Skip to content

build(deps): Bump the all-go group across 1 directory with 8 updates - #3451

Merged
tac0turtle merged 5 commits into
mainfrom
dependabot/go_modules/all-go-ac0a795483
Sep 16, 2026
Merged

build(deps): Bump the all-go group across 1 directory with 8 updates#3451
tac0turtle merged 5 commits into
mainfrom
dependabot/go_modules/all-go-ac0a795483

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-go group with 7 updates in the / directory:

Package From To
connectrpc.com/connect 1.20.0 1.21.0
github.com/aws/aws-sdk-go-v2 1.46.0 1.47.0
github.com/aws/aws-sdk-go-v2/config 1.33.3 1.33.4
github.com/aws/aws-sdk-go-v2/service/kms 1.59.0 1.60.0
github.com/celestiaorg/nmt 0.24.4 0.24.5
golang.org/x/crypto 0.56.0 0.57.0
golang.org/x/net 0.58.0 0.59.0

Updates connectrpc.com/connect from 1.20.0 to 1.21.0

Release notes

Sourced from connectrpc.com/connect's releases.

v1.21.0

What's Changed

[!IMPORTANT]

This release adds a security-related feature for servers. The new handler option WithRequestGate runs after the request headers are available and before any message is received. Use this new option to register checks (e.g. authentication) that should happen before the request is decompressed or unmarshaled, and before any interceptors are run. See the documentation for details.

Governance

Enhancements

Bugfixes

New Contributors

Full Changelog: connectrpc/connect-go@v1.20.0...v1.21.0

Commits
  • 41b7f30 Prepare for v1.21.0 (#972)
  • 6058c20 Fix dropped headers on errStreamingClientConn (#964)
  • 014693a Refine WithRequestGate API and documentation (#968)
  • d9b4b1d Create release binary for protoc-gen-connect-go (#966)
  • 5111260 Add WithRequestGate handler option (#962)
  • febfc19 Fix panic in stream Spec and Peer when client construction failed (#959)
  • cb5da57 Update Go version for CI (#958)
  • 9646326 Only send a 304 when the request was a GET (#957)
  • 2a02fea Fix connect.WithGRPC typo in the missing client option error (#956)
  • eae42d2 Fix off-by-one in WithHTTPGetMaxURLSize URL length check (#955)
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.46.0 to 1.47.0

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.3 to 1.33.4

Commits

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.59.0 to 1.60.0

Commits

Updates github.com/celestiaorg/nmt from 0.24.4 to 0.24.5

Release notes

Sourced from github.com/celestiaorg/nmt's releases.

v0.24.5

What's Changed

Full Changelog: celestiaorg/nmt@v0.24.4...v0.24.5

Commits

Updates golang.org/x/crypto from 0.56.0 to 0.57.0

Commits

Updates golang.org/x/net from 0.58.0 to 0.59.0

Commits
  • 540d04c go.mod: update golang.org/x dependencies
  • 20eef7f quic: clear fast-path receive buffer on stream reset
  • c23af1b internal/http3: fix compilation error due to missed symbol name update
  • eda109f internal/http3: send appropriate error codes in STOP_SENDING frames
  • 12e0501 internal/http3: server header size limits
  • d89285e quic: add Stream.StopSending, and rework stream/application errors
  • d34deae quic: ensure Endpoint.Close waits for connection loops to exit
  • 55577aa http2: use IDNA Lookup profile, not raw Punycode translation
  • b22627e internal/http3: handle a nil TLSConfig in newQUICConfig
  • 6e98b0d internal/http3: report endpoint creation errors from initEndpoint
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.22.0 to 0.23.0

Commits
  • f75267d semaphore: panic on negative capacity
  • 3ffd83c all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): Bump the all-go group across 1 directory with 8 updates
3d80c46 
Bumps the all-go group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [connectrpc.com/connect](https://github.com/connectrpc/connect-go) | `1.20.0` | `1.21.0` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.46.0` | `1.47.0` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.3` | `1.33.4` |
| [github.com/aws/aws-sdk-go-v2/service/kms](https://github.com/aws/aws-sdk-go-v2) | `1.59.0` | `1.60.0` |
| [github.com/celestiaorg/nmt](https://github.com/celestiaorg/nmt) | `0.24.4` | `0.24.5` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.56.0` | `0.57.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.58.0` | `0.59.0` |



Updates `connectrpc.com/connect` from 1.20.0 to 1.21.0
- [Release notes](https://github.com/connectrpc/connect-go/releases)
- [Changelog](https://github.com/connectrpc/connect-go/blob/main/RELEASE.md)
- [Commits](connectrpc/connect-go@v1.20.0...v1.21.0)

Updates `github.com/aws/aws-sdk-go-v2` from 1.46.0 to 1.47.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.46.0...v1.47.0)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.3 to 1.33.4
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.33.3...config/v1.33.4)

Updates `github.com/aws/aws-sdk-go-v2/service/kms` from 1.59.0 to 1.60.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.59.0...service/s3/v1.60.0)

Updates `github.com/celestiaorg/nmt` from 0.24.4 to 0.24.5
- [Release notes](https://github.com/celestiaorg/nmt/releases)
- [Commits](celestiaorg/nmt@v0.24.4...v0.24.5)

Updates `golang.org/x/crypto` from 0.56.0 to 0.57.0
- [Commits](golang/crypto@v0.56.0...v0.57.0)

Updates `golang.org/x/net` from 0.58.0 to 0.59.0
- [Commits](golang/net@v0.58.0...v0.59.0)

Updates `golang.org/x/sync` from 0.22.0 to 0.23.0
- [Commits](golang/sync@v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: connectrpc.com/connect
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/kms
  dependency-version: 1.60.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
- dependency-name: github.com/celestiaorg/nmt
  dependency-version: 0.24.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: golang.org/x/crypto
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
- dependency-name: golang.org/x/net
  dependency-version: 0.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
- dependency-name: golang.org/x/sync
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions

github-actions Bot commented Sep 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

The latest Buf updates on your PR. Results from workflow CI / buf-check (pull_request).

BuildFormatLintBreakingUpdated (UTC)
✅ passed⏩ skipped✅ passed⏩ skippedSep 16, 2026, 9:42 AM

@coderabbitai

coderabbitai Bot commented Sep 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 5f2cb446-ca99-44bb-90ae-5f93c18e7c28

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@codecov

codecov Bot commented Sep 16, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 69.56%. Comparing base (27b6a6c) to head (1ac4911).
⚠️ Report is 4 commits behind head on main.

Additional details and impacted files 
@@            Coverage Diff             @@
##             main    #3451      +/-   ##
==========================================
+ Coverage   69.42%   69.56%   +0.13%     
==========================================
  Files         121      121              
  Lines       12010    12006       -4     
==========================================
+ Hits         8338     8352      +14     
+ Misses       3672     3654      -18
Flag Coverage Δ
combined 69.56% <100.00%> (+0.13%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@tac0turtle
tac0turtle added this pull request to the merge queue Sep 16, 2026
Merged via the queue into main with commit 3f67d1b Sep 16, 2026
30 checks passed
@tac0turtle
tac0turtle deleted the dependabot/go_modules/all-go-ac0a795483 branch September 16, 2026 10:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@tac0turtle tac0turtle tac0turtle approved these changes

Assignees

No one assigned

Labels

T:dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@tac0turtle