Bump the go-deps group with 11 updates by dependabot[bot] · Pull Request #3873 · google/trillian

dependabot · 2026-04-02T02:22:14Z

Bumps the go-deps group with 11 updates:

Package	From	To
github.com/apache/beam/sdks/v2	`2.71.0`	`2.72.0`
github.com/letsencrypt/pkcs11key/v4	`4.0.0`	`4.0.1`
github.com/lib/pq	`1.12.0`	`1.12.1`
go.etcd.io/etcd/client/v3	`3.6.9`	`3.6.10`
go.etcd.io/etcd/etcdctl/v3	`3.6.9`	`3.6.10`
go.etcd.io/etcd/server/v3	`3.6.9`	`3.6.10`
go.etcd.io/etcd/v3	`3.6.9`	`3.6.10`
google.golang.org/api	`0.272.0`	`0.273.1`
google.golang.org/genproto	`0.0.0-20260217215200-42d3e9bedb6d`	`0.0.0-20260316180232-0b37fe3546d5`
google.golang.org/genproto/googleapis/rpc	`0.0.0-20260316180232-0b37fe3546d5`	`0.0.0-20260319201613-d00831a3d3e7`
google.golang.org/grpc	`1.79.3`	`1.80.0`

Updates github.com/apache/beam/sdks/v2 from 2.71.0 to 2.72.0

Release notes

Sourced from github.com/apache/beam/sdks/v2's releases.

Beam 2.72.0 release

We are happy to present the new 2.72.0 release of Beam. This release includes both improvements and new functionality. See the download page for this release.

For more information on changes in 2.72.0, check out the detailed release notes.

Highlights

Flink 2.0 support (#36947).

I/Os

Add Datadog IO support (Java) (#37318).

Remove Pubsublite IO support, since service will be deprecated in March 2026. (#37375).

(Java) ClickHouse - migrating from the legacy JDBC driver (v0.6.3) to ClickHouse Java Client v2 (v0.9.6). See the class documentation for migration guide (#37610).

(Java) Upgraded GoogleAdsIO to use GoogleAdsIO API v23 (#37620).

New Features / Improvements

(Python) Added exception chaining to preserve error context in CloudSQLEnrichmentHandler, processes utilities, and core transforms (#37422).

(Python) Added a pipeline option --experiments=pip_no_build_isolation to disable build isolation when installing dependencies in the runtime environment (#37331).

Deprecations

(Python) Removed previously deprecated list_prefix method for filesystem interfaces (#37587).

Bugfixes

Fixed (Yaml) issue with validate compatible method (#37588).

Fixed (Yaml) issue with Create transform dealing with different type elements (#37585).

Security Fixes

Fixed CVE-2024-28397 by switching from js2py to pythonmonkey (Yaml) (#37560).

List of Contributors

According to git shortlog, the following people contributed to the 2.72.0 release. Thank you to all contributors!

Abdelrahman Ibrahim, Ahmed Abualsaud, Andrew Crites, Arun Pandian, Ben Feinstein, Bentsi Leviav, Celeste Zeng, Danny McCormick, Danny Mccormick, Derrick Williams, Elia LIU, Ganesh, Jack McCluskey, Kenneth Knowles, Labesse Kévin, M Junaid Shaukat, Mansi Singh, Mattie Fu, Nayan Mathur, Pablo Estrada, Pirzada Ahmad Faraz, Radek Stankiewicz, Radosław Stankiewicz, Robert Bradshaw, Rohan Sah, RuiLong J., Sakthivel Subramanian, Sam Whittle, Shaheer Amjad, Shunping Huang, Steven van Rossum, Tarun Annapareddy, Tobias Kaymak, Valentyn Tymofieiev, Vitaly Terentyev, Yi Hu, XQ Hu, ZIHAN DAI, apanich, chenxuesdu, claudevdm, franzonia137

Changelog

Sourced from github.com/apache/beam/sdks/v2's changelog.

[2.72.0] - 2026-03-30

Highlights

Flink 2.0 support (#36947).

I/Os

Add Datadog IO support (Java) (#37318).

Remove Pubsublite IO support, since service will be deprecated in March 2026. (#37375).

(Java) ClickHouse - migrating from the legacy JDBC driver (v0.6.3) to ClickHouse Java Client v2 (v0.9.6). See the class documentation for migration guide (#37610).

(Java) Upgraded GoogleAdsIO to use GoogleAdsIO API v23 (#37620).

(Java) Added support for withMinRowCountForPageSizeCheck to ParquetIO.Sink to avoid OOM when writing large columns (#37740).

New Features / Improvements

(Python) Added exception chaining to preserve error context in CloudSQLEnrichmentHandler, processes utilities, and core transforms (#37422).

(Python) Added a pipeline option --experiments=pip_no_build_isolation to disable build isolation when installing dependencies in the runtime environment (#37331).

(Python) Added support for tagged output typehints (#37434).

Deprecations

(Python) Removed previously deprecated list_prefix method for filesystem interfaces (#37587).

Bugfixes

Fixed (Yaml) issue with validate compatible method (#37588).

Fixed (Yaml) issue with Create transform dealing with different type elements (#37585).

Security Fixes

Fixed CVE-2024-28397 by switching from js2py to pythonmonkey (Yaml) (#37560).

Commits

e6351df Set version for 2.72.0 RC5
19a220d Merge pull request #37935 from apache/cp-37927
d66713f Merge pull request #37934 from apache/cp-37924
cf88d3f Cherrypick #37927
a2536ab Cherrypick #37924
2073109 Merge pull request #37921 from apache/cp-37920
bc39f36 Cherrypick #37920
9943971 Merge pull request #37919 from Abacn/cp-37918
9fc8a13 Sync clickhouse resource manager client version with IO
1c24558 Cherrypick #37871 (#37895)
Additional commits viewable in compare view

Updates github.com/letsencrypt/pkcs11key/v4 from 4.0.0 to 4.0.1

Commits

13356fb deps: update to miekg/pkcs11@v1.1.2 (#44)
aa48317 Update GitHub Actions (#41)
bcbf5f6 Remove v2 code (#39)
879185e Test against a matrix of golang versions and update various actions versions ...
e056fee Switch to GitHub Actions workflow for test (#32)
0860704 Add comment about finding private key by pubkey. (#29)
See full diff in compare view

Updates github.com/lib/pq from 1.12.0 to 1.12.1

Release notes

Sourced from github.com/lib/pq's releases.

v1.12.1

Look for pgpass file in ~/.pgpass instead of ~/.postgresql/pgpass (#1300).

Don't clear password if directly set on pq.Config (#1302).

#1300: lib/pq#1300 #1302: lib/pq#1302

Changelog

Sourced from github.com/lib/pq's changelog.

v1.12.1 (2026-03-30)

Look for pgpass file in ~/.pgpass instead of ~/.postgresql/pgpass (#1300).

Don't clear password if directly set on pq.Config (#1302).

#1300: lib/pq#1300 #1302: lib/pq#1302

Commits

1464d69 Release v1.12.1
5a64c11 Fix fromDSN() doc comment
7f79f1b Fix trailing quote in fromDSN() error message
e0a292e Don't clear password if directly set on pq.Config
ce3c881 Use correct location for default ~/.pgpass location
See full diff in compare view

Updates go.etcd.io/etcd/client/v3 from 3.6.9 to 3.6.10

Release notes

Sourced from go.etcd.io/etcd/client/v3's releases.

v3.6.10

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux

ETCD_VER=v3.6.10
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)

ETCD_VER=v3.6.10
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits

db8d13a version: bump up to 3.6.10
83bb20d Merge pull request #21549 from etcd-io/cherry-pick-36/allow-non-admin-user-to...
c99cf0c etcdserver: allow non-admin to fetch member list and alarms
8a1830c Merge pull request #21530 from k8s-infra-cherrypick-robot/cherry-pick-21528-t...
e841e10 Merge pull request #21531 from ahrtr/20260327_dep
f2173cd Bump golang.org/x/image to v0.38.0 to resolve GO-2026-4815
e0f7af4 Fix etcdctl endpoint command with option --cluster when auth is enabled
See full diff in compare view

Updates go.etcd.io/etcd/etcdctl/v3 from 3.6.9 to 3.6.10

Release notes

Sourced from go.etcd.io/etcd/etcdctl/v3's releases.

v3.6.10

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux

ETCD_VER=v3.6.10
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)

ETCD_VER=v3.6.10
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits

db8d13a version: bump up to 3.6.10
83bb20d Merge pull request #21549 from etcd-io/cherry-pick-36/allow-non-admin-user-to...
c99cf0c etcdserver: allow non-admin to fetch member list and alarms
8a1830c Merge pull request #21530 from k8s-infra-cherrypick-robot/cherry-pick-21528-t...
e841e10 Merge pull request #21531 from ahrtr/20260327_dep
f2173cd Bump golang.org/x/image to v0.38.0 to resolve GO-2026-4815
e0f7af4 Fix etcdctl endpoint command with option --cluster when auth is enabled
See full diff in compare view

Updates go.etcd.io/etcd/server/v3 from 3.6.9 to 3.6.10

Release notes

Sourced from go.etcd.io/etcd/server/v3's releases.

v3.6.10

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux

ETCD_VER=v3.6.10
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)

ETCD_VER=v3.6.10
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits

db8d13a version: bump up to 3.6.10
83bb20d Merge pull request #21549 from etcd-io/cherry-pick-36/allow-non-admin-user-to...
c99cf0c etcdserver: allow non-admin to fetch member list and alarms
8a1830c Merge pull request #21530 from k8s-infra-cherrypick-robot/cherry-pick-21528-t...
e841e10 Merge pull request #21531 from ahrtr/20260327_dep
f2173cd Bump golang.org/x/image to v0.38.0 to resolve GO-2026-4815
e0f7af4 Fix etcdctl endpoint command with option --cluster when auth is enabled
See full diff in compare view

Updates go.etcd.io/etcd/v3 from 3.6.9 to 3.6.10

Release notes

Sourced from go.etcd.io/etcd/v3's releases.

v3.6.10

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux

ETCD_VER=v3.6.10
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)

ETCD_VER=v3.6.10
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits

db8d13a version: bump up to 3.6.10
83bb20d Merge pull request #21549 from etcd-io/cherry-pick-36/allow-non-admin-user-to...
c99cf0c etcdserver: allow non-admin to fetch member list and alarms
8a1830c Merge pull request #21530 from k8s-infra-cherrypick-robot/cherry-pick-21528-t...
e841e10 Merge pull request #21531 from ahrtr/20260327_dep
f2173cd Bump golang.org/x/image to v0.38.0 to resolve GO-2026-4815
e0f7af4 Fix etcdctl endpoint command with option --cluster when auth is enabled
See full diff in compare view

Updates google.golang.org/api from 0.272.0 to 0.273.1

Release notes

Sourced from google.golang.org/api's releases.

v0.273.1

0.273.1 (2026-03-31)

Bug Fixes

Merge duplicate x-goog-request-params header (#3547) (2008108)

v0.273.0

0.273.0 (2026-03-23)

Features

all: Auto-regenerate discovery clients (#3542) (a4b4711)

all: Auto-regenerate discovery clients (#3546) (0cacfa8)

Changelog

Sourced from google.golang.org/api's changelog.

0.273.1 (2026-03-31)

Bug Fixes

Merge duplicate x-goog-request-params header (#3547) (2008108)

0.273.0 (2026-03-23)

Features

all: Auto-regenerate discovery clients (#3542) (a4b4711)

all: Auto-regenerate discovery clients (#3546) (0cacfa8)

Commits

550f00c chore(main): release 0.273.1 (#3551)
da01f6a chore(deps): bump github.com/go-git/go-git/v5 (#3552)
2008108 fix: merge duplicate x-goog-request-params header (#3547)
2e86962 chore(main): release 0.273.0 (#3545)
50ea74c chore(google-api-go-generator): restore aiplatform:v1beta1 (#3549)
0cacfa8 feat(all): auto-regenerate discovery clients (#3546)
d38a129 chore(all): update all (#3548)
a4b4711 feat(all): auto-regenerate discovery clients (#3542)
67cf706 chore(all): update module google.golang.org/grpc to v1.79.3 [SECURITY] (#3544)
See full diff in compare view

Updates google.golang.org/genproto from 0.0.0-20260217215200-42d3e9bedb6d to 0.0.0-20260316180232-0b37fe3546d5

Commits

See full diff in compare view

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20260316180232-0b37fe3546d5 to 0.0.0-20260319201613-d00831a3d3e7

Commits

See full diff in compare view

Updates google.golang.org/grpc from 1.79.3 to 1.80.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.80.0

Behavior Changes

balancer: log a warning if a balancer is registered with uppercase letters, as balancer names should be lowercase. In a future release, balancer names will be treated as case-insensitive; see #5288 for details. (#8837)

xds: update resource error handling and re-resolution logic (#8907)

Re-resolve all LOGICAL_DNS clusters simultaneously when re-resolution is requested.

Fail all in-flight RPCs immediately upon receipt of listener or route resource errors, instead of allowing them to complete.

Bug Fixes

xds: support the LB policy configured in LOGICAL_DNS cluster resources instead of defaulting to pick_first. (#8733)

credentials/tls: perform per-RPC authority validation against the leaf certificate instead of the entire peer certificate chain. (#8831)

xds: enabling A76 ring hash endpoint keys no longer causes EDS resources with invalid proxy metadata to be NACKed when HTTP CONNECT (gRFC A86) is disabled. (#8875)

xds: validate that the sum of endpoint weights in a locality does not exceed the maximum uint32 value. (#8899)

Special Thanks: @RAVEYUS

xds: fix incorrect proto field access in the weighted round robin (WRR) configuration where blackout_period was used instead of weight_expiration_period. (#8915)

Special Thanks: @gregbarasch

xds/rbac: handle addresses with ports in IP matchers. (#8990)

New Features

ringhash: enable gRFC A76 (endpoint hash keys and request hash headers) by default. (#8922)

Performance Improvements

credentials/alts: pool write buffers to reduce memory allocations and usage. (#8919)

grpc: enable the use of pooled write buffers for buffering HTTP/2 frame writes by default. This reduces memory usage when connections are idle. Use the WithSharedWriteBuffer dial option or the SharedWriteBuffer server option to disable this feature. (#8957)

xds/priority: stop caching child LB policies removed from the configuration. This will help reduce memory and cpu usage when localities are constantly switching between priorities. (#8997)

mem: add a faster tiered buffer pool; use the experimental mem.NewBinaryTieredBufferPool function to create such pools. (#8775)

Commits

397e45e Change version to 1.80.0 (#8948)
64ebf0a Cherry-pick #8997 to v1.80.x (#9027)
e45ed24 xds/rbac: add additional handling for addresses with ports (#8990) (#9022)
c78d26e Cherry-pick #8957 to v1.80.x (#9007)
bd7cd3c grpc: enforce strict path checking for incoming requests on the server (#8987)
b6597b3 xds/clusterimpl: use xdsConfig for updates and remove redundant fields from L...
1d4fa8a xds: change cdsbalancer to use update from dependency manager (#8907)
8f47d36 attributes: Replace internal map with linked list (#8933)
22e1ee8 xds: add panic recovery in xdsclient resource unmarshalling. (#8895)
7136e99 credentials/alts: Pool write buffers (#8919)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-deps group with 11 updates: | Package | From | To | | --- | --- | --- | | [github.com/apache/beam/sdks/v2](https://github.com/apache/beam) | `2.71.0` | `2.72.0` | | [github.com/letsencrypt/pkcs11key/v4](https://github.com/letsencrypt/pkcs11key) | `4.0.0` | `4.0.1` | | [github.com/lib/pq](https://github.com/lib/pq) | `1.12.0` | `1.12.1` | | [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) | `3.6.9` | `3.6.10` | | [go.etcd.io/etcd/etcdctl/v3](https://github.com/etcd-io/etcd) | `3.6.9` | `3.6.10` | | [go.etcd.io/etcd/server/v3](https://github.com/etcd-io/etcd) | `3.6.9` | `3.6.10` | | [go.etcd.io/etcd/v3](https://github.com/etcd-io/etcd) | `3.6.9` | `3.6.10` | | [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.272.0` | `0.273.1` | | [google.golang.org/genproto](https://github.com/googleapis/go-genproto) | `0.0.0-20260217215200-42d3e9bedb6d` | `0.0.0-20260316180232-0b37fe3546d5` | | [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20260316180232-0b37fe3546d5` | `0.0.0-20260319201613-d00831a3d3e7` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.79.3` | `1.80.0` | Updates `github.com/apache/beam/sdks/v2` from 2.71.0 to 2.72.0 - [Release notes](https://github.com/apache/beam/releases) - [Changelog](https://github.com/apache/beam/blob/master/CHANGES.md) - [Commits](apache/beam@v2.71.0...v2.72.0) Updates `github.com/letsencrypt/pkcs11key/v4` from 4.0.0 to 4.0.1 - [Commits](letsencrypt/pkcs11key@v4.0.0...v4.0.1) Updates `github.com/lib/pq` from 1.12.0 to 1.12.1 - [Release notes](https://github.com/lib/pq/releases) - [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md) - [Commits](lib/pq@v1.12.0...v1.12.1) Updates `go.etcd.io/etcd/client/v3` from 3.6.9 to 3.6.10 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.9...v3.6.10) Updates `go.etcd.io/etcd/etcdctl/v3` from 3.6.9 to 3.6.10 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.9...v3.6.10) Updates `go.etcd.io/etcd/server/v3` from 3.6.9 to 3.6.10 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.9...v3.6.10) Updates `go.etcd.io/etcd/v3` from 3.6.9 to 3.6.10 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.9...v3.6.10) Updates `google.golang.org/api` from 0.272.0 to 0.273.1 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.272.0...v0.273.1) Updates `google.golang.org/genproto` from 0.0.0-20260217215200-42d3e9bedb6d to 0.0.0-20260316180232-0b37fe3546d5 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260316180232-0b37fe3546d5 to 0.0.0-20260319201613-d00831a3d3e7 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.79.3 to 1.80.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.79.3...v1.80.0) --- updated-dependencies: - dependency-name: github.com/apache/beam/sdks/v2 dependency-version: 2.72.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/letsencrypt/pkcs11key/v4 dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/lib/pq dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: go.etcd.io/etcd/client/v3 dependency-version: 3.6.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: go.etcd.io/etcd/etcdctl/v3 dependency-version: 3.6.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: go.etcd.io/etcd/server/v3 dependency-version: 3.6.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: go.etcd.io/etcd/v3 dependency-version: 3.6.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/api dependency-version: 0.273.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: google.golang.org/genproto dependency-version: 0.0.0-20260316180232-0b37fe3546d5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20260319201613-d00831a3d3e7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/grpc dependency-version: 1.80.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dpebot · 2026-04-02T02:22:26Z

/gcbrun

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 2, 2026

dependabot Bot requested a review from a team as a code owner April 2, 2026 02:22

dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 2, 2026

dependabot Bot requested a review from mhutchinson April 2, 2026 02:22

dependabot Bot added the go Pull requests that update Go code label Apr 2, 2026

roger2hk approved these changes Apr 2, 2026

View reviewed changes

roger2hk merged commit 591494a into master Apr 2, 2026
15 checks passed

roger2hk deleted the dependabot/go_modules/go-deps-45f48769ef branch April 2, 2026 09:17

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the go-deps group with 11 updates#3873

Bump the go-deps group with 11 updates#3873
roger2hk merged 1 commit into
masterfrom
dependabot/go_modules/go-deps-45f48769ef

dependabot Bot commented on behalf of github Apr 2, 2026

Uh oh!

dpebot commented Apr 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Apr 2, 2026

Beam 2.72.0 release

Highlights

I/Os

New Features / Improvements

Deprecations

Bugfixes

Security Fixes

List of Contributors

[2.72.0] - 2026-03-30

Highlights

I/Os

New Features / Improvements

Deprecations

Bugfixes

Security Fixes

v1.12.1

v1.12.1 (2026-03-30)

v3.6.10

Linux

macOS (Darwin)

v3.6.10

Linux

macOS (Darwin)

v3.6.10

Linux

macOS (Darwin)

v3.6.10

Linux

macOS (Darwin)

v0.273.1

0.273.1 (2026-03-31)

Bug Fixes

v0.273.0

0.273.0 (2026-03-23)

Features

0.273.1 (2026-03-31)

Bug Fixes

0.273.0 (2026-03-23)

Features

Release 1.80.0

Behavior Changes

Bug Fixes

New Features

Performance Improvements

Uh oh!

dpebot commented Apr 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants