Skip to content

fix(deps): update all non-major go dependencies - #312

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/all-non-major-go-dependencies
Sep 23, 2026
Merged

fix(deps): update all non-major go dependencies#312
renovate[bot] merged 1 commit into
mainfrom
renovate/all-non-major-go-dependencies

Conversation

@renovate

@renovate renovate Bot commented Sep 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/aws/aws-sdk-go-v2/service/s3 v1.113.1 → v1.113.2 age confidence require patch
github.com/cloudnative-pg/cloudnative-pg v1.30.0 → v1.30.1 age confidence require patch
github.com/cloudnative-pg/cloudnative-pg/tests 1a97720 → c60ac25 age confidence require digest

Release Notes

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2/service/s3)

v1.113.2

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/aiops: v1.15.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/amplifybackend: v1.41.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/amplifyuibuilder: v1.37.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/apigateway: v1.48.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/apigatewaymanagementapi: v1.38.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/apigatewayv2: v1.43.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/appfabric: v1.25.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/appintegrations: v1.48.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/applicationcostprofiler: v1.36.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/applicationsignals: v1.31.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/arczonalshift: v1.31.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/artifact: v1.26.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/backup: v1.66.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/bedrockagentcore: v1.50.0
    • Feature: Amazon Bedrock AgentCore Harness now supports lifecycle hooks for invocations and tool calls, with Lambda, SNS, and EventBridge targets. This release also adds apiBase for custom OpenAI-compatible endpoints.
  • github.com/aws/aws-sdk-go-v2/service/bedrockagentcorecontrol: v1.69.0
    • Feature: Amazon Bedrock AgentCore Harness now supports lifecycle hooks for invocations and tool calls, with Lambda, SNS, and EventBridge targets. This release also adds apiBase for custom OpenAI-compatible endpoints
  • github.com/aws/aws-sdk-go-v2/service/billingconductor: v1.40.0
    • Feature: Launching Auto Billing Transfer Billing Group Creation Preference feature
  • github.com/aws/aws-sdk-go-v2/service/costoptimizationhub: v1.32.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/databasemigrationservice: v1.72.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/datapipeline: v1.39.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/devicefarm: v1.49.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/directconnect: v1.52.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/docdb: v1.57.0
    • Feature: Add support for CopyTagsToSnapshot field in CreateDbCluster, ModifyDbCluster, RestoreDbClusterFromSnapshot and RestoreDbClusterToPointInTime for DocumentDB.
  • github.com/aws/aws-sdk-go-v2/service/dynamodbstreams: v1.42.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/ec2instanceconnect: v1.41.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/eks: v1.100.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/evs: v1.21.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/freetier: v1.22.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/glue: v1.161.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/guardduty: v1.94.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/health: v1.46.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/healthlake: v1.50.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/identitystore: v1.45.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/invoicing: v1.20.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/iotthingsgraph: v1.39.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/keyspaces: v1.34.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/keyspacesstreams: v1.16.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/lambda: v1.109.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/lambdacore: v1.8.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/lambdamicrovms: v1.8.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/lookoutequipment: v1.45.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/marketplaceagreement: v1.27.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/mturk: v1.39.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/mwaaserverless: v1.10.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/networkfirewall: v1.73.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/odb: v1.23.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/opensearch: v1.81.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/partnercentralaccount: v1.14.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/partnercentralbenefits: v1.9.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/pinpointemail: v1.38.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/quicksight: v1.131.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/s3: v1.113.2
    • Bug Fix: Expand S3 operations that check for an error inside an HTTP 200 response (wave 4/4)
  • github.com/aws/aws-sdk-go-v2/service/sagemaker: v1.279.0
    • Feature: Add support for r6i, m8i, c8i, r8i instance types in Training and Processing
  • github.com/aws/aws-sdk-go-v2/service/sagemakeredge: v1.40.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/sagemakerfeaturestoreruntime: v1.45.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/sagemakermetrics: v1.27.0
    • Feature: Enable schema-based (de)serialization for this service.
  • github.com/aws/aws-sdk-go-v2/service/sesv2: v1.75.0
    • Feature: Enable schema-based (de)serialization for this service.
cloudnative-pg/cloudnative-pg (github.com/cloudnative-pg/cloudnative-pg)

v1.30.1

Compare Source

Release date: Sep 23, 2026

Enhancements

  • Added restoreAdditionalCommandArgs to .barmanObjectStore.data for in-tree Barman Cloud recoveries, so custom flags are forwarded to barman-cloud-restore during recovery. (#​11278)

  • Plugin authors no longer need to re-derive whether an empty WAL archive should be treated as an error: the operator now computes the check_empty_wal_archive decision once and passes it to CNPG-I plugins on both WAL archiving and restore hooks. (#​11216)

  • Allowed setting the ssl_ecdh_curve PostgreSQL parameter in .spec.postgresql.parameters. It was previously rejected by the validating webhook even though the operator does not manage it. Contributed by @​Jamstah. (#​11308)

  • Added support for setting auth_user in spec.pgbouncer.parameters to override the user PgBouncer uses for its auth_query connection, instead of always deriving it from the authQuerySecret. Useful with a custom authQuerySecret where the role to authenticate as differs from the one implied by the Secret. Contributed by @​jonasbadstuebner. (#​10899)

  • Fixed PgBouncer metrics silently reporting zero when PgBouncer adds or reorders columns: SHOW STATS and SHOW POOLS results are now matched by column name instead of by position. Contributed by @​AdzerKI (SHOW STATS). (#​11366, #​11464)

  • cnpg plugin:

    • Added a --dry-run option to the backup command that prints the Backup resource that would be created, without creating it. (#​11233)
Security and Supply Chain

  • Fixed a webhook validation bypass where an absolute extension path with an embedded .. traversal (e.g. /a/../../../../etc) was accepted because only the raw path was checked; such paths still escaped the extension's mount point once resolved at runtime. Affected entries are now resolved and rejected/skipped consistently across admission, the major-upgrade job, and already-persisted Cluster specs. Contributed by @​Anand-240. (#​11210)

  • Updated google.golang.org/grpc to v1.83.1, fixing CVE-2026-84304 / GHSA-vp52-pcj8-j9qc (gRPC-Go heap memory exhaustion via HTTP/2 DATA frame fragmentation). (#​11394)

Changes

  • Updated the default PostgreSQL operand image to 18.6-system-trixie. (#​11257)

  • Moved the operator's own base image from Debian 12 (bookworm) to Debian 13 (trixie), now that Debian 12 has moved to LTS-only maintenance. (#​11193)

Fixes

  • Demoted an unreachable old primary immediately during failover, instead of waiting on checkpoint and fast-shutdown attempts that could never complete. Previously, an old primary whose PostgreSQL had become unresponsive was never shut down, so it could never rejoin the cluster as a replica of the new primary. The shutdown is now requested without blocking the reconciler, though demotion can still take up to a minute or more if PostgreSQL keeps ignoring shutdown signals. (#​11347)

  • Fixed failover and Pod recreation getting stuck while any instance in the cluster was fenced. A fenced instance kept reporting itself as healthy on its status endpoint even though its Pod was permanently not Ready, which blocked the readiness guard, the primary-election logic, and the Pod-reattachment gate from reacting to an unrelated failure elsewhere in the cluster, leaving it stalled until someone manually removed the fencing. All three now recognize and skip fenced instances. (#​11274)

  • Fixed a failover that could stall forever or get silently reverted. While a failover was pending, the reconciler could skip checking whether it was ready to complete, or mistake the pending state for a missing Pod and reset the target primary back to the unhealthy one. It now keeps progressing a pending failover and completes it once the WAL receivers are down, rechecking quorum safety right before promoting in case it changed while waiting. (#​11336)

  • Fixed the designated-primary sort in PostgresqlStatusList so a tie on LSN no longer sorts it out of order. If the designated primary's Pod later disappeared from the status list, this could have led the operator to promote the wrong standby. (#​11494)

  • Gated PostgreSQL startup on the instance manager actually holding the primary Lease, closing a window where a restarting or rescheduled primary could start accepting writes before acquiring the lease. Lease acquisition now happens during instance initialization, strictly before PostgreSQL is allowed to start, instead of only later in the reconciliation loop once the instance was already reported ready. (#​11356)

  • Bounded the primary lease take-over Get call to the lease's RenewDeadline, so a call against an unreachable API server now fails fast and retries instead of blocking indefinitely. Left unbounded, the same stalled call could also delay a primary's own lease renewal after a transient API server blip, risking an unwanted takeover by another instance once the lease appeared to expire. (#​11350)

  • Stopped abandoning a fast shutdown after 60 seconds. The request carried no explicit timeout, so pg_ctl fell back to its own implicit 60-second limit, and the instance manager, being PID 1 in the container, took PostgreSQL down mid-shutdown regardless of a larger configured stopDelay. The fast phase now waits for the full stopDelay instead. (#​11263)

  • Waited for certificate status before refreshing secrets during bootstrap. (#​11450)

  • Fixed in-tree Barman Cloud recovery ignoring wal.maxParallel and wal.restoreAdditionalCommandArgs, fetching WAL one segment at a time instead of using the configured parallelism. (#​11105)

  • Honored the unrecoverable annotation on pending and terminating instances. (#​11241)

  • Honored Backup.spec.online when finalizing VolumeSnapshot-based backups, so a cold backup is no longer reported as online in status. (#​11276)

  • Set --no-data-checksums explicitly when .spec.postgresql.dataChecksums is false on PostgreSQL 18+, which now enables checksums by default in initdb. Contributed by @​evan314159. (#​11488)

  • Stopped discarding .spec.inheritedMetadata labels on PVC reconciliation; they were applied before, and then overwritten by, the operator's own labels. Contributed by @​GellertBabel. (#​11499)

  • Stopped Pooler and DatabaseRole from recreating their owned resources after being marked for deletion, which could block an external finalizer (e.g. ArgoCD foreground deletion) waiting for those resources to disappear. Contributed by @​mjlshen. (#​11359)

  • Handled a NULL stats_reset value in the pg_stat_wal metric, which could occasionally break Prometheus scraping on PostgreSQL 18 clusters. Contributed by @​HoniSanders. (#​11207)

  • Recovered log streaming when a stale non-FIFO file blocked the log pipe. (#​11246)

  • Stopped sampling logs of the Pods' processes, so no log lines are silently dropped. (#​11131)

  • Stopped caching Helm release Secrets in the operator, which could spike memory usage and crashloop the operator on clusters with large Helm releases installed alongside it. (#​11211)

  • Re-ran owned-resource finalizer cleanup after an operator restart, so a namespace deleted while the operator was down doesn't hang in Terminating forever. (#​11215)

  • Fixed rejoining replicas taking a long time to complete pg_rewind when WAL prefetching (wal.maxParallel > 1) was enabled. (#​11204)

  • Treated a PostgreSQL instance rejecting connections as started up in probes. (#​11152)

  • Stopped issuing a redundant PATCH on every reconciliation when a cluster's pvcTemplate set volumeAttributesClass. Contributed by @​andrew-farries. (#​11196)

  • Stopped halting replication slot reconciliation at the first failing slot. (#​11119)

  • During rollouts, compared the running configuration hash, rather than the on-disk one, avoiding unnecessary switchovers. (#​11130)

  • Retried VolumeSnapshot errors until the deadline, instead of giving up early. (#​11132)

  • Symlinked pg_wal to the WAL volume during plugin-based recovery, instead of replaying WAL onto the data volume, which could exhaust it on a large point-in-time recovery. (#​11127)

  • Corrected grammar in PhaseUpgradeDelayed status messages. Contributed by @​Utkarsh-sharma47. (#​11065)

  • CloudNativePG Interface (CNPG-I):

    • Reported the Postgres capabilities of a plugin correctly. (#​11447)
    • Prevented the plugin status field from flapping on Cluster reconciliation. Contributed by @​sharifmshaker. (#​11386)
    • Replaced a finalizer with in-memory cleanup on Service deletion. This avoids namespaces hanging in Terminating state when the operator and its plugins run in the same namespace. Contributed by @​maxlengdell. (#​10940)

  • cnpg plugin:

    • Used UTC time zone for the default backup name. (#​11329)
    • Deleted PVCs before Pods in cnpg destroy, avoiding a race that could leave dangling PVCs needing a second invocation to clean up. Contributed by @​daanvinken. (#​10847)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested review from a team and jlong49 as code owners September 22, 2026 10:15
@renovate

renovate Bot commented Sep 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: core/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 4 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.26.4 -> 1.26.6
github.com/cloudnative-pg/barman-cloud v0.5.1 -> v0.6.0
github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.3 -> v2.3.4
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.92.0 -> v0.94.0
github.com/prometheus/client_model v0.6.2 -> v0.6.3
File name: operator/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 3 additional dependencies were updated

Details:

Package Change
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.93.1 -> v0.94.0
golang.org/x/sys v0.47.0 -> v0.48.0
golang.org/x/term v0.45.0 -> v0.46.0

@renovate
renovate Bot force-pushed the renovate/all-non-major-go-dependencies branch 10 times, most recently from 7f350ed to b23736c Compare September 23, 2026 14:57
@renovate
fix(deps): update all non-major go dependencies
2b0fb04 
| datasource | package                                        | from                               | to                                 |
| ---------- | ---------------------------------------------- | ---------------------------------- | ---------------------------------- |
| go         | github.com/aws/aws-sdk-go-v2/service/s3        | v1.113.1                           | v1.113.2                           |
| go         | github.com/cloudnative-pg/cloudnative-pg       | v1.30.0                            | v1.30.1                            |
| go         | github.com/cloudnative-pg/cloudnative-pg/tests | v0.0.0-20260919093839-1a9772003fa6 | v0.0.0-20260923135128-c60ac252f566 |


Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
renovate Bot force-pushed the renovate/all-non-major-go-dependencies branch from b23736c to 2b0fb04 Compare September 23, 2026 14:58
@renovate
renovate Bot merged commit c1a1a7f into main Sep 23, 2026
16 checks passed
@renovate
renovate Bot deleted the renovate/all-non-major-go-dependencies branch September 23, 2026 15:45
@cnpg-bot cnpg-bot mentioned this pull request Sep 23, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jlong49 jlong49 Awaiting requested review from jlong49 jlong49 is a code owner

Assignees

No one assigned

Labels

automated no-issue

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants