Skip to content

build(deps): Bump the all-go group across 1 directory with 8 updates - #3451

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/all-go-ac0a795483
Open

dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/all-go-ac0a795483

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-go group with 7 updates in the / directory:

Package From To
connectrpc.com/connect 1.20.0 1.21.0
github.com/aws/aws-sdk-go-v2 1.46.0 1.47.0
github.com/aws/aws-sdk-go-v2/config 1.33.3 1.33.4
github.com/aws/aws-sdk-go-v2/service/kms 1.59.0 1.60.0
github.com/celestiaorg/nmt 0.24.4 0.24.5
golang.org/x/crypto 0.56.0 0.57.0
golang.org/x/net 0.58.0 0.59.0

Updates connectrpc.com/connect from 1.20.0 to 1.21.0

Release notes

Sourced from connectrpc.com/connect's releases.

v1.21.0

What's Changed

[!IMPORTANT]

This release adds a security-related feature for servers. The new handler option WithRequestGate runs after the request headers are available and before any message is received. Use this new option to register checks (e.g. authentication) that should happen before the request is decompressed or unmarshaled, and before any interceptors are run. See the documentation for details.

Governance

Enhancements

Bugfixes

New Contributors

Full Changelog: connectrpc/connect-go@v1.20.0...v1.21.0

Commits
  • 41b7f30 Prepare for v1.21.0 (#972)
  • 6058c20 Fix dropped headers on errStreamingClientConn (#964)
  • 014693a Refine WithRequestGate API and documentation (#968)
  • d9b4b1d Create release binary for protoc-gen-connect-go (#966)
  • 5111260 Add WithRequestGate handler option (#962)
  • febfc19 Fix panic in stream Spec and Peer when client construction failed (#959)
  • cb5da57 Update Go version for CI (#958)
  • 9646326 Only send a 304 when the request was a GET (#957)
  • 2a02fea Fix connect.WithGRPC typo in the missing client option error (#956)
  • eae42d2 Fix off-by-one in WithHTTPGetMaxURLSize URL length check (#955)
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.46.0 to 1.47.0

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.3 to 1.33.4

Commits

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.59.0 to 1.60.0

Commits

Updates github.com/celestiaorg/nmt from 0.24.4 to 0.24.5

Release notes

Sourced from github.com/celestiaorg/nmt's releases.

v0.24.5

What's Changed

Full Changelog: celestiaorg/nmt@v0.24.4...v0.24.5

Commits

Updates golang.org/x/crypto from 0.56.0 to 0.57.0

Commits

Updates golang.org/x/net from 0.58.0 to 0.59.0

Commits
  • 540d04c go.mod: update golang.org/x dependencies
  • 20eef7f quic: clear fast-path receive buffer on stream reset
  • c23af1b internal/http3: fix compilation error due to missed symbol name update
  • eda109f internal/http3: send appropriate error codes in STOP_SENDING frames
  • 12e0501 internal/http3: server header size limits
  • d89285e quic: add Stream.StopSending, and rework stream/application errors
  • d34deae quic: ensure Endpoint.Close waits for connection loops to exit
  • 55577aa http2: use IDNA Lookup profile, not raw Punycode translation
  • b22627e internal/http3: handle a nil TLSConfig in newQUICConfig
  • 6e98b0d internal/http3: report endpoint creation errors from initEndpoint
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.22.0 to 0.23.0

Commits
  • f75267d semaphore: panic on negative capacity
  • 3ffd83c all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-go group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [connectrpc.com/connect](https://github.com/connectrpc/connect-go) | `1.20.0` | `1.21.0` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.46.0` | `1.47.0` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.3` | `1.33.4` |
| [github.com/aws/aws-sdk-go-v2/service/kms](https://github.com/aws/aws-sdk-go-v2) | `1.59.0` | `1.60.0` |
| [github.com/celestiaorg/nmt](https://github.com/celestiaorg/nmt) | `0.24.4` | `0.24.5` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.56.0` | `0.57.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.58.0` | `0.59.0` |



Updates `connectrpc.com/connect` from 1.20.0 to 1.21.0
- [Release notes](https://github.com/connectrpc/connect-go/releases)
- [Changelog](https://github.com/connectrpc/connect-go/blob/main/RELEASE.md)
- [Commits](connectrpc/connect-go@v1.20.0...v1.21.0)

Updates `github.com/aws/aws-sdk-go-v2` from 1.46.0 to 1.47.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.46.0...v1.47.0)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.3 to 1.33.4
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.33.3...config/v1.33.4)

Updates `github.com/aws/aws-sdk-go-v2/service/kms` from 1.59.0 to 1.60.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.59.0...service/s3/v1.60.0)

Updates `github.com/celestiaorg/nmt` from 0.24.4 to 0.24.5
- [Release notes](https://github.com/celestiaorg/nmt/releases)
- [Commits](celestiaorg/nmt@v0.24.4...v0.24.5)

Updates `golang.org/x/crypto` from 0.56.0 to 0.57.0
- [Commits](golang/crypto@v0.56.0...v0.57.0)

Updates `golang.org/x/net` from 0.58.0 to 0.59.0
- [Commits](golang/net@v0.58.0...v0.59.0)

Updates `golang.org/x/sync` from 0.22.0 to 0.23.0
- [Commits](golang/sync@v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: connectrpc.com/connect
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/kms
  dependency-version: 1.60.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
- dependency-name: github.com/celestiaorg/nmt
  dependency-version: 0.24.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go
- dependency-name: golang.org/x/crypto
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
- dependency-name: golang.org/x/net
  dependency-version: 0.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
- dependency-name: golang.org/x/sync
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions

Copy link
Copy Markdown
Contributor

The latest Buf updates on your PR. Results from workflow CI / buf-check (pull_request).

BuildFormatLintBreakingUpdated (UTC)
✅ passed⏩ skipped✅ passed⏩ skippedSep 14, 2026, 9:10 PM

@coderabbitai

coderabbitai Bot commented Sep 14, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: ac2b3f5f-6078-4e06-b41a-bd3eca36071b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants