Visitar URL original
chore(deps): bump the minor-and-patch group across 1 directory with 15 updates by dependabot[bot] · Pull Request #783 · owncloud/reva · GitHub
Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 15 updates - #783

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/minor-and-patch-aa15b068ee
Closed

chore(deps): bump the minor-and-patch group across 1 directory with 15 updates#783
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/minor-and-patch-aa15b068ee

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 25, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the minor-and-patch group with 15 updates in the / directory:

Package From To
github.com/ceph/go-ceph 0.41.0 0.42.1
github.com/go-chi/chi/v5 5.3.2 5.5.0
github.com/go-ldap/ldap/v3 3.4.14 3.4.15
github.com/huandu/xstrings 1.6.2 1.6.3
github.com/minio/minio-go/v7 7.3.0 7.4.1
github.com/nats-io/nats-server/v2 2.15.0 2.15.1
github.com/onsi/ginkgo/v2 2.33.0 2.33.1
github.com/prometheus/client_golang 1.24.1 1.25.0
github.com/shamaton/msgpack/v2 2.4.2 2.4.4
github.com/thanhpk/randstr 1.0.6 1.0.7
golang.org/x/crypto 0.57.0 0.58.0
golang.org/x/sync 0.23.0 0.24.0
golang.org/x/sys 0.48.0 0.49.0
golang.org/x/term 0.46.0 0.47.0
golang.org/x/text 0.42.0 0.43.0

Updates github.com/ceph/go-ceph from 0.41.0 to 0.42.1

Release notes

Sourced from github.com/ceph/go-ceph's releases.

Release v0.42.1

This is a minor bugfix release meant to resolve issues in v0.42.0 when compiling the rgw package without the ceph_preview build tag. Please see PR #1355 for more details.

Please refer to the v0.42.0 release notes for the typical release information.

Release v0.42.0

The maintainers and contributors to go-ceph are pleased to announce the v0.42.0 release. This is another great step towards making it possible to use the power of the Ceph APIs in the Go language.

As this is a v0.x release we do not guarantee backwards compatibility with previous versions of the code. However, we aim not to disrupt existing consumers of the library and thus make an effort not to immediately implement breaking changes without very good justification. Please see the "Deprecations & Removals" section (if present) to get a sense of what you can expect to change in the future and prepare your code ahead of time. You may also want to view "Deprecations & Removals" of previous releases as they are not repeated here. All newly introduced APIs in the following section are labeled as "preview" APIs first, and are only available if the ceph_preview build tag is set. There is explicitly no backwards compatibility guaranteed for these until they are labeled as "stable" in a later release.

New Contributors

New Features

rados

  • rados: Add ordered omap value getters by @​anoopcs9 in ceph/go-ceph#1326
    • Adds GetOmapValuesOrdered and GetAllOmapValuesOrdered APIs to retrieve ordered omap values

rbd/admin

  • rbd/admin: Add trash purge schedule APIs by @​anoopcs9 in ceph/go-ceph#1336
    • Adds APIs similar to ceph rbd trash purge schedule <add|list|remove|status>

API Stability Updates

The following APIs are now stable

cephfs/admin

  • FSAdmin.SubVolumeGroupInfo

common/admin/nfs

  • Admin.ApplyExportInfo

common/admin/smb

  • ApplyOptions.SetGeneric
  • ApplyOptions.Generic

rados

  • IOContext.Checksum

rbd

  • Image.FlattenWithProgress

rgw/admin

  • API.SetIndividualBucketRateLimit
  • API.GetIndividualBucketRateLimit

Other changes

... (truncated)

Commits
  • c79f740 rgw/admin: Remove preview label for RateLimitSpec
  • a418342 README.md: Upadtes for v0.42.0
  • 32bcbba docs: Set API versions for the next release
  • 615297b docs: Update api-status for stable APIs
  • cbd3852 rgw/admin: Promote bucket rate limit APIs to stable
  • b17ddeb rbd: Promote flatten with progress APIs to stable
  • fd695b6 rados: Promote ioctx checksum APIs to stable
  • 2e1fc34 common/admin/smb: Promote extended generic resource APIs to stable
  • 60c1712 common/admin/nfs: Promote export info apply APIs to stable
  • 7b10795 cephfs/admin: Promote subvolume group info APIs to stable
  • Additional commits viewable in compare view

Updates github.com/go-chi/chi/v5 from 5.3.2 to 5.5.0

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.5.0

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.4.0...v5.5.0

v5.4.0

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.3.2...v5.4.0

Commits
  • 3a33ba5 middleware: SupressNotFound must not mutate the request's route context (#1220)
  • 6075570 middleware: parse quoted ContentCharset media parameters (#1218)
  • 46295d0 middleware: test Retry-After rounding in one table test (#1217)
  • c6e33a1 middleware: build Maybe handler once (#1197)
  • c9744a3 middleware: test ClientIPFromHeader does not fall back to other headers (#1208)
  • fff8bb2 middleware: add Deprecation (RFC 9745), make Sunset RFC 8594 only (#1195)
  • 7f9b744 middleware: treat RemoteAddr as the rightmost hop in ClientIPFrom* (#1214)
  • 167e1e3 README: point middleware doc links to chi/v5 (#1196)
  • 3d1777a middleware: honor Discard when flushing (#1185)
  • b1c9ab4 middleware: record response status when flushing (#1174)
  • Additional commits viewable in compare view

Updates github.com/go-ldap/ldap/v3 from 3.4.14 to 3.4.15

Release notes

Sourced from github.com/go-ldap/ldap/v3's releases.

v3.4.15

What's Changed

New Contributors

Full Changelog: go-ldap/ldap@v3.4.14...v3.4.15

Commits
  • e614cf9 fix: return error for unexpected response in ModifyWithResult (#639)
  • f3f0153 fix: reject out-of-range resultCode before narrowing to uint16 (#640)
  • f8db69e Modify README for testing and server commands
  • 05f305f fix: navigate LDAPMessage envelope in parseLDAPResult (#636)
  • ca8bcfa feat: expose ResultCode and DiagnosticMessage on SearchResult (#626)
  • f3d2070 fix: export ErrMalformedPacket sentinel
  • 0c9a799 fix: address review feedback on malformed-packet hardening
  • b73a2ec fix: reject malformed packets via shared child-count and bounds checks
  • e4851f6 fix: validate closing parenthesis in compound and grouped filters (#633) (#635)
  • 90c6466 extended: wrap requestValue as RFC 4511 [1] OCTET STRING (#628)
  • Additional commits viewable in compare view

Updates github.com/huandu/xstrings from 1.6.2 to 1.6.3

Release notes

Sourced from github.com/huandu/xstrings's releases.

Bug fixes for ExpandTabs, Squeeze, justification and first-rune case mapping

This release fixes invalid UTF-8 handling in ExpandTabs, Squeeze and the justification helpers, and makes FirstRuneToUpper / FirstRuneToLower honor all Unicode case mappings.

Most fixes preserve bytes which were not supposed to be changed. As a result, invalid UTF-8 bytes are no longer rewritten as U+FFFD in these functions; valid UTF-8 output is unchanged.

Bug fixes

ExpandTabs: invalid bytes after the first tab

ExpandTabs copied the input prefix before the first tab, but every later rune was written back with WriteRune. Invalid bytes decode to utf8.RuneError and were rewritten as U+FFFD, so the same byte was preserved before a tab and corrupted after it.

  • ExpandTabs("\t\xffx", 4) returned " \uFFFDx" instead of " \xffx".
  • ExpandTabs("\xff\t\xfe", 4) returned "\xff \uFFFD" instead of "\xff \xfe".

Non-tab bytes are now copied unchanged.

Squeeze: retained bytes and duplicate detection

Two separate issues affected invalid input:

  • After the first squeeze, retained runes were written with WriteRune, rewriting invalid bytes as U+FFFD: Squeeze("aa\xffb", "a") returned "a\uFFFDb" instead of "a\xffb", and even a non-matching pattern such as "z" changed the bytes (#73).
  • Duplicate detection compared decoded runes. Every invalid byte decodes to RuneError, so distinct invalid bytes, and an invalid byte next to a valid U+FFFD, were treated as repeated runes and collapsed: Squeeze("\xff\xfe", "") returned "\xff" and Squeeze("\xff\uFFFD", "") returned "\xff" (#76).

Retained bytes are now copied unchanged, and adjacent runes are compared by their original bytes. Identical bytes still squeeze normally when the rune is eligible for squeezing, while distinct sequences are kept.

LeftJustify, RightJustify, Center: truncated pad strings

When the pad string was cut in the middle of its runes, writePadString decoded each pad rune and wrote it back with WriteRune. Invalid bytes in that partial pad became U+FFFD, although complete pad repetitions were already copied unchanged.

  • LeftJustify("a", 3, "x\xffy") returned "ax\uFFFD" instead of "ax\xff".
  • RightJustify("a", 2, "\xffx") returned "\uFFFDa" instead of "\xffa".
  • Center("a", 4, "x\xffy") returned "xax\uFFFD" instead of "xax\xff".

Partial pad bytes are now copied unchanged (#75).

FirstRuneToUpper / FirstRuneToLower: Unicode case mappings outside Ll/Lu

The functions only changed the first rune when unicode.IsLower / unicode.IsUpper was true. Characters with case mappings outside those categories were skipped, including titlecase digraphs, Roman numerals and circled letters.

  • FirstRuneToUpper("Džuro") returned "Džuro" instead of "DŽuro".
  • FirstRuneToLower("Džuro") returned "Džuro" instead of "džuro".
  • FirstRuneToUpper("ⅳ chapter") returned "ⅳ chapter" instead of "Ⅳ chapter".
  • FirstRuneToUpper("ⓐ label") returned "ⓐ label" instead of "Ⓐ label".

The functions now apply unicode.ToUpper / unicode.ToLower and return the original string when the first rune has no mapping. Suffixes, uncased runes and invalid UTF-8 are handled as before (#72).

Behaviour changes

  • FirstRuneToUpper and FirstRuneToLower now change every rune with a standard Unicode simple case mapping, not only runes in Ll/Lu. This includes titlecase, letterlike and circled characters.
  • ExpandTabs, Squeeze, LeftJustify, RightJustify and Center now preserve invalid UTF-8 bytes instead of rewriting them as U+FFFD in the affected paths. The output is byte-preserving, but remains invalid UTF-8 if the input is invalid. Valid UTF-8 results are unchanged.

... (truncated)

Commits
  • 28aabeb Merge pull request #76 from huandu/fix/squeeze-byte-equality
  • 2584c02 Distinguish invalid bytes when squeezing strings
  • 51092b1 Merge pull request #75 from huandu/fix/justify-preserve-pad-bytes
  • 3ded970 Merge pull request #74 from yuefdev/fix/expandtabs-preserve-bytes-sol
  • 51da7c1 Merge pull request #73 from yuefdev/fix/squeeze-preserve-bytes
  • 2128155 Merge pull request #72 from ac1982/fix/first-rune-unicode-case
  • e9f44f0 Preserve pad bytes when justifying strings
  • 8292f9c Preserve untouched bytes when expanding tabs
  • 95eed7c Preserve untouched bytes when squeezing strings
  • 5225f07 Honor Unicode case mappings for the first rune
  • See full diff in compare view

Updates github.com/minio/minio-go/v7 from 7.3.0 to 7.4.1

Release notes

Sourced from github.com/minio/minio-go/v7's releases.

v7.4.1

What's Changed

Full Changelog: minio/minio-go@v7.4.0...v7.4.1

v7.4.0

Go 1.26 or later is now required. Go 1.25 is out of support, and golang.org/x/net v0.60.0 (the fix for GO-2026-6603, 6610, 6611, 6612 and 6617) requires Go 1.26 (#2313).

What's Changed

New Contributors

... (truncated)

Commits
  • 1a663bb update lib version to v7.4.1
  • c68b12c fix: abort failed uploads even when the caller cancels (#2318)
  • 8a72fb4 update lib version to v7.4.0
  • 85df9ce get: add opt-in parallel range GET via ParallelWorkers (#2317)
  • 91dc4dd fix: send RetainUntilDate in UTC (#2315)
  • 79b8caa compose: allow parallel upload-part-copy with NumThreads (#2316)
  • 1ab9013 docs: fix 'Recieved' typo in CancelBucketReplicationResync (#2314)
  • 21d2ec1 fix: trim whitespace from bucket location (#2274)
  • 450a9b3 credentials: allow NewKubernetesIdentity to read a projected token file (#2312)
  • aeb0641 docs: remove broken Slack badges (#2304)
  • Additional commits viewable in compare view

Updates github.com/nats-io/nats-server/v2 from 2.15.0 to 2.15.1

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.15.1

Changelog

Refer to the 2.15 Upgrade Guide for backwards compatibility notes with 2.14.x.

Go Version

Dependencies

  • github.com/klauspost/compress v1.20.1 (#8737)
  • github.com/nats-io/nats.go v1.53.1 (#8737)

Changed

JetStream

  • The max_ha_assets limit is now enforced consistently by the metalayer leader during stream and consumer placement, scaling and moves (#8639)

Gateways

  • Support for sending and handling the legacy $GR. reply prefix, used by servers prior to v2.1.2, has been removed (#8615)

Improved

JetStream

  • Stalled source and mirror flow control is now reported in stream info and warning logs, making missing $JS.FC.> imports or exports easier to diagnose (#8633)
  • Stream and consumer placement now prefers peers that have caught up with the metalayer, reducing delays in API responses (#8643)
  • Improved the performance of deleting entries from and encoding AVL sequence sets (#8646)
  • Fast batch publish now reports backward sequence gaps as well as forward gaps (#8699)
  • Stream pending message calculations avoid unnecessary filestore cache access and handle deleted sequence ranges more efficiently (#8680, #8681)
  • Stream restore format detection now stops after the first S2 chunk (#8693)
  • Stream restore waits for the preferred node to become leader, avoiding an incorrect create response during clustered restore (#8690)
  • Memory backed streams avoid copying message headers and bodies twice when storing messages (#8652, contributed by @​randomizedcoder)

Monitoring

  • Leafz now reports whether a leafnode connection uses WebSockets (#8683)

MQTT

  • QoS2 PUBLISH and PUBREL processing is now pipelined for increased throughput (#8416, contributed by @​levb)
  • Reduced allocations and buffer copying when processing QoS1 and QoS2 messages and issuing JetStream store and delete requests (#8624, #8625, contributed by @​levb)
  • Partial packets are no longer copied in full on every read, reducing allocations and buffer copying (#8692)

Fixed

General

... (truncated)

Commits
  • b2fd3ef Release v2.15.1
  • 5502536 Update to Go 1.27.2/1.26.9
  • 2f50d04 Cherry-picks for 2.15.1 (#164)
  • ff5047c Fix TestJetStreamClusterKeyValueLastSeqMismatch
  • bd33432 Update GHA dependencies
  • 86bf9f1 Update Go dependencies
  • c4aea1c [FIXED] Leafnode interest and request/reply across account imports
  • 04869d4 [FIXED] Recovered ephemeral pull consumer never deleted
  • 51d0113 De-flake TestJetStreamAtomicBatchPublishRejectPartialBatchOnLeaderChange
  • 21344fd NRG: Re-send vote request of preferred candidate
  • Additional commits viewable in compare view

Updates github.com/onsi/ginkgo/v2 from 2.33.0 to 2.33.1

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.33.1

Fixes

  • Add several missing fields to spec report JSON output.
Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.33.1

Fixes

  • Add several missing fields to spec report JSON output.
Commits
  • 7ff96d7 v2.33.1
  • 699632a Precompile the fixture in the suite-timeout integration test (#1689)
  • 9e02cad ci: default the release bump so a mobile dispatch can't send it empty (#1688)
  • ef6a46c Update CHANGELOG.md
  • 6c652a2 Add missing fields to SpecReport JSON marshalling, and add unit test
  • 510c8d5 Update TestMu AI sponsor logo and link
  • 5c1e7ef Refer sanitizer help to go help build
  • See full diff in compare view

Updates github.com/prometheus/client_golang from 1.24.1 to 1.25.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.25.0

⚠️ This release raises the minimum required Go version to 1.26 and includes breaking API changes in api/prometheus/v1 (see the [CHANGE] entries below). ⚠️

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139
  • [BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135

What's Changed

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139Description has been truncated

@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 1…
37b024b 
…5 updates

Bumps the minor-and-patch group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/ceph/go-ceph](https://github.com/ceph/go-ceph) | `0.41.0` | `0.42.1` |
| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.3.2` | `5.5.0` |
| [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap) | `3.4.14` | `3.4.15` |
| [github.com/huandu/xstrings](https://github.com/huandu/xstrings) | `1.6.2` | `1.6.3` |
| [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.3.0` | `7.4.1` |
| [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) | `2.15.0` | `2.15.1` |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.33.0` | `2.33.1` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.24.1` | `1.25.0` |
| [github.com/shamaton/msgpack/v2](https://github.com/shamaton/msgpack) | `2.4.2` | `2.4.4` |
| [github.com/thanhpk/randstr](https://github.com/thanhpk/randstr) | `1.0.6` | `1.0.7` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.57.0` | `0.58.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.23.0` | `0.24.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.48.0` | `0.49.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.46.0` | `0.47.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.42.0` | `0.43.0` |



Updates `github.com/ceph/go-ceph` from 0.41.0 to 0.42.1
- [Release notes](https://github.com/ceph/go-ceph/releases)
- [Changelog](https://github.com/ceph/go-ceph/blob/master/docs/release-process.md)
- [Commits](ceph/go-ceph@v0.41.0...v0.42.1)

Updates `github.com/go-chi/chi/v5` from 5.3.2 to 5.5.0
- [Release notes](https://github.com/go-chi/chi/releases)
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md)
- [Commits](go-chi/chi@v5.3.2...v5.5.0)

Updates `github.com/go-ldap/ldap/v3` from 3.4.14 to 3.4.15
- [Release notes](https://github.com/go-ldap/ldap/releases)
- [Commits](go-ldap/ldap@v3.4.14...v3.4.15)

Updates `github.com/huandu/xstrings` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/huandu/xstrings/releases)
- [Commits](huandu/xstrings@v1.6.2...v1.6.3)

Updates `github.com/minio/minio-go/v7` from 7.3.0 to 7.4.1
- [Release notes](https://github.com/minio/minio-go/releases)
- [Commits](minio/minio-go@v7.3.0...v7.4.1)

Updates `github.com/nats-io/nats-server/v2` from 2.15.0 to 2.15.1
- [Release notes](https://github.com/nats-io/nats-server/releases)
- [Changelog](https://github.com/nats-io/nats-server/blob/main/RELEASES.md)
- [Commits](nats-io/nats-server@v2.15.0...v2.15.1)

Updates `github.com/onsi/ginkgo/v2` from 2.33.0 to 2.33.1
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.33.0...v2.33.1)

Updates `github.com/prometheus/client_golang` from 1.24.1 to 1.25.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.25.0/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.24.1...v1.25.0)

Updates `github.com/shamaton/msgpack/v2` from 2.4.2 to 2.4.4
- [Release notes](https://github.com/shamaton/msgpack/releases)
- [Changelog](https://github.com/shamaton/msgpack/blob/v2.4.4/CHANGELOG.md)
- [Commits](shamaton/msgpack@v2.4.2...v2.4.4)

Updates `github.com/thanhpk/randstr` from 1.0.6 to 1.0.7
- [Commits](thanhpk/randstr@v1.0.6...v1.0.7)

Updates `golang.org/x/crypto` from 0.57.0 to 0.58.0
- [Commits](golang/crypto@v0.57.0...v0.58.0)

Updates `golang.org/x/sync` from 0.23.0 to 0.24.0
- [Commits](golang/sync@v0.23.0...v0.24.0)

Updates `golang.org/x/sys` from 0.48.0 to 0.49.0
- [Commits](golang/sys@v0.48.0...v0.49.0)

Updates `golang.org/x/term` from 0.46.0 to 0.47.0
- [Commits](golang/term@v0.46.0...v0.47.0)

Updates `golang.org/x/text` from 0.42.0 to 0.43.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.42.0...v0.43.0)

---
updated-dependencies:
- dependency-name: github.com/ceph/go-ceph
  dependency-version: 0.42.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/go-chi/chi/v5
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/go-ldap/ldap/v3
  dependency-version: 3.4.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/huandu/xstrings
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/minio/minio-go/v7
  dependency-version: 7.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/nats-io/nats-server/v2
  dependency-version: 2.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.33.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/shamaton/msgpack/v2
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/thanhpk/randstr
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/crypto
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/sync
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/sys
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/term
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/text
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 25, 2026 22:04
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 25, 2026
@kw-security

kw-security commented Oct 25, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Licenses 0 0 0 0 0 issues
✅ Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@dependabot @github

dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 1, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/minor-and-patch-aa15b068ee branch November 1, 2026 22:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@kw-security