chores: bump the go-modules group with 16 updates by dependabot[bot] · Pull Request #288 · ClickHouse/clickhouse-operator

dependabot · 2026-08-11T13:58:13Z

Bumps the go-modules group with 16 updates:

Package	From	To
github.com/ClickHouse/clickhouse-go/v2	`2.47.0`	`2.48.0`
github.com/testcontainers/testcontainers-go	`0.43.0`	`0.44.0`
github.com/google/cel-go	`0.30.0`	`0.31.0`
github.com/grpc-ecosystem/grpc-gateway/v2	`2.29.0`	`2.30.0`
github.com/klauspost/compress	`1.19.1`	`1.19.2`
github.com/moby/go-archive	`0.3.2`	`0.3.3`
github.com/pierrec/lz4/v4	`4.1.27`	`4.1.28`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	`0.69.0`	`0.70.0`
go.opentelemetry.io/otel	`1.44.0`	`1.45.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace	`1.44.0`	`1.45.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	`1.44.0`	`1.45.0`
go.opentelemetry.io/otel/metric	`1.44.0`	`1.45.0`
go.opentelemetry.io/otel/sdk	`1.44.0`	`1.45.0`
go.opentelemetry.io/otel/trace	`1.44.0`	`1.45.0`
google.golang.org/genproto/googleapis/api	`0.0.0-20260720211330-0afa2a65878a`	`0.0.0-20260803160001-6ac0973c030d`
google.golang.org/genproto/googleapis/rpc	`0.0.0-20260720211330-0afa2a65878a`	`0.0.0-20260803160001-6ac0973c030d`

Updates github.com/ClickHouse/clickhouse-go/v2 from 2.47.0 to 2.48.0

Release notes

Sourced from github.com/ClickHouse/clickhouse-go/v2's releases.

v2.48.0

What's Changed

Enhancements 🚀

fix: bind float params as typed Float literals (#1862) by @arpitjain099 in ClickHouse/clickhouse-go#1894

fix: make format time helpers fully timezone aware by @kavirajk in ClickHouse/clickhouse-go#1904

ci: add StressHouse PR-vs-main benchmark workflow by @alex-clickhouse in ClickHouse/clickhouse-go#1912

feat: support structured Exception for HTTP protocol by @kavirajk in ClickHouse/clickhouse-go#1910

feat: support arbitrary input/output formats (experimental, HTTP only). breaking change if you depend on driver.Conn interface. By @kavirajk in ClickHouse/clickhouse-go#1928

Bug fixes 🐛

fix: render bool query parameters as true/false (Array(Bool)) by @polyglotAI-bot in ClickHouse/clickhouse-go#1892

fix: escaping for string keys in Map parameter binding by @destinyoooo in ClickHouse/clickhouse-go#1897

chore: fix the formatValue helper for complex types by @kavirajk in ClickHouse/clickhouse-go#1899

fix: gurantee datetime string format in JSON by @kavirajk in ClickHouse/clickhouse-go#1907

fix: use atomic.Int64 for clickhouse.connID (386 alignment) by @forkwhileant in ClickHouse/clickhouse-go#1905

fix(resources): simplify minimum server version check by @the-onewho-knocks in ClickHouse/clickhouse-go#1902

fix: preserve per-query JWT in QueryOptions.clone() by @AndreZiviani in ClickHouse/clickhouse-go#1914

Remove stray HTTP compression debug output by @fallintoplace in ClickHouse/clickhouse-go#1937

fix: return errors when scanning Tuple maps by @fallintoplace in ClickHouse/clickhouse-go#1944

Other Changes 🛠

chore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by @dependabot[bot] in ClickHouse/clickhouse-go#1893

chore: refactor agent SKILL for code review by @kavirajk in ClickHouse/clickhouse-go#1880

Add Code of Conduct by @laeg in ClickHouse/clickhouse-go#1900

chore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by @dependabot[bot] in ClickHouse/clickhouse-go#1903

chore: correct permission to resolve review comment by @kavirajk in ClickHouse/clickhouse-go#1906

docs(agent instructions): integration-test hygiene conventions by @polyglotAI-bot in ClickHouse/clickhouse-go#1911

chore: refresh CI ClickHouse server version matrix by @polyglotAI-bot in ClickHouse/clickhouse-go#1931

docs: fix Enum8/Enum16 type mappings in TYPES.md by @sankalpsthakur in ClickHouse/clickhouse-go#1930

chore(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1 by @dependabot[bot] in ClickHouse/clickhouse-go#1935

chore(deps): bump github.com/ClickHouse/ch-go from 0.73.0 to 0.74.0 by @dependabot[bot] in ClickHouse/clickhouse-go#1939

use fable for code review by @mshustov in ClickHouse/clickhouse-go#1947

perf: make safeLen() linear runtime in exception parser by @kavirajk in ClickHouse/clickhouse-go#1949

New Contributors

@arpitjain099 made their first contribution in ClickHouse/clickhouse-go#1894

@destinyoooo made their first contribution in ClickHouse/clickhouse-go#1897

@laeg made their first contribution in ClickHouse/clickhouse-go#1900

@forkwhileant made their first contribution in ClickHouse/clickhouse-go#1905

@the-onewho-knocks made their first contribution in ClickHouse/clickhouse-go#1902

@AndreZiviani made their first contribution in ClickHouse/clickhouse-go#1914

@sankalpsthakur made their first contribution in ClickHouse/clickhouse-go#1930

@fallintoplace made their first contribution in ClickHouse/clickhouse-go#1937

Full Changelog: ClickHouse/clickhouse-go@v2.47.0...v2.48.0

Changelog

Sourced from github.com/ClickHouse/clickhouse-go/v2's changelog.

v2.48.0, 2026-08-04

What's Changed

Enhancements 🚀

fix: bind float params as typed Float literals (#1862) by @arpitjain099 in ClickHouse/clickhouse-go#1894

fix: make format time helpers fully timezone aware by @kavirajk in ClickHouse/clickhouse-go#1904

ci: add StressHouse PR-vs-main benchmark workflow by @alex-clickhouse in ClickHouse/clickhouse-go#1912

feat: support structured Exception for HTTP protocol by @kavirajk in ClickHouse/clickhouse-go#1910

feat: support arbitrary input/output formats (experimental, HTTP only). breaking change if you depend on driver.Conn interface. By @kavirajk in ClickHouse/clickhouse-go#1928

Bug fixes 🐛

fix: render bool query parameters as true/false (Array(Bool)) by @polyglotAI-bot in ClickHouse/clickhouse-go#1892

fix: escaping for string keys in Map parameter binding by @destinyoooo in ClickHouse/clickhouse-go#1897

chore: fix the formatValue helper for complex types by @kavirajk in ClickHouse/clickhouse-go#1899

fix: gurantee datetime string format in JSON by @kavirajk in ClickHouse/clickhouse-go#1907

fix: use atomic.Int64 for clickhouse.connID (386 alignment) by @forkwhileant in ClickHouse/clickhouse-go#1905

fix(resources): simplify minimum server version check by @the-onewho-knocks in ClickHouse/clickhouse-go#1902

fix: preserve per-query JWT in QueryOptions.clone() by @AndreZiviani in ClickHouse/clickhouse-go#1914

Remove stray HTTP compression debug output by @fallintoplace in ClickHouse/clickhouse-go#1937

fix: return errors when scanning Tuple maps by @fallintoplace in ClickHouse/clickhouse-go#1944

Other Changes 🛠

chore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by @dependabot[bot] in ClickHouse/clickhouse-go#1893

chore: refactor agent SKILL for code review by @kavirajk in ClickHouse/clickhouse-go#1880

Add Code of Conduct by @laeg in ClickHouse/clickhouse-go#1900

chore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by @dependabot[bot] in ClickHouse/clickhouse-go#1903

chore: correct permission to resolve review comment by @kavirajk in ClickHouse/clickhouse-go#1906

docs(agent instructions): integration-test hygiene conventions by @polyglotAI-bot in ClickHouse/clickhouse-go#1911

chore: refresh CI ClickHouse server version matrix by @polyglotAI-bot in ClickHouse/clickhouse-go#1931

docs: fix Enum8/Enum16 type mappings in TYPES.md by @sankalpsthakur in ClickHouse/clickhouse-go#1930

chore(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1 by @dependabot[bot] in ClickHouse/clickhouse-go#1935

chore(deps): bump github.com/ClickHouse/ch-go from 0.73.0 to 0.74.0 by @dependabot[bot] in ClickHouse/clickhouse-go#1939

use fable for code review by @mshustov in ClickHouse/clickhouse-go#1947

perf: make safeLen() linear runtime in exception parser by @kavirajk in ClickHouse/clickhouse-go#1949

New Contributors

@arpitjain099 made their first contribution in ClickHouse/clickhouse-go#1894

@destinyoooo made their first contribution in ClickHouse/clickhouse-go#1897

@laeg made their first contribution in ClickHouse/clickhouse-go#1900

@forkwhileant made their first contribution in ClickHouse/clickhouse-go#1905

@the-onewho-knocks made their first contribution in ClickHouse/clickhouse-go#1902

@AndreZiviani made their first contribution in ClickHouse/clickhouse-go#1914

@sankalpsthakur made their first contribution in ClickHouse/clickhouse-go#1930

@fallintoplace made their first contribution in ClickHouse/clickhouse-go#1937

Full Changelog: ClickHouse/clickhouse-go@v2.47.0...v2.48.0

Commits

69b5195 Update release notes
bbc3549 Merge pull request #1949 from ClickHouse/kavirajk/perf-exception-parser
46e0fe9 chore: review remarks
222cf04 chore: doc string fixes
41bfcca perf: make safeLen() linear runtime in exception parser
8fd6f43 Merge pull request #1944 from fallintoplace/fix/tuple-map-scan-error
d502655 Merge pull request #1947 from ClickHouse/pr-review-fable
6f469c9 use fable for code review
95ae021 fix: return errors when scanning Tuple maps
b67d227 Merge pull request #1937 from fallintoplace/remove-http-compression-debug-output
Additional commits viewable in compare view

Updates github.com/testcontainers/testcontainers-go from 0.43.0 to 0.44.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.44.0

What's Changed

🔒 Security

security: fix Dependabot alerts for grpc and OTel (#3835) @mdelapenya

🚀 Features

feat: allow overriding the session ID (#3051) @jcmfernandes

feat: add Azure SQL Edge module (#3787) @mdelapenya

feat: add S3Mock module (#3781) @mdelapenya

feat: add Fake-GCS-Server module (#3770) @mdelapenya

feat: add Typesense module (#3786) @mdelapenya

feat: add Firebird module (#3771) @mdelapenya

feat: add CouchDB module (#3768) @mdelapenya

feat: add Mosquitto module (#3774) @mdelapenya

feat: add Papercut-SMTP module (#3777) @mdelapenya

feat: add Timeplus module (#3784) @mdelapenya

feat: add Solr module (#3783) @mdelapenya

feat: add SFTP module (#3782) @mdelapenya

feat: add RavenDB module (#3780) @mdelapenya

feat: add QuestDB module (#3779) @mdelapenya

feat: add Presto module (#3778) @mdelapenya

feat: add OrientDB module (#3776) @mdelapenya

feat: add Nginx module (#3775) @mdelapenya

feat: add Mailpit module (#3773) @mdelapenya

feat: add Trino module (#3785) @mdelapenya

feat: add KurrentDB module (#3772) @mdelapenya

feat: add CrateDB module (#3769) @mdelapenya

feat: add ActiveMQ Classic module (#3767) @mdelapenya

feat: add ability to chain WithConfigModifier, WithEndpointSettingsModifier and WithHostConfigModifier (#3733) @LaurentGoderre

🐛 Bug Fixes

fix: escape the container name in the Docker name filter (#3837) @jcmfernandes

fix: should print max information by default (#3459) @strowk

fix: read exec exit code only after draining the output stream (#3766) @dean-island

fix: properly wait for Ryuk startup when reusing reaper (#3761) @karsov

fix(openfga): remove playground wait from Run and up image to v1.18.0 (#3745) @selvakannanjr

📖 Documentation

docs: fix incomplete CleanupContainer documentation (#3826) @Hashim1999164

docs: fix typo in SkipIfProviderIsNotHealthy docstring (#3764) @salandered

chore: update modules usage metrics (2026-07) (#3759) @github-actions[bot]

chore: update usage metrics (2026-07) (#3757) @github-actions[bot]

chore(metrics): usage metrics for modules (#3737) @mdelapenya

docs(site): add missing languages and reorder docs navigation (#3735) @mdelapenya

🧹 Housekeeping

... (truncated)

Commits

007bd6b chore: use new version (v0.44.0) in modules and examples
6fdd2fd feat: allow overriding the session ID (#3051)
0cfd2f9 chore(deps): bump slackapi/slack-github-action from 3.0.3 to 4.0.0 (#3788)
5dda4cd chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#3789)
8cfecf9 chore(deps): bump docker/setup-docker-action from 5.1.0 to 5.4.0 (#3790)
1d054f6 fix: escape the container name in the Docker name filter (#3837)
2f869d6 fix: should print max information by default (#3459)
62941e8 chore(azurite): tidy module dependencies (#3838)
632ee7b security: fix Dependabot alerts for grpc and OTel (#3835)
caa68c6 chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1...
Additional commits viewable in compare view

Updates github.com/google/cel-go from 0.30.0 to 0.31.0

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.31.0

This release introduces critical performance breakthroughs, simplifies integration with native Go structures, and hardens the safety limits of evaluated expressions.

Features

Pull Request Description and Impact

Env copy on write (#1405) Introduces Copy-on-Write (COW) mechanics for environment definitions, dramatically slashing CPU and memory allocation overhead when building child or extended environments.

Optimize NativeToValue call paths (#1400) Optimizes reflection-heavy conversion paths, significantly improving evaluation speeds when feeding native Go types directly to the runtime engine.

Support self-describing, self-adapting struct types (#1395) Simplifies struct integration by enabling native Go struct types to self-describe and adapt directly to the CEL type system without verbose boilerplate.

Move native type support into the Core CEL library (#1396) Moves native Go type mapping utilities directly into the Core CEL package to unify dependency structure and improve native API access.

Regex program plan size controls (#1383) Introduces critical compiled size constraints on regex expressions to mitigate CPU/memory exhaustion vectors during evaluation.

Simplify support for native object types (#1393) Streamlines setup workflows for mapping standard Go structures inside the CEL compiler environment.

Tag automation for go submodules (#1401) Automates the submodule tagging process to streamline multi-module releases.

Fixes

Pull Request Impact and Technical Details

Respect composed adapter for unregistered structs (#1384) Corrects behavior so that unregistered Go structs properly fall back to composed adapter configurations.

reject out-of-range hours in timezone offset parsing (#1391) Tightens datetime validation by rejecting invalid out-of-range hour offsets during timezone parsing.

Fix the expression limit node test (#1390) Restores stability to environment node test suites verifying size-limit assertions.

Correct documented default max value for lists.range (#1392) Resolves documentation drift regarding the default maximum limit for the lists.range function.

Breaking Changes

There are no breaking changes, but all ext.NativeTypes features are now available via cel.NativeTypes

Notes on Performance

This release targets two primary computational bottlenecks in high-throughput CEL environments: environment construction and reflection-based type coercion.

Expected Impact

Dynamic Environment Extension: Applications that dynamically extend a base CEL environment per request (e.g., policy validation engines or API gateways adding request-scoped variables) will see near-zero initialization costs. The Copy-on-Write (COW) optimization prevents copying underlying maps of variables, functions, and adapters.

Type Coercion Speed: Bypassing heavy reflection paths during NativeToValue conversions significantly cuts down CPU cycle usage and drastically reduces garbage collection overhead in processing hot paths.

AST Pruning: Consolidating sequential list concatenations (#1406) and optimizing optional macros (#1387) ensures that generated program plans are leaner, reducing both compilation and execution memory footprints.

Go-lang Benchmark Citation (benchstat)

The performance improvements can be verified running the repository's native benchmark harness with benchstat:

name old time/op new time/op delta
BenchmarkEnvExtension/10_vars 3.56µs ± 1% 0.15µs ± 0% -95.79% (p=0.000 n=10+10)
BenchmarkNativeToValue/struct 120ns ± 2% 42ns ± 1% -65.00% (p=0.000 n=10+10)
BenchmarkOptionalMapEvaluation 245ns ± 1% 195ns ± 1% -20.41% (p=0.000 n=10+10)

name old allocs/op new allocs/op delta
BenchmarkEnvExtension/10_vars 32.0 ± 0% 1.0 ± 0% -96.88% (p=0.000 n=10+10)
BenchmarkNativeToValue/struct 3.00 ± 0% 1.00 ± 0% -66.67% (p=0.000 n=10+10)

... (truncated)

Commits

2cf1626 Env copy on write (#1405)
b74d303 Fold list concat expressions together (#1406)
9d5baaf Program plan optimizations (#1399)
1a53cb7 Release Tag Automation for go submodules (#1401)
f10a2e6 Optimize NativeToValue call paths (#1400)
ab72257 Move native type support into the Core CEL library (#1396)
ba6c27e Support self-describing, self-adapting struct types (#1395)
7c1df6b reject out-of-range hours in timezone offset parsing (#1391)
c15365a Simplify support for native object types (#1393)
8c1485e Correct documented default max value for range (#1392)
Additional commits viewable in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.29.0 to 2.30.0

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.30.0

New Features

protoc-gen-openapiv3: Brand new minimal OpenAPI v3 generator (#6623), plus follow-ups:

Visibility selectors (#6673)

disable_default_errors option (#6672)

Annotation support (#6681)

Improved plugin error surfacing (#6937)

field_behavior REQUIRED support for query parameters (#7180) — @maydietwice

openapiv3-merge: New standalone tool for merging OpenAPI v3 documents (#6771) — @johanbrandhorst

protoc-gen-openapiv2 moved to the protoc toolchain (#6988) — @EliSauder

Fixes

Change PR Contributor

OpenAPI v2: messages sorted before rendering definitions for determinism #6732 @alliasgher

OpenAPI v2: enum comments now go to description instead of title #6785 @superShen0916

OpenAPI v2: include field schema metadata on parameters #6894 @puneetdixit200

OpenAPI v2: omit empty body objects for nested path parameters #7065 @alliasgher

OpenAPI v3: omit empty body objects for nested path parameters #7068 @alliasgher

OpenAPI v2: preserve x-nullable when use_allof_for_refs wraps a $ref #7026 @pkhanaljc

OpenAPI v2: fix path joining for colon-prefixed segments #7191 @Ritik100-AIT

Prioritize OpenAPI config options over proto options #6973 @maskedmaxx

Support Service doc comments for OpenAPI/Swagger generation #6200 @majiayu000

Fix nested body path initialization for oneof fields #6948 @cyphercodes

Remove redundant enum assignment for nested proto3 fields #7059 @abhishek-dalbanjan

Drain request only after ParseForm in generated code #7192 @paskozdilar

Support field extensions with use_allof_for_refs #3100 @same-id

Ignore M import-path mappings in openapiv3 plugin params #6936 @johanbrandhorst

Documentation

Clarify HttpBody download usage (#6904) — @ketpatil77

Clarify Go tool dependency options (#7042) — @hawk-roy

Add a runnable OpenTelemetry tracing example (#7110) — @hsdfat

Fix SLSA link in README (#7149) — @ZayanKhan-12

Explain Buf strategy for shared API config (#7147) — @dlanov

Tests / CI / Infra

Add test coverage for slice converters in convert.go (#7041) — @viniciusmtsantos

Remove Java swagger generator test dependency (#6735) — @johanbrandhorst

CI improvements — go-version-file usage, release workflow tag input, checkout ref fixes, node_test timeouts, Node 22 LTS for browser tests (avoids a Node 24 zlib hang) (#6627, #6632, #6633, #6867, #6868) — @johanbrandhorst

Better Bazel caching; auto-merge job for dependabot PRs (#6667, #6668) — @johanbrandhorst

Run gazelle on openapiv3 files; add missing Bazel files (#6734, #6738) — @johanbrandhorst

New Contributors

@alliasgher, @superShen0916, @puneetdixit200, @ketpatil77, @EliSauder, @maskedmaxx, @hawk-roy, @viniciusmtsantos, @cyphercodes, @abhishek-dalbanjan, @hsdfat, @ZayanKhan-12, @dlanov, @maydietwice, @pkhanaljc, @Ritik100-AIT

... (truncated)

Commits

1debdea Fix openapiv2 path joining for colon-prefixed segments (#7191)
561f393 Drain request only after ParseForm in generated code (#7192)
a16cad8 fix(openapiv2): preserve x-nullable when use_allof_for_refs wraps $ref (#7026)
544d99d openapiv3: support field_behavior REQUIRED for query parameters (#7180)
89a9e41 chore(deps): update google/oss-fuzz digest to 3ea2a9b (#7195)
42ced5f fix(deps): update opentelemetry-go-contrib monorepo to v0.70.0 (#7194)
c63e364 chore(deps): update googleapis digest to 5739471 (#7193)
873f41a chore(deps): update google/oss-fuzz digest to 8d292af (#7190)
f56f8ad chore(deps): update googleapis digest to f3ff3a1 (#7189)
3087cc7 build(deps-dev): bump fast-uri in /examples/internal/browser (#7187)
Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.19.1 to 1.19.2

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.19.2

What's Changed

huff0: add arm64 assembly for Decompress4X/1X via avo lowering by @lizthegrey in klauspost/compress#1172

zstd: Re-enable unsafe decodeSync memory copies (#1168) by @lizthegrey in klauspost/compress#1171

zstd: fix arm64 asm frame offsets placing locals on the saved LR slot by @lizthegrey in klauspost/compress#1176

zstd: avoid racing MaxDecodedSize write on shared dict litEnc by @zanarellidev in klauspost/compress#1182

zstd: keep BuildDict recent-offsets positive and loadable by @zanarellidev in klauspost/compress#1184

zstd: handle zero-literal BuildDict corpus by @cyphercodes in klauspost/compress#1178

zstd: don't clear the registered dictionary when decoding past the window by @sueun-dev in klauspost/compress#1177

New Contributors

@zanarellidev made their first contribution in klauspost/compress#1183

@cyphercodes made their first contribution in klauspost/compress#1178

@sueun-dev made their first contribution in klauspost/compress#1177

Full Changelog: klauspost/compress@v1.19.1...v1.19.2

Commits

c3b3439 zstd: don't clear the registered dictionary when decoding past the window (#1...
9874bc9 fix(zstd): handle zero-literal BuildDict corpus (#1178)
71bb6fd zstd: keep BuildDict recent-offsets positive and loadable (#1184)
3d4dacb zstd: avoid racing MaxDecodedSize write on shared dict litEnc (#1182)
3ceaa81 build(deps): bump the github-actions group with 5 updates (#1185)
72cb4d3 chore: add OpenSSF Scorecard GitHub Action (#1183)
69c9db4 zstd: fix arm64 asm locals overwriting the saved link register (#1176)
117430d zstd: Re-enable unsafe decodeSync memory copies (#1168) (#1171)
c73af0c huff0: add arm64 assembly for Decompress4X/1X via avo lowering (#1172)
See full diff in compare view

Updates github.com/moby/go-archive from 0.3.2 to 0.3.3

Release notes

Sourced from github.com/moby/go-archive's releases.

v0.3.3

What's Changed

Fix a regression introduced in v0.3.0 that caused archive extraction to reject hardlinks with absolute targets, as produced by some image builders. Absolute hardlink targets are now resolved relative to the extraction root, while paths that escape the root remain rejected. moby/go-archive#100

Fix a regression introduced in v0.3.0 that caused archive extraction to fail when applying permissions to device nodes, including nodes on nodev filesystems and dev/ptmx. Device nodes are now referenced without opening the underlying device before applying their mode. moby/go-archive#103

Set close-on-exec on file descriptors used by the Linux permission fallback to prevent them from leaking into child processes. moby/go-archive#104

Full Changelog: moby/go-archive@v0.3.2...v0.3.3

Commits

ae9e219 Merge pull request #104 from thaJeztah/use_O_CLOEXEC
98ff1da archive: set close-on-exec for chmod fallback descriptors
1e8dfbc Merge pull request #103 from thaJeztah/fix_chmod_fallback
e738eed archive: keep procfs file alive during fchmodat
2d863f5 archive: preserve procfs access during chroot extraction
89653ed archive: fix chmod fallback for device nodes on nodev mounts
f37d413 Merge pull request #106 from thaJeztah/fallback_no_read
4ffc915 archive: test chmod fallback without read permission
9af1c40 Merge pull request #105 from thaJeztah/test_chrooted_chmod_fallback
3daca2a archive: test chmod fallback without procfs in chroot
Additional commits viewable in compare view

Updates github.com/pierrec/lz4/v4 from 4.1.27 to 4.1.28

Commits

136754c Merge pull request #246 from honeycombio/lizf.arm64-small-offset-match
797d8a1 Merge pull request #247 from honeyco...
Description has been truncated

Bumps the go-modules group with 16 updates: | Package | From | To | | --- | --- | --- | | [github.com/ClickHouse/clickhouse-go/v2](https://github.com/ClickHouse/clickhouse-go) | `2.47.0` | `2.48.0` | | [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.43.0` | `0.44.0` | | [github.com/google/cel-go](https://github.com/google/cel-go) | `0.30.0` | `0.31.0` | | [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.29.0` | `2.30.0` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.19.1` | `1.19.2` | | [github.com/moby/go-archive](https://github.com/moby/go-archive) | `0.3.2` | `0.3.3` | | [github.com/pierrec/lz4/v4](https://github.com/pierrec/lz4) | `4.1.27` | `4.1.28` | | [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.69.0` | `0.70.0` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [google.golang.org/genproto/googleapis/api](https://github.com/googleapis/go-genproto) | `0.0.0-20260720211330-0afa2a65878a` | `0.0.0-20260803160001-6ac0973c030d` | | [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20260720211330-0afa2a65878a` | `0.0.0-20260803160001-6ac0973c030d` | Updates `github.com/ClickHouse/clickhouse-go/v2` from 2.47.0 to 2.48.0 - [Release notes](https://github.com/ClickHouse/clickhouse-go/releases) - [Changelog](https://github.com/ClickHouse/clickhouse-go/blob/main/CHANGELOG.md) - [Commits](ClickHouse/clickhouse-go@v2.47.0...v2.48.0) Updates `github.com/testcontainers/testcontainers-go` from 0.43.0 to 0.44.0 - [Release notes](https://github.com/testcontainers/testcontainers-go/releases) - [Commits](testcontainers/testcontainers-go@v0.43.0...v0.44.0) Updates `github.com/google/cel-go` from 0.30.0 to 0.31.0 - [Release notes](https://github.com/google/cel-go/releases) - [Commits](cel-expr/cel-go@v0.30.0...v0.31.0) Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.29.0 to 2.30.0 - [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases) - [Commits](grpc-ecosystem/grpc-gateway@v2.29.0...v2.30.0) Updates `github.com/klauspost/compress` from 1.19.1 to 1.19.2 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.19.1...v1.19.2) Updates `github.com/moby/go-archive` from 0.3.2 to 0.3.3 - [Release notes](https://github.com/moby/go-archive/releases) - [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go) - [Commits](moby/go-archive@v0.3.2...v0.3.3) Updates `github.com/pierrec/lz4/v4` from 4.1.27 to 4.1.28 - [Release notes](https://github.com/pierrec/lz4/releases) - [Commits](pierrec/lz4@v4.1.27...v4.1.28) Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.69.0 to 0.70.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.69.0...zpages/v0.70.0) Updates `go.opentelemetry.io/otel` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/metric` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/sdk` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/trace` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260720211330-0afa2a65878a to 0.0.0-20260803160001-6ac0973c030d - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260720211330-0afa2a65878a to 0.0.0-20260803160001-6ac0973c030d - [Commits](https://github.com/googleapis/go-genproto/commits) --- updated-dependencies: - dependency-name: github.com/ClickHouse/clickhouse-go/v2 dependency-version: 2.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/testcontainers/testcontainers-go dependency-version: 0.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/google/cel-go dependency-version: 0.31.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2 dependency-version: 2.30.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/klauspost/compress dependency-version: 1.19.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/moby/go-archive dependency-version: 0.3.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/pierrec/lz4/v4 dependency-version: 4.1.28 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp dependency-version: 0.70.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel dependency-version: 1.45.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace dependency-version: 1.45.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc dependency-version: 1.45.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/metric dependency-version: 1.45.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.45.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.45.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20260803160001-6ac0973c030d dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20260803160001-6ac0973c030d dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 11, 2026

GrigoryPervakov approved these changes Aug 11, 2026

View reviewed changes

GrigoryPervakov merged commit 196e07b into main Aug 11, 2026
27 checks passed

GrigoryPervakov deleted the dependabot/go_modules/go-modules-103884aeb8 branch August 11, 2026 19:34

Navigation Menu

Uh oh!

chores: bump the go-modules group with 16 updates - #288

chores: bump the go-modules group with 16 updates#288
GrigoryPervakov merged 1 commit into
mainfrom
dependabot/go_modules/go-modules-103884aeb8

dependabot Bot commented on behalf of github Aug 11, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Pull Request	Description and Impact
Env copy on write (#1405)	Introduces Copy-on-Write (COW) mechanics for environment definitions, dramatically slashing CPU and memory allocation overhead when building child or extended environments.
Optimize NativeToValue call paths (#1400)	Optimizes reflection-heavy conversion paths, significantly improving evaluation speeds when feeding native Go types directly to the runtime engine.
Support self-describing, self-adapting struct types (#1395)	Simplifies struct integration by enabling native Go struct types to self-describe and adapt directly to the CEL type system without verbose boilerplate.
Move native type support into the Core CEL library (#1396)	Moves native Go type mapping utilities directly into the Core CEL package to unify dependency structure and improve native API access.
Regex program plan size controls (#1383)	Introduces critical compiled size constraints on regex expressions to mitigate CPU/memory exhaustion vectors during evaluation.
Simplify support for native object types (#1393)	Streamlines setup workflows for mapping standard Go structures inside the CEL compiler environment.
Tag automation for go submodules (#1401)	Automates the submodule tagging process to streamline multi-module releases.

Pull Request	Impact and Technical Details
Respect composed adapter for unregistered structs (#1384)	Corrects behavior so that unregistered Go structs properly fall back to composed adapter configurations.
reject out-of-range hours in timezone offset parsing (#1391)	Tightens datetime validation by rejecting invalid out-of-range hour offsets during timezone parsing.
Fix the expression limit node test (#1390)	Restores stability to environment node test suites verifying size-limit assertions.
Correct documented default max value for lists.range (#1392)	Resolves documentation drift regarding the default maximum limit for the lists.range function.

Change	PR	Contributor
OpenAPI v2: messages sorted before rendering definitions for determinism	#6732	`@alliasgher`
OpenAPI v2: enum comments now go to `description` instead of `title`	#6785	`@superShen0916`
OpenAPI v2: include field schema metadata on parameters	#6894	`@puneetdixit200`
OpenAPI v2: omit empty body objects for nested path parameters	#7065	`@alliasgher`
OpenAPI v3: omit empty body objects for nested path parameters	#7068	`@alliasgher`
OpenAPI v2: preserve `x-nullable` when `use_allof_for_refs` wraps a `$ref`	#7026	`@pkhanaljc`
OpenAPI v2: fix path joining for colon-prefixed segments	#7191	`@Ritik100-AIT`
Prioritize OpenAPI config options over proto options	#6973	`@maskedmaxx`
Support Service doc comments for OpenAPI/Swagger generation	#6200	`@majiayu000`
Fix nested body path initialization for oneof fields	#6948	`@cyphercodes`
Remove redundant enum assignment for nested proto3 fields	#7059	`@abhishek-dalbanjan`
Drain request only after `ParseForm` in generated code	#7192	`@paskozdilar`
Support field extensions with `use_allof_for_refs`	#3100	`@same-id`
Ignore `M` import-path mappings in openapiv3 plugin params	#6936	`@johanbrandhorst`

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 11, 2026

v2.48.0

What's Changed

Enhancements 🚀

Bug fixes 🐛

Other Changes 🛠

New Contributors

v2.48.0, 2026-08-04

What's Changed

Enhancements 🚀

Bug fixes 🐛

Other Changes 🛠

New Contributors

v0.44.0

What's Changed

🔒 Security

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

Release v0.31.0

Expected Impact

Go-lang Benchmark Citation (benchstat)

v2.30.0

New Features

Fixes

Documentation

Tests / CI / Infra

New Contributors

v1.19.2

What's Changed

New Contributors

v0.3.3

What's Changed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant