Skip to content

chore(deps): bump the go-deps group across 1 directory with 20 updates - #238

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-efe87db4df
Open

chore(deps): bump the go-deps group across 1 directory with 20 updates#238
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-efe87db4df

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown

Bumps the go-deps group with 20 updates in the / directory:

Package From To
cloud.google.com/go/kms 1.33.0 1.35.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity 1.14.1 1.15.0
github.com/aws/aws-sdk-go-v2 1.45.1 1.47.3
github.com/aws/aws-sdk-go-v2/config 1.33.1 1.33.9
github.com/aws/aws-sdk-go-v2/service/kms 1.57.1 1.61.4
github.com/chromedp/chromedp 0.16.0 0.21.0
github.com/getsentry/sentry-go 0.49.0 0.50.0
github.com/jackc/pgx/v5 5.10.0 5.11.0
github.com/minio/minio-go/v7 7.3.0 7.4.1
github.com/pressly/goose/v3 3.27.3 3.29.0
github.com/prometheus/client_golang 1.24.1 1.25.0
github.com/riverqueue/river 0.46.0 0.49.0
github.com/riverqueue/river/riverdriver/riverpgxv5 0.46.0 0.49.0
github.com/riverqueue/river/rivertype 0.46.0 0.49.0
go.opentelemetry.io/otel 1.46.0 1.47.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace 1.46.0 1.47.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 1.46.0 1.47.0
go.opentelemetry.io/otel/sdk 1.46.0 1.47.0
go.opentelemetry.io/otel/trace 1.46.0 1.47.0
golang.org/x/crypto 0.56.0 0.58.0

Updates cloud.google.com/go/kms from 1.33.0 to 1.35.0

Release notes

Sourced from cloud.google.com/go/kms's releases.

retail: v1.35.0

1.35.0 (2026-09-23)

Features

cloudbuild: v1.35.0

1.35.0 (2026-10-15)

Features

video: v1.34.0

1.34.0 (2026-09-23)

Features

Changelog

Sourced from cloud.google.com/go/kms's changelog.

1.35.0 (2024-10-23)

Features

  • documentai: Add RESOURCE_EXHAUSTED to retryable status codes for ProcessDocument method (6e69d2e)
  • documentai: Added an url for issue reporting and api short name (6e69d2e)
  • documentai: Updated the exponential backoff settings for the Document AI ProcessDocument and BatchProcessDocuments methods (6e69d2e)

Bug Fixes

  • documentai: Update google.golang.org/api to v0.203.0 (8bb87d5)
  • documentai: WARNING: On approximately Dec 1, 2024, an update to Protobuf will change service registration function signatures to use an interface instead of a concrete type in generated .pb.go files. This change is expected to affect very few if any users of this client library. For more information, see googleapis/google-cloud-go#11020. (8bb87d5)

1.34.0 (2024-09-12)

Features

  • documentai: Add API fields for the descriptions of entity type and property in the document schema (2d5a9f9)

Bug Fixes

  • documentai: Bump dependencies (2ddeb15)
Commits
  • 8a17bee chore: release main (#20540)
  • 0783130 chore(main): release agentplatform 0.22.0
  • cc91d66 feat: update API sources and regenerate (#20570)
  • d3974fa chore(spanner): generate private vtprotobuf copy of google.spanner.v1 under i...
  • 39f0ea5 fix(auth): honor DisableAsyncRefresh and EarlyTokenRefresh consistently (#20564)
  • 9b3c9a5 chore: update librarian version to v0.45.0 (#20565)
  • 68b3f33 fix(bigtable): detect omitted MutateRows response entries in ApplyBulk (#20557)
  • 17626fb test(spanner): unflake TestIntegration_ListDatabaseRoles (#20562)
  • ec37b97 test(spanner): unflake TestIntegration_BatchQuery and TestIntegration… (#20560)
  • d0df0a6 chore: remove unused .librarian directory (#20556)
  • Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.14.1 to 1.15.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.15.0

1.15.0 (2026-10-14)

Features Added

  • ManagedIdentityCredential and DefaultAzureCredential support user-assigned managed identities on Azure Arc when the agent supports them
  • WorkloadIdentityCredential supports identity binding mode via WorkloadIdentityCredentialOptions.EnableAzureProxy

Bugs Fixed

  • ManagedIdentityCredential verifies the Service Fabric endpoint's certificate against IDENTITY_SERVER_THUMBPRINT and rejects redirects

Other Changes

  • On Service Fabric, a custom ClientOptions.Transport must be an *http.Client with a nil Transport or a standard *http.Transport without custom TLS dialing or verification callbacks. Unsupported transports now cause credential construction to fail
  • Upgraded dependencies
Commits
  • bb7200c Update azcore v1.15.0 release date (#23569)
  • d112082 [azopenaiextensions] Pushing release date to Monday (#23565)
  • 9522165 [azopenai] 2024-08-01-preview generation (#23554)
  • 42922c1 [azeventhubs,azservicebus] Applying retry fix to both eventhubs and servicebu...
  • 5df372c Use common OIDC token env vars in post scripts (#23549)
  • 1c2a108 BearerTokenPolicy handles CAE claims challenges by default (#23414)
  • 8759ee6 [azopenaiextensions] Prepping for release tomorrow (#23551)
  • a230ef2 [Search] Remove myself from CODEOWNERS (#23560)
  • a743757 Sync eng/common directory with azure-sdk-tools for PR 9106 (#23555)
  • 7c2d3a7 Use equality function check for persist oidc token step (#23559)
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.45.1 to 1.47.3

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.1 to 1.33.9

Commits

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.57.1 to 1.61.4

Commits

Updates github.com/chromedp/chromedp from 0.16.0 to 0.21.0

Release notes

Sourced from github.com/chromedp/chromedp's releases.

v0.21.0

The package remote has its own WebSocket client, and it is a package of the core module now. The nested module remote and the dependency github.com/gobwas/ws are gone. The core module still needs only the standard library and cdproto.

The import path is the same: github.com/chromedp/chromedp/remote. The public API of the package is the same.

Upgrade: if your go.mod has a line for github.com/chromedp/chromedp/remote, remove it (go mod tidy does that). Go reports an ambiguous import while both the old nested module and the core module provide the package. The tag remote/v0.2.0 is the last version of the nested module.

The client follows RFC 6455: it checks the handshake, joins fragmented messages, checks UTF-8 and the size of a message, answers pings, and does the close handshake. It does not support extensions such as permessage-deflate. Go 1.25 and later are supported.

v0.20.1

Documentation only. The README, the package documentation and the docs have the current versions (chromedp v0.20.0, cdproto v0.157.8, remote v0.2.0), the CI matrix and the release history. The README describes termcast and the 43 programs of chromedp/examples.

v0.20.0

chromedp supports Go 1.25 and later. Before this release, the module needed Go 1.27 (see #1536).

  • The JSON types come from github.com/chromedp/cdproto/cdp/jsonv2. With Go 1.27 or GOEXPERIMENT=jsonv2 they are aliases of the types of the standard encoding/json/v2 and jsontext, so the public API is the same. With Go 1.25 and 1.26 they come from github.com/go-json-experiment/json.
  • The modules chromedp, remote and test use go 1.25 and cdproto v0.157.8.
  • The CI runs Go 1.25, 1.26 and stable on Linux, stable on Windows and macOS, and the experiment and the compatibility tag.

v0.19.1

Documentation only. The README and the package documentation describe termcast, which draws the screen of a page in a terminal, and the 43 programs of chromedp/examples.

v0.19.0

This release adds new actions and options, fixes bugs, and works on Linux, Windows and macOS in CI. See docs/MIGRATION.md for every change.

New

  • Tap and TapXY send a touch tap.
  • DragAndDrop and DragAndDropXY drag and drop with the mouse and with HTML5 drag and drop.
  • Console reads the console, the uncaught exceptions and the browser log of a page as one iterator.
  • ExposeFunc calls a Go function from the page, like exposeFunction in Puppeteer.
  • PrintToPDF takes options for the paper, the margins, the scale, the page ranges, the header and the footer, the outline and a stream.
  • WithNewWindow chooses a window or a tab for a new target. NoInheritEnv starts the browser with only the given variables. WithDetachOnCancel leaves the tab open when the context ends.
  • EvalAwaitPromise waits for a promise that an expression returns.

Fixed

  • Call on a Target or a Browser returns an error when the connection to the browser is lost, and does not hang.
  • The exec allocator keeps the order of the flags.
  • WaitNotPresent works with a JSPath that gives null or an empty list.
  • Evaluate returns ErrJSNull for null when the type cannot be nil, and Text works on a text node.
  • The pipe transport, the allocator and the tests work on Windows and macOS, and the default browser lookup on Windows falls back to Microsoft Edge.

Notes

  • Use errors.Is(err, context.Canceled) and not == for the error of a call after the connection was lost.
  • The tests run on Linux, Windows and macOS in CI, and every night against the stable, beta and dev channels of headless-shell.
  • The module github.com/chromedp/chromedp/remote is unchanged and stays at remote/v0.1.0.
Commits
  • 7862adf Run one package at a time in the Chrome tests of the CI
  • 9cbfa1c Make two websocket tests pass on Windows
  • 295870b Replace gobwas/ws with a WebSocket client of this repository
  • dddfecf Sweep the documentation
  • 156907f Require chromedp v0.20.0 in the test module
  • a5acf48 Require chromedp v0.20.0 in the remote module
  • 4a5437d Support Go 1.25 and later
  • 3c56b8b Describe termcast and the new examples in the README and the package document...
  • 67e1ea2 Update the actions of the workflows to checkout v7 and setup-go v7
  • 8b41617 Wait longer for the report of an HTML5 drag, and ignore the Windows pipe swit...
  • Additional commits viewable in compare view

Updates github.com/getsentry/sentry-go from 0.49.0 to 0.50.0

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.50.0

Breaking Changes 🛠

  • adds NoopClient implementation. The SDK now returns a non-nil noop client and handles the previous nil checks with checking for a disabled client. Code paths that were using nil checks now need to check for client.IsEnabled. by @​giortzisg in #1365

New Features ✨

Crons

Bug Fixes 🐛

Internal Changes 🔧

Deps

  • Bump getsentry/craft from 2.30.1 to 2.31.2 by @​dependabot in #1441
  • Bump getsentry/github-workflows/validate-pr from 4013fc6e1aeb1be1f9d3b4d232624f0ec1afa613 to 36c729264d2edc29ebae61950c50e1e9f043ad7e by @​dependabot in #1442
  • Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.43.0 to 1.45.0 in /otel/otlp by @​dependabot in #1430
  • Bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 by @​dependabot in #1431
  • Bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @​dependabot in #1422
  • Bump getsentry/craft from 2.27.2 to 2.30.1 by @​dependabot in #1411
  • Bump google.golang.org/grpc from 1.82.1 to 1.83.1 by @​dependabot in #1413
Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.50.0

Breaking Changes 🛠

  • adds NoopClient implementation. The SDK now returns a non-nil noop client and handles the previous nil checks with checking for a disabled client. Code paths that were using nil checks now need to check for client.IsEnabled. by @​giortzisg in #1365

New Features ✨

Crons

Bug Fixes 🐛

Internal Changes 🔧

Deps

  • Bump getsentry/craft from 2.30.1 to 2.31.2 by @​dependabot in #1441
  • Bump getsentry/github-workflows/validate-pr from 4013fc6e1aeb1be1f9d3b4d232624f0ec1afa613 to 36c729264d2edc29ebae61950c50e1e9f043ad7e by @​dependabot in #1442
  • Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.43.0 to 1.45.0 in /otel/otlp by @​dependabot in #1430
  • Bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 by @​dependabot in #1431
  • Bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @​dependabot in #1422
  • Bump getsentry/craft from 2.27.2 to 2.30.1 by @​dependabot in #1411
  • Bump google.golang.org/grpc from 1.82.1 to 1.83.1 by @​dependabot in #1413
Commits
  • e02bc2a release: 0.50.0
  • 1b3c561 fix(slog): stop replaceAttrs from mutating the handler's grouped attrs (#1439)
  • 7897fe4 fix(zerolog): unescape JSON string values before sending to Sentry (#1440)
  • e3fb470 build(deps): bump getsentry/craft from 2.30.1 to 2.31.2 (#1441)
  • d1f06d9 feat(crons): add WithMonitor helper (#1443)
  • 0a0b2ad fix: guard concurrent flushes (#1449)
  • cdcad4a build(deps): bump getsentry/github-workflows/validate-pr (#1442)
  • 6afdeb6 fix(dsn): build envelope URL without re-parsing (#1436)
  • 48bb0a5 refactor: move scope information under scopeData (#1370)
  • 85db5bc feat: add noop client implementation (#1365)
  • Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.10.0 to 5.11.0

Release notes

Sourced from github.com/jackc/pgx/v5's releases.

v5.11.0

This release adds direct PostgreSQL type scanning through database/sql on Go 1.27, improves compatibility with libpq connection strings and PostgreSQL date/time values, and includes further decoder hardening. See Changes for connection-string and date/time behavior changes that may affect existing applications.

Features

  • stdlib: support Go 1.27's driver.RowsColumnScanner, allowing PostgreSQL types such as arrays and ranges to be scanned directly into Go values without pgtype.Map.SQLScanner. Existing database/sql scalar conversions and sql.Scanner behavior are preserved. The minimum supported Go version remains 1.25.
  • Add Rows.TypeMap to expose the type map used to decode rows, including rows created by RowsFromResultReader that have no underlying Conn. Custom implementations of Rows, including mocks, must add this method.
  • pgconn: add Config.MaxProtocolMessageBodyLen to configure the maximum incoming protocol message body size (carter-ya)
  • pgconn: add ErrReadOnlyConnection, ErrReadWriteConnection, ErrPrimaryConnection, and ErrStandbyConnection sentinel errors for target_session_attrs validation, allowing callers to use errors.Is (Adrian-Stefan Mares)
  • pgxpool: accept pool_ping_timeout in connection strings to configure Config.PingTimeout. The default is zero; zero and negative durations mean no timeout (1991santhu)

Changes

  • Name-based row-to-struct mapping now matches explicit db tags case-insensitively, with exact matches taking precedence so tags can still distinguish quoted column names that differ only by case (AlisinaDevelo)

  • pgconn: resolve the OS user account only when no user is supplied by the connection string, environment, or service file, avoiding unnecessary account lookups and crashes in some restricted container environments. Home-directory defaults for password, service, and TLS files remain available independently of the account lookup. On Unix these now use $HOME rather than the OS account's home directory (Mohamed MAACHE)

  • pgtype: date, timestamp and timestamptz text values are now parsed and written by a hand-written parser and encoder for PostgreSQL's ISO date/time format instead of time.Parse and time.Format. Go's layout language cannot express a variable-width year or the BC era, which is the root of the bugs below. The text scan path is roughly 2.5x faster for timestamp and timestamptz. Bug fixes:

    • timestamp and timestamptz no longer silently move February 29 of a BC leap year to March 1 when encoding. time.Date(-4712, 2, 29, ...) was written as 4713-03-01 BC and is now written as 4713-02-29 BC. This affected ordinary four-digit BC years, not only extended-range ones. date was never affected.
    • timestamp and timestamptz can now scan BC leap days. 4713-02-29 BC previously failed with day out of range. date could already scan them.
    • Years past 9999 can now be scanned. 10000-01-02 03:04:05 previously failed to parse, so timestamp and timestamptz values at the high end of PostgreSQL's range were unreadable over the simple protocol and in any other text-format result.
    • time.Time arguments in the simple protocol now encode BC dates correctly, using the same timestamp encoder.
    • Fractional seconds beyond microsecond precision are rounded the way the server rounds them (round half to even, carrying into the rest of the value) instead of being kept at full precision. PostgreSQL never sends more than six fractional digits, so this only affects values from other sources.

    Behavior changes:

    • date now rejects impossible dates instead of normalizing them. 2024-02-30 returned 2024-03-01 and 2024-13-01 returned 2025-01-01; both are now errors. timestamp and timestamptz already rejected them.
    • All three types now reject values outside PostgreSQL's range for that type, in the binary format as well as the text format. PostgreSQL never sends out-of-range dates, so this only affects corrupt or hand-built input; the range

... (truncated)

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.11.0 (September 7, 2026)

This release adds direct PostgreSQL type scanning through database/sql on Go 1.27, improves compatibility with libpq connection strings and PostgreSQL date/time values, and includes further decoder hardening. See Changes for connection-string and date/time behavior changes that may affect existing applications.

Features

  • stdlib: support Go 1.27's driver.RowsColumnScanner, allowing PostgreSQL types such as arrays and ranges to be scanned directly into Go values without pgtype.Map.SQLScanner. Existing database/sql scalar conversions and sql.Scanner behavior are preserved. The minimum supported Go version remains 1.25.
  • Add Rows.TypeMap to expose the type map used to decode rows, including rows created by RowsFromResultReader that have no underlying Conn. Custom implementations of Rows, including mocks, must add this method.
  • pgconn: add Config.MaxProtocolMessageBodyLen to configure the maximum incoming protocol message body size (carter-ya)
  • pgconn: add ErrReadOnlyConnection, ErrReadWriteConnection, ErrPrimaryConnection, and ErrStandbyConnection sentinel errors for target_session_attrs validation, allowing callers to use errors.Is (Adrian-Stefan Mares)
  • pgxpool: accept pool_ping_timeout in connection strings to configure Config.PingTimeout. The default is zero; zero and negative durations mean no timeout (1991santhu)

Changes

  • Name-based row-to-struct mapping now matches explicit db tags case-insensitively, with exact matches taking precedence so tags can still distinguish quoted column names that differ only by case (AlisinaDevelo)

  • pgconn: resolve the OS user account only when no user is supplied by the connection string, environment, or service file, avoiding unnecessary account lookups and crashes in some restricted container environments. Home-directory defaults for password, service, and TLS files remain available independently of the account lookup. On Unix these now use $HOME rather than the OS account's home directory (Mohamed MAACHE)

  • pgtype: date, timestamp and timestamptz text values are now parsed and written by a hand-written parser and encoder for PostgreSQL's ISO date/time format instead of time.Parse and time.Format. Go's layout language cannot express a variable-width year or the BC era, which is the root of the bugs below. The text scan path is roughly 2.5x faster for timestamp and timestamptz. Bug fixes:

    • timestamp and timestamptz no longer silently move February 29 of a BC leap year to March 1 when encoding. time.Date(-4712, 2, 29, ...) was written as 4713-03-01 BC and is now written as 4713-02-29 BC. This affected ordinary four-digit BC years, not only extended-range ones. date was never affected.
    • timestamp and timestamptz can now scan BC leap days. 4713-02-29 BC previously failed with day out of range. date could already scan them.
    • Years past 9999 can now be scanned. 10000-01-02 03:04:05 previously failed to parse, so timestamp and timestamptz values at the high end of PostgreSQL's range were unreadable over the simple protocol and in any other text-format result.
    • time.Time arguments in the simple protocol now encode BC dates correctly, using the same timestamp encoder.
    • Fractional seconds beyond microsecond precision are rounded the way the server rounds them (round half to even, carrying into the rest of the value) instead of being kept at full precision. PostgreSQL never sends more than six fractional digits, so this only affects values from other sources.

    Behavior changes:

    • date now rejects impossible dates instead of normalizing them. 2024-02-30 returned 2024-03-01 and 2024-13-01 returned 2025-01-01; both are now errors. timestamp and timestamptz already rejected them.
    • All three types now reject values outside PostgreSQL's range for that type, in the binary format as well as the

... (truncated)

Commits
  • 5e583fa Update changelog for v5.11.0
  • 3927116 Apply gofumpt formatting required by lint
  • eb07165 Quote filesystem paths in development connection strings
  • cf5938f Allow unsigned digit counts in binary numeric encoding
  • 3930cf5 Accept PostgreSQL POSIX timezone offsets in text timestamps
  • 93261be Prefer exact db tag matches when mapping rows to structs
  • e8d8ad1 Merge pull request #2647 from sueun-dev/fix-range-text-quoting-20260906
  • 01d2fd3 Merge pull request #2644 from eliranbz/fix-failed-prepare-deallocation
  • 9b7e3be Merge pull request #2645 from ash2k/move-channel
  • 76d78f5 Merge pull request #2643 from AshSgDe29071999/fix/hstore-pairs-estimate-clamp
  • Additional commits viewable in compare view

Updates github.com/minio/minio-go/v7 from 7.3.0 to 7.4.1

Release notes

Sourced from github.com/minio/minio-go/v7's releases.

v7.4.1

What's Changed

Full Changelog: minio/minio-go@v7.4.0...v7.4.1

v7.4.0

Go 1.26 or later is now required. Go 1.25 is out of support, and golang.org/x/net v0.60.0 (the fix for GO-2026-6603, 6610, 6611, 6612 and 6617) requires Go 1.26 (#2313).

What's Changed

New Contributors

... (truncated)

Commits
  • 1a663bb update lib version to v7.4.1
  • c68b12c fix: abort failed uploads even when the caller cancels (#2318)
  • 8a72fb4 update lib version to v7.4.0
  • 85df9ce get: add opt-in parallel range GET via ParallelWorkers (#2317)
  • 91dc4dd fix: send RetainUntilDate in UTC (#2315)
  • 79b8caa compose: allow parallel upload-part-copy with NumThreads (#2316)
  • 1ab9013 docs: fix 'Recieved' typo in CancelBucketReplicationResync (#2314)
  • 21d2ec1 fix: trim whitespace from bucket location (#2274)
  • 450a9b3 credentials: allow NewKubernetesIdentity to read a projected token file (#2312)
  • aeb0641 docs: remove broken Slack badges (#2304)
  • Additional commits viewable in compare view

Updates github.com/pressly/goose/v3 from 3.27.3 to 3.29.0

Release notes

Sourced from github.com/pressly/goose/v3's releases.

v3.29.0

Added

Changed

  • Various dependency upgrades

v3.28.0

Added

  • CLI: azuresql driver for Azure SQL with Microsoft Entra ID (Azure AD) authentication via fedauth connection string parameters, e.g. goose azuresql "sqlserver://host?database=mydb&fedauth=ActiveDirectoryDefault" status. Excluded when building with the no_mssql or no_azuresql tags (#1109)
  • MySQL/MariaDB table-based Locker via lock.NewMySQLTableLocker, the MySQL counterpart to the Postgres table locker from #993, accepting the same TableLockerOption set (#1075)

Changed

  • Minimum Go version is now 1.26
  • ClickHouse: new goose_db_version tables are created with ORDER BY (version_id) instead of ORDER BY (date). Existing tables are unchanged (#1085)
  • MySQL/TiDB: the tstamp column is now DATETIME instead of TIMESTAMP, which is capped at 2038-01-19 (#1053). Only newly created tables are affected; existing tables can be updated with: 
    ALTER TABLE goose_db_version MODIFY tstamp datetime NULL DEFAULT CURRENT_TIMESTAMP;
  • Various dependency upgrades

Fixed

  • goose create returns a clear "file exists" error, including the path, instead of %!w(<nil>) when the migration file already exists (#1104)
Changelog

Sourced from github.com/pressly/goose/v3's changelog.

[v3.29.0] - 2026-10-11

Added

Changed

  • Various dependency upgrades

[v3.28.0] - 2026-09-02

Added

  • CLI: azuresql driver for Azure SQL with Microsoft Entra ID (Azure AD) authentication via fedauth connection string parameters, e.g. goose azuresql "sqlserver://host?database=mydb&fedauth=ActiveDirectoryDefault" status. Excluded when building with the no_mssql or no_azuresql tags (#1109)
  • MySQL/MariaDB table-based Locker via lock.NewMySQLTableLocker, the MySQL counterpart to the Postgres table locker from #993, accepting the same TableLockerOption set (#1075)

Changed

  • Minimum Go version is now 1.26

  • ClickHouse: new goose_db_version tables are created with ORDER BY (version_id) instead of ORDER BY (date). Existing tables are unchanged (#1085)

  • MySQL/TiDB: the tstamp column ...

    Description has been truncated

@dependabot
chore(deps): bump the go-deps group across 1 directory with 20 updates
207eba5 
Bumps the go-deps group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go) | `1.33.0` | `1.35.0` |
| [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.14.1` | `1.15.0` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.45.1` | `1.47.3` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.1` | `1.33.9` |
| [github.com/aws/aws-sdk-go-v2/service/kms](https://github.com/aws/aws-sdk-go-v2) | `1.57.1` | `1.61.4` |
| [github.com/chromedp/chromedp](https://github.com/chromedp/chromedp) | `0.16.0` | `0.21.0` |
| [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) | `0.49.0` | `0.50.0` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.10.0` | `5.11.0` |
| [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.3.0` | `7.4.1` |
| [github.com/pressly/goose/v3](https://github.com/pressly/goose) | `3.27.3` | `3.29.0` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.24.1` | `1.25.0` |
| [github.com/riverqueue/river](https://github.com/riverqueue/river) | `0.46.0` | `0.49.0` |
| [github.com/riverqueue/river/riverdriver/riverpgxv5](https://github.com/riverqueue/river) | `0.46.0` | `0.49.0` |
| [github.com/riverqueue/river/rivertype](https://github.com/riverqueue/river) | `0.46.0` | `0.49.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` |
| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` |
| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.56.0` | `0.58.0` |



Updates `cloud.google.com/go/kms` from 1.33.0 to 1.35.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@kms/v1.33.0...kms/v1.35.0)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.14.1 to 1.15.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azidentity/v1.14.1...sdk/azcore/v1.15.0)

Updates `github.com/aws/aws-sdk-go-v2` from 1.45.1 to 1.47.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.45.1...v1.47.3)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.1 to 1.33.9
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.33.1...config/v1.33.9)

Updates `github.com/aws/aws-sdk-go-v2/service/kms` from 1.57.1 to 1.61.4
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.57.1...service/fsx/v1.61.4)

Updates `github.com/chromedp/chromedp` from 0.16.0 to 0.21.0
- [Release notes](https://github.com/chromedp/chromedp/releases)
- [Commits](chromedp/chromedp@v0.16.0...v0.21.0)

Updates `github.com/getsentry/sentry-go` from 0.49.0 to 0.50.0
- [Release notes](https://github.com/getsentry/sentry-go/releases)
- [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-go@v0.49.0...v0.50.0)

Updates `github.com/jackc/pgx/v5` from 5.10.0 to 5.11.0
- [Release notes](https://github.com/jackc/pgx/releases)
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.10.0...v5.11.0)

Updates `github.com/minio/minio-go/v7` from 7.3.0 to 7.4.1
- [Release notes](https://github.com/minio/minio-go/releases)
- [Commits](minio/minio-go@v7.3.0...v7.4.1)

Updates `github.com/pressly/goose/v3` from 3.27.3 to 3.29.0
- [Release notes](https://github.com/pressly/goose/releases)
- [Changelog](https://github.com/pressly/goose/blob/main/CHANGELOG.md)
- [Commits](pressly/goose@v3.27.3...v3.29.0)

Updates `github.com/prometheus/client_golang` from 1.24.1 to 1.25.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.25.0/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.24.1...v1.25.0)

Updates `github.com/riverqueue/river` from 0.46.0 to 0.49.0
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.46.0...v0.49.0)

Updates `github.com/riverqueue/river/riverdriver/riverpgxv5` from 0.46.0 to 0.49.0
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.46.0...v0.49.0)

Updates `github.com/riverqueue/river/rivertype` from 0.46.0 to 0.49.0
- [Release notes](https://github.com/riverqueue/river/releases)
- [Changelog](https://github.com/riverqueue/river/blob/master/CHANGELOG.md)
- [Commits](riverqueue/river@v0.46.0...v0.49.0)

Updates `go.opentelemetry.io/otel` from 1.46.0 to 1.47.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.46.0 to 1.47.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.46.0 to 1.47.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.46.0 to 1.47.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0)

Updates `go.opentelemetry.io/otel/trace` from 1.46.0 to 1.47.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0)

Updates `golang.org/x/crypto` from 0.56.0 to 0.58.0
- [Commits](golang/crypto@v0.56.0...v0.58.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/kms
  dependency-version: 1.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.47.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/aws/aws-sdk-go-v2/service/kms
  dependency-version: 1.61.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/chromedp/chromedp
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/getsentry/sentry-go
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/minio/minio-go/v7
  dependency-version: 7.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/pressly/goose/v3
  dependency-version: 3.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/riverqueue/river
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/riverqueue/river/riverdriver/riverpgxv5
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/riverqueue/river/rivertype
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/crypto
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the area:runtime Suite Go runtime label Oct 19, 2026
@dependabot dependabot Bot added the type:chore Maintenance label Oct 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@santoshkumarradha santoshkumarradha Awaiting requested review from santoshkumarradha santoshkumarradha is a code owner

Assignees

No one assigned

Labels

area:runtime Suite Go runtime type:chore Maintenance

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants