Skip to content

gomod(deps): Bump the go-deps group across 1 directory with 6 updates - #2914

Merged
craciunoiuc merged 1 commit into
stagingfrom
dependabot/go_modules/staging/go-deps-dea3a126b2
Aug 31, 2026
Merged

gomod(deps): Bump the go-deps group across 1 directory with 6 updates#2914
craciunoiuc merged 1 commit into
stagingfrom
dependabot/go_modules/staging/go-deps-dea3a126b2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 30, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-deps group with 5 updates in the / directory:

Package From To
github.com/cli/cli/v2 2.97.0 2.98.0
github.com/getsentry/sentry-go 0.48.0 0.49.0
github.com/google/go-containerregistry 0.21.9 0.22.0
github.com/sirupsen/logrus 1.10.1 1.10.2
google.golang.org/grpc 1.83.1 1.83.2

Updates github.com/cli/cli/v2 from 2.97.0 to 2.98.0

Release notes

Sourced from github.com/cli/cli/v2's releases.

GitHub CLI 2.98.0

Security

A security vulnerability has been identified, and fixed, that binds the local forwarded port to all available network interfaces by default.

Users of gh codespace ports forward are advised to update gh to version v2.98.0 as soon as possible.

For more information see: GHSA-vfhh-p7hm-pxfh

Support worktrees in pr checkout

Users can now checkout a pull request into a git worktree by using the new --worktree PATH flag in gh pr checkout:

gh pr checkout 12 --worktree ../wt-feature

Add semantic search to search issues

The gh search issues command now supports semantic search for issues. Users can select the search type by passing the --search-type flag:

gh search issues --search-type semantic ...
gh search issues --search-type hybrid ...

For more information about semantic search see: "Improved Search for github issues is now generally available".

What's Changed

✨ Features

🐛 Fixes

📚 Docs & Chores

... (truncated)

Commits
  • a255baf Merge commit from fork
  • 0817149 chore: fix extra whitespace
  • b7c6866 Default Codespaces port forwarding to loopback
  • fadd4ef Merge pull request #14210 from cli/bagtoad/bump-gh-aw-actions-v0.87.1
  • b9336cf Merge pull request #14166 from cli/dependabot/go_modules/charm.land/lipgloss/...
  • fba1667 Merge pull request #14164 from cli/dependabot/go_modules/golang.org/x/crypto-...
  • af2ba94 Bump gh-aw-actions to v0.87.1 and recompile workflows
  • 25470f2 Merge pull request #14207 from cli/tidy-dev-diagnose-issue-triage
  • fc9c44c Merge pull request #14169 from cli/dependabot/github_actions/codeql-actions-2...
  • 5c44f6c Fix issue triage action compatibility
  • Additional commits viewable in compare view

Updates github.com/getsentry/sentry-go from 0.48.0 to 0.49.0

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.49.0

Breaking Changes 🛠

  • removing DisableLogs and DisableMetrics client options. Sending metrics and logs is already gated by the usage of our APIs already, so having a global kill switch is counter intuitive. Users that won't to opt out should just not call the relevant APIs or setup the integrations. by @​giortzisg in #1392

New Features ✨

  • add WithProxyoption for OTLP. This allows setting an otlptracehttp.HTTPTransportProxyFunc for the span exporter by @​pierrre in #1377

Bug Fixes 🐛

  • (echo) Propagate span through request context by @​EricGusmao in #1385
  • Skip recover frames on panic. This changes stacktrace behavior for captured panics, removing sentry.Recover frames to focus on the actual panic frames. The changes might affect issue grouping. by @​giortzisg in #1364

Internal Changes 🔧

Deps

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.49.0

Breaking Changes 🛠

  • removing DisableLogs and DisableMetrics client options. Sending metrics and logs is already gated by the usage of our APIs already, so having a global kill switch is counter intuitive. Users that won't to opt out should just not call the relevant APIs or setup the integrations. by @​giortzisg in #1392

New Features ✨

  • add WithProxyoption for OTLP. This allows setting an otlptracehttp.HTTPTransportProxyFunc for the span exporter by @​pierrre in #1377

Bug Fixes 🐛

  • (echo) Propagate span through request context by @​EricGusmao in #1385
  • Skip recover frames on panic. This changes stacktrace behavior for captured panics, removing sentry.Recover frames to focus on the actual panic frames. The changes might affect issue grouping. by @​giortzisg in #1364

Internal Changes 🔧

Deps

Commits
  • 78b09d1 release: 0.49.0
  • eff9f37 build(deps): bump github.com/labstack/echo/v5 from 5.0.3 to 5.2.0 in /echo (#...
  • c60a2f6 feat!: remove DisableLogs and DisableMetrics options (#1392)
  • c3f2330 build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.3 (#1397)
  • 9bb14a7 fix(echo): propagate span through request context (#1385)
  • fb9acd8 build(deps): bump getsentry/craft from 2.26.6 to 2.27.2 (#1381)
  • 17f540e feat(otel/otlp): add WithProxy option to span exporter (#1377)
  • ed9834e build(deps): bump actions/setup-go from 6.4.0 to 7.0.0 (#1382)
  • af6d9db build(deps): bump actions/checkout from 6.0.3 to 7.0.1 (#1380)
  • 93223f7 build(deps): bump google.golang.org/grpc to 1.82.1 and golang.org/x/sys to 0....
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.21.9 to 0.22.0

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.22.0

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.9...v0.21.10

Commits
  • 3f4ff3c fix(build): unify new build flow into cloudbuild_v2.yaml (#2419)
  • c6b5acd fix(build): correct Cloud Build schema options and source provenance hash (#2...
  • 8f4a85d go.mod: bump Go version + add toolchain directive to replace .go-version file...
  • 5481560 build(deps): bump the go-deps group across 1 directory with 3 updates (#2415)
  • 5b5c272 build(deps): bump the actions group across 1 directory with 8 updates (#2405)
  • 66dd454 remote: retry failed Puller and Pusher initialization (#2406)
  • 3f47f91 fix: add missing substitutions and workspace cleanup to new build files (#2413)
  • 4cb3583 Allow single-character repository paths (#2407)
  • 82cc428 remote: resolve push-check credentials against the repository (#2411)
  • 97815aa build: add multi-architecture Cloud Build configurations for crane, gcrane, a...
  • Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.10.1 to 1.10.2

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.2

Logrus v1.10.2

This is a small maintenance release that updates github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency from Logrus' dependency graph. There are no functional changes in this release.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.1

Full Changelog: sirupsen/logrus@v1.10.1...v1.10.2

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.2

Changed:

  • Update github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency.
Commits
  • 6d6a132 Merge pull request #1586 from thaJeztah/prepare_v1.10.2
  • 4f94653 update changelog for v1.10.2
  • 87434bb Merge pull request #1585 from thaJeztah/bump_testify
  • e7d2120 chore(deps): bump github.com/stretchr/testify v1.12.1
  • See full diff in compare view

Updates github.com/stretchr/testify from 1.12.0 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

Commits

Updates google.golang.org/grpc from 1.83.1 to 1.83.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
gomod(deps): Bump the go-deps group across 1 directory with 6 updates
ef50060 
Bumps the go-deps group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/cli/cli/v2](https://github.com/cli/cli) | `2.97.0` | `2.98.0` |
| [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) | `0.48.0` | `0.49.0` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.9` | `0.22.0` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.10.1` | `1.10.2` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.1` | `1.83.2` |



Updates `github.com/cli/cli/v2` from 2.97.0 to 2.98.0
- [Release notes](https://github.com/cli/cli/releases)
- [Changelog](https://github.com/cli/cli/blob/trunk/docs/release-process-deep-dive.md)
- [Commits](cli/cli@v2.97.0...v2.98.0)

Updates `github.com/getsentry/sentry-go` from 0.48.0 to 0.49.0
- [Release notes](https://github.com/getsentry/sentry-go/releases)
- [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-go@v0.48.0...v0.49.0)

Updates `github.com/google/go-containerregistry` from 0.21.9 to 0.22.0
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.9...v0.22.0)

Updates `github.com/sirupsen/logrus` from 1.10.1 to 1.10.2
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.10.1...v1.10.2)

Updates `github.com/stretchr/testify` from 1.12.0 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.12.0...v1.12.1)

Updates `google.golang.org/grpc` from 1.83.1 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.1...v1.83.2)

---
updated-dependencies:
- dependency-name: github.com/cli/cli/v2
  dependency-version: 2.98.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/getsentry/sentry-go
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 30, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 30, 2026
@github-project-automation github-project-automation Bot moved this to 🧊 Icebox in KraftKit Roadmap Aug 30, 2026
craciunoiuc
craciunoiuc approved these changes Aug 31, 2026
View reviewed changes

@craciunoiuc craciunoiuc left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All good here. Thanks!

Reviewed-by: Cezar Craciunoiu <cezar.craciunoiu@unikraft.com>
Approved-by: Cezar Craciunoiu <cezar.craciunoiu@unikraft.com>

@craciunoiuc
craciunoiuc merged commit fc2c898 into staging Aug 31, 2026
12 checks passed
@craciunoiuc
craciunoiuc deleted the dependabot/go_modules/staging/go-deps-dea3a126b2 branch August 31, 2026 07:09
@github-project-automation github-project-automation Bot moved this from 🧊 Icebox to 🚀 Done in KraftKit Roadmap Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@craciunoiuc craciunoiuc craciunoiuc approved these changes
@nderjung nderjung Awaiting requested review from nderjung nderjung is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

KraftKit Roadmap
Status: 🚀 Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@craciunoiuc