Skip to content

chore(deps): bump the go-minor-and-patch group across 1 directory with 12 updates - #42

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-20396c95b7
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-20396c95b7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-minor-and-patch group with 12 updates in the / directory:

Package From To
connectrpc.com/connect 1.21.0 1.21.1
github.com/ClickHouse/clickhouse-go/v2 2.48.0 2.49.0
github.com/oschwald/maxminddb-golang/v2 2.6.0 2.8.0
github.com/pressly/goose/v3 3.28.0 3.29.0
github.com/prometheus/client_golang 1.24.1 1.25.0
github.com/redis/rueidis 1.0.78 1.0.79
go.opentelemetry.io/otel 1.46.0 1.47.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 1.46.0 1.47.0
go.opentelemetry.io/otel/sdk 1.46.0 1.47.0
golang.org/x/crypto 0.57.0 0.58.0
golang.org/x/net 0.59.0 0.61.0
golang.org/x/sync 0.23.0 0.24.0

Updates connectrpc.com/connect from 1.21.0 to 1.21.1

Release notes

Sourced from connectrpc.com/connect's releases.

v1.21.1

What's Changed

Bugfixes

Full Changelog: connectrpc/connect-go@v1.21.0...v1.21.1

Commits
  • c4ad2c4 Prepare for v1.21.1 (#1027)
  • ac6e6ed Send a minimal end of stream when over WithSendMaxBytes (#1023)
  • a58596c Enforce read max limit on unary errors (#1022)
  • b88c4f7 Workaround TestClientDeadlineHandling test failure flakes (#1021)
  • abe4c95 Guard against typed nil *connect.Error (#1020)
  • 6a8459c Return the end-stream error when the body read fails after it (#1014)
  • 128a9d9 Improve http2 client disconnect error handling (#1019)
  • 108190c Set Connect-Timeout-Ms when less than a millisecond remains (#1018)
  • 4bf13bc Reject a negative Connect-Timeout-Ms instead of expiring the context (#1017)
  • 8b11d3f Fix removing all compressors on unary Connect clients (#1016)
  • Additional commits viewable in compare view

Updates github.com/ClickHouse/clickhouse-go/v2 from 2.48.0 to 2.49.0

Release notes

Sourced from github.com/ClickHouse/clickhouse-go/v2's releases.

v2.49.0

What's Changed

Improvements 🚀

Bug fixes 🐛

Other Changes 🛠

... (truncated)

Changelog

Sourced from github.com/ClickHouse/clickhouse-go/v2's changelog.

v2.49.0, 2026-10-08

What's Changed

Improvements 🚀

Bug fixes 🐛

Other Changes 🛠

... (truncated)

Commits
  • 41a8511 Update release notes
  • 1b674b6 Merge pull request #2060 from ClickHouse/kavirajk/ci-ubuntu-26.04
  • d137912 Merge branch 'main' into kavirajk/ci-ubuntu-26.04
  • 66b6f9a chore: change the CI runner
  • 588cef5 Merge pull request #2059 from ClickHouse/kavirajk/upgrade-deps
  • e4e923a chore: test utils cleanup
  • 4269532 Merge branch 'main' into kavirajk/upgrade-deps
  • 581d7ad chore: revert the sys and crypto change
  • 2cd020f Merge pull request #2057 from ClickHouse/kavirajk/flaky-tests-on-cloud-main
  • 15b066d chore: remove github.com/mkevac/debugcharts dep
  • Additional commits viewable in compare view

Updates github.com/oschwald/maxminddb-golang/v2 from 2.6.0 to 2.8.0

Release notes

Sourced from github.com/oschwald/maxminddb-golang/v2's releases.

2.8.0

  • String caching now uses buckets to improve concurrent decoding. On 64-bit systems, the table grows from 64 KiB to 72 KiB and is allocated only when an eligible string is decoded. Entry capacity grows from 4,096 to 7,168, which can also increase retained string memory. Pull request by James Ranson. GitHub #252.
  • Standalone mmdbdata.NewDecoder calls now default to no string cache. This reduces setup cost for short-lived decoders. Use the new mmdbdata.WithStringCache() option for repeated reads through a retained decoder or its cursors. Without the option, repeated string reads can allocate more and run slower. Cursors supplied by a Reader continue to share its caching policy.
  • Added mmdbdata.Decoder.CursorAt(offset) to read independent records from one buffer without changing the decoder's position. The cursors share its string cache and can be read concurrently while the buffer remains valid and unchanged.
  • Reduced maxminddb-gen generation and test time by reusing loaded dependencies during output validation, avoiding duplicate syntax work, and omitting unused parser metadata. Full type checking and generated-output validation remain enabled. Validation normalizes paths from package loaders to avoid false duplicate declarations. GitHub #256.
  • Reduced reflection decoding overhead for string struct fields, including fields read through database pointers, while retaining existing validation and custom unmarshaling behavior.
  • Shared string-cache handling between map keys and decoded string values.
  • Fixed Reader.Verify() accepting invalid UTF-8 values overwritten by duplicate map keys. Verification now checks every encoded string in the data and metadata sections, including overwritten values.
  • Fixed maxminddb-gen rejecting fields that use type aliases of supported types, including aliases in nested containers.
  • Fixed maxminddb-gen panicking when a byte slice or its elements use an imported type alias.
  • Fixed maxminddb-gen emitting inaccessible type names for imported container aliases with private element or map key types. Generated helpers infer those types while retaining allocation, overflow, and size checks.
  • Fixed maxminddb-gen emitting private byte aliases in constraints for nested byte slice aliases.
  • Fixed maxminddb-gen emitting inaccessible types for imported aliases whose generic arguments contain private types, fields, or methods.

2.7.0

  • Go 1.26 or later is now required. CI now tests Go 1.26 and 1.27.
  • Fixed Reader.Verify() rejecting a search-tree record that points to a value nested in another data record. The MaxMind DB spec permits this, and mmdbwriter can write such databases. GitHub #250.
  • Decoding now rejects extended type bytes 0 and 250 through 255, which the MaxMind DB spec does not define. Before, they decoded as other types. For example, 0x00 0xfb decoded as a string.
  • Reader.Verify() now rejects a data pointer that points into the middle of a field.

... (truncated)

Changelog

Sourced from github.com/oschwald/maxminddb-golang/v2's changelog.

2.8.0 - 2026-10-11

  • String caching now uses buckets to improve concurrent decoding. On 64-bit systems, the table grows from 64 KiB to 72 KiB and is allocated only when an eligible string is decoded. Entry capacity grows from 4,096 to 7,168, which can also increase retained string memory. Pull request by James Ranson. GitHub #252.
  • Standalone mmdbdata.NewDecoder calls now default to no string cache. This reduces setup cost for short-lived decoders. Use the new mmdbdata.WithStringCache() option for repeated reads through a retained decoder or its cursors. Without the option, repeated string reads can allocate more and run slower. Cursors supplied by a Reader continue to share its caching policy.
  • Added mmdbdata.Decoder.CursorAt(offset) to read independent records from one buffer without changing the decoder's position. The cursors share its string cache and can be read concurrently while the buffer remains valid and unchanged.
  • Reduced maxminddb-gen generation and test time by reusing loaded dependencies during output validation, avoiding duplicate syntax work, and omitting unused parser metadata. Full type checking and generated-output validation remain enabled. Validation normalizes paths from package loaders to avoid false duplicate declarations. GitHub #256.
  • Reduced reflection decoding overhead for string struct fields, including fields read through database pointers, while retaining existing validation and custom unmarshaling behavior.
  • Shared string-cache handling between map keys and decoded string values.
  • Fixed Reader.Verify() accepting invalid UTF-8 values overwritten by duplicate map keys. Verification now checks every encoded string in the data and metadata sections, including overwritten values.
  • Fixed maxminddb-gen rejecting fields that use type aliases of supported types, including aliases in nested containers.
  • Fixed maxminddb-gen panicking when a byte slice or its elements use an imported type alias.
  • Fixed maxminddb-gen emitting inaccessible type names for imported container aliases with private element or map key types. Generated helpers infer those types while retaining allocation, overflow, and size checks.
  • Fixed maxminddb-gen emitting private byte aliases in constraints for nested byte slice aliases.
  • Fixed maxminddb-gen emitting inaccessible types for imported aliases whose generic arguments contain private types, fields, or methods.

2.7.0 - 2026-09-29

  • Go 1.26 or later is now required. CI now tests Go 1.26 and 1.27.
  • Fixed Reader.Verify() rejecting a search-tree record that points to a value nested in another data record. The MaxMind DB spec permits this, and mmdbwriter can write such databases. GitHub #250.
  • Decoding now rejects extended type bytes 0 and 250 through 255, which the MaxMind DB spec does not define. Before, they decoded as other types. For example, 0x00 0xfb decoded as a string.

... (truncated)

Commits
  • a495bc9 Set release version and date
  • aa0e63e Merge pull request #260 from oschwald/perf/generator-type-info
  • 2e0ae68 Normalize file paths during generated-package validation
  • d77548f Merge main into generator performance branch
  • 1c70308 Reduce unused parser work in maxminddb-gen
  • 9ce6d1e Reuse loaded packages when validating generated decoders
  • df4444b Merge pull request #258 from oschwald/dependabot/go_modules/golang.org/x/tool...
  • f1b833d Merge pull request #259 from oschwald/perf/string-field-decoding
  • 0e60381 Support type aliases in generated decoder fields
  • 7cc1919 Validate overwritten strings during database verification
  • Additional commits viewable in compare view

Updates github.com/pressly/goose/v3 from 3.28.0 to 3.29.0

Release notes

Sourced from github.com/pressly/goose/v3's releases.

v3.29.0

Added

Changed

  • Various dependency upgrades
Changelog

Sourced from github.com/pressly/goose/v3's changelog.

[v3.29.0] - 2026-10-11

Added

Changed

  • Various dependency upgrades
Commits

Updates github.com/prometheus/client_golang from 1.24.1 to 1.25.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.25.0

⚠️ This release raises the minimum required Go version to 1.26 and includes breaking API changes in api/prometheus/v1 (see the [CHANGE] entries below). ⚠️

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139
  • [BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135

What's Changed

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139
  • [BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135
Commits

Updates github.com/redis/rueidis from 1.0.78 to 1.0.79

Release notes

Sourced from github.com/redis/rueidis's releases.

1.0.79

Changes

Features

  • Reuse connections after cancelled blocking commands: a blocking command built with .UnblockOnCancel() sends CLIENT UNBLOCK when its context is cancelled, so the client keeps the connection instead of closing it (#1030)
  • MUnlink helpervalkey-io/valkey-go#197
  • ClusterScanner helper: iterates CLUSTERSCAN results with Iter(). Adds ClusterScanEntry and AsClusterScanEntry()valkey-io/valkey-go#172
  • rueidislimiter: new opt-in GCRA algorithm (AlgorithmGCRA), plus AllowAtMost, Reset and WithBurstvalkey-io/valkey-go#176
  • rueidiscompatrate: new module that is a drop-in replacement for go-redis/redis_rate/v10valkey-io/valkey-go#176
  • rueidiscompat: added MSetEXvalkey-io/valkey-go#164Latency and LatencyResetvalkey-io/valkey-go#169ACLUsers, ACLWhoAmI and ACLGenPassvalkey-io/valkey-go#187
  • rueidisotel: DoCache and DoMultiCache spans now carry db.cache.hit and db.cache.missvalkey-io/valkey-go#189

Bug Fixes

  • NewClient no longer returns a non-nil Clientvalkey-io/valkey-go#192
  • rueidisaside: fixed a deadlock during FLUSHDB/FLUSHALLvalkey-io/valkey-go#185
  • valkey-io/valkey-go#203
  • DoMultivalkey-io/valkey-go#204
  • On a DedicatedClient, a cancelled blocking command no longer keeps the connection from receiving keepalive pings (#1030)
  • rueidiscompat: fixed ACLDryRun and ACLLog with no count. ClientInfovalkey-io/valkey-go#187

Docs

  • Fixed the Receivevalkey-io/valkey-go#182

Contributors

We'd like to thank all the contributors who worked on this release!

@​BeyondCreative, @​KartikYZ, @​NotAFlightRisk, @​frozenbonito, @​magiclin99, @​nelzblooket, @​rueian, @​sonalijhala-23 and @​weihong-xu-hpe

Commits

…h 12 updates

Bumps the go-minor-and-patch group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [connectrpc.com/connect](https://github.com/connectrpc/connect-go) | `1.21.0` | `1.21.1` |
| [github.com/ClickHouse/clickhouse-go/v2](https://github.com/ClickHouse/clickhouse-go) | `2.48.0` | `2.49.0` |
| [github.com/oschwald/maxminddb-golang/v2](https://github.com/oschwald/maxminddb-golang) | `2.6.0` | `2.8.0` |
| [github.com/pressly/goose/v3](https://github.com/pressly/goose) | `3.28.0` | `3.29.0` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.24.1` | `1.25.0` |
| [github.com/redis/rueidis](https://github.com/redis/rueidis) | `1.0.78` | `1.0.79` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` |
| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.57.0` | `0.58.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.59.0` | `0.61.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.23.0` | `0.24.0` |



Updates `connectrpc.com/connect` from 1.21.0 to 1.21.1
- [Release notes](https://github.com/connectrpc/connect-go/releases)
- [Changelog](https://github.com/connectrpc/connect-go/blob/main/RELEASE.md)
- [Commits](connectrpc/connect-go@v1.21.0...v1.21.1)

Updates `github.com/ClickHouse/clickhouse-go/v2` from 2.48.0 to 2.49.0
- [Release notes](https://github.com/ClickHouse/clickhouse-go/releases)
- [Changelog](https://github.com/ClickHouse/clickhouse-go/blob/main/CHANGELOG.md)
- [Commits](ClickHouse/clickhouse-go@v2.48.0...v2.49.0)

Updates `github.com/oschwald/maxminddb-golang/v2` from 2.6.0 to 2.8.0
- [Release notes](https://github.com/oschwald/maxminddb-golang/releases)
- [Changelog](https://github.com/oschwald/maxminddb-golang/blob/main/CHANGELOG.md)
- [Commits](oschwald/maxminddb-golang@v2.6.0...v2.8.0)

Updates `github.com/pressly/goose/v3` from 3.28.0 to 3.29.0
- [Release notes](https://github.com/pressly/goose/releases)
- [Changelog](https://github.com/pressly/goose/blob/main/CHANGELOG.md)
- [Commits](pressly/goose@v3.28.0...v3.29.0)

Updates `github.com/prometheus/client_golang` from 1.24.1 to 1.25.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.25.0/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.24.1...v1.25.0)

Updates `github.com/redis/rueidis` from 1.0.78 to 1.0.79
- [Release notes](https://github.com/redis/rueidis/releases)
- [Commits](redis/rueidis@v1.0.78...v1.0.79)

Updates `go.opentelemetry.io/otel` from 1.46.0 to 1.47.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.46.0 to 1.47.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.46.0 to 1.47.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0)

Updates `golang.org/x/crypto` from 0.57.0 to 0.58.0
- [Commits](golang/crypto@v0.57.0...v0.58.0)

Updates `golang.org/x/net` from 0.59.0 to 0.61.0
- [Commits](golang/net@v0.59.0...v0.61.0)

Updates `golang.org/x/sync` from 0.23.0 to 0.24.0
- [Commits](golang/sync@v0.23.0...v0.24.0)

---
updated-dependencies:
- dependency-name: connectrpc.com/connect
  dependency-version: 1.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: github.com/ClickHouse/clickhouse-go/v2
  dependency-version: 2.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/oschwald/maxminddb-golang/v2
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/pressly/goose/v3
  dependency-version: 3.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/redis/rueidis
  dependency-version: 1.0.79
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: golang.org/x/crypto
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: golang.org/x/net
  dependency-version: 0.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: golang.org/x/sync
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants