chore(deps): bump the go-deps group across 1 directory with 5 updates by dependabot[bot] · Pull Request #335 · Himan-D/agent-memory

dependabot · 2026-09-28T14:07:33Z

Bumps the go-deps group with 5 updates in the / directory:

Package	From	To
github.com/neo4j/neo4j-go-driver/v6	`6.2.0`	`6.3.0`
github.com/qdrant/go-client	`1.19.0`	`1.19.2`
golang.org/x/crypto	`0.55.0`	`0.57.0`
golang.org/x/net	`0.58.0`	`0.59.0`
google.golang.org/grpc	`1.83.2`	`1.84.0`

Updates github.com/neo4j/neo4j-go-driver/v6 from 6.2.0 to 6.3.0

Release notes

Sourced from github.com/neo4j/neo4j-go-driver/v6's releases.

v6.3.0

See https://github.com/neo4j/neo4j-go-driver/wiki/6.x-changelog for more information.

Commits

ef40a44 Prepare 6.3.0 release (#711)
08584d7 Port Pass impersonated user when refreshing the routing table (#707)
21cd1a5 Fix: log patch_bolt field in SUCCESS responses (#710)
cf47898 Add object mapping for query results (preview) (#703)
8653612 Pin pre-commit staticcheck to the version CI uses (#708)
87dec72 Correct EagerResult field name in ExecuteQuery example (#702)
See full diff in compare view

Updates github.com/qdrant/go-client from 1.19.0 to 1.19.2

Release notes

Sourced from github.com/qdrant/go-client's releases.

v1.19.2

What's Changed

Surface server version probe error, add Config.Logger by @Goodnight77 in qdrant/go-client#152

Clamp retry backoff before Duration conversion to avoid overflow by @Goodnight77 in qdrant/go-client#153

Keep gRPC status reachable from QdrantResourceExhaustedError by @Goodnight77 in qdrant/go-client#154

Return all connection close errors from Client.Close() by @Goodnight77 in qdrant/go-client#155

Full Changelog: qdrant/go-client@v1.19.1...v1.19.2

v1.19.1

What's Changed

chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0 in the version-updates group by @dependabot[bot] in qdrant/go-client#142

chore(deps): bump github.com/testcontainers/testcontainers-go from 0.43.0 to 0.44.0 in the version-updates group by @dependabot[bot] in qdrant/go-client#143

chore(deps): bump the version-updates group with 2 updates by @dependabot[bot] in qdrant/go-client#144

chore(deps): bump the version-updates group with 2 updates by @dependabot[bot] in qdrant/go-client#145

Set copyright holder in LICENSE files by @bashofmann in qdrant/go-client#147

chore(deps): bump github.com/moby/go-archive from 0.2.0 to 0.3.0 in the security-updates group across 1 directory by @dependabot[bot] in qdrant/go-client#146

chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 in /examples/simple by @dependabot[bot] in qdrant/go-client#148

chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 in the version-updates group by @dependabot[bot] in qdrant/go-client#149

chore: do not mutate Config.GrpcOptions when creating a client by @Tyagiquamar in qdrant/go-client#151

New Contributors

@bashofmann made their first contribution in qdrant/go-client#147

@Tyagiquamar made their first contribution in qdrant/go-client#151

Full Changelog: qdrant/go-client@v1.19.0...v1.19.1

Commits

f411843 chore: return all connection close errors from Client.Close (#155)
ae79372 fix: keep gRPC status reachable from QdrantResourceExhaustedError (#154)
4e80c73 fix: clamp retry backoff before Duration conversion to avoid overflow (#153)
9039136 fix: surface server version probe error, add Config.Logger (#152)
0f036f3 chore: do not mutate Config.GrpcOptions when creating a client (#151)
9ce7b28 chore(deps): bump google.golang.org/grpc in the version-updates group (#149)
ac94687 chore(deps): bump google.golang.org/grpc in /examples/simple (#148)
16a995f chore(deps): bump github.com/moby/go-archive (#146)
34f41d6 Set copyright holder in LICENSE files (#147)
458da16 chore(deps): bump the version-updates group with 2 updates (#145)
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.55.0 to 0.57.0

Commits

3f62bf1 go.mod: update golang.org/x dependencies
86efde5 ssh: reject unexpected message types on established channels
a6cdac6 ssh: drop traffic on undecided channels
39dc44e ssh: don't skip the source-address critical option in CheckCert
afebf4c x509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+
89f4e9b x509roots/fallback: update bundle
71488c4 ssh/knownhosts: compare only public key portions for revocation
82adefa ssh: synchronize unexpected response test
c757c98 all: upgrade go directive to at least 1.26.0 [generated]
593c81a ssh: correctly ignore pre-banner lines
Additional commits viewable in compare view

Updates golang.org/x/net from 0.58.0 to 0.59.0

Commits

540d04c go.mod: update golang.org/x dependencies
20eef7f quic: clear fast-path receive buffer on stream reset
c23af1b internal/http3: fix compilation error due to missed symbol name update
eda109f internal/http3: send appropriate error codes in STOP_SENDING frames
12e0501 internal/http3: server header size limits
d89285e quic: add Stream.StopSending, and rework stream/application errors
d34deae quic: ensure Endpoint.Close waits for connection loops to exit
55577aa http2: use IDNA Lookup profile, not raw Punycode translation
b22627e internal/http3: handle a nil TLSConfig in newQUICConfig
6e98b0d internal/http3: report endpoint creation errors from initEndpoint
Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.83.2 to 1.84.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.84.0

Behavior Changes

stats/otel: The grpc.lb.pick_first.* metrics have been removed and replaced with grpc.subchannel.* metrics. See gRFC A94 for more details. (#9215)

New Features

xds: Add support for contains_match in route header matchers. (#9223)

Special Thanks: @nvxbug

Bug Fixes

client: Fix a bug where a ClientConn could get permanently stuck in IDLE when an RPC was canceled during stream creation. Previously, such cancellations triggered stream cleanup twice, corrupting the channel's idleness state and causing subsequent RPCs to fail with deadline exceeded errors. (#9191)

Special Thanks: @utkuozdemir

client: Fix a bug where non-gRPC HTTP responses ending with an empty DATA frame failed the RPC with status code Internal instead of preserving the HTTP-mapped status code and response body. (#9217)

Special Thanks: @chengxilo

credentials: Validate metadata returned by per-RPC credentials, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from credentials was sent to the server in outgoing HTTP/2 requests. (#9202)

Special Thanks: @buger

credentials/sts: Prevent potential token leakage by disallowing HTTP redirects during STS token exchange. Previously, 3xx redirects were followed automatically, replaying the request body containing authentication tokens to the redirect destination. (#9299)

Special Thanks: @nvxbug

randomsubsetting: Ignore endpoints that contain no addresses. Previously, this could cause the policy to panic while computing hashes. (#9259)

Special Thanks: @fallintoplace

stats/otel: Ensure method names are populated in trace spans when metrics are disabled. Previously, running with tracing enabled and metrics disabled resulted in server trace spans lacking the RPC method name (recording only "Recv."). (#9262)

transport: Return io.ErrUnexpectedEOF when EOF is encountered after partial header or message body reads. Previously, partial reads could return a plain io.EOF, failing to distinguish truncated data from a clean end of stream. (#9204)

Special Thanks: @buger

transport: Validate metadata supplied by balancers (in PickResult.Metadata) and resolver addresses, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from these sources was sent to the server in outgoing HTTP/2 requests. (#9203)

Special Thanks: @buger

xds: Fix a rare corner case that could prevent a cluster from being removed when it is no longer in use. (#9140)

xds: Fix panic during route matching for routes containing header matchers with empty exact_match strings. (#9223)

Special Thanks: @nvxbug

xds: Reject routes containing header matchers with empty prefix_match or suffix_match strings. Previously, this caused a panic during route matching. (#9223)

Special Thanks: @nvxbug

xds: Fix EDS drop policies being applied at a much lower rate than configured due to an integer overflow. (#9257)

Special Thanks: @nvxbug

xds: Reject EDS resources containing drop policies with unsupported denominators. Previously, such resources caused the client to panic when calculating drop rates. (#9218)

Special Thanks: @nvxbug

xds/rbac: Reject RBAC configurations containing nested Principal or Permission rules with :scheme or grpc- prefixed header matchers. Previously, such configurations could cause DENY policies to fail open. (#9258)

Special Thanks: @nvxbug

xds/rbac: Rewrite host header matchers to :authority in nested Principal and Permission rules. Previously, this rewrite only applied to top-level rules, causing nested host matchers to never match incoming requests and DENY policies to fail open. (#9258)

Special Thanks: @nvxbug

xds/rbac: Reject CidrRanges with an unset prefix length. Previously, an omitted prefix_len field caused a panic during RBAC configuration parsing. (#9250)

Special Thanks: @nvxbug

Performance Improvements

transport: Avoid a heap allocation when flushing shared write buffers. (#9233)

Special Thanks: @zaidoon1

credentials/alts: Support dynamic frame size negotiation and add the GRPC_GO_EXPERIMENTAL_ALTS_MAX_FRAME_SIZE environment variable (default 4KiB, max 512KiB) to configure the maximum ALTS record frame size. (#9268)

Commits

e84aa5a Change version to 1.84.0 (#9324)
c5ae88d Cherrypick #9204 and #9321 to v1.84.x (#9407)
a592f6a Cherrypick #9351 and #9404 to v1.84.x (#9408)
d5a4111 cherry-pick #9365 to v1.84.x (#9370)
89d55e0 cherry-pick #9346 to v1.84.x (#9372)
8a9f866 Cherry-pick #9332 to v1.84.x (#9338)
f8b54e7 Cherry-pick #9331 to v1.84.x (#9334)
30ce1d5 xds: support injecting bootstrap and server config into HTTP filter config pa...
54c743e extproc : wait for async RPC to complete in test (#9311)
538bb2f endpointsharding: decouple locking, and simplify ChildState API (#9290)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-deps group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/neo4j/neo4j-go-driver/v6](https://github.com/neo4j/neo4j-go-driver) | `6.2.0` | `6.3.0` | | [github.com/qdrant/go-client](https://github.com/qdrant/go-client) | `1.19.0` | `1.19.2` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.55.0` | `0.57.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.58.0` | `0.59.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.2` | `1.84.0` | Updates `github.com/neo4j/neo4j-go-driver/v6` from 6.2.0 to 6.3.0 - [Release notes](https://github.com/neo4j/neo4j-go-driver/releases) - [Commits](neo4j/neo4j-go-driver@v6.2.0...v6.3.0) Updates `github.com/qdrant/go-client` from 1.19.0 to 1.19.2 - [Release notes](https://github.com/qdrant/go-client/releases) - [Commits](qdrant/go-client@v1.19.0...v1.19.2) Updates `golang.org/x/crypto` from 0.55.0 to 0.57.0 - [Commits](golang/crypto@v0.55.0...v0.57.0) Updates `golang.org/x/net` from 0.58.0 to 0.59.0 - [Commits](golang/net@v0.58.0...v0.59.0) Updates `google.golang.org/grpc` from 1.83.2 to 1.84.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.83.2...v1.84.0) --- updated-dependencies: - dependency-name: github.com/neo4j/neo4j-go-driver/v6 dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/qdrant/go-client dependency-version: 1.19.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: golang.org/x/crypto dependency-version: 0.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/net dependency-version: 0.59.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: google.golang.org/grpc dependency-version: 1.84.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps ... Signed-off-by: dependabot[bot] <[email protected]>

ecc-tools · 2026-09-28T14:07:39Z

ECC Tools / Security Evidence

Commit: cd9cea7e5c36ac067506af9ff43d8368937ef73b

Security evidence gate passed (success)

No security-sensitive scanner-evidence gap detected.

Mode: enforce

Scanned 2 changed file(s). No missing scanner-evidence signal was detected.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-28T14:07:40Z

ECC Tools / PR Risk Taxonomy

Commit: cd9cea7e5c36ac067506af9ff43d8368937ef73b

PR taxonomy clear (success)

Scanned 2 changed file(s). No taxonomy bucket signals were detected.

Scanned 2 changed file(s).

No PR taxonomy bucket signals were detected.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-28T14:07:42Z

ECC Tools / Reference Set Readiness

Commit: cd9cea7e5c36ac067506af9ff43d8368937ef73b

Reference set readiness gaps detected (neutral)

Reference evidence present for 0/7 areas (0%) across 2 changed file(s).

This check is based on files changed in this PR. Repository-level readiness is still reported by /ecc-tools analyze comments and generated manifests.

Area	Status	Evidence / Next Step
Deep analyzer corpus	Missing	Add analyzer fixture, golden, benchmark, or reference-set files that can catch analyzer regressions.
RAG/evaluator comparison	Missing	Add retrieval or evaluator reference-set comparison fixtures with expected ranking behavior.
PR salvage/review corpus	Missing	Add stale-PR, review-thread, reopen-flow, or salvage reference cases for queue cleanup automation.
Discussion triage corpus	Missing	Add public discussion triage fixtures, golden cases, or reference sets for informational, answered, and no-response classifications.
Harness compatibility	Missing	Add cross-harness, adapter-compliance, or harness-audit evidence for Claude, Codex, OpenCode, Zed, dmux, and agent surfaces.
Security evidence	Missing	Attach security evidence such as SBOMs, SARIF, audit reports, or AgentShield evidence packs.
CI failure-mode evidence	Missing	Add captured CI failure logs, dry-run fixtures, or troubleshooting docs for common workflow failure modes.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-28T14:07:43Z

ECC Tools / Hosted Promotion Readiness

Commit: cd9cea7e5c36ac067506af9ff43d8368937ef73b

Hosted promotion readiness passed (success)

No hosted promotion evidence gaps detected across 2 changed file(s); 0 corpus scenarios had matching evidence.

This check compares PR file changes against the evaluator/RAG promotion corpus in src/analyzers/fixtures/evaluator-rag-corpus.ts.
Hosted output scoring inspected 0 completed cached hosted job results.

No evaluator corpus scenarios matched this PR.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

cloudflare-workers-and-pages · 2026-09-28T14:09:06Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	hystersis-app	`cd9cea7`	Sep 28 2026, 02:11 PM

cloudflare-workers-and-pages · 2026-09-28T14:10:23Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	agent-memorydash	`cd9cea7`	Sep 28 2026, 02:12 PM

cloudflare-workers-and-pages · 2026-09-28T14:11:02Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	agent-memory	`cd9cea7`	Sep 28 2026, 02:11 PM

cloudflare-workers-and-pages · 2026-09-28T14:11:09Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	hystersis-docs	`cd9cea7`	Sep 28 2026, 02:11 PM

dependabot · 2026-10-05T14:09:16Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added automerge dependencies go labels Sep 28, 2026

dependabot Bot requested a review from Himan-D as a code owner September 28, 2026 14:07

dependabot Bot added go automerge dependencies labels Sep 28, 2026

dependabot Bot closed this Oct 5, 2026

dependabot Bot deleted the dependabot/go_modules/go-deps-eaea433eb2 branch October 5, 2026 14:09

Navigation Menu

Repository navigation

chore(deps): bump the go-deps group across 1 directory with 5 updates - #335

chore(deps): bump the go-deps group across 1 directory with 5 updates#335
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-deps-eaea433eb2

dependabot Bot commented on behalf of github Sep 28, 2026 •

edited

Loading

Uh oh!

ecc-tools Bot commented Sep 28, 2026

Uh oh!

ecc-tools Bot commented Sep 28, 2026

Uh oh!

ecc-tools Bot commented Sep 28, 2026

Uh oh!

ecc-tools Bot commented Sep 28, 2026

Uh oh!

cloudflare-workers-and-pages Bot commented Sep 28, 2026 •

edited

Loading

Uh oh!

cloudflare-workers-and-pages Bot commented Sep 28, 2026 •

edited

Loading

Uh oh!

cloudflare-workers-and-pages Bot commented Sep 28, 2026 •

edited

Loading

Uh oh!

cloudflare-workers-and-pages Bot commented Sep 28, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v6.3.0

v1.19.2

What's Changed

v1.19.1

What's Changed

New Contributors

Release 1.84.0

Behavior Changes

New Features

Bug Fixes

Performance Improvements

Uh oh!

ecc-tools Bot commented Sep 28, 2026

ECC Tools / Security Evidence

Uh oh!

ecc-tools Bot commented Sep 28, 2026

ECC Tools / PR Risk Taxonomy

Uh oh!

ecc-tools Bot commented Sep 28, 2026

ECC Tools / Reference Set Readiness

Uh oh!

ecc-tools Bot commented Sep 28, 2026

ECC Tools / Hosted Promotion Readiness

Uh oh!

cloudflare-workers-and-pages Bot commented Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying with Cloudflare Workers

Uh oh!

cloudflare-workers-and-pages Bot commented Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying with Cloudflare Workers

Uh oh!

cloudflare-workers-and-pages Bot commented Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying with Cloudflare Workers

Uh oh!

cloudflare-workers-and-pages Bot commented Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying with Cloudflare Workers

Uh oh!

dependabot Bot commented on behalf of github Oct 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 28, 2026 •

edited

Loading

cloudflare-workers-and-pages Bot commented Sep 28, 2026 •

edited

Loading

cloudflare-workers-and-pages Bot commented Sep 28, 2026 •

edited

Loading

cloudflare-workers-and-pages Bot commented Sep 28, 2026 •

edited

Loading

cloudflare-workers-and-pages Bot commented Sep 28, 2026 •

edited

Loading