Skip to content

build(deps): bump the minor-and-patch group across 1 directory with 17 updates - #12859

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/minor-and-patch-3f50a9a670
Open

build(deps): bump the minor-and-patch group across 1 directory with 17 updates#12859
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/minor-and-patch-3f50a9a670

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 11 updates in the / directory:

Package From To
github.com/beevik/etree 1.7.0 1.7.1
github.com/blevesearch/bleve/v2 2.6.0 2.6.1
github.com/go-chi/chi/v5 5.3.1 5.3.2
github.com/nats-io/nats-server/v2 2.14.5 2.14.6
github.com/onsi/gomega 1.42.1 1.43.0
github.com/open-policy-agent/opa 1.19.0 1.20.1
github.com/sirupsen/logrus 1.10.0 1.10.2
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.70.0 0.71.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.70.0 0.71.0
go.opentelemetry.io/contrib/zpages 0.70.0 0.71.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 1.45.0 1.46.0

Updates github.com/beevik/etree from 1.7.0 to 1.7.1

Release notes

Sourced from github.com/beevik/etree's releases.

Release v1.7.1

Changes

  • Improve efficiency of Element.Text and Element.Tail.
Changelog

Sourced from github.com/beevik/etree's changelog.

Release 1.7.1

Changes

  • Improve efficiency of Element.Text and Element.Tail.
Commits

Updates github.com/blevesearch/bleve/v2 from 2.6.0 to 2.6.1

Release notes

Sourced from github.com/blevesearch/bleve/v2's releases.

v2.6.1

What's Changed

New Contributors

Full Changelog: blevesearch/bleve@v2.6.0...v2.6.1

Commits

Updates github.com/go-chi/chi/v5 from 5.3.1 to 5.3.2

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.3.2

What's Changed

  • feat(middleware): add text/markdown, text/csv, text/vtt to default compressible types by @​VojtechVitek in go-chi/chi#1151
  • docs: deployment recipe for middleware.ClientIPFromXFFTrustedProxies() by @​VojtechVitek in go-chi/chi#1111
  • fix: don't drop handlers that collide with a Mount()/Route() pattern by @​VojtechVitek in go-chi/chi#1148
  • Don't duplicate methods in Allow: header for 405 responses by @​flimzy in go-chi/chi#1029
  • fix(middleware): reject catch-all compress wildcards by @​VojtechVitek in go-chi/chi#1156
    • middleware.NewCompressor(level, "/*") never worked and silently compressed nothing. Instead of turning it into a compress-everything catch-all (as proposed in go-chi/chi#868 and go-chi/chi#1121), we decided to reject both "/" and "/*" at construction and panic. Compressing every response wastes CPU on already-compressed types (zip, jpeg, png), which is why the middleware keeps a curated default list. Users should pass explicit content types.

Full Changelog: go-chi/chi@v5.3.1...v5.3.2

Commits
  • 3893906 fix(middleware): reject catch-all compress wildcards "/" and "/*" (#1156)
  • 9b6ddcd Don't duplicate methods in Allow: header for 405 responses (#1029)
  • 29164f0 fix: don't drop handlers that collide with a Mount()/Route() pattern (#1148)
  • bc02284 docs: deployment recipe + verify checklist for ClientIPFromXFFTrustedProxies ...
  • 60ecea5 feat(middleware): add text/markdown, text/csv, text/vtt to default compressib...
  • See full diff in compare view

Updates github.com/nats-io/nats-server/v2 from 2.14.5 to 2.14.6

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.14.6

Changelog

Refer to the 2.14 Upgrade Guide for backwards compatibility notes with 2.12.x. Please note that the 2.13.x version was skipped.

Go Version

  • 1.26.7

Improved

General

  • Removal from service import response maps is now constant-time (#8463)
  • The client code no longer resets the deadline more times than necessary when flushing client buffers (#8513)
  • The client write buffers are now freed correctly when the working buffer exceeds a rational size (#8515)

JetStream

  • Stream reads are now isolated with a separate lock, which improves the performance of direct gets (#8486)
  • Improved the performance of looking up matching sequence numbers for multi-subject gets (#8486)
  • Reduced the number of heap escapes in subject tree matching (#8526)

Fixed

General

  • WebSocket client buffers are recycled more aggressively when reallocating into larger buffers (#8518)
  • Fixed missing routes after a reconnect when gossiped URLs were rejected (#8527)

JetStream

  • The filestore block sync no longer incorrectly skips blocks that were compacted during the same pass (#8456)
  • The filestore block sync now performs a single directory sync upon completion rather than once per compacted block (#8461)
  • The filestore I/O semaphore now covers block sync operations (#8462)
  • Stream config updates with replicas greater than 1 are now rejected on non-clustered systems (#8464)
  • Fixed some issues that could prevent stream snapshots from taking place on a clean shutdown (#8465)
  • The filestore inline compaction no longer ignores sync_interval: always (#8475)
  • The stream created time is now preserved after recovery on a standalone server (#8471, contributed by @​Green7)
  • Fixed a data race that could apply when accessing the batch ID (#8369)
  • Fixed a data race when reading the consumer direct or sourcing status (#8478, contributed by @​nberlee)
  • Prevent the consumer direct or sourcing status from being changed with a consumer update (#8478, contributed by @​nberlee)
  • Fixed an issue where the server could fail to distinguish consumer tiers when enforcing limits (#8484)
  • Fixed a flow control problem where replicated consumers could get stuck after a leader change (#8488)
  • Fixed various consumer create issues that could destroy the state of an existing consumer with the same name (#8491)
  • Internal message delete proposals are no longer counted in the JS API statistics (#8502)
  • Dynamic filestore reservations no longer incorrectly shrink based on used storage after restarts (#8503)
  • Fixed a signalling issue that could stall Raft catchups (#8501)
  • The pending append entry cache in-memory is now bounded by size as well as entry count (#8501)
  • Fixed an issue where a stale snapshot from a previous Raft group could be replayed if the group name was unchanged (#8501)

... (truncated)

Commits
  • 1aa10f9 Release v2.14.6
  • e863317 Cherry-picks for 2.14.6 (#8529)
  • 1196e5a [FIXED] Route missing after reconnect when duplicate resolution kept gossip URL
  • 89befb5 [IMPROVED] Only allocate AckAll sequences when acking in place
  • 0079dd9 [FIXED] AckAll on WQ removed messages outside consumer filter
  • c83ca82 Release v2.14.6-RC.2
  • 9dca6dc Reduce heap escapes in subject tree matching
  • 1c93130 Cherry-picks for 2.14.6-RC.2 (#8525)
  • b6971ae Fix handling of atomic writes tmp files in test helper
  • 591bb3b Fix TestJetStreamClusterHardKillAfterStreamAdd
  • Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.42.1 to 1.43.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.43.0

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

Commits

Updates github.com/open-policy-agent/opa from 1.19.0 to 1.20.1

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v1.20.1

This release includes a bug fix for a regression introduced in v1.20.0 in comparing a number to some float values. Thanks @​kmadan for reporting the issue and submitting a fix!

v1.20.0

This release contains a mix of new features and bug fixes. Notably:

  • New Rego keywords: and and or, for combining conditions inside a single rule body
  • allow_net now restricts remote JSON Schema $ref fetching from json.match_schema and json.verify_schema
  • Coverage reports can now explain why a range is not covered
  • Much faster partial evaluation for dynamically composed policies

New Rego keywords: and and or (#7602)

Rego gains two keywords for combining conditions inside a single rule body — a long-standing request, and one of the larger additions to the language in some time. and and or let control flow that previously had to be split across helper rules stay where it is read.

Before, a rule body that needed to succeed on one of several conditions meant extracting a rule:

package example
allow if {
input.method == "GET"
admin_or_public_owner
}
admin_or_public_owner if input.user.admin
admin_or_public_owner if {
input.user.owner
input.resource.public
}

Now:

package example
import future.keywords.and
import future.keywords.or
the and groups first, so this reads as:
an admin, or an owner of a public resource
allow if {
input.method == "GET"
</tr></table>

... (truncated)

Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

1.20.1

This release includes a bug fix for a regression introduced in v1.20.0 in comparing a number to some float values. Thanks @​kmadan for reporting the issue and submitting a fix!

1.20.0

This release contains a mix of new features and bug fixes. Notably:

  • New Rego keywords: and and or, for combining conditions inside a single rule body
  • allow_net now restricts remote JSON Schema $ref fetching from json.match_schema and json.verify_schema
  • Coverage reports can now explain why a range is not covered
  • Much faster partial evaluation for dynamically composed policies

New Rego keywords: and and or (#7602)

Rego gains two keywords for combining conditions inside a single rule body — a long-standing request, and one of the larger additions to the language in some time. and and or let control flow that previously had to be split across helper rules stay where it is read.

Before, a rule body that needed to succeed on one of several conditions meant extracting a rule:

package example
allow if {
input.method == "GET"
admin_or_public_owner
}
admin_or_public_owner if input.user.admin
admin_or_public_owner if {
input.user.owner
input.resource.public
}

Now:

package example
import future.keywords.and
import future.keywords.or
the and groups first, so this reads as:
an admin, or an owner of a public resource
allow if {
</tr></table>

... (truncated)

Commits
  • 72f30d6 Prepare v1.20.1 release
  • ceb4bf2 ast: fix panic comparing a decimal zero with a non-integral number (#9099)
  • 328ca09 Prepare v1.20.0 release (#9095)
  • ce7ab30 Add Scanara to the OPA ecosystem page. (#9094)
  • cbc0993 ast: Index rules with and/or expressions (#9063)
  • 54bf329 fix loading absolute paths on Windows (#9055)
  • 48310c6 format: Honor line breaks before explicit and/or operand bodies (#9086)
  • a3953de build/release: Create new release tool (#8959)
  • ec9536c format: converge object comprehension layout (#9076)
  • 255adec ast: Fix future.keywords wildcard import not including the not keyword (#...
  • Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.10.0 to 1.10.2

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.2

Logrus v1.10.2

This is a small maintenance release that updates github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency from Logrus' dependency graph. There are no functional changes in this release.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.1

Full Changelog: sirupsen/logrus@v1.10.1...v1.10.2

v1.10.1

Logrus v1.10.1

This patch release fixes two issues in field formatting and handling:

  • Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.
  • Allow function-backed values implementing error to be used with WithError, WithField, and WithFields.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.0

Full Changelog: sirupsen/logrus@v1.10.0...v1.10.1

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.2

Changed:

  • Update github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency.

1.10.1

Fixes:

  • Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.
  • Allow function-backed implementations of error as field values.
Commits
  • 6d6a132 Merge pull request #1586 from thaJeztah/prepare_v1.10.2
  • 4f94653 update changelog for v1.10.2
  • 87434bb Merge pull request #1585 from thaJeztah/bump_testify
  • e7d2120 chore(deps): bump github.com/stretchr/testify v1.12.1
  • 8b673a9 Merge pull request #1583 from thaJeztah/release_1.10.1
  • 0b920ad Merge pull request #1584 from thaJeztah/more_coverage
  • 5e20694 TextFormatter: cover nil pointer method receivers
  • 8312732 update changelog for v1.10.1
  • e987a40 Merge pull request #1582 from thaJeztah/panic_handler
  • 17d574b TextFormatter: recover panics from Error and String methods
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • 959dbda Merge pull request #1935 from harryzcy/yaml-update
  • 9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.70.0 to 0.71.0

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's changelog.

[1.46.0/2.5.3/0.71.0/0.37.3/0.26.0/0.20.1/0.16.3/0.18.0] - 2026-08-25

This release is the last to support [Go 1.25]. The next release will require at least [Go 1.26].

Added

  • Add support for the aws.ec2 resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9139)
  • Support testing of [Go 1.27]. (#9524)
  • Add go.opentelemetry.io/contrib/detectors/docker, a resource detector for Docker, ported from processor/resourcedetectionprocessor/internal/docker in opentelemetry-collector-contrib. (#9001)
  • Add S3AttributeBuilder to go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws that sets S3-specific span attributes following the OpenTelemetry S3 semantic conventions. (#9292)

Deprecated

  • Deprecate go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho. Use github.com/labstack/echo-opentelemetry instead. (#9136)

Fixed

  • Record error.type attribute on server spans in go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful when a request is cancelled or ends in a 5xx error. (#9387)
  • Report ot-baggage-* extraction errors from go.opentelemetry.io/contrib/propagators/ot to otel.Handle instead of silently discarding them, while still attaching the successfully parsed baggage members to the context. (#9395)
  • Set error.type on the rpc.client.call.duration and rpc.server.call.duration metrics in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc when the RPC fails with a non-OK status, per the RPC semantic conventions. (#9429)
  • Reject OTLP exporter headers with an empty name in go.opentelemetry.io/contrib/otelconf, go.opentelemetry.io/contrib/otelconf/x, and go.opentelemetry.io/contrib/otelconf/v0.3.0, instead of forwarding invalid header names to OTLP exporters. (#9102)
  • go.opentelemetry.io/contrib/detectors/aws/lambda no longer returns an error when run outside of an AWS Lambda environment, matching the no-op behavior of other resource detectors. (#9464)
  • Convert Prometheus untyped metrics to OTLP Gauges in go.opentelemetry.io/contrib/bridges/prometheus. (#9099)
Commits
  • c4c6248 Release v1.46.0/v2.5.3/v0.71.0/v0.37.3/v0.26.0/v0.20.1/v0.16.3/v0.18.0 (#9563)
  • 11c8a13 fix(deps): update aws-sdk-go-v2 monorepo
  • 0458b9d chore(deps): update module go.opentelemetry.io/contrib/instrumentation/net/ht...
  • 638a0d5 fix(deps): update module github.com/moby/moby/api to v1.55.0
  • 5089aa5 chore(deps): update googleapis to da73d73
  • a50857b chore(deps): update jaegertracing/jaeger docker tag to v2.20.0
  • aa4f4a5 chore(deps): update open-telemetry/shared-workflows action to v0.11.0
  • ccbbc14 fix(deps): update module github.com/aws/smithy-go to v1.28.0
  • 9312464 chore(deps): update module github.com/docker/go-connections to v0.8.1
  • 36c3b00 chore(deps): update module github.com/felixge/httpsnoop to v1.1.0
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.70.0 to 0.71.0

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's changelog.

[1.46.0/2.5.3/0.71.0/0.37.3/0.26.0/0.20.1/0.16.3/0.18.0] - 2026-08-25

This release is the last to support [Go 1.25]. The next release will require at least [Go 1.26].

Added

  • Add support for the aws.ec2 resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9139)
  • Support testing of [Go 1.27]. (#9524)
  • Add go.opentelemetry.io/contrib/detectors/docker, a resource detector for Docker, ported from processor/resourcedetectionprocessor/internal/docker in opentelemetry-collector-contrib. (#9001)
  • Add S3AttributeBuilder to go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws that sets S3-specific span attributes following the OpenTelemetry S3 semantic conventions. (#9292)

Deprecated

  • Deprecate go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho. Use github.com/labstack/echo-opentelemetry instead. (#9136)

Fixed

  • Record error.type attribute on server spans in go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful when a request is cancelled or ends in a 5xx error. (#9387)
  • Report ot-baggage-* extraction errors from go.opentelemetry.io/contrib/propagators/ot to otel.Handle instead of silently discarding them, while still attaching the successfully parsed baggage members to the context. (#9395)
  • Set error.type on the rpc.client.call.duration and rpc.server.call.duration metrics in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc when the RPC fails with a non-OK status, per the RPC semantic conventions. (#9429)
  • Reject OTLP exporter headers with an empty name in go.opentelemetry.io/contrib/otelconf, go.opentelemetry.io/contrib/otelconf/x, and go.opentelemetry.io/contrib/otelconf/v0.3.0, instead of forwarding invalid header names to OTLP exporters. (#9102)
  • go.opentelemetry.io/contrib/detectors/aws/lambda no longer returns an error when run outside of an AWS Lambda environment, matching the no-op behavior of other resource detectors. (#9464)
  • Convert Prometheus untyped metrics to OTLP Gauges in go.opentelemetry.io/contrib/bridges/prometheus. (#9099)
Commits
  • c4c6248 Release v1.46.0/v2.5.3/v0.71.0/v0.37.3/v0.26.0/v0.20.1/v0.16.3/v0.18.0 (#9563)
  • 11c8a13 fix(deps): update aws-sdk-go-v2 monorepo
  • 0458b9d chore(deps): update module go.opentelemetry.io/contrib/instrumentation/net/ht...
  • 638a0d5 fix(deps): update module github.com/moby/moby/api to v1.55.0
  • 5089aa5 chore(deps): update googleapis to da73d73
  • a50857b chore(deps): update jaegertracing/jaeger docker tag to v2.20.0
  • aa4f4a5 chore(deps): update open-telemetry/shared-workflows action to v0.11.0
  • ccbbc14 fix(deps): update module github.com/aws/smithy-go to v1.28.0
  • 9312464 chore(deps): update module github.com/docker/go-connections to v0.8.1
  • 36c3b00 chore(deps): update module github.com/felixge/httpsnoop to v1.1.0
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/zpages from 0.70.0 to 0.71.0

Changelog

Sourced from go.opentelemetry.io/contrib/zpages's changelog.

[1.46.0/2.5.3/0.71.0/0.37.3/0.26.0/0.20.1/0.16.3/0.18.0] - 2026-08-25

This release is the last to support [Go 1.25]. The next release will require at least [Go 1.26].

Added

  • Add support for the aws.ec2 resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9139)
  • Support testing of [Go 1.27]. (#9524)
  • Add go.opentelemetry.io/contrib/detectors/docker, a resource detector for Docker, ported from processor/resourcedetectionprocessor/internal/docker in opentelemetry-collector-contrib. (#9001)
  • Add S3AttributeBuilder to go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws that sets S3-specific span attributes following the OpenTelemetry S3 semantic conventions. (#9292)

Deprecated

  • Deprecate go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho. Use github.com/labstack/echo-opentelemetry instead. (#9136)

Fixed

  • Record error.type attribute on server spans in go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful when a request is cancelled or ends in a 5xx error. (#9387)
  • Report ot-baggage-* extraction errors from go.opentelemetry.io/contrib/propagators/ot to otel.Handle instead of silently discarding them, while still attaching the successfully parsed baggage members to the context. (#9395)
  • Set error.type on the rpc.client.call.duration and rpc.server.call.duration metrics in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc when the RPC fails with a non-OK status, per the RPC semantic conventions. (

@dependabot
dependabot Bot requested a review from a team as a code owner August 30, 2026 22:05
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 30, 2026
@update-docs

update-docs Bot commented Aug 30, 2026

Copy link
Copy Markdown

Thanks for opening this pull request! The maintainers of this repository would appreciate it if you would create a changelog item based on your changes.

@kw-security

kw-security commented Aug 30, 2026 •
edited
Loading

Copy link
Copy Markdown

⚠️ Snyk checks are incomplete.

Status Scan Engine Critical High Medium Low Total (0)
⚠️ Open Source Security 0 0 0 0 See details
⚠️ Licenses 0 0 0 0 See details
✅ Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@dependabot
build(deps): bump the minor-and-patch group across 1 directory with 1…
9844c22 
…7 updates

Bumps the minor-and-patch group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/beevik/etree](https://github.com/beevik/etree) | `1.7.0` | `1.7.1` |
| [github.com/blevesearch/bleve/v2](https://github.com/blevesearch/bleve) | `2.6.0` | `2.6.1` |
| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.3.1` | `5.3.2` |
| [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) | `2.14.5` | `2.14.6` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.42.1` | `1.43.0` |
| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `1.19.0` | `1.20.1` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.10.0` | `1.10.2` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.70.0` | `0.71.0` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.70.0` | `0.71.0` |
| [go.opentelemetry.io/contrib/zpages](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.70.0` | `0.71.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.45.0` | `1.46.0` |



Updates `github.com/beevik/etree` from 1.7.0 to 1.7.1
- [Release notes](https://github.com/beevik/etree/releases)
- [Changelog](https://github.com/beevik/etree/blob/main/RELEASE_NOTES.md)
- [Commits](beevik/etree@v1.7.0...v1.7.1)

Updates `github.com/blevesearch/bleve/v2` from 2.6.0 to 2.6.1
- [Release notes](https://github.com/blevesearch/bleve/releases)
- [Commits](blevesearch/bleve@v2.6.0...v2.6.1)

Updates `github.com/go-chi/chi/v5` from 5.3.1 to 5.3.2
- [Release notes](https://github.com/go-chi/chi/releases)
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md)
- [Commits](go-chi/chi@v5.3.1...v5.3.2)

Updates `github.com/nats-io/nats-server/v2` from 2.14.5 to 2.14.6
- [Release notes](https://github.com/nats-io/nats-server/releases)
- [Changelog](https://github.com/nats-io/nats-server/blob/main/RELEASES.md)
- [Commits](nats-io/nats-server@v2.14.5...v2.14.6)

Updates `github.com/onsi/gomega` from 1.42.1 to 1.43.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.42.1...v1.43.0)

Updates `github.com/open-policy-agent/opa` from 1.19.0 to 1.20.1
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa@v1.19.0...v1.20.1)

Updates `github.com/sirupsen/logrus` from 1.10.0 to 1.10.2
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.10.0...v1.10.2)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.70.0 to 0.71.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.70.0...zpages/v0.71.0)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.70.0 to 0.71.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.70.0...zpages/v0.71.0)

Updates `go.opentelemetry.io/contrib/zpages` from 0.70.0 to 0.71.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.70.0...zpages/v0.71.0)

Updates `go.opentelemetry.io/otel` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.45.0...v1.46.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.45.0...v1.46.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.45.0...v1.46.0)

Updates `go.opentelemetry.io/otel/trace` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.45.0...v1.46.0)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260803160001-6ac0973c030d to 0.0.0-20260819154853-08b0e4226688
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.83.1 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.1...v1.83.2)

---
updated-dependencies:
- dependency-name: github.com/beevik/etree
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/blevesearch/bleve/v2
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/go-chi/chi/v5
  dependency-version: 5.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/nats-io/nats-server/v2
  dependency-version: 2.14.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/open-policy-agent/opa
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-version: 0.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: go.opentelemetry.io/contrib/zpages
  dependency-version: 0.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20260819154853-08b0e4226688
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/minor-and-patch-3f50a9a670 branch from 38bf843 to 9844c22 Compare September 2, 2026 09:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@kw-security