Skip to content

chore(deps): bump the go-modules group with 9 updates - #234

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-e60a40d4be
Open

chore(deps): bump the go-modules group with 9 updates#234
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-e60a40d4be

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-modules group with 9 updates:

Package From To
github.com/Azure/azure-sdk-for-go/sdk/azidentity 1.14.1 1.15.0
github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue 1.21.11 1.21.12
github.com/posthog/posthog-go 1.34.0 1.35.0
github.com/quic-go/quic-go 0.63.0 0.64.0
github.com/rabbitmq/amqp091-go 1.14.0 1.15.0
github.com/rabbitmq/rabbitmq-stream-go-client 1.8.3 1.9.0
github.com/twmb/franz-go 1.22.1 1.22.2
google.golang.org/api 0.287.1 0.304.0
google.golang.org/grpc 1.83.2 1.84.0

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.14.1 to 1.15.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.15.0

1.15.0 (2026-10-14)

Features Added

  • ManagedIdentityCredential and DefaultAzureCredential support user-assigned managed identities on Azure Arc when the agent supports them
  • WorkloadIdentityCredential supports identity binding mode via WorkloadIdentityCredentialOptions.EnableAzureProxy

Bugs Fixed

  • ManagedIdentityCredential verifies the Service Fabric endpoint's certificate against IDENTITY_SERVER_THUMBPRINT and rejects redirects

Other Changes

  • On Service Fabric, a custom ClientOptions.Transport must be an *http.Client with a nil Transport or a standard *http.Transport without custom TLS dialing or verification callbacks. Unsupported transports now cause credential construction to fail
  • Upgraded dependencies
Commits
  • bb7200c Update azcore v1.15.0 release date (#23569)
  • d112082 [azopenaiextensions] Pushing release date to Monday (#23565)
  • 9522165 [azopenai] 2024-08-01-preview generation (#23554)
  • 42922c1 [azeventhubs,azservicebus] Applying retry fix to both eventhubs and servicebu...
  • 5df372c Use common OIDC token env vars in post scripts (#23549)
  • 1c2a108 BearerTokenPolicy handles CAE claims challenges by default (#23414)
  • 8759ee6 [azopenaiextensions] Prepping for release tomorrow (#23551)
  • a230ef2 [Search] Remove myself from CODEOWNERS (#23560)
  • a743757 Sync eng/common directory with azure-sdk-tools for PR 9106 (#23555)
  • 7c2d3a7 Use equality function check for persist oidc token step (#23559)
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue from 1.21.11 to 1.21.12

Commits

Updates github.com/posthog/posthog-go from 1.34.0 to 1.35.0

Release notes

Sourced from github.com/posthog/posthog-go's releases.

1.35.0

Unreleased

Changelog

Sourced from github.com/posthog/posthog-go's changelog.

1.35.0

Minor Changes

  • c203229: The otel SpanProcessor now adds the PostHog request context from each span's parent context.Context (set with posthog.WithRequestContext or posthog.NewRequestContextMiddleware) to the AI spans it exports: distinct ID, session ID (as $session_id) and properties. Attributes already on a span are kept. With NewRequestContextMiddleware, request metadata such as $ip and $user_agent now appears on the AI spans exported to PostHog. The otel module now depends on the core module.
Commits
  • 5b7997a chore: release v1.35.0 [version bump] [skip ci]
  • c203229 feat(otel): add per-request context to span processor (#371)
  • See full diff in compare view

Updates github.com/quic-go/quic-go from 0.63.0 to 0.64.0

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.64.0

This release improves congestion control and performance, especially on paths with packet reordering:

  • Slow-start pacing now uses twice the estimated bandwidth, allowing the sending rate to double each RTT: #5882
  • Application-data loss detection now disables packet-threshold detection after a spurious loss, avoiding repeated unnecessary retransmissions caused by packet reordering: #5905
  • Application-data loss detection now uses an adaptive time threshold that increases after spurious losses, allowing more time for reordered packets to arrive: #5925
  • The congestion controller now restores its congestion window and recovery state after a reduction caused entirely by spurious packet loss: #5923

Notable Fixes

  • Congestion recovery now respects send order across Initial, Handshake and application-data packets, fixing incorrect recovery decisions caused by comparing packet numbers from different spaces: #5920
  • Connections now fall back to 1200-byte Initial packets on EMSGSIZE when Config.InitialPacketSize is unset, allowing handshakes over paths with smaller MTUs: #5911
  • Oversized packets are now rejected before serialization, including Initial packets with excessively large address-validation tokens: #5937
  • Path MTU discovery now restarts correctly after connection migration and NAT rebinding: #5887
  • Servers now retry unanswered PATH_CHALLENGEs with exponential backoff as more packets arrive on the candidate path, preventing path validation from stalling when a challenge is acknowledged but no PATH_RESPONSE arrives: #5930
  • Servers now continue responding to PATH_CHALLENGEs on existing candidate paths when the candidate path limit is reached: #5929
  • Writes after closing a SendStream or Stream now return quic.ErrStreamClosed, which is also used as the stream context's cancellation cause: #5885
  • Conn.SendDatagram now returns the connection's close error after shutdown, instead of accepting datagrams that will be silently dropped: #5880
  • http3: SendDatagram now immediately returns an error after the stream's send side closes, including after STOP_SENDING or connection shutdown: #5884
  • http3: request header, response header and trailer buffers now grow as data arrives, avoiding large allocations based solely on a peer's advertised HEADERS frame length: #5886
  • Spurious losses are now detected when an ACK only acknowledges packets previously declared lost: #5895
  • Spurious losses are now detected when ACKs arrive out of order: #5900
  • Path migration now clears the old path's loss history, preventing stale spurious-loss reports and recovery adjustments: #5903
  • MTU and path probes no longer trigger spurious-loss reports or adaptive loss-recovery changes: #5906

Notable Changes

  • ConnectionStats now exposes CongestionWindow, reporting the local sender's congestion window on the active network path in bytes: #5901
  • http3.Stream and http3.RequestStream now expose QlogTrace, allowing applications to add events to the underlying connection's qlog trace: #5935
  • http3/qlog.RedactHeaders allows applications to redact HTTP/3 header and trailer values, including pseudo-headers, before they are written to qlog: #5932
  • qlog: locally dropped QUIC datagrams are now recorded with quic:datagram_dropped, including drops caused by a full receive buffer or an oversized outgoing datagram: #5907
  • qlog: quic:recovery_parameters_set now records initial recovery parameters and changes to loss-detection thresholds, including resets after path migration: #5926

Changelog

... (truncated)

Commits
  • 9abbbad retry server path challenges with exponential backoff (#5930)
  • 15baf53 only enforce the candidate path limit for new paths (#5929)
  • 8754e95 reject oversized packets before serialization (#5937)
  • 54cf12e http3: expose the connection's qlog trace on streams (#5935)
  • 4b404ee http3/qlog: implement redacting of header fields (#5932)
  • 432b156 README: link OSS-Fuzz badge to the introspector (#5928)
  • d4981bc qlog initial recovery parameters and loss threshold updates (#5926)
  • 99c7436 fall back to 1200 bytes initial packet size on EMSGSIZE (#5911)
  • 53a52d5 ackhandler: increase the time threshold after spurious losses (#5925)
  • 6b98bc9 restore congestion control state after spurious packet loss (#5923)
  • Additional commits viewable in compare view

Updates github.com/rabbitmq/amqp091-go from 1.14.0 to 1.15.0

Release notes

Sourced from github.com/rabbitmq/amqp091-go's releases.

v1.15.0

What's Changed

Full Changelog: rabbitmq/amqp091-go@v1.14.0...v1.15.0

Changelog

Sourced from github.com/rabbitmq/amqp091-go's changelog.

v1.15.0 (2026-09-15)

Full Changelog

Fixed bugs:

  • fix: preserve caller-provided SASL credentials across Reconnect() #389 (suchitd)
  • fix: clone SASL authentication before zeroing credentials post-handshake #388 (suchitd)

Closed issues:

  • v1.13.0 (#350) zeroes caller-provided PlainAuth.Password, breaking auth on any reconnect that reuses the Config #387

Merged pull requests:

  • chore(deps): bump github/codeql-action from 4.37.8 to 4.37.9 in the github-actions group #390 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.37.7 to 4.37.8 in the github-actions group #386 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.37.6 to 4.37.7 in the github-actions group #385 (dependabot[bot])
Commits
  • ff03b2f Release v1.15.0
  • 276f52e Merge pull request #390 from rabbitmq/dependabot/github_actions/github-action...
  • ca02321 chore(deps): bump github/codeql-action in the github-actions group
  • 4a2300f Merge pull request #389 from rabbitmq/fix/recovery-preserve-sasl
  • bf771db docs: trim cloneAuthentication doc comment
  • 54bd90e fix: preserve caller-provided SASL credentials across Reconnect()
  • 5935ca1 fix: clone SASL authentication before zeroing credentials post-handshake (#388)
  • 0e52b40 Merge pull request #386 from rabbitmq/dependabot/github_actions/github-action...
  • 01c30ed chore(deps): bump github/codeql-action in the github-actions group
  • 28da80d Merge pull request #385 from rabbitmq/dependabot/github_actions/github-action...
  • Additional commits viewable in compare view

Updates github.com/rabbitmq/rabbitmq-stream-go-client from 1.8.3 to 1.9.0

Release notes

Sourced from github.com/rabbitmq/rabbitmq-stream-go-client's releases.

v1.9.0

What's Changed

✨ Enhancements

🐛 Bug Fixes

📚 Documentation

🔄 Dependency Updates

New Contributors

Full Changelog: rabbitmq/rabbitmq-stream-go-client@v1.8.3...v1.9.0

Changelog

Sourced from github.com/rabbitmq/rabbitmq-stream-go-client's changelog.

[1.9.0]

1.9.0 - 2026-10-19

Enhancements

  • Keep early close notifications and make lifecycle shutdown race-safe by @​djgilcrease in #522
  • Remove perf_test from Pivotal Docker Hub by @​Gsantomaggio in #525
  • Use a fresh client for each bootstrap seed by @​djgilcrease in #529
  • Return RPC write errors immediately and discard abandoned responses without closing their channels by @​djgilcrease in #527
  • Add configurable BackOffConfiguration to reliable entities by @​Gsantomaggio in #538
  • Add a Dockerfile for the examples/reliable client and make its parameters (connection settings, stream names, super stream/partitions, load/concurrency) configurable via environment variables.

Bug Fixes

Documentation

Dependency Updates

  • Bump golang.org/x/text from 0.40.0 to 0.41.0 by @​dependabot[bot] in #516
  • Bump github.com/klauspost/compress from 1.19.1 to 1.20.0 by @​dependabot[bot] in #520
  • Bump go.opentelemetry.io/otel/metric from 1.44.0 to 1.46.0 by @​dependabot[bot] in #518
  • Bump go.opentelemetry.io/otel/sdk from 1.43.0 to 1.45.0 in /examples/metrics by @​dependabot[bot] in #536

New Contributors

Commits
  • 91073a2 rabbitmq-stream-go-client v1.9.0
  • 0038383 feat(ha): add configurable BackOffConfiguration to reliable entities (#538)
  • f9e2c27 fix: return StreamMetadataFailure when a leader retry fails (#531)
  • 6182ece add docker image
  • a8463d3 Infer TLS server name from the connection host (#528)
  • 117139d Bump go.opentelemetry.io/otel/sdk in /examples/metrics (#536)
  • 368cce6 add skills
  • d427362 Return RPC write errors immediately and discard abandoned responses without c...
  • 43bee59 Use a fresh client for each bootstrap seed (#529)
  • 2b66baf Add scripts to test the reliable_client.go (#533)
  • Additional commits viewable in compare view

Updates github.com/twmb/franz-go from 1.22.1 to 1.22.2

Changelog

Sourced from github.com/twmb/franz-go's changelog.

v1.22.2

This patch fixes a few rare bugs and has a few small improvements. kfake also now matches Kafka more closely for static group membership, producer epochs, and OffsetForLeaderEpoch after a leader change (thanks @​qoke).

  • In a rare case, an idempotent producer could ack a record without writing it, if a context, RecordDeliveryTimeout, or RecordRetries failed a batch the broker had already appended and the next batch had the same number of records. Failing a sent batch now bumps the producer epoch, as the Java client does. Thanks @​sklyar for the report, see #1484.

  • An eager group consumer that began rebalancing while fetching offsets could keep consuming partitions it revoked. OnOffsetsFetched and AdjustFetchOffsetsFn are now always called before OnPartitionsRevoked, and their context is canceled when revoking begins. Thanks @​michaelwilner for the report and initial fix, see #1485.

  • LeaveGroupContext(nil) now sends the leave request. Before, the member stayed in the group until its session timed out. A later Close now waits for that leave; for an immediate Close that skips the leave, pass a canceled context instead.

  • A static cooperative member that closes between revoking partitions and the rejoin that lets the group assign them now leaves the group with a warning. Before, those partitions stayed unassigned until group membership changed. Thanks @​genzgd for the report, see #1483.

  • RequestCachedMetadata now includes every returned topic's leader in Brokers, and refetches cached topics whose leader is no longer a known broker. Thanks @​koloss2001, see #1481.

  • Canceling a metadata, heartbeat, commit, or offset request no longer closes its broker connection. Before, the close failed every other request in flight on that connection.

  • ListOffsets now waits up to its TimeoutMillis for a response rather than 10s, since Kafka can hold a ListOffsets request while it reads tiered storage. A ListOffsetsRequest you issue through the client now keeps its TimeoutMillis rather than being reset to 30s. kmsg's ListOffsetsRequest now implements TimeoutRequest.

  • Deps are bumped: klauspost/compress v1.20.3, pierrec/lz4 v4.1.33, and kmsg v1.15.0.

Commits
  • 7b6cac3 Merge pull request #1498 from twmb/cl
  • 196731f changelog: note v1.22.2
  • 7d1d9a7 all: bump deps
  • 0bb2f0e Merge pull request #1490 from twmb/1483
  • fa60f76 kgo: leave the group if a static member closes owing a rejoin
  • be33d66 Merge pull request #1494 from twmb/cancel-fetch-before-revoke
  • ba5f00c kgo: cancel fetching offsets before revoking
  • 988ca90 Merge pull request #1497 from twmb/leave-group-nil-ctx
  • cf231d6 Merge pull request #1496 from twmb/kmsg-list-offsets-timeout
  • af3f27c Merge pull request #1495 from twmb/abandon-canceled-reads
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.287.1 to 0.304.0

Release notes

Sourced from google.golang.org/api's releases.

v0.304.0

0.304.0 (2026-10-14)

Features

  • all: Auto-regenerate discovery clients (#3770) (a3ea7ac)
  • all: Auto-regenerate discovery clients (#3773) (795f958)
  • Enable non-blocking mode for generation pipeline (#3772) (bd231b0)

v0.303.0

0.303.0 (2026-10-13)

Features

v0.302.0

0.302.0 (2026-10-12)

Features

v0.301.0

0.301.0 (2026-10-07)

Features

  • all: Auto-regenerate discovery clients (#3754) (ebafad3)
  • all: Auto-regenerate discovery clients (#3756) (e85ebac)
  • all: Auto-regenerate discovery clients (#3759) (267f7a8)
  • all: Auto-regenerate discovery clients (#3760) (282280c)
  • all: Auto-regenerate discovery clients (#3761) (3f7eebf)
  • option/internaloption: Add EnableDirectPathXdsOverInterconnect (#3742) (9bda4c1)

v0.300.0

0.300.0 (2026-10-01)

Features

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.304.0 (2026-10-14)

Features

  • all: Auto-regenerate discovery clients (#3770) (a3ea7ac)
  • all: Auto-regenerate discovery clients (#3773) (795f958)
  • Enable non-blocking mode for generation pipeline (#3772) (bd231b0)

0.303.0 (2026-10-13)

Features

0.302.0 (2026-10-12)

Features

0.301.0 (2026-10-07)

Features

  • all: Auto-regenerate discovery clients (#3754) (ebafad3)
  • all: Auto-regenerate discovery clients (#3756) (e85ebac)
  • all: Auto-regenerate discovery clients (#3759) (267f7a8)
  • all: Auto-regenerate discovery clients (#3760) (282280c)
  • all: Auto-regenerate discovery clients (#3761) (3f7eebf)
  • option/internaloption: Add EnableDirectPathXdsOverInterconnect (#3742) (9bda4c1)

0.300.0 (2026-10-01)

Features

0.299.0 (2026-09-21)

... (truncated)

Commits

Updates google.golang.org/grpc from 1.83.2 to 1.84.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.84.0

Behavior Changes

  • stats/otel: The grpc.lb.pick_first.* metrics have been removed and replaced with grpc.subchannel.* metrics. See gRFC A94 for more details. (#9215)

New Features

  • xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

  • client: Fix a bug where a ClientConn could get permanently stuck in IDLE when an RPC was canceled during stream creation. Previously, such cancellations triggered stream cleanup twice, corrupting the channel's idleness state and causing subsequent RPCs to fail with deadline exceeded errors. (#9191)
  • client: Fix a bug where non-gRPC HTTP responses ending with an empty DATA frame failed the RPC with status code Internal instead of preserving the HTTP-mapped status code and response body. (#9217)
  • credentials: Validate metadata returned by per-RPC credentials, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from credentials was sent to the server in outgoing HTTP/2 requests. (#9202)
  • credentials/sts: Prevent potential token leakage by disallowing HTTP redirects during STS token exchange. Previously, 3xx redirects were followed automatically, replaying the request body containing authentication tokens to the redirect destination. (#9299)
  • randomsubsetting: Ignore endpoints that contain no addresses. Previously, this could cause the policy to panic while computing hashes. (#9259)
  • stats/otel: Ensure method names are populated in trace spans when metrics are disabled. Previously, running with tracing enabled and metrics disabled resulted in server trace spans lacking the RPC method name (recording only "Recv."). (#9262)
  • transport: Return io.ErrUnexpectedEOF when EOF is encountered after partial header or message body reads. Previously, partial reads could return a plain io.EOF, failing to distinguish truncated data from a clean end of stream. (#9204)
  • transport: Validate metadata supplied by balancers (in PickResult.Metadata) and resolver addresses, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from these sources was sent to the server in outgoing HTTP/2 requests. (#9203)
  • xds: Fix a rare corner case that could prevent a cluster from being removed when it is no longer in use. (#9140)
  • xds: Fix panic during route matching for routes containing header matchers with empty exact_match strings. (#9223)
  • xds: Reject routes containing header matchers with empty prefix_match or suffix_match strings. Previously, this caused a panic during route matching. (#9223)
  • xds: Fix EDS drop policies being applied at a much lower rate than configured due to an integer overflow. (#9257)
  • xds: Reject EDS resources containing drop policies with unsupported denominators. Previously, such resources caused the client to panic when calculating drop ra...

    Description has been truncated

@dependabot
chore(deps): bump the go-modules group with 9 updates
74afb8e 
Bumps the go-modules group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.14.1` | `1.15.0` |
| [github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue](https://github.com/aws/aws-sdk-go-v2) | `1.21.11` | `1.21.12` |
| [github.com/posthog/posthog-go](https://github.com/posthog/posthog-go) | `1.34.0` | `1.35.0` |
| [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) | `0.63.0` | `0.64.0` |
| [github.com/rabbitmq/amqp091-go](https://github.com/rabbitmq/amqp091-go) | `1.14.0` | `1.15.0` |
| [github.com/rabbitmq/rabbitmq-stream-go-client](https://github.com/rabbitmq/rabbitmq-stream-go-client) | `1.8.3` | `1.9.0` |
| [github.com/twmb/franz-go](https://github.com/twmb/franz-go) | `1.22.1` | `1.22.2` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.287.1` | `0.304.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.2` | `1.84.0` |


Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.14.1 to 1.15.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azidentity/v1.14.1...sdk/azcore/v1.15.0)

Updates `github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue` from 1.21.11 to 1.21.12
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/rum/v1.21.11...service/rum/v1.21.12)

Updates `github.com/posthog/posthog-go` from 1.34.0 to 1.35.0
- [Release notes](https://github.com/posthog/posthog-go/releases)
- [Changelog](https://github.com/PostHog/posthog-go/blob/main/CHANGELOG.md)
- [Commits](PostHog/posthog-go@v1.34.0...v1.35.0)

Updates `github.com/quic-go/quic-go` from 0.63.0 to 0.64.0
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](quic-go/quic-go@v0.63.0...v0.64.0)

Updates `github.com/rabbitmq/amqp091-go` from 1.14.0 to 1.15.0
- [Release notes](https://github.com/rabbitmq/amqp091-go/releases)
- [Changelog](https://github.com/rabbitmq/amqp091-go/blob/main/CHANGELOG.md)
- [Commits](rabbitmq/amqp091-go@v1.14.0...v1.15.0)

Updates `github.com/rabbitmq/rabbitmq-stream-go-client` from 1.8.3 to 1.9.0
- [Release notes](https://github.com/rabbitmq/rabbitmq-stream-go-client/releases)
- [Changelog](https://github.com/rabbitmq/rabbitmq-stream-go-client/blob/main/CHANGELOG.md)
- [Commits](rabbitmq/rabbitmq-stream-go-client@v1.8.3...v1.9.0)

Updates `github.com/twmb/franz-go` from 1.22.1 to 1.22.2
- [Changelog](https://github.com/twmb/franz-go/blob/master/CHANGELOG.md)
- [Commits](twmb/franz-go@v1.22.1...v1.22.2)

Updates `google.golang.org/api` from 0.287.1 to 0.304.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.287.1...v0.304.0)

Updates `google.golang.org/grpc` from 1.83.2 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.2...v1.84.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue
  dependency-version: 1.21.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/posthog/posthog-go
  dependency-version: 1.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/rabbitmq/amqp091-go
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/rabbitmq/rabbitmq-stream-go-client
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/twmb/franz-go
  dependency-version: 1.22.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/api
  dependency-version: 0.304.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants