4642

[ENHANCEMENT] Remove duplicate slice during silences query. #4696

[ENHANCEMENT] Silences: optimize incremental mutes queries via a silence version index. #4723

[ENHANCEMENT] Update description for filter param in openapi. #4775

[BUGFIX] Add new behavior to avoid races on config reload. #4705

[BUGFIX] config: Fix duplicate header detection for all case variants. #2810

[BUGFIX] marker: Stop state leakage from aggregation groups. #4438

[BUGFIX] Fix pprof debug endpoints not working with --web.route-prefix. #4698

[BUGFIX] Set context timeout for resolvepeers. #4343

Commits

0ded3cb Prepare release 0.30.1 (#4874)
ecda677 Bump to 0.30 (#4814) (#4815)
b6083b7 Release v0.30.0-rc.0 (#4770)
37d2558 build(deps-dev): bump vitest from 4.0.7 to 4.0.14 in /ui/mantine-ui (#4794)
490b08c build(deps): bump prometheus/promci from 0.4.7 to 0.5.3 (#4777)
83b1ecf build(deps-dev): bump @vitejs/plugin-react in /ui/mantine-ui (#4795)
a05b359 build(deps-dev): bump vite from 7.2.0 to 7.2.6 in /ui/mantine-ui (#4796)
fc910a8 build(deps-dev): bump typescript-eslint in /ui/mantine-ui (#4793)
07ef153 build(deps-dev): bump prettier from 3.6.2 to 3.7.3 in /ui/mantine-ui (#4792)
85c7d35 build(deps-dev): bump jsdom from 27.1.0 to 27.2.0 in /ui/mantine-ui (#4791)
Additional commits viewable in compare view

Updates github.com/prometheus/common from 0.67.1 to 0.67.4

Release notes

Sourced from github.com/prometheus/common's releases.

v0.67.4 / 2025-11-18

What's Changed

chore: clean up golangci-lint configuration by @mmorel-35 in prometheus/common#782

chore: 'omitempty' to Oauth2 fields with type Secret to avoid requiring them by @JorTurFer in prometheus/common#864

chore: Add omitempty tag to all config fields by @JorTurFer in prometheus/common#865

Full Changelog: prometheus/common@v0.67.3...v0.67.4

v0.67.3 / 2025-11-18

What's Changed

Support JWT Profile for Authorization Grant (RFC 7523 3.1) by @JorTurFer in prometheus/common#862

Config: remove outdated comment about HTTP/2 issues by @bboreham in prometheus/common#863

New Contributors

@JorTurFer made their first contribution in prometheus/common#862

Full Changelog: prometheus/common@v0.67.2...v0.67.3

v0.67.2 / 2025-10-28

What's Changed

config: Fix panic in tlsRoundTripper when CA file is absent by @ndk in prometheus/common#792

Cleanup linting issues by @SuperQ in prometheus/common#860

New Contributors

@ndk made their first contribution in prometheus/common#792

Full Changelog: prometheus/common@v0.67.1...v0.67.2

Changelog

Sourced from github.com/prometheus/common's changelog.

Changelog

main / unreleased

What's Changed

v0.67.2 / 2025-10-28

What's Changed

config: Fix panic in tlsRoundTripper when CA file is absent by @ndk in prometheus/common#792

Cleanup linting issues by @SuperQ in prometheus/common#860

New Contributors

@ndk made their first contribution in prometheus/common#792

Full Changelog: prometheus/common@v0.67.1...v0.67.2

Commits

d80d854 chore: Add omitempty tag to all config fields (#865)
04686b2 chore: 'omitempty' to Oauth2 fields with type Secret to avoid requiring them ...
0b2fbf3 chore: clean up golangci-lint configuration (#782)
b2cdb07 Merge pull request #863 from prometheus/remove-http2-comment
cd1ab56 Config: remove outdated comment about HTTP/2 issues
f4c0aea Support JWT Profile for Authorization Grant (RFC 7523 3.1) (#862)
594f4d4 Merge pull request #861 from prometheus/beorn7/version
440c1a3 Cut v0.67.2
acb1873 Merge pull request #860 from prometheus/superq/linting
1e32339 Cleanup linting issues
Additional commits viewable in compare view

Updates github.com/spf13/afero from 1.11.0 to 1.15.0

Release notes

Sourced from github.com/spf13/afero's releases.

v1.15.0

What's Changed

Bump golangci/golangci-lint-action from 6.5.1 to 6.5.2 by @dependabot[bot] in spf13/afero#479

Lint by @sagikazarmark in spf13/afero#492

build(deps): bump github/codeql-action from 2.13.4 to 3.28.15 by @dependabot[bot] in spf13/afero#494

build(deps): bump actions/dependency-review-action from 4.5.0 to 4.6.0 by @dependabot[bot] in spf13/afero#493

Bump actions/setup-go from 5.3.0 to 5.4.0 by @dependabot[bot] in spf13/afero#480

build(deps): bump github/codeql-action from 3.28.15 to 3.28.16 by @dependabot[bot] in spf13/afero#496

support aliyun oss storage with third-party link by @messikiller in spf13/afero#491

build(deps): bump github/codeql-action from 3.28.16 to 3.28.17 by @dependabot[bot] in spf13/afero#497

chore: update x/test by @sagikazarmark in spf13/afero#502

build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot[bot] in spf13/afero#503

build(deps): bump actions/dependency-review-action from 4.6.0 to 4.7.1 by @dependabot[bot] in spf13/afero#505

build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @dependabot[bot] in spf13/afero#506

fix(gcsfs): update object not exist check logic by @ahkui in spf13/afero#485

build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @dependabot[bot] in spf13/afero#508

build(deps): bump github/codeql-action from 3.28.18 to 3.29.4 by @dependabot[bot] in spf13/afero#519

build(deps): bump github/codeql-action from 3.29.4 to 3.29.7 by @dependabot[bot] in spf13/afero#524

build(deps): bump github/codeql-action from 3.29.7 to 3.30.1 by @dependabot[bot] in spf13/afero#537

build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 by @dependabot[bot] in spf13/afero#536

build(deps): bump actions/dependency-review-action from 4.7.1 to 4.7.3 by @dependabot[bot] in spf13/afero#533

build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in spf13/afero#527

chore: update deps by @sagikazarmark in spf13/afero#538

fix: spelling errors (excpected -> expected, iself -> itself) by @MarkRosemaker in spf13/afero#523

New Contributors

@messikiller made their first contribution in spf13/afero#491

@ahkui made their first contribution in spf13/afero#485

@MarkRosemaker made their first contribution in spf13/afero#523

Full Changelog: spf13/afero@v1.14.0...v1.15.0

v1.14.0

What's Changed

Split gcsfs and sftpfs into separate modules by

Bumps the go-dependencies group with 20 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/go-openapi/strfmt](https://github.com/go-openapi/strfmt) | `0.24.0` | `0.25.0` | | [github.com/golang-migrate/migrate/v4](https://github.com/golang-migrate/migrate) | `4.18.1` | `4.19.1` | | [github.com/hashicorp/consul/api](https://github.com/hashicorp/consul) | `1.32.0` | `1.33.2` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.0` | `1.18.2` | | [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.0.93` | `7.0.97` | | [github.com/opentracing-contrib/go-stdlib](https://github.com/opentracing-contrib/go-stdlib) | `1.1.0` | `1.1.1` | | [github.com/prometheus/alertmanager](https://github.com/prometheus/alertmanager) | `0.29.0` | `0.30.1` | | [github.com/spf13/afero](https://github.com/spf13/afero) | `1.11.0` | `1.15.0` | | [go.etcd.io/etcd/api/v3](https://github.com/etcd-io/etcd) | `3.5.17` | `3.6.7` | | [go.etcd.io/etcd/client/pkg/v3](https://github.com/etcd-io/etcd) | `3.5.17` | `3.6.7` | | [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) | `3.5.17` | `3.6.7` | | [go.opentelemetry.io/contrib/propagators/aws](https://github.com/open-telemetry/opentelemetry-go-contrib) | `1.36.0` | `1.39.0` | | [go.opentelemetry.io/otel/bridge/opentracing](https://github.com/open-telemetry/opentelemetry-go) | `1.36.0` | `1.39.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.47.0` | `0.49.0` | | [github.com/VictoriaMetrics/fastcache](https://github.com/VictoriaMetrics/fastcache) | `1.12.2` | `1.13.2` | | [github.com/aws/aws-sdk-go-v2/service/dynamodb](https://github.com/aws/aws-sdk-go-v2) | `1.50.1` | `1.53.6` | | [github.com/parquet-go/parquet-go](https://github.com/parquet-go/parquet-go) | `0.26.4` | `0.27.0` | | [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.16.1` | `0.19.2` | | [github.com/tjhop/slog-gokit](https://github.com/tjhop/slog-gokit) | `0.1.4` | `0.1.5` | | [go.opentelemetry.io/collector/pdata](https://github.com/open-telemetry/opentelemetry-collector) | `1.35.0` | `1.49.0` | Updates `github.com/go-openapi/strfmt` from 0.24.0 to 0.25.0 - [Commits](go-openapi/strfmt@v0.24.0...v0.25.0) Updates `github.com/golang-migrate/migrate/v4` from 4.18.1 to 4.19.1 - [Release notes](https://github.com/golang-migrate/migrate/releases) - [Commits](golang-migrate/migrate@v4.18.1...v4.19.1) Updates `github.com/hashicorp/consul/api` from 1.32.0 to 1.33.2 - [Release notes](https://github.com/hashicorp/consul/releases) - [Changelog](https://github.com/hashicorp/consul/blob/main/CHANGELOG.md) - [Commits](hashicorp/consul@api/v1.32.0...api/v1.33.2) Updates `github.com/klauspost/compress` from 1.18.0 to 1.18.2 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.18.0...v1.18.2) Updates `github.com/minio/minio-go/v7` from 7.0.93 to 7.0.97 - [Release notes](https://github.com/minio/minio-go/releases) - [Commits](minio/minio-go@v7.0.93...v7.0.97) Updates `github.com/opentracing-contrib/go-stdlib` from 1.1.0 to 1.1.1 - [Release notes](https://github.com/opentracing-contrib/go-stdlib/releases) - [Commits](opentracing-contrib/go-stdlib@v1.1.0...v1.1.1) Updates `github.com/prometheus/alertmanager` from 0.29.0 to 0.30.1 - [Release notes](https://github.com/prometheus/alertmanager/releases) - [Changelog](https://github.com/prometheus/alertmanager/blob/main/CHANGELOG.md) - [Commits](prometheus/alertmanager@v0.29.0...v0.30.1) Updates `github.com/prometheus/common` from 0.67.1 to 0.67.4 - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md) - [Commits](prometheus/common@v0.67.1...v0.67.4) Updates `github.com/spf13/afero` from 1.11.0 to 1.15.0 - [Release notes](https://github.com/spf13/afero/releases) - [Commits](spf13/afero@v1.11.0...v1.15.0) Updates `go.etcd.io/etcd/api/v3` from 3.5.17 to 3.6.7 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.5.17...v3.6.7) Updates `go.etcd.io/etcd/client/pkg/v3` from 3.5.17 to 3.6.7 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.5.17...v3.6.7) Updates `go.etcd.io/etcd/client/v3` from 3.5.17 to 3.6.7 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.5.17...v3.6.7) Updates `go.opentelemetry.io/contrib/propagators/aws` from 1.36.0 to 1.39.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@v1.36.0...v1.39.0) Updates `go.opentelemetry.io/otel` from 1.38.0 to 1.39.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.39.0) Updates `go.opentelemetry.io/otel/bridge/opentracing` from 1.36.0 to 1.39.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.36.0...v1.39.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.36.0 to 1.38.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.36.0...v1.38.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.36.0 to 1.38.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.36.0...v1.38.0) Updates `go.opentelemetry.io/otel/sdk` from 1.38.0 to 1.39.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.39.0) Updates `go.opentelemetry.io/otel/trace` from 1.38.0 to 1.39.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.39.0) Updates `golang.org/x/net` from 0.47.0 to 0.49.0 - [Commits](golang/net@v0.47.0...v0.49.0) Updates `golang.org/x/sync` from 0.18.0 to 0.19.0 - [Commits](golang/sync@v0.18.0...v0.19.0) Updates `golang.org/x/time` from 0.12.0 to 0.13.0 - [Commits](golang/time@v0.12.0...v0.13.0) Updates `github.com/VictoriaMetrics/fastcache` from 1.12.2 to 1.13.2 - [Release notes](https://github.com/VictoriaMetrics/fastcache/releases) - [Commits](VictoriaMetrics/fastcache@v1.12.2...v1.13.2) Updates `github.com/aws/aws-sdk-go-v2` from 1.39.2 to 1.40.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@v1.39.2...v1.40.1) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.31.12 to 1.32.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@config/v1.31.12...v1.32.3) Updates `github.com/aws/aws-sdk-go-v2/service/dynamodb` from 1.50.1 to 1.53.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.50.1...service/ecs/v1.53.6) Updates `github.com/go-openapi/swag/jsonutils` from 0.25.1 to 0.25.4 - [Commits](go-openapi/swag@v0.25.1...v0.25.4) Updates `github.com/parquet-go/parquet-go` from 0.26.4 to 0.27.0 - [Release notes](https://github.com/parquet-go/parquet-go/releases) - [Changelog](https://github.com/parquet-go/parquet-go/blob/main/CHANGELOG.md) - [Commits](parquet-go/parquet-go@v0.26.4...v0.27.0) Updates `github.com/prometheus/procfs` from 0.16.1 to 0.19.2 - [Release notes](https://github.com/prometheus/procfs/releases) - [Commits](prometheus/procfs@v0.16.1...v0.19.2) Updates `github.com/tjhop/slog-gokit` from 0.1.4 to 0.1.5 - [Release notes](https://github.com/tjhop/slog-gokit/releases) - [Commits](tjhop/slog-gokit@v0.1.4...v0.1.5) Updates `go.opentelemetry.io/collector/pdata` from 1.35.0 to 1.49.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md) - [Commits](open-telemetry/opentelemetry-collector@pdata/v1.35.0...pdata/v1.49.0) Updates `google.golang.org/protobuf` from 1.36.10 to 1.36.11 --- updated-dependencies: - dependency-name: github.com/go-openapi/strfmt dependency-version: 0.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/golang-migrate/migrate/v4 dependency-version: 4.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/hashicorp/consul/api dependency-version: 1.33.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/klauspost/compress dependency-version: 1.18.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/minio/minio-go/v7 dependency-version: 7.0.97 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/opentracing-contrib/go-stdlib dependency-version: 1.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/prometheus/alertmanager dependency-version: 0.30.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/prometheus/common dependency-version: 0.67.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/spf13/afero dependency-version: 1.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.etcd.io/etcd/api/v3 dependency-version: 3.6.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.etcd.io/etcd/client/pkg/v3 dependency-version: 3.6.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.etcd.io/etcd/client/v3 dependency-version: 3.6.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/contrib/propagators/aws dependency-version: 1.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel dependency-version: 1.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/bridge/opentracing dependency-version: 1.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace dependency-version: 1.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc dependency-version: 1.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/net dependency-version: 0.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/sync dependency-version: 0.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/time dependency-version: 0.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/VictoriaMetrics/fastcache dependency-version: 1.13.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.40.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/dynamodb dependency-version: 1.53.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/go-openapi/swag/jsonutils dependency-version: 0.25.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/parquet-go/parquet-go dependency-version: 0.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/prometheus/procfs dependency-version: 0.19.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/tjhop/slog-gokit dependency-version: 0.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/collector/pdata dependency-version: 1.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: google.golang.org/protobuf dependency-version: 1.36.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jan 14, 2026

dependabot bot force-pushed the dependabot/go_modules/go-dependencies-993b514c60 branch from 5fb1890 to 1456be5 Compare January 14, 2026 16:59

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the go-dependencies group across 1 directory with 32 updates #7214

Bump the go-dependencies group across 1 directory with 32 updates #7214

Uh oh!

dependabot bot commented on behalf of github Jan 14, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the go-dependencies group across 1 directory with 32 updates #7214

Are you sure you want to change the base?

Bump the go-dependencies group across 1 directory with 32 updates #7214

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.19.1

What's Changed

New Contributors

v4.19.0

What's Changed

New Contributors

v4.18.3

Changelog

v1.18.2

What's Changed

New Contributors

v1.18.1

What's Changed

New Contributors

Bugfix Release

What's Changed

New Contributors

Bugfix Release

What's Changed

v1.1.1

What's Changed

🔨 Maintenance

📝 Documentation

⬆️ Dependencies

0.30.1 / 2026-01-12

0.30.0 / 2025-12-15

0.30.0-rc.0 / 2025-12-10

0.30.1 / 2026-01-12

0.30.0 / 2025-12-15

v0.67.4 / 2025-11-18

What's Changed

v0.67.3 / 2025-11-18

What's Changed

New Contributors

v0.67.2 / 2025-10-28

What's Changed

New Contributors

Changelog

main / unreleased

What's Changed

v0.67.2 / 2025-10-28

What's Changed

New Contributors

v1.15.0

What's Changed

New Contributors

v1.14.0

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Jan 14, 2026 •

edited

Loading