Skip to content

Bump github.com/osrg/gobgp/v4 from 4.8.0 to 4.9.0 - #100

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/github.com/osrg/gobgp/v4-4.9.0
Open

Bump github.com/osrg/gobgp/v4 from 4.8.0 to 4.9.0#100
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/github.com/osrg/gobgp/v4-4.9.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/osrg/gobgp/v4 from 4.8.0 to 4.9.0.

Release notes

Sourced from github.com/osrg/gobgp/v4's releases.

v4.9.0

Changelog

  • 01c5c4c27f9a1ac3b5927f433b5115f9b0eee791 GoBGP 4.9.0
  • 9d50d8ea642e3ac24703b8b49da43ff34230ccf6 server: drop stale notifications queued while a peer session was down
  • efa09002f6577e026dcde72379228b1a8f01d84d packet/bgp: check the per-type message length in parseBody
  • d7c721d85617d02431f5bfb3df49612a2b8567b3 packet/bgp: reject a body that does not match the declared length
  • 5e34ff5c93a373f892ad34e1c8df7edfba77976b test: move the KEEPALIVE length test next to the other header tests
  • e37c5a20f7d956ac21c01308d89454c07583bb43 packet/bgp: reject KEEPALIVE messages that are not 19 octets
  • b2c73cfea1e83b96b662d6eb8b579769de02f060 test: drop run_all_tests.sh and document how to run scenario tests
  • 8056d41c5d6d3594e0e6602f7be7d7dcec0e0f97 docs: document the listen address of the gRPC API
  • 4bbeb792871dc96617ed44fa03fc644e0f2025aa security: define what we treat as a vulnerability
  • e6c6f10aa055d508925eb3eac192928cd0d42ba4 table: find the policy assignments in DeletePolicy itself
  • 4171aa939c7a7b32bb61b01100f593a925028a3c server: drop the policy assignment of a deleted peer
  • a111094bae2ed6d53b20c65231ebf9a51dcfc3b5 server: store the per peer policy only for a route server client
  • c0214f775f53c15e68b4386358c9e46ea1658978 table: report a statement that the policy does not have
  • 36cca5d4737175844da8d1560d81c9612c5092e2 table: check the import direction when deleting a policy
  • 698cc613ad3843795ede137eaa848874c4291b03 table: fix preserve flag in DeletePolicy
  • d4eb7d3231d6b94f764486a36a36b32d19b8487a config: remove the collector configuration
  • 8006da4d73b6c5b384d17146af5ac1843774abee config: log reload failures at Error again
  • 3436d724f491ed0c246dd6dbbcd6c6d538eff9dc config: log the export policy assignment failure at Error
  • 5f4a6b52a2778e4f051c01561a2424dae80d7ba0 config: do not abort startup when zebra is not reachable
  • 94518c5c6de81e0168b6abcd1b16b2f5c597fb7c fix(cmd/gobgpd): delay sdnotify readiness
  • 6e08373dfdd4266b5cf8efa84cbf75e31296c141 feat(config): return initial apply errors
  • 11a40965a505a15770dedac8fcf210c5d6406963 server: fill in the Data field of the too long message error
  • 8f724346eeb8ba8d46e1d238ea048da49ff57957 packet/bgp: fill in the Data field of message header errors
  • c927e31f34ef4614d9e8c92efb5035b06773832b server: type fsmStateReason's notification as *bgp.BGPNotification
  • 88ac6dafb8034fb4383e6c5d928417999fe38b20 server: pass the sent NOTIFICATION to fsmStateReason in handleOpen
  • c4e13d15ecfb3ff8cfd8b5fdbe01e2fabe3d6c50 server: fix wrong message wired into fsmStateReason on bad-peer-AS/invalid-msg
  • 36e6efdfda9602ee19a833b5e5b334358ab9caaf config: test peer group deletion against config updates
  • e585c39a759e2e7a59dcace1aa90352be6c093ea config: fix deleting peer group and neighbor together
  • eb2a727fff2eda8ab0be3672ec0b153791a22300 packet/bgp: include the type in an unknown route distinguisher string
  • f9152c2771cb3a2c82fe515fab6fa130c4c5b5b5 packet/bgp: keep the value of an unknown route distinguisher
  • 33539ee4a2ebe921c541e4c14902340d225c6a72 apiutil: round-trip the SR-MPLS Binding SID label through the API
  • 8b1944127956ea727eac2b11a09ba8024760a411 tcp-ao: expose HMAC-SHA256 profiles
  • 93419434a5f32b36e510e2c19ce0eea6755ee724 netutils: support HMAC-SHA256 for TCP-AO
  • cb123e959e121301413c58fa649c9ff763b17c99 spell-check: keep dictionary.txt sorted
  • d7ae493e18875c063b2f0a22fa0a5901cd6ad126 spell-check: fix the "mututally" typo
  • 3b0530045bc12cb8e73a2b7ffebf14eb068323aa config: load TCP-AO keychains from config
  • c32c92fac4c1ed3c2dfaffafe8efa5aa332dff23 config/oc: add TCP-AO keychain model
  • dae5a6cdae8736a4c3a89b1379144c4a7f47d77c config/oc: reject out-of-range integers in the config file
  • 1b84a407a5997bfa00bec20a77fc431369c9d827 packet/bgp: add a test for concurrent Serialize
  • e7f8d7e7ecace0215de509b833dd2f8cdb023ca4 packet/bgp: do not cache the message length in the BGP header
  • b010677d9e7f4a3a36733557bce032a6f3623541 packet/bgp: do not store the serialized length in OPEN
  • caccf7bf99cf639875134940cc3bea2457cd763e packet/bgp: do not store the serialized value in the capability
  • 3b6ff68782668ae5fb53ce23fff4a822c1a6c5d1 packet/bgp: make capability Len independent of Serialize
  • a40450da38a25ecab90c6f9fd7f4fdc2302f91a7 server: hold fsm.lock when reading fsm.recvOpen
  • 8c84624fc71b1812df156d5f2fbc64d36a827673 cmd/gobgp: document the I-PMSI route target as required
  • aac7dea4a874666de5e51daeea05af784b4ada00 cmd/gobgp: validate I-PMSI route target before use
  • 42abd2427ac10b8109a6f001f376cec29c15166c packet/bgp: serialize the full SID in the SRv6 Binding SID sub-TLV
  • c0d5851330cb275386bfbb02d607d4a4aa86872b packet/bgp: set the bottom-of-stack bit in the VPLS Label Base

... (truncated)

Commits
  • 01c5c4c GoBGP 4.9.0
  • 9d50d8e server: drop stale notifications queued while a peer session was down
  • efa0900 packet/bgp: check the per-type message length in parseBody
  • d7c721d packet/bgp: reject a body that does not match the declared length
  • 5e34ff5 test: move the KEEPALIVE length test next to the other header tests
  • e37c5a2 packet/bgp: reject KEEPALIVE messages that are not 19 octets
  • b2c73cf test: drop run_all_tests.sh and document how to run scenario tests
  • 8056d41 docs: document the listen address of the gRPC API
  • 4bbeb79 security: define what we treat as a vulnerability
  • e6c6f10 table: find the policy assignments in DeletePolicy itself
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/osrg/gobgp/v4](https://github.com/osrg/gobgp) from 4.8.0 to 4.9.0.
- [Release notes](https://github.com/osrg/gobgp/releases)
- [Commits](osrg/gobgp@v4.8.0...v4.9.0)

---
updated-dependencies:
- dependency-name: github.com/osrg/gobgp/v4
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant