chore(deps): update go dependencies by renovate-sh-app[bot] · Pull Request #648 · grafana/plugin-validator

renovate-sh-app · 2026-07-21T11:03:12Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
cloud.google.com/go/auth	indirect	minor	`v0.19.0` → `v0.22.0`
deps.dev/api/v3	indirect	patch	`v3.0.0-20260422013440-90c27f84dd6f` → `v3.0.0-20260708003622-ba1304923509`
deps.dev/api/v3alpha	indirect	digest	`90c27f8` → `ba13049`
deps.dev/util/maven	indirect	digest	`b92437d` → `ba13049`
deps.dev/util/pypi	indirect	digest	`90c27f8` → `ba13049`
deps.dev/util/resolve	indirect	digest	`90c27f8` → `ba13049`
deps.dev/util/semver	indirect	digest	`cf1e78d` → `ba13049`
github.com/Masterminds/semver/v3	require	minor	`v3.4.0` → `v3.5.0`
github.com/ProtonMail/go-crypto	indirect	minor	`v1.3.0` → `v1.4.1`
github.com/anchore/go-lzo	indirect	patch	`v0.1.0` → `v0.1.1`
github.com/anchore/go-struct-converter	indirect	minor	`v0.1.0` → `v0.2.1`
github.com/anthropics/anthropic-sdk-go	require	minor	`v1.26.0` → `v1.58.0`	`v1.60.0` (+2)
github.com/bazelbuild/buildtools	indirect	digest	`05d2ebe` → `04cf7de`
github.com/bmatcuk/doublestar/v4	require	minor	`v4.9.2` → `v4.10.0`
github.com/cloudflare/circl	indirect	patch	`v1.6.3` → `v1.6.4`
github.com/compose-spec/compose-go/v2	indirect	minor	`v2.10.2` → `v2.13.0`
github.com/containerd/typeurl/v2	indirect	minor	`v2.2.3` → `v2.3.0`
github.com/cyphar/filepath-securejoin	indirect	minor	`v0.6.1` → `v0.7.0`
github.com/diskfs/go-diskfs	indirect	minor	`v1.7.0` → `v1.9.4`
github.com/docker/cli	indirect	minor	`v29.4.3+incompatible` → `v29.6.2+incompatible`
github.com/docker/docker-credential-helpers	indirect	patch	`v0.9.5` → `v0.9.8`
github.com/elliotwutingfeng/asciiset	indirect	digest	`cfde208` → `af198af`
github.com/fatih/color	require	minor	`v1.18.0` → `v1.19.0`
github.com/felixge/httpsnoop	indirect	minor	`v1.0.4` → `v1.1.0`
github.com/go-logr/logr	indirect	patch	`v1.4.3` → `v1.4.4`
github.com/google/go-containerregistry	indirect	minor	`v0.20.7` → `v0.21.7`
github.com/google/osv-scalibr	indirect	digest	`164402d` → `83751b0`
github.com/googleapis/enterprise-certificate-proxy	indirect	patch	`v0.3.14` → `v0.3.19`
github.com/googleapis/gax-go/v2	indirect	minor	`v2.21.0` → `v2.23.0`
github.com/gopherjs/gopherjs	indirect	minor	`v1.17.2` → `v1.21.0`
github.com/hashicorp/go-version	require	minor	`v1.8.0` → `v1.9.0`
github.com/jedib0t/go-pretty/v6	indirect	minor	`v6.7.10` → `v6.8.3`
github.com/kevinburke/ssh_config	indirect	minor	`v1.2.0` → `v1.6.0`
github.com/klauspost/compress	indirect	minor	`v1.18.6` → `v1.19.1`
github.com/klauspost/cpuid/v2	indirect	minor	`v2.3.0` → `v2.4.0`
github.com/magefile/mage	require	minor	`v1.15.0` → `v1.17.2`
github.com/mattn/go-colorable	indirect	patch	`v0.1.14` → `v0.1.15`
github.com/mattn/go-isatty	indirect	patch	`v0.0.22` → `v0.0.23`	`v0.0.24`
github.com/mattn/go-runewidth	indirect	patch	`v0.0.23` → `v0.0.24`
github.com/mattn/go-shellwords	require	patch	`v1.0.13` → `v1.0.14`
github.com/moby/buildkit	indirect	minor	`v0.30.0` → `v0.31.2`
github.com/montanaflynn/stats	indirect	minor	`v0.7.1` → `v0.12.2`
github.com/ossf/osv-schema/bindings/go	require	digest	`83285ce` → `d4a00c3`
github.com/pierrec/lz4/v4	indirect	patch	`v4.1.26` → `v4.1.27`
github.com/planetscale/vtprotobuf	indirect	digest	`0393e58` → `8ae5a48`
github.com/saferwall/pe	indirect	patch	`v1.6.4` → `v1.6.5`
github.com/segmentio/asm	indirect	minor	`v1.1.3` → `v1.2.1`
github.com/shogo82148/go-shuffle	indirect	minor	`v1.0.1` → `v1.1.1`
github.com/skeema/knownhosts	indirect	patch	`v1.3.1` → `v1.3.2`
github.com/tink-crypto/tink-go/v2	indirect	minor	`v2.6.0` → `v2.7.0`
github.com/tklauser/go-sysconf	indirect	minor	`v0.3.16` → `v0.4.0`
github.com/tklauser/numcpus	indirect	minor	`v0.11.0` → `v0.12.0`
github.com/ulikunitz/xz	indirect	patch	`v0.5.15` → `v0.5.16`
go.etcd.io/bbolt	indirect	minor	`v1.4.3` → `v1.5.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.68.0` → `v0.69.0`
go.opentelemetry.io/otel	indirect	minor	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/metric	indirect	minor	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/trace	indirect	minor	`v1.43.0` → `v1.44.0`
go.yaml.in/yaml/v4	indirect	patch	`v4.0.0-rc.4` → `v4.0.0-rc.6`
golang.org/x/crypto	require	minor	`v0.53.0` → `v0.54.0`
golang.org/x/exp	indirect	digest	`74f9aab` → `764159d`
golang.org/x/mod	require	minor	`v0.37.0` → `v0.38.0`
golang.org/x/net	indirect	minor	`v0.56.0` → `v0.57.0`
golang.org/x/sync	indirect	minor	`v0.21.0` → `v0.22.0`
golang.org/x/sys	indirect	minor	`v0.46.0` → `v0.47.0`
golang.org/x/telemetry	indirect	digest	`59b4966` → `bdb8988`
golang.org/x/text	indirect	minor	`v0.39.0` → `v0.40.0`
golang.org/x/tools	indirect	minor	`v0.47.0` → `v0.48.0`
golang.org/x/vuln	indirect	minor	`v1.3.0` → `v1.6.0`
google.golang.org/api	indirect	minor	`v0.272.0` → `v0.289.0`	`v0.290.0`
google.golang.org/genai	require	minor	`v1.48.0` → `v1.64.0`	`v1.65.0`
gopkg.in/ini.v1	indirect	patch	`v1.67.2` → `v1.67.3`
modernc.org/libc	indirect	minor	`v1.72.3` → `v1.74.3`
modernc.org/sqlite	indirect	minor	`v1.50.1` → `v1.54.0`

Release Notes

googleapis/google-cloud-go (cloud.google.com/go/auth)

`v0.22.0`

Compare Source

bigtable:
- cbt: Support cells per column limit for row read.
- bttest: Correctly handle empty RowSet.
- Fix ReadModifyWrite operation in emulator.
- Fix API path in GetCluster.
bigquery:
- BEHAVIOR CHANGE: Retry on 503 status code.
- Add dataset.DeleteWithContents.
- Add SchemaUpdateOptions for query jobs.
- Add Timeline to QueryStatistics.
- Add more stats to ExplainQueryStage.
- Support Parquet data format.
datastore:
- Support omitempty for times.
dlp:
- BREAKING CHANGE: Remove v1beta1 client. Please migrate to the v2 client,
  which is now out of beta.
- Add v2 client.
firestore:
- BEHAVIOR CHANGE: Treat set({}, MergeAll) as valid.
iam:
- Support JWT signing via SignJwt callopt.
profiler:
- BEHAVIOR CHANGE: PollForSerialOutput returns an error when context.Done.
- BEHAVIOR CHANGE: Increase the initial backoff to 1 minute.
- Avoid returning empty serial port output.
pubsub:
- BEHAVIOR CHANGE: Don't backoff during next retryable error once stream is healthy.
- BEHAVIOR CHANGE: Don't backoff on EOF.
- pstest: Support Acknowledge and ModifyAckDeadline RPCs.
redis:
- Add v1 beta Redis client.
spanner:
- Support SessionLabels.
speech:
- Add api v1 beta1 client.
storage:
- BEHAVIOR CHANGE: Retry reads when retryable error occurs.
- Fix delete of object in requester-pays bucket.
- Support KMS integration.

`v0.21.0`

Compare Source

bigquery:
- Add OpenCensus tracing.
firestore:
- BREAKING CHANGE: If a document does not exist, return a DocumentSnapshot
  whose Exists method returns false. DocumentRef.Get and Transaction.Get
  return the non-nil DocumentSnapshot in addition to a NotFound error.
  DocumentRef.GetAll and Transaction.GetAll return a non-nil
  DocumentSnapshot instead of nil.
- Add DocumentIterator.Stop. Call Stop whenever you are done with a
  DocumentIterator.
- Added Query.Snapshots and DocumentRef.Snapshots, which provide realtime
  notification of updates. See https://cloud.google.com/firestore/docs/query-data/listen.
- Canceling an RPC now always returns a grpc.Status with codes.Canceled.
spanner:
- Add CommitTimestamp, which supports inserting the commit timestamp of a
  transaction into a column.

`v0.20.0`

Compare Source

bigquery: Support SchemaUpdateOptions for load jobs.
bigtable:
- Add SampleRowKeys.
- cbt: Support union, intersection GCPolicy.
- Retry admin RPCS.
- Add trace spans to retries.
datastore: Add OpenCensus tracing.
firestore:
- Fix queries involving Null and NaN.
- Allow Timestamp protobuffers for time values.
logging: Add a WriteTimeout option.
spanner: Support Batch API.
storage: Add OpenCensus tracing.

Masterminds/semver (github.com/Masterminds/semver/v3)

`v3.5.0`

Compare Source

What's Changed

Adding more prerelease tests by @mattfarina in #273
Update constraint error messages by @mattfarina in #278
Fix edge cases by @mattfarina in #279
Adding some checks in by @mattfarina in #280
Updating deps by @mattfarina in #281
Bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #282
Bump actions/cache from 4.2.3 to 5.0.5 by @dependabot[bot] in #283
Bump golangci/golangci-lint-action from 7.0.1 to 9.2.0 by @dependabot[bot] in #284
Updating gitignore for devcontainers by @mattfarina in #286
Fixing some quality issues by @mattfarina in #287

New Contributors

@dependabot[bot] made their first contribution in #282

Full Changelog: Masterminds/semver@v3.4.0...v3.5.0

ProtonMail/go-crypto (github.com/ProtonMail/go-crypto)

`v1.4.1`

Compare Source

What's Changed

Properly handle ECC keys with invalid points in #304

Full Changelog: ProtonMail/go-crypto@v1.4.0...v1.4.1

`v1.4.0`

Compare Source

What's Changed

Ignore leading and trailing whitespaces in the armor body in #288
Update key_generation.go, rename variables to avoid shadowing in #290
Add InsecureGenerateNonCriticalKeyFlags option to generate non-critical key flags signature subpackets in #291
Add InsecureGenerateNonCriticalSignatureCreationTime option to generate non-critical signature creation time subpackets in #292
Bump dependencies and min go version to 1.23 in #294
ECDHv4: Error on low-order x25519 public key curve points in #299
Cleartext: Only allow valid hashes in header in #298

Full Changelog: ProtonMail/go-crypto@v1.3.0...v1.4.0

anchore/go-lzo (github.com/anchore/go-lzo)

`v0.1.1`

Compare Source

Additional Changes

Use shared codeql workflow [PR #43 @wagoodman]
restore Go version to 1.24.0 [PR #38 @wagoodman]
update Go version [PR #37 @anchore-oss-update-bot]
Add release workflow and port common patterns [PR #35 @wagoodman]
update zizmor workflow triggers [PR #34 @wagoodman]
require zizmor security events [PR #33 @wagoodman]
(chore): removing automations [PR #32 @wagoodman]
use zizmor in pass/fail mode [PR #25 @willmurphyscode]

(Full Changelog)

anchore/go-struct-converter (github.com/anchore/go-struct-converter)

`v0.2.1`

Compare Source

What's Changed

feat: chain with independent convert functions by @kzantow in #5

Additional Changes

update tool versions [PR #22 @anchore-oss-update-bot]
restore Go version to 1.23.0 [PR #18 @wagoodman]
update tool versions [PR #15 @anchore-oss-update-bot]
update Go version [PR #16 @anchore-oss-update-bot]

(Full Changelog)

anthropics/anthropic-sdk-go (github.com/anthropics/anthropic-sdk-go)

`v1.58.0`

Compare Source

Full Changelog: v1.58.0...v1.58.1

Bug Fixes

client: copy all citation fields in ToParam conversions (#191) (26ac1f9)
vertex: default to the cloud-platform scope in WithGoogleAuth (#190) (7931e70)

Chores

api: add support for new refusal category (f77159c)
docs: small updates (576dc36)
docs: small updates (f618082)
internal: codegen related update (03fee5d)

`v1.57.0`

Compare Source

Full Changelog: v1.57.0...v1.58.0

Features

api: add support for MCP Tunnels (3465b89)

`v1.56.0`

Compare Source

Full Changelog: v1.55.1...v1.56.0

Features

api: add agent-memory-2026-07-22 beta header (5bcfda4)

`v1.55.1`

Compare Source

Full Changelog: v1.55.1...v1.56.0

Features

api: add agent-memory-2026-07-22 beta header (5bcfda4)

`v1.55.0`

Compare Source

Full Changelog: v1.55.0...v1.55.1

Chores

api: remove some nonfunctional types from the SDKs (9bd3d09)

`v1.54.0`

Compare Source

Full Changelog: v1.54.0...v1.55.0

Features

api: add support for Managed Agents event delta streaming, agent overrides, reverse pagination, vault credential injection scoping, and agent and deployment webhook events (021ef45)

`v1.53.0`

Compare Source

Full Changelog: v1.53.0...v1.54.0

Features

api: add support for claude-sonnet-5 (232cfe6)

Bug Fixes

agenttoolset: allow absolute paths that resolve inside workdir (#93) (3735258)

`v1.52.0`

Compare Source

Full Changelog: v1.52.0...v1.53.0

Features

api: add support for 2026031 web fetch and support tools (6396455)

Chores

api: accept user profile ID's when counting tokens (d31ba27)
docs: updates to descriptions and example values (cb00f34)

`v1.51.1`

Compare Source

Full Changelog: v1.51.1...v1.52.0

Features

client: add support for system.message streaming events (7bb296d)

Chores

api: add support for new refusal category (46f8625)
api: add support for sending User Profile ID in request headers (5cab486)

`v1.51.0`

Compare Source

Full Changelog: v1.51.0...v1.51.1

Bug Fixes

helpers: single source for x-stainless-helper, append semantics, and tag the fallback middleware (#88) (ebbdb7d)

`v1.50.2`

Compare Source

Full Changelog: v1.50.2...v1.51.0

Features

api: add support for new code_execution_20260120 tool (f54a4a8)

`v1.50.1`

Compare Source

Full Changelog: v1.50.1...v1.50.2

Chores

api: remove retired models from API and SDKs (11f5c82)

`v1.50.0`

Compare Source

Full Changelog: v1.50.0...v1.50.1

Bug Fixes

api: add frontier_llm refusal category (9ebbaf7)

`v1.49.0`

Compare Source

Full Changelog: v1.49.0...v1.50.0

Features

api: add support for Managed Agents deployments and environment variable credentials (f72e1d8)

`v1.48.0`

Compare Source

Full Changelog: v1.48.0...v1.49.0

Features

api: add support for claude-mythos-5 and claude-fable-5, with support for server-side fallbacks on refusal (782f223)
client: adds client-side fallbacks middleware for API providers that do not support server-side fallbacks (782f223)

Bug Fixes

3p middleware ordering (#38) (8f47086)

`v1.47.0`

Compare Source

Full Changelog: v1.47.0...v1.48.0

Features

api: small updates to Managed Agents types (3ebeea5)

`v1.46.0`

Compare Source

Full Changelog: v1.45.0...v1.46.0

Features

api: Add support for claude-opus-4-8, mid-conversation system blocks, and usage.output_tokens_details (4cd860b)
support custom file size caps (#876) (99634e8)

Chores

examples: rename managed-agents private-sandbox-worker to self-hosted-sandbox-worker (#873) (07d3e46)

Documentation

replace literal newlines (cbb7ea5)

`v1.45.0`

Compare Source

Full Changelog: v1.44.1...v1.45.0

Features

api: Add support for thinking-token-count beta for estimated tokens in thinking block deltas when streaming (dedeb6d)

`v1.44.1`

Compare Source

Full Changelog: v1.44.1...v1.45.0

Features

api: Add support for thinking-token-count beta for estimated tokens in thinking block deltas when streaming (dedeb6d)

`v1.44.0`

Compare Source

Full Changelog: v1.44.0...v1.44.1

Bug Fixes

runner: skip tool calls SessionToolRunner does not own (93afc65)

`v1.43.0`

Compare Source

Full Changelog: v1.43.0...v1.44.0

Features

client: Add support for self-hosted sandboxes in CMA with sandbox helpers (34354c4)

`v1.42.0`

Compare Source

Full Changelog: v1.42.0...v1.43.0

Features

api: Add BetaManagedAgentsSearchResultBlock types (498fafc)
api: Add support for cache diagnostics beta (eac032f)
client: add compatibility aliases for old type names (38e1f89)
client: add compatibility aliases for old type names (a98b0fb)
client: optimize json encoder for internal types (f379c42)

Bug Fixes

structured outputs: allowlist enum, const, pattern, allOf in transformSchema (#823) (d368786)

Chores

api: spec updates (502b9f1)
fix standard webhooks version (#842) (1fdda46)
internal: simplify release-please config (69da3d6)

`v1.41.0`

Compare Source

Full Changelog: v1.41.0...v1.42.0

Features

aws: Add AWS client for Claude Platform on AWS (596baf4)

Bug Fixes

examples: update examples dependencies (e832b79)
go: avoid panic when http.DefaultTransport is wrapped (6b75bef)

Chores

client: update dependency checksums (64c1d95)
go mod tidy (#816) (09b5f9c)
internal: codegen related update (6e83495)
internal: codegen related update (34d1379)
internal: codegen related update (c068475)
redact api-key headers in debug logs (46a074f)
redact api-key headers in debug logs (1fe2ebb)

`v1.40.0`

Compare Source

Full Changelog: v1.40.0...v1.41.0

Features

api: add support for Managed Agents multiagents and outcomes, webhooks, vault validation (33762b0)
mcp: add mcp tool helpers (#752) (4edf9f5)

Bug Fixes

api: Adjust webhook configuration (8b2f194)

`v1.39.0`

Compare Source

Full Changelog: v1.39.0...v1.40.0

Features

client: allow targeting a workspace for OIDC federation token exchange (6bf66ac)

`v1.38.0`

Compare Source

Full Changelog: v1.38.0...v1.39.0

Features

api: improve Managed Agents APIs (eadf509)
client: add Workload Identity Federation, interactive OAuth, and auth profiles (0f0cc01)
go: add default http client with timeout (b81c287)
support setting headers via env (641015d)

Bug Fixes

client: add 10 min timeout (#770) (917fe19)

Chores

avoid embedding reflect.Type for dead code elimination (11168b4)

`v1.37.0`

Compare Source

Full Changelog: v1.37.0...v1.38.0

Features

add Type() method to API errors for error kind identification (#676) (0db1712)
api: CMA Memory public beta (180e00c)
structured outputs via Schema any with auto-parse (#759) (46073d8)

Bug Fixes

api: fix errors in api spec (e47c178)
api: restore missing features (0fc6fac)

Chores

internal: more robust bootstrap script (5bde204)
tests: bump steady to v0.22.1 (4578c15)

`v1.36.0`

Compare Source

Full Changelog: v1.36.0...v1.37.0

Features

api: add claude-opus-4-7, token budgets and user_profiles (6e758a9)

`v1.35.1`

Compare Source

Full Changelog: v1.35.1...v1.36.0

Features

api: mark Sonnet and Opus 4 as deprecated (fc49d21)
bedrock: use auth header for mantle client (#734) (629eec1)

`v1.35.0`

Compare Source

Full Changelog: v1.35.0...v1.35.1

Bug Fixes

streaming: add missing events (227b83e)

`v1.34.0`

Compare Source

Full Changelog: v1.34.0...v1.35.0

Features

vertex eu region (#740) (e8bda03)

Bug Fixes

tools: convert tool response type to array (#748) (3a18787)

Documentation

update examples (aff7b24)

`v1.33.0`

Compare Source

Full Changelog: v1.33.0...v1.34.0

Features

api: Add beta advisor tool (3a6ddba)

`v1.32.0`

Compare Source

Full Changelog: v1.32.0...v1.33.0

Features

api: add support for Claude Managed Agents (722b2ac)

`v1.31.0`

Compare Source

Full Changelog: v1.31.0...v1.32.0

Features

bedrock: add AnthropicBedrockMantle client (#704) (058e8fa)

`v1.30.0`

Compare Source

Full Changelog: v1.30.0...v1.31.0

Features

api: Add support for claude-mythos-preview (7144a65)

`v1.29.0`

Compare Source

Full Changelog: v1.29.0...v1.30.0

Features

vertex: add support for US multi-region endpoint (6f40457)

`v1.28.0`

Compare Source

Full Changelog: v1.28.0...v1.29.0

Features

api: add structured stop_details to message responses (1053799)

Chores

internal: client updates (531283d)

`v1.27.1`

Compare Source

Full Changelog: v1.27.1...v1.28.0

Features

internal: support comma format in multipart form encoding (97ed8a1)

Bug Fixes

bump buger/jsonparser to v1.1.2 (GO-2026-4514) (#665) (96565eb)
prevent duplicate ? in query params (0afa75c)
types: generate shared enum types that are not referenced by other schemas (5dc86f2)

Chores

ci: run builds on CI even if only spec metadata changed (010a16f)
ci: skip lint on metadata-only changes (8cc7cec)
ci: support opting out of skipping builds on metadata-only commits (adc7184)
client: fix multipart serialisation of Default() fields (3fc3613)
internal: bump go toolchain to go1.25.8 to address std lib vulnerabilities (e3feecb)
internal: support default value struct tag (fc68556)
internal: update gitignore (e2a5dd1)
remove unnecessary error check for url parsing (6d42216)
tests: bump steady to v0.19.4 (3ca1569)
tests: bump steady to v0.19.5 (7364e49)
tests: bump steady to v0.19.6 (28ebd01)
tests: bump steady to v0.19.7 (77fc869)
tests: bump steady to v0.20.1 (e52beb5)
tests: bump steady to v0.20.2 (3a20191)
update docs for api:"required" (aa0a03a)

`v1.27.0`

Compare Source

Full Changelog: v1.27.0...v1.27.1

Chores

internal: regenerate SDK with no functional changes (c963fd0)
internal: tweak CI branches (95e3410)

bmatcuk/doublestar (github.com/bmatcuk/doublestar/v4)

`v4.10.0`: Added WithNoHidden option

Compare Source

Added support for a WithNoHidden option to ignore hidden files in patterns that might unintentionally match them. For example, a .config directory would not be matched by * or recursed into by **, but would be matched by .* or recursed by .config/**.

Thanks to @lukasngl for the initial PR and idea!

What's Changed

feat: add WithNoHidden option to skip hidden files by @lukasngl in #109

New Contributors

@lukasngl made their first contribution in #109

Full Changelog: bmatcuk/doublestar@v4.9.2...v4.10.0

cloudflare/circl (github.com/cloudflare/circl)

`v1.6.4`: CIRCL v1.6.4

Compare Source

What's Changed

Fix typo: it's to its by @04cb in #588
ci: Bump Go version to 1.26 by @armfazh in #591
tss/rsa: polynomial evaluation using Horner's method by @armfazh in #590
zk/qndleq: Ensure large security parameter by @armfazh in #592
sign/bls: rejects aggregated signatures built with duplicated messages. by @armfazh in #595
Bump golang.org/x/crypto from 0.30.0 to 0.45.0 by @dependabot[bot] in #585
tss/rsa: avoiding overflow in lambda calculation with big.Int by @armfazh in #598
deps: Update CIRCL version in code generators. by @armfazh in #599
ci: add Semgrep OSS scanning workflow by [@hrushikeshdeshp

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/Berlin)

Branch creation
- Between 08:00 AM and 04:59 PM, Monday through Thursday (* 8-16 * * 1-4)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

renovate-sh-app · 2026-07-21T11:03:14Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

2 additional dependencies were updated

Details:

Package	Change
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20260511170946-3700d4141b60` -> `v0.0.0-20260630182238-925bb5da69e7`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260511170946-3700d4141b60` -> `v0.0.0-20260706201446-f0a921348800`

renovate-sh-app · 2026-07-23T23:05:54Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: github.com/google/osv-scalibr@v0.4.6-0.20260723225004-83751b0ac5b5: verifying go.mod: github.com/google/osv-scalibr@v0.4.6-0.20260723225004-83751b0ac5b5/go.mod: reading https://sum.golang.org/lookup/github.com/google/osv-scalibr@v0.4.6-0.20260723225004-83751b0ac5b5: 500 Internal Server Error

renovate-sh-app Bot requested a review from a team as a code owner July 21, 2026 11:03

renovate-sh-app Bot requested a review from toddtreece July 21, 2026 11:03

renovate-sh-app Bot added the dependencies Pull requests that update a dependency file label Jul 21, 2026

renovate-sh-app Bot requested review from andresmgot and xnyo July 21, 2026 11:03

github-project-automation Bot added this to Grafana Catalog Team Jul 21, 2026

github-project-automation Bot moved this to 📬 Triage in Grafana Catalog Team Jul 21, 2026

grafana-catalog-project-bot Bot moved this from 📬 Triage to 🔬 In review in Grafana Catalog Team Jul 21, 2026

renovate-sh-app Bot force-pushed the renovate/go-dependencies branch 12 times, most recently from 9332a18 to 2547a0c Compare July 23, 2026 20:01

chore(deps): update go dependencies

6351858

renovate-sh-app Bot force-pushed the renovate/go-dependencies branch from 2547a0c to 6351858 Compare July 23, 2026 23:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update go dependencies#648

chore(deps): update go dependencies#648
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom
renovate/go-dependencies

renovate-sh-app Bot commented Jul 21, 2026 •

edited

Loading

Uh oh!

renovate-sh-app Bot commented Jul 21, 2026 •

edited

Loading

Uh oh!

renovate-sh-app Bot commented Jul 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate-sh-app Bot commented Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

What's Changed

Additional Changes

What's Changed

Additional Changes

Bug Fixes

Chores

Features

Features

Features

Chores

Features

Features

Bug Fixes

Features

Chores

Features

Chores

Bug Fixes

Features

Chores

Bug Fixes

Features

Features

Bug Fixes

Features

Features

Chores

Documentation

Features

Features

Bug Fixes

Features

Features

Bug Fixes

Chores

Features

Bug Fixes

Chores

Features

Bug Fixes

Features

Features

Bug Fixes

Chores

Features

Bug Fixes

Chores

Features

Features

Bug Fixes

Features

Bug Fixes

Documentation

Features

Features

Features

Features

Features

Features

Chores

Features

Bug Fixes

Chores

Chores

v4.10.0: Added WithNoHidden option

What's Changed

New Contributors

v1.6.4: CIRCL v1.6.4

What's Changed

Configuration

Need help?

Uh oh!

renovate-sh-app Bot commented Jul 21, 2026 •

edited

Loading

`v4.10.0`: Added WithNoHidden option

`v1.6.4`: CIRCL v1.6.4

renovate-sh-app Bot commented Jul 21, 2026 •

edited

Loading