build(deps): bump the gomod group with 16 updates by dependabot[bot] · Pull Request #4626 · crowdsecurity/crowdsec

dependabot · 2026-08-21T14:52:55Z

Bumps the gomod group with 16 updates:

Package	From	To
github.com/aws/aws-sdk-go-v2	`1.43.5`	`1.43.6`
github.com/aws/aws-sdk-go-v2/config	`1.32.36`	`1.32.37`
github.com/aws/aws-sdk-go-v2/feature/s3/manager	`1.22.42`	`1.22.43`
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs	`1.82.1`	`1.82.2`
github.com/aws/aws-sdk-go-v2/service/kinesis	`1.46.5`	`1.46.6`
github.com/aws/aws-sdk-go-v2/service/s3	`1.107.1`	`1.107.2`
github.com/aws/aws-sdk-go-v2/service/sqs	`1.46.5`	`1.46.6`
github.com/beevik/etree	`1.7.0`	`1.7.1`
github.com/getkin/kin-openapi	`0.146.0`	`0.147.0`
github.com/sirupsen/logrus	`1.9.4`	`1.10.0`
github.com/slack-go/slack	`0.27.0`	`0.29.0`
github.com/stretchr/testify	`1.11.1`	`1.12.1`
golang.org/x/crypto	`0.54.0`	`0.55.0`
golang.org/x/mod	`0.39.0`	`0.40.0`
golang.org/x/net	`0.57.0`	`0.58.0`
golang.org/x/text	`0.40.0`	`0.41.0`

Updates github.com/aws/aws-sdk-go-v2 from 1.43.5 to 1.43.6

Commits

168c59c Release 2026-08-14
95fee35 Regenerated Clients
12e7ccd Update endpoints model
93e74b8 Update API model
fe3cb6a fix: close original S3 response body in 200-error handling (#3517)
800a56b Release 2026-08-13
e739a5d Regenerated Clients
f75a3c4 Update API model
b0973f9 delete stale response snapshots (#3516)
c3679fb remove broken internal changelog recipe (#3515)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.36 to 1.32.37

Commits

168c59c Release 2026-08-14
95fee35 Regenerated Clients
12e7ccd Update endpoints model
93e74b8 Update API model
fe3cb6a fix: close original S3 response body in 200-error handling (#3517)
800a56b Release 2026-08-13
e739a5d Regenerated Clients
f75a3c4 Update API model
b0973f9 delete stale response snapshots (#3516)
c3679fb remove broken internal changelog recipe (#3515)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.22.42 to 1.22.43

Commits

168c59c Release 2026-08-14
95fee35 Regenerated Clients
12e7ccd Update endpoints model
93e74b8 Update API model
fe3cb6a fix: close original S3 response body in 200-error handling (#3517)
800a56b Release 2026-08-13
e739a5d Regenerated Clients
f75a3c4 Update API model
b0973f9 delete stale response snapshots (#3516)
c3679fb remove broken internal changelog recipe (#3515)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.82.1 to 1.82.2

Commits

fa369bd Release 2026-06-03
960ee4d Regenerated Clients
4b6df8b Update endpoints model
30b15dd Update API model
e8c72af enable schema-serde (#3421)
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/service/kinesis from 1.46.5 to 1.46.6

Commits

168c59c Release 2026-08-14
95fee35 Regenerated Clients
12e7ccd Update endpoints model
93e74b8 Update API model
fe3cb6a fix: close original S3 response body in 200-error handling (#3517)
800a56b Release 2026-08-13
e739a5d Regenerated Clients
f75a3c4 Update API model
b0973f9 delete stale response snapshots (#3516)
c3679fb remove broken internal changelog recipe (#3515)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.1 to 1.107.2

Commits

168c59c Release 2026-08-14
95fee35 Regenerated Clients
12e7ccd Update endpoints model
93e74b8 Update API model
fe3cb6a fix: close original S3 response body in 200-error handling (#3517)
800a56b Release 2026-08-13
e739a5d Regenerated Clients
f75a3c4 Update API model
b0973f9 delete stale response snapshots (#3516)
c3679fb remove broken internal changelog recipe (#3515)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sqs from 1.46.5 to 1.46.6

Commits

168c59c Release 2026-08-14
95fee35 Regenerated Clients
12e7ccd Update endpoints model
93e74b8 Update API model
fe3cb6a fix: close original S3 response body in 200-error handling (#3517)
800a56b Release 2026-08-13
e739a5d Regenerated Clients
f75a3c4 Update API model
b0973f9 delete stale response snapshots (#3516)
c3679fb remove broken internal changelog recipe (#3515)
Additional commits viewable in compare view

Updates github.com/beevik/etree from 1.7.0 to 1.7.1

Release notes

Sourced from github.com/beevik/etree's releases.

Release v1.7.1

Changes

Improve efficiency of Element.Text and Element.Tail.

Changelog

Sourced from github.com/beevik/etree's changelog.

Release 1.7.1

Changes

Improve efficiency of Element.Text and Element.Tail.

Commits

17e6ce6 Release v1.7.1
e1824d7 Improve efficiency of Element.Text and Element.Tail
See full diff in compare view

Updates github.com/getkin/kin-openapi from 0.146.0 to 0.147.0

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.147.0

What's Changed

openapi3filter: fix for CI by @fenollp in getkin/kin-openapi#1237

openapi3: support OAS 3.2 query and additionalOperations by @mromaszewicz in getkin/kin-openapi#1240

openapi3: export PathItemMethods by @reuvenharrison in getkin/kin-openapi#1241

openapi3filter: append only the bytes read in ZipFileBodyDecoder by @codeAnqiang-ma in getkin/kin-openapi#1247

openapi3: stop validation panicking on an uncompilable pattern by @hdimer in getkin/kin-openapi#1245

openapi3filter: handle deserializing deepObject param with additionalProperties into maps by @Berserk-hub150 in getkin/kin-openapi#1249

New Contributors

@codeAnqiang-ma made their first contribution in getkin/kin-openapi#1247

@hdimer made their first contribution in getkin/kin-openapi#1245

@Berserk-hub150 made their first contribution in getkin/kin-openapi#1249

Full Changelog: getkin/kin-openapi@v0.146.0...v0.147.0

Commits

eda80e2 Merge commit from fork
435c5db openapi3filter: handle deserializing deepObject param with additionalProperti...
d33e44e openapi3: stop validation panicking on an uncompilable pattern (#1245)
166ff47 openapi3filter: append only the bytes read in ZipFileBodyDecoder (#1247)
f5d61a7 openapi3: export PathItemMethods (#1241)
5d526a9 openapi3: support OAS 3.2 query and additionalOperations (#1240)
d5e60c5 openapi3filter: fix for CI (#1237)
See full diff in compare view

Updates github.com/sirupsen/logrus from 1.9.4 to 1.10.0

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.0

Logrus v1.10.0

This release focuses on substantial performance improvements, concurrency correctness, and better interoperability with modern Go logging APIs.

🚀 Performance

Major improvements across TextFormatter, entry handling, and common logger paths:

~17% lower geomean runtime across the benchmark suite

~27% higher geomean formatter throughput

Common enabled logging paths are ~30–44% faster

WithError is ~40% faster

Chained fields are ~46% faster

TextFormatter paths are up to ~40% faster

Allocation counts are reduced by ~25–74% across measured TextFormatter cases, with the largest reductions in colored output

The improvements also show up in complete logger paths:

Logger + TextFormatter is ~31% faster, with ~24% fewer allocations

Logger + JSONFormatter is ~21% faster, with ~10% fewer allocations

JSONFormatter itself remains largely unchanged in runtime performance, with small allocation reductions.

🔄 log/slog interoperability

v1.10 adds bidirectional interoperability between Logrus and Go's log/slog:

A Logrus slog hook can forward existing Logrus entries to an slog logger.

hooks/slog.NewHandler implements slog.Handler, allowing log/slog records to use an existing Logrus logger and its hooks, formatter, and output.

The handler preserves levels, fields, groups, context, record timestamps, and optionally caller information.

Caller reporting is configured per handler, without requiring Logrus's logger-wide ReportCaller option.

Custom slog levels can be mapped to Logrus levels.

The hook and handler can be combined, providing a practical path for incrementally migrating from Logrus to log/slog without requiring an all-at-once transition.

This allows applications to migrate their logging API and logging backend independently: existing Logrus call sites can start using an slog backend, while new slog code can continue using an established Logrus setup.

🔒 Concurrency & Correctness

Fix reentrant logging deadlocks, including logging from within MarshalJSON or formatter code.

Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel, contrary to their documented behavior.

Eliminate race conditions in entry and formatter paths.

Improve locking boundaries around formatters and hooks.

➕ Added

TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching behavior on other platforms.

Entry.Caller can now be set explicitly and is preserved across derived entries. When caller reporting is enabled, Logrus only detects and populates caller information when none was provided, allowing custom caller detection and wrapper-aware logging without adding additional caller configuration APIs.

Add minimal, composable logging interfaces for each log level, allowing consumers to depend on narrower interfaces and making logging implementations easier to substitute or adapt.

Expand CI verification to include TinyGo and every cross-compile target reported by go tool dist list, improving coverage across alternative toolchains and platforms.

... (truncated)

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.0

Fixes:

Fix reentrant logging deadlocks in formatter paths.

Fix race conditions in formatter and entry handling.

Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel. Use the corresponding Panic methods when panic behavior is desired.

Improve concurrency safety around formatter and hook access.

Features:

Add slog hook for forwarding Logrus entries to log/slog.

Add slog.Handler for forwarding log/slog records to a Logrus logger, including levels, fields, groups, context, time, and optional caller reporting. The hook and handler can also be combined to help migrate between Logrus and log/slog.

Add minimal, composable logging interfaces for each log level. This enables consumers to depend on narrower interfaces, making it easier to substitute or adapt logging implementations.

Allow Entry.Caller to be set explicitly and preserve it across derived entries, enabling custom caller detection without Logrus overwriting caller information when ReportCaller is enabled.

Changed:

Raise minimum supported Go version to 1.23.

TextFormatter now renders []byte values as raw/quoted strings instead of slice-of-ints.

TextFormatter now uses distinct dimmed colors for debug and trace output.

TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching the behavior on other platforms.

Entry.HasCaller is now deprecated in favor of checking Entry.Caller directly.

Deprecated MutexWrap, which was unintentionally exposed as public API. It remains available as an alias for compatibility but should not be used directly.

Performance:

Significantly improve TextFormatter performance and reduce allocations.

Optimize common Entry and Logger hot paths.

Reduce allocations in caller reporting.

~17% lower geomean runtime and ~27% higher formatter throughput overall.

Common enabled logging paths are ~30–44% faster.

TextFormatter paths are up to ~40% faster, with allocation counts reduced by 25–74% across the measured formatter cases.

Commits

457e372 Merge pull request #1573 from thaJeztah/update_colors
6b6a3a6 formatter: differentiate debug and trace colors
8ebae73 Merge pull request #1572 from thaJeztah/update_logs
f156a33 docs: clarify formatter field handling
84cedf9 Merge pull request #1571 from thaJeztah/slog_hookopts
a3e1580 hooks/slog: add HookOptions
e5b377a Merge pull request #1570 from thaJeztah/slog_leveler
30a5487 hooks/slog: add level adapters
0cee61e Merge pull request #1569 from thaJeztah/slog_noleveler
4069973 hooks/slog: use concrete slog.Level for hook level mapping
Additional commits viewable in compare view

Updates github.com/slack-go/slack from 0.27.0 to 0.29.0

Release notes

Sourced from github.com/slack-go/slack's releases.

v0.29.0

Fixed

Parse top-level action tokens by @mjq2020 in slack-go/slack#1580

New Contributors

@mjq2020 made their first contribution in slack-go/slack#1580

Full Changelog: slack-go/slack@v0.28.0...v0.29.0

v0.28.0

Added

Channels field to share an uploaded file with multiple conversations by @kenta-ja8 in slack-go/slack#1579

Support for the container block by @jlhawn in slack-go/slack#1574

Full message object from chat.postMessage responses by @rustycl0ck in slack-go/slack#1572

Fixed

Correct typos in comments and debug strings by @maxtaran2010 in slack-go/slack#1570

Other

chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot[bot] in slack-go/slack#1569

chore(deps): bump actions/stale from 10.3.0 to 10.4.0 by @dependabot[bot] in slack-go/slack#1573

chore(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in slack-go/slack#1576

chore(deps): bump actions/stale from 10.4.0 to 11.0.0 by @dependabot[bot] in slack-go/slack#1578

New Contributors

@maxtaran2010 made their first contribution in slack-go/slack#1570

@kenta-ja8 made their first contribution in slack-go/slack#1579

@jlhawn made their first contribution in slack-go/slack#1574

@rustycl0ck made their first contribution in slack-go/slack#1572

Full Changelog: slack-go/slack@v0.27.0...v0.28.0

Changelog

Sourced from github.com/slack-go/slack's changelog.

[0.29.0] - 2026-08-15

Fixed

slackevents: AppMentionEvent and MessageEvent now expose the Data Access API action token through a new ActionToken field, which reads action_token from the event object itself. Slack sends the token there on app_mention and message events, but both types only modelled it nested inside assistant_thread, so the token was silently dropped and bot-token calls to assistant.search.context failed with invalid_action_token. The existing AssistantThread field is unchanged (#1577, #1580).

[0.28.0] - 2026-08-15

Added

Block Kit: Add support for container block through ContainerBlock, with a NewContainerBlock constructor, fluent With* builders (WithTitle, WithRichTextTitle, WithSubtitle, WithIcon, WithWidth, WithCollapsible, WithHeaderDivider, WithBlockID), an AddChildBlock helper and a Validate method (#1574).

PostMessageWithResponse and PostMessageWithResponseContext return the full Message object from the chat.postMessage response alongside the channel and timestamp, giving access to response-only fields such as Message.ThreadTimestamp (#1572).

CompleteUploadExternalParameters and UploadFileParameters now take Channels, which shares a single uploaded file with up to 100 conversations in one files.completeUploadExternal request (#1579).

Commits

49178c5 bump to 0.29.0
58389cc fix: parse top-level action tokens (#1580)
fef3e74 chore: bump to 0.28.0
72865e1 feat: Expose full message object from chat.postMessage responses (#1572)
1bb5bb6 feat: add support for the container block (#1574)
46b261d feat: add Channels to share an uploaded file with multiple conversations (#...
ab81038 chore(deps): bump actions/stale from 10.4.0 to 11.0.0 (#1578)
03b5203 chore(deps): bump actions/setup-go from 6 to 7 (#1576)
8e93d85 chore(deps): bump actions/stale from 10.3.0 to 10.4.0 (#1573)
4738e22 fix: correct typos in comments and debug strings (#1570)
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in stretchr/testify#1935

change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

@harryzcy made their first contribution in stretchr/testify#1935

@boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in stretchr/testify#1935

change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

@harryzcy made their first contribution in stretchr/testify#1935

@boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

assert: make *AssertionFunc types just aliases by @dolmen in stretchr/testify#1563

Fixes

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in stretchr/testify#1775

mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in stretchr/testify#1786

suite: validate method signatures and continue execution for valid tests by @vyas-git in stretchr/testify#1665

assert.PanicsWithError: report error message by @olivergondza in stretchr/testify#1400

assert: IsIncreasing et al can return false w/out failing by @brackendawson in stretchr/testify#1787

add type to error message of assert.Same by @egawata in stretchr/testify#1792

mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in stretchr/testify#1795

assert: truncate very long objects in test failure messages by @brackendawson in stretchr/testify#1646

assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in stretchr/testify#1888

suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in stretchr/testify#1877

Documentation, Build & CI

CI: test also with Go 1.23 by @dolmen in stretchr/testify#1783

Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in stretchr/testify#1708

Promote ccoVeille to maintainer by @brackendawson in stretchr/testify#1784

build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in stretchr/testify#1790

assert.YAMLEq: Document mutlidoc behavior by @brackendawson in stretchr/testify#1791

_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in stretchr/testify#1782

doc: remove ineffective inline code blocks by @brackendawson in stretchr/testify#1714

Tag generated assertions as non-generated in new .gitattributes by @ubunatic in stretchr/testify#1815

... (truncated)

Commits

959dbda Merge pull request #1935 from harryzcy/yaml-update
9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
001eb79 Merge pull request #1905 from Kentzo/patch-1
ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
f8c01f3 mock: Mock.Return does not exist anymore
12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
a11649e assert: make *AssertionFunc type just aliases
dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
098f8d7 _codegen: use strings.Builder
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.54.0 to 0.55.0

Commits

f44d03d go.mod: update golang.org/x dependencies
5ed4944 crypto/internal/poly1305: provide optimised assembly for riscv64
b07833c ssh: return window credit for discarded extended data
d701c51 acme: fix nil pointer dereference in pebble test error reporting
999d053 ssh: fix parsing of GSSAPI payloads offering multiple mechanisms
90f76b8 ssh: reject certificate signature keys before recursing
b53964a ssh: permit empty but non-nil HostKeyAlgorithms, KeyExchanges, Ciphers, MACs
626e40f ssh: drain stderr on forwarded TCP and Unix channels
31914c6 x509roots/fallback: update bundle
f2135b8 all: clean up minor issues found by staticcheck
Additional commits viewable in compare view

Updates golang.org/x/mod from 0.39.0 to 0.40.0

Commits

d3398d0 go.mod: update golang.org/x dependencies
57549bf sumdb: ignore unrelated hashes in Lookup
96f62ae sumdb/tlog: fix TileHashReader authentication bypass
See full diff in compare view

Updates golang.org/x/net from 0.57.0 to 0.58.0

Commits

acc78e0 go.mod: update golang.org/x dependencies
90d10f0 internal/http3: delete invalid Content-Length if declared in server handler
08abf4d internal/http3: infer headers when Content-Encoding is set but is empty
8d10596 http2: avoid deadlocks in wrapped ClientConn state callback
99c3b0a http2/hpack: build the table lookup maps lazily, only for encoders
5a920b1 http3: rework registration to allow using a fake network
7fd2842 quic: return an error from Accept after PacketConn reader exits
825111d quic: avoid busy-loop when keep-alive is blocked by congestion control
a02ddfa http/httpproxy: prioritize lowercase proxy environment variables
574e5eb quic: halt conn goroutines on close when listener exits early
Additional commits viewable in compare view

Updates golang.org/x/text from 0.40.0 to 0.41.0

Commits

acdba66 go.mod: update golang.org/x dependencies
02aa981 secure/precis: fix short destination buffer handling in Nickname profile
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gomod group with 16 updates: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.43.5` | `1.43.6` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.36` | `1.32.37` | | [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.22.42` | `1.22.43` | | [github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs](https://github.com/aws/aws-sdk-go-v2) | `1.82.1` | `1.82.2` | | [github.com/aws/aws-sdk-go-v2/service/kinesis](https://github.com/aws/aws-sdk-go-v2) | `1.46.5` | `1.46.6` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.107.1` | `1.107.2` | | [github.com/aws/aws-sdk-go-v2/service/sqs](https://github.com/aws/aws-sdk-go-v2) | `1.46.5` | `1.46.6` | | [github.com/beevik/etree](https://github.com/beevik/etree) | `1.7.0` | `1.7.1` | | [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) | `0.146.0` | `0.147.0` | | [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.4` | `1.10.0` | | [github.com/slack-go/slack](https://github.com/slack-go/slack) | `0.27.0` | `0.29.0` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.54.0` | `0.55.0` | | [golang.org/x/mod](https://github.com/golang/mod) | `0.39.0` | `0.40.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.57.0` | `0.58.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.40.0` | `0.41.0` | Updates `github.com/aws/aws-sdk-go-v2` from 1.43.5 to 1.43.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.43.5...v1.43.6) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.36 to 1.32.37 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.36...config/v1.32.37) Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.22.42 to 1.22.43 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@feature/s3/manager/v1.22.42...feature/s3/manager/v1.22.43) Updates `github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs` from 1.82.1 to 1.82.2 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/ecs/v1.82.1...service/ecs/v1.82.2) Updates `github.com/aws/aws-sdk-go-v2/service/kinesis` from 1.46.5 to 1.46.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/sqs/v1.46.5...service/sqs/v1.46.6) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.107.1 to 1.107.2 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.107.1...service/s3/v1.107.2) Updates `github.com/aws/aws-sdk-go-v2/service/sqs` from 1.46.5 to 1.46.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/sqs/v1.46.5...service/sqs/v1.46.6) Updates `github.com/beevik/etree` from 1.7.0 to 1.7.1 - [Release notes](https://github.com/beevik/etree/releases) - [Changelog](https://github.com/beevik/etree/blob/main/RELEASE_NOTES.md) - [Commits](beevik/etree@v1.7.0...v1.7.1) Updates `github.com/getkin/kin-openapi` from 0.146.0 to 0.147.0 - [Release notes](https://github.com/getkin/kin-openapi/releases) - [Commits](getkin/kin-openapi@v0.146.0...v0.147.0) Updates `github.com/sirupsen/logrus` from 1.9.4 to 1.10.0 - [Release notes](https://github.com/sirupsen/logrus/releases) - [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md) - [Commits](sirupsen/logrus@v1.9.4...v1.10.0) Updates `github.com/slack-go/slack` from 0.27.0 to 0.29.0 - [Release notes](https://github.com/slack-go/slack/releases) - [Changelog](https://github.com/slack-go/slack/blob/master/CHANGELOG.md) - [Commits](slack-go/slack@v0.27.0...v0.29.0) Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.11.1...v1.12.1) Updates `golang.org/x/crypto` from 0.54.0 to 0.55.0 - [Commits](golang/crypto@v0.54.0...v0.55.0) Updates `golang.org/x/mod` from 0.39.0 to 0.40.0 - [Commits](golang/mod@v0.39.0...v0.40.0) Updates `golang.org/x/net` from 0.57.0 to 0.58.0 - [Commits](golang/net@v0.57.0...v0.58.0) Updates `golang.org/x/text` from 0.40.0 to 0.41.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.40.0...v0.41.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.43.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.37 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager dependency-version: 1.22.43 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs dependency-version: 1.82.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/aws/aws-sdk-go-v2/service/kinesis dependency-version: 1.46.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.107.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/aws/aws-sdk-go-v2/service/sqs dependency-version: 1.46.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/beevik/etree dependency-version: 1.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/getkin/kin-openapi dependency-version: 0.147.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/sirupsen/logrus dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/slack-go/slack dependency-version: 0.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/stretchr/testify dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/crypto dependency-version: 0.55.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/mod dependency-version: 0.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/net dependency-version: 0.58.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/text dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added go Pull requests that update Go code kind/dependencies labels Aug 21, 2026

github-actions Bot added the needs/area label Aug 21, 2026

blotus merged commit edf1820 into master Aug 22, 2026
17 of 18 checks passed

blotus deleted the dependabot/go_modules/gomod-f6b72c7ea2 branch August 22, 2026 13:19

Navigation Menu

Uh oh!

build(deps): bump the gomod group with 16 updates - #4626

build(deps): bump the gomod group with 16 updates#4626
blotus merged 1 commit into
masterfrom
dependabot/go_modules/gomod-f6b72c7ea2

dependabot Bot commented on behalf of github Aug 21, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 21, 2026

Release v1.7.1

Release 1.7.1

v0.147.0

What's Changed

New Contributors

v1.10.0

Logrus v1.10.0

🚀 Performance

🔄 log/slog interoperability

🔒 Concurrency & Correctness

➕ Added

1.10.0

v0.29.0

Fixed

New Contributors

v0.28.0

Added

Fixed

Other

New Contributors

[0.29.0] - 2026-08-15

Fixed

[0.28.0] - 2026-08-15

Added

v1.12.1

What's Changed

New Contributors

What's Changed

New Contributors

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

🔄 `log/slog` interoperability