Bump the support-dependencies group with 11 updates by dependabot[bot] · Pull Request #319 · readium/go-toolkit

dependabot · 2026-08-01T10:06:30Z

Bumps the support-dependencies group with 11 updates:

Package	From	To
cloud.google.com/go/storage	`1.63.0`	`1.64.0`
github.com/antchfx/xpath	`1.3.6`	`1.3.8`
github.com/aws/aws-sdk-go-v2	`1.42.0`	`1.43.1`
github.com/aws/aws-sdk-go-v2/service/s3	`1.104.1`	`1.106.1`
github.com/aws/smithy-go	`1.27.1`	`1.27.5`
github.com/relvacode/iso8601	`1.7.0`	`1.8.0`
golang.org/x/image	`0.43.0`	`0.44.0`
golang.org/x/net	`0.56.0`	`0.57.0`
golang.org/x/sync	`0.21.0`	`0.22.0`
golang.org/x/text	`0.38.0`	`0.40.0`
google.golang.org/api	`0.285.0`	`0.287.1`

Updates cloud.google.com/go/storage from 1.63.0 to 1.64.0

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.64.0

1.64.0 (2026-07-21)

Features

storage: Accept CRC32C for appendable objects (#20104) (1b2f5af)

storage: v1.63.1

1.63.1 (2026-07-13)

Features

o11y: Regenerate clients for LRO tracing (#20107) (779074e)

Bug Fixes

storage: Minor documentation fix (#20139) (37f1745)

Commits

1a476c1 chore: librarian release pull request: 20260521T182442Z (#14627)
dd8448b fix(pubsub/v2): manage exactly once spans properly on failure (#14559)
b54d7a4 feat(firestore): support Transaction ReadTime (#14615)
6641db8 feat: update API sources and regenerate (#14621)
e753126 chore: librarian release pull request: 20260519T161341Z (#14617)
593f67d chore: update librarian to v0.14.0 (#14619)
66c66c5 feat(firestore): add Data and DataTo methods to AggregationResult (#14592)
0a8d10d fix(datastore): detach rollback context from transaction cancellation (#14602)
d52fff4 chore(all): update module cloud.google.com/go/longrunning to v1 (main) (#14606)
d29f68a feat(storage): read checksums in gRPC partial reads (#14586)
Additional commits viewable in compare view

Updates github.com/antchfx/xpath from 1.3.6 to 1.3.8

Release notes

Sourced from github.com/antchfx/xpath's releases.

v1.3.8

What's Changed

Format numbers per the XPath 1.0 string() rules by @gaoflow in antchfx/xpath#125

Fix remaining XPath comparison coercion edge cases by @floze-the-genius in antchfx/xpath#127

fix: round() and mod follow the XPath 1.0 numeric spec by @gaoflow in antchfx/xpath#128

Reject undeclared variables nested in an expression by @AruneshDwivedi in antchfx/xpath#129

parse: '' is not a name character (§3.7) — fix nameexpr lexing (#126) by @alonsoalpizar in antchfx/xpath#130

v1.3.7

Merged PR:

#123 (@c-tonneslan)

#124(@3leapsdave)

Commits

d666d4b Merge PR #130: Fix name*expr lexing XPath §3.7 specification
bb27328 Merge PR #129: Fix handling of undeclared variables like $test in expressions
4d32f25 Merge PR #128 (fix: round() and mod operator)
401df59 Merge PR #127
5c1d918 parse: '*' is not a name character (XPath 1.0 §3.7)
52c3ea6 Reject undeclared variables nested in an expression
0594b22 fix: round() and mod follow the XPath 1.0 numeric spec
4b44084 fix XPath comparison coercion edge cases
43837f1 #126，fix the following boolean expression: '14' > 0，'abc' = 1，`'2' < '10'...
30af867 Merge PR #125
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.42.0 to 1.43.1

Commits

5cf37fb Release 2026-07-28
63ee662 Regenerated Clients
c4668b7 Update API model
8599448 Migrate serde2 kitchensink eventstream tests to smithy-go/eventstream (#3498)
8aed63b enable schema-serde cbor wave 2 (#3496)
bd84643 Fix transfer manager v2 uploader flaky test (#3489)
a154dc4 update to smithy-go v1.27.5 (#3495)
6d541c7 Add SSE-C, versionId and other fields to the first HeadObject call on Transfe...
b5dd9bb Release 2026-07-27
f49231d Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.104.1 to 1.106.1

Commits

5cf37fb Release 2026-07-28
63ee662 Regenerated Clients
c4668b7 Update API model
8599448 Migrate serde2 kitchensink eventstream tests to smithy-go/eventstream (#3498)
8aed63b enable schema-serde cbor wave 2 (#3496)
bd84643 Fix transfer manager v2 uploader flaky test (#3489)
a154dc4 update to smithy-go v1.27.5 (#3495)
6d541c7 Add SSE-C, versionId and other fields to the first HeadObject call on Transfe...
b5dd9bb Release 2026-07-27
f49231d Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/smithy-go from 1.27.1 to 1.27.5

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-07-31)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.6

Bug Fix: Fix failure to deserialize any @httpPayload struct with a non-string member.

Bug Fix: Fix failure to serialize any @httpPayload struct with a nested struct.

Release (2026-07-27)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.5

Bug Fix: Fix a performance issue in awsQuery with large response payloads.

Release (2026-07-16)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go/aws-http-auth: v1.2.1

Bug Fix: Use r.URL.Host when r.Host is unset.

github.com/aws/smithy-go/aws-http-auth-schemes: v1.0.0

Release: Module github.com/aws/smithy-go/aws-http-auth-schemes adds generic smithy-go client support for AWS Sigv4 and Sigv4a.

Release (2026-06-26)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.3

Bug Fix: Fix bug in JSON doc encoder and endpoint host label format validation

Release (2026-06-05)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.2

Bug Fix: Fix incorrect serialization of unions in CBOR-based protocols.

Release (2026-06-04)

... (truncated)

Commits

7016ea0 Release 2026-07-27
cb3e15c add fine-grained benchmark codegen (#688)
f23de1a revert codegen version to 0.1.0
5dd90af update README
526ee94 remove wrapper and only sign release-built bundle
870555a Release 2026-07-16
b06f353 changelogs
25d4f57 add temporary maven manual publish
90775c9 make generic clients work mostly (#687)
da34ee1 add maven staging artifact
Additional commits viewable in compare view

Updates github.com/relvacode/iso8601 from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/relvacode/iso8601's releases.

v1.8.0

What's Changed

Parse ISO 8601 ordinal dates and reject malformed separators by @gaoflow in relvacode/iso8601#32

New Contributors

@gaoflow made their first contribution in relvacode/iso8601#32

Full Changelog: relvacode/iso8601@v1.7.0...v1.8.0

Commits

2cb49ab Parse ISO 8601 ordinal dates and reject malformed separators (#32)
See full diff in compare view

Updates golang.org/x/image from 0.43.0 to 0.44.0

Commits

891abcb go.mod: update golang.org/x dependencies
f50490d font: document (lack of) security hardening in font packages
7a0cfda webp: check for VP8L dimension mismatch before allocation
4339315 tiff: consistently skip horizontal padding in tiled images
See full diff in compare view

Updates golang.org/x/net from 0.56.0 to 0.57.0

Commits

b8f09f6 go.mod: update golang.org/x dependencies
f05f21b idna: reject all-ASCII xn-- labels on all Go versions
0f748cf internal/http3: clean up stream I/O methods usages in tests
0bb961e internal/http3: add net/http.ResponseController support
0ca694d webdav: document Dir's lack of defense against filesystem modification
bd5f1dc http2: initialize Transport on NewClientConn
488ff63 bpf: add security considerations to package docs
93d1f25 xsrftoken: avoid token collisions
5a3baee internal/http3: prevent panic in QPACK decoder due to overflow
See full diff in compare view

Updates golang.org/x/sync from 0.21.0 to 0.22.0

Commits

1eb64d4 semaphore: panic on negative weights
See full diff in compare view

Updates golang.org/x/text from 0.38.0 to 0.40.0

Commits

724af9c go.mod: update golang.org/x dependencies
bf5b9d6 internal/export/idna: always treat Punycode encoding pure ASCII as an error
b326f3d go.mod: update golang.org/x dependencies
5ae8e57 unicode/norm: avoid infinite loop on invalid input
0dc94a2 all: fix some comments
See full diff in compare view

Updates google.golang.org/api from 0.285.0 to 0.287.1

Release notes

Sourced from google.golang.org/api's releases.

v0.287.1

0.287.1 (2026-07-07)

Documentation

Remove old TODO file (#3645) (9d7a6b8)

v0.287.0

0.287.0 (2026-06-30)

Features

all: Auto-regenerate discovery clients (#3635) (504873e)

all: Auto-regenerate discovery clients (#3637) (5c975be)

all: Auto-regenerate discovery clients (#3639) (9737c4b)

v0.286.0

0.286.0 (2026-06-22)

Features

all: Auto-regenerate discovery clients (#3629) (f25a08b)

all: Auto-regenerate discovery clients (#3631) (b3bb97f)

all: Auto-regenerate discovery clients (#3632) (7332dd7)

all: Auto-regenerate discovery clients (#3634) (36081a0)

Changelog

Sourced from google.golang.org/api's changelog.

0.287.1 (2026-07-07)

Documentation

Remove old TODO file (#3645) (9d7a6b8)

0.287.0 (2026-06-30)

Features

all: Auto-regenerate discovery clients (#3635) (504873e)

all: Auto-regenerate discovery clients (#3637) (5c975be)

all: Auto-regenerate discovery clients (#3639) (9737c4b)

0.286.0 (2026-06-22)

Features

all: Auto-regenerate discovery clients (#3629) (f25a08b)

all: Auto-regenerate discovery clients (#3631) (b3bb97f)

all: Auto-regenerate discovery clients (#3632) (7332dd7)

all: Auto-regenerate discovery clients (#3634) (36081a0)

Commits

93d63e8 chore(main): release 0.287.1 (#3646)
9d7a6b8 docs: remove old TODO file (#3645)
576018f chore(all): update all (#3644)
cc70265 chore(deps): bump golang.org/x/net in /internal/kokoro/discogen (#3642)
9858f66 chore: downgrade go version in go.work (#3641)
3cb00c0 chore: downgrade min Go version (#3640)
1a444d6 chore(main): release 0.287.0 (#3636)
9737c4b feat(all): auto-regenerate discovery clients (#3639)
f0d27e8 chore(all): update all (#3638)
5c975be feat(all): auto-regenerate discovery clients (#3637)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the support-dependencies group with 11 updates: | Package | From | To | | --- | --- | --- | | [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.63.0` | `1.64.0` | | [github.com/antchfx/xpath](https://github.com/antchfx/xpath) | `1.3.6` | `1.3.8` | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.42.0` | `1.43.1` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.104.1` | `1.106.1` | | [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.27.1` | `1.27.5` | | [github.com/relvacode/iso8601](https://github.com/relvacode/iso8601) | `1.7.0` | `1.8.0` | | [golang.org/x/image](https://github.com/golang/image) | `0.43.0` | `0.44.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.56.0` | `0.57.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.21.0` | `0.22.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.38.0` | `0.40.0` | | [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.285.0` | `0.287.1` | Updates `cloud.google.com/go/storage` from 1.63.0 to 1.64.0 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@compute/v1.63.0...compute/v1.64.0) Updates `github.com/antchfx/xpath` from 1.3.6 to 1.3.8 - [Release notes](https://github.com/antchfx/xpath/releases) - [Commits](antchfx/xpath@v1.3.6...v1.3.8) Updates `github.com/aws/aws-sdk-go-v2` from 1.42.0 to 1.43.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.42.0...v1.43.1) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.104.1 to 1.106.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.104.1...service/s3/v1.106.1) Updates `github.com/aws/smithy-go` from 1.27.1 to 1.27.5 - [Release notes](https://github.com/aws/smithy-go/releases) - [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md) - [Commits](aws/smithy-go@v1.27.1...v1.27.5) Updates `github.com/relvacode/iso8601` from 1.7.0 to 1.8.0 - [Release notes](https://github.com/relvacode/iso8601/releases) - [Commits](relvacode/iso8601@v1.7.0...v1.8.0) Updates `golang.org/x/image` from 0.43.0 to 0.44.0 - [Commits](golang/image@v0.43.0...v0.44.0) Updates `golang.org/x/net` from 0.56.0 to 0.57.0 - [Commits](golang/net@v0.56.0...v0.57.0) Updates `golang.org/x/sync` from 0.21.0 to 0.22.0 - [Commits](golang/sync@v0.21.0...v0.22.0) Updates `golang.org/x/text` from 0.38.0 to 0.40.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.38.0...v0.40.0) Updates `google.golang.org/api` from 0.285.0 to 0.287.1 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.285.0...v0.287.1) --- updated-dependencies: - dependency-name: cloud.google.com/go/storage dependency-version: 1.64.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: support-dependencies - dependency-name: github.com/antchfx/xpath dependency-version: 1.3.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: support-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.43.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: support-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.106.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: support-dependencies - dependency-name: github.com/aws/smithy-go dependency-version: 1.27.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: support-dependencies - dependency-name: github.com/relvacode/iso8601 dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: support-dependencies - dependency-name: golang.org/x/image dependency-version: 0.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: support-dependencies - dependency-name: golang.org/x/net dependency-version: 0.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: support-dependencies - dependency-name: golang.org/x/sync dependency-version: 0.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: support-dependencies - dependency-name: golang.org/x/text dependency-version: 0.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: support-dependencies - dependency-name: google.golang.org/api dependency-version: 0.287.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: support-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 1, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the support-dependencies group with 11 updates - #319

Bump the support-dependencies group with 11 updates#319
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/support-dependencies-5f5825c78f

dependabot Bot commented on behalf of github Aug 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 1, 2026

storage: v1.64.0

1.64.0 (2026-07-21)

Features

storage: v1.63.1

1.63.1 (2026-07-13)

Features

Bug Fixes

v1.3.8

What's Changed

v1.3.7

Release (2026-07-31)

General Highlights

Module Highlights

Release (2026-07-27)

General Highlights

Module Highlights

Release (2026-07-16)

General Highlights

Module Highlights

Release (2026-06-26)

General Highlights

Module Highlights

Release (2026-06-05)

General Highlights

Module Highlights

Release (2026-06-04)

v1.8.0

What's Changed

New Contributors

v0.287.1

0.287.1 (2026-07-07)

Documentation

v0.287.0

0.287.0 (2026-06-30)

Features

v0.286.0

0.286.0 (2026-06-22)

Features

0.287.1 (2026-07-07)

Documentation

0.287.0 (2026-06-30)

Features

0.286.0 (2026-06-22)

Features

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants