Bump the go-deps group across 1 directory with 16 updates by dependabot[bot] · Pull Request #3884 · google/trillian

dependabot · 2026-05-11T08:59:52Z

Bumps the go-deps group with 8 updates in the / directory:

Package	From	To
cloud.google.com/go/spanner	`1.89.0`	`1.91.0`
github.com/apache/beam/sdks/v2	`2.72.0`	`2.73.0`
github.com/go-sql-driver/mysql	`1.9.3`	`1.10.0`
github.com/lib/pq	`1.12.1`	`1.12.3`
golang.org/x/crypto	`0.49.0`	`0.51.0`
google.golang.org/grpc	`1.80.0`	`1.81.0`
k8s.io/api	`0.35.3`	`0.36.0`
k8s.io/client-go	`0.35.3`	`0.36.0`

Updates cloud.google.com/go/spanner from 1.89.0 to 1.91.0

Commits

4ea7227 chore: librarian release pull request: 20260422T160822Z (#14471)
fbc7217 chore: update sources and regenerate (#14465)
8089b04 fix(bigquery): migrate usages of proto.Clone to proto.CloneOf (#14463)
b60a240 chore: update librarian to v0.10.2-0.20260421180302-dc35d110f9bb (#14464)
4b8c904 feat(firestore): support vector query in transactions (#14460)
8cc6e97 fix(spanner): add endpoint overload cooldown for location-aware routing (#14...
ec7c7d6 fix(storage): Set default chunkRetryDeadline to 32s in NewWriterFromAppendabl...
acbcf76 chore(librarian): update config tools (#14461)
1894ef5 chore(all): update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (...
8939ce1 chore(deps): bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0 in /inter...
Additional commits viewable in compare view

Updates github.com/apache/beam/sdks/v2 from 2.72.0 to 2.73.0

Release notes

Sourced from github.com/apache/beam/sdks/v2's releases.

Beam 2.73.0 release

We are happy to present the new 2.73.0 release of Beam. This release includes both improvements and new functionality. See the download page for this release.

For more information on changes in 2.73.0, check out the detailed release notes.

Highlights

I/Os

DebeziumIO (Java): added OffsetRetainer interface and FileSystemOffsetRetainer implementation to persist and restore CDC offsets across pipeline restarts, and exposed withStartOffset / withOffsetRetainer on DebeziumIO.Read and the cross-language ReadBuilder (#28248).

New Features / Improvements

(Python) Added BigQuery CDC streaming source (#37724)

Added ADKAgentModelHandler for running Google Agent Development Kit (ADK) agents (Python) (#37917).

(Python) Added exception chaining to preserve error context in CloudSQLEnrichmentHandler, processes utilities, and core transforms (#37422).

(Python) Added a pipeline option --experiments=pip_no_build_isolation to disable build isolation when installing dependencies in the runtime environment (#37331).

(Go) Added OrderedListState support to the Go SDK stateful DoFn API (#37629).

Added support for large pipeline options via a file (Python) (#37370).

Supported infer schema from dataclass (Python) (#22085). Default coder for typehint-ed (or set with_output_type) for non-frozen dataclasses changed to RowCoder. To preserve the old behavior (fast primitive coder), explicitly register the type with FastPrimitiveCoder.

Updates minimum Go version to 1.26.1 (#37897).

(Python) Added image embedding support in apache_beam.ml.rag package (#37628).

(Python) Added support for Python version 3.14 (#37247).

Breaking Changes

The Python SDK container's boot.go now passes pipeline options through a file instead of the PIPELINE_OPTIONS environment variable. If a user pairs a new Python SDK container with an older SDK version (which does not support the file-based approach), the pipeline options will not be recognized and the pipeline will fail. Users must ensure their SDK and container versions are synchronized (#37370).

Python DoFn.with_exception_handling now respects user DoFn typehints. This can break update compatibility if coders change. It can also break pipeline compilation if existing typehints are incorrect. To update safely sepcify the pipeline option --update_compatibility_version=2.72.0. To fix typehints replace any incorrect typehints that were previously ignored (#37590)

Bugfixes

Fixed ProcessManager not reaping child processes, causing zombie process accumulation on long-running Flink deployments (Java) (#37930).

Security Fixes

Fixed CVE-2023-46604 (CVSS 10.0) and CVE-2022-41678 by upgrading ActiveMQ from 5.14.5 to 5.19.2 (Java) (#37943).

Fixed CVE-2024-1597, CVE-2022-31197, and CVE-2022-21724 by upgrading PostgreSQL JDBC Driver from 42.2.16 to 42.6.2 (Java) (#37942).

List of Contributors

According to git shortlog, the following people contributed to the 2.73.0 release. Thank you to all contributors!

Abdelrahman Ibrahim, Ahmed Abualsaud, Alex Malao, Alexander Nieuwenhuijse, Andres Tiko, Andrew Crites, Arun Pandian, Bentsi Leviav, Bruno Volpato, Chamikara Jayalath, Chandra Kiran Bolla, Danny McCormick, Deji Ibrahim, Derrick Williams, Elia LIU, Esmelealem, Hannes Gustafsson, Jack McCluskey, Joey Tran, Kenneth Knowles, M Junaid Shaukat, Mansi Singh, Matej Aleksandrov, Mathijs Deelen, Mattie Fu, Praneet Nadella, Radek Stankiewicz, Radosław Stankiewicz, Reuven Lax, RuiLong J., S. Veyrié, Sakthivel Subramanian, Sam Whittle, Shubham Thakur, Shunping Huang, Subramanya V, Tarun Annapareddy, Tobias Kaymak, Valentyn Tymofieiev, Vitaly Terentyev, XQ Hu, Yi Hu, ZIHAN DAI, claudevdm, kishorepola, parveensania

Changelog

Sourced from github.com/apache/beam/sdks/v2's changelog.

[2.73.0] - 2026-04-29

Highlights

I/Os

DebeziumIO (Java): added OffsetRetainer interface and FileSystemOffsetRetainer implementation to persist and restore CDC offsets across pipeline restarts, and exposed withStartOffset / withOffsetRetainer on DebeziumIO.Read and the cross-language ReadBuilder (#28248).

New Features / Improvements

(Python) Added BigQuery CDC streaming source (#37724)

Added ADKAgentModelHandler for running Google Agent Development Kit (ADK) agents (Python) (#37917).

(Python) Added exception chaining to preserve error context in CloudSQLEnrichmentHandler, processes utilities, and core transforms (#37422).

(Python) Added a pipeline option --experiments=pip_no_build_isolation to disable build isolation when installing dependencies in the runtime environment (#37331).

(Go) Added OrderedListState support to the Go SDK stateful DoFn API (#37629).

Added support for large pipeline options via a file (Python) (#37370).

Supported infer schema from dataclass (Python) (#22085). Default coder for typehint-ed (or set with_output_type) for non-frozen dataclasses changed to RowCoder. To preserve the old behavior (fast primitive coder), explicitly register the type with FastPrimitiveCoder.

Updates minimum Go version to 1.26.1 (#37897).

(Python) Added image embedding support in apache_beam.ml.rag package (#37628).

(Python) Added support for Python version 3.14 (#37247).

Breaking Changes

The Python SDK container's boot.go now passes pipeline options through a file instead of the PIPELINE_OPTIONS environment variable. If a user pairs a new Python SDK container with an older SDK version (which does not support the file-based approach), the pipeline options will not be recognized and the pipeline will fail. Users must ensure their SDK and container versions are synchronized (#37370).

Python DoFn.with_exception_handling now respects user DoFn typehints. This can break update compatibility if coders change. It can also break pipeline compilation if existing typehints are incorrect. To update safely sepcify the pipeline option --update_compatibility_version=2.72.0. To fix typehints replace any incorrect typehints that were previously ignored (#37590)

Bugfixes

Fixed ProcessManager not reaping child processes, causing zombie process accumulation on long-running Flink deployments (Java) (#37930).

Security Fixes

Fixed CVE-2023-46604 (CVSS 10.0) and CVE-2022-41678 by upgrading ActiveMQ from 5.14.5 to 5.19.2 (Java) (#37943).

Fixed CVE-2024-1597, CVE-2022-31197, and CVE-2022-21724 by upgrading PostgreSQL JDBC Driver from 42.2.16 to 42.6.2 (Java) (#37942).

Commits

d686c10 Set version for 2.73.0 RC2
181e90b Cherrypick #38132 Retry transient NOT_FOUND on Storage API default stream
bb9baf8 Cherrypick name-mapping fix (#38238)
406455c cherry pick name mapping for AddFiles (#38205)
80bd9f9 Merge pull request #38203 from apache/cp-38191
5142617 CP #38191 Fix Lint PreCommit
b8c2dbf Merge pull request #38190 from apache/forwardRefCherrypick
959c542 Merge pull request #38169 from acrites/cherrypick_pr_38073
1be727f Merge pull request #38181 from apache/cp-38090
35d23a4 Merge pull request #38163 from ahmedabu98/cp_38078
Additional commits viewable in compare view

Updates github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0

Release notes

Sourced from github.com/go-sql-driver/mysql's releases.

v1.10.0

What's Changed

add Go 1.24 to the test matrix by @shogo82148 in go-sql-driver/mysql#1681

modernize for Go 1.22 by @methane in go-sql-driver/mysql#1695

test stability improvement. by @methane in go-sql-driver/mysql#1698

simplify collation tests by @methane in go-sql-driver/mysql#1700

fix bigint unsigned null column scan to err type int64 by @elonnzhang in go-sql-driver/mysql#1612

Transaction Commit/Rollback returns conn's cached error, if present by @brad-defined in go-sql-driver/mysql#1691

add BenchmarkReceive10kRowsCompress by @methane in go-sql-driver/mysql#1704

optimize readPacket by @methane in go-sql-driver/mysql#1705

MariaDB Metadata skipping and DEPRECATE_EOF by @rusher in go-sql-driver/mysql#1708

Optimization: statements reuse previous column name by @methane in go-sql-driver/mysql#1711

update outdated MySQL internals documentation links by @demouth in go-sql-driver/mysql#1714

fix PING on compressed connections by @methane in go-sql-driver/mysql#1721

add DeepWiki badge by @methane in go-sql-driver/mysql#1722

Update edwards25519 dependency to v1.1.1 by @williamhaw in go-sql-driver/mysql#1749

Configure Dependabot for Go modules by @methane in go-sql-driver/mysql#1755

Bump dominikh/staticcheck-action from 1.3.1 to 1.4.1 by @dependabot[bot] in go-sql-driver/mysql#1759

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in go-sql-driver/mysql#1760

Bump actions/setup-go from 5 to 6 by @dependabot[bot] in go-sql-driver/mysql#1757

fix staticcheck error by @methane in go-sql-driver/mysql#1761

Bump actions/checkout from 4 to 6 by @dependabot[bot] in go-sql-driver/mysql#1758

Fix getSystemVar buffer reuse by @morgo in go-sql-driver/mysql#1754

Consolidate Dependabot update noise by grouping weekly dependency PRs by @Copilot in go-sql-driver/mysql#1762

Bump filippo.io/edwards25519 from 1.1.1 to 1.2.0 by @dependabot[bot] in go-sql-driver/mysql#1756

CI: Update GitHub Actions Go matrix to 1.24–1.26 by @Copilot in go-sql-driver/mysql#1763

Enhance interpolateParams to correctly handle placeholders by @rusher in go-sql-driver/mysql#1732

modernize by @methane in go-sql-driver/mysql#1764

release v1.10.0 by @methane in go-sql-driver/mysql#1765

New Contributors

@elonnzhang made their first contribution in go-sql-driver/mysql#1612

@brad-defined made their first contribution in go-sql-driver/mysql#1691

@rusher made their first contribution in go-sql-driver/mysql#1708

@demouth made their first contribution in go-sql-driver/mysql#1714

@williamhaw made their first contribution in go-sql-driver/mysql#1749

@dependabot[bot] made their first contribution in go-sql-driver/mysql#1759

@morgo made their first contribution in go-sql-driver/mysql#1754

@Copilot made their first contribution in go-sql-driver/mysql#1762

Full Changelog: go-sql-driver/mysql@v1.9.2...v1.10.0

Changelog

Sourced from github.com/go-sql-driver/mysql's changelog.

v1.10.0 (2026-04-28)

Fix getSystemVar("max_allowed_packet") potentially returned wrong value. (#1754) This affects only when maxAllowedPacket=0 is set.

Bump filippo.io/edwards25519 from 1.1.1 to 1.2.0. (#1756) While older versions have reported CVEs, they do not affect go-mysql.

Update Go versions to 1.24-1.26. (#1763)

Enhance interpolateParams to correctly handle placeholders. (#1732) The question mark (?) within strings and comments will no longer be treated as a placeholder.

Commits

a065b60 release v1.10.0 (#1765)
09e4187 modernize (#1764)
6c44a9a Enhance interpolateParams to correctly handle placeholders (#1732)
688ce56 Update supported Go version to 1.24–1.26 (#1763)
118d07f Bump filippo.io/edwards25519 from 1.1.1 to 1.2.0 (#1756)
d6b2d3e Consolidate Dependabot update noise by grouping weekly dependency PRs (#1762)
037dfd8 Fix getSystemVar buffer reuse (#1754)
900f330 Bump actions/checkout from 4 to 6 (#1758)
ab9e380 fix staticcheck error (#1761)
f298c66 Bump actions/setup-go from 5 to 6 (#1757)
Additional commits viewable in compare view

Updates github.com/lib/pq from 1.12.1 to 1.12.3

Release notes

Sourced from github.com/lib/pq's releases.

v1.12.3

Send datestyle startup parameter, improving compatbility with database engines that use a different default datestyle such as EnterpriseDB (#1312).

#1312: lib/pq#1312

v1.12.2

Treat io.ErrUnexpectedEOF as driver.ErrBadConn so database/sql discards the connection. Since v1.12.0 this could result in permanently broken connections, especially with CockroachDB which frequently sends partial messages (#1299).

#1299: lib/pq#1299

Changelog

Sourced from github.com/lib/pq's changelog.

v1.12.3 (2026-04-03)

Send datestyle startup parameter, improving compatbility with database engines that use a different default datestyle such as EnterpriseDB (#1312).

#1312: lib/pq#1312

v1.12.2 (2026-04-02)

Treat io.ErrUnexpectedEOF as driver.ErrBadConn so database/sql discards the connection. Since v1.12.0 this could result in permanently broken connections, especially with CockroachDB which frequently sends partial messages (#1299).

#1299: lib/pq#1299

Commits

1f3e3d9 Send datestyle as a startup parameter (#1312)
32ba56b Expand tests for multiple result sets
c2cfac1 Release v1.12.2
859f104 Test CockroachDB
12e464c Allow multiple matches and regexps in pqtest.ErrorContains()
6d77ced Treat io.ErrUnexpectedEOF as driver.ErrBadConn in handleError
71daecb Ensure transactions are closed in pqtest
8f44823 Set PGAPPNAME for tests
4af2196 Fix healthcheck
38a54e4 Split out testdata/init a bit
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.49.0 to 0.51.0

Commits

b8a14a8 go.mod: update golang.org/x dependencies
9d9d507 x509roots/fallback/bundle: fix bundle test with Go 1.27+
fd0b90d acme: include Problem in OrderError.Error
b9e5359 pbkdf2: turn into a wrapper for crypto/pbkdf2
cc0e4fc hkdf: forward Extract to the standard library
a8e9237 x509roots/fallback: update bundle
03ca0dc go.mod: update golang.org/x dependencies
8400f4a ssh: respect signer's algorithm preference in pickSignatureAlgorithm
81c6cb3 ssh: swap cbcMinPaddingSize to cbcMinPacketSize to get encLength
See full diff in compare view

Updates golang.org/x/sys from 0.42.0 to 0.44.0

Commits

fb1facd windows: avoid uint16 overflow in NewNTUnicodeString
94ad893 windows: add GetIfTable2Ex, GetIpInterface{Entry,Table}, GetUnicastIpAddressT...
54fe89f cpu: use IsProcessorFeaturePresent to calculate ARM64 on windows
df7d5d7 unix: automatically remove container created by mkall.sh
68a4a8e unix: avoid nil pointer dereference in Utime
690c91f unix: add CPUSetDynamic for systems with more than 1024 CPUs
f33a730 windows: support nil security descriptor on GetNamedSecurityInfo
493d172 cpu: add runtime import in cpu_darwin_arm64_other.go
2c2be75 windows: use syscall.SyscallN in Proc.Call
a76ec62 cpu: roll back "use IsProcessorFeaturePresent to calculate ARM64 on windows"
See full diff in compare view

Updates golang.org/x/tools from 0.43.0 to 0.44.0

Commits

3dd188d go.mod: update golang.org/x dependencies
aebd870 gopls: improve doc link matching to support links followed by a colon
5357b43 go/analysis/passes/modernize: rangeint: handle type parameter constraints
bf04c61 go/types/internal/play: show normal terms of selected type
0ae2de0 gopls/internal/filecache: cache decoded objects in memCache
8e51a5f go/ssa: support direct references to embedded fields in struct lit
5005b9e internal/gcimporter: rename ureader_yes.go to ureader.go
5ca865b go/types/objectpath: add debugging command
f6476fb internal/gcimporter: consume generic methods in gcimporter
b36d1d1 internal/pkgbits: sync version.go with goroot
Additional commits viewable in compare view

Updates google.golang.org/api from 0.273.1 to 0.274.0

Release notes

Sourced from google.golang.org/api's releases.

v0.274.0

0.274.0 (2026-04-02)

Features

all: Auto-regenerate discovery clients (#3555) (0e634ae)

Changelog

Sourced from google.golang.org/api's changelog.

0.274.0 (2026-04-02)

Features

all: Auto-regenerate discovery clients (#3555) (0e634ae)

Commits

6c759a2 chore(main): release 0.274.0 (#3556)
0e634ae feat(all): auto-regenerate discovery clients (#3555)
0f75259 chore: embargo aiplatform:v1beta1 temporarily (#3554)
See full diff in compare view

Updates google.golang.org/genproto from 0.0.0-20260316180232-0b37fe3546d5 to 0.0.0-20260319201613-d00831a3d3e7

Commits

See full diff in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20260316180232-0b37fe3546d5 to 0.0.0-20260401024825-9d38bb4040a9

Commits

See full diff in compare view

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20260319201613-d00831a3d3e7 to 0.0.0-20260401024825-9d38bb4040a9

Commits

See full diff in compare view

Updates google.golang.org/grpc from 1.80.0 to 1.81.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.0

Behavior Changes

balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#8808)

Dependencies

Minimum supported Go version is now 1.25. (#8969)

Bug Fixes

xds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (#8956)

transport: Send a RST_STREAM when receiving an END_STREAM when the stream is not already half-closed. (#8832)

xds: Fix ADS resource name validation to prevent a panic. (#8970)

New Features

grpc/stats: Add support for custom labels in per-call metrics (gRFC A108). (#9008)

xds: Add support for Server Name Indication (SNI) and SAN validation (gRFC A101). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_SNI=true environment variable. (#9016)

xds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (gRFC A85). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true. (#9005)

xds: Add metrics to track xDS client connectivity and cached resource state (gRFC A78). (#8807)

stats/otel: Enhance grpc.subchannel.disconnections metric by adding disconnection reason to the grpc.disconnect_error label (gRFC A94). This provides granular insights into why subchannels are closing. (#8973)

mem: Add mem.Buffer.Slice() API to slice the buffer like a slice. (#8977)

Special Thanks: @ash2k

Performance Improvements

alts: Pool read buffers to lower memory utilization when sockets are unreadable. (#8964)

transport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false and report any issues. (#9032)

Commits

cb18228 Change version to 1.81.0 (#9062)
96748f9 Cherry-pick #9105 to 1.81.x (#9106)
9183222 Cherry pick #9055, #9032 to v1.81.x (#9095)
5cba6da Revert "deps: update dependencies for all modules (#9065)" (#9067)
af8a936 deps: update dependencies for all modules (#9065)
cdc60df transport: optimize heap allocations in ready reader and update syscall conne...
208d053 xds/resolver: pass complete XDSConfig in RPC context for HTTP filters (gRFC A...
50fe1cc test: Fix flaky test TestServerStreaming_ClientCallRecvMsgTwice in `end2end...
d574bad build(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 (#9050)
b8bf4d0 build(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 in /inte...
Additional commits viewable in compare view

Updates k8s.io/api from 0.35.3 to 0.36.0

Commits

545bb97 Update dependencies to v0.36.0 tag
879d396 Merge remote-tracking branch 'origin/master' into release-1.36
030d81f Update github.com/moby/spdystream from v0.5.0 to v0.5.1
aef6eb6 Add granular authorization for DRA ResourceClaim status updates
91061ea Merge pull request #136589 from tosi3k/preemption-mode
e6b81e2 Add Workload-Aware Preemption fields to Workload and PodGroup APIs
f8fce2e Merge pull request #136989 from nojnhuh/podgroup-resourceclaim
b928f5e Workload API: PodGroup ResourceClaims (KEP-5729)
61bd78e Merge pull request #137190 from everpeace/KEP-5491-alpha
6bf46eb Merge pull request #137028 from nmn3m/feature/dra-resource-pool-status
Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.35.3 to 0.36.0

Commits

debe1eb Update dependencies to v0.36.0 tag
efb7f26 Merge remote-tracking branch 'origin/master' into release-1.36
d966e56 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
79b3632 Merge pull request #137864 from yongruilin/dv-dra-mismatch
a8822f7 Add slice and map union member support with tests
7dba2d0 Use IsZero instead of IsNil for union ratcheting check
d95710f Fix union validation ratcheting when oldObj is nil
729062d Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
13b12e6 dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps
27f4670 Merge pull request #136657 from Jefftree/sharding-test
Additional commits viewable in compare view

Updates k8s.io/client-go from 0.35.3 to 0.36.0

Commits

1d95f02 Update dependencies to v0.36.0 tag
f22a53e Merge remote-tracking branch 'origin/master' into release-1.36
a948641 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
7e44ffc Add Workload-Aware Preemption fields to Workload and PodGroup APIs
df2d882 Merge pull request #136989 from nojnhuh/podgroup-resourceclaim
4eece52 Workload API: PodGroup ResourceClaims (KEP-5729)
3d35c51 Merge pull request #137190 from everpeace/KEP-5491-alpha
0434117 Merge pull request #137028 from nmn3m/feature/dra-resource-pool-status
ba785be Drop CSR analogy, mark ObjectMeta +required,reduce limits (maxItems=500, maxL...
4a9c878 Add ResourcePoolStatusRequest API types and generated code
Additional commits viewable in compare view

Updates k8s.io/utils from 0.0.0-20251002143259-bc988d571ff4 to 0.0.0-20260210185600-b8788abfbbc2

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-deps group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [cloud.google.com/go/spanner](https://github.com/googleapis/google-cloud-go) | `1.89.0` | `1.91.0` | | [github.com/apache/beam/sdks/v2](https://github.com/apache/beam) | `2.72.0` | `2.73.0` | | [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) | `1.9.3` | `1.10.0` | | [github.com/lib/pq](https://github.com/lib/pq) | `1.12.1` | `1.12.3` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.49.0` | `0.51.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.80.0` | `1.81.0` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.35.3` | `0.36.0` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.35.3` | `0.36.0` | Updates `cloud.google.com/go/spanner` from 1.89.0 to 1.91.0 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@spanner/v1.89.0...spanner/v1.91.0) Updates `github.com/apache/beam/sdks/v2` from 2.72.0 to 2.73.0 - [Release notes](https://github.com/apache/beam/releases) - [Changelog](https://github.com/apache/beam/blob/master/CHANGES.md) - [Commits](apache/beam@v2.72.0...v2.73.0) Updates `github.com/go-sql-driver/mysql` from 1.9.3 to 1.10.0 - [Release notes](https://github.com/go-sql-driver/mysql/releases) - [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md) - [Commits](go-sql-driver/mysql@v1.9.3...v1.10.0) Updates `github.com/lib/pq` from 1.12.1 to 1.12.3 - [Release notes](https://github.com/lib/pq/releases) - [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md) - [Commits](lib/pq@v1.12.1...v1.12.3) Updates `golang.org/x/crypto` from 0.49.0 to 0.51.0 - [Commits](golang/crypto@v0.49.0...v0.51.0) Updates `golang.org/x/sys` from 0.42.0 to 0.44.0 - [Commits](golang/sys@v0.42.0...v0.44.0) Updates `golang.org/x/tools` from 0.43.0 to 0.44.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.43.0...v0.44.0) Updates `google.golang.org/api` from 0.273.1 to 0.274.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.273.1...v0.274.0) Updates `google.golang.org/genproto` from 0.0.0-20260316180232-0b37fe3546d5 to 0.0.0-20260319201613-d00831a3d3e7 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260316180232-0b37fe3546d5 to 0.0.0-20260401024825-9d38bb4040a9 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260319201613-d00831a3d3e7 to 0.0.0-20260401024825-9d38bb4040a9 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.80.0 to 1.81.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.80.0...v1.81.0) Updates `k8s.io/api` from 0.35.3 to 0.36.0 - [Commits](kubernetes/api@v0.35.3...v0.36.0) Updates `k8s.io/apimachinery` from 0.35.3 to 0.36.0 - [Commits](kubernetes/apimachinery@v0.35.3...v0.36.0) Updates `k8s.io/client-go` from 0.35.3 to 0.36.0 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.35.3...v0.36.0) Updates `k8s.io/utils` from 0.0.0-20251002143259-bc988d571ff4 to 0.0.0-20260210185600-b8788abfbbc2 - [Commits](https://github.com/kubernetes/utils/commits) --- updated-dependencies: - dependency-name: cloud.google.com/go/spanner dependency-version: 1.91.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/apache/beam/sdks/v2 dependency-version: 2.73.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/go-sql-driver/mysql dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/lib/pq dependency-version: 1.12.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: golang.org/x/crypto dependency-version: 0.51.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/sys dependency-version: 0.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/tools dependency-version: 0.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: google.golang.org/api dependency-version: 0.274.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: google.golang.org/genproto dependency-version: 0.0.0-20260319201613-d00831a3d3e7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20260401024825-9d38bb4040a9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20260401024825-9d38bb4040a9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/grpc dependency-version: 1.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: k8s.io/api dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: k8s.io/apimachinery dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: k8s.io/client-go dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: k8s.io/utils dependency-version: 0.0.0-20260210185600-b8788abfbbc2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dpebot · 2026-05-11T09:00:07Z

/gcbrun

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 11, 2026

dependabot Bot requested a review from a team as a code owner May 11, 2026 08:59

dependabot Bot requested a review from roger2hk May 11, 2026 08:59

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 11, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the go-deps group across 1 directory with 16 updates#3884

Bump the go-deps group across 1 directory with 16 updates#3884
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-deps-6ffc637eb6

dependabot Bot commented on behalf of github May 11, 2026

Uh oh!

dpebot commented May 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github May 11, 2026

Beam 2.73.0 release

Highlights

I/Os

New Features / Improvements

Breaking Changes

Bugfixes

Security Fixes

List of Contributors

[2.73.0] - 2026-04-29

Highlights

I/Os

New Features / Improvements

Breaking Changes

Bugfixes

Security Fixes

v1.10.0

What's Changed

New Contributors

v1.10.0 (2026-04-28)

v1.12.3

v1.12.2

v1.12.3 (2026-04-03)

v1.12.2 (2026-04-02)

v0.274.0

0.274.0 (2026-04-02)

Features

0.274.0 (2026-04-02)

Features

Release 1.81.0

Behavior Changes

Dependencies

Bug Fixes

New Features

Performance Improvements

Uh oh!

dpebot commented May 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant