Skip to content

Bump the all group with 12 updates - #683

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/all-bce0106ddb
Open

Bump the all group with 12 updates#683
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/all-bce0106ddb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 18, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 12 updates:

Package From To
github.com/go-openapi/jsonreference 1.0.2 1.0.3
github.com/go-openapi/strfmt 0.27.2 0.27.3
github.com/grpc-ecosystem/grpc-gateway/v2 2.31.0 2.32.0
github.com/sigstore/sigstore 1.11.0 1.11.1
golang.org/x/crypto 0.57.0 0.58.0
golang.org/x/mod 0.41.0 0.42.0
golang.org/x/net 0.59.0 0.61.0
golang.org/x/term 0.46.0 0.47.0
golang.org/x/text 0.42.0 0.43.0
golang.org/x/tools 0.50.0 0.52.0
google.golang.org/genproto/googleapis/api 0.0.0-20260928230214-8a89bd6388cc 0.0.0-20261012220534-4341edf3f941
google.golang.org/genproto/googleapis/rpc 0.0.0-20260928230214-8a89bd6388cc 0.0.0-20261005182115-fad411399dd8

Updates github.com/go-openapi/jsonreference from 1.0.2 to 1.0.3

Release notes

Sourced from github.com/go-openapi/jsonreference's releases.

v1.0.3

1.0.3 - 2026-09-25

Full Changelog: go-openapi/jsonreference@v1.0.2...v1.0.3

4 commits in this release.

Fixed bugs

  • fix: remove repeated default ports from a URL host in linear time by @​fredbi in #123 ...

Security

  • chore(security): upgraded go-openapi/jsonpointer by @​fredbi ...

Updates

People who contributed to this release

jsonreference license terms

License

Commits
  • 90b39fb chore(security): upgraded go-openapi/jsonpointer
  • 01d7aa2 fix: remove repeated default ports from a URL host in linear time (#123)
  • 2b801d1 build(deps): bump github.com/go-openapi/testify/v2
  • d2410e2 build(deps): bump the development-dependencies group with 9 updates
  • See full diff in compare view

Updates github.com/go-openapi/strfmt from 0.27.2 to 0.27.3

Release notes

Sourced from github.com/go-openapi/strfmt's releases.

v0.27.3

0.27.3 - 2026-10-04

Full Changelog: go-openapi/strfmt@v0.27.2...v0.27.3

8 commits in this release.

Fixed bugs

Documentation

Miscellaneous tasks

Updates

People who contributed to this release

New Contributors

strfmt license terms

[![License][license-badge]][license-url]

... (truncated)

Commits
  • aa03419 chore: prepare release v0.27.3
  • 9cf99be fix: reject a duration sum that wraps past 2^64 (#312)
  • 7d71caa doc: updated contributors file
  • a01773a build(deps): bump github.com/go-openapi/errors
  • 2c2378a build(deps): bump the other-dependencies group across 3 directories with 3 up...
  • c809bb5 build(deps): bump the golang-org-dependencies group across 1 directory with 2...
  • a9ffc64 build(deps): bump the development-dependencies group with 10 updates
  • b55ec8e build(deps): bump the go-openapi-dependencies group across 2 directories with...
  • See full diff in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.31.0 to 2.32.0

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.32.0

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.31.0...v2.32.0

Commits
  • 9b13706 Gate strict ** matching from #7412 behind strict_deep_wildcard generator ...
  • e2bc4bb chore(deps): update googleapis digest to a6f4580 (#7526)
  • 796f2c3 chore(deps): update googleapis digest to d7dd444 (#7525)
  • 4f04466 chore(deps): update golang.org/x/exp digest to f0251eb (#7524)
  • a62432a chore(deps): update golang.org/x/exp digest to 2ab7f3c (#7519)
  • 596056e chore(deps): update googleapis digest to b6efa15 (#7520)
  • 52de616 chore(deps): update googleapis digest to 0b2e1ee (#7518)
  • 14c1da7 fix(deps): update google.golang.org/genproto/googleapis/api digest to 4341edf...
  • 9b863f4 chore(deps): update googleapis digest to f5f34cc (#7514)
  • 04c1457 chore(deps): update goreleaser/goreleaser-action digest to a4f02ab (#7515)
  • Additional commits viewable in compare view

Updates github.com/sigstore/sigstore from 1.11.0 to 1.11.1

Release notes

Sourced from github.com/sigstore/sigstore's releases.

v1.11.1

What's Changed

v1.11.1 drops the Go version directive to a minor release, 1.27, rather than the patch release, 1.27.0. Dependents will need to remove the patch version .0 from go.mod files, as go mod tidy will not automatically do so.

Full Changelog: sigstore/sigstore@v1.11.0...v1.11.1

Commits
  • 4068921 build(deps): Bump github.com/aws/aws-sdk-go-v2/config (#2420)
  • db8df91 build(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms (#2425)
  • 9ee089f build(deps): Bump golang.org/x/oauth2 from 0.36.0 to 0.37.0 (#2423)
  • 75c0ca3 build(deps): Bump github.com/coreos/go-oidc/v3 from 3.20.0 to 3.21.0 (#2424)
  • 7885bcb build(deps): Bump github.com/aws/aws-sdk-go-v2 in /pkg/signature/kms/aws (#2426)
  • c350b4a build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (#2427)
  • c139819 build(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#2429)
  • 8c97c6a Check private key size in LoadED25519phSigner (#2438)
  • eee22a8 Set go directive to minor version only (go 1.27) (#2436)
  • 957a8a1 build(deps): Bump the all group in /test/e2e with 2 updates (#2434)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.57.0 to 0.58.0

Commits
  • 8fdf07b go.mod: update golang.org/x dependencies
  • 2437861 salsa20: fix keystream reuse in LoongArch LSX tail
  • c3db4df acme: prefer test log helpers in test contexts
  • 4e01a84 acme: adds support for profiles draft
  • 8f0f111 ssh: check that no Unicode-aware string function is used
  • b39ff6d ssh: add certificate algorithms for ML-DSA keys
  • 4465db3 ssh: add the ML-DSA public key algorithms
  • 83e695b ssh: implement ETM mode for CBC ciphers
  • 946083a ssh: only drop a trailing carriage return
  • 543dde9 ssh: accept known_hosts entries with a multi-word comment
  • Additional commits viewable in compare view

Updates golang.org/x/mod from 0.41.0 to 0.42.0

Commits
  • b5136e5 sumdb/tlog: use recorded responses in TestCertificateTransparency
  • 1e9a5ae go.mod: update golang.org/x dependencies
  • See full diff in compare view

Updates golang.org/x/net from 0.59.0 to 0.61.0

Commits
  • c1d31df go.mod: update golang.org/x dependencies
  • 8456a20 quic: properly check for allowed frame types in a packet
  • 18ece0c http2: prevent crash due to HPACK encoder race
  • 2d03f9d http2: avoid 2x refund on stream close with buffered data
  • cc7d34f http2: avoid excessive work on initial window changes
  • 57f4235 http2: apply header limits to Trailer headers too
  • 01e3d03 http2: coalesce dials via wrapped Transport.RoundTrip
  • 2824783 http2: delete malformed framing-related headers
  • b13c0c1 internal/http3: delete HTTP/3 package
  • 520c891 quic: off-path support in loss/congestion/rtt
  • Additional commits viewable in compare view

Updates golang.org/x/term from 0.46.0 to 0.47.0

Commits

Updates golang.org/x/text from 0.42.0 to 0.43.0

Commits
  • ac40b0f go.mod: update golang.org/x dependencies
  • 6dcc5b6 unicode/bidi: avoid quadratic behavior in Paragraph.Order and Paragraph.Line
  • d0ecd29 secure/bidirule: lazily precompute ASCII table
  • See full diff in compare view

Updates golang.org/x/tools from 0.50.0 to 0.52.0

Commits
  • 16517d9 go.mod: update golang.org/x dependencies
  • a39b773 gopls/internal/cache: fix shadowing bug
  • 2faede3 gopls/internal/test/marker: reorganize undeclared test files
  • dbca0bb go/ssa: support pointer-typed composite literals in all contexts
  • ec72d2b gopls/internal/cache: pass overlays to go mod commands
  • 2c54968 gopls/internal/golang: MoveDeclaration - fix imports for decls in multiple files
  • 1e27b6e internal/cursorutil: promote from gopls, plus other cleanups
  • 2babe1e gopls/internal/lsprpc: adjust dial retry logic
  • a3af45f internal/refactor/inline: reduce void calls in tail position
  • ac4a446 gopls/internal/filewatcher: disable TestStress/fsnotify on 386
  • Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20260928230214-8a89bd6388cc to 0.0.0-20261012220534-4341edf3f941

Commits

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20260928230214-8a89bd6388cc to 0.0.0-20261005182115-fad411399dd8

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the all group with 12 updates
f737a55 
Bumps the all group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-openapi/jsonreference](https://github.com/go-openapi/jsonreference) | `1.0.2` | `1.0.3` |
| [github.com/go-openapi/strfmt](https://github.com/go-openapi/strfmt) | `0.27.2` | `0.27.3` |
| [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.31.0` | `2.32.0` |
| [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.11.0` | `1.11.1` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.57.0` | `0.58.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.41.0` | `0.42.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.59.0` | `0.61.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.46.0` | `0.47.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.42.0` | `0.43.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.50.0` | `0.52.0` |
| [google.golang.org/genproto/googleapis/api](https://github.com/googleapis/go-genproto) | `0.0.0-20260928230214-8a89bd6388cc` | `0.0.0-20261012220534-4341edf3f941` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20260928230214-8a89bd6388cc` | `0.0.0-20261005182115-fad411399dd8` |


Updates `github.com/go-openapi/jsonreference` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/go-openapi/jsonreference/releases)
- [Commits](go-openapi/jsonreference@v1.0.2...v1.0.3)

Updates `github.com/go-openapi/strfmt` from 0.27.2 to 0.27.3
- [Release notes](https://github.com/go-openapi/strfmt/releases)
- [Commits](go-openapi/strfmt@v0.27.2...v0.27.3)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.31.0 to 2.32.0
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Commits](grpc-ecosystem/grpc-gateway@v2.31.0...v2.32.0)

Updates `github.com/sigstore/sigstore` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.11.0...v1.11.1)

Updates `golang.org/x/crypto` from 0.57.0 to 0.58.0
- [Commits](golang/crypto@v0.57.0...v0.58.0)

Updates `golang.org/x/mod` from 0.41.0 to 0.42.0
- [Commits](golang/mod@v0.41.0...v0.42.0)

Updates `golang.org/x/net` from 0.59.0 to 0.61.0
- [Commits](golang/net@v0.59.0...v0.61.0)

Updates `golang.org/x/term` from 0.46.0 to 0.47.0
- [Commits](golang/term@v0.46.0...v0.47.0)

Updates `golang.org/x/text` from 0.42.0 to 0.43.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.42.0...v0.43.0)

Updates `golang.org/x/tools` from 0.50.0 to 0.52.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.50.0...v0.52.0)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260928230214-8a89bd6388cc to 0.0.0-20261012220534-4341edf3f941
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260928230214-8a89bd6388cc to 0.0.0-20261005182115-fad411399dd8
- [Commits](https://github.com/googleapis/go-genproto/commits)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/jsonreference
  dependency-version: 1.0.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/go-openapi/strfmt
  dependency-version: 0.27.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.32.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/sigstore/sigstore
  dependency-version: 1.11.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: golang.org/x/crypto
  dependency-version: 0.58.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/mod
  dependency-version: 0.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/net
  dependency-version: 0.61.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/term
  dependency-version: 0.47.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/text
  dependency-version: 0.43.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/tools
  dependency-version: 0.52.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20261012220534-4341edf3f941
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20261005182115-fad411399dd8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 18, 2026 16:03
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 18, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 18, 2026 16:03
@dependabot dependabot Bot added the go Pull requests that update Go code label Oct 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants