Skip to content

chore(deps): bump the go-minor-patch group across 1 directory with 13 updates - #591

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-patch-4c67ffc973
Open

chore(deps): bump the go-minor-patch group across 1 directory with 13 updates#591
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-patch-4c67ffc973

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-minor-patch group with 13 updates in the / directory:

Package From To
cloud.google.com/go/compute/metadata 0.9.0 0.10.0
github.com/aws/aws-sdk-go-v2/config 1.33.4 1.33.6
github.com/aws/aws-sdk-go-v2/service/autoscaling 1.78.0 1.78.1
github.com/aws/aws-sdk-go-v2/service/cloudtrail 1.65.0 1.65.1
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs 1.87.0 1.88.1
github.com/aws/aws-sdk-go-v2/service/ec2 1.332.0 1.336.1
github.com/aws/aws-sdk-go-v2/service/eks 1.99.0 1.101.0
github.com/cilium/cilium 1.20.1 1.20.2
google.golang.org/api 0.297.0 0.299.0
google.golang.org/grpc 1.83.2 1.84.0
k8s.io/api 0.37.0 0.37.1
k8s.io/apimachinery 0.37.0 0.37.1
k8s.io/client-go 0.37.0 0.37.1

Updates cloud.google.com/go/compute/metadata from 0.9.0 to 0.10.0

Changelog

Sourced from cloud.google.com/go/compute/metadata's changelog.

v0.10.0

  • pubsub: Subscription.ModifyPushConfig replaced with Subscription.Update.

  • pubsub: Subscription.Receive now runs concurrently for higher throughput.

  • vision: cloud.google.com/go/vision is deprecated. Use cloud.google.com/go/vision/apiv1 instead.

  • translation: now stable.

  • trace: several changes to the surface. See the link below.

Commits
  • a5913b3 pubsub: add Subscription.Update; remove Subcription.ModifyPushConfig
  • 1bfb4aa storage: fix reference to CopyFrom in doc comment
  • 05b84c5 pubsub: add test for ModifyPushConfig
  • 328063a pubsub: fix data races in stream tests
  • 927c812 pubsub: pull messages concurrently
  • 7c205da add video intelligence to README
  • f6bedb5 bigtable: Add InstanceInfo admin method.
  • 1a5f48f vision: deprecate manual client
  • 1dd9a1e spanner: increase code coverage
  • 2b81b39 translate: mark stable
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.4 to 1.33.6

Commits

Updates github.com/aws/aws-sdk-go-v2/service/autoscaling from 1.78.0 to 1.78.1

Commits

Updates github.com/aws/aws-sdk-go-v2/service/cloudtrail from 1.65.0 to 1.65.1

Commits

Updates github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.87.0 to 1.88.1

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ec2 from 1.332.0 to 1.336.1

Commits

Updates github.com/aws/aws-sdk-go-v2/service/eks from 1.99.0 to 1.101.0

Commits

Updates github.com/cilium/cilium from 1.20.1 to 1.20.2

Release notes

Sourced from github.com/cilium/cilium's releases.

1.20.2

Summary of Changes

Minor Changes:

Bugfixes:

CI Changes:

... (truncated)

Changelog

Sourced from github.com/cilium/cilium's changelog.

v1.20.2

Summary of Changes

Minor Changes:

Bugfixes:

... (truncated)

Commits
  • e0dc92b Prepare for release v1.20.2
  • 97a9624 policy: Fix data race on the map state identity index
  • ab3e739 Makefile: Order the bpf codegen ahead of the Go builds
  • 537f1b6 fix(envoyconfig): retry port allocation on duplicate-address rejections
  • 3ea19fb policy: fix host identity check
  • 8777afa certificatemanager: confine local secret reads to certificates root
  • 450359b translation: test BackendTLSPolicy SAN validation
  • 19c00fa Fix testdata in operator/pkg/gateway-api
  • 58023a2 gateway-api: validate BackendTLSPolicy hostname against certificate
  • 39d53fa images: update cilium-{runtime,builder}
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.297.0 to 0.299.0

Release notes

Sourced from google.golang.org/api's releases.

v0.299.0

0.299.0 (2026-09-21)

Features

v0.298.0

0.298.0 (2026-09-14)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.299.0 (2026-09-21)

Features

0.298.0 (2026-09-14)

Features

Commits

Updates google.golang.org/grpc from 1.83.2 to 1.84.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.84.0

Behavior Changes

  • stats/otel: The grpc.lb.pick_first.* metrics have been removed and replaced with grpc.subchannel.* metrics. See gRFC A94 for more details. (#9215)

New Features

  • xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

  • client: Fix a bug where a ClientConn could get permanently stuck in IDLE when an RPC was canceled during stream creation. Previously, such cancellations triggered stream cleanup twice, corrupting the channel's idleness state and causing subsequent RPCs to fail with deadline exceeded errors. (#9191)
  • client: Fix a bug where non-gRPC HTTP responses ending with an empty DATA frame failed the RPC with status code Internal instead of preserving the HTTP-mapped status code and response body. (#9217)
  • credentials: Validate metadata returned by per-RPC credentials, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from credentials was sent to the server in outgoing HTTP/2 requests. (#9202)
  • credentials/sts: Prevent potential token leakage by disallowing HTTP redirects during STS token exchange. Previously, 3xx redirects were followed automatically, replaying the request body containing authentication tokens to the redirect destination. (#9299)
  • randomsubsetting: Ignore endpoints that contain no addresses. Previously, this could cause the policy to panic while computing hashes. (#9259)
  • stats/otel: Ensure method names are populated in trace spans when metrics are disabled. Previously, running with tracing enabled and metrics disabled resulted in server trace spans lacking the RPC method name (recording only "Recv."). (#9262)
  • transport: Return io.ErrUnexpectedEOF when EOF is encountered after partial header or message body reads. Previously, partial reads could return a plain io.EOF, failing to distinguish truncated data from a clean end of stream. (#9204)
  • transport: Validate metadata supplied by balancers (in PickResult.Metadata) and resolver addresses, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from these sources was sent to the server in outgoing HTTP/2 requests. (#9203)
  • xds: Fix a rare corner case that could prevent a cluster from being removed when it is no longer in use. (#9140)
  • xds: Fix panic during route matching for routes containing header matchers with empty exact_match strings. (#9223)
  • xds: Reject routes containing header matchers with empty prefix_match or suffix_match strings. Previously, this caused a panic during route matching. (#9223)
  • xds: Fix EDS drop policies being applied at a much lower rate than configured due to an integer overflow. (#9257)
  • xds: Reject EDS resources containing drop policies with unsupported denominators. Previously, such resources caused the client to panic when calculating drop rates. (#9218)
  • xds/rbac: Reject RBAC configurations containing nested Principal or Permission rules with :scheme or grpc- prefixed header matchers. Previously, such configurations could cause DENY policies to fail open. (#9258)
  • xds/rbac: Rewrite host header matchers to :authority in nested Principal and Permission rules. Previously, this rewrite only applied to top-level rules, causing nested host matchers to never match incoming requests and DENY policies to fail open. (#9258)
  • xds/rbac: Reject CidrRanges with an unset prefix length. Previously, an omitted prefix_len field caused a panic during RBAC configuration parsing. (#9250)

Performance Improvements

@dependabot
chore(deps): bump the go-minor-patch group across 1 directory with 13…
cae5092 
… updates

Bumps the go-minor-patch group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/compute/metadata](https://github.com/googleapis/google-cloud-go) | `0.9.0` | `0.10.0` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.4` | `1.33.6` |
| [github.com/aws/aws-sdk-go-v2/service/autoscaling](https://github.com/aws/aws-sdk-go-v2) | `1.78.0` | `1.78.1` |
| [github.com/aws/aws-sdk-go-v2/service/cloudtrail](https://github.com/aws/aws-sdk-go-v2) | `1.65.0` | `1.65.1` |
| [github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs](https://github.com/aws/aws-sdk-go-v2) | `1.87.0` | `1.88.1` |
| [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) | `1.332.0` | `1.336.1` |
| [github.com/aws/aws-sdk-go-v2/service/eks](https://github.com/aws/aws-sdk-go-v2) | `1.99.0` | `1.101.0` |
| [github.com/cilium/cilium](https://github.com/cilium/cilium) | `1.20.1` | `1.20.2` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.297.0` | `0.299.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.2` | `1.84.0` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.37.0` | `0.37.1` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.37.0` | `0.37.1` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.37.0` | `0.37.1` |



Updates `cloud.google.com/go/compute/metadata` from 0.9.0 to 0.10.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@v0.9.0...v0.10.0)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.4 to 1.33.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.33.4...config/v1.33.6)

Updates `github.com/aws/aws-sdk-go-v2/service/autoscaling` from 1.78.0 to 1.78.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.78.0...service/s3/v1.78.1)

Updates `github.com/aws/aws-sdk-go-v2/service/cloudtrail` from 1.65.0 to 1.65.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.65.0...service/s3/v1.65.1)

Updates `github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs` from 1.87.0 to 1.88.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.87.0...service/s3/v1.88.1)

Updates `github.com/aws/aws-sdk-go-v2/service/ec2` from 1.332.0 to 1.336.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ec2/v1.332.0...service/ec2/v1.336.1)

Updates `github.com/aws/aws-sdk-go-v2/service/eks` from 1.99.0 to 1.101.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.99.0...service/s3/v1.101.0)

Updates `github.com/cilium/cilium` from 1.20.1 to 1.20.2
- [Release notes](https://github.com/cilium/cilium/releases)
- [Changelog](https://github.com/cilium/cilium/blob/1.20.2/CHANGELOG.md)
- [Commits](cilium/cilium@1.20.1...1.20.2)

Updates `google.golang.org/api` from 0.297.0 to 0.299.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.297.0...v0.299.0)

Updates `google.golang.org/grpc` from 1.83.2 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.2...v1.84.0)

Updates `k8s.io/api` from 0.37.0 to 0.37.1
- [Commits](kubernetes/api@v0.37.0...v0.37.1)

Updates `k8s.io/apimachinery` from 0.37.0 to 0.37.1
- [Commits](kubernetes/apimachinery@v0.37.0...v0.37.1)

Updates `k8s.io/client-go` from 0.37.0 to 0.37.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.37.0...v0.37.1)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/compute/metadata
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/autoscaling
  dependency-version: 1.78.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/cloudtrail
  dependency-version: 1.65.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs
  dependency-version: 1.88.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2
  dependency-version: 1.336.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/eks
  dependency-version: 1.101.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/cilium/cilium
  dependency-version: 1.20.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: google.golang.org/api
  dependency-version: 0.299.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: google.golang.org/grpc
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: k8s.io/api
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: k8s.io/client-go
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 1, 2026
@dependabot
dependabot Bot requested a review from Smana as a code owner October 1, 2026 12:42
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 1, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Smana Smana Awaiting requested review from Smana Smana is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants