chore(deps): bump the go-dependencies group with 12 updates by dependabot[bot] · Pull Request #6 · devops-ia/dwpk

dependabot · 2026-09-09T10:15:21Z

Bumps the go-dependencies group with 12 updates:

Package	From	To
github.com/aws/aws-sdk-go-v2	`1.45.1`	`1.46.0`
github.com/aws/aws-sdk-go-v2/config	`1.33.2`	`1.33.3`
github.com/aws/aws-sdk-go-v2/credentials	`1.20.2`	`1.20.3`
github.com/aws/aws-sdk-go-v2/service/ecr	`1.63.0`	`1.64.0`
github.com/aws/aws-sdk-go-v2/service/sts	`1.48.0`	`1.49.0`
github.com/coreos/go-oidc/v3	`3.20.0`	`3.21.0`
github.com/onsi/gomega	`1.40.0`	`1.43.0`
golang.org/x/crypto	`0.55.0`	`0.56.0`
golang.org/x/oauth2	`0.36.0`	`0.37.0`
k8s.io/apimachinery	`0.36.0`	`0.37.0`
k8s.io/client-go	`0.36.0`	`0.37.0`
sigs.k8s.io/controller-runtime	`0.24.1`	`0.25.0`

Updates github.com/aws/aws-sdk-go-v2 from 1.45.1 to 1.46.0

Commits

afdc89f Release 2026-09-04
5875f61 Regenerated Clients
9d20eaa Update API model
08c63d9 Remove span retry loop middleware (#3543)
99b223d Release 2026-09-03
2d2fdf6 Regenerated Clients
093c165 Update API model
5b4cd6f Release 2026-09-02
9e02039 Regenerated Clients
b785dd9 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.2 to 1.33.3

Commits

afdc89f Release 2026-09-04
5875f61 Regenerated Clients
9d20eaa Update API model
08c63d9 Remove span retry loop middleware (#3543)
99b223d Release 2026-09-03
2d2fdf6 Regenerated Clients
093c165 Update API model
5b4cd6f Release 2026-09-02
9e02039 Regenerated Clients
b785dd9 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.20.2 to 1.20.3

Commits

396f97a Release 2023-08-18
08ab454 Regenerated Clients
b50999b Update SDK's smithy-go dependency to v1.14.2
d05e372 Update endpoints model
26ccae9 Update API model
5d3382b Merge pull request #2243 from aws/feat-protocol-test-2
f58ddae update time to ancient (#2133)
37347b1 use GITHUB_HEAD_REF
d5f2d71 print the branch
d0122b9 Merge branch 'main' into feat-protocol-test-2
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.63.0 to 1.64.0

Commits

6191b25 Release 2024-10-02
6b963d7 Regenerated Clients
71fb8f0 Update endpoints model
b132e7e Update API model
c5e364e Release 2024-10-01
d4103b7 Regenerated Clients
e237ef3 Update endpoints model
98c6308 Update API model
be2f3e0 Release 2024-09-30
88e60a1 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.48.0 to 1.49.0

Commits

4fd9126 Release 2024-02-13
d22cecd Regenerated Clients
b640bf5 Update SDK's smithy-go dependency to v1.20.0
94e885c Update endpoints model
b3a6cd7 Update API model
5f328e6 chore: bump min go to 1.20 (#2494)
3cb2c97 ci: fix CI scripts for main branch case (#2491)
0e44db4 Release 2024-02-12
1d8fb3b Regenerated Clients
e4d556f Update API model
Additional commits viewable in compare view

Updates github.com/coreos/go-oidc/v3 from 3.20.0 to 3.21.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.21.0

What's Changed

oidc: ignore JWKs with unsupported key types rather than failing by @nicoske in coreos/go-oidc#499

New Contributors

@nicoske made their first contribution in coreos/go-oidc#499

Full Changelog: coreos/go-oidc@v3.20.0...v3.21.0

Commits

c914bd3 oidc: ignore JWKs with unsupported key types rather than failing
See full diff in compare view

Updates github.com/onsi/gomega from 1.40.0 to 1.43.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.43.0

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

v1.42.1

1.42.1

Bump Dependencies

v1.42.0

1.42.0

Add a set of Claude skill as a marketplace plugin

v1.41.0

No release notes provided.

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

1.42.1

Bump Dependencies

1.42.0

Add a set of Claude skill as a marketplace plugin

1.41.0

Features

Add BeASlice and BeAnArray matchers

Fixes

Object formatting now detects pointer cycles to avoid runaway formatting output.

Commits

bc1f21e v1.43.0
c814c0e v1.43.0 (full)
a89f25d Add gomock adaptor extension for using Gomega matchers with gomock
ced6c1c v1.42.1
2beb9fb v1.42.1 (full)
006cd2c bump al lthe things
35ca084 v1.42.0
d72697b v1.42.0 (full)
1f95d86 add a set of claude skills as a marketplace plugin
af2bccb v1.41.0
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.55.0 to 0.56.0

Commits

86efde5 ssh: reject unexpected message types on established channels
a6cdac6 ssh: drop traffic on undecided channels
39dc44e ssh: don't skip the source-address critical option in CheckCert
afebf4c x509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+
89f4e9b x509roots/fallback: update bundle
71488c4 ssh/knownhosts: compare only public key portions for revocation
82adefa ssh: synchronize unexpected response test
c757c98 all: upgrade go directive to at least 1.26.0 [generated]
593c81a ssh: correctly ignore pre-banner lines
46efc8b acme: add crypto.SignMessage test coverage
Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.36.0 to 0.37.0

Commits

c624b89 google: change the snake case endpoint to kebab-case
09a82f6 all: upgrade go directive to at least 1.26.0 [generated]
See full diff in compare view

Updates k8s.io/apimachinery from 0.36.0 to 0.37.0

Commits

7164e39 Update dependencies to v0.37.0 tag
e55f9ba feat(api): Update node restriction admission to use new API
cb0680d Merge pull request #129125 from pohly/log-client-go-tools-apis
97b2132 Merge pull request #140194 from gnufied/implement-volume-health-api
f21afab Add validation for camelcase in reason field
d7ad413 Merge pull request #140782 from dims/update-kube-openapi
e15ad7c Merge pull request #138808 from chenk008/cbor-streaminglist
464b5d1 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
0de14ec Merge pull request #140732 from thockin/dv-add-prefixed-label-key
95258eb Merge pull request #134037 from ibihim/ibihim/2025-09-09_unsafe-delete-of-cor...
Additional commits viewable in compare view

Updates k8s.io/client-go from 0.36.0 to 0.37.0

Commits

2807644 Update dependencies to v0.37.0 tag
50c6f9b metrics: Register: Fix incorrect assignment
49f0a7b Merge pull request #140931 from pohly/client-go-changelog-adding-apigroups
74d4b1e Merge pull request #140966 from alancaldelas/client-go-fakecustomstore-store
2bf14f2 Merge pull request #140990 from xigang/revert-140448
7b892fe Revert "Merge pull request #140448 from xigang/event_broadcaster_goroutine_leak"
df92378 Merge pull request #140334 from nojnhuh/dra-workloadresourceclaims-beta
45a0ff1 client-go: restore FakeCustomStore conformance to cache.Store
9d3b531 Merge pull request #139795 from omeryahud/worktree-kep-5963-device-compat-groups
694f4eb apidiff: ignore adding entirely new API groups
Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.24.1 to 0.25.0

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.25.0

Highlights

This version of controller-runtime introduces a new experimental ReadYourWritesConsistency feature, which ensures that all writes are reflected in subsequent reads from the default cache-backed client. Stale client reads are arguably the biggest source of friction and sometimes bugs for controller authors, providing this functionality at the library level eliminates that class of problems entirely.

Try it out by setting Client.EnableReadYourWritesConsistency: new(true) in your manager and leave any feedback you may have on the tracking issue.

⚠️ Breaking Changes

Dependencies: Bump to k8s.io/* v1.37 (#3579 #3575 #3567 #3561 #3547 #3529 #3524)

Events: Add new EventRecorder interface (#3509)

✨ New Features

Client: Add a read-your-own-writes client (#3472)

Fakeclient: Add WithGlobalResourceVersionCounter (#3581)

Fakeclient: Add scale subresource support for Apply (#3569)

Metrics: Allow opt-in for client-go REST client metrics (#3510)

Metrics: Allow overriding client-go REST client metrics latency histogram buckets (#3573)

Source: Add TypedInformer source (#3520)

Webhooks: Allow to disable the webhook server by setting the port to -1 (#3481)

🐛 Bug Fixes

Cache: Fix goroutine leaks in cache Start() methods (#3565)

Client: Fix regression in Apply typed error handling (#3515)

Controller: Unlock when Controller.Start() returns with error (#3545)

Envtest: Fix envtest process stop on Windows (#3519)

Fakeclient: Allow updating managedFields through Update (#3585)

Fakeclient: Fix AddIndex panic when wrapped with an interceptor (#3583)

Fakeclient: Fix PartialObjectMeta handling (#3571)

Fakeclient: Support scale subresource get/update for unstructured objects (#3546)

Fakeclient: Update object on subresource apply (#3570)

PriorityQueue: Fix PriorityQueue deadlock on shutdown (#3540)

Testing/Process: Fix process Stop timeout error handling (#3523)

🌱 Others

LeaderElection: Pass Managers Logger to Leader Elector via Context (#3576)

🌱 CI & linters

Add copyright header validation & fix findings (#3544)

Bump to golangci-lint v2.12.1 (#3514)

Bump to golangci-lint v2.12.2 (#3532)

Bump to golangci-lint v2.13.1 (#3580)

... (truncated)

Commits

e8f9455 🐛 fakeclient: Allow updating managedFields through Update (#3585)
0cc1315 Merge pull request #3565 from dongjiang1989/fix-leak
fa96780 🐛 Fix goroutine leaks in cache Start() methods
1f5514b ✨ Add a read-your-own-write client (#3472)
df386c7 🌱 Bump to golangci-lint v2.13.1 (#3580)
dc7618f Merge pull request #3583 from pujitha24/auto/issue-3582
37fe235 🐛 fake: fix AddIndex panic when client is wrapped with an interceptor
01c7782 ✨ Allow overriding REST client latency histogram buckets (#3573)
857be80 Merge pull request #3576 from demirdilek/fix-leaderelection-contextual-logging
b1387be Merge pull request #3581 from alvaroaleman/fake-consistent
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-dependencies group with 12 updates: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.45.1` | `1.46.0` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.2` | `1.33.3` | | [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.20.2` | `1.20.3` | | [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.63.0` | `1.64.0` | | [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.48.0` | `1.49.0` | | [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.20.0` | `3.21.0` | | [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.40.0` | `1.43.0` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.55.0` | `0.56.0` | | [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.36.0` | `0.37.0` | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.36.0` | `0.37.0` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.0` | `0.37.0` | | [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.24.1` | `0.25.0` | Updates `github.com/aws/aws-sdk-go-v2` from 1.45.1 to 1.46.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.45.1...v1.46.0) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.2 to 1.33.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.33.2...config/v1.33.3) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.20.2 to 1.20.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.20.2...v1.20.3) Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.63.0 to 1.64.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.63.0...service/s3/v1.64.0) Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.48.0 to 1.49.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.48.0...service/s3/v1.49.0) Updates `github.com/coreos/go-oidc/v3` from 3.20.0 to 3.21.0 - [Release notes](https://github.com/coreos/go-oidc/releases) - [Commits](coreos/go-oidc@v3.20.0...v3.21.0) Updates `github.com/onsi/gomega` from 1.40.0 to 1.43.0 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.40.0...v1.43.0) Updates `golang.org/x/crypto` from 0.55.0 to 0.56.0 - [Commits](golang/crypto@v0.55.0...v0.56.0) Updates `golang.org/x/oauth2` from 0.36.0 to 0.37.0 - [Commits](golang/oauth2@v0.36.0...v0.37.0) Updates `k8s.io/apimachinery` from 0.36.0 to 0.37.0 - [Commits](kubernetes/apimachinery@v0.36.0...v0.37.0) Updates `k8s.io/client-go` from 0.36.0 to 0.37.0 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.36.0...v0.37.0) Updates `sigs.k8s.io/controller-runtime` from 0.24.1 to 0.25.0 - [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md) - [Commits](kubernetes-sigs/controller-runtime@v0.24.1...v0.25.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.33.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.20.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr dependency-version: 1.64.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/sts dependency-version: 1.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/coreos/go-oidc/v3 dependency-version: 3.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/onsi/gomega dependency-version: 1.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/crypto dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/oauth2 dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/apimachinery dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/client-go dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: sigs.k8s.io/controller-runtime dependency-version: 0.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-09T10:15:21Z

Labels

The following labels could not be found: dependencies, go. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Navigation Menu

Uh oh!

chore(deps): bump the go-dependencies group with 12 updates - #6

chore(deps): bump the go-dependencies group with 12 updates#6
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-go_modules-go-dependencies-126932b9a0

dependabot Bot commented on behalf of github Sep 9, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 9, 2026

v3.21.0

What's Changed

New Contributors

v1.43.0

1.43.0

Features

v1.42.1

1.42.1

v1.42.0

1.42.0

v1.41.0

1.43.0

Features

1.42.1

1.42.0

1.41.0

Features

Fixes

v0.25.0

Highlights

⚠️ Breaking Changes

✨ New Features

🐛 Bug Fixes

🌱 Others

🌱 CI & linters

Uh oh!

dependabot Bot commented on behalf of github Sep 9, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants