Skip to content

Bump the go-sdk-dependency-updates group across 1 directory with 10 updates - #70847

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-sdk/go-sdk-dependency-updates-416f0d59e3
Closed

Bump the go-sdk-dependency-updates group across 1 directory with 10 updates#70847
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-sdk/go-sdk-dependency-updates-416f0d59e3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-sdk-dependency-updates group with 10 updates in the /go-sdk directory:

Package From To
github.com/cappuccinotm/slogx 1.4.2 1.5.0
github.com/golang-jwt/jwt/v5 5.3.0 5.3.1
github.com/hashicorp/go-plugin 1.7.0 1.8.0
github.com/oapi-codegen/runtime 1.1.1 1.6.0
github.com/spf13/cobra 1.10.1 1.10.2
github.com/spf13/viper 1.20.1 1.21.0
resty.dev/v3 3.0.0-beta.2 3.0.0-rc.3
github.com/fatih/color 1.18.0 1.19.0
github.com/jarcoal/httpmock 1.4.0 1.4.1
github.com/samber/slog-http 1.8.2 1.12.1

Updates github.com/cappuccinotm/slogx from 1.4.2 to 1.5.0

Release notes

Sourced from github.com/cappuccinotm/slogx's releases.

Version 1.5.0

What's Changed

New Contributors

Full Changelog: cappuccinotm/slogx@v1.4.2...v1.5.0

Commits
  • 7acd40b fix: panic in logging round tripper if request body is passed as nil, instead...
  • 0ed7588 chore: move ApplyHandler to slogm and check handler is enabled (#12)
  • d71464b upgrade to go 1.26 (#13)
  • f6f9865 feat: add wrapper for Middleware (#11)
  • See full diff in compare view

Updates github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1

Release notes

Sourced from github.com/golang-jwt/jwt/v5's releases.

v5.3.1

What's Changed

🔐 Features

👒 Dependencies

New Contributors

Full Changelog: golang-jwt/jwt@v5.3.0...v5.3.1

Commits
  • 7ceae61 Add release.yml for changelog configuration
  • dce8e4d Set token.Signature in ParseUnverified (#414)
  • 8889e20 Save signature to Token struct after successful signing (#417)
  • d237f82 ci: update github-actions schedule interval to monthly
  • d8dce95 Bump crate-ci/typos from 1.41.0 to 1.42.1 (#492)
  • e931803 Bump crate-ci/typos from 1.40.0 to 1.41.0 (#490)
  • e6a0afa Bump actions/checkout from 5 to 6 (#487)
  • 9f85c9e Bump crate-ci/typos from 1.39.0 to 1.40.0 (#488)
  • 60a8669 Bump actions/setup-go from 5 to 6 (#469)
  • 76f5828 Remove misleading ParserOptions documentation (#484)
  • Additional commits viewable in compare view

Updates github.com/hashicorp/go-plugin from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/hashicorp/go-plugin's releases.

v1.8.0

What’s Changed

Compliance & Maintenance

  • updated copyright and license headers
  • Modernized build tags
  • Multiple GitHub Actions and dependency bumps

Fixes & Improvements

  • Fixed concurrency issue with pipesWaitGroup
  • Prevented pidfd leak in cmdrunner
  • Reduced logging configuration noise

Enhancements

  • Updated go_package to full path in proto
  • Improved gRPC example (plugin selection + encoding fix)
  • Added gRPC streaming example

Dependencies Upgrade

  • Upgraded protobuf
  • Several CI/CD action updates

New Contributors

Changelog

Sourced from github.com/hashicorp/go-plugin's changelog.

Unreleased

SECURITY:

  • deps: Updated google.golang.org/grpc to v1.81.1 [GH-383]

ENHANCEMENTS:

  • deps: Removed direct use of deprecated github.com/golang/protobuf in favour of google.golang.org/protobuf [GH-388]
Commits
  • 155dcdd cmdrunner: release process handle in _pidAlive to avoid pidfd leak (#378)
  • 96d18ee [chore] : Bump actions/upload-artifact in the actions group (#376)
  • a0c251c [chore] : Bump actions/setup-go from 6.3.0 to 6.4.0 in the actions group (#375)
  • 6a56553 [chore] : Bump the actions group with 2 updates (#373)
  • abeb978 Bump protobuf from 4.25.8 to 5.29.6 in /examples/grpc/plugin-python (#372)
  • a4c9002 examples: Add gRPC streaming example (#339)
  • 0ac49e2 [chore] : Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group (#370)
  • d662936 logging: lower priority of configuring messages (#311)
  • c57bf64 [chore] : Bump actions/setup-go from 6.1.0 to 6.2.0 in the actions group (#369)
  • a33e454 chore: add plugin selection and fix encoding in gRPC example (#368)
  • Additional commits viewable in compare view

Updates github.com/oapi-codegen/runtime from 1.1.1 to 1.6.0

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

Allow customization of parameter encoding

This is a small release which adds a global encoding setting on the runtime, to allow users to customize how to handle spaces in query arguments. This is a new minor release, since we're adding new API, even though this is a very minor feature. I imagine that in the future, we will add more settings, rather than making behavior assumptions.

🚀 New features and improvements

📦 Dependency updates

  • chore(deps): update module github.com/golangci/golangci-lint to v2.12.2 (#112) @renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.

Sponsors

We would like to thank our sponsors for their support during this release.

v1.5.0: RFC3339 durations, and bug fixes

This is mainly a bugfix release, but we're bumping the minor version since we also introduce a new type, Duration into our types/ package, which allows for parsing and emitting RFC3339 durations. Rather than trying to parse a duration string into a time.Duration, which requires assumptions that may not be right for everyone, we decided not to make those decisions and just store all possible fields as provided. Users can convert this to Go Duration as they see fit.

🚀 New features and improvements

🐛 Bug fixes

📝 Documentation updates

... (truncated)

Commits
  • 01be2fa chore(deps): update module github.com/golangci/golangci-lint to v2.12.2 (#112)
  • 1463938 Allow customizing default query encoder (#145)
  • 540d34a fix(deps): update module github.com/labstack/echo/v5 to v5.3.0 (#142)
  • e89dbb8 Add types.Duration for the RFC 3339 duration format (#144)
  • 324e57f Let generated code declare whether styled parameter values are escaped (#143)
  • 95c13c0 Explain how to send nested objects when style serialization fails (#141)
  • 7c889f3 Prefer the form struct tag over json for form encoding (#140)
  • d0d5c3a chore(deps): update golang/govulncheck-action action to v1.1.0 (#137)
  • 67e86fd chore(deps): update oapi-codegen/actions action to v0.8.0 (#130)
  • df140cb fix(deps): update module github.com/labstack/echo/v5 to v5.2.1 (#126)
  • Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.10.1 to 1.10.2

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.2

🔧 Dependencies

  • chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @​dims in spf13/cobra#2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

Commits

Updates github.com/spf13/viper from 1.20.1 to 1.21.0

Release notes

Sourced from github.com/spf13/viper's releases.

v1.21.0

What's Changed

Enhancements 🚀

Bug Fixes 🐛

Dependency Updates ⬆️

Other Changes

New Contributors

Full Changelog: spf13/viper@v1.20.0...v1.21.0

Commits
  • 394040c ci: build on go 1.25
  • 812f548 chore: update dependencies
  • d5271ef ci: update stale workflow
  • dff303b feat: add a stale issue scheduled action
  • 1287976 build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10
  • 38932cd build(deps): bump github.com/go-viper/mapstructure/v2 in /remote
  • 6d014be build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1
  • b74c7ee build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0
  • acd05e1 fix: linting issues
  • ae5a8e2 ci: upgrade golangci-lint
  • Additional commits viewable in compare view

Updates resty.dev/v3 from 3.0.0-beta.2 to 3.0.0-rc.3

Release notes

Sourced from resty.dev/v3's releases.

v3.0.0-rc.3

v3 Release Candidate 3

v3 Guide

Bug Fixes

Enhancements

Tests

New Contributors

Full Changelog: go-resty/resty@v3.0.0-rc.2...v3.0.0-rc.3

v3.0.0-rc.2

v3 Release Candidate 2

v3 Guide

Bug Fixes

  • fix: content decoder not found error when do not parse response is enabled and unsupported content-encoding header present by @​jeevatkm in go-resty/resty#1169
  • fix: panics and state corruption in Request.Clone, Client.Close, SSE default logger, and invalid HTTP method handling by @​g3m0sis in go-resty/resty#1172

New Contributors

Full Changelog: go-resty/resty@v3.0.0-rc.1...v3.0.0-rc.2

v3.0.0-rc.1

v3 Release Candidate 1

v3 Guide

Bug Fixes

... (truncated)

Commits
  • d48da64 release: version bump to v3.0.0-rc.3 (#1182)
  • 3f32051 fix(retry): protect parseRetryAfterHeader from integer and time duration over...
  • 5a34452 feat(enhancement): improve string request body parsing memory allocs (#1180)
  • e0d82c2 test: cover cancellation on nil resp body (#1179)
  • b17d8b0 fix: context cancellation leak (#1177)
  • b5060b2 chore: bump version to 3.0.0-rc.2+devrc3 for next dev iteration (#1175)
  • c72afa4 release: version bump to v3.0.0-rc.2 (#1174)
  • 22ccb8e fix: panics and state corruption in Request.Clone, Client.Close, SSE default ...
  • 80fd29d fix: content decoder not found error when do not parse response is enabled (#...
  • e674e0b chore: bump version to 3.0.0-rc.1+devrc2 for next dev iteration (#1171)
  • Additional commits viewable in compare view

Updates github.com/fatih/color from 1.18.0 to 1.19.0

Release notes

Sourced from github.com/fatih/color's releases.

v1.19.0

What's Changed

New Contributors

Full Changelog: fatih/color@v1.18.0...v1.19.0

Commits
  • ca25f6e Merge pull request #266 from fatih/dependabot/github_actions/actions/setup-go-6
  • 1205984 Bump actions/setup-go from 5 to 6
  • 5715c20 Merge pull request #269 from UnSubble/main
  • 2f6e200 Merge branch 'main' into main
  • f72ec94 Merge pull request #273 from fatih/dependabot/github_actions/actions/checkout-6
  • 848e633 Merge branch 'main' into main
  • 4c2cd34 Add tests
  • 7f812f0 Bump actions/checkout from 4 to 6
  • b7fc9f9 Merge pull request #259 from fatih/dependabot/github_actions/dominikh/staticc...
  • 239a88f Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0
  • Additional commits viewable in compare view

Updates github.com/jarcoal/httpmock from 1.4.0 to 1.4.1

Release notes

Sourced from github.com/jarcoal/httpmock's releases.

v1.4.1

What's Changed

New Contributors

Full Changelog: jarcoal/httpmock@v1.4.0...v1.4.1

Commits
  • 314d58a fix: protect all body-related methods with mutext
  • e482896 fix: avoid data race when closing body
  • c977145 test: also test with go v1.25 and use golangci-lint v2.4.0
  • See full diff in compare view

Updates github.com/samber/slog-http from 1.8.2 to 1.12.1

Release notes

Sourced from github.com/samber/slog-http's releases.

v1.12.1

  • Fix Filter suffix operations
  • Optimize Filter performance

Full Changelog: samber/slog-http@v1.12.0...v1.12.1

v1.12.0

What's Changed

Full Changelog: samber/slog-http@v1.11.1...v1.12.0

v1.11.1

What's Changed

Full Changelog: samber/slog-http@v1.11.0...v1.11.1

v1.11.0

What's Changed

New Contributors

Full Changelog: samber/slog-http@v1.10.0...v1.11.0

v1.10.0

What's Changed

New Contributors

Full Changelog: samber/slog-http@v1.9.0...v1.10.0

v1.9.0

feat: add variadic parameters to AddCustomAttributes and AddContextAttributes

Commits
  • 0c7441d bump v1.12.1
  • c523af0 fix(filters): fix suffix filters and perf optimizations
  • c253d3d fix: add default value of WithCustomMessage (#19)
  • 6727a4c fix: avoid infinite recursion when recording body with Readfrom (#18)
  • fa15b80 fix: implement io.ReaderFrom in wrapped response (compat with other middlewar...
  • e3b9add Update README.md
  • 32ac81c feat: add WithClientIP property (#16)
  • 2f02e32 fix: recovery handler suppresses http.ErrAbortHandler (#12)
  • c945fd6 feat: variadic slog.Attr arg list to Add*Attributes functions (#11)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 31, 2026
@dependabot
dependabot Bot requested review from amoghrajesh and ashb as code owners July 31, 2026 16:55
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 31, 2026
@dependabot
dependabot Bot requested a review from jason810496 as a code owner July 31, 2026 16:55
@dependabot dependabot Bot added the go Pull requests that update go code label Jul 31, 2026
@dependabot
Bump the go-sdk-dependency-updates group across 1 directory with 10 u…
cb4e42f 
…pdates

Bumps the go-sdk-dependency-updates group with 10 updates in the /go-sdk directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/cappuccinotm/slogx](https://github.com/cappuccinotm/slogx) | `1.4.2` | `1.5.0` |
| [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.3.0` | `5.3.1` |
| [github.com/hashicorp/go-plugin](https://github.com/hashicorp/go-plugin) | `1.7.0` | `1.8.0` |
| [github.com/oapi-codegen/runtime](https://github.com/oapi-codegen/runtime) | `1.1.1` | `1.6.0` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.10.1` | `1.10.2` |
| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.20.1` | `1.21.0` |
| [resty.dev/v3](https://github.com/go-resty/resty) | `3.0.0-beta.2` | `3.0.0-rc.3` |
| [github.com/fatih/color](https://github.com/fatih/color) | `1.18.0` | `1.19.0` |
| [github.com/jarcoal/httpmock](https://github.com/jarcoal/httpmock) | `1.4.0` | `1.4.1` |
| [github.com/samber/slog-http](https://github.com/samber/slog-http) | `1.8.2` | `1.12.1` |



Updates `github.com/cappuccinotm/slogx` from 1.4.2 to 1.5.0
- [Release notes](https://github.com/cappuccinotm/slogx/releases)
- [Commits](cappuccinotm/slogx@v1.4.2...v1.5.0)

Updates `github.com/golang-jwt/jwt/v5` from 5.3.0 to 5.3.1
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Commits](golang-jwt/jwt@v5.3.0...v5.3.1)

Updates `github.com/hashicorp/go-plugin` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/hashicorp/go-plugin/releases)
- [Changelog](https://github.com/hashicorp/go-plugin/blob/main/CHANGELOG.md)
- [Commits](hashicorp/go-plugin@v1.7.0...v1.8.0)

Updates `github.com/oapi-codegen/runtime` from 1.1.1 to 1.6.0
- [Release notes](https://github.com/oapi-codegen/runtime/releases)
- [Commits](oapi-codegen/runtime@v1.1.1...v1.6.0)

Updates `github.com/spf13/cobra` from 1.10.1 to 1.10.2
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.10.1...v1.10.2)

Updates `github.com/spf13/viper` from 1.20.1 to 1.21.0
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](spf13/viper@v1.20.1...v1.21.0)

Updates `resty.dev/v3` from 3.0.0-beta.2 to 3.0.0-rc.3
- [Release notes](https://github.com/go-resty/resty/releases)
- [Commits](go-resty/resty@v3.0.0-beta.2...v3.0.0-rc.3)

Updates `github.com/fatih/color` from 1.18.0 to 1.19.0
- [Release notes](https://github.com/fatih/color/releases)
- [Commits](fatih/color@v1.18.0...v1.19.0)

Updates `github.com/jarcoal/httpmock` from 1.4.0 to 1.4.1
- [Release notes](https://github.com/jarcoal/httpmock/releases)
- [Commits](jarcoal/httpmock@v1.4.0...v1.4.1)

Updates `github.com/samber/slog-http` from 1.8.2 to 1.12.1
- [Release notes](https://github.com/samber/slog-http/releases)
- [Commits](samber/slog-http@v1.8.2...v1.12.1)

---
updated-dependencies:
- dependency-name: github.com/cappuccinotm/slogx
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-sdk-dependency-updates
- dependency-name: github.com/fatih/color
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-sdk-dependency-updates
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-version: 5.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-sdk-dependency-updates
- dependency-name: github.com/hashicorp/go-plugin
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-sdk-dependency-updates
- dependency-name: github.com/jarcoal/httpmock
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-sdk-dependency-updates
- dependency-name: github.com/oapi-codegen/runtime
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-sdk-dependency-updates
- dependency-name: github.com/samber/slog-http
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-sdk-dependency-updates
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-sdk-dependency-updates
- dependency-name: github.com/spf13/viper
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-sdk-dependency-updates
- dependency-name: resty.dev/v3
  dependency-version: 3.0.0-rc.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-sdk-dependency-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the go-sdk-dependency-updates group in /go-sdk with 10 updates Bump the go-sdk-dependency-updates group across 1 directory with 10 updates Jul 31, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-sdk/go-sdk-dependency-updates-416f0d59e3 branch from d031698 to cb4e42f Compare July 31, 2026 20:18
@dependabot @github

dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 1, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-sdk/go-sdk-dependency-updates-416f0d59e3 branch August 1, 2026 03:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ashb ashb Awaiting requested review from ashb ashb is a code owner
@amoghrajesh amoghrajesh Awaiting requested review from amoghrajesh amoghrajesh is a code owner
@jason810496 jason810496 Awaiting requested review from jason810496 jason810496 is a code owner

Assignees

No one assigned

Labels

area:go-sdk dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants