Skip to content

chore(deps): bump the go-modules group across 1 directory with 46 updates#2003

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-f9fde99848
Open

chore(deps): bump the go-modules group across 1 directory with 46 updates#2003
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-f9fde99848

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-modules group with 33 updates in the / directory:

Package From To
cloud.google.com/go/bigquery 1.76.0 1.77.0
cloud.google.com/go/cloudsqlconn 1.21.0 1.21.1
cloud.google.com/go/logging 1.16.0 1.18.0
cloud.google.com/go/storage 1.62.1 1.62.3
github.com/Azure/azure-sdk-for-go/sdk/azcore 1.21.1 1.22.0
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob 1.6.4 1.7.0
github.com/aws/aws-sdk-go-v2 1.41.6 1.42.0
github.com/aws/aws-sdk-go-v2/config 1.32.16 1.32.24
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs 1.69.1 1.75.2
github.com/aws/aws-sdk-go-v2/service/eks 1.82.1 1.84.6
github.com/aws/aws-sdk-go-v2/service/sqs 1.42.26 1.44.0
github.com/eko/gocache/store/go_cache/v4 4.2.4 4.2.5
github.com/exaring/otelpgx 0.10.0 0.11.1
github.com/flanksource/clicky 1.21.4 1.21.16
github.com/flanksource/deps 1.0.28 1.0.35
github.com/go-git/go-git/v5 5.18.0 5.19.1
github.com/google/cel-go 0.28.0 0.28.1
github.com/invopop/jsonschema 0.13.0 0.14.0
github.com/jackc/pgx/v5 5.9.2 5.10.0
github.com/labstack/echo/v4 4.15.1 4.15.2
github.com/nats-io/nats.go 1.51.0 1.52.0
github.com/onsi/ginkgo/v2 2.28.1 2.29.0
github.com/prometheus/common 0.67.5 0.68.1
github.com/samber/oops 1.21.0 1.22.0
go.opentelemetry.io/otel 1.43.0 1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace 1.43.0 1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 1.43.0 1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp 1.43.0 1.44.0
go.opentelemetry.io/otel/exporters/stdout/stdouttrace 1.43.0 1.44.0
gocloud.dev 0.45.0 0.46.0
gocloud.dev/pubsub/kafkapubsub 0.45.0 0.46.0
gocloud.dev/pubsub/natspubsub 0.45.0 0.46.0
golang.org/x/sync 0.20.0 0.21.0

Updates cloud.google.com/go/bigquery from 1.76.0 to 1.77.0

Commits
  • 7cd2512 chore(main): release spanner 1.77.0 (#11634)
  • 28f0030 chore(all): fix out-of-sync version.go files (#11684)
  • 655de36 feat(spanner): Support REPEATABLE_READ for RW transaction (#11654)
  • 60dc167 fix(aiplatform): remove VertexAISearch.engine option (#11681)
  • 3f23a91 fix(aiplatform): An existing google.api.http annotation http_uri is changed...
  • e87cedc chore: remove resourcesettings (#11678)
  • d662a45 feat(spanner): add option for LastStatement in transaction (#11638)
  • 9e508d0 chore: release main (#11623)
  • 601e742 feat(bigquery/reservation): Add a new field replication_status to `.google....
  • 1eb601e chore(firestore): expose the Firestore.executePipeline API to the preview bra...
  • Additional commits viewable in compare view

Updates cloud.google.com/go/cloudsqlconn from 1.21.0 to 1.21.1

Release notes

Sourced from cloud.google.com/go/cloudsqlconn's releases.

v1.21.1

1.21.1 (2026-05-20)

Bug Fixes

Changelog

Sourced from cloud.google.com/go/cloudsqlconn's changelog.

1.21.1 (2026-05-20)

Bug Fixes

Commits
  • 53ac757 chore(main): release 1.21.1 (#1103)
  • d67b992 deps: Update Non-major dependency updates (#1100)
  • 728e01f fix: bump dependencies to latest (#1102)
  • f2308e6 deps: Update google.golang.org/genproto/googleapis/rpc digest to aa98bba (#1091)
  • 42fb7c1 chore(deps): bump github.com/jackc/pgx/v5 in /examples/cloudrun/postgres (#1092)
  • e449750 chore(deps): bump google.golang.org/grpc in /examples/cloudrun/postgres (#1095)
  • e4d6bae chore(deps): bump go.opentelemetry.io/otel (#1096)
  • 62127cd chore(deps): bump go.opentelemetry.io/otel (#1097)
  • 794453e chore: Update dependencies to latest as of 2026-05-04 (#1101)
  • See full diff in compare view

Updates cloud.google.com/go/logging from 1.16.0 to 1.18.0

Release notes

Sourced from cloud.google.com/go/logging's releases.

storagetransfer: v1.18.0

v1.18.0 (2026-05-07)

translate: v1.17.0

v1.17.0 (2026-05-07)

Changelog

Sourced from cloud.google.com/go/logging's changelog.

1.18.0 (2023-03-22)

Features

  • documentai: Add ImportProcessorVersion in v1beta3 (c967961)

1.17.0 (2023-03-15)

Features

  • documentai: Added hints.language_hints field in OcrConfig (#7522) (b2c40c3)
Commits

Updates cloud.google.com/go/storage from 1.62.1 to 1.62.3

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.62.3

v1.62.3 (2026-06-03)

Bug Fixes

  • fix race condition during retries in gRPC writer (#14649) (04b6c635)

  • add server closed idle connection to retriable errors (#14594) (20b37d65)

storage: v1.62.2

v1.62.2 (2026-05-18)

Features

Bug Fixes

  • restore metadata operations timeout in gRPC (#14575) (275ff562)

  • Set default chunkRetryDeadline to 32s in NewWriterFromAppendableObject (#14458) (ec7c7d66)

  • refactor userProject metadata propagation in ListObjects (#14533) (fbb543e3)

Commits
  • 8afd6a0 chore: librarian release pull request: 20260603T093646Z (#14699)
  • 04b6c63 fix(storage): fix race condition during retries in gRPC writer (#14649)
  • 20b37d6 fix(storage): add server closed idle connection to retriable errors (#14594)
  • 50a5755 chore: librarian release pull request: 20260518T161338Z (#14610)
  • 585840f spanner: skip flaky TestIntegration_DbRemovalRecovery (#14607)
  • f8bf88f test(spanner): retry query after database recreation in integration test (#14...
  • 9168ab8 chore(librariangen): tweak release preview test (#14599)
  • f8b9a93 fix(spanner/spannertest): Support UUID as a base data type (#14117)
  • a42fd83 fix(internal/librariange): release preview support (#14588)
  • d944830 fix(datastore): add retries to emulator (#14591)
  • Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.1 to 1.22.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.22.0

1.22.0 (2026-06-04)

Features Added

  • Added type datetime.RFC7231 for date/time values in RFC 1123 format with a fixed GMT timezone.

Other Changes

  • Upgraded dependencies.
Commits
  • a19f613 Prep azcore@v1.22.0 for release (#26926)
  • 5803c0e Increment package version after release of storage/azblob (#26935) (#26943)
  • 9a979ff [Automation] Regenerate SDK based on typespec-go branch main 【batch 6】 (#26939)
  • 711094d eng/tools/generator: release v0.4.14 (#26934)
  • 20bd677 Deprecate Change Analysis SDK (#26913)
  • 92a31ec [Automation] Regenerate SDK based on typespec-go branch main 【batch 5】 (#26932)
  • 768459d azcertificates: live recording for PlatformManaged + review fixes (follow-up ...
  • e845f72 Update codeowners (#26918)
  • 118bb35 eng/tools/internal/exports: handle untyped const with selector expr value (#2...
  • 2b3767b Configurations: 'specification/containerservice/resource-manager/Microsoft.C...
  • Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.6.4 to 1.7.0

Commits

Updates github.com/aws/aws-sdk-go-v2 from 1.41.6 to 1.42.0

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.16 to 1.32.24

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.15 to 1.19.23

Commits

Updates github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.69.1 to 1.75.2

Commits

Updates github.com/aws/aws-sdk-go-v2/service/eks from 1.82.1 to 1.84.6

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sqs from 1.42.26 to 1.44.0

Commits
  • fa3ee1a Release 2023-11-21
  • 6e0c553 Regenerated Clients
  • 32fa00b Update endpoints model
  • 72eae5c Update API model
  • 1c69d08 fix: don't expect response to be json in endpointcreds provider (#2381)
  • 3bd97c0 fix: don't send 0 max items for object version and multipart upload paginator...
  • b3e07aa Release 2023-11-20
  • 2fc1c0d Regenerated Clients
  • 1a6bd02 Update endpoints model
  • ac2c871 Update API model
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.42.0 to 1.43.3

Commits
  • e8627b4 Merge pull request #3430 from aws/fix-remove-ioutil
  • 4e258a3 chore: update changelog description per review
  • e1176df chore: add changelog entry
  • a157f15 chore: regenerate SDK with new smithy-go
  • 0d4a893 chore: bump SMITHY_GO_CODEGEN_VERSION for ioutil cleanup
  • 858d954 fix: remove deprecated io/ioutil from codegen templates
  • 35a3c50 Release 2026-06-01
  • 370df3d Regenerated Clients
  • af6568b Update API model
  • 13bee3c fix flaky s3 manager test (#3427)
  • Additional commits viewable in compare view

Updates github.com/eko/gocache/store/go_cache/v4 from 4.2.4 to 4.2.5

Release notes

Sourced from github.com/eko/gocache/store/go_cache/v4's releases.

store/redis/v4.2.5

What's Changed

New Contributors

Full Changelog: eko/gocache@store/memcache/v4.2.3...store/redis/v4.2.5

store/go_cache/v4.2.5

What's Changed

Full Changelog: eko/gocache@lib/v4.2.3...store/go_cache/v4.2.5

Commits
  • 003ae39 Merge pull request #296 from Neo2308/feature/master/hide-mock-interfaces
  • 42bb50e Rename import to resolve warnings
  • 21cb8b5 Added mocks
  • c0e14c1 Hide mock interfaces from users
  • 277d34a Merge pull request #295 from eko/memcache-mocks
  • 762bf99 Store memcache: moved from golang/mock to mockery
  • See full diff in compare view

Updates github.com/exaring/otelpgx from 0.10.0 to 0.11.1

Release notes

Sourced from github.com/exaring/otelpgx's releases.

v0.11.1

What's Changed

New Contributors

Full Changelog: exaring/otelpgx@v0.11.0...v0.11.1

v0.11.0

What's Changed

New Contributors

Full Changelog: exaring/otelpgx@v0.10.0...v0.11.0

Commits
  • 626246c Fix lints
  • 168b105 Refactor tests to use testify
  • 795d56d fix logConnectionDetails
  • 76cf7a5 Add tests for asserting trace attributes
  • 25501de fix(ci): test from go1.25+
  • ca37215 fix: Update .github/workflows/test.yaml
  • b0d28b5 refactor(test): use typed context key in span name test
  • 45dc290 chore(lint): switch from golint to golangci-lint
  • ad455b0 refactor: switch to testify
  • e630def chore: update pgx
  • Additional commits viewable in compare view

Updates github.com/flanksource/clicky from 1.21.4 to 1.21.16

Release notes

Sourced from github.com/flanksource/clicky's releases.

v1.21.16

1.21.16 (2026-06-09)

✨ Features

  • api,rpc: Add CollapseANSI flag and multi-operand action path handling (633d28b)

v1.21.15

1.21.15 (2026-06-07)

⚠ BREAKING CHANGES

  • entity: runEntityOp now extracts paged results via PageRows() interface method before formatting, changing how paged responses are serialized in RPC responses.

✨ Features

  • entity: add pagination support for entity list operations (6903915)
  • rpc,entity: add context-aware filter lookup support for request-scoped state (442a560)

🐛 Bug Fixes

  • entity,rpc: address PR review comments and lint e2e go.sum failures (28bd967)

📦 Build System

  • makefile: add go mod tidy to fmt target for all modules (eb82367)

v1.21.14

1.21.14 (2026-06-03)

⚠ BREAKING CHANGES

  • entity,command,rpc: None - all changes are additive with backward compatibility maintained through fallback to non-context variants.
  • task: RunFilter.matches() renamed to RunFilter.Matches(); runMetaFromSnapshot() renamed to RunMetaFromSnapshot()
  • api,openapi,lint: annotateEntityOperationCommand now requires an additional optionalID boolean parameter.

♻️ Code Refactoring

  • timeseries: replace oipa references with generic app prefix (d0cb68e)

✨ Features

  • api,openapi,lint: Add optional ID support for entity actions and expand formatting helpers (706ab62)
  • entity,command,rpc: add context-aware data functions for request-scoped state (394a69c)

... (truncated)

Changelog

Sourced from github.com/flanksource/clicky's changelog.

1.21.16 (2026-06-09)

✨ Features

  • api,rpc: Add CollapseANSI flag and multi-operand action path handling (633d28b)

1.21.15 (2026-06-07)

⚠ BREAKING CHANGES

  • entity: runEntityOp now extracts paged results via PageRows() interface method before formatting, changing how paged responses are serialized in RPC responses.

✨ Features

  • entity: add pagination support for entity list operations (6903915)
  • rpc,entity: add context-aware filter lookup support for request-scoped state (442a560)

🐛 Bug Fixes

  • entity,rpc: address PR review comments and lint e2e go.sum failures (28bd967)

📦 Build System

  • makefile: add go mod tidy to fmt target for all modules (eb82367)

1.21.14 (2026-06-03)

⚠ BREAKING CHANGES

  • entity,command,rpc: None - all changes are additive with backward compatibility maintained through fallback to non-context variants.
  • task: RunFilter.matches() renamed to RunFilter.Matches(); runMetaFromSnapshot() renamed to RunMetaFromSnapshot()
  • api,openapi,lint: annotateEntityOperationCommand now requires an additional optionalID boolean parameter.

♻️ Code Refactoring

  • timeseries: replace oipa references with generic app prefix (d0cb68e)

✨ Features

  • api,openapi,lint: Add optional ID support for entity actions and expand formatting helpers (706ab62)
  • entity,command,rpc: add context-aware data functions for request-scoped state (394a69c)
  • lint: add render builder validation and helper-backed type detection (dd00e26)
  • metrics: add timeseries metrics store with in-memory and valkey backends (786c3a5)
  • task: Add OnBeforeGC hook and RunsRaw for GC lifecycle control (4505a9f)

... (truncated)

Commits
  • 8a19ef2 chore(release): 1.21.16 [skip ci]
  • 633d28b feat(api,rpc): Add CollapseANSI flag and multi-operand action path handling
  • cece0c9 chore(release): 1.21.15 [skip ci]
  • 28bd967 fix(entity,rpc): address PR review comments and lint e2e go.sum failures
  • eb82367 build(makefile): add go mod tidy to fmt target for all modules
  • 6903915 feat(entity): add pagination support for entity list operations
  • 442a560 feat(rpc,entity): add context-aware filter lookup support for request-scoped ...
  • 1dd7af6 chore(release): 1.21.14 [skip ci]
  • 394a69c feat(entity,command,rpc): add context-aware data functions for request-scoped...
  • d058287 fix(task): WaitFor returns result after in-closure terminal SetStatus
  • Additional commits viewable in compare view

Updates github.com/flanksource/deps from 1.0.28 to 1.0.35

Release notes

Sourced from github.com/flanksource/deps's releases.

v1.0.35

1.0.35 (2026-05-26)

Features

  • registry: add s3 mission control plugin (1e2d3aa)

v1.0.34

1.0.34 (2026-05-20)

Bug Fixes

  • avoid immutable release races during asset upload (e309486)

Release v1.0.33

What's Changed

Full Changelog: flanksource/deps@v1.0.32...v1.0.33

v1.0.32

No release notes provided.

v1.0.31

No release notes provided.

v1.0.30

No release notes provided.

v1.0.29

No release notes provided.

Commits
  • 1e2d3aa feat(registry): add s3 mission control plugin
  • e309486 fix: avoid immutable release races during asset upload
  • 7d210a0 fix: publish release after matrix uploads complete
  • 0fc2375 fix(registry): add remaining mission-control plugins
  • a428074 fix(registry): update mission-control plugin release assets
  • de2a0fa feat(registry): add mission-control plugin packages
  • f71a624 chore: disable flaky tests
  • See full diff in compare view

Updates github.com/go-git/go-git/v5 from 5.18.0 to 5.19.1

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.19.1

What's Changed

Full Changelog: go-git/go-git@v5.19.0...v5.19.1

v5.19.0

What's Changed

Full Changelog: go-git/go-git@v5.18.0...v5.19.0

Commits
  • 3c3be60 Merge pull request #2137 from go-git/validate-v5Description has been truncated

@dependabot
chore(deps): bump the go-modules group across 1 directory with 46 upd…
76b7229 
…ates

Bumps the go-modules group with 33 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) | `1.76.0` | `1.77.0` |
| [cloud.google.com/go/cloudsqlconn](https://github.com/googlecloudplatform/cloud-sql-go-connector) | `1.21.0` | `1.21.1` |
| [cloud.google.com/go/logging](https://github.com/googleapis/google-cloud-go) | `1.16.0` | `1.18.0` |
| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.62.1` | `1.62.3` |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.21.1` | `1.22.0` |
| [github.com/Azure/azure-sdk-for-go/sdk/storage/azblob](https://github.com/Azure/azure-sdk-for-go) | `1.6.4` | `1.7.0` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.6` | `1.42.0` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.16` | `1.32.24` |
| [github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs](https://github.com/aws/aws-sdk-go-v2) | `1.69.1` | `1.75.2` |
| [github.com/aws/aws-sdk-go-v2/service/eks](https://github.com/aws/aws-sdk-go-v2) | `1.82.1` | `1.84.6` |
| [github.com/aws/aws-sdk-go-v2/service/sqs](https://github.com/aws/aws-sdk-go-v2) | `1.42.26` | `1.44.0` |
| [github.com/eko/gocache/store/go_cache/v4](https://github.com/eko/gocache) | `4.2.4` | `4.2.5` |
| [github.com/exaring/otelpgx](https://github.com/exaring/otelpgx) | `0.10.0` | `0.11.1` |
| [github.com/flanksource/clicky](https://github.com/flanksource/clicky) | `1.21.4` | `1.21.16` |
| [github.com/flanksource/deps](https://github.com/flanksource/deps) | `1.0.28` | `1.0.35` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.18.0` | `5.19.1` |
| [github.com/google/cel-go](https://github.com/google/cel-go) | `0.28.0` | `0.28.1` |
| [github.com/invopop/jsonschema](https://github.com/invopop/jsonschema) | `0.13.0` | `0.14.0` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` |
| [github.com/labstack/echo/v4](https://github.com/labstack/echo) | `4.15.1` | `4.15.2` |
| [github.com/nats-io/nats.go](https://github.com/nats-io/nats.go) | `1.51.0` | `1.52.0` |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.28.1` | `2.29.0` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.67.5` | `0.68.1` |
| [github.com/samber/oops](https://github.com/samber/oops) | `1.21.0` | `1.22.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/stdout/stdouttrace](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [gocloud.dev](https://github.com/google/go-cloud) | `0.45.0` | `0.46.0` |
| [gocloud.dev/pubsub/kafkapubsub](https://github.com/google/go-cloud) | `0.45.0` | `0.46.0` |
| [gocloud.dev/pubsub/natspubsub](https://github.com/google/go-cloud) | `0.45.0` | `0.46.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.20.0` | `0.21.0` |



Updates `cloud.google.com/go/bigquery` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@spanner/v1.76.0...spanner/v1.77.0)

Updates `cloud.google.com/go/cloudsqlconn` from 1.21.0 to 1.21.1
- [Release notes](https://github.com/googlecloudplatform/cloud-sql-go-connector/releases)
- [Changelog](https://github.com/GoogleCloudPlatform/cloud-sql-go-connector/blob/main/CHANGELOG.md)
- [Commits](GoogleCloudPlatform/cloud-sql-go-connector@v1.21.0...v1.21.1)

Updates `cloud.google.com/go/logging` from 1.16.0 to 1.18.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@kms/v1.16.0...kms/v1.18.0)

Updates `cloud.google.com/go/storage` from 1.62.1 to 1.62.3
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@storage/v1.62.1...storage/v1.62.3)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.21.1 to 1.22.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.21.1...sdk/azcore/v1.22.0)

Updates `github.com/Azure/azure-sdk-for-go/sdk/storage/azblob` from 1.6.4 to 1.7.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/storage/azblob/v1.6.4...sdk/azcore/v1.7.0)

Updates `github.com/aws/aws-sdk-go-v2` from 1.41.6 to 1.42.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.41.6...v1.42.0)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.16 to 1.32.24
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.16...config/v1.32.24)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.15 to 1.19.23
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.19.15...credentials/v1.19.23)

Updates `github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs` from 1.69.1 to 1.75.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ecs/v1.69.1...service/s3/v1.75.2)

Updates `github.com/aws/aws-sdk-go-v2/service/eks` from 1.82.1 to 1.84.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ecs/v1.82.1...service/eks/v1.84.6)

Updates `github.com/aws/aws-sdk-go-v2/service/sqs` from 1.42.26 to 1.44.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/sqs/v1.42.26...service/s3/v1.44.0)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.42.0 to 1.43.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.42.0...service/amp/v1.43.3)

Updates `github.com/eko/gocache/store/go_cache/v4` from 4.2.4 to 4.2.5
- [Release notes](https://github.com/eko/gocache/releases)
- [Commits](eko/gocache@store/redis/v4.2.4...store/redis/v4.2.5)

Updates `github.com/exaring/otelpgx` from 0.10.0 to 0.11.1
- [Release notes](https://github.com/exaring/otelpgx/releases)
- [Commits](exaring/otelpgx@v0.10.0...v0.11.1)

Updates `github.com/flanksource/clicky` from 1.21.4 to 1.21.16
- [Release notes](https://github.com/flanksource/clicky/releases)
- [Changelog](https://github.com/flanksource/clicky/blob/main/CHANGELOG.md)
- [Commits](flanksource/clicky@v1.21.4...v1.21.16)

Updates `github.com/flanksource/deps` from 1.0.28 to 1.0.35
- [Release notes](https://github.com/flanksource/deps/releases)
- [Changelog](https://github.com/flanksource/deps/blob/main/CHANGELOG.md)
- [Commits](flanksource/deps@v1.0.28...v1.0.35)

Updates `github.com/go-git/go-git/v5` from 5.18.0 to 5.19.1
- [Release notes](https://github.com/go-git/go-git/releases)
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md)
- [Commits](go-git/go-git@v5.18.0...v5.19.1)

Updates `github.com/go-sql-driver/mysql` from 1.9.3 to 1.10.0
- [Release notes](https://github.com/go-sql-driver/mysql/releases)
- [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md)
- [Commits](go-sql-driver/mysql@v1.9.3...v1.10.0)

Updates `github.com/google/cel-go` from 0.28.0 to 0.28.1
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.28.0...v0.28.1)

Updates `github.com/invopop/jsonschema` from 0.13.0 to 0.14.0
- [Release notes](https://github.com/invopop/jsonschema/releases)
- [Commits](invopop/jsonschema@v0.13.0...v0.14.0)

Updates `github.com/jackc/pgx/v5` from 5.9.2 to 5.10.0
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.9.2...v5.10.0)

Updates `github.com/labstack/echo/v4` from 4.15.1 to 4.15.2
- [Release notes](https://github.com/labstack/echo/releases)
- [Changelog](https://github.com/labstack/echo/blob/v4.15.2/CHANGELOG.md)
- [Commits](labstack/echo@v4.15.1...v4.15.2)

Updates `github.com/microsoft/go-mssqldb` from 1.9.8 to 1.10.0
- [Release notes](https://github.com/microsoft/go-mssqldb/releases)
- [Changelog](https://github.com/microsoft/go-mssqldb/blob/main/CHANGELOG.md)
- [Commits](microsoft/go-mssqldb@v1.9.8...v1.10.0)

Updates `github.com/nats-io/nats.go` from 1.51.0 to 1.52.0
- [Release notes](https://github.com/nats-io/nats.go/releases)
- [Commits](nats-io/nats.go@v1.51.0...v1.52.0)

Updates `github.com/onsi/ginkgo/v2` from 2.28.1 to 2.29.0
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.28.1...v2.29.0)

Updates `github.com/onsi/gomega` from 1.39.1 to 1.40.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.39.1...v1.40.0)

Updates `github.com/prometheus/common` from 0.67.5 to 0.68.1
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.67.5...v0.68.1)

Updates `github.com/samber/oops` from 1.21.0 to 1.22.0
- [Release notes](https://github.com/samber/oops/releases)
- [Commits](samber/oops@v1.21.0...v1.22.0)

Updates `go.opentelemetry.io/otel` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/exporters/stdout/stdouttrace` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/trace` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `gocloud.dev` from 0.45.0 to 0.46.0
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](google/go-cloud@v0.45.0...v0.46.0)

Updates `gocloud.dev/pubsub/kafkapubsub` from 0.45.0 to 0.46.0
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](google/go-cloud@v0.45.0...v0.46.0)

Updates `gocloud.dev/pubsub/natspubsub` from 0.45.0 to 0.46.0
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](google/go-cloud@v0.45.0...v0.46.0)

Updates `golang.org/x/crypto` from 0.50.0 to 0.51.0
- [Commits](golang/crypto@v0.50.0...v0.51.0)

Updates `golang.org/x/exp` from 0.0.0-20260218203240-3dfff04db8fa to 0.0.0-20260410095643-746e56fc9e2f
- [Commits](https://github.com/golang/exp/commits)

Updates `golang.org/x/sync` from 0.20.0 to 0.21.0
- [Commits](golang/sync@v0.20.0...v0.21.0)

Updates `google.golang.org/api` from 0.276.0 to 0.280.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.276.0...v0.280.0)

Updates `google.golang.org/grpc` from 1.80.0 to 1.81.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.80.0...v1.81.1)

Updates `modernc.org/sqlite` from 1.49.1 to 1.51.0
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.49.1...v1.51.0)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.99.1 to 1.102.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.99.1...service/s3/v1.102.2)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/bigquery
  dependency-version: 1.77.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: cloud.google.com/go/cloudsqlconn
  dependency-version: 1.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: cloud.google.com/go/logging
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.62.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/storage/azblob
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.19.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs
  dependency-version: 1.75.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/eks
  dependency-version: 1.84.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sqs
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.43.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/eko/gocache/store/go_cache/v4
  dependency-version: 4.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/exaring/otelpgx
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/flanksource/clicky
  dependency-version: 1.21.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/flanksource/deps
  dependency-version: 1.0.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/go-sql-driver/mysql
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/google/cel-go
  dependency-version: 0.28.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/invopop/jsonschema
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/labstack/echo/v4
  dependency-version: 4.15.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/microsoft/go-mssqldb
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/nats-io/nats.go
  dependency-version: 1.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/prometheus/common
  dependency-version: 0.68.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/samber/oops
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/exporters/stdout/stdouttrace
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: gocloud.dev
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: gocloud.dev/pubsub/kafkapubsub
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: gocloud.dev/pubsub/natspubsub
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/exp
  dependency-version: 0.0.0-20260410095643-746e56fc9e2f
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: golang.org/x/sync
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/api
  dependency-version: 0.280.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: modernc.org/sqlite
  dependency-version: 1.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.102.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 9, 2026
@github-actions

github-actions Bot commented Jun 9, 2026 •
edited
Loading

Copy link
Copy Markdown

Benchstat (Other)

Base: 21b0631924dcd562c947efb608decdf4df664bd0
Head: 76b7229c631be992728fdfa38a44d74d74dc6222

✅ No significant performance changes detected

Full benchstat output 
goos: linux
goarch: amd64
pkg: github.com/flanksource/duty/bench
cpu: AMD EPYC 9V74 80-Core Processor                
                                                       │ bench-base.txt │
                                                       │     sec/op     │
InsertionForRowsWithAliases/external_users.aliases-4      523.9µ ±   7%
InsertionForRowsWithAliases/config_items.external_id-4    1.031m ±  14%
InsertionOfConfigsWithProperties-4                        3.411m ±   1%
UpdateOfConfigsWithProperties-4                           7.183m ±   4%
ResourceSelectorConfigs/name-4                            201.7µ ±   2%
ResourceSelectorConfigs/name_and_type-4                   213.9µ ±   3%
ResourceSelectorConfigs/tags-4                            33.30m ± 171%
ResourceSelectorQueryBuild/name-4                         42.23µ ±   1%
ResourceSelectorQueryBuild/name_and_type-4                62.39µ ±  10%
ResourceSelectorQueryBuild/tags-4                         16.88µ ±   3%
geomean                                                   492.9µ

@github-actions

github-actions Bot commented Jun 9, 2026 •
edited
Loading

Copy link
Copy Markdown

Benchstat (RLS)

Base: 21b0631924dcd562c947efb608decdf4df664bd0
Head: 76b7229c631be992728fdfa38a44d74d74dc6222

✅ No significant performance changes detected

Full benchstat output 
goos: linux
goarch: amd64
pkg: github.com/flanksource/duty/bench
cpu: AMD EPYC 9V74 80-Core Processor                
                                               │ bench-base.txt │
                                               │     sec/op     │
RLS/Sample-15000/catalog_changes/Without_RLS-4      4.425m ± 1%
RLS/Sample-15000/catalog_changes/With_RLS-4         125.9m ± 2%
RLS/Sample-15000/config_changes/Without_RLS-4       4.431m ± 6%
RLS/Sample-15000/config_changes/With_RLS-4          126.4m ± 1%
RLS/Sample-15000/config_detail/Without_RLS-4        4.244m ± 1%
RLS/Sample-15000/config_detail/With_RLS-4           121.0m ± 1%
RLS/Sample-15000/config_names/Without_RLS-4         12.64m ± 6%
RLS/Sample-15000/config_names/With_RLS-4            122.1m ± 0%
RLS/Sample-15000/config_summary/Without_RLS-4       92.00m ± 3%
RLS/Sample-15000/config_summary/With_RLS-4          616.9m ± 0%
RLS/Sample-15000/configs/Without_RLS-4              7.240m ± 2%
RLS/Sample-15000/configs/With_RLS-4                 121.6m ± 1%
RLS/Sample-15000/analysis_types/Without_RLS-4       3.405m ± 2%
RLS/Sample-15000/analysis_types/With_RLS-4          3.441m ± 2%
RLS/Sample-15000/analyzer_types/Without_RLS-4       3.247m ± 1%
RLS/Sample-15000/analyzer_types/With_RLS-4          3.269m ± 3%
RLS/Sample-15000/change_types/Without_RLS-4         4.482m ± 1%
RLS/Sample-15000/change_types/With_RLS-4            4.488m ± 2%
RLS/Sample-15000/config_classes/Without_RLS-4       3.583m ± 5%
RLS/Sample-15000/config_classes/With_RLS-4          119.9m ± 1%
RLS/Sample-15000/config_types/Without_RLS-4         4.399m ± 3%
RLS/Sample-15000/config_types/With_RLS-4            120.4m ± 2%
geomean                                             18.44m

@socket-security

socket-security Bot commented Jun 9, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedgithub.com/​go-sql-driver/​mysql@​v1.9.3 ⏵ v1.10.097 +110010010070
Updatedgithub.com/​Azure/​azure-sdk-for-go/​sdk/​azcore@​v1.21.1 ⏵ v1.22.071 +1100100100100
Updatedgithub.com/​aws/​aws-sdk-go-v2@​v1.41.6 ⏵ v1.42.071 +1100100100100
Updatedgithub.com/​labstack/​echo/​v4@​v4.15.1 ⏵ v4.15.272 +1100100100100
Updatedgithub.com/​onsi/​gomega@​v1.39.1 ⏵ v1.40.073 +2100100100100
Updatedgocloud.dev@​v0.45.0 ⏵ v0.46.073 +1100100100100
Updatedgithub.com/​jackc/​pgx/​v5@​v5.9.2 ⏵ v5.10.073 +1100100100100
Updatedgithub.com/​flanksource/​clicky@​v1.21.4 ⏵ v1.21.1674 +1100100100100
Updatedgolang.org/​x/​crypto@​v0.50.0 ⏵ v0.51.074100100100100
Updatedgithub.com/​google/​cel-go@​v0.28.0 ⏵ v0.28.174 +1100100100100
Updatedgithub.com/​nats-io/​nats.go@​v1.51.0 ⏵ v1.52.074 +1100100100100
Updatedcloud.google.com/​go/​bigquery@​v1.76.0 ⏵ v1.77.074 +1100100100100
Updatedmodernc.org/​sqlite@​v1.49.1 ⏵ v1.51.075 +110010010080
Updatedgoogle.golang.org/​grpc@​v1.80.0 ⏵ v1.81.175 +1100100100100
Updatedgo.opentelemetry.io/​otel@​v1.43.0 ⏵ v1.44.076 +1100 +2100100100
Updatedgithub.com/​microsoft/​go-mssqldb@​v1.9.8 ⏵ v1.10.076100100100100
Updatedcloud.google.com/​go/​storage@​v1.62.1 ⏵ v1.62.378100100100100
Updatedgoogle.golang.org/​api@​v0.276.0 ⏵ v0.280.079 +1100100100100
Updatedgithub.com/​prometheus/​common@​v0.67.5 ⏵ v0.68.192 +110010010080
Updatedgithub.com/​go-git/​go-git/​v5@​v5.18.0 ⏵ v5.19.182100 +20100100100
Updatedgithub.com/​onsi/​ginkgo/​v2@​v2.28.1 ⏵ v2.29.084 +1100100100100
Updatedgithub.com/​Azure/​azure-sdk-for-go/​sdk/​storage/​azblob@​v1.6.4 ⏵ v1.7.084 +1100100100100
Updatedgithub.com/​aws/​aws-sdk-go-v2/​config@​v1.32.16 ⏵ v1.32.2488100100100100
Updatedgithub.com/​flanksource/​deps@​v1.0.28 ⏵ v1.0.3592 +1100100100100
Updatedcloud.google.com/​go/​logging@​v1.16.0 ⏵ v1.18.093100100100100
Updatedgithub.com/​aws/​aws-sdk-go-v2/​service/​s3@​v1.99.1 ⏵ v1.102.293 -1100100100100
Updatedgolang.org/​x/​exp@​v0.0.0-20260218203240-3dfff04db8fa ⏵ v0.0.0-20260410095643-746e56fc9e2f94100100100100
Updatedcloud.google.com/​go/​cloudsqlconn@​v1.21.0 ⏵ v1.21.194100100100100
Updatedgo.opentelemetry.io/​otel/​exporters/​otlp/​otlptrace/​otlptracehttp@​v1.43.0 ⏵ v1.44.097 +1100100100100
Updatedgithub.com/​aws/​aws-sdk-go-v2/​credentials@​v1.19.15 ⏵ v1.19.2398100100100100
Updatedgo.opentelemetry.io/​otel/​sdk@​v1.43.0 ⏵ v1.44.098 +1100100100100
Updatedgithub.com/​aws/​aws-sdk-go-v2/​service/​sqs@​v1.42.26 ⏵ v1.44.098 +1100100100100
See 14 more rows in the dashboard

View full report

@socket-security

socket-security Bot commented Jun 9, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: golang github.com/envoyproxy/go-control-plane/envoy is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → golang/google.golang.org/grpc@v1.81.1 → golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: golang github.com/envoyproxy/go-control-plane/envoy is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → golang/google.golang.org/grpc@v1.81.1 → golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: golang github.com/envoyproxy/go-control-plane/envoy is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → golang/google.golang.org/grpc@v1.81.1 → golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: golang github.com/envoyproxy/go-control-plane/envoy is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → golang/google.golang.org/grpc@v1.81.1 → golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: golang github.com/envoyproxy/go-control-plane/envoy is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → golang/google.golang.org/grpc@v1.81.1 → golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: golang github.com/envoyproxy/go-control-plane/envoy is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → golang/google.golang.org/grpc@v1.81.1 → golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: golang github.com/googleapis/enterprise-certificate-proxy is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → golang/google.golang.org/api@v0.280.0 → golang/cloud.google.com/go/cloudsqlconn@v1.21.1 → golang/cloud.google.com/go/storage@v1.62.3 → golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.15

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.15. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: golang github.com/microsoft/go-mssqldb is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: go.mod → golang/github.com/microsoft/go-mssqldb@v1.10.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/github.com/microsoft/go-mssqldb@v1.10.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: golang golang.org/x/tools is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → golang/gonum.org/v1/gonum@v0.17.0 → golang/github.com/samber/lo@v1.53.0 → golang/github.com/testcontainers/testcontainers-go@v0.42.0 → golang/golang.org/x/exp@v0.0.0-20260410095643-746e56fc9e2f → golang/github.com/zclconf/go-cty@v1.18.1 → golang/github.com/onsi/gomega@v1.40.0 → golang/github.com/microsoft/go-mssqldb@v1.10.0 → golang/github.com/labstack/echo/v4@v4.15.2 → golang/cloud.google.com/go/bigquery@v1.77.0 → golang/cloud.google.com/go/logging@v1.18.0 → golang/golang.org/x/crypto@v0.51.0 → golang/github.com/google/cel-go@v0.28.1 → golang/k8s.io/apimachinery@v0.36.1 → golang/k8s.io/client-go@v0.36.1 → golang/google.golang.org/grpc@v1.81.1 → golang/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob@v1.7.0 → golang/github.com/onsi/ginkgo/v2@v2.29.0 → golang/github.com/go-git/go-git/v5@v5.19.1 → golang/google.golang.org/api@v0.280.0 → golang/cloud.google.com/go/cloudsqlconn@v1.21.1 → golang/github.com/flanksource/deps@v1.0.35 → golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0 → golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0 → golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0 → golang/modernc.org/sqlite@v1.51.0 → golang/github.com/flanksource/is-healthy@v1.0.88 → golang/github.com/flanksource/gomplate/v3@v3.24.82 → golang/gocloud.dev@v0.46.0 → golang/gocloud.dev/pubsub/kafkapubsub@v0.46.0 → golang/github.com/jackc/pgx/v5@v5.10.0 → golang/github.com/prometheus/common@v0.68.1 → golang/cloud.google.com/go/storage@v1.62.3 → golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.22.0 → golang/github.com/flanksource/commons@v1.53.1 → golang/github.com/flanksource/clicky@v1.21.16 → golang/github.com/Azure/azure-sdk-for-go/sdk/keyvault/azkeys@v0.10.0 → golang/github.com/henvic/httpretty@v0.1.4 → golang/github.com/gorilla/websocket@v1.5.4-0.20250319132907-e064f32e3674 → golang/github.com/TomOnTime/utfutil@v1.0.0 → golang/github.com/hashicorp/hcl/v2@v2.24.0 → golang/github.com/Azure/azure-sdk-for-go/sdk/monitor/azquery@v1.2.0 → golang/gorm.io/gorm@v1.31.1 → golang/ariga.io/atlas@v0.38.0 → golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.13.1 → golang/golang.org/x/tools@v0.44.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/golang.org/x/tools@v0.44.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: golang modernc.org/libc is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → golang/modernc.org/sqlite@v1.51.0 → golang/modernc.org/libc@v1.72.3

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/modernc.org/libc@v1.72.3. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: golang modernc.org/libc is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → golang/modernc.org/sqlite@v1.51.0 → golang/modernc.org/libc@v1.72.3

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/modernc.org/libc@v1.72.3. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@github-actions

github-actions Bot commented Jun 9, 2026

Copy link
Copy Markdown

Gavel results

Gavel exited with code .

View full results

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants