build(deps): bump the go-deps group across 1 directory with 10 updates by dependabot[bot] · Pull Request #20 · MattJackson/basement

dependabot · 2026-07-18T15:18:30Z

Bumps the go-deps group with 8 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go-v2	`1.41.7`	`1.42.1`
github.com/aws/aws-sdk-go-v2/config	`1.32.17`	`1.32.30`
github.com/aws/aws-sdk-go-v2/service/s3	`1.101.0`	`1.105.2`
github.com/coreos/go-oidc/v3	`3.18.0`	`3.20.0`
github.com/go-chi/chi/v5	`5.2.5`	`5.3.1`
github.com/testcontainers/testcontainers-go	`0.42.0`	`0.43.0`
github.com/yuin/goldmark	`1.8.2`	`1.8.4`
golang.org/x/crypto	`0.51.0`	`0.54.0`

Updates github.com/aws/aws-sdk-go-v2 from 1.41.7 to 1.42.1

Commits

b4784c1 Release 2026-07-01
97c0201 Regenerated Clients
6687238 Update endpoints model
995297f Update API model
c26cfc6 Fix bump smithy-go to cover multiple issues (#3461)
fae66b8 Set transfer manager error as the first error seen, preventing race condition...
cf0eabd Release 2026-06-30
ad0c091 Regenerated Clients
196e961 Update endpoints model
1529ead Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.17 to 1.32.30

Commits

2704503 Release 2026-07-13
2475fc6 Regenerated Clients
89ce46e Update endpoints model
97a7b55 Update API model
472756a add response snapshot tests for new wave 1 (partial cbor) (#3471)
3133b1d Release 2026-07-10
2d7d0f8 Regenerated Clients
cdc7fe3 Update endpoints model
d41266e Update API model
d7ac1fc Release 2026-07-09
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.16 to 1.19.29

Commits

2704503 Release 2026-07-13
2475fc6 Regenerated Clients
89ce46e Update endpoints model
97a7b55 Update API model
472756a add response snapshot tests for new wave 1 (partial cbor) (#3471)
3133b1d Release 2026-07-10
2d7d0f8 Regenerated Clients
cdc7fe3 Update endpoints model
d41266e Update API model
d7ac1fc Release 2026-07-09
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.101.0 to 1.105.2

Commits

0ffbcb9 Release 2026-07-16
2a0ecfb Regenerated Clients
20ba39f Update endpoints model
8925213 Update API model
47e09a2 add replace annotations for new generic client auth/endpoints (#3477)
1dc42b2 Release 2026-07-15
b945893 Regenerated Clients
ccbf00c Update API model
b8df6dc enable schema-serde cbor wave 1 (#3478)
00daf36 Release 2026-07-14
Additional commits viewable in compare view

Updates github.com/coreos/go-oidc/v3 from 3.18.0 to 3.20.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.20.0

What's Changed

oidc: modernize with new Go APIs by @ericchiang in coreos/go-oidc#487

oidc: improve documentation for APIs by @ericchiang in coreos/go-oidc#488

SECURITY.md: add a security policy and point to project-level reporting by @ericchiang in coreos/go-oidc#489

oidc: ignore JWKs with unknown signing algorithms rather than failing by @ericchiang in coreos/go-oidc#491

readme: update README and docs by @ericchiang in coreos/go-oidc#492

oidc: add API for determining when issuer URLs mismatch by @ericchiang in coreos/go-oidc#493

oidc: add constants for "email" and "profile" scopes by @ericchiang in coreos/go-oidc#494

Full Changelog: coreos/go-oidc@v3.19.0...v3.20.0

v3.19.0

What's Changed

fix: Key refresh should set no-cache to get most up to date keys by @Yanni8 in coreos/go-oidc#485

oidc: add support for validating back-channel logout tokens by @ericchiang in coreos/go-oidc#486

New Contributors

@Yanni8 made their first contribution in coreos/go-oidc#485

Full Changelog: coreos/go-oidc@v3.18.0...v3.19.0

Commits

75dfa5c oidc: add constants for "email" and "profile" scopes
a89f046 oidc: add API for determining when issuer URLs mismatch
6a69b6d readme: update README and docs
f9049c9 oidc: ignore JWKs with unknown signing algorithms rather than failing
2f178e0 SECURITY.md: add a security policy and point to project-level reporting
b3bc7da oidc: improve documentation for APIs
0db9053 oidc: modernize with new Go APIs
4204f0b oidc: add support for validating back-channel logout tokens
f77e01c fix: Key refresh should set no-cache to get most up to date keys
See full diff in compare view

Updates github.com/go-chi/chi/v5 from 5.2.5 to 5.3.1

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.3.1

What's Changed

Honor Discard() in httpFancyWriter.ReadFrom by @DucMinhNe in go-chi/chi#1110

Tidy build directives by @JRaspass in go-chi/chi#1113

feat(middleware): add text/xml and application/xml to default compressible types by @VojtechVitek in go-chi/chi#1127

Fix defaultLogEntry.Panic not respecting NoColor setting by @doganarif in go-chi/chi#1050

middleware: document printPrettyStack and harden NoColor panic test by @VojtechVitek in go-chi/chi#1131

feat(mux): support http QUERY method ietf rfc10008 by @VojtechVitek in go-chi/chi#1132

ci: pin GitHub Actions to full commit SHAs by @XananasX7 in go-chi/chi#1116

New Contributors

@DucMinhNe made their first contribution in go-chi/chi#1110

@doganarif made their first contribution in go-chi/chi#1050

@XananasX7 made their first contribution in go-chi/chi#1116

Full Changelog: go-chi/chi@v5.3.0...v5.3.1

v5.3.0

What's Changed

Use strings.ReplaceAll where applicable by @JRaspass in go-chi/chi#1046

Propagate inline middlewares across mounted subrouters by @LukasJenicek in go-chi/chi#1049

add go 1.26 to ci by @pkieltyka in go-chi/chi#1052

Remove last uses of io/ioutil by @JRaspass in go-chi/chi#1054

Simplify chi.walk with slices.Concat by @JRaspass in go-chi/chi#1053

Apply the stringscutprefix modernizer by @JRaspass in go-chi/chi#1051

Bump minimum Go to 1.23, always use request.Pattern by @JRaspass in go-chi/chi#1048

middleware: fix httpFancyWriter.ReadFrom double-counting bytes with Tee by @alliasgher in go-chi/chi#1085

Fix typo in Route doc comment by @gouwazi in go-chi/chi#1073

fix: set Request.Pattern from RoutePattern() by @leno23 in go-chi/chi#1097

feat: middleware.ClientIP, a replacement for middleware.RealIP by @VojtechVitek in go-chi/chi#967

New Contributors

@LukasJenicek made their first contribution in go-chi/chi#1049

@alliasgher made their first contribution in go-chi/chi#1085

@gouwazi made their first contribution in go-chi/chi#1073

@leno23 made their first contribution in go-chi/chi#1097

SECURITY: middleware.ClientIP, a replacement for middleware.RealIP

@VojtechVitek submitted PR #967, which introduces middleware.ClientIP — a replacement for middleware.RealIP that closes the three open spoofing advisories:

GHSA-9g5q-2w5x-hmxf — IP spoofing via XFF in RemoteAddr resolution (convto)

GHSA-rjr7-jggh-pgcp — RealIP allows IP spoofing via unvalidated XFF (rezmoss)

GHSA-3fxj-6jh8-hvhx — IP spoofing in middleware.RealIP (Saku0512, Critical / 9.3)

It also addresses issues outlined at:

go-chi/chi#708

https://adam-p.ca/blog/2022/03/x-forwarded-for/

go-chi/chi#711

go-chi/chi#453

go-chi/chi#908

... (truncated)

Commits

8b258c7 ci: pin GitHub Actions to full commit SHAs (#1116)
caf87e6 feat(mux): support http QUERY method ietf rfc10008 (#1132)
7fcb8a2 middleware: document printPrettyStack and harden NoColor panic test (#1131)
878fe71 Fix defaultLogEntry.Panic not respecting NoColor setting (#1050)
d7b767b feat(middleware): add text/xml and application/xml to default compressible ty...
3b50c7c Tidy build directives (#1113)
2b9fca2 Honor Discard() in httpFancyWriter.ReadFrom (#1110)
3b17157 feat: middleware.ClientIP, a replacement for middleware.RealIP (#967)
818fdcf fix: set Request.Pattern from RoutePattern() (#1097)
f975af0 Fix typo in Route doc comment (#1073)
Additional commits viewable in compare view

Updates github.com/testcontainers/testcontainers-go from 0.42.0 to 0.43.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.43.0

What's Changed

⚠️ Breaking Changes

chore(wait)!: change url callback in wait.ForSQL to accept network.Port (#3650) @thaJeztah

Users of wait.ForSQL need to follow the new API contract, using Moby's network.Port instead of string when building the callback function to check the URL. Please see https://golang.testcontainers.org/features/wait/sql/

feat!: add PullImageWithPlatform to DockerProvider (#3710) @blueprismo

Users implementing their own testcontainers.ImageProvider need to implement the new PullImageWithPlatform method introduced by this PR.

🚀 Features

feat(k3s): pull image opts (#3716) @blueprismo

feat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (#3719) @jeanbza

feat(eventhubs): add WithAzuriteContainer and functional-options config builder (#3722) @mdelapenya

feat!: add PullImageWithPlatform to DockerProvider (#3710) @blueprismo

feat(modules/dex): add Dex OIDC provider module (#3659) @guilycst

🐛 Bug Fixes

fix(security): remove debug code that leaks Docker credentials (#3721) @mdelapenya

fix(ollama): align local exec test with Ollama 0.30.6 log format (#3715) @mdelapenya

fix: close temp file handle before removal (#3672) @acouvreur

fix(compose): close docker clients to prevent goroutine leaks (#3661) @mdelapenya

fix: wait for log production goroutine to drain on stop (#3660) @mdelapenya

📖 Documentation

chore: update usage metrics (2026-06) (#3714) @github-actions[bot]

🧹 Housekeeping

chore(wait)!: change url callback in wait.ForSQL to accept network.Port (#3650) @thaJeztah

chore: update usage metrics (2026-05) (#3670) @github-actions[bot]

chore: remove cgroupnsMode setting from K3s container configuration (#3653) @lixin9311

📦 Dependency updates

chore(deps): update dependencies to latest versions in go.mod and go.sum (#3729) @Steven-Harris

chore: bump sshd-docker image to 1.4.0 (#3727) @mdelapenya

chore(deps): bump Ryuk to v0.14.0 (#3313) @mdelapenya

chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (#3713) @dependabot[bot]

chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (#3712) @dependabot[bot]

chore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (#3711) @dependabot[bot]

chore(deps): bump slackapi/slack-github-action from 2.1.1 to 3.0.3 (#3677) @dependabot[bot]

chore(deps): bump idna from 3.11 to 3.15 (#3708) @dependabot[bot]

chore(deps): bump github.com/containerd/containerd/v2 from 2.2.2 to 2.2.4 in /modules/compose (#3709) @dependabot[bot]

chore(deps): bump urllib3 from 2.6.3 to 2.7.0 (#3704) @dependabot[bot]

... (truncated)

Commits

0835739 chore: use new version (v0.43.0) in modules and examples
85b6d70 chore(deps): update dependencies to latest versions in go.mod and go.sum (#3729)
8360f71 feat(k3s): pull image opts (#3716)
b5e7022 chore: bump sshd-docker image to 1.4.0 (#3727)
1c05dd5 chore(deps): bump Ryuk to v0.14.0 (#3313)
96ab095 feat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (#3719)
42ac7d2 chore(wait)!: change url callback in wait.ForSQL to accept network.Port (#3650)
ab312e0 chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5 (#3713)
c5c95e5 chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (#3712)
465d002 chore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0 (#3711)
Additional commits viewable in compare view

Updates github.com/yuin/goldmark from 1.8.2 to 1.8.4

Release notes

Sourced from github.com/yuin/goldmark's releases.

v1.8.4

fix: disable svg in data:image urls

v1.8.3

Full Changelog: yuin/goldmark@v1.8.2...v1.8.3

fix: #556

Commits

50ba9fc fix: disable svg in data:image urls
2326684 fix: #556
See full diff in compare view

Updates golang.org/x/crypto from 0.51.0 to 0.54.0

Commits

cdce021 go.mod: update golang.org/x dependencies
d9474cc openpgp: make the deprecation message more explicit
7626c50 ssh: verify declared key type matches decoded key in authorized_keys
0471e79 ssh/agent: enforce strict limits on DSA key parameters
6435c37 ssh: sanitize client disconnect messages
7d695da ssh/agent: drain channel stderr in agent forwarders
5b7f841 acme/autocert: fix data race in Manager.createCert
0b316e7 argon2: update RFC 9106 parameter recommendations
55aec0a x509roots/fallback: update bundle
5f2de1a internal: remove wycheproof tests
Additional commits viewable in compare view

Updates golang.org/x/net from 0.55.0 to 0.56.0

Commits

9e7fdbf internal/http3: fix wrong argument being given when validating header value
b686e5f internal/http3: add gzip support to transport
8a34885 go.mod: update golang.org/x dependencies
72eaf98 dns/dnsmessage: correctly validate SVCB record parameter order
82e7868 dns/dnsmessage: avoid panic when parsing SVCB record with truncated data
b64f1fa internal/http3: add server support for "Trailer:" magic prefix
2707ee2 internal/http3: implement HTTP/3 clientConn methods
31358cc internal/http3: snapshot response headers at WriteHeader time
8ecbaa9 html: don't adjust xml:base
8ae811a html: properly handle end script tag in fragment mode
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-deps group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.7` | `1.42.1` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.17` | `1.32.30` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.101.0` | `1.105.2` | | [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.18.0` | `3.20.0` | | [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.2.5` | `5.3.1` | | [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.43.0` | | [github.com/yuin/goldmark](https://github.com/yuin/goldmark) | `1.8.2` | `1.8.4` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.51.0` | `0.54.0` | Updates `github.com/aws/aws-sdk-go-v2` from 1.41.7 to 1.42.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.41.7...v1.42.1) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.17 to 1.32.30 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.17...config/v1.32.30) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.16 to 1.19.29 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@credentials/v1.19.16...credentials/v1.19.29) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.101.0 to 1.105.2 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.101.0...service/s3/v1.105.2) Updates `github.com/coreos/go-oidc/v3` from 3.18.0 to 3.20.0 - [Release notes](https://github.com/coreos/go-oidc/releases) - [Commits](coreos/go-oidc@v3.18.0...v3.20.0) Updates `github.com/go-chi/chi/v5` from 5.2.5 to 5.3.1 - [Release notes](https://github.com/go-chi/chi/releases) - [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md) - [Commits](go-chi/chi@v5.2.5...v5.3.1) Updates `github.com/testcontainers/testcontainers-go` from 0.42.0 to 0.43.0 - [Release notes](https://github.com/testcontainers/testcontainers-go/releases) - [Commits](testcontainers/testcontainers-go@v0.42.0...v0.43.0) Updates `github.com/yuin/goldmark` from 1.8.2 to 1.8.4 - [Release notes](https://github.com/yuin/goldmark/releases) - [Commits](yuin/goldmark@v1.8.2...v1.8.4) Updates `golang.org/x/crypto` from 0.51.0 to 0.54.0 - [Commits](golang/crypto@v0.51.0...v0.54.0) Updates `golang.org/x/net` from 0.55.0 to 0.56.0 - [Commits](golang/net@v0.55.0...v0.56.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.42.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.19.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.105.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/coreos/go-oidc/v3 dependency-version: 3.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/go-chi/chi/v5 dependency-version: 5.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/testcontainers/testcontainers-go dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/yuin/goldmark dependency-version: 1.8.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: golang.org/x/crypto dependency-version: 0.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/net dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 18, 2026

dependabot Bot requested a review from MattJackson as a code owner July 18, 2026 15:18

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 18, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the go-deps group across 1 directory with 10 updates#20

build(deps): bump the go-deps group across 1 directory with 10 updates#20
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-0d57b33bfb

dependabot Bot commented on behalf of github Jul 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 18, 2026

v3.20.0

What's Changed

v3.19.0

What's Changed

New Contributors

v5.3.1

What's Changed

New Contributors

v5.3.0

What's Changed

New Contributors

SECURITY: middleware.ClientIP, a replacement for middleware.RealIP

v0.43.0

What's Changed

⚠️ Breaking Changes

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency updates

v1.8.4

v1.8.3

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants