Skip to content

build(deps): bump the go group across 1 directory with 8 updates#27

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-e529c25604
Open

build(deps): bump the go group across 1 directory with 8 updates#27
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-e529c25604

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the go group with 8 updates in the / directory:

Package From To
github.com/bazelbuild/rules_go 0.60.0 0.61.1
github.com/go-chi/chi/v5 5.1.0 5.3.1
github.com/mattn/go-isatty 0.0.21 0.0.23
github.com/oapi-codegen/runtime 1.4.1 1.6.0
github.com/spf13/cobra 1.8.1 1.10.2
github.com/testcontainers/testcontainers-go 0.42.0 0.43.0
github.com/testcontainers/testcontainers-go/modules/postgres 0.42.0 0.43.0
golang.org/x/crypto 0.52.0 0.54.0

Updates github.com/bazelbuild/rules_go from 0.60.0 to 0.61.1

Release notes

Sourced from github.com/bazelbuild/rules_go's releases.

v0.61.1

MODULE.bazel code

bazel_dep(name = "rules_go", version = "0.61.1")

go_sdk = use_extension("@​rules_go//go:extensions.bzl", "go_sdk")

go_sdk.from_file(go_mod = "//:go.mod")

WORKSPACE code

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(

name = "io_bazel_rules_go",

sha256 = "763f4a3f6b03469fdb00a77a333dd0b5546d3ee1fa29db373128c08fee73e0e8",

urls = [

"https://mirror.bazel.build/github.com/bazel-contrib/rules_go/releases/download/v0.61.1/rules_go-v0.61.1.zip",

"https://github.com/bazel-contrib/rules_go/releases/download/v0.61.1/rules_go-v0.61.1.zip",

],

)


load("@​io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")


go_rules_dependencies()


go_register_toolchains(version = "1.26.4")


Create the host platform repository transitively required by rules_go.


load("@​bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")

load("@platforms//host:extension.bzl", "host_platform_repo")


maybe(

host_platform_repo,

name = "host_platform",

)

What's Changed

Full Changelog: bazel-contrib/rules_go@v0.61.0...v0.61.1

v0.61.0

MODULE.bazel code

... (truncated)

Commits
  • 4b05ddf Update Gazelle to 0.51.3
  • eb0c55b fix: include CGO_TOOLCHAINS to _go_proto_aspect (#4625)
  • 9dd9820 fix: set nogo flags as universal (#4623)
  • a6f7272 Add loongarch64 support (#4610)
  • eae864b Add more flags to cgoAbsEnvFlags (#4619)
  • afd648f Revert "fix: restore internal_archive.direct after cycle-break recompile" (#4...
  • 3a5559c chore: remove reference to deprecated host mode (#4614)
  • 8952d11 fix: produce facts of required analyzers in nogo facts-only mode (#4615)
  • 5ddb517 Set direct nogo attribute to prevent building nogo for the wrong platform whe...
  • 5d946af fix(nogo): generate accurate patches (#4602)
  • Additional commits viewable in compare view

Updates github.com/go-chi/chi/v5 from 5.1.0 to 5.3.1

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.3.1

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.3.0...v5.3.1

v5.3.0

What's Changed

New Contributors

SECURITY: middleware.ClientIP, a replacement for middleware.RealIP

@​VojtechVitek submitted PR #967, which introduces middleware.ClientIP — a replacement for middleware.RealIP that closes the three open spoofing advisories:

It also addresses issues outlined at:

... (truncated)

Commits
  • 8b258c7 ci: pin GitHub Actions to full commit SHAs (#1116)
  • caf87e6 feat(mux): support http QUERY method ietf rfc10008 (#1132)
  • 7fcb8a2 middleware: document printPrettyStack and harden NoColor panic test (#1131)
  • 878fe71 Fix defaultLogEntry.Panic not respecting NoColor setting (#1050)
  • d7b767b feat(middleware): add text/xml and application/xml to default compressible ty...
  • 3b50c7c Tidy build directives (#1113)
  • 2b9fca2 Honor Discard() in httpFancyWriter.ReadFrom (#1110)
  • 3b17157 feat: middleware.ClientIP, a replacement for middleware.RealIP (#967)
  • 818fdcf fix: set Request.Pattern from RoutePattern() (#1097)
  • f975af0 Fix typo in Route doc comment (#1073)
  • Additional commits viewable in compare view

Updates github.com/mattn/go-isatty from 0.0.21 to 0.0.23

Commits

Updates github.com/oapi-codegen/runtime from 1.4.1 to 1.6.0

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

Allow customization of parameter encoding

This is a small release which adds a global encoding setting on the runtime, to allow users to customize how to handle spaces in query arguments. This is a new minor release, since we're adding new API, even though this is a very minor feature. I imagine that in the future, we will add more settings, rather than making behavior assumptions.

🚀 New features and improvements

📦 Dependency updates

  • chore(deps): update module github.com/golangci/golangci-lint to v2.12.2 (#112) @renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.

Sponsors

We would like to thank our sponsors for their support during this release.

v1.5.0: RFC3339 durations, and bug fixes

This is mainly a bugfix release, but we're bumping the minor version since we also introduce a new type, Duration into our types/ package, which allows for parsing and emitting RFC3339 durations. Rather than trying to parse a duration string into a time.Duration, which requires assumptions that may not be right for everyone, we decided not to make those decisions and just store all possible fields as provided. Users can convert this to Go Duration as they see fit.

🚀 New features and improvements

🐛 Bug fixes

📝 Documentation updates

... (truncated)

Commits
  • 01be2fa chore(deps): update module github.com/golangci/golangci-lint to v2.12.2 (#112)
  • 1463938 Allow customizing default query encoder (#145)
  • 540d34a fix(deps): update module github.com/labstack/echo/v5 to v5.3.0 (#142)
  • e89dbb8 Add types.Duration for the RFC 3339 duration format (#144)
  • 324e57f Let generated code declare whether styled parameter values are escaped (#143)
  • 95c13c0 Explain how to send nested objects when style serialization fails (#141)
  • 7c889f3 Prefer the form struct tag over json for form encoding (#140)
  • d0d5c3a chore(deps): update golang/govulncheck-action action to v1.1.0 (#137)
  • 67e86fd chore(deps): update oapi-codegen/actions action to v0.8.0 (#130)
  • df140cb fix(deps): update module github.com/labstack/echo/v5 to v5.2.1 (#126)
  • Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.8.1 to 1.10.2

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.2

🔧 Dependencies

  • chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @​dims in spf13/cobra#2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

v1.10.1

🐛 Fix

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

What's Changed

🚨 Attention!

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

  • If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`
  • or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

... (truncated)

Commits

Updates github.com/testcontainers/testcontainers-go from 0.42.0 to 0.43.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.43.0

What's Changed

⚠️ Breaking Changes

  • chore(wait)!: change url callback in wait.ForSQL to accept network.Port (#3650) @​thaJeztah

Users of wait.ForSQL need to follow the new API contract, using Moby's network.Port instead of string when building the callback function to check the URL. Please see https://golang.testcontainers.org/features/wait/sql/

Users implementing their own testcontainers.ImageProvider need to implement the new PullImageWithPlatform method introduced by this PR.

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency updates

... (truncated)

Commits
  • 0835739 chore: use new version (v0.43.0) in modules and examples
  • 85b6d70 chore(deps): update dependencies to latest versions in go.mod and go.sum (#3729)
  • 8360f71 feat(k3s): pull image opts (#3716)
  • b5e7022 chore: bump sshd-docker image to 1.4.0 (#3727)
  • 1c05dd5 chore(deps): bump Ryuk to v0.14.0 (#3313)
  • 96ab095 feat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (#3719)
  • 42ac7d2 chore(wait)!: change url callback in wait.ForSQL to accept network.Port (#3650)
  • ab312e0 chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (#3713)
  • c5c95e5 chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (#3712)
  • 465d002 chore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (#3711)
  • Additional commits viewable in compare view

Updates github.com/testcontainers/testcontainers-go/modules/postgres from 0.42.0 to 0.43.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go/modules/postgres's releases.

v0.43.0

What's Changed

⚠️ Breaking Changes

  • chore(wait)!: change url callback in wait.ForSQL to accept network.Port (#3650) @​thaJeztah

Users of wait.ForSQL need to follow the new API contract, using Moby's network.Port instead of string when building the callback function to check the URL. Please see https://golang.testcontainers.org/features/wait/sql/

Users implementing their own testcontainers.ImageProvider need to implement the new PullImageWithPlatform method introduced by this PR.

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency updates

... (truncated)

Commits
  • 0835739 chore: use new version (v0.43.0) in modules and examples
  • 85b6d70 chore(deps): update dependencies to latest versions in go.mod and go.sum (#3729)
  • 8360f71 feat(k3s): pull image opts (#3716)
  • b5e7022 chore: bump sshd-docker image to 1.4.0 (#3727)
  • 1c05dd5 chore(deps): bump Ryuk to v0.14.0 (#3313)
  • 96ab095 feat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (#3719)
  • 42ac7d2 chore(wait)!: change url callback in wait.ForSQL to accept network.Port (#3650)
  • ab312e0 chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (#3713)
  • c5c95e5 chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (#3712)
  • 465d002 chore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (#3711)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.52.0 to 0.54.0

Commits
  • cdce021 go.mod: update golang.org/x dependencies
  • d9474cc openpgp: make the deprecation message more explicit
  • 7626c50 ssh: verify declared key type matches decoded key in authorized_keys
  • 0471e79 ssh/agent: enforce strict limits on DSA key parameters
  • 6435c37 ssh: sanitize client disconnect messages
  • 7d695da ssh/agent: drain channel stderr in agent forwarders
  • 5b7f841 acme/autocert: fix data race in Manager.createCert
  • 0b316e7 argon2: update RFC 9106 parameter recommendations
  • 55aec0a x509roots/fallback: update bundle
  • 5f2de1a internal: remove wycheproof tests
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 13, 2026
@github-actions

github-actions Bot commented Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown

Gavel verdict

Project Verdict New Fixed Coverage
cli ✅ pass 0 0 94.2%
core ✅ pass 0 0 94.2%
server ✅ pass 0 0 94.2%
tools ✅ pass 0 0 94.3%
web ✅ pass 0 0 94.2%

@dependabot
build(deps): bump the go group across 1 directory with 8 updates
1fd1fc3 
Bumps the go group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/bazelbuild/rules_go](https://github.com/bazelbuild/rules_go) | `0.60.0` | `0.61.1` |
| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.1.0` | `5.3.1` |
| [github.com/mattn/go-isatty](https://github.com/mattn/go-isatty) | `0.0.21` | `0.0.23` |
| [github.com/oapi-codegen/runtime](https://github.com/oapi-codegen/runtime) | `1.4.1` | `1.6.0` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.8.1` | `1.10.2` |
| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.43.0` |
| [github.com/testcontainers/testcontainers-go/modules/postgres](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.43.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.52.0` | `0.54.0` |



Updates `github.com/bazelbuild/rules_go` from 0.60.0 to 0.61.1
- [Release notes](https://github.com/bazelbuild/rules_go/releases)
- [Commits](bazel-contrib/rules_go@v0.60.0...v0.61.1)

Updates `github.com/go-chi/chi/v5` from 5.1.0 to 5.3.1
- [Release notes](https://github.com/go-chi/chi/releases)
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md)
- [Commits](go-chi/chi@v5.1.0...v5.3.1)

Updates `github.com/mattn/go-isatty` from 0.0.21 to 0.0.23
- [Commits](mattn/go-isatty@v0.0.21...v0.0.23)

Updates `github.com/oapi-codegen/runtime` from 1.4.1 to 1.6.0
- [Release notes](https://github.com/oapi-codegen/runtime/releases)
- [Commits](oapi-codegen/runtime@v1.4.1...v1.6.0)

Updates `github.com/spf13/cobra` from 1.8.1 to 1.10.2
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.8.1...v1.10.2)

Updates `github.com/testcontainers/testcontainers-go` from 0.42.0 to 0.43.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.42.0...v0.43.0)

Updates `github.com/testcontainers/testcontainers-go/modules/postgres` from 0.42.0 to 0.43.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.42.0...v0.43.0)

Updates `golang.org/x/crypto` from 0.52.0 to 0.54.0
- [Commits](golang/crypto@v0.52.0...v0.54.0)

---
updated-dependencies:
- dependency-name: github.com/bazelbuild/rules_go
  dependency-version: 0.61.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/go-chi/chi/v5
  dependency-version: 5.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/mattn/go-isatty
  dependency-version: 0.0.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/oapi-codegen/runtime
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/testcontainers/testcontainers-go/modules/postgres
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/crypto
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump the go group with 8 updates build(deps): bump the go group across 1 directory with 8 updates Jul 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-e529c25604 branch from e6ff644 to 1fd1fc3 Compare July 20, 2026 20:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants