Skip to content

fix(deps): bump the external group across 1 directory with 6 updates - #4009

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/sdk/external-137f241817
Open

fix(deps): bump the external group across 1 directory with 6 updates#4009
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/sdk/external-137f241817

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the external group with 5 updates in the /sdk directory:

Package From To
github.com/stretchr/testify 1.11.1 1.12.1
golang.org/x/oauth2 0.36.0 0.37.0
golang.org/x/text 0.38.0 0.41.0
google.golang.org/grpc 1.83.1 1.83.2
google.golang.org/protobuf 1.36.11 1.36.12

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • 959dbda Merge pull request #1935 from harryzcy/yaml-update
  • 9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.36.0 to 0.37.0

Commits
  • c624b89 google: change the snake case endpoint to kebab-case
  • 09a82f6 all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Updates golang.org/x/text from 0.38.0 to 0.41.0

Commits
  • acdba66 go.mod: update golang.org/x dependencies
  • 02aa981 secure/precis: fix short destination buffer handling in Nickname profile
  • 724af9c go.mod: update golang.org/x dependencies
  • bf5b9d6 internal/export/idna: always treat Punycode encoding pure ASCII as an error
  • b326f3d go.mod: update golang.org/x dependencies
  • 5ae8e57 unicode/norm: avoid infinite loop on invalid input
  • 0dc94a2 all: fix some comments
  • See full diff in compare view

Updates golang.org/x/tools from 0.45.0 to 0.48.0

Commits
  • 05f9cb5 go.mod: update golang.org/x dependencies
  • 745d7ae gopls: add CompiledAsmFiles in cache.Package
  • 797ee67 go/ssa: make Const(unsafe.Pointer, nil).IsNil() true
  • 9751125 gopls/internal/test: Completion benchmarks use empty range
  • 8786a96 internal/stdlib: update stdlib index for Go 1.27 Release Candidate 2
  • 425085f gopls/internal/server: modify return of parseAction
  • 30c4f87 go/analysis/passes/nilness: skip magic cgo functions
  • 9e6441d gopls/internal/protocol/generate: remove manual rename overwritten
  • df96841 gopls/internal/protocol: use Debug log level
  • 278f062 gopls/internal/protocol: update to LSP 3.18
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.83.1 to 1.83.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)
Commits

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 8, 2026
@dependabot
dependabot Bot requested review from a team as code owners September 8, 2026 17:53
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 8, 2026
@github-actions github-actions Bot added comp:sdk A software development kit, including library, for client applications and inter-service communicati size/s labels Sep 8, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/sdk/external-137f241817 branch from 72a9944 to 0e6131e Compare September 8, 2026 18:09
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/sdk/external-137f241817 branch from 0e6131e to 2c0295e Compare September 9, 2026 17:53
Bumps the external group with 5 updates in the /sdk directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.36.0` | `0.37.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.38.0` | `0.41.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.1` | `1.83.2` |
| google.golang.org/protobuf | `1.36.11` | `1.36.12` |



Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

Updates `golang.org/x/oauth2` from 0.36.0 to 0.37.0
- [Commits](golang/oauth2@v0.36.0...v0.37.0)

Updates `golang.org/x/text` from 0.38.0 to 0.41.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.38.0...v0.41.0)

Updates `golang.org/x/tools` from 0.45.0 to 0.48.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.45.0...v0.48.0)

Updates `google.golang.org/grpc` from 1.83.1 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.1...v1.83.2)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: golang.org/x/text
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: golang.org/x/tools
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/sdk/external-137f241817 branch from 2c0295e to 5ca8ead Compare September 10, 2026 17:53
@coderabbitai

coderabbitai Bot commented Sep 10, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: bf971212-d095-4d3b-98ed-a0c2f59c7205

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown
Contributor

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

See the workflow run for details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

comp:sdk A software development kit, including library, for client applications and inter-service communicati dependencies Pull requests that update a dependency file go Pull requests that update Go code size/s

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants