Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 5, 2026

Bumps the go-mod group with 14 updates:

Package From To
github.com/authzed/authzed-go 1.6.0 1.7.0
github.com/authzed/spicedb 1.47.1 1.48.0
github.com/cschleiden/go-workflows 1.0.1 1.4.1
github.com/ecordell/optgen 0.1.0 0.1.1
github.com/go-playground/validator/v10 10.27.0 10.30.1
github.com/google/cel-go 0.26.0 0.26.1
github.com/spf13/cobra 1.10.1 1.10.2
github.com/warpstreamlabs/bento 1.8.2 1.14.0
golang.org/x/sync 0.18.0 0.19.0
google.golang.org/grpc 1.76.0 1.77.0
google.golang.org/protobuf 1.36.10 1.36.11
k8s.io/client-go 0.34.1 0.34.2
k8s.io/component-base 0.34.1 0.35.0
k8s.io/kubernetes 1.34.1 1.35.0

Updates github.com/authzed/authzed-go from 1.6.0 to 1.7.0

Release notes

Sourced from github.com/authzed/authzed-go's releases.

v1.7.0

What's Changed

New Contributors

Full Changelog: authzed/authzed-go@v1.6.0...v1.7.0

Commits
  • f99e5ac Merge pull request #366 from authzed/dependabot/go_modules/go-mod-482f6a30ab
  • a53b0e1 Bump the go-mod group with 2 updates
  • 3b6479b Merge pull request #362 from Verolop/fix/x-request-id
  • b3a4ca9 fix: remove RequestIDHeader from header
  • 7e27ab1 fix: align request ID to standard x-request-id with backward compatibility
  • c2de26a feat: align response RequestID to standard x-request-id header
  • 6449233 Merge pull request #365 from authzed/dependabot/go_modules/go-mod-73487b18e7
  • 3376d0f Go mod tidy
  • c91bace Bump github.com/golangci/golangci-lint/v2 in the go-mod group
  • b9d86bd Merge pull request #364 from authzed/dependabot/go_modules/magefiles/go-mod-m...
  • Additional commits viewable in compare view

Updates github.com/authzed/spicedb from 1.47.1 to 1.48.0

Release notes

Sourced from github.com/authzed/spicedb's releases.

v1.48.0

Added

  • feat: add Memory Protection Middleware (enabled by default, use --enable-memory-protection-middleware=false to disable) by @​miparnisari in authzed/spicedb#2691. ⚠️ Now, if your server's memory usage is too high, incoming requests may be rejected with code "ResourceExhausted" (HTTP 429).

Changed

Fixed

Full Changelog: authzed/spicedb@v1.47.1...v1.48.0

Docker Images

This release is available at authzed/spicedb:v1.48.0, quay.io/authzed/spicedb:v1.48.0, ghcr.io/authzed/spicedb:v1.48.0

Commits
  • 12293b4 chore(deps): bump the go-mod group across 2 directories with 21 updates (#2752)
  • 5185b96 feat: implement a static statistics-based optimizer (#2704)
  • 6bd523b chore(deps): bump golang from 3587db7 to 2611181 in the docker group (#2751)
  • 6eb3991 test: fix flaky TestWatchIntegrityFailureDueToInvalidHashSignature (#2677)
  • c532b01 chore: add public-facing flag for memory protection middleware (#2753)
  • e213dca feat: add a proxy for counting datastore accesses and expose them through pro...
  • 5574bad chore: reduce t.Parallel() fanout (#2741)
  • f7b269e docs: improve description of some flags (#2692)
  • 1aca357 ci: change author of docs PR (#2746)
  • ee68a43 fix: Spanner stats (#2745)
  • Additional commits viewable in compare view

Updates github.com/cschleiden/go-workflows from 1.0.1 to 1.4.1

Release notes

Sourced from github.com/cschleiden/go-workflows's releases.

v1.4.1

What's Changed

Other Changes

Full Changelog: cschleiden/go-workflows@v1.4.0...v1.4.1

v1.4.0

What's Changed

Features

Bugfixes

Other Changes

Docs

New Contributors

Full Changelog: cschleiden/go-workflows@v1.3.0...v1.4.0

v1.3.0

What's Changed

Other Changes

... (truncated)

Commits
  • 2441ef3 Bump github.com/jackc/pgx/v5 from 5.3.1 to 5.5.4
  • caa8320 Fix GitHub URL in postgres README (remove www prefix)
  • 8a92a65 Add PostgreSQL backend documentation following SQLite/MySQL pattern
  • e065cb2 fix(samples): correct database creation query syntax
  • 23b924e refactor: rename package from postgresbackend to postgres
  • f32a821 fix: update makefile
  • 0c57436 migrations: squash migrations into a single file
  • 73e15af fix: lint errors
  • f363ca7 feat: add Postgres benchmarking and testing workflows
  • 5787158 feat: add postgres backend
  • Additional commits viewable in compare view

Updates github.com/ecordell/optgen from 0.1.0 to 0.1.1

Release notes

Sourced from github.com/ecordell/optgen's releases.

v0.1.1

This is a bugfix release for v0.1.0

What's Changed

Full Changelog: ecordell/optgen@v0.1.0...v0.1.1

Commits
  • ccbaff4 Merge pull request #13 from ecordell/revert-11-safe-regen
  • fe56235 Revert "generates files with a build tag and omits generated files during regen"
  • See full diff in compare view

Updates github.com/go-playground/validator/v10 from 10.27.0 to 10.30.1

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

Release 10.30.1

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.30.0...v10.30.1

Release 10.30.0

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.29.0...v10.30.0

v10.29.0

What's Changed

New Contributors

... (truncated)

Commits

Updates github.com/google/cel-go from 0.26.0 to 0.26.1

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.26.1

What's Changed

New Contributors

Full Changelog: google/cel-go@v0.25.1...v0.26.1

Commits
  • 8e7beb6 Support unwrapping unknown implementations of proto.Message (#1207)
  • 8750458 Add support for nested element type (#1190)
  • 93e910b Support variable descriptions in the AI prompt template (#1205)
  • fb02c9a Init function bindings on environment init (#1199)
  • cf932c7 Bump the npm_and_yarn group across 1 directory with 2 updates (#1197)
  • 8835891 Minor compatibility fixes for google3-import. (#1198)
  • 9453cde Comprehension nesting limit typo, allow nesting limit validator to accept dou...
  • See full diff in compare view

Updates github.com/spf13/cobra from 1.10.1 to 1.10.2

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.2

🔧 Dependencies

  • chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @​dims in spf13/cobra#2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

Commits

Updates github.com/warpstreamlabs/bento from 1.8.2 to 1.14.0

Release notes

Sourced from github.com/warpstreamlabs/bento's releases.

v1.14.0

1.14.0 - 2026-01-02

Fixed

Added

  • parquet_encode processor now includes support for native Struct types @​triddell
  • file_rel_json bloblang function which loads, parses & caches JSON files @​triddell
  • ttl field to couchbase processor enabling optional setting of TTL for couchbase items @​sapk
  • LeveledLogger interface added to service package enabling simpler use of custom loggers @​gregfurman
  • opensnowcat processor includes enriched_json option for output_format @​joaolcorreia
  • RegisterManagedConstructor added enabling registration of initialisation functions with access to service resources @​gregfurman
  • cache_get, cache_set, cache_delete & cache_add bloblang functions (made possible by RegisterManagedConstructor) @​gregfurman
  • couchbase increment & decrement operations @​sapk
  • new_root_span_with_link field added to various kafka & nats components @​gregfurman
  • expiry_window added to AWS credentials config allowing the credentials to trigger refreshing prior to the credentials actually expiring @​gitphill
  • grpc_client output component @​jem-davies

New Contributors

Full Changelog: warpstreamlabs/bento@v1.13.1...v1.14.0

v1.13.1

1.13.1 - 2025-12-04

Fixed

  • parquet_encode processor adds safeguard for schema fields beginning with non-alphabetic characters @​gregfurman

Full Changelog: warpstreamlabs/bento@v1.13.0...v1.13.1

v1.13.0

1.13.0 - 2025-12-02

Added

  • allow_headers & allow_methods to cors config for http_server @​jem-davies
  • transport field exposes options to enable custom http transports with http components & schema_registry_encode/decode components @​jem-davies
  • slack_webhook output publishes messages to Slack via webhook @​bhataprameya
  • memory buffer includes 'spillover' and 'active' metrics to track: bytes dropped and bytes in the buffer @​alecmerdler
  • auth_secret field added to nsq input & output enables connection with authentication @​danrjohnson
  • new input azure_service_bus_queue with azure default credentials support @​adrianhaj
  • spillover field to memory cache allows option of dropping incoming messages that would exceed the cache limit @​alecmerdler

... (truncated)

Changelog

Sourced from github.com/warpstreamlabs/bento's changelog.

1.14.0 - 2026-01-02

Fixed

Added

  • parquet_encode processor now includes support for native Struct types @​triddell
  • file_rel_json bloblang function which loads, parses & caches JSON files @​triddell
  • ttl field to couchbase processor enabling optional setting of TTL for couchbase items @​sapk
  • LeveledLogger interface added to service package enabling simpler use of custom loggers @​gregfurman
  • opensnowcat processor includes enriched_json option for output_format @​joaolcorreia
  • RegisterManagedConstructor added enabling registration of initialisation functions with access to service resources @​gregfurman
  • cache_get, cache_set, cache_delete & cache_add bloblang functions (made possible by RegisterManagedConstructor) @​gregfurman
  • couchbase increment & decrement operations @​sapk
  • new_root_span_with_link field added to various kafka & nats components @​gregfurman
  • expiry_window added to AWS credentials config allowing the credentials to trigger refreshing prior to the credentials actually expiring @​gitphill
  • grpc_client output component @​jem-davies

1.13.1 - 2025-12-04

Fixed

  • parquet_encode processor adds safeguard for schema fields beginning with non-alphabetic characters @​gregfurman

1.13.0 - 2025-12-02

Added

  • allow_headers & allow_methods to cors config for http_server @​jem-davies
  • transport field exposes options to enable custom http transports with http components & schema_registry_encode/decode components @​jem-davies
  • slack_webhook output publishes messages to Slack via webhook @​bhataprameya
  • memory buffer includes 'spillover' and 'active' metrics to track: bytes dropped and bytes in the buffer @​alecmerdler
  • auth_secret field added to nsq input & output enables connection with authentication @​danrjohnson
  • new input azure_service_bus_queue with azure default credentials support @​adrianhaj
  • spillover field to memory cache allows option of dropping incoming messages that would exceed the cache limit @​alecmerdler

Changed

Fixed

  • aws_kinesis input now properly handles pagination over kinesis shards @​gregfurman
  • sql outputs reconnect logic avoids race condition @​gregfurman

1.12.1 - 2025-10-24

... (truncated)

Commits

Updates golang.org/x/sync from 0.18.0 to 0.19.0

Commits

Updates google.golang.org/grpc from 1.76.0 to 1.77.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.77.0

API Changes

  • mem: Replace the Reader interface with a struct for better performance and maintainability. (#8669)

Behavior Changes

  • balancer/pickfirst: Remove support for the old pick_first LB policy via the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false. The new pick_first has been the default since v1.71.0. (#8672)

Bug Fixes

  • xdsclient: Fix a race condition in the ADS stream implementation that could result in resource-not-found errors, causing the gRPC client channel to move to TransientFailure. (#8605)
  • client: Ignore HTTP status header for gRPC streams. (#8548)
  • client: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (#8534)
  • client: Fix a bug where default port 443 was not automatically added to addresses without a specified port when sent to a proxy.
    • Setting environment variable GRPC_EXPERIMENTAL_ENABLE_DEFAULT_PORT_FOR_PROXY_TARGET=false disables this change; please file a bug if any problems are encountered as we will remove this option soon. (#8613)
  • balancer/pickfirst: Fix a bug where duplicate addresses were not being ignored as intended. (#8611)
  • server: Fix a bug that caused overcounting of channelz metrics for successful and failed streams. (#8573)
  • balancer/pickfirst: When configured, shuffle addresses in resolver updates that lack endpoints. Since gRPC automatically adds endpoints to resolver updates, this bug only affects custom LB policies that delegate to pick_first but don't set endpoints. (#8610)
  • mem: Clear large buffers before re-using. (#8670)

Performance Improvements

  • transport: Reduce heap allocations to reduce time spent in garbage collection. (#8624, #8630, #8639, #8668)
  • transport: Avoid copies when reading and writing Data frames. (#8657, #8667)
  • mem: Avoid clearing newly allocated buffers. (#8670)

New Features

  • outlierdetection: Add metrics specified in gRFC A91. (#8644)
  • stats/opentelemetry: Add support for optional label grpc.lb.backend_service in per-call metrics (#8637)
  • xds: Add support for JWT Call Credentials as specified in gRFC A97. Set environment variable GRPC_EXPERIMENTAL_XDS_BOOTSTRAP_CALL_CREDS=true to enable this feature. (#8536)
  • experimental/stats: Add support for up/down counters. (#8581)
Commits

Updates google.golang.org/protobuf from 1.36.10 to 1.36.11

Updates k8s.io/client-go from 0.34.1 to 0.34.2

Commits
  • 54601aa Update dependencies to v0.34.2 tag
  • 1bb1ad2 Merge pull request #134589liggitt/automated-cherry-pick-of-#134588
  • 2505205 Remove invalid SAN certificate construction
  • 7ffba0f Merge pull request #134004DerekFrank/automated-cherry-pick-of-#133573
  • 145cb8f gofmt and review feedback
  • ddcdc12 fix: Update unit test to catch actual nil Labels case and fix functionality t...
  • See full diff in compare view

Updates k8s.io/component-base from 0.34.1 to 0.35.0

Commits
  • 4e6b4eb Update dependencies to v0.35.0 tag
  • 5e09e27 Merge remote-tracking branch 'origin/master' into release-1.35
  • 518a1d0 Bump golang.org/x/crypto to v0.45.0

Bumps the go-mod group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/authzed/authzed-go](https://github.com/authzed/authzed-go) | `1.6.0` | `1.7.0` |
| [github.com/authzed/spicedb](https://github.com/authzed/spicedb) | `1.47.1` | `1.48.0` |
| [github.com/cschleiden/go-workflows](https://github.com/cschleiden/go-workflows) | `1.0.1` | `1.4.1` |
| [github.com/ecordell/optgen](https://github.com/ecordell/optgen) | `0.1.0` | `0.1.1` |
| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.27.0` | `10.30.1` |
| [github.com/google/cel-go](https://github.com/google/cel-go) | `0.26.0` | `0.26.1` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.10.1` | `1.10.2` |
| [github.com/warpstreamlabs/bento](https://github.com/warpstreamlabs/bento) | `1.8.2` | `1.14.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.18.0` | `0.19.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.76.0` | `1.77.0` |
| google.golang.org/protobuf | `1.36.10` | `1.36.11` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.34.1` | `0.34.2` |
| [k8s.io/component-base](https://github.com/kubernetes/component-base) | `0.34.1` | `0.35.0` |
| [k8s.io/kubernetes](https://github.com/kubernetes/kubernetes) | `1.34.1` | `1.35.0` |


Updates `github.com/authzed/authzed-go` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/authzed/authzed-go/releases)
- [Commits](authzed/authzed-go@v1.6.0...v1.7.0)

Updates `github.com/authzed/spicedb` from 1.47.1 to 1.48.0
- [Release notes](https://github.com/authzed/spicedb/releases)
- [Commits](authzed/spicedb@v1.47.1...v1.48.0)

Updates `github.com/cschleiden/go-workflows` from 1.0.1 to 1.4.1
- [Release notes](https://github.com/cschleiden/go-workflows/releases)
- [Commits](cschleiden/go-workflows@v1.0.1...v1.4.1)

Updates `github.com/ecordell/optgen` from 0.1.0 to 0.1.1
- [Release notes](https://github.com/ecordell/optgen/releases)
- [Commits](ecordell/optgen@v0.1.0...v0.1.1)

Updates `github.com/go-playground/validator/v10` from 10.27.0 to 10.30.1
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.27.0...v10.30.1)

Updates `github.com/google/cel-go` from 0.26.0 to 0.26.1
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.26.0...v0.26.1)

Updates `github.com/spf13/cobra` from 1.10.1 to 1.10.2
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.10.1...v1.10.2)

Updates `github.com/warpstreamlabs/bento` from 1.8.2 to 1.14.0
- [Release notes](https://github.com/warpstreamlabs/bento/releases)
- [Changelog](https://github.com/warpstreamlabs/bento/blob/main/CHANGELOG.md)
- [Commits](warpstreamlabs/bento@v1.8.2...v1.14.0)

Updates `golang.org/x/sync` from 0.18.0 to 0.19.0
- [Commits](golang/sync@v0.18.0...v0.19.0)

Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)

Updates `google.golang.org/protobuf` from 1.36.10 to 1.36.11

Updates `k8s.io/client-go` from 0.34.1 to 0.34.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.34.1...v0.34.2)

Updates `k8s.io/component-base` from 0.34.1 to 0.35.0
- [Commits](kubernetes/component-base@v0.34.1...v0.35.0)

Updates `k8s.io/kubernetes` from 1.34.1 to 1.35.0
- [Release notes](https://github.com/kubernetes/kubernetes/releases)
- [Commits](kubernetes/kubernetes@v1.34.1...v1.35.0)

---
updated-dependencies:
- dependency-name: github.com/authzed/authzed-go
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/authzed/spicedb
  dependency-version: 1.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/cschleiden/go-workflows
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/ecordell/optgen
  dependency-version: 0.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/go-playground/validator/v10
  dependency-version: 10.30.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/google/cel-go
  dependency-version: 0.26.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/warpstreamlabs/bento
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: golang.org/x/sync
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: google.golang.org/grpc
  dependency-version: 1.77.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: k8s.io/component-base
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: k8s.io/kubernetes
  dependency-version: 1.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
...

Signed-off-by: dependabot[bot] <[email protected]>
@tstirrat15
Copy link
Contributor

This is messy for reasons I don't completely understand. I'll come back to it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/dependencies Affects dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants