Skip to content

build(deps): bump the go-dev-dependencies group across 1 directory with 7 updates#276

Merged
mgoetzegb merged 1 commit intomainfrom
dependabot/go_modules/go-dev-dependencies-df523e062f
Jan 2, 2026
Merged

build(deps): bump the go-dev-dependencies group across 1 directory with 7 updates#276
mgoetzegb merged 1 commit intomainfrom
dependabot/go_modules/go-dev-dependencies-df523e062f

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Dec 29, 2025

Bumps the go-dev-dependencies group with 7 updates in the / directory:

Package From To
github.com/go-playground/validator/v10 10.29.0 10.30.1
github.com/opensearch-project/opensearch-go/v4 4.5.0 4.6.0
github.com/go-openapi/spec 0.22.2 0.22.3
github.com/goccy/go-yaml 1.19.0 1.19.1
github.com/jackc/pgx/v5 5.7.6 5.8.0
github.com/moby/go-archive 0.1.0 0.2.0
github.com/quic-go/quic-go 0.57.1 0.58.0

Updates github.com/go-playground/validator/v10 from 10.29.0 to 10.30.1

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

Release 10.30.1

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.30.0...v10.30.1

Release 10.30.0

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.29.0...v10.30.0

Commits

Updates github.com/opensearch-project/opensearch-go/v4 from 4.5.0 to 4.6.0

Release notes

Sourced from github.com/opensearch-project/opensearch-go/v4's releases.

v4.6.0

What's Changed

New Contributors

Full Changelog: opensearch-project/opensearch-go@v4.5.0...v4.6.0

Changelog

Sourced from github.com/opensearch-project/opensearch-go/v4's changelog.

[4.6.0]

Dependencies

  • Bump github.com/aws/aws-sdk-go-v2/config from 1.29.14 to 1.32.5 (#707, #711, #719, #730, #737, #761)
  • Bump github.com/aws/aws-sdk-go-v2 from 1.36.4 to 1.41.0 (#710, #720, #759)
  • Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (#728)
  • Bump github.com/aws/aws-sdk-go from 1.55.7 to 1.55.8 (#716)

Added

  • Adds new fields for Opensearch 3.0 (#702)
  • Allow users to override signing port (#721)
  • Add phase_took features supported from OpenSearch 2.12 (#722)
  • Adds the action to refresh the search analyzers to the ISM plugin (#686)

Changed

  • Test against Opensearch 3.0 (#702)
  • Add more SuggestOptions to SearchResp (#713)
  • Updates Go version to 1.24 (#674)
  • Replace golang.org/x/exp/slices usage with built-in slices (#674)
  • Update golangci-linter to 1.64.8 (#740)
  • Change MaxScore to pointer (#740)
  • Update workflow action (#760)
  • Migrate to golangci-lint v2 (#760)

Deprecated

Removed

Fixed

  • Missing "caused by" information in StructError (#752)
  • Add missing ignore_unavailable, allow_no_indices, and expand_wildcards params to MSearch (#757)
  • Fix UpdateResp to correctly parse the get field when _source is requested in update operations. (#739)

Security

Commits
  • 3fef39d prepare 4.6.0 release (#762)
  • 48eb43b Fix UpdateResp to parse get field when _source is requested (#739)
  • fd8d553 Bump github.com/aws/aws-sdk-go-v2/config from 1.31.12 to 1.32.5 (#761)
  • f41ec7f Bump github.com/aws/aws-sdk-go from 1.55.7 to 1.55.8 (#716)
  • 1cfd29e Bump github.com/aws/aws-sdk-go-v2 from 1.39.2 to 1.41.0 (#759)
  • 99b07f3 Update workflows (#760)
  • 5a6718e fix: add missing ignore_unavailable param to multi-search API (#757)
  • c801c69 Fix missing "caused by" information in StructError (#752)
  • e31c031 plugins/ism: add refresh_search_analyzers action (#686)
  • 4153a4c Stepping down from maintainers. (#741)
  • Additional commits viewable in compare view

Updates github.com/go-openapi/spec from 0.22.2 to 0.22.3

Release notes

Sourced from github.com/go-openapi/spec's releases.

v0.22.3

0.22.3 - 2025-12-24

Full Changelog: go-openapi/spec@v0.22.2...v0.22.3

1 commits in this release.


Fixed bugs


People who contributed to this release


spec license terms

License

Commits
  • 3b2ff60 fix: fixed key escaping in OrderedItems marshaling
  • 90efd45 doc: updated contributors file
  • e64b092 doc: announced new discord channel
  • 32a252c build(deps): bump the development-dependencies group with 7 updates
  • 1beb4f3 doc: fixed wrong links in docs
  • b3b30bf ci: remove redundant release workflow
  • ddeeaf8 doc: updated contributors file
  • See full diff in compare view

Updates github.com/goccy/go-yaml from 1.19.0 to 1.19.1

Release notes

Sourced from github.com/goccy/go-yaml's releases.

1.19.1

What's Changed

Full Changelog: goccy/go-yaml@v1.19.0...v1.19.1

Commits

Updates github.com/jackc/pgx/v5 from 5.7.6 to 5.8.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.8.0 (December 26, 2025)

  • Require Go 1.24+
  • Remove golang.org/x/crypto dependency
  • Add OptionShouldPing to control ResetSession ping behavior (ilyam8)
  • Fix: Avoid overflow when MaxConns is set to MaxInt32
  • Fix: Close batch pipeline after a query error (Anthonin Bonnefoy)
  • Faster shutdown of pgxpool.Pool background goroutines (Blake Gentry)
  • Add pgxpool ping timeout (Amirsalar Safaei)
  • Fix: Rows.FieldDescriptions for empty query
  • Scan unknown types into *any as string or []byte based on format code
  • Optimize pgtype.Numeric (Philip Dubé)
  • Add AfterNetConnect hook to pgconn.Config
  • Fix: Handle for preparing statements that fail during the Describe phase
  • Fix overflow in numeric scanning (Ilia Demianenko)
  • Fix: json/jsonb sql.Scanner source type is []byte
  • Migrate from math/rand to math/rand/v2 (Mathias Bogaert)
  • Optimize internal iobufpool (Mathias Bogaert)
  • Optimize stmtcache invalidation (Mathias Bogaert)
  • Fix: missing error case in interval parsing (Maxime Soulé)
  • Fix: invalidate statement/description cache in Exec (James Hartig)
  • ColumnTypeLength method return the type length for varbit type (DengChan)
  • Array and Composite codecs handle typed nils
Commits
  • fe8740a Release v5.8.0
  • e5dde5a Skip test on CockroachDB
  • 06f2d82 Remove trailing space
  • 2cf78dd Merge pull request #2448 from DengChan/column_type_lenth_varbit
  • 2d1c4ef Skip tests on CockroachDB
  • 1a5fa7f Array and Composite codecs handle typed nils
  • 5736d09 ColumnTypeLength method return the type length for varbit type.
  • 4c1308c Revert "stdlib matches native pgx scanning support"
  • 14ce2b7 Skip test on CockroachDB
  • 65b2724 Merge pull request #2443 from jameshartig/x-invalidate-cache-in-exec
  • Additional commits viewable in compare view

Updates github.com/moby/go-archive from 0.1.0 to 0.2.0

Release notes

Sourced from github.com/moby/go-archive's releases.

v0.2.0

What's Changed

Full Changelog: moby/go-archive@v0.1.0...v0.2.0

Commits
  • 263611f Merge pull request #20 from thaJeztah/carry_17
  • a1d4e73 Merge pull request #18 from thaJeztah/bump_gha
  • da4e566 xattr: Fix OS matching.
  • df87f45 Merge pull request #19 from thaJeztah/bump_deps
  • 8996f22 gha: update CodeQL Action to v4
  • 985c60f gha: codeql: use go stable
  • 4752b25 gha: update actions/setup-go@v6
  • 280f775 gha: update actions/checkout@v6
  • 4c912d3 gha: update golangci/golangci-lint-action@v9
  • 2cd730e go.mod: bump github.com/klauspost/compress v1.18.2
  • Additional commits viewable in compare view

Updates github.com/quic-go/quic-go from 0.57.1 to 0.58.0

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.58.0

This release optimizes the QUIC handshake:

  • Multiple incoming packets are now processed before sending an acknowledgment, reducing the total number of packets sent: #5451
  • ACK frames are now packed into coalesced packets, reducing the need to send a separate packet just for the ACK in many cases: #5477
  • When packets are buffered during the handshake, this now doesn't lead to inflated RTT measurements anymore: #5493, #5494

Other notable changes

  • quic-go now has a new logo: #5484
  • ACK frames can now be encoded with up to 64 ranges (previously: 32): #5476
  • Serializing ACK frames is now significantly faster: #5476
  • Improved batch packet processing logic: #5478
  • qlog: added support for the datagram_id on packet_sent, packet_received and packet_buffered events, using the CRC32 of the packet

Changelog

Full Changelog: quic-go/quic-go@v0.57.0...v0.58.0

Commits
  • 96b8144 ackhandler: only generate RTT sample for the last ack-eliciting packet (#5493)
  • db87809 ackhandler: record RTT measurements for non-ack-eliciting packets (#5494)
  • 3c577ff utils: make TestAddTimestamp work in all time zones (#5492)
  • ef7fbab ci: add Go 1.26rc1 to tested Go versions (#5486)
  • c3fa789 update the logo (#5484)
  • 0eec64b ci: bump actions/upload-artifact from 5 to 6 (#5483)
  • 449162a ci: bump actions/cache from 4 to 5 (#5482)
  • add7529 improve batch packet processing logic (#5478)
  • bbcc555 allow packing of ACKs in coalesced packets (#5477)
  • 6bf4231 wire: add a function to trunctate an ACK frame to a given size (#5476)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…th 7 updates

Bumps the go-dev-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.29.0` | `10.30.1` |
| [github.com/opensearch-project/opensearch-go/v4](https://github.com/opensearch-project/opensearch-go) | `4.5.0` | `4.6.0` |
| [github.com/go-openapi/spec](https://github.com/go-openapi/spec) | `0.22.2` | `0.22.3` |
| [github.com/goccy/go-yaml](https://github.com/goccy/go-yaml) | `1.19.0` | `1.19.1` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.7.6` | `5.8.0` |
| [github.com/moby/go-archive](https://github.com/moby/go-archive) | `0.1.0` | `0.2.0` |
| [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) | `0.57.1` | `0.58.0` |



Updates `github.com/go-playground/validator/v10` from 10.29.0 to 10.30.1
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.29.0...v10.30.1)

Updates `github.com/opensearch-project/opensearch-go/v4` from 4.5.0 to 4.6.0
- [Release notes](https://github.com/opensearch-project/opensearch-go/releases)
- [Changelog](https://github.com/opensearch-project/opensearch-go/blob/main/CHANGELOG.md)
- [Commits](opensearch-project/opensearch-go@v4.5.0...v4.6.0)

Updates `github.com/go-openapi/spec` from 0.22.2 to 0.22.3
- [Release notes](https://github.com/go-openapi/spec/releases)
- [Commits](go-openapi/spec@v0.22.2...v0.22.3)

Updates `github.com/goccy/go-yaml` from 1.19.0 to 1.19.1
- [Release notes](https://github.com/goccy/go-yaml/releases)
- [Changelog](https://github.com/goccy/go-yaml/blob/master/CHANGELOG.md)
- [Commits](goccy/go-yaml@v1.19.0...v1.19.1)

Updates `github.com/jackc/pgx/v5` from 5.7.6 to 5.8.0
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.7.6...v5.8.0)

Updates `github.com/moby/go-archive` from 0.1.0 to 0.2.0
- [Release notes](https://github.com/moby/go-archive/releases)
- [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go)
- [Commits](moby/go-archive@v0.1.0...v0.2.0)

Updates `github.com/quic-go/quic-go` from 0.57.1 to 0.58.0
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](quic-go/quic-go@v0.57.1...v0.58.0)

---
updated-dependencies:
- dependency-name: github.com/go-playground/validator/v10
  dependency-version: 10.30.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: github.com/opensearch-project/opensearch-go/v4
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: github.com/go-openapi/spec
  dependency-version: 0.22.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/goccy/go-yaml
  dependency-version: 1.19.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.8.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: github.com/moby/go-archive
  dependency-version: 0.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.58.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 29, 2025
@dependabot dependabot bot requested review from a team as code owners December 29, 2025 04:06
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 29, 2025
@greenbonebot
Copy link
Copy Markdown
Member

Scanning the following files:

go.mod
go.sum

Scan: 'go.mod'

Nothing detected in go.mod
Scan took 0.00 seconds

Scan: 'go.sum'

Nothing detected in go.sum
Scan took 0.00 seconds

@github-actions
Copy link
Copy Markdown

Conventional Commits Report

😢 No conventional commits found.

👉 Learn more about the conventional commits usage at Greenbone.

@codecov
Copy link
Copy Markdown

codecov bot commented Dec 29, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 57.66%. Comparing base (578bab4) to head (d15534c).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files
@@             Coverage Diff             @@
##             main     #276       +/-   ##
===========================================
- Coverage   94.01%   57.66%   -36.36%     
===========================================
  Files           5       69       +64     
  Lines         501     3812     +3311     
===========================================
+ Hits          471     2198     +1727     
- Misses         20     1433     +1413     
- Partials       10      181      +171     
Flag Coverage Δ
opensearch-tests 95.66% <ø> (ø)
postgres-tests 91.96% <ø> (ø)
unit-tests 52.15% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@mgoetzegb mgoetzegb merged commit 378da57 into main Jan 2, 2026
13 checks passed
@mgoetzegb mgoetzegb deleted the dependabot/go_modules/go-dev-dependencies-df523e062f branch January 2, 2026 09:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants