Bump the go-dependencies group across 1 directory with 10 updates #48

dependabot · 2026-01-12T17:33:10Z

Bumps the go-dependencies group with 8 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go-v2	`1.41.0`	`1.41.1`
github.com/aws/aws-sdk-go-v2/config	`1.32.5`	`1.32.7`
github.com/aws/aws-sdk-go-v2/service/cognitoidentity	`1.33.16`	`1.33.17`
github.com/aws/aws-sdk-go-v2/service/cognitoidentityprovider	`1.57.17`	`1.57.18`
github.com/aws/aws-sdk-go-v2/service/ecr	`1.54.4`	`1.55.1`
github.com/moby/go-archive	`0.1.0`	`0.2.0`
golang.org/x/crypto	`0.46.0`	`0.47.0`
google.golang.org/grpc	`1.77.0`	`1.78.0`

Updates github.com/aws/aws-sdk-go-v2 from 1.41.0 to 1.41.1

Commits

dcbed91 Release 2026-01-09
08120e8 Regenerated Clients
1d7a925 Update endpoints model
482067d Update API model
4662404 remove example (#3282)
c28a6f4 Release 2026-01-07
2fa7a72 Regenerated Clients
077cbaa Update endpoints model
3282dbc Update API model
3daa74a Release 2026-01-06
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.5 to 1.32.7

Commits

5a96470 Release 2024-12-19
653aa80 Regenerated Clients
d02b239 Update endpoints model
698d709 Update API model
885de40 Fix improper use of Printf-style functions (#2934)
858298a Release 2024-12-18
f58264a Regenerated Clients
df31082 Update endpoints model
346690e Update API model
4515454 Release 2024-12-17
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.5 to 1.19.7

Commits

e2e9697 Release 2025-01-31
6576a09 Regenerated Clients
f762573 Update API model
c94df29 add transfer manager doc header (#2990)
880543c revert the revert on the transfer manager beta (#2993)
8da49e5 switch to code-generated waiters for remaining services (#2994)
c7c6865 Release 2025-01-30
70f736c Regenerated Clients
28731c2 Update endpoints model
3505e4b Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/cognitoidentity from 1.33.16 to 1.33.17

Commits

e2e9697 Release 2025-01-31
6576a09 Regenerated Clients
f762573 Update API model
c94df29 add transfer manager doc header (#2990)
880543c revert the revert on the transfer manager beta (#2993)
8da49e5 switch to code-generated waiters for remaining services (#2994)
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/service/cognitoidentityprovider from 1.57.17 to 1.57.18

Commits

dcbed91 Release 2026-01-09
08120e8 Regenerated Clients
1d7a925 Update endpoints model
482067d Update API model
4662404 remove example (#3282)
c28a6f4 Release 2026-01-07
2fa7a72 Regenerated Clients
077cbaa Update endpoints model
3282dbc Update API model
3daa74a Release 2026-01-06
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.54.4 to 1.55.1

Commits

d872461 Release 2024-06-07
dd82156 Regenerated Clients
85ebac0 Update endpoints model
490e6cb Update API model
4892b05 Merge pull request #2668 from aws/feature-clock-skew
8bdbe6a Merge branch 'main' into feature-clock-skew
c4f8ba3 run goimports
2474a05 update snapshot tests
9fa716b regen clients
6d365fb address feedback from pr, mostly moving things around
Additional commits viewable in compare view

Updates github.com/moby/go-archive from 0.1.0 to 0.2.0

Release notes

Sourced from github.com/moby/go-archive's releases.

v0.2.0

What's Changed

remove aliases for deprecated types and functions moby/go-archive#10

chrootarchive: remove redundant "init" mitigation for CVE-2019-14271 moby/go-archive#11

xattr: Fix OS matching moby/go-archive#20

TestOverlayTarUntar: remove redundant cmpopts.EquateEmpty moby/go-archive#9

go.mod: bump github.com/klauspost/compress v1.18.2 moby/go-archive#19

gha: update actions moby/go-archive#18

Full Changelog: moby/go-archive@v0.1.0...v0.2.0

Commits

263611f Merge pull request #20 from thaJeztah/carry_17
a1d4e73 Merge pull request #18 from thaJeztah/bump_gha
da4e566 xattr: Fix OS matching.
df87f45 Merge pull request #19 from thaJeztah/bump_deps
8996f22 gha: update CodeQL Action to v4
985c60f gha: codeql: use go stable
4752b25 gha: update actions/setup-go@v6
280f775 gha: update actions/checkout@v6
4c912d3 gha: update golangci/golangci-lint-action@v9
2cd730e go.mod: bump github.com/klauspost/compress v1.18.2
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.46.0 to 0.47.0

Commits

506e022 go.mod: update golang.org/x dependencies
7dacc38 chacha20poly1305: error out in fips140=only mode
See full diff in compare view

Updates golang.org/x/term from 0.38.0 to 0.39.0

Commits

a7e5b04 go.mod: update golang.org/x dependencies
943f25d x/term: handle transpose
9b991dd x/term: handle delete key
See full diff in compare view

Updates google.golang.org/grpc from 1.77.0 to 1.78.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.78.0

Behavior Changes

client: Align URL validation with Go 1.26+ to now reject target URLs with unbracketed colons in the hostname. (#8716)

Special Thanks: @neild

transport/client : Return status code Unknown on malformed grpc-status. (#8735)

xds/resolver:

Drop previous route resources and report an error when no matching virtual host is found.

Only log LDS/RDS configuration errors following a successful update and retain the last valid resource to prevent transient failures. (#8711)

New Features

stats/otel: Add backend service label to weighted round robin metrics as part of A89. (#8737)

stats/otel: Add subchannel metrics (without the disconnection reason) to eventually replace the pickfirst metrics. (#8738)

client: Wait for all pending goroutines to complete when closing a graceful switch balancer. (#8746)

Special Thanks: @twz123

client: Add experimental.AcceptCompressors so callers can restrict the grpc-accept-encoding header advertised for a call. (#8718)

Special Thanks: @iblancasa

Bug Fixes

xds: Fix a bug in StringMatcher where regexes would match incorrectly when ignore_case is set to true. (#8723)

client:

Change connectivity state to CONNECTING when creating the name resolver (as part of exiting IDLE).

Change connectivity state to TRANSIENT_FAILURE if name resolver creation fails (as part of exiting IDLE).

Change connectivity state to IDLE after idle timeout expires even when current state is TRANSIENT_FAILURE.

Fix a bug that resulted in OnFinish call option not being invoked for RPCs where stream creation failed. (#8710)

xdsclient: Fix a race in the xdsClient that could lead to resource-not-found errors. (#8627)

Performance Improvements

mem: Round up to nearest 4KiB for pool allocations larger than 1MiB. (#8705)

Special Thanks: @cjc25

Commits

9df039e Change version to 1.78.0 (#8761)
9b990b6 gracefulswitch: Wait for all goroutines on close (#8746)
6677d9a xds: Fixing a typo (#8760)
d35cedd xds/resolver: pass route's auto_host_rewrite to LB picker (gRFC A81) (#8740)
d931fdc client: allow overriding grpc-accept-encoding header (#8718)
0800ec7 xds/clusterimpl: update TestChildPolicyChangeOnConfigUpdate to use custom lb ...
6553ea1 stats/otel: Add subchannel metrics (A94) (#8738)
81a00ce grpc: Fixing spelling typo (#8756)
e413838 client: Change connectivity state to CONNECTING when creating the name resolv...
f9d2bdb stats/otel: Add grpc.lb.backend_service label to wrr metrics (A89) (#8737)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.0` | `1.41.1` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.5` | `1.32.7` | | [github.com/aws/aws-sdk-go-v2/service/cognitoidentity](https://github.com/aws/aws-sdk-go-v2) | `1.33.16` | `1.33.17` | | [github.com/aws/aws-sdk-go-v2/service/cognitoidentityprovider](https://github.com/aws/aws-sdk-go-v2) | `1.57.17` | `1.57.18` | | [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.54.4` | `1.55.1` | | [github.com/moby/go-archive](https://github.com/moby/go-archive) | `0.1.0` | `0.2.0` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.46.0` | `0.47.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.77.0` | `1.78.0` | Updates `github.com/aws/aws-sdk-go-v2` from 1.41.0 to 1.41.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@v1.41.0...v1.41.1) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.5 to 1.32.7 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@v1.32.5...v1.32.7) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.5 to 1.19.7 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/m2/v1.19.5...service/m2/v1.19.7) Updates `github.com/aws/aws-sdk-go-v2/service/cognitoidentity` from 1.33.16 to 1.33.17 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/sns/v1.33.16...service/sns/v1.33.17) Updates `github.com/aws/aws-sdk-go-v2/service/cognitoidentityprovider` from 1.57.17 to 1.57.18 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/cognitoidentityprovider/v1.57.17...service/cognitoidentityprovider/v1.57.18) Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.54.4 to 1.55.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.54.4...service/s3/v1.55.1) Updates `github.com/moby/go-archive` from 0.1.0 to 0.2.0 - [Release notes](https://github.com/moby/go-archive/releases) - [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go) - [Commits](moby/go-archive@v0.1.0...v0.2.0) Updates `golang.org/x/crypto` from 0.46.0 to 0.47.0 - [Commits](golang/crypto@v0.46.0...v0.47.0) Updates `golang.org/x/term` from 0.38.0 to 0.39.0 - [Commits](golang/term@v0.38.0...v0.39.0) Updates `google.golang.org/grpc` from 1.77.0 to 1.78.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.77.0...v1.78.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.41.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.19.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/cognitoidentity dependency-version: 1.33.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/cognitoidentityprovider dependency-version: 1.57.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr dependency-version: 1.55.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/moby/go-archive dependency-version: 0.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/crypto dependency-version: 0.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/term dependency-version: 0.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: google.golang.org/grpc dependency-version: 1.78.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jan 12, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the go-dependencies group across 1 directory with 10 updates #48

Bump the go-dependencies group across 1 directory with 10 updates #48

Uh oh!

dependabot bot commented on behalf of github Jan 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the go-dependencies group across 1 directory with 10 updates #48

Are you sure you want to change the base?

Bump the go-dependencies group across 1 directory with 10 updates #48

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 12, 2026

v0.2.0

What's Changed

Release 1.78.0

Behavior Changes

New Features

Bug Fixes

Performance Improvements

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant