Skip to content

chore(deps): bump the go-minor-and-patch-updates group with 14 updates - #6606

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/develop/go-minor-and-patch-updates-8d606cad63
Open

chore(deps): bump the go-minor-and-patch-updates group with 14 updates#6606
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/develop/go-minor-and-patch-updates-8d606cad63

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-minor-and-patch-updates group with 14 updates:

Package From To
cloud.google.com/go/storage 1.68.0 1.70.0
github.com/go-git/go-git/v5 5.19.2 5.19.3
github.com/hashicorp/go-getter 1.8.9 1.8.10
cloud.google.com/go/billing 1.27.0 1.28.1
cloud.google.com/go/filestore 1.17.0 1.18.1
cloud.google.com/go/resourcemanager 1.17.0 1.18.1
github.com/go-git/go-billy/v5 5.9.1 5.9.2
github.com/hashicorp/terraform-json 0.28.0 0.29.0
golang.org/x/mod 0.41.0 0.42.0
golang.org/x/term 0.46.0 0.47.0
k8s.io/api 0.37.1 0.37.2
k8s.io/apimachinery 0.37.1 0.37.2
k8s.io/client-go 0.37.1 0.37.2
golang.org/x/sys 0.48.0 0.49.0

Updates cloud.google.com/go/storage from 1.68.0 to 1.70.0

Commits
  • 8a17bee chore: release main (#20540)
  • 0783130 chore(main): release agentplatform 0.22.0
  • cc91d66 feat: update API sources and regenerate (#20570)
  • d3974fa chore(spanner): generate private vtprotobuf copy of google.spanner.v1 under i...
  • 39f0ea5 fix(auth): honor DisableAsyncRefresh and EarlyTokenRefresh consistently (#20564)
  • 9b3c9a5 chore: update librarian version to v0.45.0 (#20565)
  • 68b3f33 fix(bigtable): detect omitted MutateRows response entries in ApplyBulk (#20557)
  • 17626fb test(spanner): unflake TestIntegration_ListDatabaseRoles (#20562)
  • ec37b97 test(spanner): unflake TestIntegration_BatchQuery and TestIntegration… (#20560)
  • d0df0a6 chore: remove unused .librarian directory (#20556)
  • Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.19.2 to 5.19.3

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.19.3

What's Changed

New Contributors

Full Changelog: go-git/go-git@v5.19.2...v5.19.3

Commits
  • bdae57c Merge pull request #2468 from go-git/bump-pjbgf
  • 372805d build: Bump pjbgf/sha1cd to v0.7.0
  • e28bfff Merge pull request #2467 from go-git/renovate/releases/v5.x-go-git
  • dbfe60f build: Update module github.com/go-git/go-billy/v5 to v5.9.2
  • a3fa9b3 Merge pull request #2451 from go-git/drop-go-1.25
  • 1fc0e47 build: Drop Go 1.25
  • 4f28503 Merge pull request #2340 from jgoosens/releases/v5.x
  • 5a01a03 Merge pull request #2357 from go-git/renovate/releases/v5.x-go-golang.org-x-c...
  • 5372bc7 Merge pull request #2421 from akashchamp/fix/packfile-parallel-test-race
  • 3d20ded plumbing: format/packfile, Stop running TestChecksumMismatch and TestMalforme...
  • Additional commits viewable in compare view

Updates github.com/hashicorp/go-getter from 1.8.9 to 1.8.10

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.8.10

Bug fixes

Full Changelog: hashicorp/go-getter@v1.8.9...v1.8.10

Changelog

Sourced from github.com/hashicorp/go-getter's changelog.

1.8.10 (October 6, 2026)

BUG FIXES:

  • s3: Only force path-style addressing for non-AWS custom endpoints, restoring the SDK-default virtual-hosted-style for AWS endpoints. Fixes S3 downloads with AWS_USE_FIPS_ENDPOINT=true, whose path-style hostnames do not resolve [GH-676]
Commits
  • f37b03d Release v1.8.10
  • f512b82 [chore] : Bump the go group with 6 updates (#699)
  • fa06524 [chore] : Bump the go group with 4 updates (#698)
  • cb9c40a [chore] : Bump go.opentelemetry.io/otel/sdk (#695)
  • af0c1a9 [chore] : Bump the go group with 4 updates (#697)
  • 4df2943 [chore] : Bump aws-actions/configure-aws-credentials (#696)
  • 697ba66 sanitize destination path of keys received from S3/GCS List (#693)
  • 5393c9f [chore] : Bump the go group with 8 updates (#692)
  • 2efe0e2 [chore] : Bump the go group with 8 updates (#689)
  • 9f4d2d3 [chore] : Bump aws-actions/configure-aws-credentials (#688)
  • Additional commits viewable in compare view

Updates cloud.google.com/go/billing from 1.27.0 to 1.28.1

Release notes

Sourced from cloud.google.com/go/billing's releases.

redis: v1.28.1

1.28.1 (2026-10-28)

Bug Fixes

  • Adds additional validation for REST RPC requests (#20753) (7827181)
Changelog

Sourced from cloud.google.com/go/billing's changelog.

1.28.1 (2024-05-16)

Documentation

  • documentai: Clarify the unavailability of some features (652ba8f)
  • documentai: Updated comments (292e812)

1.28.0 (2024-05-01)

Features

  • documentai: A new message FoundationModelTuningOptions is added (1d757c6)
  • documentai: Support Chunk header and footer in Doc AI external proto (1d757c6)

Bug Fixes

  • documentai: Bump x/net to v0.24.0 (ba31ed5)
Commits
  • 4f59665 chore: release main (#20756)
  • b03cabc chore(main): release agentplatform 0.22.1 (#20758)
  • 22c9ad5 feat(storage): add Storage.UploadChunk spans for resumable uploads (#20750)
  • 232cbe4 fix(auth/grpctransport): use storage-direct authority for Interconnect (#20738)
  • 932ca4a fix(firestore): set x-goog-is-transaction header for atomic transaction pipel...
  • 50fd4eb fix(storage): use URL-safe base64 for the feature tracking header (#20684)
  • aa773a1 fix(storage): do not discard seen bytes on 206 Partial Content during reader ...
  • 1df7814 chore(preview): prepare compute preview bump (#20770)
  • 4572f25 chore: update librarian version to v0.50.0 (#20769)
  • a8a5ad9 chore(all): update module go.opentelemetry.io/otel/exporters/stdout/stdoutmet...
  • Additional commits viewable in compare view

Updates cloud.google.com/go/filestore from 1.17.0 to 1.18.1

Release notes

Sourced from cloud.google.com/go/filestore's releases.

policytroubleshooter: v1.18.1

1.18.1 (2026-10-28)

Bug Fixes

  • Adds additional validation for REST RPC requests (#20753) (7827181)

resourcemanager: v1.18.1

1.18.1 (2026-10-28)

Bug Fixes

  • Adds additional validation for REST RPC requests (#20753) (7827181)

scheduler: v1.18.1

1.18.1 (2026-10-28)

Bug Fixes

  • Adds additional validation for REST RPC requests (#20753) (7827181)

servicemanagement: v1.18.1

1.18.1 (2026-10-28)

Bug Fixes

  • Adds additional validation for REST RPC requests (#20753) (7827181)

shopping: v1.18.1

1.18.1 (2026-10-28)

Bug Fixes

  • Adds additional validation for REST RPC requests (#20753) (7827181)

trace: v1.18.1

1.18.1 (2026-10-28)

Bug Fixes

  • Adds additional validation for REST RPC requests (#20753) (7827181)

vmmigration: v1.18.1

1.18.1 (2026-10-28)

... (truncated)

Changelog

Sourced from cloud.google.com/go/filestore's changelog.

1.18.1 (2023-05-08)

Bug Fixes

  • documentai: Update grpc to v1.55.0 (1147ce0)

1.18.0 (2023-03-22)

Features

  • documentai: Add ImportProcessorVersion in v1beta3 (c967961)
Commits

Updates cloud.google.com/go/resourcemanager from 1.17.0 to 1.18.1

Release notes

Sourced from cloud.google.com/go/resourcemanager's releases.

policytroubleshooter: v1.18.1

1.18.1 (2026-10-28)

Bug Fixes

  • Adds additional validation for REST RPC requests (#20753) (7827181)

resourcemanager: v1.18.1

1.18.1 (2026-10-28)

Bug Fixes

  • Adds additional validation for REST RPC requests (#20753) (7827181)

scheduler: v1.18.1

1.18.1 (2026-10-28)

Bug Fixes

  • Adds additional validation for REST RPC requests (#20753) (7827181)

servicemanagement: v1.18.1

1.18.1 (2026-10-28)

Bug Fixes

  • Adds additional validation for REST RPC requests (#20753) (7827181)

shopping: v1.18.1

1.18.1 (2026-10-28)

Bug Fixes

  • Adds additional validation for REST RPC requests (#20753) (7827181)

trace: v1.18.1

1.18.1 (2026-10-28)

Bug Fixes

  • Adds additional validation for REST RPC requests (#20753) (7827181)

vmmigration: v1.18.1

1.18.1 (2026-10-28)

... (truncated)

Changelog

Sourced from cloud.google.com/go/resourcemanager's changelog.

1.18.1 (2023-05-08)

Bug Fixes

  • documentai: Update grpc to v1.55.0 (1147ce0)

1.18.0 (2023-03-22)

Features

  • documentai: Add ImportProcessorVersion in v1beta3 (c967961)
Commits

Updates github.com/go-git/go-billy/v5 from 5.9.1 to 5.9.2

Release notes

Sourced from github.com/go-git/go-billy/v5's releases.

v5.9.2

What's Changed

Full Changelog: go-git/go-billy@v5.9.0...v5.9.2

Commits

Updates github.com/hashicorp/terraform-json from 0.28.0 to 0.29.0

Release notes

Sourced from github.com/hashicorp/terraform-json's releases.

v0.29.0

ENHANCEMENTS:

  • version: Allow parsing of a format_version field, added in Terraform 1.17 (#208)
  • Add init_output log type for use when parsing logs from the init command (#181)
  • logging: Add support for state migrate message types (#210)
  • Add support for JSON output from workspace list command (#198)
  • Enable parsing state_store_initialization_start JSON log message from init command (#212)

BUG FIXES:

  • Avoid panic in (WorkspaceListOutput) CurrentWorkspace if no workspaces are listed (#214)
Commits
  • 8f4894d fix: Avoid panic in (WorkspaceListOutput) CurrentWorkspace if no workspaces...
  • 540e4c2 test: Enable parsing state_store_initialization_start JSON message, add te...
  • 456fd35 refactor: Rename JSON message type constants to use Message prefix in name ...
  • ebdaf2c logging: Add support for state migrate message types (#210)
  • 5a1ca92 Add support for JSON output from workspace list (#198)
  • e0b6807 feat: Add init_output log type for use when parsing a subset of logs from t...
  • 1835ed6 version: Allow parsing of a format_version field, added in v1.17 (#208)
  • f4ef996 build(deps): bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions-...
  • 4a96b30 build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 in the github-actions-...
  • See full diff in compare view

Updates golang.org/x/mod from 0.41.0 to 0.42.0

Commits
  • b5136e5 sumdb/tlog: use recorded responses in TestCertificateTransparency
  • 1e9a5ae go.mod: update golang.org/x dependencies
  • See full diff in compare view

Updates golang.org/x/term from 0.46.0 to 0.47.0

Commits

Updates k8s.io/api from 0.37.1 to 0.37.2

Commits

Updates k8s.io/apimachinery from 0.37.1 to 0.37.2

Commits

Updates k8s.io/client-go from 0.37.1 to 0.37.2

Commits

Updates golang.org/x/sys from 0.48.0 to 0.49.0

Commits
  • b6b8557 unix/linux: unify ppc64x syscall wrappers
  • aab6988 unix: add PrctlArg5Ptr
  • cdfd984 unix: pass fcntl data as unsafe.Pointer in FcntlF{lock,store} on darwin
  • 782b836 unix/linux: don't warn about closed stderr from child process
  • 61592fb unix: return syscall error in *listxattrNS on BSD
  • c136fda unix/linux/Dockerfile: update to Go 1.26.8
  • f1d0d79 unix: pass xattr data as unsafe.Pointer in BSD xattr syscalls
  • 67f850b unix: update linux to v7.2
  • eb1f659 unix: add O_EXEC and O_SEARCH on darwin
  • 51bc731 unix: add Mmsghdr for linux
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
github.com/go-git/go-git/v5 [>= 5.5.a, < 5.6]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
@dependabot
chore(deps): bump the go-minor-and-patch-updates group with 14 updates
b61f8dd 
Bumps the go-minor-and-patch-updates group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.68.0` | `1.70.0` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.19.2` | `5.19.3` |
| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.8.9` | `1.8.10` |
| [cloud.google.com/go/billing](https://github.com/googleapis/google-cloud-go) | `1.27.0` | `1.28.1` |
| [cloud.google.com/go/filestore](https://github.com/googleapis/google-cloud-go) | `1.17.0` | `1.18.1` |
| [cloud.google.com/go/resourcemanager](https://github.com/googleapis/google-cloud-go) | `1.17.0` | `1.18.1` |
| [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.9.1` | `5.9.2` |
| [github.com/hashicorp/terraform-json](https://github.com/hashicorp/terraform-json) | `0.28.0` | `0.29.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.41.0` | `0.42.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.46.0` | `0.47.0` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.37.1` | `0.37.2` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.37.1` | `0.37.2` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.37.1` | `0.37.2` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.48.0` | `0.49.0` |


Updates `cloud.google.com/go/storage` from 1.68.0 to 1.70.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@compute/v1.68.0...compute/v1.70.0)

Updates `github.com/go-git/go-git/v5` from 5.19.2 to 5.19.3
- [Release notes](https://github.com/go-git/go-git/releases)
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md)
- [Commits](go-git/go-git@v5.19.2...v5.19.3)

Updates `github.com/hashicorp/go-getter` from 1.8.9 to 1.8.10
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Changelog](https://github.com/hashicorp/go-getter/blob/main/CHANGELOG.md)
- [Commits](hashicorp/go-getter@v1.8.9...v1.8.10)

Updates `cloud.google.com/go/billing` from 1.27.0 to 1.28.1
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@kms/v1.27.0...redis/v1.28.1)

Updates `cloud.google.com/go/filestore` from 1.17.0 to 1.18.1
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@kms/v1.17.0...kms/v1.18.1)

Updates `cloud.google.com/go/resourcemanager` from 1.17.0 to 1.18.1
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@kms/v1.17.0...kms/v1.18.1)

Updates `github.com/go-git/go-billy/v5` from 5.9.1 to 5.9.2
- [Release notes](https://github.com/go-git/go-billy/releases)
- [Commits](go-git/go-billy@v5.9.1...v5.9.2)

Updates `github.com/hashicorp/terraform-json` from 0.28.0 to 0.29.0
- [Release notes](https://github.com/hashicorp/terraform-json/releases)
- [Commits](hashicorp/terraform-json@v0.28.0...v0.29.0)

Updates `golang.org/x/mod` from 0.41.0 to 0.42.0
- [Commits](golang/mod@v0.41.0...v0.42.0)

Updates `golang.org/x/term` from 0.46.0 to 0.47.0
- [Commits](golang/term@v0.46.0...v0.47.0)

Updates `k8s.io/api` from 0.37.1 to 0.37.2
- [Commits](kubernetes/api@v0.37.1...v0.37.2)

Updates `k8s.io/apimachinery` from 0.37.1 to 0.37.2
- [Commits](kubernetes/apimachinery@v0.37.1...v0.37.2)

Updates `k8s.io/client-go` from 0.37.1 to 0.37.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.37.1...v0.37.2)

Updates `golang.org/x/sys` from 0.48.0 to 0.49.0
- [Commits](golang/sys@v0.48.0...v0.49.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.70.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch-updates
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.19.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch-updates
- dependency-name: github.com/hashicorp/go-getter
  dependency-version: 1.8.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch-updates
- dependency-name: cloud.google.com/go/billing
  dependency-version: 1.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch-updates
- dependency-name: cloud.google.com/go/filestore
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch-updates
- dependency-name: cloud.google.com/go/resourcemanager
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch-updates
- dependency-name: github.com/go-git/go-billy/v5
  dependency-version: 5.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch-updates
- dependency-name: github.com/hashicorp/terraform-json
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch-updates
- dependency-name: golang.org/x/mod
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch-updates
- dependency-name: golang.org/x/term
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch-updates
- dependency-name: k8s.io/api
  dependency-version: 0.37.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch-updates
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.37.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch-updates
- dependency-name: k8s.io/client-go
  dependency-version: 0.37.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch-updates
- dependency-name: golang.org/x/sys
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 31, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 31, 2026 21:34
@dependabot dependabot Bot added the release-chore To not include into release notes label Oct 31, 2026
@github-actions github-actions Bot added the external PR from external contributor label Oct 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file external PR from external contributor go Pull requests that update Go code release-chore To not include into release notes

2 participants

@AdarshK15 @saara-tyagi27