Skip to content

Bump the all group across 1 directory with 17 updates - #993

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/all-79d39e53d2
Open

Bump the all group across 1 directory with 17 updates#993
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/all-79d39e53d2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 17 updates in the / directory:

Package From To
github.com/streamingfast/dhttp 0.1.3-0.20251218140957-6d46b8f12eb1 0.2.0
github.com/ClickHouse/clickhouse-go/v2 2.48.0 2.49.0
github.com/bmatcuk/doublestar/v4 4.10.2 4.10.3
github.com/charmbracelet/x/ansi 0.11.8 0.11.9
github.com/moby/moby/api 1.56.0 1.56.1
github.com/pelletier/go-toml/v2 2.2.4 2.4.3
github.com/prometheus/client_golang 1.24.1 1.25.0
github.com/shopspring/decimal 1.4.0 1.5.0
github.com/streamingfast/sf-tracing 0.0.0-20251218140752-bafd5572499f 0.0.0-20260716142341-6172a527bdd6
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.71.0 0.72.0
go.opentelemetry.io/otel 1.46.0 1.47.0
go.opentelemetry.io/otel/trace 1.46.0 1.47.0
golang.org/x/mod 0.41.0 0.42.0
golang.org/x/net 0.59.0 0.61.0
github.com/mattn/go-runewidth 0.0.30 0.0.31
github.com/tidwall/gjson 1.19.0 1.20.0
golang.org/x/sync 0.23.0 0.24.0

Updates github.com/streamingfast/dhttp from 0.1.3-0.20251218140957-6d46b8f12eb1 to 0.2.0

Release notes

Sourced from github.com/streamingfast/dhttp's releases.

v0.2.0

Added

  • Add middleware.NewAddTraceIDHeaderMiddleware() to return the request's trace ID in the X-Trace-ID response header.

Changed

  • Require Go 1.26 or newer.

Security

  • Bump google.golang.org/grpc to v1.83.2, golang.org/x/crypto to v0.57.0, golang.org/x/net to v0.59.0, OpenTelemetry to v1.47.0 and github.com/gorilla/schema to v1.4.1 to fix known vulnerabilities.
Changelog

Sourced from github.com/streamingfast/dhttp's changelog.

v0.2.0

Added

  • Add middleware.NewAddTraceIDHeaderMiddleware() to return the request's trace ID in the X-Trace-ID response header.

Changed

  • Require Go 1.26 or newer.

Security

  • Bump google.golang.org/grpc to v1.83.2, golang.org/x/crypto to v0.57.0, golang.org/x/net to v0.59.0, OpenTelemetry to v1.47.0 and github.com/gorilla/schema to v1.4.1 to fix known vulnerabilities.

v0.1.2

v0.1.1

  • Added more documentation.

v0.1.0

  • Added dhttp.<>Error to represents all HTTP errors.

  • Added dhttp.WriteErrorResponse(...) in addition to dhttp.WriteError(...) to control the message logged.

  • Initial release.

Commits

Updates github.com/ClickHouse/clickhouse-go/v2 from 2.48.0 to 2.49.0

Release notes

Sourced from github.com/ClickHouse/clickhouse-go/v2's releases.

v2.49.0

What's Changed

Improvements 🚀

Bug fixes 🐛

Other Changes 🛠

... (truncated)

Changelog

Sourced from github.com/ClickHouse/clickhouse-go/v2's changelog.

v2.49.0, 2026-10-08

What's Changed

Improvements 🚀

Bug fixes 🐛

Other Changes 🛠

... (truncated)

Commits
  • 41a8511 Update release notes
  • 1b674b6 Merge pull request #2060 from ClickHouse/kavirajk/ci-ubuntu-26.04
  • d137912 Merge branch 'main' into kavirajk/ci-ubuntu-26.04
  • 66b6f9a chore: change the CI runner
  • 588cef5 Merge pull request #2059 from ClickHouse/kavirajk/upgrade-deps
  • e4e923a chore: test utils cleanup
  • 4269532 Merge branch 'main' into kavirajk/upgrade-deps
  • 581d7ad chore: revert the sys and crypto change
  • 2cd020f Merge pull request #2057 from ClickHouse/kavirajk/flaky-tests-on-cloud-main
  • 15b066d chore: remove github.com/mkevac/debugcharts dep
  • Additional commits viewable in compare view

Updates github.com/bmatcuk/doublestar/v4 from 4.10.2 to 4.10.3

Release notes

Sourced from github.com/bmatcuk/doublestar/v4's releases.

Handles character ranges when using WithCaseInsensitive

Character ranges, such as [a-z] would not match things like A when using WithCaseInsensitive. This release fixes that.

Thanks to @​bensynapse for bringing this to my attention.

Full Changelog: bmatcuk/doublestar@v4.10.2...v4.10.3

Commits

Updates github.com/charmbracelet/x/ansi from 0.11.8 to 0.11.9

Commits
  • faa4adf ansi/v0.11.9
  • 09f7503 feat(ansi): OSC 7501 (#1004)
  • ad85c59 chore(powernap): update lsp configs from nvim-lspconfig
  • 953920d nerdfont/v0.1.0
  • 4edfc00 feat(nerdfont): overrides (#1000)
  • 7be62f4 chore(deps): bump golang.org/x/sys in /term in the all group (#996)
  • 29bfdbd feat: nerdfont
  • 9c77d67 chore(powernap): update lsp configs from nvim-lspconfig
  • d676b01 v0.1.0 for charmtone and slices
  • 53e2afe chore(powernap): update lsp configs from nvim-lspconfig
  • Additional commits viewable in compare view

Updates github.com/moby/moby/api from 1.56.0 to 1.56.1

Release notes

Sourced from github.com/moby/moby/api's releases.

api/v1.56.1

1.56.1

Changelog

Commits
  • 14ebc60 Merge pull request #53830 from tonistiigi/update-buildkit-v0.34.0-rc1
  • 8eded0e Merge pull request #53671 from thaJeztah/add_WithHTTPRequestHook
  • c4e39af Merge pull request #53596 from vvoland/c8d-refactor-imgload
  • b8a569e client: add WithHTTPRequestHook option
  • 0fed273 Merge pull request #53803 from thaJeztah/etchosts_cleanups
  • 80c72a3 Merge pull request #53831 from corhere/fix-dnsproxy-servfail-test
  • 1cfa161 daemon/containerd: Split image loading into import and unpack steps
  • e7272aa Merge pull request #53606 from flostellbrink/fix/swagger-yaml-indentation
  • 357096e libnetwork/etchosts: keep file open when updating hosts
  • 012b2ef libnetwork/etchosts: propagate file close errors
  • Additional commits viewable in compare view

Updates github.com/pelletier/go-toml/v2 from 2.2.4 to 2.4.3

Release notes

Sourced from github.com/pelletier/go-toml/v2's releases.

v2.4.3

What's Changed

What's new

Fixed bugs

Documentation

Other changes

New Contributors

Full Changelog: pelletier/go-toml@v2.4.2...v2.4.3

v2.4.2

What's Changed

Fixed bugs

Full Changelog: pelletier/go-toml@v2.4.1...v2.4.2

v2.4.1

What's Changed

Fixed bugs

Full Changelog: pelletier/go-toml@v2.4.0...v2.4.1

v2.4.0

What's Changed

What's new

... (truncated)

Commits
  • 071a36c fix: bound array and inline table nesting depth to prevent stack-overflow DoS...
  • 57fec25 Add RawMessage marshal support to unstable (#1084)
  • 79f82e3 fix: error instead of panic on nil unexported embedded pointer (#1089)
  • a28afed unstable/kind: drop duplicate 'a' from LocalDate comment (#1062)
  • 6fa69af fix: do not recurse forever on recursively embedded structs (#1087)
  • 82b792e fix: report table placement errors with position and key context (#1086)
  • f93de50 perf: avoid interface boxing when decoding date/time values (#1085)
  • 21f8286 Deliver the whole document to a root Unmarshaler (#994) (#1083)
  • 98e94ae Update bundled toml.abnf to TOML 1.1.0 and pin spec-corner behaviour (#1082)
  • 35f78d5 Fix invalid TOML from commented multi-line values (#1081)
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.24.1 to 1.25.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.25.0

⚠️ This release raises the minimum required Go version to 1.26 and includes breaking API changes in api/prometheus/v1 (see the [CHANGE] entries below). ⚠️

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139
  • [BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135

What's Changed

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139
  • [BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135
Commits

Updates github.com/shopspring/decimal from 1.4.0 to 1.5.0

Release notes

Sourced from github.com/shopspring/decimal's releases.

v1.5.0

Full Changelog can be found in CHANGELOG.md. Please read its BEHAVIOR CHANGES section before upgrading.

New Contributors

Changelog

Sourced from github.com/shopspring/decimal's changelog.

Decimal v1.5.0

BEHAVIOR CHANGES

  • NewFromString and UnmarshalBinary, and so JSON, text, SQL, gob and Spanner decoding, reject exponents larger than the new MaxDecodeExponent setting (default 10,000). Such input could hang the process or use gigabytes of memory. Raise MaxDecodeExponent if you need larger exponents #440
  • Pow, PowWithPrecision, PowInt32 and PowBigInt round correctly. Results for fractional exponents have PowPrecisionNegativeExponent (16) decimal places, and negative powers that used to return 0 keep 16 significant digits, so 10^-18 is 0.000000000000000001. Results too large to represent return an error, or 0 from Pow, instead of hanging or panicking #439
  • RoundUp, RoundDown, RoundCeil and RoundFloor always return exponent -places, like Round. Values don't change, but Exponent(), Coefficient() and String() with TrimTrailingZeros = false can #426 #441
  • Truncate supports negative precision: 5432 truncated to -2 is 5400. Before, it returned 5432 unchanged #426
  • Shift panics when the exponent overflows an int32, instead of wrapping around #437
  • NewFromString rejects a sign right after a leading decimal point, such as ".-5" #447

FEA...

Description has been truncated

@dependabot
Bump the all group across 1 directory with 17 updates
7c3539c 
Bumps the all group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/streamingfast/dhttp](https://github.com/streamingfast/dhttp) | `0.1.3-0.20251218140957-6d46b8f12eb1` | `0.2.0` |
| [github.com/ClickHouse/clickhouse-go/v2](https://github.com/ClickHouse/clickhouse-go) | `2.48.0` | `2.49.0` |
| [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) | `4.10.2` | `4.10.3` |
| [github.com/charmbracelet/x/ansi](https://github.com/charmbracelet/x) | `0.11.8` | `0.11.9` |
| [github.com/moby/moby/api](https://github.com/moby/moby) | `1.56.0` | `1.56.1` |
| [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) | `2.2.4` | `2.4.3` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.24.1` | `1.25.0` |
| [github.com/shopspring/decimal](https://github.com/shopspring/decimal) | `1.4.0` | `1.5.0` |
| [github.com/streamingfast/sf-tracing](https://github.com/streamingfast/sf-tracing) | `0.0.0-20251218140752-bafd5572499f` | `0.0.0-20260716142341-6172a527bdd6` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.71.0` | `0.72.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` |
| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.41.0` | `0.42.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.59.0` | `0.61.0` |
| [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.30` | `0.0.31` |
| [github.com/tidwall/gjson](https://github.com/tidwall/gjson) | `1.19.0` | `1.20.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.23.0` | `0.24.0` |



Updates `github.com/streamingfast/dhttp` from 0.1.3-0.20251218140957-6d46b8f12eb1 to 0.2.0
- [Release notes](https://github.com/streamingfast/dhttp/releases)
- [Changelog](https://github.com/streamingfast/dhttp/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/streamingfast/dhttp/commits/v0.2.0)

Updates `github.com/ClickHouse/clickhouse-go/v2` from 2.48.0 to 2.49.0
- [Release notes](https://github.com/ClickHouse/clickhouse-go/releases)
- [Changelog](https://github.com/ClickHouse/clickhouse-go/blob/main/CHANGELOG.md)
- [Commits](ClickHouse/clickhouse-go@v2.48.0...v2.49.0)

Updates `github.com/bmatcuk/doublestar/v4` from 4.10.2 to 4.10.3
- [Release notes](https://github.com/bmatcuk/doublestar/releases)
- [Commits](bmatcuk/doublestar@v4.10.2...v4.10.3)

Updates `github.com/charmbracelet/x/ansi` from 0.11.8 to 0.11.9
- [Commits](charmbracelet/x@ansi/v0.11.8...ansi/v0.11.9)

Updates `github.com/moby/moby/api` from 1.56.0 to 1.56.1
- [Release notes](https://github.com/moby/moby/releases)
- [Commits](moby/moby@api/v1.56.0...api/v1.56.1)

Updates `github.com/pelletier/go-toml/v2` from 2.2.4 to 2.4.3
- [Release notes](https://github.com/pelletier/go-toml/releases)
- [Commits](pelletier/go-toml@v2.2.4...v2.4.3)

Updates `github.com/prometheus/client_golang` from 1.24.1 to 1.25.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.25.0/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.24.1...v1.25.0)

Updates `github.com/shopspring/decimal` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/shopspring/decimal/releases)
- [Changelog](https://github.com/shopspring/decimal/blob/master/CHANGELOG.md)
- [Commits](shopspring/decimal@v1.4.0...v1.5.0)

Updates `github.com/streamingfast/sf-tracing` from 0.0.0-20251218140752-bafd5572499f to 0.0.0-20260716142341-6172a527bdd6
- [Commits](https://github.com/streamingfast/sf-tracing/commits)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.71.0 to 0.72.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.71.0...zpages/v0.72.0)

Updates `go.opentelemetry.io/otel` from 1.46.0 to 1.47.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0)

Updates `go.opentelemetry.io/otel/trace` from 1.46.0 to 1.47.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0)

Updates `golang.org/x/mod` from 0.41.0 to 0.42.0
- [Commits](golang/mod@v0.41.0...v0.42.0)

Updates `golang.org/x/net` from 0.59.0 to 0.61.0
- [Commits](golang/net@v0.59.0...v0.61.0)

Updates `github.com/mattn/go-runewidth` from 0.0.30 to 0.0.31
- [Commits](mattn/go-runewidth@v0.0.30...v0.0.31)

Updates `github.com/tidwall/gjson` from 1.19.0 to 1.20.0
- [Commits](tidwall/gjson@v1.19.0...v1.20.0)

Updates `golang.org/x/sync` from 0.23.0 to 0.24.0
- [Commits](golang/sync@v0.23.0...v0.24.0)

---
updated-dependencies:
- dependency-name: github.com/streamingfast/dhttp
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/ClickHouse/clickhouse-go/v2
  dependency-version: 2.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/bmatcuk/doublestar/v4
  dependency-version: 4.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/charmbracelet/x/ansi
  dependency-version: 0.11.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/moby/moby/api
  dependency-version: 1.56.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/pelletier/go-toml/v2
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/shopspring/decimal
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/streamingfast/sf-tracing
  dependency-version: 0.0.0-20260716142341-6172a527bdd6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/mod
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/net
  dependency-version: 0.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/mattn/go-runewidth
  dependency-version: 0.0.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/tidwall/gjson
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/sync
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants