Skip to content

build(deps): bump the go-dependencies group across 2 directories with 2 updates#11927

Merged
brooke-hamilton merged 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-fe45c77b6d
May 18, 2026
Merged

build(deps): bump the go-dependencies group across 2 directories with 2 updates#11927
brooke-hamilton merged 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-fe45c77b6d

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 18, 2026

Bumps the go-dependencies group with 1 update in the / directory: github.com/go-openapi/runtime.
Bumps the go-dependencies group with 1 update in the /test/magpiego directory: github.com/Azure/azure-sdk-for-go/sdk/storage/azblob.

Updates github.com/go-openapi/runtime from 0.30.0 to 0.31.0

Release notes

Sourced from github.com/go-openapi/runtime's releases.

v0.31.0

0.31.0 - 2026-05-17

Full Changelog: go-openapi/runtime@v0.30.0...v0.31.0

33 commits in this release.

Implemented enhancements

  • feat(client): TLS diagnostic mode for Runtime.Trace by @​fredbi ...
  • feat(client): add Runtime.Trace for connection-level diagnostics by @​fredbi ...

Fixed bugs

  • fix(client): strip CR/LF from multipart filename and field name by @​fredbi ...
  • fix(middleware): cap filename length on untyped formData uploads by @​fredbi ...
  • fix: CA cert pool should be cloned not returned as pointer by @​fredbi in #455 ...
  • fix: correct spelling of "Organ trail" to "Oregon Trail" in request tests by @​Copilot in #449 ...
  • fix(client/tls): correct PEM label and add Ed25519 key support by @​fredbi in #452 ...

Documentation

Code quality

Testing

Miscellaneous tasks

... (truncated)

Commits
  • 423c407 chore: prepare release v0.31.0
  • 1fd10af doc: fixup module layout
  • 74bcf73 doc: godoc linting (#465)
  • 506f3bc Merge pull request #464 from fredbi/sec/lens3-multipart
  • 8bf148c chore: cleanup linter config, reformat, optimized strings replacer
  • fa33682 test(security): fuzz targets for BindForm parse + filename cap
  • 5cabd70 fix(client): strip CR/LF from multipart filename and field name
  • 0d36609 fix(middleware): cap filename length on untyped formData uploads
  • fe97e40 doc: trimmed deprecated functions from examples (#463)
  • 982c9d3 chore: remove binary
  • Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.6.4 to 1.7.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/storage/azblob's releases.

sdk/storage/azblob/v1.7.0

1.7.0 (2026-05-14)

Features Added

  • Includes all features from 1.7.0-beta.1

sdk/storage/azblob/v1.7.0-beta.1

1.7.0-beta.1 (2026-04-23)

Features Added

  • Added support for service version 2026-04-06.
  • Added support for Delete Blob Conditional Tier.
  • Added support for Server-side Encryption Rekeying.
  • Added cross-tenant support for Principal-Bound User Delegation SAS.
  • Added support for Dynamic User Delegation SAS.

Bugs Fixed

  • Added support for error code IncrementalCopyOfEarlierSnapshotNotAllowed. This replaces IncrementalCopyOfEralierVersionSnapshotNotAllowed which has been deprecated.
  • Added support for missing SKU name values.

sdk/storage/azfile/v1.7.0-beta.1

1.7.0-beta.1 (2026-05-05)

Features Added

  • Added support for service version 2026-06-06.
  • Added support for uploading up to 4 MiB of data with Create File API.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the go-dependencies group across 2 directories with…
cc259cc 
… 2 updates

Bumps the go-dependencies group with 1 update in the / directory: [github.com/go-openapi/runtime](https://github.com/go-openapi/runtime).
Bumps the go-dependencies group with 1 update in the /test/magpiego directory: [github.com/Azure/azure-sdk-for-go/sdk/storage/azblob](https://github.com/Azure/azure-sdk-for-go).


Updates `github.com/go-openapi/runtime` from 0.30.0 to 0.31.0
- [Release notes](https://github.com/go-openapi/runtime/releases)
- [Commits](go-openapi/runtime@v0.30.0...v0.31.0)

Updates `github.com/Azure/azure-sdk-for-go/sdk/storage/azblob` from 1.6.4 to 1.7.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/storage/azblob/v1.6.4...sdk/azcore/v1.7.0)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/runtime
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/storage/azblob
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 18, 2026
Copilot AI review requested due to automatic review settings May 18, 2026 15:37
@dependabot dependabot Bot requested review from a team as code owners May 18, 2026 15:37
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 18, 2026
Copilot AI reviewed May 18, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 18, 2026

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 2 package(s) with unknown licenses.
See the Details below.

License Issues

test/magpiego/go.mod

PackageVersionLicenseIssue Type
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob1.7.0NullUnknown License
github.com/golang-jwt/jwt/v55.3.1NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
gomod/github.com/go-openapi/runtime 0.31.0 🟢 7.6
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Maintained🟢 1030 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 0Found 0/11 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 9SAST tool is not run on all commits -- score normalized to 9
gomod/golang.org/x/net 0.54.0 UnknownUnknown
gomod/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob 1.7.0 UnknownUnknown
gomod/github.com/golang-jwt/jwt/v5 5.3.1 UnknownUnknown
gomod/golang.org/x/net 0.54.0 UnknownUnknown

Scanned Files

  • go.mod
  • test/magpiego/go.mod

@radius-functional-tests
Copy link
Copy Markdown

radius-functional-tests Bot commented May 18, 2026 •
edited
Loading

Radius functional test overview

🔍 Go to test action run

Click here to see the test run details
Name Value
Repository radius-project/radius
Commit ref cc259cc
Unique ID func597c555600
Image tag pr-func597c555600
  • gotestsum 1.13.0
  • KinD: v0.29.0
  • Dapr: 1.14.4
  • Azure KeyVault CSI driver: 1.4.2
  • Azure Workload identity webhook: 1.3.0
  • Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-func597c555600
  • Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
  • applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-func597c555600
  • dynamic-rp test image location: ghcr.io/radius-project/dev/dynamic-rp:pr-func597c555600
  • controller test image location: ghcr.io/radius-project/dev/controller:pr-func597c555600
  • ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-func597c555600
  • deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting ucp-cloud functional tests...
⌛ Starting corerp-cloud functional tests...
✅ ucp-cloud functional tests succeeded
✅ corerp-cloud functional tests succeeded

@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 18, 2026

Unit Tests

    2 files  ±0    423 suites  ±0   7m 17s ⏱️ -22s
5 128 tests ±0  5 126 ✅ ±0  2 💤 ±0  0 ❌ ±0 
6 157 runs  ±0  6 155 ✅ ±0  2 💤 ±0  0 ❌ ±0 

Results for commit cc259cc. ± Comparison against base commit 9a15c2d.

@brooke-hamilton brooke-hamilton merged commit fae3361 into main May 18, 2026
74 of 75 checks passed
@brooke-hamilton brooke-hamilton deleted the dependabot/go_modules/go-dependencies-fe45c77b6d branch May 18, 2026 16:24
@rad-ci-bot rad-ci-bot mentioned this pull request May 18, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

@brooke-hamilton brooke-hamilton brooke-hamilton approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@brooke-hamilton