Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 23, 2025

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps the go group with 11 updates:

Package From To
github.com/aws/aws-sdk-go-v2 1.39.6 1.40.0
github.com/aws/aws-sdk-go-v2/config 1.31.20 1.32.1
github.com/aws/aws-sdk-go-v2/credentials 1.18.24 1.19.1
github.com/aws/aws-sdk-go-v2/feature/s3/manager 1.20.7 1.20.11
github.com/aws/aws-sdk-go-v2/service/ecr 1.52.0 1.54.0
github.com/aws/aws-sdk-go-v2/service/s3 1.90.2 1.92.0
github.com/fluxcd/pkg/ssa 0.60.0 0.61.0
github.com/mikefarah/yq/v4 4.48.2 4.49.1
github.com/mittwald/go-helm-client 0.12.18 0.12.19
github.com/redis/go-redis/v9 9.16.0 9.17.0
github.com/sigstore/sigstore 1.9.6-0.20250729224751-181c5d3339b3 1.10.0

Updates github.com/aws/aws-sdk-go-v2 from 1.39.6 to 1.40.0

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.31.20 to 1.32.1

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.18.24 to 1.19.1

Changelog

Sourced from github.com/aws/aws-sdk-go-v2/credentials's changelog.

Release (2023-07-28)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/sqs: v1.23.4
    • Documentation: Documentation changes related to SQS APIs.

Release (2023-07-27)

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/autoscaling: v1.29.0
    • Feature: This release updates validation for instance types used in the AllowedInstanceTypes and ExcludedInstanceTypes parameters of the InstanceRequirements property of a MixedInstancesPolicy.
  • github.com/aws/aws-sdk-go-v2/service/ebs: v1.17.0
    • Feature: SDK and documentation updates for Amazon Elastic Block Store API
  • github.com/aws/aws-sdk-go-v2/service/ec2: v1.108.0
    • Feature: SDK and documentation updates for Amazon Elastic Block Store APIs
  • github.com/aws/aws-sdk-go-v2/service/eks: v1.28.0
    • Feature: Add multiple customer error code to handle customer caused failure when managing EKS node groups
  • github.com/aws/aws-sdk-go-v2/service/sagemaker: v1.95.0
    • Feature: Expose ProfilerConfig attribute in SageMaker Search API response.

Release (2023-07-26)

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/entityresolution: v1.0.0
    • Release: New AWS service client module
    • Feature: AWS Entity Resolution can effectively match a source record from a customer relationship management (CRM) system with a source record from a marketing system containing campaign information.
  • github.com/aws/aws-sdk-go-v2/service/glue: v1.58.0
    • Feature: Release Glue Studio Snowflake Connector Node for SDK/CLI
  • github.com/aws/aws-sdk-go-v2/service/healthlake: v1.16.4
    • Documentation: Updating the HealthLake service documentation.
  • github.com/aws/aws-sdk-go-v2/service/managedblockchainquery: v1.0.0
    • Release: New AWS service client module
    • Feature: Amazon Managed Blockchain (AMB) Query provides serverless access to standardized, multi-blockchain datasets with developer-friendly APIs.
  • github.com/aws/aws-sdk-go-v2/service/mediaconvert: v1.39.1
    • Documentation: This release includes general updates to user documentation.
  • github.com/aws/aws-sdk-go-v2/service/omics: v1.5.2
    • Documentation: The service is renaming as a part of AWS Health.
  • github.com/aws/aws-sdk-go-v2/service/opensearchserverless: v1.3.0
    • Feature: This release adds new collection type VectorSearch.
  • github.com/aws/aws-sdk-go-v2/service/polly: v1.27.0
    • Feature: Amazon Polly adds 1 new voice - Lisa (nl-BE)
  • github.com/aws/aws-sdk-go-v2/service/route53: v1.28.5
    • Documentation: Update that corrects the documents for received feedback.

Release (2023-07-25)

General Highlights

... (truncated)

Commits

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.20.7 to 1.20.11

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.52.0 to 1.54.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.90.2 to 1.92.0

Commits

Updates github.com/fluxcd/pkg/ssa from 0.60.0 to 0.61.0

Commits
  • 62ddfc1 Merge pull request #1049 from fluxcd/upgrade-deps
  • e0b1bb5 Prepare for release
  • 821b3c3 Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2
  • 0fe2a7c Merge pull request #1047 from fluxcd/helm-3.19.1
  • 495d699 Upgrade Helm to 3.19.1
  • 7301068 Merge pull request #1041 from fluxcd/fix-sc-1915
  • c2d48e9 Prepare for release
  • 7666900 Revert "runtime/secrets: validate proxy URL scheme and length"
  • See full diff in compare view

Updates github.com/mikefarah/yq/v4 from 4.48.2 to 4.49.1

Release notes

Sourced from github.com/mikefarah/yq/v4's releases.

v4.49.1 - Security Flags and TOML fixes

  • Added --security flags to disable env and file ops #2515
  • Fixing TOML ArrayTable parsing issues #1758
  • Fixing parsing of escaped characters #2506
Changelog

Sourced from github.com/mikefarah/yq/v4's changelog.

4.49.1:

  • Added --security flags to disable env and file ops #2515
  • Fixing TOML ArrayTable parsing issues #1758
  • Fixing parsing of escaped characters #2506
Commits

Updates github.com/mittwald/go-helm-client from 0.12.18 to 0.12.19

Release notes

Sourced from github.com/mittwald/go-helm-client's releases.

v0.12.19

What's Changed

Full Changelog: mittwald/go-helm-client@v0.12.18...v0.12.19

Commits
  • b29367a Merge pull request #253 from mittwald/dependabot/go_modules/helm.sh/helm/v3-3...
  • 9812088 Bump helm.sh/helm/v3 from 3.18.4 to 3.19.0
  • See full diff in compare view

Updates github.com/redis/go-redis/v9 from 9.16.0 to 9.17.0

Release notes

Sourced from github.com/redis/go-redis/v9's releases.

9.17.0

🚀 Highlights

Redis 8.4 Support

Added support for Redis 8.4, including new commands and features (#3572)

Typed Errors

Introduced typed errors for better error handling using errors.As instead of string checks. Errors can now be wrapped and set to commands in hooks without breaking library functionality (#3602)

New Commands

  • CAS/CAD Commands: Added support for Compare-And-Set/Compare-And-Delete operations with conditional matching (IFEQ, IFNE, IFDEQ, IFDNE) (#3583, #3595)
  • MSETEX: Atomically set multiple key-value pairs with expiration options and conditional modes (#3580)
  • XReadGroup CLAIM: Consume both incoming and idle pending entries from streams in a single call (#3578)
  • ACL Commands: Added ACLGenPass, ACLUsers, and ACLWhoAmI (#3576)
  • SLOWLOG Commands: Added SLOWLOG LEN and SLOWLOG RESET (#3585)
  • LATENCY Commands: Added LATENCY LATEST and LATENCY RESET (#3584)

Search & Vector Improvements

  • Hybrid Search: Added EXPERIMENTAL support for the new FT.HYBRID command (#3573)
  • Vector Range: Added VRANGE command for vector sets (#3543)
  • FT.INFO Enhancements: Added vector-specific attributes in FT.INFO response (#3596)

Connection Pool Improvements

  • Improved Connection Success Rate: Implemented FIFO queue-based fairness and context pattern for connection creation to prevent premature cancellation under high concurrency (#3518)
  • Connection State Machine: Resolved race conditions and improved pool performance with proper state tracking (#3559)
  • Pool Performance: Significant performance improvements with faster semaphores, lockless hook manager, and reduced allocations (47-67% faster Get/Put operations) (#3565)

Metrics & Observability

  • Canceled Metric Attribute: Added 'canceled' metrics attribute to distinguish context cancellation errors from other errors (#3566)

✨ New Features

🐛 Bug Fixes

... (truncated)

Changelog

Sourced from github.com/redis/go-redis/v9's changelog.

9.17.0 (2025-11-19)

🚀 Highlights

Redis 8.4 Support

Added support for Redis 8.4, including new commands and features (#3572)

Typed Errors

Introduced typed errors for better error handling using errors.As instead of string checks. Errors can now be wrapped and set to commands in hooks without breaking library functionality (#3602)

New Commands

  • CAS/CAD Commands: Added support for Compare-And-Set/Compare-And-Delete operations with conditional matching (IFEQ, IFNE, IFDEQ, IFDNE) (#3583, #3595)
  • MSETEX: Atomically set multiple key-value pairs with expiration options and conditional modes (#3580)
  • XReadGroup CLAIM: Consume both incoming and idle pending entries from streams in a single call (#3578)
  • ACL Commands: Added ACLGenPass, ACLUsers, and ACLWhoAmI (#3576)
  • SLOWLOG Commands: Added SLOWLOG LEN and SLOWLOG RESET (#3585)
  • LATENCY Commands: Added LATENCY LATEST and LATENCY RESET (#3584)

Search & Vector Improvements

  • Hybrid Search: Added EXPERIMENTAL support for the new FT.HYBRID command (#3573)
  • Vector Range: Added VRANGE command for vector sets (#3543)
  • FT.INFO Enhancements: Added vector-specific attributes in FT.INFO response (#3596)

Connection Pool Improvements

  • Improved Connection Success Rate: Implemented FIFO queue-based fairness and context pattern for connection creation to prevent premature cancellation under high concurrency (#3518)
  • Connection State Machine: Resolved race conditions and improved pool performance with proper state tracking (#3559)
  • Pool Performance: Significant performance improvements with faster semaphores, lockless hook manager, and reduced allocations (47-67% faster Get/Put operations) (#3565)

Metrics & Observability

  • Canceled Metric Attribute: Added 'canceled' metrics attribute to distinguish context cancellation errors from other errors (#3566)

✨ New Features

🐛 Bug Fixes

... (truncated)

Commits

Updates github.com/sigstore/sigstore from 1.9.6-0.20250729224751-181c5d3339b3 to 1.10.0

Release notes

Sourced from github.com/sigstore/sigstore's releases.

v1.10.0

Breaking change

sigstore/sigstore#2194 moves cryptoutils.ValidatePubKey to goodkey.ValidatePubKey to minimize the dependency tree for clients using the cryptoutils package.

Features

Refactoring

Full Changelog: sigstore/sigstore@v1.9.5...v1.10.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.39.6` | `1.40.0` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.31.20` | `1.32.1` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.18.24` | `1.19.1` |
| [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.20.7` | `1.20.11` |
| [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.52.0` | `1.54.0` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.90.2` | `1.92.0` |
| [github.com/fluxcd/pkg/ssa](https://github.com/fluxcd/pkg) | `0.60.0` | `0.61.0` |
| [github.com/mikefarah/yq/v4](https://github.com/mikefarah/yq) | `4.48.2` | `4.49.1` |
| [github.com/mittwald/go-helm-client](https://github.com/mittwald/go-helm-client) | `0.12.18` | `0.12.19` |
| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.16.0` | `9.17.0` |
| [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.9.6-0.20250729224751-181c5d3339b3` | `1.10.0` |


Updates `github.com/aws/aws-sdk-go-v2` from 1.39.6 to 1.40.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@v1.39.6...v1.40.0)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.31.20 to 1.32.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@config/v1.31.20...v1.32.1)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.18.24 to 1.19.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/v1.19.1/CHANGELOG.md)
- [Commits](aws/aws-sdk-go-v2@config/v1.18.24...v1.19.1)

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.20.7 to 1.20.11
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/mq/v1.20.7...service/sns/v1.20.11)

Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.52.0 to 1.54.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.52.0...service/s3/v1.54.0)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.90.2 to 1.92.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.90.2...service/s3/v1.92.0)

Updates `github.com/fluxcd/pkg/ssa` from 0.60.0 to 0.61.0
- [Commits](fluxcd/pkg@ssa/v0.60.0...ssa/v0.61.0)

Updates `github.com/mikefarah/yq/v4` from 4.48.2 to 4.49.1
- [Release notes](https://github.com/mikefarah/yq/releases)
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt)
- [Commits](mikefarah/yq@v4.48.2...v4.49.1)

Updates `github.com/mittwald/go-helm-client` from 0.12.18 to 0.12.19
- [Release notes](https://github.com/mittwald/go-helm-client/releases)
- [Commits](mittwald/go-helm-client@v0.12.18...v0.12.19)

Updates `github.com/redis/go-redis/v9` from 9.16.0 to 9.17.0
- [Release notes](https://github.com/redis/go-redis/releases)
- [Changelog](https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md)
- [Commits](redis/go-redis@v9.16.0...v9.17.0)

Updates `github.com/sigstore/sigstore` from 1.9.6-0.20250729224751-181c5d3339b3 to 1.10.0
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](https://github.com/sigstore/sigstore/commits/v1.10.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
  dependency-version: 1.20.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr
  dependency-version: 1.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.92.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/ssa
  dependency-version: 0.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/mikefarah/yq/v4
  dependency-version: 4.49.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/mittwald/go-helm-client
  dependency-version: 0.12.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/redis/go-redis/v9
  dependency-version: 9.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/sigstore/sigstore
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Nov 23, 2025
@dependabot dependabot bot requested a review from a team as a code owner November 23, 2025 08:10
@dependabot dependabot bot added kind/dependency dependency update, etc. kind/chore chore, maintenance, etc. labels Nov 23, 2025
@github-actions github-actions bot added the size/m Medium label Nov 23, 2025
@frewilhelm
Copy link
Contributor

github.com/sigstore/sigstore introduces a breaking change that is not compatible with github.com/sigstore/cosign/[email protected] (yet)

@frewilhelm
Copy link
Contributor

There is a fix prepared sigstore/cosign#4532 but it depends on sigstore/cosign#4532 (comment)

@frewilhelm
Copy link
Contributor

@dependabot ignore github.com/sigstore/sigstore

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 24, 2025

OK, I won't notify you about github.com/sigstore/sigstore again, unless you unignore it.

@frewilhelm
Copy link
Contributor

@dependabot recreate

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 24, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Nov 24, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/go-ae23318a53 branch November 24, 2025 10:29
@frewilhelm
Copy link
Contributor

@dependabot reopen

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 24, 2025

Beginning January 27, 2026, Dependabot will no longer support the @dependabot reopen command. Please use GitHub's native pull request controls instead. Please see the changelog announcement for additional details.

@dependabot dependabot bot reopened this Nov 24, 2025
@dependabot dependabot bot restored the dependabot/go_modules/go-ae23318a53 branch November 24, 2025 10:36
@frewilhelm
Copy link
Contributor

@dependabot recreate

@frewilhelm
Copy link
Contributor

supersedes by #1701

@frewilhelm frewilhelm closed this Nov 24, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 24, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/go_modules/go-ae23318a53 branch November 24, 2025 10:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. size/m Medium

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants