build(deps): bump the low-risk group across 1 directory with 8 updates #52

dependabot · 2025-10-12T23:10:37Z

Bumps the low-risk group with 8 updates in the / directory:

Package	From	To
cloud.google.com/go/secretmanager	`1.15.0`	`1.15.1`
github.com/Azure/azure-sdk-for-go/sdk/azidentity	`1.11.0`	`1.13.0`
github.com/aws/aws-sdk-go-v2	`1.39.0`	`1.39.2`
github.com/aws/aws-sdk-go-v2/config	`1.31.8`	`1.31.12`
github.com/aws/aws-sdk-go-v2/service/secretsmanager	`1.39.4`	`1.39.6`
github.com/aws/aws-sdk-go-v2/service/ssm	`1.64.4`	`1.65.1`
github.com/hashicorp/vault/api	`1.21.0`	`1.22.0`
github.com/hashicorp/vault/api/auth/aws	`0.10.0`	`0.11.0`

Updates cloud.google.com/go/secretmanager from 1.15.0 to 1.15.1

Release notes

Sourced from cloud.google.com/go/secretmanager's releases.

orgpolicy: v1.15.1

1.15.1 (2025-09-18)

Bug Fixes

orgpolicy: Upgrade gRPC service registration func (a10ecc9)

osconfig: v1.15.1

1.15.1 (2025-09-18)

Bug Fixes

osconfig: Upgrade gRPC service registration func (a10ecc9)

secretmanager: v1.15.1

1.15.1 (2025-10-07)

Bug Fixes

secretmanager: Upgrade gRPC service registration func (bc93e83)

texttospeech: v1.15.1

1.15.1 (2025-10-07)

Bug Fixes

texttospeech: Upgrade gRPC service registration func (bc93e83)

Changelog

Sourced from cloud.google.com/go/secretmanager's changelog.

Changes

1.39.0 (2025-10-09)

Features

documentai: A new enum Method is added (a93d961)

documentai: A new enum Method is added (a93d961)

documentai: A new field annotations is added to message .google.cloud.documentai.v1beta3.Document (a93d961)

documentai: A new field annotations is added to message .google.cloud.documentai.v1beta3.Document (a93d961)

documentai: A new field entities_revision_id is added to message .google.cloud.documentai.v1beta3.Document (a93d961)

documentai: A new field entities_revisions is added to message .google.cloud.documentai.v1beta3.Document (a93d961)

documentai: A new field entity_validation_output is added to message .google.cloud.documentai.v1beta3.Document (a93d961)

documentai: A new field method is added to message .google.cloud.documentai.v1beta3.Document (a93d961)

documentai: A new field method is added to message .google.cloud.documentai.v1beta3.DocumentSchema (a93d961)

documentai: A new field signature_value is added to message .google.cloud.documentai.v1beta3.Document (a93d961)

documentai: A new message EntitiesRevision is added (a93d961)

documentai: A new message EntityValidationOutput is added (a93d961)

documentai: Added new fields entity_validation_output, entities_revisions, and entities_revision_id to the Document message (a93d961)

documentai: Added new messages EntityValidationOutput and EntitiesRevision (a93d961)

Documentation

documentai: A comment for field create_time in message .google.cloud.documentai.v1beta3.Processor is changed (a93d961)

documentai: A comment for field create_time in message .google.cloud.documentai.v1beta3.ProcessorVersion is changed (a93d961)

documentai: A comment for field deprecation_info in message .google.cloud.documentai.v1beta3.ProcessorVersion is changed (a93d961)

documentai: A comment for field document_schema in message .google.cloud.documentai.v1beta3.ProcessorVersion is changed (a93d961)

documentai: A comment for field kms_key_name in message .google.cloud.documentai.v1beta3.ProcessorVersion is changed (a93d961)

documentai: A comment for field kms_key_version_name in message .google.cloud.documentai.v1beta3.ProcessorVersion is changed (a93d961)

documentai: A comment for field latest_evaluation in message .google.cloud.documentai.v1beta3.ProcessorVersion is changed (a93d961)

documentai: A comment for field processor_version_source in message .google.cloud.documentai.v1beta3.ImportProcessorVersionRequest is changed (a93d961)

documentai: A comment for field training_method in message .google.cloud.documentai.v1beta3.TrainProcessorVersionRequest is changed (a93d961)

documentai: The field training_method in TrainProcessorVersionRequest is now marked as optional (a93d961)

1.38.1 (2025-09-16)

Bug Fixes

documentai: Upgrade gRPC service registration func (617bb68)

1.38.0 (2025-08-18)

Features

documentai: Added config options for derived fields and signature detection. Some annotation changes changes to mark fields explicitly output only (no changes in semantics just readability) (f1de706)

... (truncated)

Commits

2952e20 chore: release main (#8362)
1639d62 feat(batch): Clarify Batch API proto doc about pubsub notifications (#8394)
01951e6 fix(datastore): fix NoIndex for array property (#7674)
7a4137a chore: update all go versions to 1.19 (#8395)
c38e910 feat(translate): Added shadow removal and rotation correction options to Docu...
1390cbd fix(dataplex): remove unused annotation in results_table (#8382)
8c46711 chore(storage): add trace support to benchmark (#8389)
9b6e7c6 feat(spanner): add integration tests for Bit Reversed Sequences (#7924)
f2af2a9 Enabling Go Integration tests for databoost (#8295)
b30a7f4 docs(bigquery/storage/managedwriter): augment context usage in package docs (...
Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.11.0 to 1.13.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.13.0

1.13.0 (2025-10-07)

Features Added

Added AzurePowerShellCredential, which authenticates as the identity logged in to Azure PowerShell (thanks ArmaanMcleod)

When AZURE_TOKEN_CREDENTIALS is set to ManagedIdentityCredential, DefaultAzureCredential behaves the same as does ManagedIdentityCredential when used directly. It doesn't apply special retry configuration or attempt to determine whether IMDS is available. (#25265)

Breaking Changes

Removed the WorkloadIdentityCredential support for identity binding mode added in v1.13.0-beta.1. It will return in v1.14.0-beta.1

sdk/azidentity/v1.13.0-beta.1

1.13.0-beta.1 (2025-09-17)

Features Added

Added AzurePowerShellCredential, which authenticates as the identity logged in to Azure PowerShell (thanks ArmaanMcleod)

WorkloadIdentityCredential supports identity binding mode (#25056)

sdk/azidentity/v1.12.0

1.12.0 (2025-09-16)

Features Added

Added DefaultAzureCredentialOptions.RequireAzureTokenCredentials. NewDefaultAzureCredential returns an error when this option is true and the environment variable AZURE_TOKEN_CREDENTIALS has no value.

Other Changes

AzureDeveloperCLICredential no longer hangs when AZD_DEBUG is set

GetToken methods of AzureCLICredential and AzureDeveloperCLICredential return an error when TokenRequestOptions.Claims has a value because these credentials can't acquire a token in that case. The error messages describe the action required to get a token.

sdk/internal/v1.11.2

1.11.2 (2025-07-30)

Other Changes

errorinfo.NonRetriable() doesn't wrap errors which are already NonRetriable

Commits

94c22e6 [azcore] prepping for release (#23192)
c5213b1 Redesign persistent token cache API (#23114)
5df73f9 [azopenai]: Update custom_client.go to enable insecure credential with HTTP (...
b4b4721 [azcore] Adding in a function create a policy.Request using an existing *http...
80dbc7d Update CODEOWNERS_baseline_errors.txt (#23191)
d254d11 Increment package version after release of internal (#23190)
62f7a3d Test credential factory supports Pipelines federated auth (#23184)
5aaedf4 [Release] sdk/resourcemanager/informaticadatamgmt/arminformaticadatamgmt/1.0....
ce39ed9 Sync eng/common directory with azure-sdk-tools for PR 8598 (#23175)
75d30bb Enable use of pipeline credential. Fixes https://github.com/microsoft/azure-p...
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.39.0 to 1.39.2

Commits

67db690 Release 2025-09-26
32ee1b5 Regenerated Clients
0b43122 Update endpoints model
44786d9 Update API model
c98edb7 update internal endpts comment that was wrong (#3194)
88da3c8 Release 2025-09-25
74a74fc Regenerated Clients
5e6f7ae Update endpoints model
0e722ab Update API model
41a7d00 Release 2025-09-24
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.31.8 to 1.31.12

Commits

4f599a5 Release 2025-09-29
c32a7a8 Regenerated Clients
18a065d Update endpoints model
af534aa Update API model
67db690 Release 2025-09-26
32ee1b5 Regenerated Clients
0b43122 Update endpoints model
44786d9 Update API model
c98edb7 update internal endpts comment that was wrong (#3194)
88da3c8 Release 2025-09-25
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.39.4 to 1.39.6

Commits

67db690 Release 2025-09-26
32ee1b5 Regenerated Clients
0b43122 Update endpoints model
44786d9 Update API model
c98edb7 update internal endpts comment that was wrong (#3194)
88da3c8 Release 2025-09-25
74a74fc Regenerated Clients
5e6f7ae Update endpoints model
0e722ab Update API model
41a7d00 Release 2025-09-24
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ssm from 1.64.4 to 1.65.1

Commits

b737dc9 Release 2024-10-07
7279a51 Regenerated Clients
a1b1f5a Update endpoints model
4853c41 Update API model
99e2be8 Allow empty values on prefix headers (#2816)
18e6b6e remove autoscaling smoke tests (#2817)
8200000 remove private metrics collection APIs (#2818)
7a76a2a Release 2024-10-04
e35b8be Regenerated Clients
6e95871 Update endpoints model
Additional commits viewable in compare view

Updates github.com/hashicorp/vault/api from 1.21.0 to 1.22.0

Commits

526ac82 Merge remote-tracking branch 'remotes/from/ce/main'
8041281 Backport Update vault-plugin-secrets-terraform to v0.13.0 into ce/main (#9814)
dce7d8a Backport Update vault-plugin-secrets-kubernetes to v0.12.0 into ce/main (#9811)
9cae193 Merge remote-tracking branch 'remotes/from/ce/main'
abde734 UI: Fix MFA validation timing issue (#9774) (#9799)
da04c45 Merge remote-tracking branch 'remotes/from/ce/main'
bf32d52 [UI] Ember Data Migration - KV Cleanup (#9623) (#9794)
0c3dcbc Backport Update vault-plugin-auth-azure to v0.22.0 into ce/main (#9782)
69b8abb Merge remote-tracking branch 'remotes/from/ce/main'
8cf2228 Fix auth method config submit following ember data migration (#9755) (#9793)
Additional commits viewable in compare view

Updates github.com/hashicorp/vault/api/auth/aws from 0.10.0 to 0.11.0

Changelog

Sourced from github.com/hashicorp/vault/api/auth/aws's changelog.

0.11.0 (August 28th, 2018)

DEPRECATIONS/CHANGES:

Request Timeouts: A default request timeout of 90s is now enforced. This setting can be overwritten in the config file. If you anticipate requests taking longer than 90s this setting should be updated before upgrading.

(NOTE: will be re-added into 0.11.1 as it broke more than anticipated. There will be some further guidelines around when this will be removed again.)

sys/ Top Level Injection: For the last two years for backwards compatibility data for various sys/ routes has been injected into both the Secret's Data map and into the top level of the JSON response object. However, this has some subtle issues that pop up from time to time and is becoming increasingly complicated to maintain, so it's finally being removed.

Path Fallback for List Operations: For a very long time Vault has automatically adjusted list operations to always end in a /, as list operations operates on prefixes, so all list operations by definition end with /. This was done server-side so affects all clients. However, this has also led to a lot of confusion for users writing policies that assume that the path that they use in the CLI is the path used internally. Starting in 0.11, ACL policies gain a new fallback rule for listing: they will use a matching path ending in / if available, but if not found, they will look for the same path without a trailing /. This allows putting list capabilities in the same path block as most other capabilities for that path, while not providing any extra access if list wasn't actually provided there.

Performance Standbys On By Default: If you flavor/license of Vault Enterprise supports Performance Standbys, they are on by default. You can disable this behavior per-node with the disable_performance_standby configuration flag.

AWS Secret Engine Roles: The AWS Secret Engine roles are now explicit about the type of AWS credential they are generating; this reduces reduce ambiguity that existed previously as well as enables new features for specific credential types. Writing role data and generating credentials remain backwards compatible; however, the data returned when reading a role's configuration has changed in backwards-incompatible ways. Anything that depended on reading role data from the AWS secret engine will break until it is updated to work with the new format.

Token Format (Enterprise): Tokens are now represented as a base62 value; tokens in namespaces will have the namespace identifier appended.

FEATURES:

Namespaces (Enterprise): A set of features within Vault Enterprise that allows Vault environments to support Secure Multi-tenancy within a single Vault Enterprise infrastructure. Through namespaces, Vault administrators can support tenant isolation for teams and individuals as well as empower those individuals to self-manage their own tenant environment.

... (truncated)

Commits

87492f9 Cut version 0.11.0
c05e39a Update version numbers
dc86fde Sync plugin updates
f913d4c UI Onboarding Wizards (#5196)
e53560f Fix default TTL for AWS secrets (#5203)
c9a4fdf Fix Azure Secrets API example
8667143 Pass the ctx value to make the race detector happy (#5201)
3437e82 refactor aws secret ui (#5193)
4377a6e Fix build
06b2aeb changelog++
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

dependabot · 2025-10-12T23:10:39Z

Assignees

The following users could not be added as assignees: elvenspellmaker. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

Bumps the low-risk group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) | `1.15.0` | `1.15.1` | | [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.11.0` | `1.13.0` | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.39.0` | `1.39.2` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.31.8` | `1.31.12` | | [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2) | `1.39.4` | `1.39.6` | | [github.com/aws/aws-sdk-go-v2/service/ssm](https://github.com/aws/aws-sdk-go-v2) | `1.64.4` | `1.65.1` | | [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault) | `1.21.0` | `1.22.0` | | [github.com/hashicorp/vault/api/auth/aws](https://github.com/hashicorp/vault) | `0.10.0` | `0.11.0` | Updates `cloud.google.com/go/secretmanager` from 1.15.0 to 1.15.1 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](googleapis/google-cloud-go@dlp/v1.15.0...kms/v1.15.1) Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.11.0 to 1.13.0 - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/sdk-breaking-changes-guide-migration.md) - [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.11.0...sdk/azcore/v1.13.0) Updates `github.com/aws/aws-sdk-go-v2` from 1.39.0 to 1.39.2 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@v1.39.0...v1.39.2) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.31.8 to 1.31.12 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@config/v1.31.8...config/v1.31.12) Updates `github.com/aws/aws-sdk-go-v2/service/secretsmanager` from 1.39.4 to 1.39.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/amp/v1.39.4...service/sfn/v1.39.6) Updates `github.com/aws/aws-sdk-go-v2/service/ssm` from 1.64.4 to 1.65.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/iot/v1.64.4...service/s3/v1.65.1) Updates `github.com/hashicorp/vault/api` from 1.21.0 to 1.22.0 - [Release notes](https://github.com/hashicorp/vault/releases) - [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG-v1.10-v1.15.md) - [Commits](hashicorp/vault@api/v1.21.0...api/v1.22.0) Updates `github.com/hashicorp/vault/api/auth/aws` from 0.10.0 to 0.11.0 - [Release notes](https://github.com/hashicorp/vault/releases) - [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG-v0.md) - [Commits](hashicorp/vault@v0.10.0...v0.11.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/secretmanager dependency-version: 1.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: low-risk - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity dependency-version: 1.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: low-risk - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.39.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: low-risk - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.31.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: low-risk - dependency-name: github.com/aws/aws-sdk-go-v2/service/secretsmanager dependency-version: 1.39.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: low-risk - dependency-name: github.com/aws/aws-sdk-go-v2/service/ssm dependency-version: 1.65.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: low-risk - dependency-name: github.com/hashicorp/vault/api dependency-version: 1.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: low-risk - dependency-name: github.com/hashicorp/vault/api/auth/aws dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: low-risk ... Signed-off-by: dependabot[bot] <[email protected]>

sonarqubecloud · 2025-10-19T23:18:46Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot bot assigned dnitsch and ElvenSpellmaker Oct 12, 2025

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 12, 2025

dependabot bot force-pushed the dependabot/go_modules/low-risk-aa8634289b branch from 95abe6b to e8c864e Compare October 19, 2025 23:13

dnitsch approved these changes Oct 31, 2025

View reviewed changes

dnitsch merged commit 8e5e7e9 into master Oct 31, 2025
5 checks passed

dnitsch deleted the dependabot/go_modules/low-risk-aa8634289b branch October 31, 2025 15:27

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the low-risk group across 1 directory with 8 updates #52

build(deps): bump the low-risk group across 1 directory with 8 updates #52

Uh oh!

dependabot bot commented on behalf of github Oct 12, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Oct 12, 2025

Uh oh!

sonarqubecloud bot commented Oct 19, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

build(deps): bump the low-risk group across 1 directory with 8 updates #52

build(deps): bump the low-risk group across 1 directory with 8 updates #52

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 12, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

orgpolicy: v1.15.1

1.15.1 (2025-09-18)

Bug Fixes

osconfig: v1.15.1

1.15.1 (2025-09-18)

Bug Fixes

secretmanager: v1.15.1

1.15.1 (2025-10-07)

Bug Fixes

texttospeech: v1.15.1

1.15.1 (2025-10-07)

Bug Fixes

Changes

1.39.0 (2025-10-09)

Features

Documentation

1.38.1 (2025-09-16)

Bug Fixes

1.38.0 (2025-08-18)

Features

sdk/azidentity/v1.13.0

1.13.0 (2025-10-07)

Features Added

Breaking Changes

sdk/azidentity/v1.13.0-beta.1

1.13.0-beta.1 (2025-09-17)

Features Added

sdk/azidentity/v1.12.0

1.12.0 (2025-09-16)

Features Added

Other Changes

sdk/internal/v1.11.2

1.11.2 (2025-07-30)

Other Changes

0.11.0 (August 28th, 2018)

Uh oh!

dependabot bot commented on behalf of github Oct 12, 2025

Assignees

Uh oh!

sonarqubecloud bot commented Oct 19, 2025

Quality Gate passed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

dependabot bot commented on behalf of github Oct 12, 2025 •

edited

Loading