Skip to content

chore(deps): bump the go-dependencies group with 12 updates - #1150

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-3fb094bf32
Open

chore(deps): bump the go-dependencies group with 12 updates#1150
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-3fb094bf32

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 12 updates:

Package From To
github.com/aws/aws-sdk-go-v2 1.45.1 1.46.0
github.com/aws/aws-sdk-go-v2/config 1.33.1 1.33.3
github.com/aws/aws-sdk-go-v2/credentials 1.20.1 1.20.3
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager 0.4.1 0.4.3
github.com/aws/aws-sdk-go-v2/service/ecs 1.93.0 1.96.0
github.com/aws/aws-sdk-go-v2/service/lambda 1.104.1 1.107.0
github.com/aws/aws-sdk-go-v2/service/s3 1.109.1 1.111.0
github.com/go-playground/validator/v10 10.30.3 10.30.4
github.com/moby/moby/api 1.55.0 1.56.0
github.com/moby/moby/client 0.5.1 0.6.0
github.com/open-policy-agent/opa 1.20.1 1.20.2
google.golang.org/api 0.295.0 0.297.0

Updates github.com/aws/aws-sdk-go-v2 from 1.45.1 to 1.46.0

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.1 to 1.33.3

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.20.1 to 1.20.3

Commits

Updates github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.4.1 to 0.4.3

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ecs from 1.93.0 to 1.96.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/lambda from 1.104.1 to 1.107.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.109.1 to 1.111.0

Commits

Updates github.com/go-playground/validator/v10 from 10.30.3 to 10.30.4

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

v10.30.4

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.30.3...v10.30.4

Commits
  • dfe35cf ci: Fix the linter version (#1617)
  • facf128 feat(translations): add Armenian translations (#1604)
  • 961375b docs: clarify fieldexcludes behavior (#1610)
  • 74dd82a test: cover startsnotwith/endsnotwith, RegisterStructValidationMapRules, and ...
  • 379edc8 chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#1612)
  • f9944c5 fix: use idiomatic "at most" in English max/lte messages (#1600)
  • 67e37d6 fix(fqdn): enforce maximum DNS name length (#1603)
  • 6b571d1 chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.13 to 1.4.15 (#...
  • 8455180 chore(deps): bump github.com/leodido/go-urn from 1.4.0 to 1.5.0 (#1606)
  • fd8bd3c chore(deps): bump actions/setup-go from 6 to 7 (#1601)
  • Additional commits viewable in compare view

Updates github.com/moby/moby/api from 1.55.0 to 1.56.0

Release notes

Sourced from github.com/moby/moby/api's releases.

api/v1.56.0

1.56.0

Changelog

  • GET /containers/json now supports an annotation filter to filter containers by annotation, either by key (annotation=key) or by key and value (annotation="key=value"), similar to the existing label filter. moby/moby#53538
  • POST /containers/create now supports HostConfig.Umask to set the initial umask for a Unix container. When set, the daemon includes the value in the OCI process configuration for the container's entrypoint, exec processes, and healthchecks. When omitted, the runtime's default behavior applies.moby/moby#53463
  • api/docs: sync API docs v1.25 - v1.55. moby/moby#53246
  • api/swagger: Align Healthcheck name with Go struct. moby/moby#53567
  • api/types/plugin: Deprecated plugin.Privileges sorting methods in favor of slices.SortFunc. moby/moby#53511
  • api/types/plugin: fix Privileges Swap implementation. moby/moby#53510
  • api: Bump to 1.56. moby/moby#53425
  • api: document Task.NetworksAttachments in the swagger definition. moby/moby#53082
  • api: remove gotest.tools from tests. moby/moby#53535
  • api: swagger: Use int64 for build query params. moby/moby#53520
  • api: use blackbox testing. moby/moby#53525
  • Fix API reference documenting an unsupported names filter for GET /configs. moby/moby#53447
Commits
  • 9b2179d Merge pull request #53572 from vvoland/api-docs-cut
  • 575cf82 Merge pull request #53571 from thaJeztah/bump_tools
  • 20beedb api/docs: Cut v1.56
  • bb86302 Merge pull request #53569 from vvoland/afvsock-lsm
  • 65be55a Merge pull request #53513 from thaJeztah/daemon_fix_list
  • 0af79c4 Merge pull request #53570 from vvoland/process-release
  • 7d1ce6a Merge pull request #53568 from renovate-bot/renovate/github.com-mdlayher-sock...
  • 0df1a00 Dockerfile: update cli v29.7.2, compose v5.5.1, buildx v0.37.0
  • e1d06bd Drop replace rules
  • b40d37e Merge pull request #53359 from vvoland/ext-namegenerator
  • Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.5.1 to 0.6.0

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.6.0

0.6.0

Changelog

Changelog

Sourced from github.com/moby/moby/client's changelog.

0.6.0 (2013-08-22)

  • Runtime: Load authConfig only when needed and fix useless WARNING
  • Runtime: Add lxc-conf flag to allow custom lxc options
  • Runtime: Fix race conditions in parallel pull
  • Runtime: Improve CMD, ENTRYPOINT, and attach docs.
  • Documentation: Small fix to docs regarding adding docker groups
  • Documentation: Add MongoDB image example
  • Builder: Add USER instruction do Dockerfile
  • Documentation: updated default -H docs
  • Remote API: Sort Images by most recent creation date.
  • Builder: Add workdir support for the Buildfile
  • Runtime: Add an option to set the working directory
  • Runtime: Show tag used when image is missing
  • Documentation: Update readme with dependencies for building
  • Documentation: Add instructions for creating and using the docker group
  • Remote API: Reworking opaque requests in registry module
  • Runtime: Fix Graph ByParent() to generate list of child images per parent image.
  • Runtime: Add Image name to LogEvent tests
  • Documentation: Add sudo to examples and installation to documentation
  • Hack: Bash Completion: Limit commands to containers of a relevant state
  • Remote API: Add image name in /events
  • Runtime: Apply volumes-from before creating volumes
  • Runtime: Make docker run handle SIGINT/SIGTERM
  • Runtime: Prevent crash when .dockercfg not readable
  • Hack: Add docker dependencies coverage testing into docker-ci
  • Runtime: Add -privileged flag and relevant tests, docs, and examples
  • Packaging: Docker-brew 0.5.2 support and memory footprint reduction
  • Runtime: Install script should be fetched over https, not http.
  • Packaging: Add new docker dependencies into docker-ci
  • Runtime: Use Go 1.1.2 for dockerbuilder
  • Registry: Improve auth push
  • Runtime: API, issue 1471: Use groups for socket permissions
  • Documentation: PostgreSQL service example in documentation
  • Contrib: bash completion script
  • Tests: Improve TestKillDifferentUser to prevent timeout on buildbot
  • Documentation: Fix typo in docs for docker run -dns
  • Documentation: Adding a reference to ps -a
  • Runtime: Correctly detect IPv4 forwarding
  • Packaging: Revert "docker.upstart: avoid spawning a sh process"
  • Runtime: Use ranged for loop on channels
  • Runtime: Fix typo: fmt.Sprint -> fmt.Sprintf
  • Tests: Fix typo in TestBindMounts (runContainer called without image)
  • Runtime: add websocket support to /container//attach/ws
  • Runtime: Mount /dev/shm as a tmpfs
  • Builder: Only count known instructions as build steps
  • Builder: Fix docker build and docker events output
  • Runtime: switch from http to https for get.docker.io
  • Tests: Improve TestGetContainersTop so it does not rely on sleep
  • Packaging: Docker-brew and Docker standard library
  • Testing: Add some tests in server and utils

... (truncated)

Commits
  • f4a4f1c Bump to 0.6.0
  • f925edd Merge pull request #1525 from griff/1503-fix
  • 12715c8 Merge pull request #1609 from jpetazzo/release-docker-with-docker
  • 326dadd Merge pull request #1565 from dotcloud/only_load_authconfig_when_needed
  • a3510c9 Merge pull request #1560 from dotcloud/439-allow-lxc-args
  • 262d57e Merge pull request #1623 from mhennings/1592-fix-race-conditions-in-parallel-...
  • 551092f Add lxc-conf flag to allow custom lxc options
  • 3f802f4 Fix race conditions in parallel pull
  • 0b9c8e2 Merge pull request #1596 from metalivedev/1149-easyfixes
  • 42fe550 Merge pull request #1614 from denibertovic/docs
  • Additional commits viewable in compare view

Updates github.com/open-policy-agent/opa from 1.20.1 to 1.20.2

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v1.20.2

This release includes a bug fix for a parser regression introduced in v1.20.0, and dependency updates.

Fix stale parse errors on statements starting with { (#9140)

When the and/or keywords added in v1.20.0 are imported, a statement that starts with { is first read as an explicit operand body, and re-read as a term (a comprehension, for example) if no and or or follows. Errors recorded during the abandoned first attempt stayed in the parser's term cache and were reported against the successful re-read, rejecting policies that parse fine:

package example
import future.keywords
xs := [1, 2, 3]
allow if {
{
y |
some y in xs # rego_parse_error: unexpected some keyword
} == {1, 2, 3}
}

The term cache is now restored along with the rest of the parser state when the operand-body guess is abandoned. Only policies importing and or or — directly or via import future.keywords — were affected; policies that don't import them parse unchanged.

Authored by @​sspaink

Miscellaneous

  • build(go): Bump to 1.27.1 (3652eeb) authored by @​srenatus
  • Dependency updates; notably:
    • build(deps): Bump github.com/dgraph-io/badger/v4 from 4.9.5 to 4.9.6
    • build(deps): Bump github.com/lestrrat-go/jwx/v3 from 3.1.1 to 3.2.0
    • build(deps): Bump github.com/santhosh-tekuri/jsonschema/v6 from 6.0.2 to 6.0.3
    • build(deps): Bump github.com/sirupsen/logrus from 1.9.4 to 1.10.2
    • build(deps): Bump go.opentelemetry.io/contrib/bridges/prometheus from 0.69.0 to 0.71.0
    • build(deps): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.69.0 to 0.71.0
    • build(deps): Bump go.opentelemetry.io/otel from 1.44.0 to 1.46.0
    • build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.44.0 to 1.46.0
    • build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.44.0 to 1.46.0
    • build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.44.0 to 1.46.0
    • build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.44.0 to 1.46.0
    • build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.44.0 to 1.46.0
    • build(deps): Bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.46.0
    • build(deps): Bump go.opentelemetry.io/otel/sdk/metric from 1.44.0 to 1.46.0
    • build(deps): Bump go.opentelemetry.io/otel/trace from 1.44.0 to 1.46.0

... (truncated)

Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

1.20.2

This release includes a bug fix for a parser regression introduced in v1.20.0, and dependency updates.

Fix stale parse errors on statements starting with { (#9140)

When the and/or keywords added in v1.20.0 are imported, a statement that starts with { is first read as an explicit operand body, and re-read as a term (a comprehension, for example) if no and or or follows. Errors recorded during the abandoned first attempt stayed in the parser's term cache and were reported against the successful re-read, rejecting policies that parse fine:

package example
import future.keywords
xs := [1, 2, 3]
allow if {
{
y |
some y in xs # rego_parse_error: unexpected some keyword
} == {1, 2, 3}
}

The term cache is now restored along with the rest of the parser state when the operand-body guess is abandoned. Only policies importing and or or — directly or via import future.keywords — were affected; policies that don't import them parse unchanged.

Authored by @​sspaink

Miscellaneous

  • build(go): Bump to 1.27.1 (3652eeb) authored by @​srenatus
  • Dependency updates; notably:
    • build(deps): Bump github.com/dgraph-io/badger/v4 from 4.9.5 to 4.9.6
    • build(deps): Bump github.com/lestrrat-go/jwx/v3 from 3.1.1 to 3.2.0
    • build(deps): Bump github.com/santhosh-tekuri/jsonschema/v6 from 6.0.2 to 6.0.3
    • build(deps): Bump github.com/sirupsen/logrus from 1.9.4 to 1.10.2
    • build(deps): Bump go.opentelemetry.io/contrib/bridges/prometheus from 0.69.0 to 0.71.0
    • build(deps): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.69.0 to 0.71.0
    • build(deps): Bump go.opentelemetry.io/otel from 1.44.0 to 1.46.0
    • build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.44.0 to 1.46.0
    • build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.44.0 to 1.46.0
    • build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.44.0 to 1.46.0
    • build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.44.0 to 1.46.0
    • build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.44.0 to 1.46.0
    • build(deps): Bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.46.0

... (truncated)

Commits

Updates google.golang.org/api from 0.295.0 to 0.297.0

Release notes

Sourced from google.golang.org/api's releases.

v0.297.0

0.297.0 (2026-09-01)

Features

  • Move to go1.26.0 as the lowest supported go version (#3724) (7770e01)

v0.296.0

0.296.0 (2026-08-31)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.297.0 (2026-09-01)

Features

  • Move to go1.26.0 as the lowest supported go version (#3724) (7770e01)

0.296.0 (2026-08-31)

Features

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the go-dependencies group with 12 updates
4a49111 
Bumps the go-dependencies group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.45.1` | `1.46.0` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.1` | `1.33.3` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.20.1` | `1.20.3` |
| [github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager](https://github.com/aws/aws-sdk-go-v2) | `0.4.1` | `0.4.3` |
| [github.com/aws/aws-sdk-go-v2/service/ecs](https://github.com/aws/aws-sdk-go-v2) | `1.93.0` | `1.96.0` |
| [github.com/aws/aws-sdk-go-v2/service/lambda](https://github.com/aws/aws-sdk-go-v2) | `1.104.1` | `1.107.0` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.109.1` | `1.111.0` |
| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.30.3` | `10.30.4` |
| [github.com/moby/moby/api](https://github.com/moby/moby) | `1.55.0` | `1.56.0` |
| [github.com/moby/moby/client](https://github.com/moby/moby) | `0.5.1` | `0.6.0` |
| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `1.20.1` | `1.20.2` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.295.0` | `0.297.0` |


Updates `github.com/aws/aws-sdk-go-v2` from 1.45.1 to 1.46.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.45.1...v1.46.0)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.1 to 1.33.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.33.1...config/v1.33.3)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.20.1 to 1.20.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.20.1...v1.20.3)

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager` from 0.4.1 to 0.4.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@feature/s3/transfermanager/v0.4.1...feature/s3/transfermanager/v0.4.3)

Updates `github.com/aws/aws-sdk-go-v2/service/ecs` from 1.93.0 to 1.96.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.93.0...service/s3/v1.96.0)

Updates `github.com/aws/aws-sdk-go-v2/service/lambda` from 1.104.1 to 1.107.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.104.1...service/s3/v1.107.0)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.109.1 to 1.111.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.109.1...service/s3/v1.111.0)

Updates `github.com/go-playground/validator/v10` from 10.30.3 to 10.30.4
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.30.3...v10.30.4)

Updates `github.com/moby/moby/api` from 1.55.0 to 1.56.0
- [Release notes](https://github.com/moby/moby/releases)
- [Commits](moby/moby@api/v1.55.0...api/v1.56.0)

Updates `github.com/moby/moby/client` from 0.5.1 to 0.6.0
- [Release notes](https://github.com/moby/moby/releases)
- [Changelog](https://github.com/moby/moby/blob/v0.6.0/CHANGELOG.md)
- [Commits](moby/moby@v0.5.1...v0.6.0)

Updates `github.com/open-policy-agent/opa` from 1.20.1 to 1.20.2
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa@v1.20.1...v1.20.2)

Updates `google.golang.org/api` from 0.295.0 to 0.297.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.295.0...v0.297.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.20.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager
  dependency-version: 0.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecs
  dependency-version: 1.96.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/lambda
  dependency-version: 1.107.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.111.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/go-playground/validator/v10
  dependency-version: 10.30.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/moby/moby/api
  dependency-version: 1.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/moby/moby/client
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/open-policy-agent/opa
  dependency-version: 1.20.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: google.golang.org/api
  dependency-version: 0.297.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 8, 2026
@github-actions github-actions Bot removed the go Pull requests that update go code label Sep 8, 2026
@claude

claude Bot commented Sep 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Claude encountered an error after 3m 54s —— View job

Dependency upgrade review

  • Identify changed dependencies (go.mod diff)
  • Check Go toolchain requirement vs google.golang.org/api v0.297
  • Review moby client 0.5.1 → 0.6.0 usage
  • Review AWS SDK (ecs/lambda/s3/transfermanager/sso) usage
  • Review validator v10.30.4 behaviour vs golden files
  • Review OPA 1.20.2
  • Build + vet locally — not possible in this run (go build denied by the sandbox); see Verification gap below

Nothing here looks like it should block the merge. Two things are worth a human check before it lands, both flagged inline: the moby client 0.6.0 bump (go.mod:33-34) and the fact that OPA 1.20.2 is a user-visible parser fix worth release notes plus a pinning test (go.mod:35).

Verification gap

The green PR checks run on this PR is only the conventional-commit validator and the labeler — it does not compile anything. The real build and test suite is the Main workflow, which was still in progress while I reviewed. I could not run go build ./... or the tests myself here, so every "would fail to compile" risk below rests on that workflow, not on anything I executed.

Per-dependency assessment

Go floor — fine. google.golang.org/api v0.297.0's only change is raising its minimum to go1.26. go.mod declares go 1.26.7, .go-version is 1.26, and Dockerfile pins GO_VERSION=1.26, so the floor is already satisfied everywhere. v0.296.0 is generated-client regeneration; the only use in this repo is google.golang.org/api/iterator in internal/cloudrun/cloudrun.go:19. Low risk.

AWS SDK — low risk, one preview module to watch. All clients are built through NewFromConfig (internal/aws/aws.go:131,189,227), and the local interfaces S3ListAPI / S3DownloadAPI (internal/aws/aws.go:137-150) plus the fakes in internal/aws/fake_*.go mean any signature change breaks the build rather than behaviour. ecs 1.93→1.96, lambda 1.104→1.107 and s3 1.109→1.111 are generated-model additions. aws-sdk-go-v2 1.46.0's notable change ("remove span retry loop middleware") is internal telemetry — the adaptive retryer configured at internal/aws/aws.go:113-123 is unaffected.

Two caveats:

  • feature/s3/transfermanager is still v0.4.x (developer preview), so it is the one AWS module that can break on a patch bump. 0.4.1→0.4.3 should be safe, but DownloadObjectInput/Options are referenced directly, so a preview-API change would surface as a compile error.
  • The indirect credential-provider modules jumped a minor version each: sso 1.35→1.37, ssooidc 1.40→1.42, sts 1.47→1.49, signin 1.7→1.9. Tests use static creds and fakes, so the SSO/assume-role path through config.LoadDefaultConfig has no CI coverage. If anyone runs kosli snapshot ecs|lambda|s3 with an AWS SSO profile, that's the smoke test worth doing once.

validator 10.30.4 — no impact. The 10.30.4 changes are English translation wording (max/lte → "at most"), new prefix/suffix translations, FQDN max-DNS-length enforcement and URN RFC 8141. This repo only uses required and oneof=1 (internal/server/server.go:27,33-34) and surfaces errors with %v on the raw ValidationErrors (cmd/kosli/snapshotPaths.go:151-153), not through a translator — so the translation changes cannot reach output. The single place where the message format is load-bearing is the golden at cmd/kosli/snapshotPaths_test.go:49, which pins the oneof message; the default FieldError.Error() format was not touched, so it should stay green.

Indirect, worth knowing but not acting on:

  • go-viper/mapstructure 2.4.0 → 2.5.0 (minor) sits under viper.UnmarshalExact for the path-spec file (cmd/kosli/snapshotPaths.go:146). The snapshotPaths suite and its testdata/paths-files/ fixtures cover this decode path, so a behaviour change should show up there.
  • sirupsen/logrus 1.9.4 → 1.10.2 and the otel 1.44 → 1.46 set arrive via OPA; the CLI's own logging (internal/logger) doesn't use logrus.
  • Minor inconsistency, harmless: otelgrpc moved to v0.70.0 while otelhttp moved to v0.71.0 — the contrib modules are one release apart, but both compile against the otel 1.46 API and both are indirect.

Note on the PR description: Dependabot's commit lists for service/ecs and service/lambda link to service/s3 compare views (and the credentials list shows 2023 commits), so don't use those sections to judge what actually changed in ECS/Lambda.

Suggested follow-ups

  1. Confirm the Main workflow goes green — that is the only compile/test evidence for this bump, and the docker-dependent tests are what would catch a moby client 0.6.0 API change.
  2. Manually check kosli snapshot docker / kosli fingerprint --artifact-type docker against an older Docker Engine, or add an explicit API-version-negotiation option at the three client.New(client.FromEnv) call sites. Fix this →
  3. Add the OPA comprehension-parsing contract test and note the 1.20.2 parser fix in the release notes (full suggestion inline on go.mod:35). Fix this →
  4. If anyone uses AWS SSO profiles with the snapshot commands, smoke-test one — those credential modules each took a minor bump and have no CI coverage.
    · branch dependabot/go_modules/go-dependencies-3fb094bf32

@github-actions github-actions Bot added the chore label Sep 8, 2026
claude[bot]
claude Bot reviewed Sep 8, 2026
View reviewed changes
Comment thread go.mod
Comment on lines +33 to +34
github.com/moby/moby/api v1.56.0
github.com/moby/moby/client v0.6.0

@claude claude Bot Sep 8, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Highest-risk pair in this bump. moby/moby/client is pre-1.0, so 0.5.1 → 0.6.0 is a minor bump with no compatibility promise, and it carries the API bump to 1.56. Two things to confirm:

  1. Compilation of the three call sites. client.New(client.FromEnv) plus the client.*Options structs are used in internal/docker/docker.go:17, internal/digest/digest.go:254 and cmd/kosli/snapshotDocker.go:103. PR #53509 in the 0.6.0 notes is "minor cleanups, refactors" — that's exactly where option-struct/field renames land in this module. The Main workflow's build is the gate here.
  2. Daemon API version. None of the three call sites pass a negotiation/version option, so whatever the client's default API version is, it applies as-is. With the api module now at 1.56, a user on an older Docker Engine gets client version 1.56 is too new for kosli fingerprint --artifact-type docker and kosli snapshot docker if the client does not negotiate down. Worth one manual check against an older engine (or adding an explicit negotiation option), since CI runners always have a recent daemon and would never see this.

claude[bot]
claude Bot reviewed Sep 8, 2026
View reviewed changes
Comment thread go.mod
github.com/open-policy-agent/opa v1.20.1
github.com/moby/moby/api v1.56.0
github.com/moby/moby/client v0.6.0
github.com/open-policy-agent/opa v1.20.2

@claude claude Bot Sep 8, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This one is a user-visible bug fix, not just a version number: OPA 1.20.2 fixes the parser regression introduced in 1.20.0 (opa#9140) where stale parse errors were reported for statements starting with { — i.e. a comprehension in a rule body — whenever and/or or import future.keywords were in scope. main currently ships 1.20.1, so kosli evaluate today rejects that class of valid customer policies.

Two follow-ups in the spirit of internal/evaluate/opa_contract_test.go's own header comment:

  • Mention the fix in the release notes for whichever release picks this up — affected users saw a rego_parse_error on a policy that is correct.
  • Pin it with a contract test, so a future regression fails in CI rather than in a customer pipeline:
func TestOPAContract_ComprehensionInBodyParsesWithFutureKeywords(t *testing.T) {
	policy := `package policy

import future.keywords

default allow := false

allow if {
	{y | some y in input.xs} == {1, 2, 3}
}
`
	result, err := Evaluate(policy, map[string]interface{}{"xs": []interface{}{1, 2, 3}}, nil)
	require.NoError(t, err)
	require.True(t, result.Allow)
}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@claude claude[bot] claude[bot] left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

chore dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants