Skip to content

chore: bump the all-dependencies group across 1 directory with 21 updates#498

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/all-dependencies-1c7daa4eac
Open

chore: bump the all-dependencies group across 1 directory with 21 updates#498
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/all-dependencies-1c7daa4eac

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 15 updates in the / directory:

Package From To
github.com/DataDog/datadog-go/v5 5.6.0 5.8.3
github.com/ProtonMail/go-crypto 1.1.6 1.4.1
github.com/agiledragon/gomonkey/v2 2.13.0 2.14.0
github.com/ethereum/go-ethereum 1.15.5 1.17.3
github.com/jackc/pgx/v5 5.6.0 5.10.0
github.com/jarcoal/httpmock 1.3.1 1.4.1
github.com/lib/pq 1.10.9 1.12.3
github.com/prometheus/client_golang 1.21.1 1.23.2
github.com/schollz/progressbar/v3 3.18.0 3.19.0
github.com/spf13/cobra 1.9.1 1.10.2
github.com/spf13/viper 1.20.0 1.21.0
go.uber.org/zap 1.27.0 1.28.0
gopkg.in/DataDog/dd-trace-go.v1 1.65.0 1.74.8
gorm.io/driver/postgres 1.5.11 1.6.0
gorm.io/gorm 1.25.12 1.31.1

Updates github.com/DataDog/datadog-go/v5 from 5.6.0 to 5.8.3

Release notes

Sourced from github.com/DataDog/datadog-go/v5's releases.

v5.8.3

See the CHANGELOG for the details on previous releases.

v5.8.2

See the CHANGELOG for the details on previous releases.

v5.8.1

See the Changelog for the details.

v5.8.0

See the Changelog for the details.

v5.7.1

Retracting v5.7.0 as it included a breaking change.

v5.7.0

See the Changelog for the details.

Changelog

Sourced from github.com/DataDog/datadog-go/v5's changelog.

5.8.3 / 2026-02-02

  • [IMPROVEMENT] Shard aggregator lock. See #351[], thanks [@​opsengine][].
  • [IMPROVEMENT] Fix race condition in statsd external_env initialization. See #352[], thanks [@​jprobinson][].

5.8.2 / 2025-12-03

  • [IMPROVEMENT] Optimistic allocation for Count and Set metrics. See #308[], thanks [@​opsengine][].

5.8.1 / 2025-10-10

  • [BUGFIX] Release new version to fix issue with tags.

5.8.0 / 2025-09-24

  • [FEATURE] Create ClientInterfaceEx adding Cardinality parameter to the metric functions. See #334[].
  • [IMPROVEMENT] Add support for DD_EXTERNAL_ENV for origin detection. See #326[].
  • [IMPROVEMENT] Add parameter for tag cardinality. See #327[].
  • [BUGFIX] Gracefully reconnect when UDS connection is severed. See #323[].

5.7.1 / 2025-08-21

  • [IMPROVEMENT] Revert 5.7.0 as it included a breaking change.

5.7.0 / 2025-08-19

  • [IMPROVEMENT] Add support for DD_EXTERNAL_ENV for origin detection. See #326[].
  • [IMPROVEMENT] Add parameter for tag cardinality. See #327[].
  • [BUGFIX] Gracefully reconnect when UDS connection is severed. See #323[].
Commits
  • c072b7e Update changelog and version number (#353)
  • b808812 Shard aggregator lock (#351)
  • e20587f Fix race condition in externalEnv initialization (#352)
  • 411ddaf statsd: remove global cardinality (#346)
  • 2132689 Merge pull request #348 from DataDog/carlosroman/AGTMETRICS-340-run-tests-in-...
  • 6a9e0e3 Running all tests in Go 1.12
  • c0918c7 Merge pull request #344 from DataDog/remeh/5.8.2
  • aa2260b Merge remote-tracking branch 'origin/master' into remeh/5.8.2
  • d8cc06e Merge pull request #345 from DataDog/remeh/upgrade-setup-go
  • 42590db github: naive try at upgrading setup-go
  • Additional commits viewable in compare view

Updates github.com/ProtonMail/go-crypto from 1.1.6 to 1.4.1

Release notes

Sourced from github.com/ProtonMail/go-crypto's releases.

Release v1.4.1

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.4.0...v1.4.1

Release v1.4.1-proton

This release is v1.4.1 with support for the following non-standardized features:

Release v1.4.0

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.3.0...v1.4.0

Release v1.4.0-proton

This release is v1.4.0 with support for the following non-standardized features:

Release v1.3.0

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.2.0...v1.3.0

Release v1.3.0-proton

This release is v1.3.0 with support for the following non-standardized features:

... (truncated)

Commits
  • 2e73b11 Properly handle ECC keys with invalid points (#304)
  • a8cc4f0 Merge pull request #298 from ProtonMail/feat/cleartext-hash-header
  • 57f891b Merge branch 'main' into feat/cleartext-hash-header
  • da5c190 Merge pull request #299 from ProtonMail/fix/ecdh-low-order-curve-points
  • 3cc59b0 Merge branch 'main' into feat/cleartext-hash-header
  • b11bd23 fix(ecdh): Do not allow low order public key points
  • b6bdd12 Merge pull request #294 from ProtonMail/chore/bump-go-and-circl
  • b1ff3d5 Bump crypto dependencies and min go version to 1.23
  • cfb2af9 fix(cleartext): Check hashes in headers
  • de87788 Add InsecureGenerateNonCriticalSignatureCreationTime option to generate non-c...
  • Additional commits viewable in compare view

Updates github.com/agiledragon/gomonkey/v2 from 2.13.0 to 2.14.0

Release notes

Sourced from github.com/agiledragon/gomonkey/v2's releases.

fix instruction cache issue on Darwin ARM64

On Darwin ARM64, the instruction cache was not flushed after modifying machine code, which could cause monkey patches to fail.

Reference: agiledragon/gomonkey#184

Commits
  • e846f93 Merge pull request #184 from sunmi-OS/master
  • 5c57be2 Fix the bug on the Darwin ARM64 architecture where the step of flushing the i...
  • See full diff in compare view

Updates github.com/ethereum/go-ethereum from 1.15.5 to 1.17.3

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Enzymatic Injector (v1.17.3)

This is a maintenance release with continued progress on the Amsterdam fork implementation. It also introduces ETH/70, which is now live on the network.

ethereum/execution-apis#762reexec has been removed from the tracing config:

  • memory: words are 0x-prefixed and padded to 32 bytes
  • storage: keys and values are 0x-prefixed
  • error: omitted when empty (previously serialized as "")

Geth

  • Add retry mechanism for checkpoint init in blsync (#33966)
  • Add subcommand for offline binary tree conversion (#33740)
  • Add code exporter for db export (#34696)

Core

  • Amsterdam fork updates:
  • Implement stack arena (#33960)
  • Implement EIP-7975: eth/70 partial block receipt lists (#33153)
  • Prerequisites of snap/2 protocol (#34083, #34649, #34654, #34874)
  • Implement history index pruner for path-mode archive nodes (#33999)
  • Add Prague chain segment pruning point for Hoodi (#34714)
  • Allow reorging head to parent within 32 blocks under ePBS (#34767)
  • Stop serving chain segment requests when data is unavailable (#34787)
  • Drop peers sending invalid bodies or receipts (#34745, #34870)
  • Add kzg4844 cell-related functions (#34766)
  • State database refactoring (#33102, #34700, #34763, #34724)
  • Binary trie improvements (#34055, #34110, #34670, #34676, #34680, #34690, #34754, #34758, #34777, #34794)
  • Merge EIP-4762 access events for all system calls (#34637)
  • Reject duplicate layers in the path database (#34642)
  • Omit empty slotNumber and fix block value collection in pre-Amsterdam engine API payloads (#34704)
  • Include the operand in EIP-8024 error messages (#34635)
  • Fix vmodule downgrades and propagate verbosity changes to derived loggers (#33111)
  • Fix incorrect fsync ordering for index file truncation (#34728)
  • Fix file descriptor leak in freezer error paths (#34735)
  • Fix size calculation in path database (#34828)
  • Fix gapped queue size cap in blobpool (#34831)
  • Improve txpool pending concurrency by using read-only locking (#32924)
  • Replace deprecated TypeMux with Feed (#32585)
  • Continue blob retrieval when individual cell proof extraction fails (#34891)
  • Use uint256 in core Message for faster gas calculations (#34934)

... (truncated)

Commits

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.1 to 2.27.7

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.27.7

Re-release of v2.26.7 as v2.27.7 for correct semver ordering.

v2.27.6

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.5...v2.27.6

v2.27.5

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.4...v2.27.5

v2.27.4

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.3...v2.27.4

v2.27.3

What's Changed

... (truncated)

Commits
  • 3406565 Update gorelease base version to v2.27.7
  • 8be4c86 Revert "feat(generator): harden opaque imports and fix snake case to go casin...
  • 63cba54 chore(deps): update googleapis digest to 46c183b (#6298)
  • 37163bf chore(deps): update actions/cache digest to cdf6c1f (#6297)
  • 64aa277 chore(deps): update googleapis digest to fe6c208 (#6296)
  • 7181022 chore(deps): update dependency bazel_features to v1.41.0 (#6293)
  • c39289d chore(deps): update dependency com_github_bazelbuild_buildtools to v8.5.1 (#6...
  • 6e3b4f3 Update gorelease base version to v2.27.6
  • e380725 chore(deps): update docker/login-action digest to c94ce9f (#6291)
  • bba4e0a fix(protoc-gen-openapiv2): prevent panic when generating OpenAPI for multiple...
  • Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.6.0 to 5.10.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.10.0 (June 3, 2026)

This release includes a significant amount of hardening against malicious or compromised PostgreSQL servers, contributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled message sizes, caps server-supplied SCRAM iteration counts, adds require_auth to restrict which authentication methods a server may use (mitigating downgrade attacks under sslmode=prefer), and ensures cancellation requests are sent over TLS when the original connection used TLS.

Features

  • Add require_auth to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)
  • Add ParseConfigOptions.ConnStringAllowedKeys to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)
  • Add StructArgs and StrictStructArgs for @-named queries (Tubelight30)
  • Add ErrConnClosed sentinel error and unwrap it from connLockError (Charlie Tonneslan)
  • pgxpool: check if connection is expired before acquire (arthurdotwork)

Security Hardening

  • Encrypt CancelRequest connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)
  • Cap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)
  • Default Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)
  • Bound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)
  • Bound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)
  • Bound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)
  • Bound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)
  • Document secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)
  • Fix panic on malformed geometric text; return an error instead (MaIII)

Fixes

  • Fix scanning "char" (OID 18) into *string in binary format (luongs3)
  • Fix handling of typed-nil driver.Valuer in array and composite codecs (Donncha Fahy)
  • Fix CopyData.Data hex decoding in UnmarshalJSON (Charlie Tonneslan)
  • Fix data race when context is cancelled during connect
  • Fix parseKeywordValueSettings rejecting trailing whitespace (alliasgher)
  • pgconn: preserve full error chain in normalizeTimeoutError (Charlie Tonneslan)
  • pgconn: use a fresh context for the fallback connection in connectPreferred (Charlie Tonneslan)
  • pgxpool: fix MaxLifetimeDestroyCount and ping order for acquire-time expiry check
  • Add missing error check of rows.Err to load types (Jen Altavilla)

5.9.2 (April 18, 2026)

Fix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)

SQL injection can occur when:

  1. The non-default simple protocol is used.
  2. A dollar quoted string literal is used in the SQL query.
  3. That query contains text that would be would be interpreted outside as a placeholder outside of a string literal.
  4. The value of that placeholder is controllable by the attacker.

... (truncated)

Commits
  • 7293fb1 Update changelog for v5.10.0
  • 1ade285 pgconn: document secure connection configuration
  • b4d6d4d pgtype: bound range, multirange, and tsvector binary decoders
  • 0639b37 pgconn: add ParseConfigOptions.ConnStringAllowedKeys
  • b28e65b pgtype: bound array element count against remaining message bytes
  • cd1f389 pgtype: bound array binary decode element length against remaining bytes
  • ff27b5b pgtype: bound hstore binary decode against malicious server input
  • a6002e1 pgproto3: default Frontend max message body length to ~1 GiB
  • 44f6173 pgconn: cap server-supplied SCRAM iteration count
  • 1a976f7 pgconn: add require_auth to restrict accepted server auth methods
  • Additional commits viewable in compare view

Updates github.com/jarcoal/httpmock from 1.3.1 to 1.4.1

Release notes

Sourced from github.com/jarcoal/httpmock's releases.

v1.4.1

What's Changed

New Contributors

Full Changelog: jarcoal/httpmock@v1.4.0...v1.4.1

v1.4.0

What's Changed

New Contributors

Full Changelog: jarcoal/httpmock@v1.3.1...v1.4.0

Commits
  • 314d58a fix: protect all body-related methods with mutext
  • e482896 fix: avoid data race when closing body
  • c977145 test: also test with go v1.25 and use golangci-lint v2.4.0
  • 7d2a02f docs: clarify ConnectionFailure doc
  • fad35ec docs: README typo
  • dc21346 test: use golangci-lint v2.0.2
  • 8cdfbf1 docs: fix README build status badge
  • 2225990 feat: enhance Activate and add DeactivateNonDefault functions (#161)
  • ee13561 docs: update resty example (#160)
  • 1ebd59a Make http.Response.Status respect RFC 2616, like in Go stdlib.
  • Additional commits viewable in compare view

Updates github.com/lib/pq from 1.10.9 to 1.12.3

Release notes

Sourced from github.com/lib/pq's releases.

v1.12.3

  • Send datestyle startup parameter, improving compatbility with database engines that use a different default datestyle such as EnterpriseDB (#1312).

#1312: lib/pq#1312

v1.12.2

  • Treat io.ErrUnexpectedEOF as driver.ErrBadConn so database/sql discards the connection. Since v1.12.0 this could result in permanently broken connections, especially with CockroachDB which frequently sends partial messages (#1299).

#1299: lib/pq#1299

v1.12.1

  • Look for pgpass file in ~/.pgpass instead of ~/.postgresql/pgpass (#1300).

  • Don't clear password if directly set on pq.Config (#1302).

#1300: lib/pq#1300 #1302: lib/pq#1302

v1.12.0

  • The next release may change the default sslmode from require to prefer. See #1271 for details.

  • CopyIn() and CopyInToSchema() have been marked as deprecated. These are simple query builders and not needed for COPY [..] FROM STDIN support (which is not deprecated). (#1279)

    // Old
tx.Prepare(CopyIn("temp", "num", "text", "blob", "nothing"))

    // Replacement
tx.Prepare(copy temp (num, text, blob, nothing) from stdin)

Features

  • Support protocol 3.2, and the min_protocol_version and max_protocol_version DSN parameters (#1258).

  • Support sslmode=prefer and sslmode=allow (#1270).

  • Support ssl_min_protocol_version and ssl_max_protocol_version (#1277).

  • Support connection service file to load connection details (#1285).

  • Support sslrootcert=system and use ~/.postgresql/root.crt as the default value of sslrootcert (#1280, #1281).

  • Add a new pqerror package with PostgreSQL error codes (#1275).

    For example, to test if an error is a UNIQUE constraint violation:

    if pqErr, ok := errors.AsType[*pq.Error](https://github.com/lib/pq/blob/HEAD/err); ok && pqErr.Code == pqerror.UniqueViolation {
    log.Fatalf("email %q already exsts", email)
}

    To make this a bit more convenient, it also adds a pq.As() function:

... (truncated)

Changelog

Sourced from github.com/lib/pq's changelog.

v1.12.3 (2026-04-03)

  • Send datestyle startup parameter, improving compatbility with database engines that use a different default datestyle such as EnterpriseDB (#1312).

#1312: lib/pq#1312

v1.12.2 (2026-04-02)

  • Treat io.ErrUnexpectedEOF as driver.ErrBadConn so database/sql discards the connection. Since v1.12.0 this could result in permanently broken connections, especially with CockroachDB which frequently sends partial messages (#1299).

#1299: lib/pq#1299

v1.12.1 (2026-03-30)

  • Look for pgpass file in ~/.pgpass instead of ~/.postgresql/pgpass (#1300).

  • Don't clear password if directly set on pq.Config (#1302).

#1300: lib/pq#1300 #1302: lib/pq#1302

v1.12.0 (2026-03-18)

  • The next release may change the default sslmode from require to prefer. See #1271 for details.

  • CopyIn() and CopyInToSchema() have been marked as deprecated. These are simple query builders and not needed for COPY [..] FROM STDIN support (which is not deprecated). (#1279)

    // Old
tx.Prepare(CopyIn("temp", "num", "text", "blob", "nothing"))

    // Replacement
tx.Prepare(copy temp (num, text, blob, nothing) from stdin)

Features

  • Support protocol 3.2, and the min_protocol_version and max_protocol_version DSN parameters (#1258).

  • Support sslmode=prefer and sslmode=allow (#1270).

  • Support ssl_min_protocol_version and ssl_max_protocol_version (#1277).

... (truncated)

Commits
  • 1f3e3d9 Send datestyle as a startup parameter (#1312)
  • 32ba56b Expand tests for multiple result sets
  • c2cfac1 Release v1.12.2
  • 859f104 Test CockroachDB
  • 12e464c Allow multiple matches and regexps in pqtest.ErrorContains()
  • 6d77ced Treat io.ErrUnexpectedEOF as driver.ErrBadConn in handleError
  • 71daecb Ensure transactions are closed in pqtest
  • 8f44823 Set PGAPPNAME for tests
  • 4af2196 Fix healthcheck
  • 38a54e4 Split out testdata/init a bit
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.21.1 to 1.23.2

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.2 - 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1 - 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

v1.23.0 - 2025-07-30

  • [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812
  • [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766
  • [FEATURE] Add exemplars for native histograms #1686
  • [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823
  • [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833
  • [BUGFIX] exp/api: client prompt return on context cancellation #1729

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

1.23.0 / 2025-07-30

  • [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812
  • [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766
  • [FEATURE] Add exemplars for native histograms #1686
  • [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823
  • [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833
  • [BUGFIX] exp/api: client prompt return on context cancellation #1729

1.22.0 / 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:

import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
  • [FEATURE] prometheus: Add new CollectorFunc utility #1724
  • [CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738
  • [FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743
  • [CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 2, 2026
@dependabot dependabot Bot requested a review from a team as a code owner February 2, 2026 12:03
@dependabot dependabot Bot requested review from 0xrajath and seanmcgary February 2, 2026 12:03
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 2, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/all-dependencies-1c7daa4eac branch 2 times, most recently from b17c179 to 4549b8a Compare February 16, 2026 11:42
@dependabot dependabot Bot force-pushed the dependabot/go_modules/all-dependencies-1c7daa4eac branch from 4549b8a to 366b3c8 Compare April 20, 2026 12:16
@dependabot dependabot Bot requested a review from a team April 20, 2026 12:16
@dependabot
chore: bump the all-dependencies group across 1 directory with 21 upd…
18c75fe 
…ates

Bumps the all-dependencies group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/DataDog/datadog-go/v5](https://github.com/DataDog/datadog-go) | `5.6.0` | `5.8.3` |
| [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto) | `1.1.6` | `1.4.1` |
| [github.com/agiledragon/gomonkey/v2](https://github.com/agiledragon/gomonkey) | `2.13.0` | `2.14.0` |
| [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) | `1.15.5` | `1.17.3` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.6.0` | `5.10.0` |
| [github.com/jarcoal/httpmock](https://github.com/jarcoal/httpmock) | `1.3.1` | `1.4.1` |
| [github.com/lib/pq](https://github.com/lib/pq) | `1.10.9` | `1.12.3` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.21.1` | `1.23.2` |
| [github.com/schollz/progressbar/v3](https://github.com/schollz/progressbar) | `3.18.0` | `3.19.0` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.9.1` | `1.10.2` |
| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.20.0` | `1.21.0` |
| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.0` | `1.28.0` |
| gopkg.in/DataDog/dd-trace-go.v1 | `1.65.0` | `1.74.8` |
| [gorm.io/driver/postgres](https://github.com/go-gorm/postgres) | `1.5.11` | `1.6.0` |
| [gorm.io/gorm](https://github.com/go-gorm/gorm) | `1.25.12` | `1.31.1` |



Updates `github.com/DataDog/datadog-go/v5` from 5.6.0 to 5.8.3
- [Release notes](https://github.com/DataDog/datadog-go/releases)
- [Changelog](https://github.com/DataDog/datadog-go/blob/master/CHANGELOG.md)
- [Commits](DataDog/datadog-go@v5.6.0...v5.8.3)

Updates `github.com/ProtonMail/go-crypto` from 1.1.6 to 1.4.1
- [Release notes](https://github.com/ProtonMail/go-crypto/releases)
- [Commits](ProtonMail/go-crypto@v1.1.6...v1.4.1)

Updates `github.com/agiledragon/gomonkey/v2` from 2.13.0 to 2.14.0
- [Release notes](https://github.com/agiledragon/gomonkey/releases)
- [Commits](agiledragon/gomonkey@v2.13.0...v2.14.0)

Updates `github.com/ethereum/go-ethereum` from 1.15.5 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.15.5...v1.17.3)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.1 to 2.27.7
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Commits](grpc-ecosystem/grpc-gateway@v2.27.1...v2.27.7)

Updates `github.com/jackc/pgx/v5` from 5.6.0 to 5.10.0
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.6.0...v5.10.0)

Updates `github.com/jarcoal/httpmock` from 1.3.1 to 1.4.1
- [Release notes](https://github.com/jarcoal/httpmock/releases)
- [Commits](jarcoal/httpmock@v1.3.1...v1.4.1)

Updates `github.com/lib/pq` from 1.10.9 to 1.12.3
- [Release notes](https://github.com/lib/pq/releases)
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md)
- [Commits](lib/pq@v1.10.9...v1.12.3)

Updates `github.com/prometheus/client_golang` from 1.21.1 to 1.23.2
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.21.1...v1.23.2)

Updates `github.com/schollz/progressbar/v3` from 3.18.0 to 3.19.0
- [Release notes](https://github.com/schollz/progressbar/releases)
- [Commits](schollz/progressbar@v3.18.0...v3.19.0)

Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.2
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.9.1...v1.10.2)

Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.9
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.6...v1.0.9)

Updates `github.com/spf13/viper` from 1.20.0 to 1.21.0
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](spf13/viper@v1.20.0...v1.21.0)

Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.10.0...v1.11.1)

Updates `go.uber.org/zap` from 1.27.0 to 1.28.0
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.27.0...v1.28.0)

Updates `golang.org/x/mod` from 0.25.0 to 0.31.0
- [Commits](golang/mod@v0.25.0...v0.31.0)

Updates `google.golang.org/grpc` from 1.73.0 to 1.78.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.73.0...v1.78.0)

Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.11

Updates `gopkg.in/DataDog/dd-trace-go.v1` from 1.65.0 to 1.74.8

Updates `gorm.io/driver/postgres` from 1.5.11 to 1.6.0
- [Commits](go-gorm/postgres@v1.5.11...v1.6.0)

Updates `gorm.io/gorm` from 1.25.12 to 1.31.1
- [Release notes](https://github.com/go-gorm/gorm/releases)
- [Commits](go-gorm/gorm@v1.25.12...v1.31.1)

---
updated-dependencies:
- dependency-name: github.com/agiledragon/gomonkey/v2
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/DataDog/datadog-go/v5
  dependency-version: 5.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.16.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.27.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/jarcoal/httpmock
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/lib/pq
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.23.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/ProtonMail/go-crypto
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/schollz/progressbar/v3
  dependency-version: 3.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/spf13/viper
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: go.uber.org/zap
  dependency-version: 1.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: golang.org/x/mod
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: gopkg.in/DataDog/dd-trace-go.v1
  dependency-version: 1.74.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: gorm.io/driver/postgres
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: gorm.io/gorm
  dependency-version: 1.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/all-dependencies-1c7daa4eac branch from 366b3c8 to 18c75fe Compare June 8, 2026 10:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@seanmcgary seanmcgary Awaiting requested review from seanmcgary seanmcgary is a code owner automatically assigned from Layr-Labs/sidecar
@0xrajath 0xrajath Awaiting requested review from 0xrajath 0xrajath is a code owner automatically assigned from Layr-Labs/sidecar

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants