Skip to content

chore(deps): bump the go_modules group across 1 directory with 6 updates#15

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go/go_modules-a59158b4fc
Open

chore(deps): bump the go_modules group across 1 directory with 6 updates#15
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go/go_modules-a59158b4fc

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Mar 1, 2026

Bumps the go_modules group with 1 update in the /go directory: github.com/weaviate/weaviate.

Updates github.com/weaviate/weaviate from 1.26.0-rc.1 to 1.30.20

Release notes

Sourced from github.com/weaviate/weaviate's releases.

v1.30.20 - Backup path Fix

Breaking Changes

none

New Features

none

Fixes

Full Changelog: weaviate/weaviate@v1.30.19...v1.30.20

v1.30.19 - Named vectors with quantization enabled Fix, Backup shard locking improvement

Breaking Changes

none

New Features

none

Fixes

Full Changelog: weaviate/weaviate@v1.30.18...v1.30.19

... (truncated)

Commits

Updates go.opentelemetry.io/otel/sdk from 1.26.0 to 1.35.0

Changelog

Sourced from go.opentelemetry.io/otel/sdk's changelog.

[1.35.0/0.57.0/0.11.0] 2025-03-05

This release is the last to support [Go 1.22]. The next release will require at least [Go 1.23].

Added

  • Add ValueFromAttribute and KeyValueFromAttribute in go.opentelemetry.io/otel/log. (#6180)
  • Add EventName and SetEventName to Record in go.opentelemetry.io/otel/log. (#6187)
  • Add EventName to RecordFactory in go.opentelemetry.io/otel/log/logtest. (#6187)
  • AssertRecordEqual in go.opentelemetry.io/otel/log/logtest checks Record.EventName. (#6187)
  • Add EventName and SetEventName to Record in go.opentelemetry.io/otel/sdk/log. (#6193)
  • Add EventName to RecordFactory in go.opentelemetry.io/otel/sdk/log/logtest. (#6193)
  • Emit Record.EventName field in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#6211)
  • Emit Record.EventName field in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#6211)
  • Emit Record.EventName field in go.opentelemetry.io/otel/exporters/stdout/stdoutlog (#6210)
  • The go.opentelemetry.io/otel/semconv/v1.28.0 package. The package contains semantic conventions from the v1.28.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.27.0(#6236)
  • The go.opentelemetry.io/otel/semconv/v1.30.0 package. The package contains semantic conventions from the v1.30.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.28.0(#6240)
  • Document the pitfalls of using Resource as a comparable type. Resource.Equal and Resource.Equivalent should be used instead. (#6272)
  • Support [Go 1.24]. (#6304)
  • Add FilterProcessor and EnabledParameters in go.opentelemetry.io/otel/sdk/log. It replaces go.opentelemetry.io/otel/sdk/log/internal/x.FilterProcessor. Compared to previous version it additionally gives the possibility to filter by resource and instrumentation scope. (#6317)

Changed

  • Update github.com/prometheus/common to v0.62.0, which changes the NameValidationScheme to NoEscaping. This allows metrics names to keep original delimiters (e.g. .), rather than replacing with underscores. This is controlled by the Content-Type header, or can be reverted by setting NameValidationScheme to LegacyValidation in github.com/prometheus/common/model. (#6198)

Fixes

  • Eliminate goroutine leak for the processor returned by NewSimpleSpanProcessor in go.opentelemetry.io/otel/sdk/trace when Shutdown is called and the passed ctx is canceled and SpanExporter.Shutdown has not returned. (#6368)
  • Eliminate goroutine leak for the processor returned by NewBatchSpanProcessor in go.opentelemetry.io/otel/sdk/trace when ForceFlush is called and the passed ctx is canceled and SpanExporter.Export has not returned. (#6369)

[1.34.0/0.56.0/0.10.0] 2025-01-17

Changed

  • Remove the notices from Logger to make the whole Logs API user-facing in go.opentelemetry.io/otel/log. (#6167)

Fixed

  • Relax minimum Go version to 1.22.0 in various modules. (#6073)
  • The Type name logged for the go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc client is corrected from otlphttpgrpc to otlptracegrpc. (#6143)

... (truncated)

Commits
  • 5ba5e7a Release v1.35.0/v0.57.0/v0.11.0 (#6407)
  • 3908b67 chore(deps): update module github.com/securego/gosec/v2 to v2.22.2 (#6412)
  • 50172b1 chore(deps): update module github.com/ryancurrah/gomodguard to v1.4.1 (#6411)
  • cea6d2b fix(deps): update module google.golang.org/grpc to v1.71.0 (#6409)
  • e2aee3a Move trace sdk tests from trace_test into trace package (#6400)
  • 38f4f39 fix(deps): update build-tools to v0.20.0 (#6403)
  • 2911449 Look at stale issues in ascending order (#6396)
  • 7cb322a chore(deps): update github.com/golangci/dupl digest to 44c6a0b (#6398)
  • 0c3651e fix(deps): update module github.com/golangci/golangci-lint to v1.64.6 (#6394)
  • f04e951 chore(deps): update mvdan.cc/unparam digest to 0df0534 (#6391)
  • Additional commits viewable in compare view

Updates github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.2

Release notes

Sourced from github.com/golang-jwt/jwt/v4's releases.

v4.5.2

See GHSA-mh63-6h87-95cp

Full Changelog: golang-jwt/jwt@v4.5.1...v4.5.2

v4.5.1

Security

Unclear documentation of the error behavior in ParseWithClaims in <= 4.5.0 could lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by ParseWithClaims return both error codes. If users only check for the jwt.ErrTokenExpired using error.Is, they will ignore the embedded jwt.ErrTokenSignatureInvalid and thus potentially accept invalid tokens.

This issue was documented in GHSA-29wx-vh33-7x7r and fixed in this release.

Note: v5 was not affected by this issue. So upgrading to this release version is also recommended.

What's Changed

  • Back-ported error-handling logic in ParseWithClaims from v5 branch. This fixes GHSA-29wx-vh33-7x7r.

Full Changelog: golang-jwt/jwt@v4.5.0...v4.5.1

Commits

Updates golang.org/x/crypto from 0.25.0 to 0.40.0

Commits
  • 459a9db go.mod: update golang.org/x dependencies
  • 74e709a ssh: add AlgorithmNegotiationError
  • b3790b8 acme: fix TLSALPN01ChallengeCert for IP address identifiers
  • 1dc4269 acme: add Pebble integration testing
  • 97bf787 blake2b: implement hash.XOF
  • 952517d x509roots/fallback: update bundle
  • c6fce02 ssh: refuse to parse certificates that use a certificate as signing key
  • 0ae49b8 ssh: reject certificate keys used as signature keys for SSH certs
  • 3bf9d2a ssh/test: skip KEX test if unsupported by system SSH client
  • 9bab967 go.mod: update golang.org/x dependencies
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.27.0 to 0.41.0

Commits
  • 6e41cae go.mod: update golang.org/x dependencies
  • 15f7d40 http2: correctly wrap ErrFrameTooLarge in Framer.ReadFrame
  • ef33bc0 internal/http3: use bubbled context in synctest tests
  • 919c6bc http2: use an array instead of a map in typeFrameParser
  • bae01a7 trace: add missing td tag
  • 7d6e62a go.mod: update golang.org/x dependencies
  • ea0c1d9 internal/timeseries: use built-in max/min to simplify the code
  • 3e7a445 quic: skip packet numbers for optimistic ack defense
  • 3f563d3 quic: use an enum for sentPacket state
  • a3b6e77 quic: don't re-lose packets when discarding keys
  • Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.21.0 to 0.30.0

Commits
  • cf14319 oauth2: fix expiration time window check
  • 32d34ef internal: include clientID in auth style cache key
  • 2d34e30 oauth2: replace a magic number with AuthStyleUnknown
  • 696f7b3 all: modernize with doc links and any
  • 471209b oauth2: drop dependency on go-cmp
  • 6968da2 oauth2: sync Token.ExpiresIn from internal Token
  • d2c4e0a oauth2: context instead of golang.org/x/net/context in doc
  • 883dc3c endpoints: add various endpoints from stale CLs
  • 1c06e87 all: make use of oauth.Token.ExpiresIn
  • 65c15a3 oauth2: remove extra period
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
chore(deps): bump the go_modules group across 1 directory with 6 updates
cde12af 
Bumps the go_modules group with 1 update in the /go directory: [github.com/weaviate/weaviate](https://github.com/weaviate/weaviate).


Updates `github.com/weaviate/weaviate` from 1.26.0-rc.1 to 1.30.20
- [Release notes](https://github.com/weaviate/weaviate/releases)
- [Commits](weaviate/weaviate@v1.26.0-rc.1...v1.30.20)

Updates `go.opentelemetry.io/otel/sdk` from 1.26.0 to 1.35.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.26.0...v1.35.0)

Updates `github.com/golang-jwt/jwt/v4` from 4.5.0 to 4.5.2
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Commits](golang-jwt/jwt@v4.5.0...v4.5.2)

Updates `golang.org/x/crypto` from 0.25.0 to 0.40.0
- [Commits](golang/crypto@v0.25.0...v0.40.0)

Updates `golang.org/x/net` from 0.27.0 to 0.41.0
- [Commits](golang/net@v0.27.0...v0.41.0)

Updates `golang.org/x/oauth2` from 0.21.0 to 0.30.0
- [Commits](golang/oauth2@v0.21.0...v0.30.0)

---
updated-dependencies:
- dependency-name: github.com/weaviate/weaviate
  dependency-version: 1.30.20
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.35.0
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-version: 4.5.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.40.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.41.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.30.0
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 1, 2026
@dependabot dependabot bot mentioned this pull request Mar 1, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants