Skip to content

Chore(deps): Bump the minor-and-patch group across 1 directory with 3 updates#1030

Closed
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/go_modules/minor-and-patch-c4911fef38
Closed

Chore(deps): Bump the minor-and-patch group across 1 directory with 3 updates#1030
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/go_modules/minor-and-patch-c4911fef38

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2026 •
edited
Loading

Bumps the minor-and-patch group with 3 updates in the / directory: github.com/getsentry/sentry-go, github.com/lib/pq and github.com/twilio/twilio-go.

Updates github.com/getsentry/sentry-go from 0.41.0 to 0.42.0

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.42.0

Breaking Changes 🛠

  • refactor Telemetry Processor to use TelemetryItem instead of ItemConvertible by @​giortzisg in #1180
    • remove ToEnvelopeItem from single log items
    • rename TelemetryBuffer to Telemetry Processor to adhere to spec
    • remove unsed ToEnvelopeItem(dsn) from Event.

New Features ✨

  • Add metric support by @​aldy505 in #1151
    • support for three metric methods (counter, gauge, distribution)
    • custom metric units
    • unexport batchlogger

Internal Changes 🔧

Release

Other

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.42.0

Breaking Changes 🛠

  • refactor Telemetry Processor to use TelemetryItem instead of ItemConvertible by @​giortzisg in #1180
    • remove ToEnvelopeItem from single log items
    • rename TelemetryBuffer to Telemetry Processor to adhere to spec
    • remove unsed ToEnvelopeItem(dsn) from Event.

New Features ✨

  • Add metric support by @​aldy505 in #1151
    • support for three metric methods (counter, gauge, distribution)
    • custom metric units
    • unexport batchlogger

Internal Changes 🔧

Release

Other

Commits

Updates github.com/lib/pq from 1.10.9 to 1.11.1

Release notes

Sourced from github.com/lib/pq's releases.

v1.11.1

This fixes two regressions present in the v1.11.0 release:

  • Fix build on 32bit systems, Windows, and Plan 9 (#1253).

  • Named []byte types and pointers to []byte (e.g. *[]byte, json.RawMessage) would be treated as an array instead of bytea (#1252).

#1252: lib/pq#1252 #1253: lib/pq#1253

v1.11.0

This version of pq requires Go 1.21 or newer.

pq now supports only maintained PostgreSQL releases, which is PostgreSQL 14 and newer. Previously PostgreSQL 8.4 and newer were supported.

Features

  • The pq.Error.Error() text includes the position of the error (if reported by PostgreSQL) and SQLSTATE code (#1219, #1224):

    pq: column "columndoesntexist" does not exist at column 8 (42703)
pq: syntax error at or near ")" at position 2:71 (42601)

  • The pq.Error.ErrorWithDetail() method prints a more detailed multiline message, with the Detail, Hint, and error position (if any) (#1219):

    ERROR:   syntax error at or near ")" (42601)
CONTEXT: line 12, column 1:

     10 |     name           varchar,
 11 |     version        varchar,
 12 | );
      ^

  • Add Config, NewConfig(), and NewConnectorConfig() to supply connection details in a more structured way (#1240).

  • Support hostaddr and $PGHOSTADDR (#1243).

  • Support multiple values in host, port, and hostaddr, which are each tried in order, or randomly if load_balance_hosts=random is set (#1246).

  • Support target_session_attrs connection parameter (#1246).

  • Support [sslnegotiation] to use SSL without negotiation (#1180).

  • Allow using a custom tls.Config, for example for encrypted keys (#1228).

  • Add PQGO_DEBUG=1 print the communication with PostgreSQL to stderr, to aid in debugging, testing, and bug reports (#1223).

  • Add support for NamedValueChecker interface (#1125, #1238).

Fixes

... (truncated)

Changelog

Sourced from github.com/lib/pq's changelog.

v1.11.1 (2025-01-29)

This fixes two regressions present in the v1.11.0 release:

  • Fix build on 32bit systems, Windows, and Plan 9 (#1253).

  • Named []byte types and pointers to []byte (e.g. *[]byte, json.RawMessage) would be treated as an array instead of bytea (#1252).

#1252: lib/pq#1252 #1253: lib/pq#1253

v1.11.0 (2025-01-28)

This version of pq requires Go 1.21 or newer.

pq now supports only maintained PostgreSQL releases, which is PostgreSQL 14 and newer. Previously PostgreSQL 8.4 and newer were supported.

Features

  • The pq.Error.Error() text includes the position of the error (if reported by PostgreSQL) and SQLSTATE code (#1219, #1224):

    pq: column "columndoesntexist" does not exist at column 8 (42703)
pq: syntax error at or near ")" at position 2:71 (42601)

  • The pq.Error.ErrorWithDetail() method prints a more detailed multiline message, with the Detail, Hint, and error position (if any) (#1219):

    ERROR:   syntax error at or near ")" (42601)
CONTEXT: line 12, column 1:

     10 |     name           varchar,
 11 |     version        varchar,
 12 | );
      ^

  • Add Config, NewConfig(), and NewConnectorConfig() to supply connection details in a more structured way (#1240).

  • Support hostaddr and $PGHOSTADDR (#1243).

  • Support multiple values in host, port, and hostaddr, which are each tried in order, or randomly if load_balance_hosts=random is set (#1246).

  • Support target_session_attrs connection parameter (#1246).

  • Support [sslnegotiation] to use SSL without negotiation (#1180).

... (truncated)

Commits
  • eec526c Release v1.11.1 (#1255)
  • 1928a1d Fix []byte types incorrectly converted to PostgreSQL array (#1252)
  • 9e2aa8e Run staticcheck on all GOOS/GOARCH combinations
  • c9320c4 Fix build on Windows and Plan9
  • 2809526 Fix build on 32bit systems
  • 8e88f7e Release 1.11.0
  • 0ad3049 Handle pre-protocol errors to prevent memory exhaustion
  • f1fae2e Add pqtest.Fake.Close()
  • 3815d03 Remove assumption that the auth response is AuthenticateOk
  • 589ad43 Implement load_balance_hosts=random
  • Additional commits viewable in compare view

Updates github.com/twilio/twilio-go from 1.29.1 to 1.30.0

Release notes

Sourced from github.com/twilio/twilio-go's releases.

v1.30.0

Release Notes

Library - Chore

Library - Feature

Twiml

  • Added support for and inside

Assistants

  • AI Assistants v1 release

Autopilot

  • Remove Export resource from Autopilot Assistant
  • Add dialogue_sid param to Query list resource
  • Add Restore resource to Autopilot Assistant
  • Add one new property in Query i.e dialogue_sid
  • Add Export resource to Autopilot Assistant.
  • Adds two new properties in Assistant i.e needs_model_build and development_stage
  • Add Webhooks resource to Autopilot Assistant.
  • Introduce autopilot subdomain with all resources from preview.understand

Compliance

  • Added the new InventoryComplianceInsights API under version /v1.

Content

  • changes for adding v2 endpoints

Marketplace

  • Initial transition to Marketplace domain

Memory

  • API Changes

  • 2026-01-15

  • No path changes (updated metadata only)

  • 2026-01-13

  • Added 1 new path(s):
  • /v1/Stores/{storeId}/Profiles/{profileId}/ConversationSummaries/{summaryId} (DeleteProfileConversationSummary)

  • 2026-01-12

  • No path changes (updated metadata only)

  • 2026-01-12

  • No path changes (updated metadata only)

  • 2026-01-12

  • No path changes (updated metadata only)

... (truncated)

Changelog

Sourced from github.com/twilio/twilio-go's changelog.

[2026-01-22] Version 1.30.0

Library - Chore

Library - Feature

Twiml

  • Added support for and inside

Assistants

  • AI Assistants v1 release

Autopilot

  • Remove Export resource from Autopilot Assistant
  • Add dialogue_sid param to Query list resource
  • Add Restore resource to Autopilot Assistant
  • Add one new property in Query i.e dialogue_sid
  • Add Export resource to Autopilot Assistant.
  • Adds two new properties in Assistant i.e needs_model_build and development_stage
  • Add Webhooks resource to Autopilot Assistant.
  • Introduce autopilot subdomain with all resources from preview.understand

Compliance

  • Added the new InventoryComplianceInsights API under version /v1.

Content

  • changes for adding v2 endpoints

Marketplace

  • Initial transition to Marketplace domain

Memory

  • API Changes

  • 2026-01-15

  • No path changes (updated metadata only)

  • 2026-01-13

  • Added 1 new path(s):
  • /v1/Stores/{storeId}/Profiles/{profileId}/ConversationSummaries/{summaryId} (DeleteProfileConversationSummary)

  • 2026-01-12

  • No path changes (updated metadata only)

  • 2026-01-12

  • No path changes (updated metadata only)

  • 2026-01-12

  • No path changes (updated metadata only)

  • 2026-01-12

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Chore(deps): Bump the minor-and-patch group across 1 directory with 3…
0a9a511 
… updates

Bumps the minor-and-patch group with 3 updates in the / directory: [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go), [github.com/lib/pq](https://github.com/lib/pq) and [github.com/twilio/twilio-go](https://github.com/twilio/twilio-go).


Updates `github.com/getsentry/sentry-go` from 0.41.0 to 0.42.0
- [Release notes](https://github.com/getsentry/sentry-go/releases)
- [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-go@v0.41.0...v0.42.0)

Updates `github.com/lib/pq` from 1.10.9 to 1.11.1
- [Release notes](https://github.com/lib/pq/releases)
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md)
- [Commits](lib/pq@v1.10.9...v1.11.1)

Updates `github.com/twilio/twilio-go` from 1.29.1 to 1.30.0
- [Release notes](https://github.com/twilio/twilio-go/releases)
- [Changelog](https://github.com/twilio/twilio-go/blob/main/CHANGES.md)
- [Commits](twilio/twilio-go@v1.29.1...v1.30.0)

---
updated-dependencies:
- dependency-name: github.com/getsentry/sentry-go
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/lib/pq
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/twilio/twilio-go
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 1, 2026
Copilot AI review requested due to automatic review settings February 1, 2026 02:09
@dependabot dependabot bot added the go Pull requests that update Go code label Feb 1, 2026
Copilot AI reviewed Feb 1, 2026
View reviewed changes
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@dependabot dependabot bot temporarily deployed to Receiver Registration - E2E Integration Tests (Stellar) February 1, 2026 02:09 Inactive
@dependabot dependabot bot temporarily deployed to Internal SEP Tests February 1, 2026 02:09 Inactive
@socket-security
Copy link

socket-security bot commented Feb 1, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedgolang/​github.com/​getsentry/​sentry-go@​v0.41.0 ⏵ v0.42.073100100100100
Updatedgolang/​github.com/​twilio/​twilio-go@​v1.29.1 ⏵ v1.30.074 +1100100100100
Updatedgolang/​github.com/​lib/​pq@​v1.10.9 ⏵ v1.11.185 -8100100100100

View full report

@socket-security
Copy link

socket-security bot commented Feb 1, 2026

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: golang github.com/lib/pq is 98.0% likely obfuscated

Confidence: 0.98

Location: Package overview

From: go.mod → golang/github.com/lib/pq@v1.11.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/github.com/lib/pq@v1.11.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
License policy violation: golang github.com/twilio/twilio-go under BSD-3-Clause AND MIT

Location: Package overview

From: go.mod → golang/github.com/twilio/twilio-go@v1.30.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/github.com/twilio/twilio-go@v1.30.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 3, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Feb 3, 2026
@dependabot dependabot bot deleted the dependabot/go_modules/minor-and-patch-c4911fef38 branch February 3, 2026 16:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants