Skip to content

Bump the gomod-minor-updates group across 1 directory with 6 updates - #1181

Merged
calebbrown merged 1 commit into
mainfrom
dependabot/go_modules/gomod-minor-updates-08bf63367d
Jul 19, 2026
Merged

Bump the gomod-minor-updates group across 1 directory with 6 updates#1181
calebbrown merged 1 commit into
mainfrom
dependabot/go_modules/gomod-minor-updates-08bf63367d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the gomod-minor-updates group with 6 updates in the / directory:

Package From To
github.com/gopacket/gopacket 1.6.0 1.7.0
gocloud.dev 0.45.0 0.46.0
gocloud.dev/pubsub/kafkapubsub 0.45.0 0.46.0
golang.org/x/crypto 0.52.0 0.53.0
google.golang.org/api 0.279.0 0.287.0
google.golang.org/grpc 1.81.1 1.82.0

Updates github.com/gopacket/gopacket from 1.6.0 to 1.7.0

Release notes

Sourced from github.com/gopacket/gopacket's releases.

v1.7.0

Compatibility

The minimum supported Go version is now 1.25. golang.org/x/net v0.55.0 requires go 1.25.0, which raises this module's go directive with it. If you're stuck on Go 1.24 or older, stay on v1.6.1.

Fixed

  • reassembly: closeHalfConnection now returns every buffered page to the page cache instead of only the first one. pageCache.replace nils p.next before pooling, so the old loop terminated after one iteration. The leaked pages permanently inflated the pc.used counter checked against MaxBufferedPagesTotal — on long-running captures with that limit set, the assembler would eventually treat the buffer as full for every connection and force-flush out-of-order data instead of reassembling it. Triggered by a FIN/RST arriving while out-of-order segments are buffered beyond it. (#161, google/gopacket#856)
  • layers: IPv4 SerializeTo rejects option lengths below 2 instead of producing a malformed header. (#159)

Dependencies

  • golang.org/x/net 0.39.0 → 0.55.0, golang.org/x/sys 0.32.0 → 0.45.0 (#162)

CI

  • setup-go now reads the Go version from go.mod instead of a hardcoded constraint, and tests run under sudo use the setup-go toolchain — sudo's secure_path had been silently resolving go to the runner's system installation. (#162)
  • actions/checkout bumped from 6 to 7. (#160)

Full Changelog: gopacket/gopacket@v1.6.1...v1.7.0

v1.6.1

Full Changelog: gopacket/gopacket@v1.6.0...v1.6.1

Commits
  • d338185 build(deps): bump golang.org/x/net from 0.39.0 to 0.55.0 (#162)
  • 067005e Fix reassembly closeHalfConnections list traversal (#161)
  • 4ff01f2 fix(ip4): reject option length below 2 in SerializeTo (#159)
  • 5d6a732 build(deps): bump actions/checkout from 6 to 7 (#160)
  • 7611908 Merge commit from fork
  • 145859d Merge commit from fork
  • See full diff in compare view

Updates gocloud.dev from 0.45.0 to 0.46.0

Release notes

Sourced from gocloud.dev's releases.

v0.46.0

BREAKING_CHANGE:

  • blob/s3blob: migrate from deprecated s3/manager to s3/transfermanager by @​vangent in google/go-cloud#3717
    • Only breaking if you're using As to access specific AWS types from the old manager.

What's Changed

all

blob:

runtimevar:

pubsub

docstore

secrets

postgres

New Contributors

Full Changelog: google/go-cloud@v0.45.0...v0.46.0

Commits
  • 60f0d74 all: prerelease
  • a1725f0 blob/s3blob: migrate from deprecated s3/manager to s3/transfermanager (#3717)
  • 7eadd65 aws: add AWS IAM Role assumption support (#3716)
  • 054c82e postgres/awspostgres: add IAM authentication support (#3713)
  • 2b85c85 docs: fix Pub/Sub subscribe wording (#3714)
  • b9dee8d build: add top-level permissions restriction to tests workflow (#3711)
  • 45a8cfc docstore: support unwrapping ActionListError for use with errors.Is (#3705)
  • 78b5976 all: support typed errors and errors.Is for error codes (#3708)
  • 595f8b6 all: update another otel dep (#3701)
  • c903aef all: update otel deps (#3699)
  • Additional commits viewable in compare view

Updates gocloud.dev/pubsub/kafkapubsub from 0.45.0 to 0.46.0

Release notes

Sourced from gocloud.dev/pubsub/kafkapubsub's releases.

v0.46.0

BREAKING_CHANGE:

  • blob/s3blob: migrate from deprecated s3/manager to s3/transfermanager by @​vangent in google/go-cloud#3717
    • Only breaking if you're using As to access specific AWS types from the old manager.

What's Changed

all

blob:

runtimevar:

pubsub

docstore

secrets

postgres

New Contributors

Full Changelog: google/go-cloud@v0.45.0...v0.46.0

Commits
  • 60f0d74 all: prerelease
  • a1725f0 blob/s3blob: migrate from deprecated s3/manager to s3/transfermanager (#3717)
  • 7eadd65 aws: add AWS IAM Role assumption support (#3716)
  • 054c82e postgres/awspostgres: add IAM authentication support (#3713)
  • 2b85c85 docs: fix Pub/Sub subscribe wording (#3714)
  • b9dee8d build: add top-level permissions restriction to tests workflow (#3711)
  • 45a8cfc docstore: support unwrapping ActionListError for use with errors.Is (#3705)
  • 78b5976 all: support typed errors and errors.Is for error codes (#3708)
  • 595f8b6 all: update another otel dep (#3701)
  • c903aef all: update otel deps (#3699)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.52.0 to 0.53.0

Commits
  • 45460e0 go.mod: update golang.org/x dependencies
  • d37c95e pkcs12: limit PBKDF iteration count to prevent CPU exhaustion
  • e2ffffe ssh: reject incomplete gssapi-with-mic configurations
  • 60e158a ssh/test: isolate CLI tests from user SSH config and agent
  • 1b77d23 ssh/knownhosts: reject lines with multiple or unknown markers
  • 3872a2b ssh/knownhosts: verify declared key type matches decoded key
  • 9f72ecc ssh/knownhosts: treat only ASCII space and tab as whitespace
  • 8f405a4 ssh: validate ECDSA curve matches expected algorithm
  • bb41b3d ssh: improve DH GEX group selection using PreferredBits
  • e04e721 ssh/agent: validate ed25519 private key length in Add
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.279.0 to 0.287.0

Release notes

Sourced from google.golang.org/api's releases.

v0.287.0

0.287.0 (2026-06-30)

Features

v0.286.0

0.286.0 (2026-06-22)

Features

v0.285.0

0.285.0 (2026-06-16)

Features

v0.284.0

0.284.0 (2026-06-09)

Features

v0.283.0

0.283.0 (2026-06-01)

Features

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.287.0 (2026-06-30)

Features

0.286.0 (2026-06-22)

Features

0.285.0 (2026-06-16)

Features

0.284.0 (2026-06-09)

Features

0.283.0 (2026-06-01)

Features

... (truncated)

Commits

Updates google.golang.org/grpc from 1.81.1 to 1.82.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.0

Behavior Changes

  • server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)
  • transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)
  • balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

  • experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)
  • client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)
  • server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)

Bug Fixes

  • xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)
  • grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)
  • stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)
  • encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#9135)
  • channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#9109)
Commits
  • bd23985 Change version to 1.82.0 (#9170)
  • 0f3086d Fix minor issues not covered by PR #9137 (#9147)
  • fef07fb internal: Split v3procservicepb import into pb and grpc for extproc (#9163)
  • 91dd64f transport: surface subsequent data when receiving non-gRPC header (#8929)
  • adc97de test/kokoro: add config for regional-td test (#9158)
  • 57c9ff1 xds: ensure full-string matching for RBAC Filter rules (#9148)
  • b58f32d server: Set a pprof label on new stream goroutines (#9082)
  • 6c98be3 refactor(transport): extract shared stream state handling logic in `loopyWrit...
  • bcaa6f4 rls: only reset backoff on recovery from TRANSIENT_FAILURE (#9137)
  • 429e6e0 balancer: expose endpoint weight and hostname as experimental APIs (#9074)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/gomod-minor-updates-08bf63367d branch 2 times, most recently from f445984 to 450c838 Compare July 19, 2026 22:53
@calebbrown

calebbrown commented Jul 19, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
Bump the gomod-minor-updates group across 1 directory with 6 updates
6322363 
Bumps the gomod-minor-updates group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/gopacket/gopacket](https://github.com/gopacket/gopacket) | `1.6.0` | `1.7.0` |
| [gocloud.dev](https://github.com/google/go-cloud) | `0.45.0` | `0.46.0` |
| [gocloud.dev/pubsub/kafkapubsub](https://github.com/google/go-cloud) | `0.45.0` | `0.46.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.52.0` | `0.53.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.279.0` | `0.287.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.81.1` | `1.82.0` |



Updates `github.com/gopacket/gopacket` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/gopacket/gopacket/releases)
- [Commits](gopacket/gopacket@v1.6.0...v1.7.0)

Updates `gocloud.dev` from 0.45.0 to 0.46.0
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](google/go-cloud@v0.45.0...v0.46.0)

Updates `gocloud.dev/pubsub/kafkapubsub` from 0.45.0 to 0.46.0
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](google/go-cloud@v0.45.0...v0.46.0)

Updates `golang.org/x/crypto` from 0.52.0 to 0.53.0
- [Commits](golang/crypto@v0.52.0...v0.53.0)

Updates `google.golang.org/api` from 0.279.0 to 0.287.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.279.0...v0.287.0)

Updates `google.golang.org/grpc` from 1.81.1 to 1.82.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.81.1...v1.82.0)

---
updated-dependencies:
- dependency-name: github.com/gopacket/gopacket
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-updates
- dependency-name: gocloud.dev
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-updates
- dependency-name: gocloud.dev/pubsub/kafkapubsub
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-updates
- dependency-name: golang.org/x/crypto
  dependency-version: 0.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-updates
- dependency-name: google.golang.org/api
  dependency-version: 0.287.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-updates
- dependency-name: google.golang.org/grpc
  dependency-version: 1.82.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/gomod-minor-updates-08bf63367d branch from 450c838 to 6322363 Compare July 19, 2026 23:03
@calebbrown
calebbrown merged commit 1f06339 into main Jul 19, 2026
12 checks passed
@calebbrown
calebbrown deleted the dependabot/go_modules/gomod-minor-updates-08bf63367d branch July 19, 2026 23:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@calebbrown calebbrown calebbrown approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@calebbrown