Skip to content

Bump the go-packages group with 12 updates#1110

Merged
FZambia merged 1 commit intomasterfrom
dependabot/go_modules/go-packages-86fcfb6e06
Mar 2, 2026
Merged

Bump the go-packages group with 12 updates#1110
FZambia merged 1 commit intomasterfrom
dependabot/go_modules/go-packages-86fcfb6e06

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 1, 2026

Bumps the go-packages group with 12 updates:

Package From To
github.com/aws/aws-sdk-go-v2 1.41.1 1.41.2
github.com/aws/aws-sdk-go-v2/config 1.32.7 1.32.10
github.com/aws/aws-sdk-go-v2/credentials 1.19.7 1.19.10
github.com/aws/aws-sdk-go-v2/service/sqs 1.42.21 1.42.22
github.com/aws/aws-sdk-go-v2/service/sts 1.41.6 1.41.7
github.com/aws/smithy-go 1.24.0 1.24.1
github.com/nats-io/nats.go 1.48.0 1.49.0
github.com/twmb/franz-go 1.20.6 1.20.7
google.golang.org/api 0.259.0 0.269.0
google.golang.org/grpc 1.78.0 1.79.1
github.com/redis/rueidis 1.0.71 1.0.72
golang.org/x/net 0.50.0 0.51.0

Updates github.com/aws/aws-sdk-go-v2 from 1.41.1 to 1.41.2

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.7 to 1.32.10

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.7 to 1.19.10

Commits
  • fcc0f5d Release 2023-04-10
  • cd750e0 Regenerated Clients
  • 1bc2f05 Update endpoints model
  • b964f5c Update API model
  • fd69015 fix APIGW exports nullability exceptions
  • fae239a Merge pull request #2089 from aws/auditAccessibility
  • acf33a2 Update aws-sdk-go-v2's comment codegened from Smithy Go's updated document sm...
  • 27360c1 fix APIGW exports nullability exceptions
  • 30383d5 Release 2023-04-07
  • 352f89c Regenerated Clients
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sqs from 1.42.21 to 1.42.22

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.41.6 to 1.41.7

Commits

Updates github.com/aws/smithy-go from 1.24.0 to 1.24.1

Release notes

Sourced from github.com/aws/smithy-go's releases.

Release (2026-02-20)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.24.1
    • Feature: Add new middleware functions to get event stream output from middleware
Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-02-27)

General Highlights

  • Dependency Update: Bump minimum go version to 1.24.

Release (2026-02-20)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.24.1
    • Feature: Add new middleware functions to get event stream output from middleware

Release (2025-12-01)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.24.0
    • Feature: Improve allocation footprint of the middleware stack. This should convey a ~10% reduction in allocations per SDK request.

Release (2025-11-03)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.23.2
    • Bug Fix: Adjust the initial sizes of each middleware phase to avoid some unnecessary reallocation.
    • Bug Fix: Avoid unnecessary allocation overhead from the metrics system when not in use.

Release (2025-10-15)

General Highlights

  • Dependency Update: Bump minimum go version to 1.23.
  • Dependency Update: Updated to the latest SDK module versions

Release (2025-09-18)

Module Highlights

  • github.com/aws/smithy-go/aws-http-auth: v1.1.0
    • Feature: Added support for SIG4/SIGV4A querystring authentication.

Release (2025-08-27)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

... (truncated)

Commits

Updates github.com/nats-io/nats.go from 1.48.0 to 1.49.0

Release notes

Sourced from github.com/nats-io/nats.go's releases.

Release v1.49.0

Changelog

ADDED

  • Core NATS:
    • IgnoreDiscoveredServers option for skipping advertised servers (#2022)
    • Reconnect to selected server callback option #1958)
    • Set custom server pool (#1958)
  • KeyValue:
    • Config() method for KeyValueStatus (#2014)

FIXED

  • Core NATS:
    • Only remove requested status listener (#1991)
  • JetStream:
    • Cleanup JS Publisher Status Channel (#1993)
  • Legacy JetStream:
    • Fix nil pointer dereference in ConsumerInfo. Thanks @​olde-ducke for the contribution (#1987)
  • Object store:
    • Use default timeout on object Put when context has no deadline (#2013)

IMPROVED

Complete Changes

nats-io/nats.go@v1.48.0...v1.49.0

Commits
  • d85a35e Release v1.49.0 (#2025)
  • 0d5e984 [IMPROVED] Add JetStream migration guide (#2023)
  • fff2d63 [FIXED] Use default timeout on object Put when context has no deadline (#2013)
  • ca4790e [IMPROVED] Fix code examples, API signatures and technical typos in jetstream...
  • e987dbe [IMPROVED] Fix bug in constant name TimeStampHeader (#2019)
  • 5b2c617 [ADDED] Config method for KeyValueStatus (#2014)
  • 4667f93 [ADDED] Reconnect to selected server and custom server pool (#1958)
  • f89e0bd [ADDED] IgnoreDiscoveredServers option for skipping advertised servers (#2022)
  • b9f59ec [IMPROVED] Use correct comparative form in PullMaxBytes validation messages (...
  • aa67684 [IMPROVED] Fix doc comments for ListKeysFiltered and ListKeys methods (#2017)
  • Additional commits viewable in compare view

Updates github.com/twmb/franz-go from 1.20.6 to 1.20.7

Changelog

Sourced from github.com/twmb/franz-go's changelog.

v1.20.7

This patch release fixes numerous niche bugs - some user reported, some found while investigating other things - contains a few behavior improvements, extensive kfake additions, and many test additions / improvements.

There have been extensive additions to kfake over the course of the past month; kfake now supports transactions, the next generation consumer group protocol, and more Kafka APIs. franz-go integration tests now run and pass against kfake in CI.

Testing has further been extensively improved: integration tests now run against the latest patch version of Kafka for all major Kafka versions going back to 0.11.0. The existing test suite has been extended to run while opting into the next generation consumer group. An integration test against Kerberos has been added. For ~roughly the past year (maybe half year), all bugs found have had regression tests added in kfake. This release massively extends the kfake test suite -- both with behavior tests that were ported via Claude directly to franz-go (with license attribution!) and with behavior tests that Claude generated specifically for kfake.

The "next generation" (KIP-848) consumer group code in franz-go itself has some improvements. These improvements were found after adding 848 code to kfake, which allowed for much faster integration test looping. This looping was still very slow for what it's worth; towards the end, integration tests would pass ~40+ times with race mode over the course of two hours before failing once. Claude was instrumental with adding appropriate log lines and tracing logs for diagnosing extremely niche failures; things also got slower when a few specific log lines that would've helped weren't added the first time...

Anyway,

Bug fixes

  • Returns from PollRecords / PollFetches that contained ONLY an error (context cancellation or something) previously did not block rebalances, even if you opted into BlockRebalanceOnPoll.

  • If, while idempotently producing, the client encountered TIMED_OUT while producing (retryable), the client considered this a "we definitively did not produce" state, and allowed you to cancel the records. Well, maybe the records actually did get produced broker side eventually, and now you re-produce new records - the NEW records could be "deduplicated" due to how idempotency works. This one is a bit niche, if you're interested, you should read #1217 and the two PRs that address it.

  • My original implementation of how Kerberos handled authentication was correct... for the time. I missed how it should have been touched up years ago and now 4.0 hard deprecates the old auth flow. So, that's been found,

... (truncated)

Commits
  • ae75cac Merge pull request #1258 from twmb/cl
  • fd4189c Merge pull request #1259 from twmb/kfake_again
  • 1dc1b71 kfake: bump group epoch on topic change to ensure assignment resend
  • 60adeb2 changelog: note incoming v1.20.7
  • 175c77f Merge pull request #1257 from twmb/examples
  • 84bc833 examples: add testing with kfake example
  • 6999fb8 Merge pull request #1236 from twmb/1195
  • dba723b Merge pull request #1256 from twmb/kfake
  • 764eb29 kgo: unlinger partitions in ProduceSync to avoid linger delay
  • 4f75931 kfake: fix KIP-848 topic change notification race
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.259.0 to 0.269.0

Release notes

Sourced from google.golang.org/api's releases.

v0.269.0

0.269.0 (2026-02-24)

Features

Bug Fixes

  • generator: Handle preview version pkg name (#3511) (2a249ce)

v0.268.0

0.268.0 (2026-02-23)

Features

v0.267.0

0.267.0 (2026-02-17)

Features

v0.266.0

0.266.0 (2026-02-10)

Features

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.269.0 (2026-02-24)

Features

Bug Fixes

  • generator: Handle preview version pkg name (#3511) (2a249ce)

0.268.0 (2026-02-23)

Features

0.267.0 (2026-02-17)

Features

0.266.0 (2026-02-10)

Features

... (truncated)

Commits

Updates google.golang.org/grpc from 1.78.0 to 1.79.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.79.1

Bug Fixes

Release 1.79.0

API Changes

  • mem: Add experimental API SetDefaultBufferPool to change the default buffer pool. (#8806)
  • experimental/stats: Update MetricsRecorder to require embedding the new UnimplementedMetricsRecorder (a no-op struct) in all implementations for forward compatibility. (#8780)

Behavior Changes

  • balancer/weightedtarget: Remove handling of Addresses and only handle Endpoints in resolver updates. (#8841)

New Features

  • experimental/stats: Add support for asynchronous gauge metrics through the new AsyncMetricReporter and RegisterAsyncReporter APIs. (#8780)
  • pickfirst: Add support for weighted random shuffling of endpoints, as described in gRFC A113.
    • This is enabled by default, and can be turned off using the environment variable GRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING. (#8864)
  • xds: Implement :authority rewriting, as specified in gRFC A81. (#8779)
  • balancer/randomsubsetting: Implement the random_subsetting LB policy, as specified in gRFC A68. (#8650)

Bug Fixes

  • credentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (#8726)
  • xds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in CONNECTING state. (#8813)
  • health: Fix a bug where health checks failed for clients using legacy compression options (WithDecompressor or RPCDecompressor). (#8765)
  • transport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (#8769)
  • server: Propagate status detail headers, if available, when terminating a stream during request header processing. (#8754)

Performance Improvements

  • credentials/alts: Optimize read buffer alignment to reduce copies. (#8791)
  • mem: Optimize pooling and creation of buffer objects. (#8784)
  • transport: Reduce slice re-allocations by reserving slice capacity. (#8797)
Commits

Updates github.com/redis/rueidis from 1.0.71 to 1.0.72

Release notes

Sourced from github.com/redis/rueidis's releases.

1.0.72

Changes

  • feat: add Client method to compat interface (#956)
  • feat: add new XCFGSET command (#952)
  • feat: Add MGet method to cachecompat (#950)
  • feat: add IDMPAUTO and IDMP parameters to XADD command (#942)
  • feat: add HOTKEYS command (#941)
  • fix: correct the position of KEEPREF, DELREF, and ACKED for XADD (#946)
  • fix: correct xadd and xtrim in compat with approx=false (#943)
  • fix: race condition in Lua script SHA-1 loading
  • fix: avoid RDMA polls from hanging by draining cq before polling the cq fd

Contributors

We'd like to thank all the contributors who worked on this release!

@​akshaykhairmode, @​dalaoqi, @​jinbum-kim, @​rueian and @​wckd

Commits
  • 76ba064 feat: bump v1.0.72
  • 1139206 add Client method to compat and interface (#956)
  • d8b091c feat: add new XCFGSET command (#952)
  • 29e2c2c Add MGet method to cachecompat (#950)
  • 195eed4 fix: race condition in Lua script SHA-1 loading (#108)
  • b093580 fix: avoid poll to hang by draining cq before polling the cq fd (#106)
  • 5696be8 fix: correct the position of KEEPREF, DELREF, and ACKED for XADD (#946)
  • f137550 feat: add IDMPAUTO and IDMP parameters to XADD command (#942)
  • 6038400 feat: add HOTKEYS command (#941)
  • c9f569c fix(xadd,xtrim): when approx is false, should have = (#943)
  • See full diff in compare view

Updates golang.org/x/net from 0.50.0 to 0.51.0

Commits
  • 60b3f6f internal/http3: prevent Server handler from writing longer body than declared
  • b0ca456 internal/http3: fix Write in Server Handler returning the wrong value
  • 1558ba7 publicsuffix: update to 2026-02-06
  • 4e1c745 internal/http3: make Server response include headers that can be inferred
  • 19f580f http2: fix nil panic in typeFrameParser for unassigned frame types
  • 818aad7 internal/http3: add server to client trailer header support
  • c1bbe1a internal/http3: add client to server trailer header support
  • 29181b8 all: remove go1.25 and older build constraints
  • 8109305 all: upgrade go directive to at least 1.25.0 [generated]
  • 0b37bdf quic: don't run TestStreamsCreateConcurrency in synctest bubble
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the go-packages group with 12 updates
dbec990 
Bumps the go-packages group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.1` | `1.41.2` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.7` | `1.32.10` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.19.7` | `1.19.10` |
| [github.com/aws/aws-sdk-go-v2/service/sqs](https://github.com/aws/aws-sdk-go-v2) | `1.42.21` | `1.42.22` |
| [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.41.6` | `1.41.7` |
| [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.24.0` | `1.24.1` |
| [github.com/nats-io/nats.go](https://github.com/nats-io/nats.go) | `1.48.0` | `1.49.0` |
| [github.com/twmb/franz-go](https://github.com/twmb/franz-go) | `1.20.6` | `1.20.7` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.259.0` | `0.269.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.78.0` | `1.79.1` |
| [github.com/redis/rueidis](https://github.com/redis/rueidis) | `1.0.71` | `1.0.72` |
| [golang.org/x/net](https://github.com/golang/net) | `0.50.0` | `0.51.0` |


Updates `github.com/aws/aws-sdk-go-v2` from 1.41.1 to 1.41.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.41.1...v1.41.2)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.7 to 1.32.10
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.32.7...config/v1.32.10)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.7 to 1.19.10
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/m2/v1.19.7...service/iam/v1.19.10)

Updates `github.com/aws/aws-sdk-go-v2/service/sqs` from 1.42.21 to 1.42.22
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/sqs/v1.42.21...service/sqs/v1.42.22)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.41.6 to 1.41.7
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/sts/v1.41.6...service/sts/v1.41.7)

Updates `github.com/aws/smithy-go` from 1.24.0 to 1.24.1
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.24.0...v1.24.1)

Updates `github.com/nats-io/nats.go` from 1.48.0 to 1.49.0
- [Release notes](https://github.com/nats-io/nats.go/releases)
- [Commits](nats-io/nats.go@v1.48.0...v1.49.0)

Updates `github.com/twmb/franz-go` from 1.20.6 to 1.20.7
- [Changelog](https://github.com/twmb/franz-go/blob/master/CHANGELOG.md)
- [Commits](twmb/franz-go@v1.20.6...v1.20.7)

Updates `google.golang.org/api` from 0.259.0 to 0.269.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.259.0...v0.269.0)

Updates `google.golang.org/grpc` from 1.78.0 to 1.79.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.78.0...v1.79.1)

Updates `github.com/redis/rueidis` from 1.0.71 to 1.0.72
- [Release notes](https://github.com/redis/rueidis/releases)
- [Commits](redis/rueidis@v1.0.71...v1.0.72)

Updates `golang.org/x/net` from 0.50.0 to 0.51.0
- [Commits](golang/net@v0.50.0...v0.51.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.41.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-packages
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-packages
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.19.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-packages
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sqs
  dependency-version: 1.42.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-packages
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.41.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-packages
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-packages
- dependency-name: github.com/nats-io/nats.go
  dependency-version: 1.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-packages
- dependency-name: github.com/twmb/franz-go
  dependency-version: 1.20.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-packages
- dependency-name: google.golang.org/api
  dependency-version: 0.269.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-packages
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-packages
- dependency-name: github.com/redis/rueidis
  dependency-version: 1.0.72
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-packages
- dependency-name: golang.org/x/net
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 1, 2026
@FZambia FZambia merged commit b554cad into master Mar 2, 2026
6 checks passed
@dependabot dependabot bot deleted the dependabot/go_modules/go-packages-86fcfb6e06 branch March 2, 2026 21:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@FZambia