dev: bump the safe group across 1 directory with 31 updates by dependabot[bot] · Pull Request #7709 · TheThingsNetwork/lorawan-stack

dependabot · 2025-09-03T01:38:29Z

Bumps the safe group with 19 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go	`1.55.7`	`1.55.8`
github.com/aws/aws-sdk-go-v2/config	`1.29.12`	`1.31.6`
github.com/aws/aws-sdk-go-v2/service/s3	`1.78.2`	`1.87.3`
github.com/emersion/go-smtp	`0.22.0`	`0.24.0`
github.com/getsentry/sentry-go	`0.34.1`	`0.35.1`
github.com/grpc-ecosystem/grpc-gateway/v2	`2.27.1`	`2.27.2`
github.com/jarcoal/httpmock	`1.4.0`	`1.4.1`
github.com/nats-io/nats-server/v2	`2.11.4`	`2.11.8`
github.com/prometheus/client_golang	`1.22.0`	`1.23.0`
github.com/redis/go-redis/v9	`9.11.0`	`9.12.1`
github.com/spf13/cobra	`1.9.1`	`1.10.1`
github.com/throttled/throttled/v2	`2.13.0`	`2.15.0`
github.com/uptrace/bun	`1.2.14`	`1.2.15`
github.com/uptrace/bun/dialect/pgdialect	`1.2.14`	`1.2.15`
github.com/uptrace/bun/driver/pgdriver	`1.2.14`	`1.2.15`
go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux	`0.62.0`	`0.63.0`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	`0.62.0`	`0.63.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	`0.62.0`	`0.63.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	`1.37.0`	`1.38.0`

Updates github.com/aws/aws-sdk-go from 1.55.7 to 1.55.8

Release notes

Sourced from github.com/aws/aws-sdk-go's releases.

Release v1.55.8 (2025-07-31)

SDK Features

Mark the module and all packages as deprecated.

This SDK has entered end-of-support.

Commits

070853e release v1.55.8 (2025-07-31)
bb0168e Add deprecation warnings everywhere and remove some README content
7ce44f3 aws
6d9a26d remove doc issue tmpl
239002f deprecate service packages and HLLs
70c4177 deprecate main runtime packages
bbdd4e9 deprecate
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.29.12 to 1.31.6

Commits

640b808 Release 2025-08-29
657a6e8 Regenerated Clients
34a91bb Update partitions file
09f5a9c Update endpoints model
fff96ca Update API model
d46f566 deprecate service/sms (#3176)
de16d4d Release 2025-08-28
d6b83a8 Regenerated Clients
b0f9cb7 Update API model
8225491 Release 2025-08-27
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.78.2 to 1.87.3

Commits

640b808 Release 2025-08-29
657a6e8 Regenerated Clients
34a91bb Update partitions file
09f5a9c Update endpoints model
fff96ca Update API model
d46f566 deprecate service/sms (#3176)
de16d4d Release 2025-08-28
d6b83a8 Regenerated Clients
b0f9cb7 Update API model
8225491 Release 2025-08-27
Additional commits viewable in compare view

Updates github.com/emersion/go-smtp from 0.22.0 to 0.24.0

Commits

ab24fe7 Remove superfluous validateLine() calls in sendMail()
6944e33 Implement MT-PRIORITY (RFC 6710)
54dd31d Implement DELIVERBY (RFC 2852)
See full diff in compare view

Updates github.com/getsentry/sentry-go from 0.34.1 to 0.35.1

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.35.1

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.35.1.

Bug Fixes

Fix race conditions when accessing the scope during logging operations (#1050)

Fix nil pointer dereference with malformed URLs when tracing is enabled in fasthttp and fiber integrations (#1055)

Misc

Bump github.com/gofiber/fiber/v2 from 2.52.5 to 2.52.9 in /fiber (#1067)

0.35.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.35.0.

Breaking Changes

Changes to the logging API (#1046)

The logging API now supports a fluent interface for structured logging with attributes:
// usage before
logger := sentry.NewLogger(ctx)
// attributes weren't being set permanently
logger.SetAttributes(
    attribute.String("version", "1.0.0"),
)
logger.Infof(ctx, "Message with parameters %d and %d", 1, 2)
// new behavior
ctx := context.Background()
logger := sentry.NewLogger(ctx)
// Set permanent attributes on the logger
logger.SetAttributes(
attribute.String("version", "1.0.0"),
)
// Chain attributes on individual log entries
logger.Info().
String("key.string", "value").
Int("key.int", 42).
Bool("key.bool", true).
Emitf("Message with parameters %d and %d", 1, 2)
Bug Fixes

Correctly serialize FailureIssueThreshold and RecoveryThreshold onto check-in payloads (#1060)

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.35.1

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.35.1.

Bug Fixes

Fix race conditions when accessing the scope during logging operations (#1050)

Fix nil pointer dereference with malformed URLs when tracing is enabled in fasthttp and fiber integrations (#1055)

Misc

Bump github.com/gofiber/fiber/v2 from 2.52.5 to 2.52.9 in /fiber (#1067)

0.35.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.35.0.

Breaking Changes

Changes to the logging API (#1046)

The logging API now supports a fluent interface for structured logging with attributes:
// usage before
logger := sentry.NewLogger(ctx)
// attributes weren't being set permanently
logger.SetAttributes(
    attribute.String("version", "1.0.0"),
)
logger.Infof(ctx, "Message with parameters %d and %d", 1, 2)
// new behavior
ctx := context.Background()
logger := sentry.NewLogger(ctx)
// Set permanent attributes on the logger
logger.SetAttributes(
attribute.String("version", "1.0.0"),
)
// Chain attributes on individual log entries
logger.Info().
String("key.string", "value").
Int("key.int", 42).
Bool("key.bool", true).
Emitf("Message with parameters %d and %d", 1, 2)
Bug Fixes

... (truncated)

Commits

efaa5db release: 0.35.1
b3adb47 Prepare 0.35.1 (#1069)
a100bf5 Fix race conditions on log when accessing scope (#1050)
17421c4 Fix nil pointer dereference with malformed URLs when tracing is enabled (#1055)
55af278 build(deps): bump github.com/gofiber/fiber/v2 in /fiber (#1067)
c846e7c Merge branch 'release/0.35.0'
a3e3405 release: 0.35.0
31fcbbd Prepare 0.35.0 (#1065)
2a2b640 Add .cursor rules (#1053)
274de7b Improve logging API (#1046)
Additional commits viewable in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.1 to 2.27.2

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.27.2

What's Changed

Fix nested schema definition for body parameter (#3058) by @ilyongcho-moloco in grpc-ecosystem/grpc-gateway#5827

Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v3 by @MB175 in grpc-ecosystem/grpc-gateway#5857

New Contributors

@ilyongcho-moloco made their first contribution in grpc-ecosystem/grpc-gateway#5827

@MB175 made their first contribution in grpc-ecosystem/grpc-gateway#5857

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.1...v2.27.2

Commits

91958df chore(deps): update dependency rules_shell to v0.6.0 (#5862)
74cf2e0 Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v3 (#5857)
2fba191 chore(deps): update googleapis digest to 3b2a2ae (#5860)
ed12336 fix(deps): update module google.golang.org/grpc to v1.75.0 (#5859)
c2a8616 chore(deps): update googleapis digest to 2032c33 (#5858)
77e504f Fix nested schema definition for body parameter (#3058) (#5827)
7df4168 fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 3122310...
6d1d1fc fix(deps): update google.golang.org/genproto/googleapis/api digest to 3122310...
ec3d9b2 chore(deps): update googleapis digest to d869249 (#5852)
8499438 chore(deps): update googleapis digest to 6429996 (#5851)
Additional commits viewable in compare view

Updates github.com/jarcoal/httpmock from 1.4.0 to 1.4.1

Release notes

Sourced from github.com/jarcoal/httpmock's releases.

v1.4.1

What's Changed

test: also test with go v1.25 and use golangci-lint v2.4.0 by @maxatome in jarcoal/httpmock#164

Avoid data race when closing body by @DavyJohnes in jarcoal/httpmock#165

New Contributors

@DavyJohnes made his first contribution in jarcoal/httpmock#165

Full Changelog: jarcoal/httpmock@v1.4.0...v1.4.1

Commits

314d58a fix: protect all body-related methods with mutext
e482896 fix: avoid data race when closing body
c977145 test: also test with go v1.25 and use golangci-lint v2.4.0
See full diff in compare view

Updates github.com/nats-io/nats-server/v2 from 2.11.4 to 2.11.8

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.11.8

Changelog

Refer to the 2.11 Upgrade Guide for backwards compatibility notes with 2.10.x.

Go Version

1.24.6 (#7156)

Dependencies

golang.org/x/crypto v0.41.0 (#7166)

golang.org/x/sys v0.35.0 (#7166)

Added

General

Community-contributed support for building on Solaris and Illumos (#7122, thanks to @jwntree)

Fixed

General

String-to-integer parsing has been improved in various places to prevent overflows/underflows (#7145)

JetStream

Fixed an incorrectly formatted log line when failing to load a block when recovering TTLs (#7150)

Raft will now step down if a higher term is detected during a catchup (#7151)

Raft will now more reliably ignore entries from previous/cancelled catchups that arrive late (#7151)

Fix a potential panic that could happen by a division by zero when applying Raft entries (#7151)

The healthcheck endpoint should no longer report transient errors for newly created or recently deleted consumers (#7154)

Fix a potential panic when trying to truncate a filestore block that doesn't exist (#7162)

Clean up stale index.db file when truncating so that it is not inconsistent if the truncate operation is interrupted (#7162)

Fix an off-by-one problem when Raft truncates to the correct index at startup (#7162)

Ephemeral consumers will always select an online server when created on a replicated stream (#7165)

Tests

Tests have been improved (#7140)

Complete Changes

nats-io/nats-server@v2.11.7...v2.11.8

Release v2.11.8-RC.1

Changelog

Refer to the 2.11 Upgrade Guide for backwards compatibility notes with 2.10.x.

... (truncated)

Commits

ec0d7e3 Release v2.11.8
819047d Release v2.11.8-RC.1
031e636 Cherry-picks for 2.11.8-RC.1 (#7168)
bfb410e [FIXED] Ephemeral consumers always selects an online server
50876ed [FIXED] Truncate removes index.db first
f706551 [FIXED] NRG: Truncate to previous correct entry
df30f46 [FIXED] Truncate to removed block
39a511a Update dependencies
dff3a6d Update golangci-lint
5f61aa4 illumos build fix
Additional commits viewable in compare view

Updates github.com/nats-io/nats.go from 1.43.0 to 1.44.0

Release notes

Sourced from github.com/nats-io/nats.go's releases.

Release v1.44.0

Changelog

Overview

This PR adds a PushConsumer implementation to jetstream, allowing easier migration to new API while maintaining usage of push consumers. For now it only supports the callback-based Consume(), more consuming options will be added in future releases.

ADDED

Core NATS:

UserCredentialBytes() Conn option (#1877)

JetStream:

PushConsumer implementation in jetstream package

Expose ClientTrace in JetStreamOptions (#1886)

Service API:

Expose WithEndpointPendingLimits option (#1899)

Legacy KeyValue:

Error() method to KeyLister and KeyWatcher interfaces (#1889)

FIXED

Core NATS:

Fix timeoutWriter not recovering after first error (#1896)

JetStream:

Consumer.Next() hangs after connection is closed (#1883)

Fixed stream info request for strict mode (#1887)

Ordered consumer not closing on connection close (#1885)

Return a more appropriate error when Subject Transform is not supported (#1416)

Fix subject transform comparison. Thanks @erikmansson for the contribution (#1907)

Legacy JetStream:

Use timeout from JetStreamContext if no deadline is set on ctx (#1909)

KeyValue:

Keys() and ListKeys() returning duplicates (#1884)

Fix subject prefix for the Create/Update operation in KV store. Thanks @SalvaChiLlo for the contribution (#1903)

CHANGED

Change DefaultSubPendingMsgsLimit (#998)

Complete Changes

nats-io/nats.go@v1.43.0...v1.44.0

Commits

7a260b8 Release v1.44.0 (#1910)
dfcb02d [FIXED] Use mirror-aware prefix when updating KV key (#1903)
0bba2a9 [ADDED] PushConsumer implementation in jetstream package (#1785)
627a9f6 [FIXED] KeyValue Keys() and ListKeys() returning duplicates (#1884)
9743171 Merge pull request #1909 from nats-io/fix-watcher-timeout
3bd15a8 [FIXED] Use timeout from JetStreamContext if no deadline is set on ctx
0fc96b1 [FIXED] Fix subject transform comparison (#1907)
ea3ef92 [IMPROVED] Change DefaultSubPendingMsgsLimit comment to reflect actual value ...
f038fb4 [FIXED] Return a more appropriate error when subject transforms are not suppo...
ad6e34e [FIXED] Ordered consumer not closing on connection close (#1885)
Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.22.0 to 1.23.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.0 - 2025-07-30

[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812

[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766

[FEATURE] Add exemplars for native histograms #1686

[ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823

[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833

[BUGFIX] exp/api: client prompt return on context cancellation #1729

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.0 / 2025-07-30

[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812

[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766

[FEATURE] Add exemplars for native histograms #1686

[ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823

[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833

[BUGFIX] exp/api: client prompt return on context cancellation #1729

Commits

e4b2208 Cut v1.23.0 (#1848)
d9492af cut v1.23.0-rc.1 (#1842)
aeae8a0 Cut v1.23.0-rc.0 (#1837)
b157309 Update common Prometheus files (#1832)
a704e28 build(deps): bump the github-actions group with 3 updates (#1826)
c774311 Fix errNotImplemented reference (#1835)
db4db7b Update runtime metrics for Go v1.23 and v1.24 (#1833)
99d380e Update common Prometheus files (#1831)
f3ef320 Merge pull request #1828 from prometheus/dependabot/go_modules/exp/github.com...
520c91a build(deps): bump github.com/prometheus/common in /exp
Additional commits viewable in compare view

Updates github.com/redis/go-redis/v9 from 9.11.0 to 9.12.1

Release notes

Sourced from github.com/redis/go-redis/v9's releases.

9.12.1

🚀 Highlights

In the last version (9.12.0) the client introduced bigger write and read buffer sizes. The default value was 512KiB. However, users reported that this is too big for most use cases and can lead to high memory usage. In this version the default value is changed to 256KiB. The README.md was updated to reflect the correct default value and include a note that the default value can be changed.

🐛 Bug Fixes

fix(options): Add buffer sizes to failover. Update README (#3468)

🧰 Maintenance

fix(options): Add buffer sizes to failover. Update README (#3468)

chore: update & fix otel example (#3466)

Contributors

We'd like to thank all the contributors who worked on this release!

@ndyakov and @vmihailenco

9.12.0

🚀 Highlights

This release includes support for Redis 8.2.

Introduces an experimental Query Builders for FTSearch, FTAggregate and other search commands.

Adds support for EPSILON option in FT.VSIM.

Includes bug fixes and improvements contributed by the community related to ring and redisotel.

Changes

Improve stale issue workflow (#3458)

chore(ci): Add 8.2 rc2 pre build for CI (#3459)

Added new stream commands (#3450)

feat: Add "skip_verify" to Sentinel (#3428)

fix: errors.Join requires Go 1.20 or later (#3442)

DOC-4344 document quickstart examples (#3426)

feat(bitop): add support for the new bitop operations (#3409)

🚀 New Features

feat: recover addIdleConn may occur panic (#2445)

feat(ring): specify custom health check func via HeartbeatFn option (#2940)

Add Query Builder for RediSearch commands (#3436)

add configurable buffer sizes for Redis connections (#3453)

Add VAMANA vector type to RediSearch (#3449)

VSIM add EPSILON option (#3454)

Add closing support to otel metrics instrumentation (#3444)

🐛 Bug Fixes

... (truncated)

Changelog

Sourced from github.com/redis/go-redis/v9's changelog.

9.12.1 (2025-08-11)

🚀 Highlights

In the last version (9.12.0) the client introduced bigger write and read buffer sized. The default value we set was 512KiB. However, users reported that this is too big for most use cases and can lead to high memory usage. In this version the default value is changed to 256KiB. The README.md was updated to reflect the correct default value and include a note that the default value can be changed.

🐛 Bug Fixes

fix(options): Add buffer sizes to failover. Update README (#3468)

🧰 Maintenance

fix(options): Add buffer sizes to failover. Update README (#3468)

chore: update & fix otel example (#3466)

Contributors

We'd like to thank all the contributors who worked on this release!

@ndyakov and @vmihailenco

9.12.0 (2025-08-05)

🚀 Highlights

This release includes support for Redis 8.2.

Introduces an experimental Query Builders for FTSearch, FTAggregate and other search commands.

Adds support for EPSILON option in FT.VSIM.

Includes bug fixes and improvements contributed by the community related to ring and redisotel.

Changes

Improve stale issue workflow (#3458)

chore(ci): Add 8.2 rc2 pre build for CI (#3459)

Added new stream commands (#3450)

feat: Add "skip_verify" to Sentinel (#3428)

fix: errors.Join requires Go 1.20 or later (#3442)

DOC-4344 document quickstart examples (#3426)

feat(bitop): add support for the new bitop operations (#3409)

🚀 New Features

feat: recover addIdleConn may occur panic (#2445)

feat(ring): specify custom health check func via HeartbeatFn option (#2940)

Add Query Builder for RediSearch commands (#3436)

add configurable buffer sizes for Redis connections (#3453)

Add VAMANA vector type to RediSearch (#3449)

VSIM add EPSILON option (#3454)

Add closing support to otel metrics instrumentation (#3444)

🐛 Bug Fixes

... (truncated)

Commits

7b4a537 chore(release): 9.12.1, failover client buffer size fixes (#3469)
94cfffa fix(options): Add buffer sizes to failover. Update README (#3468)
2c29ded chore(otel): upgrade otel example to Uptrace v2 (#3466)
b7838dc chore(release): 9.12.0 / redis 8.2 (#3464)
6a48d3f feat: recover addIdleConn may occur panic (#2445)
4767d9d fix(redisotel): fix buggy append in reportPoolStats (#3122)
7158a8d feat(ring): specify custom health check func via HeartbeatFn option (#2940)
8d15d03 chore(github): merges into one job with two steps (#3463)
375fa5d chore(doc): improve code readability (#3446)
f006e94 chore(release): 9.12.0-beta.1 (#3460)
Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.9.1 to 1.10.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.1

🐛 Fix

chore: upgrade pflags v1.0.9 by @jpmcb in spf13/cobra#2305

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

What's Changed

🚨 Attention!

Bump pflag to 1.0.8 by @tomasaschan in spf13/cobra#2303

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`

or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: spf13/cobra#2303

✨ Features

Flow context to command in SetHelpFunc by @Frassle in spf13/cobra#2241

The default ShellCompDirective can be customized for a command and its subcommands by @albers in spf13/cobra#2238

🐛 Fix

Upgrade golangci-lint to v2, address findings by @scop in spf13/cobra#2279

🪠 Testing

Test with Go 1.24 by @harryzcy in spf13/cobra#2236

chore: Rm GitHub Action PR size labeler by @jpmcb in spf13/cobra#2256

📝 Docs

Remove traling curlybrace by @yedayak in spf13/cobra#2237

Update command.go by @styee in spf13/cobra#2248

feat: Add security policy by @jpmcb in spf13/cobra#2253

Update Readme (Warp) by @ericdachen in spf13/cobra#2267

Add Periscope to the list of projects using Cobra by @anishathalye in spf13/cobra#2299

New Contributors

@harryzcy made their first contribution in spf13/cobra#2236

@yedayak made their first contribution in spf13/cobra#2237

@Frassle made their first contribution in spf13/cobra#2241

... (truncated)

Commits

7da941c chore: Bump pflag to v1.0.9 (#2305)
51d6751 Bump pflag to 1.0.8 (#2303)
3f3b818 Update README.md with new logo
dcaf42e Add Periscope to the list of projects using Cobra (#2299)
6dec1ae The default ShellCompDirective can be customized for a command and its subcom...
c8289c1 chore(golangci-lint): add some exclusion presets
4af7b64 refactor: apply golangci-lint autofixes, work around false positives
75790e4 chore(golangci-lint): upgrade to v2
db3ddb5 Adding sponsorship to README.md
67171d6 putting sponsorship below header
Additional commits viewable in compare view

Updates github.com/spf13/pflag from 1.0.6 to 1.0.9

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.9

What's Changed

fix: Restore ParseErrorsWhitelist name for now by @tomasaschan in spf13/pflag#446

Full Changelog: spf13/pflag@v1.0.8...v1.0.9

v1.0.8

⚠️ Breaking Change

This version, while only a patch bump, includes a (very minor) breaking change: the flag.ParseErrorsWhitelist struct and corresponding FlagSet.parseErrorsWhitelist field have been renamed to ParseErrorsAllowlist.

This should result in compilation errors in any code that uses these fields, which can be fixed by adjusting the names at call sites. There is no change in semantics or behavior of the struct or field referred to by these names. If your code compiles without errors after bumping to/past v1.0.8, you are not affected by this change.

The breaking change was reverted in v1.0.9, by means of re-introducing the old names with deprecation warnings. The plan is still to remove them in a future release, so if your code does depend on the old names, please change them to use the new names at your earliest convenience.

What's Changed

Remove Redundant "Unknown-Flag" Error by @vaguecoder in spf13/pflag#364

Switching from whitelist to Allowlist terminology by @dubrie in spf13/pflag#261

Omit zero time.Time default from usage line by @mologie in spf13/pflag#438

implement CopyToGoFlagSet by @pohly in spf13/pflag#330

flag: Emulate stdlib behavior and do not print ErrHelp by @tmc in spf13/pflag#407

Print Default Values of String-to-String in Sorted Order by @vaguecoder in spf13/pflag#365

fix: Don't print ErrHelp in ParseAll by @tomasaschan in spf13/pflag#443

Reset args on re-parse even if empty by @tomasaschan in spf13/pflag#444

New Contributors

@vaguecoder made their first contribution in spf13/pflag#364

@dubrie made their first contribution in spf13/pflag#261

@mologie made their first contribution in spf13/pflag#438

@pohly made their first contribution in spf13/pflag#330

@tmc made their first contribution in spf13/pflag#407

@tomasaschan made their first contribution in spf13/pflag#443

Full Changelog: spf13/pflag@v1.0.7...v1.0.8

v1.0.7

What's Changed

Fix defaultIsZeroValue check for generic Value types by @MidnightRocket in spf13/pflag#422

feat: Use structs for errors returned by pflag. by @eth-p in spf13/pflag#425

Fix typos by @co63oc in spf13/pflag#428

fix #423 : Add helper function and some documentation to parse shorthand go test flags. by @valdar in spf13/pflag#424

add support equivalent to golang flag.TextVar(), also fixes the test failure as described in #368 by @hujun-open in spf13/pflag#418

add support for Func() and BoolFunc() #426 by @LeGEC in spf13/pflag#429

fix: correct argument length check in FlagSet.Parse by @ShawnJeffersonWang in spf13/pflag#409

fix usage message for func flags, fix arguments order by @LeGEC in spf13/pflag#431

Add support for time.Time flags by @max-frank in spf13/pflag#348

New Contributors

@MidnightRocket made their first contribution in spf13/pflag#422

... (truncated)

Commits

1043857 Merge pull request #446 from spf13/fix-backwards-compat
7412009 fix: Restore ParseErrorsWhitelist name for now
b9c16fa Merge pull request #444 from spf13/reset-args-even-if-empty
40abc49 Merge pull request #443 from spf13/silence-errhelp
1bf832c Use errors.Is instead of equality check
d25dd24 Reset args on re-parse even if empty
094909d Merge pull request #365 from vaguecoder/str2str-sorted
ccb49e5 Print Default Values of String-to-String in Sorted Order
b55ffb6 fix: Don't print ErrHelp in ParseAll
7c651d1 Merge pull request #407 from tmc/fix-errhelp
Additional commits viewable in compare view

Updates github.com/throttled/throttled/v2 from 2.13.0 to 2.15.0

Release notes

Sourced from github.com/throttled/throttled/v2's releases.Description has been truncated

Bumps the safe group with 19 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) | `1.55.7` | `1.55.8` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.29.12` | `1.31.6` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.78.2` | `1.87.3` | | [github.com/emersion/go-smtp](https://github.com/emersion/go-smtp) | `0.22.0` | `0.24.0` | | [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) | `0.34.1` | `0.35.1` | | [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.27.1` | `2.27.2` | | [github.com/jarcoal/httpmock](https://github.com/jarcoal/httpmock) | `1.4.0` | `1.4.1` | | [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) | `2.11.4` | `2.11.8` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.22.0` | `1.23.0` | | [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.11.0` | `9.12.1` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.9.1` | `1.10.1` | | [github.com/throttled/throttled/v2](https://github.com/throttled/throttled) | `2.13.0` | `2.15.0` | | [github.com/uptrace/bun](https://github.com/uptrace/bun) | `1.2.14` | `1.2.15` | | [github.com/uptrace/bun/dialect/pgdialect](https://github.com/uptrace/bun) | `1.2.14` | `1.2.15` | | [github.com/uptrace/bun/driver/pgdriver](https://github.com/uptrace/bun) | `1.2.14` | `1.2.15` | | [go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.62.0` | `0.63.0` | | [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.62.0` | `0.63.0` | | [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.62.0` | `0.63.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.38.0` | Updates `github.com/aws/aws-sdk-go` from 1.55.7 to 1.55.8 - [Release notes](https://github.com/aws/aws-sdk-go/releases) - [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG_PENDING.md) - [Commits](aws/aws-sdk-go@v1.55.7...v1.55.8) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.29.12 to 1.31.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@config/v1.29.12...config/v1.31.6) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.78.2 to 1.87.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.78.2...service/s3/v1.87.3) Updates `github.com/emersion/go-smtp` from 0.22.0 to 0.24.0 - [Release notes](https://github.com/emersion/go-smtp/releases) - [Commits](emersion/go-smtp@v0.22.0...v0.24.0) Updates `github.com/getsentry/sentry-go` from 0.34.1 to 0.35.1 - [Release notes](https://github.com/getsentry/sentry-go/releases) - [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-go@v0.34.1...v0.35.1) Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.1 to 2.27.2 - [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases) - [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/main/.goreleaser.yml) - [Commits](grpc-ecosystem/grpc-gateway@v2.27.1...v2.27.2) Updates `github.com/jarcoal/httpmock` from 1.4.0 to 1.4.1 - [Release notes](https://github.com/jarcoal/httpmock/releases) - [Commits](jarcoal/httpmock@v1.4.0...v1.4.1) Updates `github.com/nats-io/nats-server/v2` from 2.11.4 to 2.11.8 - [Release notes](https://github.com/nats-io/nats-server/releases) - [Changelog](https://github.com/nats-io/nats-server/blob/main/.goreleaser.yml) - [Commits](nats-io/nats-server@v2.11.4...v2.11.8) Updates `github.com/nats-io/nats.go` from 1.43.0 to 1.44.0 - [Release notes](https://github.com/nats-io/nats.go/releases) - [Commits](nats-io/nats.go@v1.43.0...v1.44.0) Updates `github.com/prometheus/client_golang` from 1.22.0 to 1.23.0 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.22.0...v1.23.0) Updates `github.com/redis/go-redis/v9` from 9.11.0 to 9.12.1 - [Release notes](https://github.com/redis/go-redis/releases) - [Changelog](https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md) - [Commits](redis/go-redis@v9.11.0...v9.12.1) Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.1 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.9.1...v1.10.1) Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.9 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.6...v1.0.9) Updates `github.com/throttled/throttled/v2` from 2.13.0 to 2.15.0 - [Release notes](https://github.com/throttled/throttled/releases) - [Changelog](https://github.com/throttled/throttled/blob/master/CHANGELOG.md) - [Commits](throttled/throttled@v2.13.0...v2.15.0) Updates `github.com/uptrace/bun` from 1.2.14 to 1.2.15 - [Release notes](https://github.com/uptrace/bun/releases) - [Changelog](https://github.com/uptrace/bun/blob/master/CHANGELOG.md) - [Commits](uptrace/bun@v1.2.14...v1.2.15) Updates `github.com/uptrace/bun/dialect/pgdialect` from 1.2.14 to 1.2.15 - [Release notes](https://github.com/uptrace/bun/releases) - [Changelog](https://github.com/uptrace/bun/blob/master/CHANGELOG.md) - [Commits](uptrace/bun@v1.2.14...v1.2.15) Updates `github.com/uptrace/bun/driver/pgdriver` from 1.2.14 to 1.2.15 - [Release notes](https://github.com/uptrace/bun/releases) - [Changelog](https://github.com/uptrace/bun/blob/master/CHANGELOG.md) - [Commits](uptrace/bun@v1.2.14...v1.2.15) Updates `go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux` from 0.62.0 to 0.63.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.62.0...zpages/v0.63.0) Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.62.0 to 0.63.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.62.0...zpages/v0.63.0) Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.62.0 to 0.63.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.62.0...zpages/v0.63.0) Updates `go.opentelemetry.io/otel` from 1.37.0 to 1.38.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.37.0...v1.38.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.37.0 to 1.38.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.37.0...v1.38.0) Updates `go.opentelemetry.io/otel/exporters/stdout/stdouttrace` from 1.37.0 to 1.38.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.37.0...v1.38.0) Updates `go.opentelemetry.io/otel/metric` from 1.37.0 to 1.38.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.37.0...v1.38.0) Updates `go.opentelemetry.io/otel/sdk` from 1.37.0 to 1.38.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.37.0...v1.38.0) Updates `go.opentelemetry.io/otel/trace` from 1.37.0 to 1.38.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.37.0...v1.38.0) Updates `golang.org/x/crypto` from 0.40.0 to 0.41.0 - [Commits](golang/crypto@v0.40.0...v0.41.0) Updates `golang.org/x/net` from 0.42.0 to 0.43.0 - [Commits](golang/net@v0.42.0...v0.43.0) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250707201910-8d1bb00bc6a7 to 0.0.0-20250825161204-c5933d9347a5 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250707201910-8d1bb00bc6a7 to 0.0.0-20250825161204-c5933d9347a5 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.8 --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go dependency-version: 1.55.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.31.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.87.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: github.com/emersion/go-smtp dependency-version: 0.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: github.com/getsentry/sentry-go dependency-version: 0.35.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2 dependency-version: 2.27.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: github.com/jarcoal/httpmock dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: github.com/nats-io/nats-server/v2 dependency-version: 2.11.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: github.com/nats-io/nats.go dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: github.com/prometheus/client_golang dependency-version: 1.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: github.com/redis/go-redis/v9 dependency-version: 9.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: github.com/spf13/cobra dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: github.com/spf13/pflag dependency-version: 1.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: github.com/throttled/throttled/v2 dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: github.com/uptrace/bun dependency-version: 1.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: github.com/uptrace/bun/dialect/pgdialect dependency-version: 1.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: github.com/uptrace/bun/driver/pgdriver dependency-version: 1.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux dependency-version: 0.63.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc dependency-version: 0.63.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp dependency-version: 0.63.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: go.opentelemetry.io/otel dependency-version: 1.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc dependency-version: 1.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: go.opentelemetry.io/otel/exporters/stdout/stdouttrace dependency-version: 1.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: go.opentelemetry.io/otel/metric dependency-version: 1.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: golang.org/x/crypto dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: golang.org/x/net dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20250825161204-c5933d9347a5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20250825161204-c5933d9347a5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: google.golang.org/protobuf dependency-version: 1.36.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-09-08T22:06:05Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 3, 2025

dependabot Bot requested a review from a team as a code owner September 3, 2025 01:38

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 3, 2025

dependabot Bot requested a review from halimi September 3, 2025 01:38

dependabot Bot closed this Sep 8, 2025

dependabot Bot deleted the dependabot/go_modules/safe-eb4502b60b branch September 8, 2025 22:06

Navigation Menu

Uh oh!

dev: bump the safe group across 1 directory with 31 updates - #7709

dev: bump the safe group across 1 directory with 31 updates#7709
dependabot[bot] wants to merge 1 commit into
v3.34from
dependabot/go_modules/safe-eb4502b60b

dependabot Bot commented on behalf of github Sep 3, 2025 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 8, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 3, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release v1.55.8 (2025-07-31)

SDK Features

0.35.1

Bug Fixes

Misc

0.35.0

Breaking Changes

Bug Fixes

0.35.1

Bug Fixes

Misc

0.35.0

Breaking Changes

Bug Fixes

v2.27.2

What's Changed

New Contributors

v1.4.1

What's Changed

New Contributors

Release v2.11.8

Changelog

Go Version

Dependencies

Added

Fixed

Complete Changes

Release v2.11.8-RC.1

Changelog

Release v1.44.0

Changelog

Overview

ADDED

FIXED

CHANGED

Complete Changes

v1.23.0 - 2025-07-30

1.23.0 / 2025-07-30

9.12.1

🚀 Highlights

🐛 Bug Fixes

🧰 Maintenance

Contributors

9.12.0

🚀 Highlights

Changes

🚀 New Features

🐛 Bug Fixes

9.12.1 (2025-08-11)

🚀 Highlights

🐛 Bug Fixes

🧰 Maintenance

Contributors

9.12.0 (2025-08-05)

🚀 Highlights

Changes

🚀 New Features

🐛 Bug Fixes

v1.10.1

🐛 Fix

v1.10.0

What's Changed

🚨 Attention!

✨ Features

🐛 Fix

🪠 Testing

📝 Docs

New Contributors

v1.0.9

What's Changed

v1.0.8

⚠️ Breaking Change

What's Changed

New Contributors

v1.0.7

What's Changed

dependabot Bot commented on behalf of github Sep 3, 2025 •

edited

Loading