build(deps): Bump the go-dependencies group with 10 updates by dependabot[bot] · Pull Request #586 · ceems-dev/ceems

dependabot · 2026-08-24T04:35:44Z

Bumps the go-dependencies group with 10 updates:

Package	From	To
github.com/go-chi/chi/v5	`5.3.1`	`5.3.2`
github.com/mattn/go-sqlite3	`1.14.49`	`1.14.50`
github.com/prometheus/prometheus	`0.313.2`	`0.314.0`
github.com/stretchr/testify	`1.11.1`	`1.12.1`
google.golang.org/grpc	`1.83.0`	`1.83.1`
k8s.io/api	`0.36.3`	`0.36.4`
k8s.io/apimachinery	`0.36.3`	`0.36.4`
k8s.io/client-go	`0.36.3`	`0.36.4`
k8s.io/kubelet	`0.36.3`	`0.36.4`
k8s.io/streaming	`0.36.3`	`0.36.4`

Updates github.com/go-chi/chi/v5 from 5.3.1 to 5.3.2

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.3.2

What's Changed

feat(middleware): add text/markdown, text/csv, text/vtt to default compressible types by @VojtechVitek in go-chi/chi#1151

docs: deployment recipe for middleware.ClientIPFromXFFTrustedProxies() by @VojtechVitek in go-chi/chi#1111

fix: don't drop handlers that collide with a Mount()/Route() pattern by @VojtechVitek in go-chi/chi#1148

Don't duplicate methods in Allow: header for 405 responses by @flimzy in go-chi/chi#1029

fix(middleware): reject catch-all compress wildcards by @VojtechVitek in go-chi/chi#1156

middleware.NewCompressor(level, "/*") never worked and silently compressed nothing. Instead of turning it into a compress-everything catch-all (as proposed in go-chi/chi#868 and go-chi/chi#1121), we decided to reject both "/" and "/*" at construction and panic. Compressing every response wastes CPU on already-compressed types (zip, jpeg, png), which is why the middleware keeps a curated default list. Users should pass explicit content types.

Full Changelog: go-chi/chi@v5.3.1...v5.3.2

Commits

3893906 fix(middleware): reject catch-all compress wildcards "/" and "/*" (#1156)
9b6ddcd Don't duplicate methods in Allow: header for 405 responses (#1029)
29164f0 fix: don't drop handlers that collide with a Mount()/Route() pattern (#1148)
bc02284 docs: deployment recipe + verify checklist for ClientIPFromXFFTrustedProxies ...
60ecea5 feat(middleware): add text/markdown, text/csv, text/vtt to default compressib...
See full diff in compare view

Updates github.com/mattn/go-sqlite3 from 1.14.49 to 1.14.50

Release notes

Sourced from github.com/mattn/go-sqlite3's releases.

1.14.50

What's Changed

Handle NULL and BLOB values in json example Scan by @mattn in mattn/go-sqlite3#1441

Add workflow to create releases on tag push by @mattn in mattn/go-sqlite3#1443

fix: keep vtab handle registered when xDestroy fails by @canesin in mattn/go-sqlite3#1446

New Contributors

@canesin made their first contribution in mattn/go-sqlite3#1446

Full Changelog: mattn/go-sqlite3@v1.14.49...v1.14.50

Commits

58c8e14 Merge pull request #1446 from 0xCarbon/fix/vtable-destroy-handle
e27b5e9 fix: keep vtab handle registered when xDestroy fails
f9fc7aa Merge pull request #1443 from mattn/add-release-workflow
a93a209 Fail closed on release lookup errors and serialize runs per tag
485f31f Add workflow to create releases on tag push
9415230 Merge pull request #1441 from mattn/fix-json-example-scan
88a4797 Handle NULL and BLOB values in json example Scan
See full diff in compare view

Updates github.com/prometheus/prometheus from 0.313.2 to 0.314.0

Commits

d7598b7 prepare 3.14.0 (#19442)
549fd68 chore: prepare 3.14.0-rc.0 (#19322)
bf5a981 Merge pull request #19300 from prometheus/krajo/merge-release-to-main
1427c3a Merge pull request #19294 from abhinandan-thakur/docs-6784-adding-docs-for-mi...
8c4a80b Merge remote-tracking branch 'origin/release-3.13' into krajo/merge-release-t...
631483e Update storage/interface.go
383cf07 storage: document mint and maxt parameters
40ea54d Merge pull request #18778 from Vaivaswat2244/ipv6
e353420 fix(nhcb): reuse hBuffer when hashing label sets (#19282)
76f12ae Merge pull request #19271 from ZayanKhan-12/fix-release-dependabot-link
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in stretchr/testify#1935

change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

@harryzcy made their first contribution in stretchr/testify#1935

@boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in stretchr/testify#1935

change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

@harryzcy made their first contribution in stretchr/testify#1935

@boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

assert: make *AssertionFunc types just aliases by @dolmen in stretchr/testify#1563

Fixes

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in stretchr/testify#1775

mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in stretchr/testify#1786

suite: validate method signatures and continue execution for valid tests by @vyas-git in stretchr/testify#1665

assert.PanicsWithError: report error message by @olivergondza in stretchr/testify#1400

assert: IsIncreasing et al can return false w/out failing by @brackendawson in stretchr/testify#1787

add type to error message of assert.Same by @egawata in stretchr/testify#1792

mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in stretchr/testify#1795

assert: truncate very long objects in test failure messages by @brackendawson in stretchr/testify#1646

assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in stretchr/testify#1888

suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in stretchr/testify#1877

Documentation, Build & CI

CI: test also with Go 1.23 by @dolmen in stretchr/testify#1783

Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in stretchr/testify#1708

Promote ccoVeille to maintainer by @brackendawson in stretchr/testify#1784

build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in stretchr/testify#1790

assert.YAMLEq: Document mutlidoc behavior by @brackendawson in stretchr/testify#1791

_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in stretchr/testify#1782

doc: remove ineffective inline code blocks by @brackendawson in stretchr/testify#1714

Tag generated assertions as non-generated in new .gitattributes by @ubunatic in stretchr/testify#1815

... (truncated)

Commits

959dbda Merge pull request #1935 from harryzcy/yaml-update
9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
001eb79 Merge pull request #1905 from Kentzo/patch-1
ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
f8c01f3 mock: Mock.Return does not exist anymore
12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
a11649e assert: make *AssertionFunc type just aliases
dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
098f8d7 _codegen: use strings.Builder
Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.83.0 to 1.83.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.1

Security

xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)

Special Thanks: @nvxbug

xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)

Special Thanks: @nvxbug

xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)

Special Thanks: @alimony

xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)

Special Thanks: @alimony

xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Special Thanks: @alimony

Performance

transport: Restrict memory overhead of buffering small data frames. (#9331)

Commits

1550d9e Change version to 1.83.1 (#9336)
ebba6f3 Cherry-pick #9258 and #9332 into v1.83.x (#9335)
8cfeca0 Cherry-pick #9331 to v1.83.x (#9333)
dec6951 Change version to 1.83.1-dev (#9229)
See full diff in compare view

Updates k8s.io/api from 0.36.3 to 0.36.4

Commits

9a6751a Update dependencies to v0.36.4 tag
82d8177 Merge pull request #141226 from liggitt/golang-deps-1-36
a3de3f4 Update golang.org/x deps
See full diff in compare view

Updates k8s.io/apimachinery from 0.36.3 to 0.36.4

Commits

612c0ec Update dependencies to v0.36.4 tag
5af8c14 Merge pull request #141226 from liggitt/golang-deps-1-36
42e032e Update golang.org/x deps
See full diff in compare view

Updates k8s.io/client-go from 0.36.3 to 0.36.4

Commits

4e24acf Update dependencies to v0.36.4 tag
a92355f Merge pull request #141226 from liggitt/golang-deps-1-36
e8e8834 Update golang.org/x deps
736cbae Merge pull request #141001 from alancaldelas/automated-cherry-pick-of-#140966...
f4108cd client-go: restore FakeCustomStore conformance to cache.Store
See full diff in compare view

Updates k8s.io/kubelet from 0.36.3 to 0.36.4

Commits

9b6777e Update dependencies to v0.36.4 tag
6d53eca Merge pull request #141226 from liggitt/golang-deps-1-36
73ef4f5 Update golang.org/x deps
See full diff in compare view

Updates k8s.io/streaming from 0.36.3 to 0.36.4

Commits

25f24fa Merge pull request #141226 from liggitt/golang-deps-1-36
d7b83ea Update golang.org/x deps
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-dependencies group with 10 updates: | Package | From | To | | --- | --- | --- | | [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.3.1` | `5.3.2` | | [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.49` | `1.14.50` | | [github.com/prometheus/prometheus](https://github.com/prometheus/prometheus) | `0.313.2` | `0.314.0` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.0` | `1.83.1` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.36.3` | `0.36.4` | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.36.3` | `0.36.4` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.3` | `0.36.4` | | [k8s.io/kubelet](https://github.com/kubernetes/kubelet) | `0.36.3` | `0.36.4` | | [k8s.io/streaming](https://github.com/kubernetes/streaming) | `0.36.3` | `0.36.4` | Updates `github.com/go-chi/chi/v5` from 5.3.1 to 5.3.2 - [Release notes](https://github.com/go-chi/chi/releases) - [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md) - [Commits](go-chi/chi@v5.3.1...v5.3.2) Updates `github.com/mattn/go-sqlite3` from 1.14.49 to 1.14.50 - [Release notes](https://github.com/mattn/go-sqlite3/releases) - [Commits](mattn/go-sqlite3@v1.14.49...v1.14.50) Updates `github.com/prometheus/prometheus` from 0.313.2 to 0.314.0 - [Release notes](https://github.com/prometheus/prometheus/releases) - [Changelog](https://github.com/prometheus/prometheus/blob/main/CHANGELOG.md) - [Commits](prometheus/prometheus@v0.313.2...v0.314.0) Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.11.1...v1.12.1) Updates `google.golang.org/grpc` from 1.83.0 to 1.83.1 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.83.0...v1.83.1) Updates `k8s.io/api` from 0.36.3 to 0.36.4 - [Commits](kubernetes/api@v0.36.3...v0.36.4) Updates `k8s.io/apimachinery` from 0.36.3 to 0.36.4 - [Commits](kubernetes/apimachinery@v0.36.3...v0.36.4) Updates `k8s.io/client-go` from 0.36.3 to 0.36.4 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.36.3...v0.36.4) Updates `k8s.io/kubelet` from 0.36.3 to 0.36.4 - [Commits](kubernetes/kubelet@v0.36.3...v0.36.4) Updates `k8s.io/streaming` from 0.36.3 to 0.36.4 - [Commits](kubernetes/streaming@v0.36.3...v0.36.4) --- updated-dependencies: - dependency-name: github.com/go-chi/chi/v5 dependency-version: 5.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/mattn/go-sqlite3 dependency-version: 1.14.50 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/prometheus/prometheus dependency-version: 0.314.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/stretchr/testify dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: google.golang.org/grpc dependency-version: 1.83.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: k8s.io/api dependency-version: 0.36.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: k8s.io/apimachinery dependency-version: 0.36.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: k8s.io/client-go dependency-version: 0.36.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: k8s.io/kubelet dependency-version: 0.36.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: k8s.io/streaming dependency-version: 0.36.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 24, 2026

mahendrapaipuri merged commit c5c0b24 into main Aug 24, 2026
15 of 16 checks passed

mahendrapaipuri deleted the dependabot/go_modules/go-dependencies-66bd731d4e branch August 24, 2026 05:24

Navigation Menu

Uh oh!

build(deps): Bump the go-dependencies group with 10 updates - #586

build(deps): Bump the go-dependencies group with 10 updates#586
mahendrapaipuri merged 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-66bd731d4e

dependabot Bot commented on behalf of github Aug 24, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 24, 2026

v5.3.2

What's Changed

1.14.50

What's Changed

New Contributors

v1.12.1

What's Changed

New Contributors

What's Changed

New Contributors

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

Release 1.83.1

Security

Performance

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant