Skip to content

build(deps): bump the gomod group across 8 directories with 6 updates - #9785

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/gomod-582ed9285a
Open

build(deps): bump the gomod group across 8 directories with 6 updates#9785
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/gomod-582ed9285a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the gomod group with 5 updates in the / directory:

Package From To
github.com/go-openapi/validate 0.26.2 0.26.3
github.com/replicatedhq/troubleshoot 0.131.1 0.132.0
github.com/stretchr/testify 1.11.1 1.12.0
google.golang.org/protobuf 1.36.12-0.20260120151049-f2248ac996af 1.36.12
helm.sh/helm/v3 3.21.3 3.21.4

Bumps the gomod group with 1 update in the /examples/backend-utilization directory: google.golang.org/protobuf.
Bumps the gomod group with 1 update in the /examples/envoy-ext-auth directory: google.golang.org/protobuf.
Bumps the gomod group with 1 update in the /examples/extension-server directory: google.golang.org/protobuf.
Bumps the gomod group with 1 update in the /examples/grpc-ext-proc directory: google.golang.org/protobuf.
Bumps the gomod group with 1 update in the /examples/remote-infra directory: google.golang.org/protobuf.
Bumps the gomod group with 2 updates in the /examples/sds-test-server directory: github.com/stretchr/testify and google.golang.org/protobuf.
Bumps the gomod group with 1 update in the /examples/simple-extension-server directory: github.com/envoyproxy/gateway.

Updates github.com/go-openapi/validate from 0.26.2 to 0.26.3

Release notes

Sourced from github.com/go-openapi/validate's releases.

v0.26.3

0.26.3 - 2026-08-09

Full Changelog: go-openapi/validate@v0.26.2...v0.26.3

8 commits in this release.

Implemented enhancements

  • feat: check required entries of nested schemas, not only of a definition by @​fredbi ...

Fixed bugs

  • fix: report the same findings, in the same order, on every run by @​fredbi ...
  • refact: recycle objects through swag/pools by @​fredbi ...

Miscellaneous tasks

  • ci: enable poolsdebug on separate test lane by @​fredbi ...
  • fix: point every finding at a node the document contains by @​fredbi ...
  • ci: disabled the parallel pool testing on windows and darwin by @​fredbi ...

Other (technical)

People who contributed to this release

validate license terms

License

Commits
  • 39098ef Merge pull request #281 from fredbi/fix/pointer-gaps
  • 2bf3c27 ci: enable poolsdebug on separate test lane
  • 7cdf3d9 feat: check required entries of nested schemas, not only of a definition
  • 62ecb2e fix: point every finding at a node the document contains
  • 78c71e9 fix: report the same findings, in the same order, on every run
  • 02b8f94 Merge pull request #280 from fredbi/refact/use-swag-pools
  • 5540162 ci: disabled the parallel pool testing on windows and darwin
  • 65f13f3 refact: recycle objects through swag/pools
  • See full diff in compare view

Updates github.com/replicatedhq/troubleshoot from 0.131.1 to 0.132.0

Release notes

Sourced from github.com/replicatedhq/troubleshoot's releases.

v0.132.0

Changelog

  • 0e2e0cd0ab5653c7fc7b45bc8615484300fae10d fix(runpod): strip pod spec before saving collected output (#2105)
  • 651ec1bfdbe71d7d444b059ae5b5a366ff028cb1 ci: remove unmaintained upgrade-go workflow (#2104)
  • b9faedfdb0e8012cea70a12981b8b256bda7af0b fix(preflight): add tracing span and align error handling for host collector redaction (#2102)
  • 3db6a99d3a359b732fb794a5a4c3b39324f6a192 feat(analyze): add countDistinct() aggregate to nodeResources (#2079)
  • 3c5bf74750d810e839529198aa78fd553a77e9d2 fix(preflight): redact local host preflight collector output (#2101)
  • 95a4a81bce201166fda48bd1379e62595ee53a03 [deps] Dependency update: troubleshoot (#2096)
  • 5767e9b516a69f366ea7957498b7941709ef1c0d chore(deps): update Go dependencies for 2026-08-02 (#2093)
  • 102843b43353046c9b70605ee213ec59226091ef chore(deps): update Go dependencies (#2091)
  • 5f09d49e12eca20fa1045f30812c124d42082332 chore(deps): bump github.com/go-logr/logr from 1.4.3 to 1.4.4 in the security group across 1 directory (#2087)
  • 28d098815b3c5ee29d55c305290c14bf93ceee47 build(deps): automated Go dependency update (#2084)
  • 55479d963a2951d4f1a3910a6e1f83b59dec948c chore(deps): bump actions/setup-python from 6 to 7 (#2085)
  • a75c22762581b92d7aca5838b182fa105ec2d92c chore(deps): bump actions/setup-go from 6 to 7 (#2086)
  • 80845c873395d5959011a901c14c5b85ad8e03c3 Xp/factory update (#2072)
  • 46cb1b2206cb415311c3ecc44b26f33d444b74ab chore: bump Go dependencies (#2083)
  • f81e4fae5a6b49159179a27407df3bf430752963 chore(deps): grouped Go dependency updates (#2082)
  • b0c4a23a5691844914a5210fdf9d636066880c46 chore(deps): update Go dependencies for top-level and helm-template example (#2081)
  • bce58cfe5679d5562a2007f5f44ee2e9917d3b38 chore(deps): bump the security group across 1 directory with 2 updates (#2078)
  • 10a2a82d32995ce88764bef6dd71f946968228c0 chore(deps): bump actions/checkout from 4 to 7 (#2075)
  • 7fa4497b7fd9a8bf462032e4cae09a8f57f69d08 chore: update Go dependencies (#2074)
Commits
  • 0e2e0cd fix(runpod): strip pod spec before saving collected output (#2105)
  • 651ec1b ci: remove unmaintained upgrade-go workflow (#2104)
  • b9faedf fix(preflight): add tracing span and align error handling for host collector ...
  • 3db6a99 feat(analyze): add countDistinct() aggregate to nodeResources (#2079)
  • 3c5bf74 fix(preflight): redact local host preflight collector output (#2101)
  • 95a4a81 [deps] Dependency update: troubleshoot (#2096)
  • 5767e9b chore(deps): update Go dependencies for 2026-08-02 (#2093)
  • 102843b chore(deps): update Go dependencies (#2091)
  • 5f09d49 chore(deps): bump github.com/go-logr/logr from 1.4.3 to 1.4.4 in the security...
  • 28d0988 build(deps): automated Go dependency update (#2084)
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

New Contributors

... (truncated)

Commits
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • d2699be _codegen: modernize
  • a463c8c Merge pull request #1885 from stretchr/dolmen/ci-check-ghactions-hashes
  • Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12

Updates helm.sh/helm/v3 from 3.21.3 to 3.21.4

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.21.4 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • fix(engine): prevent Files.Lines panic on empty file (backport to v3)- #32303 by @​mahesh-sadupalli
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932- #32463 by @​karan-vk
  • [dev-v3 backport] fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158- #32535 by @​scottrigby
  • [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061- #32536 by @​scottrigby
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0- (includes golang.org/x/text v0.40.0 to fix GO-2026-5970) #32308

Installation and Upgrading

Download Helm v3.21.4. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308) 813176c51bb5c181dbbd7901298ddcc104cd3417 (dependabot[bot])
  • [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061 b6aa8b1d71140347f75ef0b77fac91f28ffe10b3 (Scott Rigby)
  • fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158 57ce7aeec1eb82422c5c349dfadda20ea3f743fe (Scott Rigby)
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 ab71449c76f66e55064ae4503a6e7adae21dcfa9 (Karan V)
  • fix(engine): prevent Files.Lines panic on empty file 955dfab1e6bdd70b5ccd7b932b2d500e9e26566c (Mahesh Sadupalli)

... (truncated)

Commits
  • 813176c chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308)
  • b6aa8b1 [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061
  • 57ce7ae fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158
  • ab71449 fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932
  • 955dfab fix(engine): prevent Files.Lines panic on empty file
  • See full diff in compare view

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12

Updates google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12

Updates google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12

Updates github.com/stretchr/testify from 1.11.1 to 1.12.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

New Contributors

... (truncated)

Commits
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • d2699be _codegen: modernize
  • a463c8c Merge pull request #1885 from stretchr/dolmen/ci-check-ghactions-hashes
  • Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12

Updates github.com/envoyproxy/gateway from 1.8.3 to 1.9.0

Release notes

Sourced from github.com/envoyproxy/gateway's releases.

v1.9.0

Release Announcement

Check out the v1.9.0 release announcement to learn more about the release.

What's Changed

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 19, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 19, 2026 04:17
@dependabot dependabot Bot added go Pull requests that update Go code dependencies Pull requests that update a dependency file labels Aug 19, 2026
@netlify

netlify Bot commented Aug 19, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for cerulean-figolla-1f9435 ready!

Name Link
🔨 Latest commit 8078d1a
🔍 Latest deploy log https://app.netlify.com/projects/cerulean-figolla-1f9435/deploys/6a87c2d835882b0007aa97d9
😎 Deploy Preview https://deploy-preview-9785--cerulean-figolla-1f9435.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

zhaohuabing
zhaohuabing previously approved these changes Aug 19, 2026
View reviewed changes
zhaohuabing
zhaohuabing previously approved these changes Aug 19, 2026
View reviewed changes
@codecov

codecov Bot commented Aug 19, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 76.31%. Comparing base (d32f282) to head (8078d1a).

Additional details and impacted files 
@@            Coverage Diff             @@
##             main    #9785      +/-   ##
==========================================
- Coverage   76.34%   76.31%   -0.03%     
==========================================
  Files         261      261              
  Lines       44440    44440              
==========================================
- Hits        33929    33916      -13     
- Misses       8270     8282      +12     
- Partials     2241     2242       +1

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@zirain

zirain commented Aug 20, 2026

Copy link
Copy Markdown
Member

/retest

zhaohuabing
zhaohuabing previously approved these changes Aug 20, 2026
View reviewed changes
zirain
zirain previously approved these changes Aug 20, 2026
View reviewed changes
@zirain

zirain commented Aug 21, 2026

Copy link
Copy Markdown
Member

/retest

@zirain

zirain commented Aug 21, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Aug 21, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

dependabot Bot and others added 2 commits August 21, 2026 11:13
@dependabot @zirain
build(deps): bump the gomod group across 8 directories with 6 updates
76c0e60 
Bumps the gomod group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-openapi/validate](https://github.com/go-openapi/validate) | `0.26.2` | `0.26.3` |
| [github.com/replicatedhq/troubleshoot](https://github.com/replicatedhq/troubleshoot) | `0.131.1` | `0.132.0` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.0` |
| google.golang.org/protobuf | `1.36.12-0.20260120151049-f2248ac996af` | `1.36.12` |
| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.21.3` | `3.21.4` |

Bumps the gomod group with 1 update in the /examples/backend-utilization directory: google.golang.org/protobuf.
Bumps the gomod group with 1 update in the /examples/envoy-ext-auth directory: google.golang.org/protobuf.
Bumps the gomod group with 1 update in the /examples/extension-server directory: google.golang.org/protobuf.
Bumps the gomod group with 1 update in the /examples/grpc-ext-proc directory: google.golang.org/protobuf.
Bumps the gomod group with 1 update in the /examples/remote-infra directory: google.golang.org/protobuf.
Bumps the gomod group with 2 updates in the /examples/sds-test-server directory: [github.com/stretchr/testify](https://github.com/stretchr/testify) and google.golang.org/protobuf.
Bumps the gomod group with 1 update in the /examples/simple-extension-server directory: [github.com/envoyproxy/gateway](https://github.com/envoyproxy/gateway).

Updates `github.com/go-openapi/validate` from 0.26.2 to 0.26.3
- [Release notes](https://github.com/go-openapi/validate/releases)
- [Commits](go-openapi/validate@v0.26.2...v0.26.3)

Updates `github.com/replicatedhq/troubleshoot` from 0.131.1 to 0.132.0
- [Release notes](https://github.com/replicatedhq/troubleshoot/releases)
- [Commits](replicatedhq/troubleshoot@v0.131.1...v0.132.0)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.0)

Updates `google.golang.org/protobuf` from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12

Updates `helm.sh/helm/v3` from 3.21.3 to 3.21.4
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.21.3...v3.21.4)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

Updates `google.golang.org/protobuf` from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

Updates `google.golang.org/protobuf` from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.0)

Updates `google.golang.org/protobuf` from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12

Updates `github.com/envoyproxy/gateway` from 1.8.3 to 1.9.0
- [Release notes](https://github.com/envoyproxy/gateway/releases)
- [Commits](v1.8.3...v1.9.0)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/validate
  dependency-version: 0.26.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/replicatedhq/troubleshoot
  dependency-version: 0.132.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.21.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/envoyproxy/gateway
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@zhaohuabing @zirain
chore: tidy generated module files
8078d1a 
Signed-off-by: zhaohuabing <zhaohuabing@gmail.com>
@zirain
zirain dismissed stale reviews from zhaohuabing and themself via 8078d1a August 21, 2026 03:15
@zirain
zirain force-pushed the dependabot/go_modules/gomod-582ed9285a branch from abf93e2 to 8078d1a Compare August 21, 2026 03:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@zirain zirain zirain approved these changes
@zhaohuabing zhaohuabing zhaohuabing left review comments

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@zirain @zhaohuabing