Skip to content

chore(deps): bump the dependencies group across 1 directory with 2 updates#685

Merged
rhamzeh merged 1 commit into
mainfrom
dependabot/go_modules/dependencies-d063392b01
Apr 27, 2026
Merged

chore(deps): bump the dependencies group across 1 directory with 2 updates#685
rhamzeh merged 1 commit into
mainfrom
dependabot/go_modules/dependencies-d063392b01

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Bumps the dependencies group with 2 updates in the / directory: github.com/mattn/go-isatty and github.com/openfga/openfga.

Updates github.com/mattn/go-isatty from 0.0.21 to 0.0.22

Commits

Updates github.com/openfga/openfga from 1.14.1 to 1.15.0

Release notes

Sourced from github.com/openfga/openfga's releases.

v1.15.0

What's Changed

New Contributors

Full Changelog: openfga/openfga@v1.14.2...v1.15.0

v1.14.2

Fixed

  • Use delimiter in contextual tuple key in experimental weighted_graph_check, and add validation in v2Check. Thanks to @​0xmrma for reporting this bug. #3064

Full Changelog: openfga/openfga@v1.14.1...v1.14.2

Changelog

Sourced from github.com/openfga/openfga's changelog.

[1.15.0] - 2026-04-27

Changed

  • Implemented edge pruning in the list objects pipeline algorithm. This introduces a measurable improvement to request latency for larger, more complex authorization models. #3075

Fixed

  • Fixed experimental weighted_graph_check query cache being skipped when the cache controller returns a zero invalidation time (e.g., on cold start or when disabled), despite the cache controller documenting that zero time should allow cache use. #3086

Security

[1.14.2] - 2026-04-14

Fixed

  • Use delimiter in contextual tuple key in experimental weighted_graph_check, and add validation in v2Check. Thanks to @​0xmrma for reporting this bug. #3064
Commits
  • 83b2b46 release: update changelog for release v1.15.0 (#3090)
  • b309031 chore(deps): bump the dependencies group across 1 directory with 4 updates (#...
  • 75f503d fix: v2Check correctly uses query cache even when cache controller is disable...
  • b55baa3 chore(deps): bump the dependencies group across 1 directory with 7 updates (#...
  • c21aa43 chore(deps): bump github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2 (#3085)
  • 3fad454 chore(deps): bump grpc-ecosystem/grpc-health-probe from v0.4.47 to v0.4.48 in...
  • e58019a feat: try to use UDS internally between HTTP server and gRPC server (#2937)
  • 22a3f51 feat: add jitter to internal cache TTLs to prevent thundering herd effects (#...
  • 6519ff5 list objects pipeline edge pruning (#3075)
  • 96f0bf9 update toolchain go to 1.26.2 to address stdlib CVEs (#3084)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates

Bumps the dependencies group with 2 updates in the / directory: [github.com/mattn/go-isatty](https://github.com/mattn/go-isatty) and [github.com/openfga/openfga](https://github.com/openfga/openfga).


Updates `github.com/mattn/go-isatty` from 0.0.21 to 0.0.22
- [Commits](mattn/go-isatty@v0.0.21...v0.0.22)

Updates `github.com/openfga/openfga` from 1.14.1 to 1.15.0
- [Release notes](https://github.com/openfga/openfga/releases)
- [Changelog](https://github.com/openfga/openfga/blob/main/CHANGELOG.md)
- [Commits](openfga/openfga@v1.14.1...v1.15.0)

---
updated-dependencies:
- dependency-name: github.com/mattn/go-isatty
  dependency-version: 0.0.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/openfga/openfga
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 27, 2026
Copilot AI review requested due to automatic review settings April 27, 2026 15:25
@dependabot dependabot Bot added the go Pull requests that update Go code label Apr 27, 2026
@dependabot dependabot Bot requested a review from a team as a code owner April 27, 2026 15:25
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 27, 2026
@dependabot dependabot Bot review requested due to automatic review settings April 27, 2026 15:25
@dependabot dependabot Bot added the go Pull requests that update Go code label Apr 27, 2026
@rhamzeh rhamzeh enabled auto-merge April 27, 2026 15:27
@rhamzeh rhamzeh added this pull request to the merge queue Apr 27, 2026
@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgithub.com/​openfga/​openfga@​v1.14.1 ⏵ v1.15.076100100100100
Updatedgithub.com/​mattn/​go-isatty@​v0.0.21 ⏵ v0.0.22100100100100100

View full report

Merged via the queue into main with commit 4bfa9ba Apr 27, 2026
20 checks passed
@rhamzeh rhamzeh deleted the dependabot/go_modules/dependencies-d063392b01 branch April 27, 2026 15:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant