Bump the go-modules group with 24 updates #1005

dependabot · 2025-10-20T23:04:59Z

Bumps the go-modules group with 24 updates:

Package	From	To
cloud.google.com/go/auth	`0.16.4`	`0.17.0`
cloud.google.com/go/compute/metadata	`0.8.0`	`0.9.0`
cloud.google.com/go/iam	`1.5.2`	`1.5.3`
cloud.google.com/go/monitoring	`1.24.2`	`1.24.3`
cloud.google.com/go/storage	`1.56.0`	`1.57.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp	`1.27.0`	`1.30.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric	`0.53.0`	`0.54.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping	`0.53.0`	`0.54.0`
github.com/containerd/cgroups/v3	`3.0.3`	`3.0.5`
github.com/envoyproxy/go-control-plane/envoy	`1.32.4`	`1.35.0`
github.com/github/go-spdx/v2	`2.3.3`	`2.3.4`
github.com/go-jose/go-jose/v4	`4.0.5`	`4.1.1`
github.com/klauspost/compress	`1.18.0`	`1.18.1`
github.com/mattn/go-runewidth	`0.0.17`	`0.0.19`
github.com/nwaples/rardecode/v2	`2.2.0`	`2.2.1`
github.com/opencontainers/runtime-spec	`1.2.0`	`1.2.1`
github.com/spiffe/go-spiffe/v2	`2.5.0`	`2.6.0`
go.opentelemetry.io/contrib/detectors/gcp	`1.36.0`	`1.38.0`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	`0.61.0`	`0.63.0`
google.golang.org/api	`0.247.0`	`0.249.0`
google.golang.org/genproto	`0.0.0-20250603155806-513f23925822`	`0.0.0-20250922171735-9219d122eba9`
google.golang.org/genproto/googleapis/api	`0.0.0-20250721164621-a45f3dfb1074`	`0.0.0-20250922171735-9219d122eba9`
google.golang.org/genproto/googleapis/rpc	`0.0.0-20250818200422-3122310a409c`	`0.0.0-20250922171735-9219d122eba9`
google.golang.org/grpc	`1.74.2`	`1.75.1`

Updates cloud.google.com/go/auth from 0.16.4 to 0.17.0

Release notes

Sourced from cloud.google.com/go/auth's releases.

auth 0.17.0

0.17.0 (2025-10-02)

Features

add trust boundary support for external accounts (#12864) (a67a146)

Add trust boundary support for service accounts and impersonation (HTTP/gRPC) (#11870) (5c2b665)

Changelog

Sourced from cloud.google.com/go/auth's changelog.

v0.17.0

firestore BREAKING CHANGES:

Remove UpdateMap and UpdateStruct; rename UpdatePaths to Update. Change docref.UpdateMap(ctx, map[string]interface{}{"a.b", 1}) to docref.Update(ctx, []firestore.Update{{Path: "a.b", Value: 1}})

Change docref.UpdateStruct(ctx, []string{"Field"}, aStruct) to docref.Update(ctx, []firestore.Update{{Path: "Field", Value: aStruct.Field}})

Rename MergePaths to Merge; require args to be FieldPaths

A value stored as an integer can be read into a floating-point field, and vice versa.

bigtable/cmd/cbt:

Support deleting a column.

Add regex option for row read.

spanner: Mark stable.

storage:

Add Reader.ContentEncoding method.

Fix handling of SignedURL headers.

bigquery:

If Uploader.Put is called with no rows, it returns nil without making a call.

Schema inference supports the "nullable" option in struct tags for non-required fields.

TimePartitioning supports "Field".

v0.16.0

Other bigquery changes:

JobIterator.Next returns *Job; removed JobInfo (BREAKING CHANGE).

UseStandardSQL is deprecated; set UseLegacySQL to true if you need Legacy SQL.

Uploader.Put will generate a random insert ID if you do not provide one.

Support time partitioning for load jobs.

Support dry-run queries.

A Job remembers its last retrieved status.

Support retrieving job configuration.

Support labels for jobs and tables.

Support dataset access lists.

Improve support for external data sources, including data from Bigtable and Google Sheets, and tables with external data.

Support updating a table's view configuration.

Fix uploading civil times with nanoseconds.

storage:

Support PubSub notifications.

... (truncated)

Commits

050b16d all: update version and README
def6812 storage: fix SignedURL integration test
ff434d4 all: make tests pass with go1.10beta1
ad7ff91 storage: add header sanitisation for SignedURL.
b97d364 internal/fields: fix test to match next Go version
6856ba4 bigquery: support inference of nullable fields
5fa930e bigquery: support time-partitioning field
9cfa4d0 bigtable: link to the cbt installation instructions in the cbt docs
3051b91 datatransfer: move into bigquery dir
5733118 firestore: remove UpdateMap and UpdateStruct
Additional commits viewable in compare view

Updates cloud.google.com/go/compute/metadata from 0.8.0 to 0.9.0

Release notes

Sourced from cloud.google.com/go/compute/metadata's releases.

compute/metadata: v0.9.0

0.9.0 (2025-09-24)

Features

compute/metadata: Retry on HTTP 429 (#12932) (1e91f5c)

Changelog

Sourced from cloud.google.com/go/compute/metadata's changelog.

Code changes required from v0.9.0
pubsub: Replace
sub.ModifyPushConfig(ctx, pubsub.PushConfig{Endpoint: "https://example.com/push"})
with
sub.Update(ctx, pubsub.SubscriptionConfigToUpdate{
    PushConfig: &pubsub.PushConfig{Endpoint: "https://example.com/push"},
})
trace: traceGRPCServerInterceptor will be provided from *trace.Client. Given an initialized *trace.Client named tc, instead of
s := grpc.NewServer(grpc.UnaryInterceptor(trace.GRPCServerInterceptor(tc)))
write
s := grpc.NewServer(grpc.UnaryInterceptor(tc.GRPCServerInterceptor()))
trace trace.GRPCClientInterceptor will also provided from *trace.Client. Instead of
conn, err := grpc.Dial(srv.Addr, grpc.WithUnaryInterceptor(trace.GRPCClientInterceptor()))
write
conn, err := grpc.Dial(srv.Addr, grpc.WithUnaryInterceptor(tc.GRPCClientInterceptor()))
trace: We removed the deprecated trace.EnableGRPCTracing. Use the gRPC interceptor as a dial option as shown below when initializing Cloud package clients:
c, err := pubsub.NewClient(ctx, "project-id", option.WithGRPCDialOption(grpc.WithUnaryInterceptor(tc.GRPCClientInterceptor())))
if err != nil {
    ...

... (truncated)

Commits

d4f8670 BREAKING: all: regenerate toolkit client
23179f2 readme: document Trace and Error Reporting clients
c2e00bb trace: switch to grpc-trace-bin for gRPC calls
1de0ed4 rpcreplay: Fprintf functions
8878988 bigtable/bttest: Return proper error code when entity already exists
e432073 bigtable: Don't retry on INTERNAL errors.
84bf648 rpcreplay: responses to code review comments from previous CL
e687f27 rpcreplay: replay of unary RPCs
9da216d spanner: more integration tests
a089e75 logging: document that Close flushes the loggers
Additional commits viewable in compare view

Updates cloud.google.com/go/iam from 1.5.2 to 1.5.3

Release notes

Sourced from cloud.google.com/go/iam's releases.

iam: v1.5.3

1.5.3 (2025-10-08)

Bug Fixes

iam: Upgrade gRPC service registration func (9dd3adf)

Commits

bf00b9d chore: release main (#13076)
9dd3adf chore: bump changed modules (#13075)
9f9d01f fix: upgrade gRPC service registration func (#13063)
f14260d chore(.github): restore deep-remove-regex entries (#13073)
e127d94 test(bigtable): refactor TestRetryApply for clarity (#13052)
2930b5c chore: release main (#13065)
bc93e83 chore: bump changed modules (#13064)
0ce207f test(firestore): correct TestIntegration_WatchQuery (#13053)
04ac2d2 chore(.librarian): special-case fixes in state.yaml (#13062)
b94c3ba fix(storage): remove default timeout for gRPC operations (#13022)
Additional commits viewable in compare view

Updates cloud.google.com/go/monitoring from 1.24.2 to 1.24.3

Release notes

Sourced from cloud.google.com/go/monitoring's releases.

monitoring: v1.24.3

1.24.3 (2025-10-08)

Bug Fixes

monitoring: Upgrade gRPC service registration func (9dd3adf)

Commits

bf00b9d chore: release main (#13076)
9dd3adf chore: bump changed modules (#13075)
9f9d01f fix: upgrade gRPC service registration func (#13063)
f14260d chore(.github): restore deep-remove-regex entries (#13073)
e127d94 test(bigtable): refactor TestRetryApply for clarity (#13052)
2930b5c chore: release main (#13065)
bc93e83 chore: bump changed modules (#13064)
0ce207f test(firestore): correct TestIntegration_WatchQuery (#13053)
04ac2d2 chore(.librarian): special-case fixes in state.yaml (#13062)
b94c3ba fix(storage): remove default timeout for gRPC operations (#13022)
Additional commits viewable in compare view

Updates cloud.google.com/go/storage from 1.56.0 to 1.57.0

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.57.0

1.57.0 (2025-09-23)

Features

storage/control: Add new GetIamPolicy, SetIamPolicy, and TestIamPermissions RPCs (d73f912)

storage: Post support dynamic key name (#12677) (9e761f9)

storage: WithMeterProvider allows custom meter provider configuration (#12668) (7f574b0)

Bug Fixes

storage: Free buffers in Bidi Reader (#12839) (bc247fd)

storage: Make Writer thread-safe. (#12753) (9ea380b)

storage: No progress report for oneshot write (#12746) (b97c286)

Performance Improvements

storage: Pipeline gRPC writes (#12422) (1f2c5fe)

storage: v1.56.3

1.56.3 (2025-10-14)

Bug Fixes

storage: Persist resource in append retry (#13128) (9ad2100)

Commits

8efa03a chore(main): release spanner 1.57.0 (#9337)
7ff5356 fix(spanner): SelectAll struct fields match should be case-insensitive (#9417)
f377281 fix(spanner): internal test package should import local version (#9416)
8c76415 chore(main): release storage 1.38.0 (#9336)
36d788b chore(main): release bigquery 1.59.1 (#9412)
4ac005d fix(bigquery): align return time.Time values to UTC (#9411)
ae8c7b7 chore: release main (#9384)
f049c97 fix(aiplatform): remove field max_wait_duration from message Scheduling (#9...
f7170e2 chore: update CI to turn gowork setting off for build/test (#9396)
530d273 chore(main): release vertexai 0.7.1 (#9395)
Additional commits viewable in compare view

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp from 1.27.0 to 1.30.0

Release notes

Sourced from github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp's releases.

v1.5.1 and v0.29.1

What's Changed

Handle explicit reset points in the disabled normalizer by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#378

Add struct tag for sum of squared deviations estimate and factory test. by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#379

Prerelease v1.5.1 and v0.29.1 by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#380

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v1.5.0...v1.5.1

v1.5.0 and v0.29.0

What's Changed

Add integration test with metrics from the prometheus receiver by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#348

Add make commands for release by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#354

Send timeseries synchronously by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#358

Drop histograms without a sum by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#359

Add sum of squared deviation estimate by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#341

Add missing otel attributes to Spans exported to Cloud Trace by @jsuereth in GoogleCloudPlatform/opentelemetry-operations-go#365

Normalize histograms, summaries, and exponential histograms by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#360

Use the timeout passed to the metrics exporter by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#369

Collector logging exporter by @damemi in GoogleCloudPlatform/opentelemetry-operations-go#373

Update logging exporter to use "gcp.*" prefix for attributes by @damemi in GoogleCloudPlatform/opentelemetry-operations-go#374

Add logging exporter info to readme by @damemi in GoogleCloudPlatform/opentelemetry-operations-go#375

Prepare release for v0.29/v1.5.0 by @damemi in GoogleCloudPlatform/opentelemetry-operations-go#376

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v1.4.0...v1.5.0

v1.4.0 and v0.28.0

What's Changed

Allow users to override useragent by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#322

Address a bunch of small TODOs by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#314

Update release.go for latest release by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#321

Rename files to be easier to understand, and add comment by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#327

Fix formatting of summary quantile labels to match prometheus by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#325

Update opentelemetry collector dependency, and switch away from deprecated functions. by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#328

Sanitize label keys for metric descriptors by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#331

Add attribute mapping function by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#324

Normalize sums prior to exporting them by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#323

Do not use IsZero on timestamps obtained from pdata by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#336

Send summary counts as doubles instead of integers by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#338

Drop data points with no value set by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#339

Handle NaN sums in histograms and exponential histograms by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#340

Fix typos around integration tests by @damemi in GoogleCloudPlatform/opentelemetry-operations-go#345

Update fixtures based on upstream changes to the prometheus receiver by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#346

feat(propagator): create a new one-way propagator by @muncus in GoogleCloudPlatform/opentelemetry-operations-go#343

Demonstrate that integration tests aren't catching failures by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#349

Update dependencies by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#347

Address remaining nits from #347 by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#351

Prepare for releasing v1.4.0 and v0.28.0 by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#353

... (truncated)

Commits

7130d1a prepare for v1.30.0/v0.54.0 (#1072)
9a749d9 Update all dependencies, bump go version (#1069)
f8a4910 post-release: fix segfault in script when no replace is found (#1025)
1ea43a4 Bump mapstructure dependency manually (#1066)
20c2f35 feat: Populate description for gcm.TimeSeries (#1063)
48e79e1 migrate from pkg/translator/prometheus to otlptranslator (#1061)
339f1ae log project name when metric requests fail (#1059)
53263ae Show structured logging in Go (#1057)
44cf856 Update slog example (#1056)
e5c657d Add OTel Logging sample (#1055)
Additional commits viewable in compare view

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric from 0.53.0 to 0.54.0

Commits

7130d1a prepare for v1.30.0/v0.54.0 (#1072)
9a749d9 Update all dependencies, bump go version (#1069)
f8a4910 post-release: fix segfault in script when no replace is found (#1025)
1ea43a4 Bump mapstructure dependency manually (#1066)
20c2f35 feat: Populate description for gcm.TimeSeries (#1063)
48e79e1 migrate from pkg/translator/prometheus to otlptranslator (#1061)
339f1ae log project name when metric requests fail (#1059)
53263ae Show structured logging in Go (#1057)
44cf856 Update slog example (#1056)
e5c657d Add OTel Logging sample (#1055)
See full diff in compare view

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping from 0.53.0 to 0.54.0

Commits

7130d1a prepare for v1.30.0/v0.54.0 (#1072)
9a749d9 Update all dependencies, bump go version (#1069)
f8a4910 post-release: fix segfault in script when no replace is found (#1025)
1ea43a4 Bump mapstructure dependency manually (#1066)
20c2f35 feat: Populate description for gcm.TimeSeries (#1063)
48e79e1 migrate from pkg/translator/prometheus to otlptranslator (#1061)
339f1ae log project name when metric requests fail (#1059)
53263ae Show structured logging in Go (#1057)
44cf856 Update slog example (#1056)
e5c657d Add OTel Logging sample (#1055)
See full diff in compare view

Updates github.com/containerd/cgroups/v3 from 3.0.3 to 3.0.5

Release notes

Sourced from github.com/containerd/cgroups/v3's releases.

v3.0.5

What's Changed

add InotifyInit err to custom err message by @akhilerm in containerd/cgroups#355

cgroup2: Manager.Delete: handle both "threaded" and "domain threaded" by @thaJeztah in containerd/cgroups#358

New Contributors

@akhilerm made their first contribution in containerd/cgroups#355

Full Changelog: containerd/cgroups@v3.0.4...v3.0.5

v3.0.4

What's Changed

rename misspelling WithHiearchy to WithHierarchy by @blanet in containerd/cgroups#319

chore: don't log ENOTSUP during parsing PSI files by @KimMachineGun in containerd/cgroups#321

Add EOPNOTSUPP to err filter for PSI data by @mahendrapaipuri in containerd/cgroups#322

cg2: Don't read cgroup.procs when deleting threaded cg by @dcantah in containerd/cgroups#318

Added cgroup type by @yaoyinnan in containerd/cgroups#324

Update golangci-lint action to v4 and linter to v1.57.1 by @austinvazquez in containerd/cgroups#330

chore: fix function name by @sunxunle in containerd/cgroups#327

build(deps): bump google.golang.org/protobuf from 1.27.1 to 1.33.0 by @austinvazquez in containerd/cgroups#332

Add dependabot automation for GitHub Actions packages by @austinvazquez in containerd/cgroups#331

fix(ci): fix broken dependabot by @HeRaNO in containerd/cgroups#334

build(deps): bump actions/setup-go from 4 to 5 by @dependabot in containerd/cgroups#338

build(deps): bump golangci/golangci-lint-action from 4 to 6 by @dependabot in containerd/cgroups#337

build(deps): bump actions/checkout from 3 to 4 by @dependabot in containerd/cgroups#336

switch to github.com/containerd/log, and use structured logs by @thaJeztah in containerd/cgroups#341

go.mod: update to go1.19 as minimum, and add go1.22.x to GHA by @thaJeztah in containerd/cgroups#342

rename/remove vars that collided with builtin, minor linting and cleanup by @thaJeztah in containerd/cgroups#340

go.mod: github.com/docker/go-units v0.5.0 by @thaJeztah in containerd/cgroups#343

group1: don't use deprecated ParseCgroupFileUnified internally by @thaJeztah in containerd/cgroups#339

update minimum go version go go1.21 by @thaJeztah in containerd/cgroups#345

deprecate RunningInUserNS(), migrate to github.com/moby/sys/userns by @thaJeztah in containerd/cgroups#346

dont ignore failure to create cgroup after timeout by @jchorl in containerd/cgroups#349

fix: use the specified go version in lint jobs by @AlbertoBarba in containerd/cgroups#352

go.mod: bump up by @AkihiroSuda in containerd/cgroups#353

New Contributors

@blanet made their first contribution in containerd/cgroups#319

@KimMachineGun made their first contribution in containerd/cgroups#321

@mahendrapaipuri made their first contribution in containerd/cgroups#322

@sunxunle made their first contribution in containerd/cgroups#327

@dependabot made their first contribution in containerd/cgroups#338

@jchorl made their first contribution in containerd/cgroups#349

@AlbertoBarba made their first contribution in containerd/cgroups#352

Full Changelog: containerd/cgroups@v3.0.3...v3.0.4

Commits

bce3c7e Merge pull request #358 from thaJeztah/handle_domain_threaded
2236eb0 cgroup2: Manager.Delete: handle both "threaded" and "domain threaded"
d4e976d Merge pull request #355 from akhilerm/return-error-from-inotify
05bb490 add InotifyInit err to custom err message
082af38 Merge pull request #353 from AkihiroSuda/go-mod
aa02188 go.mod: bump up
1186f06 CI: drop Go 1.21
d98c3a5 Merge pull request #352 from AlbertoBarba/fix/ci-lint
6338d30 fix: use the specified go version in lint jobs
ffca7ca Merge pull request #349 from jchorl/jchorl/ignoretimeout
Additional commits viewable in compare view

Updates github.com/envoyproxy/go-control-plane/envoy from 1.32.4 to 1.35.0

Release notes

Sourced from github.com/envoyproxy/go-control-plane/envoy's releases.

envoy/v1.35.0

This release roughly matches the version of envoy API at tag v1.35.0 (commit ad6af72b4fcd7bf5fcb65f79676c2ee02116fe47, right before 729aeec7bfc049c12b4f7dafc0c41d22a274c8a5 attached to the tag)

Full Changelog: envoyproxy/go-control-plane@envoy/v1.32.4...envoy/v1.35.0

Commits

5321204 Mirrored from envoyproxy/envoy @ ad6af72b4fcd7bf5fcb65f79676c2ee02116fe47
e532931 build(deps): Bump github/codeql-action from 3.29.2 to 3.29.3 (#1243)
d6cfbf2 Mirrored from envoyproxy/envoy @ 1f468dda227cc72aa5e697fe58f3225c3ea9a5b7
f684dd6 Mirrored from envoyproxy/envoy @ 0d84e1a182adba9360a7d5405cabcc3fbd4b6320
668d79f Mirrored from envoyproxy/envoy @ c5f37fde4a7a5910e4426c58b614b1d79fa137b2
8d3588c Mirrored from envoyproxy/envoy @ 274d68f02971c1cf0da1628991126e8ebd307d25
246b683 build(deps): Bump github.com/golangci/golangci-lint/v2 (#1241)
bb3dbdd Mirrored from envoyproxy/envoy @ 877b9824370232745db11cf65417b8d88b4d38c5
8537c47 Mirrored from envoyproxy/envoy @ 668642e2b8c4f5d1bfa144ce99c7583ed26ccc87
be90dcf Mirrored from envoyproxy/envoy @ 9ba9a1b59773b13f9a6c2bd936034300c1fb47bf
Additional commits viewable in compare view

Updates github.com/github/go-spdx/v2 from 2.3.3 to 2.3.4

Release notes

Sourced from github.com/github/go-spdx/v2's releases.

Release v2.3.4

What's Changed

update licenses

bump dependencies

Full Changelog: github/go-spdx@v2.3.3...v2.3.4

Commits

3ea60cf Merge pull request #109 from github/auto-update-licenses
108cb58 Add updated license files
9e5ecc4 Merge pull request #116 from github/dependabot/github_actions/actions/setup-go-6
ff1cc1c Merge branch 'main' into dependabot/github_actions/actions/setup-go-6
b3240be Merge pull request #114 from github/dependabot/github_actions/actions/checkout-5
d4dc9f2 Bump actions/setup-go from 5 to 6
f63665b Bump actions/checkout from 4 to 5
7a705d1 Merge pull request #110 from github/elr/update-gomod
a9ed7b0 minor dependency update trigger autosubmission
936b224 Merge pull request #107 from github/elr/limit-pr-autogen
Additional commits viewable in compare view

Updates github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.1

Release notes

Sourced from github.com/go-jose/go-jose/v4's releases.

v4.1.1

What's Changed

Drop go-cmp dependency by @mcpherrinm in go-jose/go-jose#186

jws: improve performance and allocations for ParseSignedCompact by @drakkan in go-jose/go-jose#188

Add missing quote to unknown curve message #170 by @sudhanvaghebbale in go-jose/go-jose#189

Fix incorrect validation by @ProjectMutilation in go-jose/go-jose#192

Restore Go 1.23 compatibility by @anuraaga in go-jose/go-jose#193

New Contributors

@drakkan made...
Description has been truncated

Bumps the go-modules group with 24 updates: | Package | From | To | | --- | --- | --- | | [cloud.google.com/go/auth](https://github.com/googleapis/google-cloud-go) | `0.16.4` | `0.17.0` | | [cloud.google.com/go/compute/metadata](https://github.com/googleapis/google-cloud-go) | `0.8.0` | `0.9.0` | | [cloud.google.com/go/iam](https://github.com/googleapis/google-cloud-go) | `1.5.2` | `1.5.3` | | [cloud.google.com/go/monitoring](https://github.com/googleapis/google-cloud-go) | `1.24.2` | `1.24.3` | | [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.56.0` | `1.57.0` | | [github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go) | `1.27.0` | `1.30.0` | | [github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go) | `0.53.0` | `0.54.0` | | [github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go) | `0.53.0` | `0.54.0` | | [github.com/containerd/cgroups/v3](https://github.com/containerd/cgroups) | `3.0.3` | `3.0.5` | | [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) | `1.32.4` | `1.35.0` | | [github.com/github/go-spdx/v2](https://github.com/github/go-spdx) | `2.3.3` | `2.3.4` | | [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.0.5` | `4.1.1` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.0` | `1.18.1` | | [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.17` | `0.0.19` | | [github.com/nwaples/rardecode/v2](https://github.com/nwaples/rardecode) | `2.2.0` | `2.2.1` | | [github.com/opencontainers/runtime-spec](https://github.com/opencontainers/runtime-spec) | `1.2.0` | `1.2.1` | | [github.com/spiffe/go-spiffe/v2](https://github.com/spiffe/go-spiffe) | `2.5.0` | `2.6.0` | | [go.opentelemetry.io/contrib/detectors/gcp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `1.36.0` | `1.38.0` | | [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.61.0` | `0.63.0` | | [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.247.0` | `0.249.0` | | [google.golang.org/genproto](https://github.com/googleapis/go-genproto) | `0.0.0-20250603155806-513f23925822` | `0.0.0-20250922171735-9219d122eba9` | | [google.golang.org/genproto/googleapis/api](https://github.com/googleapis/go-genproto) | `0.0.0-20250721164621-a45f3dfb1074` | `0.0.0-20250922171735-9219d122eba9` | | [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20250818200422-3122310a409c` | `0.0.0-20250922171735-9219d122eba9` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.74.2` | `1.75.1` | Updates `cloud.google.com/go/auth` from 0.16.4 to 0.17.0 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@auth/v0.16.4...v0.17.0) Updates `cloud.google.com/go/compute/metadata` from 0.8.0 to 0.9.0 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@v0.8.0...v0.9.0) Updates `cloud.google.com/go/iam` from 1.5.2 to 1.5.3 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@iam/v1.5.2...iam/v1.5.3) Updates `cloud.google.com/go/monitoring` from 1.24.2 to 1.24.3 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@monitoring/v1.24.2...monitoring/v1.24.3) Updates `cloud.google.com/go/storage` from 1.56.0 to 1.57.0 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@spanner/v1.56.0...spanner/v1.57.0) Updates `github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp` from 1.27.0 to 1.30.0 - [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/releases) - [Commits](GoogleCloudPlatform/opentelemetry-operations-go@detectors/gcp/v1.27.0...detectors/gcp/v1.30.0) Updates `github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric` from 0.53.0 to 0.54.0 - [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/releases) - [Commits](GoogleCloudPlatform/opentelemetry-operations-go@v0.53.0...v0.54.0) Updates `github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping` from 0.53.0 to 0.54.0 - [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/releases) - [Commits](GoogleCloudPlatform/opentelemetry-operations-go@v0.53.0...v0.54.0) Updates `github.com/containerd/cgroups/v3` from 3.0.3 to 3.0.5 - [Release notes](https://github.com/containerd/cgroups/releases) - [Commits](containerd/cgroups@v3.0.3...v3.0.5) Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.32.4 to 1.35.0 - [Release notes](https://github.com/envoyproxy/go-control-plane/releases) - [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md) - [Commits](envoyproxy/go-control-plane@envoy/v1.32.4...envoy/v1.35.0) Updates `github.com/github/go-spdx/v2` from 2.3.3 to 2.3.4 - [Release notes](https://github.com/github/go-spdx/releases) - [Commits](github/go-spdx@v2.3.3...v2.3.4) Updates `github.com/go-jose/go-jose/v4` from 4.0.5 to 4.1.1 - [Release notes](https://github.com/go-jose/go-jose/releases) - [Commits](go-jose/go-jose@v4.0.5...v4.1.1) Updates `github.com/klauspost/compress` from 1.18.0 to 1.18.1 - [Release notes](https://github.com/klauspost/compress/releases) - [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml) - [Commits](klauspost/compress@v1.18.0...v1.18.1) Updates `github.com/mattn/go-runewidth` from 0.0.17 to 0.0.19 - [Commits](mattn/go-runewidth@v0.0.17...v0.0.19) Updates `github.com/nwaples/rardecode/v2` from 2.2.0 to 2.2.1 - [Commits](nwaples/rardecode@v2.2.0...v2.2.1) Updates `github.com/opencontainers/runtime-spec` from 1.2.0 to 1.2.1 - [Release notes](https://github.com/opencontainers/runtime-spec/releases) - [Changelog](https://github.com/opencontainers/runtime-spec/blob/main/ChangeLog) - [Commits](opencontainers/runtime-spec@v1.2.0...v1.2.1) Updates `github.com/spiffe/go-spiffe/v2` from 2.5.0 to 2.6.0 - [Release notes](https://github.com/spiffe/go-spiffe/releases) - [Changelog](https://github.com/spiffe/go-spiffe/blob/main/CHANGELOG.md) - [Commits](spiffe/go-spiffe@v2.5.0...v2.6.0) Updates `go.opentelemetry.io/contrib/detectors/gcp` from 1.36.0 to 1.38.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@v1.36.0...v1.38.0) Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.61.0 to 0.63.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.61.0...zpages/v0.63.0) Updates `google.golang.org/api` from 0.247.0 to 0.249.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.247.0...v0.249.0) Updates `google.golang.org/genproto` from 0.0.0-20250603155806-513f23925822 to 0.0.0-20250922171735-9219d122eba9 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250721164621-a45f3dfb1074 to 0.0.0-20250922171735-9219d122eba9 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250818200422-3122310a409c to 0.0.0-20250922171735-9219d122eba9 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.74.2 to 1.75.1 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.74.2...v1.75.1) --- updated-dependencies: - dependency-name: cloud.google.com/go/auth dependency-version: 0.17.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: cloud.google.com/go/compute/metadata dependency-version: 0.9.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: cloud.google.com/go/iam dependency-version: 1.5.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: cloud.google.com/go/monitoring dependency-version: 1.24.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: cloud.google.com/go/storage dependency-version: 1.57.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp dependency-version: 1.30.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric dependency-version: 0.54.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping dependency-version: 0.54.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/containerd/cgroups/v3 dependency-version: 3.0.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/envoyproxy/go-control-plane/envoy dependency-version: 1.35.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/github/go-spdx/v2 dependency-version: 2.3.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/go-jose/go-jose/v4 dependency-version: 4.1.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/klauspost/compress dependency-version: 1.18.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/mattn/go-runewidth dependency-version: 0.0.19 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/nwaples/rardecode/v2 dependency-version: 2.2.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/opencontainers/runtime-spec dependency-version: 1.2.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/spiffe/go-spiffe/v2 dependency-version: 2.6.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/contrib/detectors/gcp dependency-version: 1.38.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc dependency-version: 0.63.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/api dependency-version: 0.249.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/genproto dependency-version: 0.0.0-20250922171735-9219d122eba9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20250922171735-9219d122eba9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20250922171735-9219d122eba9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: google.golang.org/grpc dependency-version: 1.75.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-10-22T23:02:53Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 20, 2025

dependabot bot requested a review from a team as a code owner October 20, 2025 23:05

dependabot bot added go Pull requests that update Go code dependencies Pull requests that update a dependency file labels Oct 20, 2025

paketo-bot added the semver:patch A change requiring a patch version bump label Oct 20, 2025

dependabot bot closed this Oct 22, 2025

dependabot bot deleted the dependabot/go_modules/go-modules-471aa5bc7d branch October 22, 2025 23:02

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the go-modules group with 24 updates #1005

Bump the go-modules group with 24 updates #1005

Uh oh!

dependabot bot commented on behalf of github Oct 20, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Oct 22, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the go-modules group with 24 updates #1005

Bump the go-modules group with 24 updates #1005

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

auth 0.17.0

0.17.0 (2025-10-02)

Features

v0.17.0

v0.16.0

compute/metadata: v0.9.0

0.9.0 (2025-09-24)

Features

Code changes required from v0.9.0

iam: v1.5.3

1.5.3 (2025-10-08)

Bug Fixes

monitoring: v1.24.3

1.24.3 (2025-10-08)

Bug Fixes

storage: v1.57.0

1.57.0 (2025-09-23)

Features

Bug Fixes

Performance Improvements

storage: v1.56.3

1.56.3 (2025-10-14)

Bug Fixes

v1.5.1 and v0.29.1

What's Changed

v1.5.0 and v0.29.0

What's Changed

v1.4.0 and v0.28.0

What's Changed

v3.0.5

What's Changed

New Contributors

v3.0.4

What's Changed

New Contributors

envoy/v1.35.0

Release v2.3.4

What's Changed

v4.1.1

What's Changed

New Contributors

Uh oh!

dependabot bot commented on behalf of github Oct 22, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Oct 20, 2025 •

edited

Loading