chore(deps): bump the go-minor-and-patch group across 1 directory with 30 updates by dependabot[bot] · Pull Request #3309 · chainloop-dev/chainloop

dependabot · 2026-07-27T13:45:24Z

Bumps the go-minor-and-patch group with 19 updates in the / directory:

Package	From	To
code.cloudfoundry.org/bytefmt	`0.79.0`	`0.81.0`
github.com/aws/aws-sdk-go-v2/config	`1.32.27`	`1.32.30`
github.com/aws/aws-sdk-go-v2/service/secretsmanager	`1.42.5`	`1.43.1`
github.com/aws/smithy-go	`1.27.3`	`1.27.4`
github.com/coreos/go-oidc/v3	`3.19.0`	`3.20.0`
github.com/getsentry/sentry-go	`0.47.0`	`0.48.0`
github.com/googleapis/gax-go/v2	`2.22.0`	`2.23.0`
github.com/jedib0t/go-pretty/v6	`6.8.2`	`6.8.3`
github.com/prometheus/client_golang	`1.23.2`	`1.24.0`
cloud.google.com/go/storage	`1.63.0`	`1.63.1`
github.com/aws/aws-sdk-go-v2/feature/s3/manager	`1.22.30`	`1.22.34`
github.com/posthog/posthog-go	`1.17.5`	`1.19.0`
github.com/sigstore/cosign/v3	`3.1.1`	`3.1.2`
github.com/sigstore/fulcio	`1.8.7`	`1.8.8`
github.com/sigstore/sigstore-go	`1.2.1`	`1.2.2`
github.com/sigstore/timestamp-authority/v2	`2.1.2`	`2.1.3`
go.step.sm/crypto	`0.84.1`	`0.85.0`
github.com/XSAM/otelsql	`0.42.0`	`0.43.0`
github.com/fsouza/fake-gcs-server	`1.54.0`	`1.55.1`

Updates code.cloudfoundry.org/bytefmt from 0.79.0 to 0.81.0

Commits

dc375dd Update go.mod dependencies
6c23e9d Update go.mod dependencies
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.27 to 1.32.30

Commits

2704503 Release 2026-07-13
2475fc6 Regenerated Clients
89ce46e Update endpoints model
97a7b55 Update API model
472756a add response snapshot tests for new wave 1 (partial cbor) (#3471)
3133b1d Release 2026-07-10
2d7d0f8 Regenerated Clients
cdc7fe3 Update endpoints model
d41266e Update API model
d7ac1fc Release 2026-07-09
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.26 to 1.19.29

Commits

2704503 Release 2026-07-13
2475fc6 Regenerated Clients
89ce46e Update endpoints model
97a7b55 Update API model
472756a add response snapshot tests for new wave 1 (partial cbor) (#3471)
3133b1d Release 2026-07-10
2d7d0f8 Regenerated Clients
cdc7fe3 Update endpoints model
d41266e Update API model
d7ac1fc Release 2026-07-09
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.42.5 to 1.43.1

Commits

b3e07aa Release 2023-11-20
2fc1c0d Regenerated Clients
1a6bd02 Update endpoints model
ac2c871 Update API model
03c6858 deprecate v4.SignHTTPRequestMiddleware (#2375)
0be05fa Release 2023-11-17
d0c9d42 Regenerated Clients
e2ede40 Update endpoints model
7720f87 Update API model
4bd06b9 Merge customizations for service s3
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sso from 1.31.5 to 1.32.1

Commits

b737dc9 Release 2024-10-07
7279a51 Regenerated Clients
a1b1f5a Update endpoints model
4853c41 Update API model
99e2be8 Allow empty values on prefix headers (#2816)
18e6b6e remove autoscaling smoke tests (#2817)
8200000 remove private metrics collection APIs (#2818)
7a76a2a Release 2024-10-04
e35b8be Regenerated Clients
6e95871 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/smithy-go from 1.27.3 to 1.27.4

Commits

870555a Release 2026-07-16
b06f353 changelogs
25d4f57 add temporary maven manual publish
90775c9 make generic clients work mostly (#687)
da34ee1 add maven staging artifact
1eb963b add serde response snapshot gen (#685)
a349439 replace literal unicodes with escaped forms (#684)
82c5631 generate serde snapshot tests (#682)
See full diff in compare view

Updates github.com/coreos/go-oidc/v3 from 3.19.0 to 3.20.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.20.0

What's Changed

oidc: modernize with new Go APIs by @ericchiang in coreos/go-oidc#487

oidc: improve documentation for APIs by @ericchiang in coreos/go-oidc#488

SECURITY.md: add a security policy and point to project-level reporting by @ericchiang in coreos/go-oidc#489

oidc: ignore JWKs with unknown signing algorithms rather than failing by @ericchiang in coreos/go-oidc#491

readme: update README and docs by @ericchiang in coreos/go-oidc#492

oidc: add API for determining when issuer URLs mismatch by @ericchiang in coreos/go-oidc#493

oidc: add constants for "email" and "profile" scopes by @ericchiang in coreos/go-oidc#494

Full Changelog: coreos/go-oidc@v3.19.0...v3.20.0

Commits

75dfa5c oidc: add constants for "email" and "profile" scopes
a89f046 oidc: add API for determining when issuer URLs mismatch
6a69b6d readme: update README and docs
f9049c9 oidc: ignore JWKs with unknown signing algorithms rather than failing
2f178e0 SECURITY.md: add a security policy and point to project-level reporting
b3bc7da oidc: improve documentation for APIs
0db9053 oidc: modernize with new Go APIs
See full diff in compare view

Updates github.com/getsentry/sentry-go from 0.47.0 to 0.48.0

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.48.0

Breaking Changes 🛠

Remove issue creation from logging integrations by @giortzisg in #1340

New Features ✨
Add ClientOptions.DataCollection for granular control over data collected by automatic instrumentation, replacing the broad SendDefaultPII switch. DataCollection can independently configure automatic user.* population, cookies, request/response headers, HTTP bodies, and query parameters. When configured, it is the source of truth and SendDefaultPII is ignored. by @giortzisg in #1339

For backwards compatibility, clients that do not configure DataCollection keep a best-effort mapping of the previous SendDefaultPII behavior. To opt in to the new defaults, pass an empty DataCollection and then restrict individual categories as needed.
sentry.Init(sentry.ClientOptions{
    Dsn: "https://[email protected]/1",
// Opt in to the new data collection defaults. Omitted fields use their
// defaults: user info, cookies, headers, query params, and supported HTTP
// bodies are collected, with sensitive values filtered.
DataCollection: &amp;sentry.DataCollection{},

})
To opt in while disabling automatic user info and HTTP bodies, configure those fields explicitly:
sentry.Init(sentry.ClientOptions{
    Dsn: "https://[email protected]/1",
    DataCollection: &sentry.DataCollection{
        UserInfo:   sentry.Set(false),
        HTTPBodies: []sentry.BodyType{},
    },
})
PushScope shorthand now returns the new scope reference by @DoctorJohn in #1335
Bug Fixes 🐛

Fix fiber route name when using middlewares by @giortzisg in #1363

Omit empty event id for standalone client reports by @giortzisg in #1362

Preserve '%' literal in log messages by @giortzisg in #1358

Unaligned 64-bit atomic panic on 32-bit platforms in telemetry buffers by @Kirill-INQ in #1355

Isolate event processor across clones by @giortzisg in #1337

Internal Changes 🔧

Deps

Bump fiber/v2 to 2.52.14 by @giortzisg in #1359

Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot in #1349

Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot in #1346

Bump codecov/codecov-action from 6.0.0 to 7.0.0 by @dependabot in #1347

Bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot in #1343

Bump golang.org/x/crypto to 0.52.0 and golang/x/net to 0.55.0 by @giortzisg in #1341

Bump getsentry/github-workflows/validate-pr from c802283cd9075b7a2b7a32655019c21c21676e34 to 4013fc6e1aeb1be1f9d3b4d232624f0ec1afa613 by @dependabot in #1344

... (truncated)

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.48.0

Breaking Changes 🛠

Remove issue creation from logging integrations by @giortzisg in #1340

New Features ✨
Add ClientOptions.DataCollection for granular control over data collected by automatic instrumentation, replacing the broad SendDefaultPII switch. DataCollection can independently configure automatic user.* population, cookies, request/response headers, HTTP bodies, and query parameters. When configured, it is the source of truth and SendDefaultPII is ignored. by @giortzisg in #1339

For backwards compatibility, clients that do not configure DataCollection keep a best-effort mapping of the previous SendDefaultPII behavior. To opt in to the new defaults, pass an empty DataCollection and then restrict individual categories as needed.
sentry.Init(sentry.ClientOptions{
    Dsn: "https://[email protected]/1",
// Opt in to the new data collection defaults. Omitted fields use their
// defaults: user info, cookies, headers, query params, and supported HTTP
// bodies are collected, with sensitive values filtered.
DataCollection: &amp;sentry.DataCollection{},

})
To opt in while disabling automatic user info and HTTP bodies, configure those fields explicitly:
sentry.Init(sentry.ClientOptions{
    Dsn: "https://[email protected]/1",
    DataCollection: &sentry.DataCollection{
        UserInfo:   sentry.Set(false),
        HTTPBodies: []sentry.BodyType{},
    },
})
PushScope shorthand now returns the new scope reference by @DoctorJohn in #1335
Bug Fixes 🐛

Fix fiber route name when using middlewares by @giortzisg in #1363

Omit empty event id for standalone client reports by @giortzisg in #1362

Preserve '%' literal in log messages by @giortzisg in #1358

Unaligned 64-bit atomic panic on 32-bit platforms in telemetry buffers by @Kirill-INQ in #1355

Isolate event processor across clones by @giortzisg in #1337

Internal Changes 🔧

Deps

Bump fiber/v2 to 2.52.14 by @giortzisg in #1359

Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot in #1349

Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot in #1346

Bump codecov/codecov-action from 6.0.0 to 7.0.0 by @dependabot in #1347

Bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot in #1343

Bump golang.org/x/crypto to 0.52.0 and golang/x/net to 0.55.0 by @giortzisg in #1341

... (truncated)

Commits

d02f9ba release: 0.48.0
99c424f feat!: remove issue creation from logging integrations (#1340)
d1c1d3f feat: parse request body for outgoing http (#1339)
9b5cab2 fix: fix fiber route name when using middlewares (#1363)
07a7975 fix: omit empty event id for standalone client reports (#1362)
c255382 build(deps): bump fiber/v2 to 2.52.14 (#1359)
06c58dc ci: remove changelog-preview and codecov actions (#1357)
a99e044 fix: preserve '%' literal in log messages (#1358)
8aaf1d4 feat: apply sensitive data filters to grpc & sql (#1333)
4347773 feat: apply sensitive data filters to http (#1332)
Additional commits viewable in compare view

Updates github.com/googleapis/gax-go/v2 from 2.22.0 to 2.23.0

Release notes

Sourced from github.com/googleapis/gax-go/v2's releases.

v2.23.0

2.23.0 (2026-07-07)

Features

v2: add http.response.status_code to TransportTelemetryData (#513) (7d5554f)

Bug Fixes

correct min go version (#517) (fc62896)

Commits

aca8aec chore(main): release 2.23.0 (#514)
fc62896 fix: correct min go version (#517)
40c3a2c chore(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 (#515)
327ff3b chore(all): update all (#516)
7d5554f feat(v2): add http.response.status_code to TransportTelemetryData (#513)
bcdd76a chore(all): update all to 87f3d3e (#512)
b4f8602 chore: migrate from legacylibrarian to release-please for releasing (#511)
d598715 chore(all): update all (#510)
1721d64 chore(all): update all (#508)
eca08b0 chore(all): update opentelemetry-go monorepo to v1.44.0 (#509)
Additional commits viewable in compare view

Updates github.com/jedib0t/go-pretty/v6 from 6.8.2 to 6.8.3

Release notes

Sourced from github.com/jedib0t/go-pretty/v6's releases.

v6.8.3

What's Changed

table: stack vertically-merged rows into wrapped cell height; fixes #261 by @jedib0t in jedib0t/go-pretty#411

README.md: drop Go Report Card badge by @jedib0t in jedib0t/go-pretty#412

Full Changelog: jedib0t/go-pretty@v6.8.2...v6.8.3

Commits

db0aac2 README.md: drop Go Report Card badge (#412)
7f91001 table: stack vertically-merged rows into wrapped cell height; fixes #261 (#411)
See full diff in compare view

Updates github.com/prometheus/client_golang from 1.23.2 to 1.24.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.24.0 - 2026-07-20

Changes

[CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. #1862

[CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated model.NameValidationScheme global. Default behavior is unchanged; code that set NameValidationScheme = LegacyValidation no longer gets legacy enforcement at metric, label, and push-grouping construction. #2051

[CHANGE] api/prometheus/v1: Support matchers (matches[] parameter) in Rules method (Rules(ctx context.Context, matches []string) (RulesResult, error)). #1843

[CHANGE] api/prometheus/v1: Refactor LabelNames method to return model.LabelNames instead of []string for consistency across the API. #1850

[CHANGE] exp/api/remote: Simplify Store interface, rename Handler to WriteHandler, and encapsulate write response handling. #1855

[FEATURE] prometheus: Add new Go 1.26 runtime metrics (/sched/goroutines-created:goroutines, /sched/goroutines/not-in-go:goroutines, /sched/goroutines/runnable:goroutines, /sched/goroutines/running:goroutines, /sched/goroutines/waiting:goroutines, /sched/threads/total:threads). #1942

[FEATURE] prometheus: Add WithUnit(unit string) option and explicit OpenMetrics unit support in CounterOpts, GaugeOpts, SummaryOpts, and HistogramOpts. #1392

[FEATURE] prometheus: Expose descriptor construction error through public Err() method on Desc. #1902

[FEATURE] promhttp: Add opt-in HandlerOpts.CoalesceGather to deduplicate concurrent Gather calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. #1969

[FEATURE] promhttp: HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #1925

[FEATURE] api/prometheus/v1: Add query formatting endpoint support (/format_query) and FormatQuery(ctx context.Context, query string) (string, error) method. #1846, #1856

[FEATURE] api/prometheus/v1: Add support for /status/tsdb/blocks endpoint via TSDBBlocks(ctx context.Context) ([]TSDBBlock, error) method. #1896

[FEATURE] exp/api/remote: Export BackoffConfig to allow customization when using WithAPIBackoff. #1895

[FEATURE] exp/api/remote: Add RetryCallBack to allow custom logging or handling on retry attempts in the remote write client. #1888, #1890

[ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. #1860

[ENHANCEMENT] api: Use cloned http.DefaultTransport when constructing default HTTP clients to prevent accidental mutations of shared global transport state. #1885

[BUGFIX] prometheus: Recover from collector panics during Gather() and return an error instead of crashing the process. #1961

[BUGFIX] prometheus: Fix cpu-seconds unit suffix handling for metric go_cpu_classes_gc_mark_assist_cpu_seconds. #1991

[BUGFIX] promhttp: InstrumentHandlerDuration and InstrumentHandlerCounter no longer panic when given an observer/counter that does not implement ExemplarObserver/ExemplarAdder (e.g. a SummaryVec). The exemplar is dropped and the value is recorded via the plain Observe/Add path, matching the safe-cast already used by Timer.ObserveDurationWithExemplar. #2005

[BUGFIX] api/prometheus/v1: Fall back to GET requests when POST requests return 403 Forbidden or method not allowed. #2030

[BUGFIX] api: Respect context cancellation inside httpClient.Do. #1971

[BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. #1889

[BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917

[BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. #1927

build(deps): bump github.com/prometheus/procfs from 0.16.1 to 0.17.0 by @dependabot[bot] in prometheus/client_golang#1839

build(deps): bump golang.org/x/sys from 0.33.0 to 0.34.0 by @dependabot[bot] in prometheus/client_golang#1838

prometheus/collectors: use godoc link for runtime/metrics supported metrics by @xieyuschen in prometheus/client_golang#1844

Fix doc typo by @torrca in prometheus/client_golang#1849

Merge release-1.23 into main by @vesari in prometheus/client_golang#1851

build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 in the github-actions group by @dependabot[bot] in prometheus/client_golang#1852

Refactor LabelNames to return model.LabelNames type for consistency by @yshngg in prometheus/client_golang#1850

remote: simplified Store interface; renamed Handler to WriteHandler by @bwplotka in prometheus/client_golang#1855

feat(api/prometheus): add format_query endpoint for query formatting by @yshngg in prometheus/client_golang#1846

feat(api): add FormatQuery method to Prometheus v1 API by @yshngg in prometheus/client_golang#1856

Support matchers in rules API by @jotak in prometheus/client_golang#1843

Use prometheus/common.expfmt.NewTextParser by @aknuds1 in prometheus/client_golang#1859

Merge release-1.23 into main by @aknuds1 in prometheus/client_golang#1861

chore: Drop support for <go1.22 by @mrueg in prometheus/client_golang#1862

collectors/version: Allow custom additional labels by @mrueg in prometheus/client_golang#1860

build(deps): bump github.com/prometheus/common from 0.65.0 to 0.66.0 by @ywwg in prometheus/client_golang#1865

Sync release-1.23 into main by @aknuds1 in prometheus/client_golang#1868

Sync main with release-1.23 by @aknuds1 in prometheus/client_golang#1871

chore: clean up golangci-lint configuration by @mmorel-35 in prometheus/client_golang#1802

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.24.0 / 2026-07-20

[CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. #1862

[CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated model.NameValidationScheme global. Default behavior is unchanged; code that set NameValidationScheme = LegacyValidation no longer gets legacy enforcement at metric, label, and push-grouping construction. #2051

[CHANGE] api/prometheus/v1: Support matchers (matches[] parameter) in Rules method (Rules(ctx context.Context, matches []string) (RulesResult, error)). #1843

[CHANGE] api/prometheus/v1: Refactor LabelNames method to return model.LabelNames instead of []string for consistency across the API. #1850

[CHANGE] exp/api/remote: Simplify Store interface, rename Handler to WriteHandler, and encapsulate write response handling. #1855

[FEATURE] prometheus: Add new Go 1.26 runtime metrics (/sched/goroutines-created:goroutines, /sched/goroutines/not-in-go:goroutines, /sched/goroutines/runnable:goroutines, /sched/goroutines/running:goroutines, /sched/goroutines/waiting:goroutines, /sched/threads/total:threads). #1942

[FEATURE] prometheus: Add WithUnit(unit string) option and explicit OpenMetrics unit support in CounterOpts, GaugeOpts, SummaryOpts, and HistogramOpts. #1392

[FEATURE] prometheus: Expose descriptor construction error through public Err() method on Desc. #1902

[FEATURE] promhttp: Add opt-in HandlerOpts.CoalesceGather to deduplicate concurrent Gather calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. #1969

[FEATURE] promhttp: HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #1925

[FEATURE] api/prometheus/v1: Add query formatting endpoint support (/format_query) and FormatQuery(ctx context.Context, query string) (string, error) method. #1846, #1856

[FEATURE] api/prometheus/v1: Add support for /status/tsdb/blocks endpoint via TSDBBlocks(ctx context.Context) ([]TSDBBlock, error) method. #1896

[FEATURE] exp/api/remote: Export BackoffConfig to allow customization when using WithAPIBackoff. #1895

[FEATURE] exp/api/remote: Add RetryCallBack to allow custom logging or handling on retry attempts in the remote write client. #1888, #1890

[ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. #1860

[ENHANCEMENT] api: Use cloned http.DefaultTransport when constructing default HTTP clients to prevent accidental mutations of shared global transport state. #1885

[BUGFIX] prometheus: Recover from collector panics during Gather() and return an error instead of crashing the process. #1961

[BUGFIX] prometheus: Fix cpu-seconds unit suffix handling for metric go_cpu_classes_gc_mark_assist_cpu_seconds. #1991

[BUGFIX] promhttp: InstrumentHandlerDuration and InstrumentHandlerCounter no longer panic when given an observer/counter that does not implement ExemplarObserver/ExemplarAdder (e.g. a SummaryVec). The exemplar is dropped and the value is recorded via the plain Observe/Add path, matching the safe-cast already used by Timer.ObserveDurationWithExemplar. #2005

[BUGFIX] api/prometheus/v1: Fall back to GET requests when POST requests return 403 Forbidden or method not allowed. #2030

[BUGFIX] api: Respect context cancellation inside httpClient.Do. #1971

[BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. #1889

[BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917

[BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. #1927

Commits

48dd383 Cut v1.24.0 (#2061)
a725305 Cut v1.24.0-rc.0 (#2058)
77c584f build(deps): update all Go dependencies in all go.mod files (#2059)
78262a7 feat(promhttp): add CoalesceGather option to deduplicate concurrent Gather ca...
34e9a7f Merge pull request #2055 from prombot/repo_sync
43749bc Update common Prometheus files
de19217 examples: improve simple main.go example (#1999)
20355eb fix: correct typos in comments and test error messages (#2049)
4cd2d3a test: fix two flaky tests (darwin start_time regex, memstats HeapReleased dri...
b0d896b Replace deprecated model.NameValidationScheme with explicit UTF8Validation (#...
Additional commits viewable in compare view

Updates golang.org/x/term from 0.44.0 to 0.45.0

Commits

9f69229 go.mod: update golang.org/x dependencies
See full diff in compare view

Updates google.golang.org/api from 0.287.0 to 0.287.1

Release notes

Sourced from google.golang.org/api's releases.

v0.287.1

0.287.1 (2026-07-07)

Documentation

Remove old TODO file (#3645) (9d7a6b8)

Changelog

Sourced from google.golang.org/api's changelog.

0.287.1 (2026-07-07)

Documentation

Remove old TODO file (#3645) (9d7a6b8)

Commits

93d63e8 chore(main): release 0.287.1 (#3646)
9d7a6b8 docs: remove old TODO file (#3645)
576018f chore(all): update all (#3644)
cc70265 chore(deps): bump golang.org/x/net in /internal/kokoro/discogen (#3642)
9858f66 chore: downgrade go version in go.work (#3641)
3cb00c0 chore: downgrade min Go version (#3640)
See full diff in compare view

Updates cloud.google.com/go/storage from 1.63.0 to 1.63.1

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.63.1

1.63.1 (2026-07-13)

Features

o11y: Regenerate clients for LRO tracing (#20107) (779074e)

Bug Fixes

storage: Minor documentation fix (#20139) (37f1745)

Commits

ad1a4bf chore(main): release storage 1.63.1 (#20130)
37f1745 fix(storage): Minor documentation fix (#20139)
779074e feat(o11y): regenerate clients for LRO tracing (#20107)
e1011e2 feat(bigtable): add Session primitives (AttemptOutcome, vRPC ctx, msgtype) (#...
a50338e chore(main): release bigquery 1.78.0 (#20127)
b9d638d chore(librarian): align Go toolchain to 1.25.0 (#20129)
e67d752 chore(main): release firestore 1.23.0 (#19997)
fec9388 chore: remove bq v2 from release-please config (#20128)
75a5d59 fix(agentregistry): correct go min version (#20108)
8eb3be6 chore: wire up mod validation action (#20125)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.22.30 to 1.22.34

Commits

0ffbcb9 Release 2026-07-16
2a0ecfb Regenerated Clients
20ba39f Update endpoints model
8925213 Update API model
47e09a2 add replace annotations for new generic client auth/endpoints (#3477)
1dc42b2 Release 2026-07-15
b945893 Regenerated Clients
ccbf00c Update API model
b8df6dc enable schema-serde cbor wave 1 (#3478)
00daf36 Release 2026-07-14
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.104.2 to 1.105.2

Commits

0ffbcb9 Release 2026-07-16
2a0ecfb Regenerated Clients
20ba39f Update endpoints model
8925213Description has been truncated

…h 30 updates Bumps the go-minor-and-patch group with 19 updates in the / directory: | Package | From | To | | --- | --- | --- | | [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) | `0.79.0` | `0.81.0` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.27` | `1.32.30` | | [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2) | `1.42.5` | `1.43.1` | | [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.27.3` | `1.27.4` | | [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.19.0` | `3.20.0` | | [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) | `0.47.0` | `0.48.0` | | [github.com/googleapis/gax-go/v2](https://github.com/googleapis/gax-go) | `2.22.0` | `2.23.0` | | [github.com/jedib0t/go-pretty/v6](https://github.com/jedib0t/go-pretty) | `6.8.2` | `6.8.3` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.23.2` | `1.24.0` | | [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.63.0` | `1.63.1` | | [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.22.30` | `1.22.34` | | [github.com/posthog/posthog-go](https://github.com/posthog/posthog-go) | `1.17.5` | `1.19.0` | | [github.com/sigstore/cosign/v3](https://github.com/sigstore/cosign) | `3.1.1` | `3.1.2` | | [github.com/sigstore/fulcio](https://github.com/sigstore/fulcio) | `1.8.7` | `1.8.8` | | [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) | `1.2.1` | `1.2.2` | | [github.com/sigstore/timestamp-authority/v2](https://github.com/sigstore/timestamp-authority) | `2.1.2` | `2.1.3` | | [go.step.sm/crypto](https://github.com/smallstep/crypto) | `0.84.1` | `0.85.0` | | [github.com/XSAM/otelsql](https://github.com/XSAM/otelsql) | `0.42.0` | `0.43.0` | | [github.com/fsouza/fake-gcs-server](https://github.com/fsouza/fake-gcs-server) | `1.54.0` | `1.55.1` | Updates `code.cloudfoundry.org/bytefmt` from 0.79.0 to 0.81.0 - [Release notes](https://github.com/cloudfoundry/bytefmt/releases) - [Commits](cloudfoundry/bytefmt@v0.79.0...v0.81.0) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.27 to 1.32.30 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.27...config/v1.32.30) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.26 to 1.19.29 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@credentials/v1.19.26...credentials/v1.19.29) Updates `github.com/aws/aws-sdk-go-v2/service/secretsmanager` from 1.42.5 to 1.43.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/amp/v1.42.5...service/s3/v1.43.1) Updates `github.com/aws/aws-sdk-go-v2/service/sso` from 1.31.5 to 1.32.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.31.5...v1.32.1) Updates `github.com/aws/smithy-go` from 1.27.3 to 1.27.4 - [Release notes](https://github.com/aws/smithy-go/releases) - [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md) - [Commits](aws/smithy-go@v1.27.3...v1.27.4) Updates `github.com/coreos/go-oidc/v3` from 3.19.0 to 3.20.0 - [Release notes](https://github.com/coreos/go-oidc/releases) - [Commits](coreos/go-oidc@v3.19.0...v3.20.0) Updates `github.com/getsentry/sentry-go` from 0.47.0 to 0.48.0 - [Release notes](https://github.com/getsentry/sentry-go/releases) - [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-go@v0.47.0...v0.48.0) Updates `github.com/googleapis/gax-go/v2` from 2.22.0 to 2.23.0 - [Release notes](https://github.com/googleapis/gax-go/releases) - [Commits](googleapis/gax-go@v2.22.0...v2.23.0) Updates `github.com/jedib0t/go-pretty/v6` from 6.8.2 to 6.8.3 - [Release notes](https://github.com/jedib0t/go-pretty/releases) - [Commits](jedib0t/go-pretty@v6.8.2...v6.8.3) Updates `github.com/prometheus/client_golang` from 1.23.2 to 1.24.0 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/v1.24.0/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.23.2...v1.24.0) Updates `golang.org/x/term` from 0.44.0 to 0.45.0 - [Commits](golang/term@v0.44.0...v0.45.0) Updates `google.golang.org/api` from 0.287.0 to 0.287.1 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.287.0...v0.287.1) Updates `cloud.google.com/go/storage` from 1.63.0 to 1.63.1 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@compute/v1.63.0...storage/v1.63.1) Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.22.30 to 1.22.34 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@feature/s3/manager/v1.22.30...feature/s3/manager/v1.22.34) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.104.2 to 1.105.2 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.104.2...service/s3/v1.105.2) Updates `github.com/posthog/posthog-go` from 1.17.5 to 1.19.0 - [Release notes](https://github.com/posthog/posthog-go/releases) - [Changelog](https://github.com/PostHog/posthog-go/blob/main/CHANGELOG.md) - [Commits](PostHog/posthog-go@v1.17.5...v1.19.0) Updates `github.com/sigstore/cosign/v3` from 3.1.1 to 3.1.2 - [Release notes](https://github.com/sigstore/cosign/releases) - [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md) - [Commits](sigstore/cosign@v3.1.1...v3.1.2) Updates `github.com/sigstore/fulcio` from 1.8.7 to 1.8.8 - [Release notes](https://github.com/sigstore/fulcio/releases) - [Changelog](https://github.com/sigstore/fulcio/blob/main/CHANGELOG.md) - [Commits](sigstore/fulcio@v1.8.7...v1.8.8) Updates `github.com/sigstore/sigstore-go` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/sigstore/sigstore-go/releases) - [Commits](sigstore/sigstore-go@v1.2.1...v1.2.2) Updates `github.com/sigstore/timestamp-authority/v2` from 2.1.2 to 2.1.3 - [Release notes](https://github.com/sigstore/timestamp-authority/releases) - [Changelog](https://github.com/sigstore/timestamp-authority/blob/main/CHANGELOG.md) - [Commits](sigstore/timestamp-authority@v2.1.2...v2.1.3) Updates `go.step.sm/crypto` from 0.84.1 to 0.85.0 - [Release notes](https://github.com/smallstep/crypto/releases) - [Commits](smallstep/crypto@v0.84.1...v0.85.0) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260615183401-62b3387ff324 to 0.0.0-20260630182238-925bb5da69e7 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/bytestream` from 0.0.0-20260622175928-b703f567277d to 0.0.0-20260630182238-925bb5da69e7 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `github.com/XSAM/otelsql` from 0.42.0 to 0.43.0 - [Release notes](https://github.com/XSAM/otelsql/releases) - [Changelog](https://github.com/XSAM/otelsql/blob/main/CHANGELOG.md) - [Commits](XSAM/otelsql@v0.42.0...v0.43.0) Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.43.5 to 1.44.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/sts/v1.43.5...service/iot/v1.44.1) Updates `github.com/fsouza/fake-gcs-server` from 1.54.0 to 1.55.1 - [Release notes](https://github.com/fsouza/fake-gcs-server/releases) - [Commits](fsouza/fake-gcs-server@v1.54.0...v1.55.1) Updates `github.com/prometheus/common` from 0.69.0 to 0.70.0 - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md) - [Commits](prometheus/common@v0.69.0...v0.70.0) Updates `golang.org/x/crypto` from 0.53.0 to 0.54.0 - [Commits](golang/crypto@v0.53.0...v0.54.0) Updates `golang.org/x/text` from 0.39.0 to 0.40.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.39.0...v0.40.0) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.19.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/aws/aws-sdk-go-v2/service/secretsmanager dependency-version: 1.43.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/aws/aws-sdk-go-v2/service/sso dependency-version: 1.32.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/aws/smithy-go dependency-version: 1.27.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/coreos/go-oidc/v3 dependency-version: 3.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/getsentry/sentry-go dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/googleapis/gax-go/v2 dependency-version: 2.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/jedib0t/go-pretty/v6 dependency-version: 6.8.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/prometheus/client_golang dependency-version: 1.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: golang.org/x/term dependency-version: 0.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: google.golang.org/api dependency-version: 0.287.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: cloud.google.com/go/storage dependency-version: 1.63.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager dependency-version: 1.22.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.105.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/posthog/posthog-go dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/sigstore/cosign/v3 dependency-version: 3.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/sigstore/fulcio dependency-version: 1.8.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/sigstore/sigstore-go dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/sigstore/timestamp-authority/v2 dependency-version: 2.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: go.step.sm/crypto dependency-version: 0.85.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20260630182238-925bb5da69e7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: google.golang.org/genproto/googleapis/bytestream dependency-version: 0.0.0-20260630182238-925bb5da69e7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/XSAM/otelsql dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/aws/aws-sdk-go-v2/service/sts dependency-version: 1.44.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/fsouza/fake-gcs-server dependency-version: 1.55.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/prometheus/common dependency-version: 0.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: golang.org/x/crypto dependency-version: 0.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: golang.org/x/text dependency-version: 0.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 27, 2026

matiasinsaurralde approved these changes Jul 28, 2026

View reviewed changes

matiasinsaurralde force-pushed the dependabot/go_modules/go-minor-and-patch-0cd62e20f5 branch from f582da9 to 7d505bb Compare July 28, 2026 20:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the go-minor-and-patch group across 1 directory with 30 updates - #3309

chore(deps): bump the go-minor-and-patch group across 1 directory with 30 updates#3309
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-0cd62e20f5

dependabot Bot commented on behalf of github Jul 27, 2026 •

edited by cubic-dev-ai Bot

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026 • edited by cubic-dev-ai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.20.0

What's Changed

0.48.0

Breaking Changes 🛠

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Deps

0.48.0

Breaking Changes 🛠

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Deps

v2.23.0

2.23.0 (2026-07-07)

Features

Bug Fixes

v6.8.3

What's Changed

v1.24.0 - 2026-07-20

Changes

1.24.0 / 2026-07-20

v0.287.1

0.287.1 (2026-07-07)

Documentation

0.287.1 (2026-07-07)

Documentation

storage: v1.63.1

1.63.1 (2026-07-13)

Features

Bug Fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 27, 2026 •

edited by cubic-dev-ai Bot

Loading