fix(deps): bump the external group across 1 directory with 31 updates by dependabot[bot] · Pull Request #4041 · opentdf/platform

dependabot · 2026-09-11T17:54:59Z

Bumps the external group with 17 updates in the /service directory:

Package	From	To
buf.build/go/protovalidate	`1.0.0`	`1.4.0`
connectrpc.com/connect	`1.20.0`	`1.21.0`
github.com/casbin/casbin/v2	`2.108.0`	`2.135.0`
github.com/dgraph-io/ristretto/v2	`2.4.0`	`2.4.2`
github.com/eko/gocache/lib/v4	`4.2.0`	`4.2.4`
github.com/eko/gocache/store/ristretto/v4	`4.3.2`	`4.3.5`
github.com/fsnotify/fsnotify	`1.9.0`	`1.10.1`
github.com/go-chi/cors	`1.2.1`	`1.2.2`
github.com/go-playground/validator/v10	`10.26.0`	`10.30.4`
github.com/go-viper/mapstructure/v2	`2.4.0`	`2.5.0`
github.com/jackc/pgx/v5	`5.9.2`	`5.11.0`
github.com/lib/pq	`1.10.9`	`1.12.3`
github.com/mattn/go-sqlite3	`1.14.48`	`1.14.52`
github.com/open-policy-agent/opa	`1.5.1`	`1.20.2`
github.com/pressly/goose/v3	`3.24.3`	`3.28.0`
github.com/testcontainers/testcontainers-go	`0.42.0`	`0.44.0`
github.com/go-ldap/ldap/v3	`3.4.12`	`3.4.14`

Updates buf.build/go/protovalidate from 1.0.0 to 1.4.0

Release notes

Sourced from buf.build/go/protovalidate's releases.

v1.4.0

What's Changed

Update deps and minimum Go version to 1.26 by @rodaine in bufbuild/protovalidate-go#337

Full Changelog: bufbuild/protovalidate-go@v1.3.0...v1.4.0

v1.3.0

This release adds support for Native standard validation rules which greatly improve evaluation performance. See bufbuild/protovalidate-go#316 for more details.

What's Changed

Implement native rules for the predefined protovalidate rules by @jonbodner-buf in bufbuild/protovalidate-go#316

Fix error message for string.not_contains in native rules by @jonbodner-buf in bufbuild/protovalidate-go#319

Improve formatting, NaN handling, and header validation by @jonbodner-buf in bufbuild/protovalidate-go#320

Fix regression in Violation.RuleValue for native rules by @pkwarren in bufbuild/protovalidate-go#325

Exclude the trailing dot from the hostname 253-character limit by @LordAizen1 in bufbuild/protovalidate-go#332

Use CEL PartialVars during AST pruning by @TristonianJones in bufbuild/protovalidate-go#333

New Contributors

@jonbodner-buf made their first contribution in bufbuild/protovalidate-go#317

@LordAizen1 made their first contribution in bufbuild/protovalidate-go#332

@TristonianJones made their first contribution in bufbuild/protovalidate-go#333

Full Changelog: bufbuild/protovalidate-go@v1.2.0...v1.3.0

v1.2.0

This release is compatible with the v1.2.0 release of Protovalidate.

What's Changed

Bump protovalidate to 1.2.0 by @srikrsna-buf in bufbuild/protovalidate-go#314

New Contributors

@AdrienVannson made their first contribution in bufbuild/protovalidate-go#315

Full Changelog: bufbuild/protovalidate-go@v1.1.3...v1.2.0

v1.1.3

What's Changed

Fix a few godoc comments and update golangci-lint by @pkwarren in bufbuild/protovalidate-go#306

Bump the go group across 1 directory with 2 updates by @dependabot[bot] in bufbuild/protovalidate-go#308

Fix registry chain for pb.Map in NativeToValue by @rodaine in bufbuild/protovalidate-go#309

Full Changelog: bufbuild/protovalidate-go@v1.1.2...v1.1.3

... (truncated)

Commits

5c72b38 Bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from 1.36.12-...
aa3ed84 Update deps and minimum Go version to 1.26 (#337)
ff9e432 Bump github.com/stretchr/testify from 1.12.0 to 1.12.1 in the go group (#336)
99a2379 Bump the go group with 4 updates (#334)
0e5a75c Use CEL PartialVars during AST pruning (#333)
373085b Exclude the trailing dot from the hostname 253-character limit (#332)
37b55cc Bump github.com/google/cel-go from 0.29.2 to 0.30.0 in the go group (#331)
f360e52 Bump actions/setup-go from 6 to 7 in the github-actions group (#330)
9292b3d Bump the go group with 2 updates (#329)
24f3f25 Bump github.com/google/cel-go from 0.28.1 to 0.29.1 in the go group (#328)
Additional commits viewable in compare view

Updates connectrpc.com/connect from 1.20.0 to 1.21.0

Release notes

Sourced from connectrpc.com/connect's releases.

v1.21.0

What's Changed

[!IMPORTANT]

This release adds a security-related feature for servers. The new handler option WithRequestGate runs after the request headers are available and before any message is received. Use this new option to register checks (e.g. authentication) that should happen before the request is decompressed or unmarshaled, and before any interceptors are run. See the documentation for details.

Governance

Add pkwarren as a maintainer by @bufdev in connectrpc/connect-go#929 🎉

Enhancements

Add WithRequestGate handler option by @emcfarlane in connectrpc/connect-go#962

Create release binary for protoc-gen-connect-go by @emcfarlane in connectrpc/connect-go#966

Bugfixes

Fix issue with user-agent getting inappropriately injected into request headers by @jhump in connectrpc/connect-go#934

Fix client streaming operations blocking indefinitely after context cancellation by @haru0017 in connectrpc/connect-go#937

Fix flaky HTTP2 testcase assertion by @emcfarlane in connectrpc/connect-go#940

Fix data race and connection leak in duplexHTTPCall by @emcfarlane in connectrpc/connect-go#938

Fix off-by-one in WithHTTPGetMaxURLSize URL length check by @fchimpan in connectrpc/connect-go#955

Fix connect.WithGRPC typo in the missing client option error by @NotAFlightRisk in connectrpc/connect-go#956

Only send a 304 when the request was a GET by @NotAFlightRisk in connectrpc/connect-go#957

Fix panic in stream Spec and Peer when client construction failed by @NotAFlightRisk in connectrpc/connect-go#959

Fix dropped headers on errStreamingClientConn by @mohit-bhandari45 in connectrpc/connect-go#964

New Contributors

@haru0017 made their first contribution in connectrpc/connect-go#937

@dongjiang1989 made their first contribution in connectrpc/connect-go#945

@fchimpan made their first contribution in connectrpc/connect-go#955

@NotAFlightRisk made their first contribution in connectrpc/connect-go#956

@mohit-bhandari45 made their first contribution in connectrpc/connect-go#964

Full Changelog: connectrpc/connect-go@v1.20.0...v1.21.0

Commits

41b7f30 Prepare for v1.21.0 (#972)
6058c20 Fix dropped headers on errStreamingClientConn (#964)
014693a Refine WithRequestGate API and documentation (#968)
d9b4b1d Create release binary for protoc-gen-connect-go (#966)
5111260 Add WithRequestGate handler option (#962)
febfc19 Fix panic in stream Spec and Peer when client construction failed (#959)
cb5da57 Update Go version for CI (#958)
9646326 Only send a 304 when the request was a GET (#957)
2a02fea Fix connect.WithGRPC typo in the missing client option error (#956)
eae42d2 Fix off-by-one in WithHTTPGetMaxURLSize URL length check (#955)
Additional commits viewable in compare view

Updates github.com/casbin/casbin/v2 from 2.108.0 to 2.135.0

Release notes

Sourced from github.com/casbin/casbin/v2's releases.

v2.135.0

2.135.0 (2025-12-09)

Features

remove Travis script and issue templates (5fc9fd8)

v2.134.0

2.134.0 (2025-11-14)

Features

fix inconsistent backslash handling between matcher literals and CSV-parsed values (#1577) (5d3134d)

v2.133.0

2.133.0 (2025-11-14)

Features

fix stale g() function cache in BuildRoleLinks causing incorrect permissions (#1580) (0a13664)

v2.132.0

2.132.0 (2025-11-04)

Features

improve README (4b6c4c8)

v2.131.0

2.131.0 (2025-11-02)

Features

fix EscapeAssertion (matcher) incorrectly matching p./r. patterns inside quoted strings (#1572) (1eef59a)

v2.130.0

2.130.0 (2025-11-01)

Features

fix duplicate CI workflow runs and optimize to test only Go 1.21 (#1571) (bb1e443)

v2.129.0

2.129.0 (2025-11-01)

... (truncated)

Commits

5fc9fd8 feat: remove Travis script and issue templates
5d3134d feat: fix inconsistent backslash handling between matcher literals and CSV-pa...
0a13664 feat: fix stale g() function cache in BuildRoleLinks causing incorrect permis...
4b6c4c8 feat: improve README
1eef59a feat: fix EscapeAssertion (matcher) incorrectly matching p./r. patterns insid...
bb1e443 feat: fix duplicate CI workflow runs and optimize to test only Go 1.21 (#1571)
91b9cf2 feat: add OrBAC (Organisation-Based Access Control) model support (#1567)
87e9956 feat: add ContextEnforcer: add ctx to AddPolicy and other APIs (#1553)
1ef00ac feat: enable concurrent transactions using optimistic locking, versioning and...
0c5a574 feat: add PBAC model support and test (#1548)
Additional commits viewable in compare view

Updates github.com/dgraph-io/ristretto/v2 from 2.4.0 to 2.4.2

Release notes

Sourced from github.com/dgraph-io/ristretto/v2's releases.

v2.4.2

Fixed

Revert eager pre-allocation of the sampledLFU keyCosts map (#482), which allocated NumCounters/10 map buckets at boot and caused a large RSS regression for caches with high NumCounters (#494, fixes #493)

Full Changelog: dgraph-io/ristretto@v2.4.1...v2.4.2

v2.4.1

Changed

Pre-allocate keyCosts map in sampledLFU (#482)

Fixed

Handle mremap size mismatch on Linux s390x (#491)

Full Changelog: dgraph-io/ristretto@v2.4.0...v2.4.1

Changelog

Sourced from github.com/dgraph-io/ristretto/v2's changelog.

[v2.4.2] - 2026-07-07

Fixed

Revert eager pre-allocation of the sampledLFU keyCosts map (#482), which allocated NumCounters/10 map buckets at boot and caused a large RSS regression for caches with high NumCounters

Full Changelog: dgraph-io/ristretto@v2.4.1...v2.4.2

[v2.4.1] - 2026-07-06

Changed

Pre-allocate keyCosts map in sampledLFU (#482)

Fixed

Handle mremap size mismatch on Linux s390x (#491)

Full Changelog: dgraph-io/ristretto@v2.4.0...v2.4.1

Commits

8d05e8a fix: revert eager sampledLFU keyCosts pre-allocation (#482) (#494)
e89d89a chore: prepare release v2.4.1 (#492)
fe05eab fix: handle mremap size mismatch on Linux s390x
bb27952 chore(ci): add stale Action (#488)
7aac03a docs: add contributing guide and code of conduct
b483e0c perf: pre-allocate keyCosts map in sampledLFU
469a1a0 Update trunk conf
3ac041b chore: update ci-ristretto-tests.yml
See full diff in compare view

Updates github.com/eko/gocache/lib/v4 from 4.2.0 to 4.2.4

Release notes

Sourced from github.com/eko/gocache/lib/v4's releases.

lib/v4.2.4

What's Changed

Bump github.com/sirupsen/logrus from 1.4.2 to 1.8.3 in /store/pegasus by @dependabot[bot] in eko/gocache#301

fix(hazelcast): use atomic operations for tag list updates by @semihbkgr in eko/gocache#308

fix(memcache): refresh tag TTL when re-Setting an existing (key, tag) by @semihbkgr in eko/gocache#307

feat: add TTL support for tags in Memcache store by @semihbkgr in eko/gocache#306

cache(chain): return an error from Get when no caches are configured by @c-tonneslan in eko/gocache#309

New Contributors

@c-tonneslan made their first contribution in eko/gocache#309

Full Changelog: eko/gocache@lib/v4.2.3...lib/v4.2.4

store/memcache/v4.2.3

What's Changed

Store memcache: moved from golang/mock to mockery by @eko in eko/gocache#295

Full Changelog: eko/gocache@lib/v4.2.1...store/memcache/v4.2.3

store/bigcache/v4.2.3

What's Changed

Hide mock interfaces from users by @Neo2308 in eko/gocache#296

New Contributors

@Neo2308 made their first contribution in eko/gocache#296

Full Changelog: eko/gocache@store/memcache/v4.2.3...store/bigcache/v4.2.3

store/freecache/v4.2.3

What's Changed

Hide mock interfaces from users by @Neo2308 in eko/gocache#296

New Contributors

@Neo2308 made their first contribution in eko/gocache#296

Full Changelog: eko/gocache@store/memcache/v4.2.3...store/freecache/v4.2.3

store/go_cache/v4.2.3

What's Changed

Hide mock interfaces from users by @Neo2308 in eko/gocache#296

New Contributors

@Neo2308 made their first contribution in eko/gocache#296

Full Changelog: eko/gocache@store/memcache/v4.2.3...store/go_cache/v4.2.3

lib/v4.2.3

What's Changed

chore(go-mod): bump outdated dependencies by @geigerj0 in eko/gocache#300

... (truncated)

Commits

8d8d3b1 Merge pull request #309 from c-tonneslan/fix/chain-empty-caches
c86532e feat(marshaler): added a ErrUnsupportedValueType error
0cc251f feat(loadable): fixed closing panic issue
e540537 fix(chain): fixed missing Close() method on chain cache
80a4279 cache(chain): return an error from Get when no caches are configured
6692fac Merge pull request #306 from semihbkgr/fix/memcache-tags-ttl
f22c1c6 Merge pull request #307 from semihbkgr/fix/memcache-tag-ttl-refresh
ba2f816 Merge pull request #308 from semihbkgr/fix/hazelcast-tags-cas
16fada6 test(memcache): rename test for naming convention
bba80a3 fix(hazelcast): atomic tag list updates and TTL refresh
Additional commits viewable in compare view

Updates github.com/eko/gocache/store/ristretto/v4 from 4.3.2 to 4.3.5

Release notes

Sourced from github.com/eko/gocache/store/ristretto/v4's releases.

store/ristretto/v4.3.5

What's Changed

Bump github.com/sirupsen/logrus from 1.4.2 to 1.8.3 in /store/pegasus by @dependabot[bot] in eko/gocache#301

Full Changelog: eko/gocache@lib/v4.2.3...store/ristretto/v4.3.5

Commits

See full diff in compare view

Updates github.com/fsnotify/fsnotify from 1.9.0 to 1.10.1

Release notes

Sourced from github.com/fsnotify/fsnotify's releases.

v1.10.1

Changes and fixes

inotify: don't remove sibling watches sharing a path prefix (#754)

inotify, windows: don't rename sibling watches sharing a path prefix (#755)

#754: fsnotify/fsnotify#754 #755: fsnotify/fsnotify#755

v1.10.0

This version of fsnotify needs Go 1.23.

Changes and fixes

inotify: improve initialization error message (#731)

inotify: send Rename event if recursive watch is renamed (#696)

inotify: avoid copying event buffers when reading names (#741)

kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)

kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)

windows: fix nil pointer dereference in remWatch (#736)

windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)

#696: fsnotify/fsnotify#696 #709: fsnotify/fsnotify#709 #731: fsnotify/fsnotify#731 #736: fsnotify/fsnotify#736 #740: fsnotify/fsnotify#740 #741: fsnotify/fsnotify#741 #748: fsnotify/fsnotify#748 #749: fsnotify/fsnotify#749

Changelog

Sourced from github.com/fsnotify/fsnotify's changelog.

1.10.1 2026-05-04

Changes and fixes

inotify: don't remove sibling watches sharing a path prefix (#754)

inotify, windows: don't rename sibling watches sharing a path prefix (#755)

#754: fsnotify/fsnotify#754 #755: fsnotify/fsnotify#755

1.10.0 2026-04-30

This version of fsnotify needs Go 1.23.

Changes and fixes

inotify: improve initialization error message (#731)

inotify: send Rename event if recursive watch is renamed (#696)

inotify: avoid copying event buffers when reading names (#741)

kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)

kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)

windows: fix nil pointer dereference in remWatch (#736)

windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)

#696: fsnotify/fsnotify#696 #709: fsnotify/fsnotify#709 #731: fsnotify/fsnotify#731 #736: fsnotify/fsnotify#736 #740: fsnotify/fsnotify#740 #741: fsnotify/fsnotify#741 #748: fsnotify/fsnotify#748 #749: fsnotify/fsnotify#749

Commits

76b01a6 Release 1.10.1
fec150b Update changelog
162b421 inotify, windows: don't rename sibling watches sharing a path prefix (#755)
224257f inotify: don't remove sibling watches sharing a path prefix (#754)
e0c956c windows: document directory Write events and stabilize tests (#745)
8d01d7b Release 1.10.0
602284e Update changelog
7f03e59 kqueue: skip ENOENT entries in watchDirectoryFiles (#748)
dab9dde windows: lock watch field updates against concurrent WatchList (#709) (#749)
eadf267 kqueue: drop watches directly in Close() instead of going through remove() (#...
Additional commits viewable in compare view

Updates github.com/go-chi/cors from 1.2.1 to 1.2.2

Release notes

Sourced from github.com/go-chi/cors's releases.

v1.2.2

What's Changed

Update README with install by @Uyutaka in go-chi/cors#22

Fix broken credits link by @lordidiot in go-chi/cors#25

fix test_default error message #28 by @ablankz in go-chi/cors#29

Update Go version in CI by @VojtechVitek in go-chi/cors#32

Fix Origin header check by @c2h5oh in go-chi/cors#38

New Contributors

@Uyutaka made their first contribution in go-chi/cors#22

@lordidiot made their first contribution in go-chi/cors#25

@ablankz made their first contribution in go-chi/cors#29

@VojtechVitek made their first contribution in go-chi/cors#32

@c2h5oh made their first contribution in go-chi/cors#38

Full Changelog: go-chi/cors@v1.2.1...v1.2.2

Commits

3a53812 Fix Origin header check (#38)
f8fbaee Update Go version in CI (#32)
b41f767 fix test_default error message #28 (#29)
76ca797 Fix broken link (#25)
9aca617 Update README with install (#22)
See full diff in compare view

Updates github.com/go-playground/validator/v10 from 10.26.0 to 10.30.4

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

v10.30.4

What's Changed

Add English translations for prefix and suffix validators by @morning-verlu in go-playground/validator#1583

chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 by @dependabot[bot] in go-playground/validator#1589

chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in go-playground/validator#1591

chore(deps): bump golang.org/x/net from 0.38.0 to 0.55.0 in /_examples/validate_fn by @dependabot[bot] in go-playground/validator#1593

chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot[bot] in go-playground/validator#1598

chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /_examples/validate_fn by @dependabot[bot] in go-playground/validator#1597

feat: URN RFC 8141 by @leodido in go-playground/validator#1224

chore(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in go-playground/validator#1601

chore(deps): bump github.com/leodido/go-urn from 1.4.0 to 1.5.0 by @dependabot[bot] in go-playground/validator#1606

chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.13 to 1.4.15 by @dependabot[bot] in go-playground/validator#1605

fix(fqdn): enforce maximum DNS name length by @matheusgb in go-playground/validator#1603

fix: use idiomatic "at most" in English max/lte messages by @snowyukitty in go-playground/validator#1600

chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 by @dependabot[bot] in go-playground/validator#1612

test: cover startsnotwith/endsnotwith, RegisterStructValidationMapRules, and float32 comparator branches by @nguyenvantuan2391996 in go-playground/validator#1609

docs: clarify fieldexcludes behavior by @1678092075 in go-playground/validator#1610

feat(translations): add Armenian translations by @tigran90 in go-playground/validator#1604

ci: Fix the linter version by @zemzale in go-playground/validator#1617

New Contributors

@morning-verlu made their first contribution in go-playground/validator#1583

@matheusgb made their first contribution in go-playground/validator#1603

@snowyukitty made their first contribution in go-playground/validator#1600

@nguyenvantuan2391996 made their first contribution in go-playground/validator#1609

@1678092075 made their first contribution in go-playground/validator#1610

@tigran90 made their first contribution in go-playground/validator#1604

Full Changelog: go-playground/validator@v10.30.3...v10.30.4

v10.30.3

What's Changed

Fix/issue 1550 UUID case insensitive by @leo-jp-edwards in go-playground/validator#1551

Feat: Add NoneOf Validation by @Carmen-Shannon in go-playground/validator#1554

Add bcp47_strict_language_tag validator by @bfabio in go-playground/validator#1489

chore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0 by @dependabot[bot] in go-playground/validator#1558

chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 by @dependabot[bot] in go-playground/validator#1559

Add CLAUDE.md with repo guidance for Claude Code by @deankarn in go-playground/validator#1564

Reduce build size with dead code elimination by @zemzale in go-playground/validator#1542

Refactored out detectFileMIMEType, matchesMIMEType logic for reuse. Added standalone isMIMEType validator for flexibility by @dapzthelegend in go-playground/validator#1544

feat(translations): add timezone support for en and ja locales by @dedyf5 in go-playground/validator#1566

docs: use errors.As in README and translations example by @eyupcanakman in go-playground/validator#1563

docs: fix typos by @rymiyamoto in go-playground/validator#1568

feat: add origin validator for web origin URLs by @ahmedkamalio in go-playground/validator#1565

fix: reject hostnames with trailing hyphen in RFC 952 validator by @ahmedkamalio in go-playground/validator#1569

fix(lint): correctly disable govet inline analyzer & deprecated gomodguard by @nodivbyzero in go-playground/validator#1574

chore(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 by @dependabot[bot] in go-playground/validator#1572

chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 by @dependabot[bot] in go-playground/validator#1571

fix(cron): anchor regex and accept full cron syntax by @ahmedkamalio in go-playground/validator#1577

chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @dependabot[bot] in go-playground/validator#1580

... (truncated)

Commits

dfe35cf ci: Fix the linter version (#1617)
facf128 feat(translations): add Armenian translations (#1604)
961375b docs: clarify fieldexcludes behavior (#1610)
74dd82a test: cover startsnotwith/endsnotwith, RegisterStructValidationMapRules, and ...
379edc8 chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#1612)
f9944c5 fix: use idiomatic "at most" in English max/lte messages (#1600)
67e37d6 fix(fqdn): enforce maximum DNS name length (#1603)
6b571d1 chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.13 to 1.4.15 (#...
8455180 chore(deps): bump github.com/leodido/go-urn from 1.4.0 to 1.5.0 (#1606)
fd8bd3c chore(deps): bump actions/setup-go from 6 to 7 (#1601)
Additional commits viewable in compare view

Updates github.com/go-viper/mapstructure/v2 from 2.4.0 to 2.5.0

Release notes

Sourced from github.com/go-viper/mapstructure/v2's releases.

v2.5.0

What's Changed

Print qualified type name when ErrorUnused=true causes errors for unused keys in embedded fields by @jmacd in go-viper/mapstructure#113

build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by @dependabot[bot] in go-viper/mapstructure#126

build(deps): bump github/codeql-action from 3.29.7 to 3.29.10 by @dependabot[bot] in go-viper/mapstructure#131

build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in go-viper/mapstructure#129

feat: support for automatically initializing squashed pointer structs by @tuunit in go-viper/mapstructure#71

build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 by @dependabot[bot] in go-viper/mapstructure#134

build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @dependabot[bot] in go-viper/mapstructure#142

Fix slice deep map (owned) by @jphastings in go-viper/mapstructure#144

chore: fix lint violations by @sagikazarmark in

Bumps the external group with 17 updates in the /service directory: | Package | From | To | | --- | --- | --- | | [buf.build/go/protovalidate](https://github.com/bufbuild/protovalidate-go) | `1.0.0` | `1.4.0` | | [connectrpc.com/connect](https://github.com/connectrpc/connect-go) | `1.20.0` | `1.21.0` | | [github.com/casbin/casbin/v2](https://github.com/casbin/casbin) | `2.108.0` | `2.135.0` | | [github.com/dgraph-io/ristretto/v2](https://github.com/dgraph-io/ristretto) | `2.4.0` | `2.4.2` | | [github.com/eko/gocache/lib/v4](https://github.com/eko/gocache) | `4.2.0` | `4.2.4` | | [github.com/eko/gocache/store/ristretto/v4](https://github.com/eko/gocache) | `4.3.2` | `4.3.5` | | [github.com/fsnotify/fsnotify](https://github.com/fsnotify/fsnotify) | `1.9.0` | `1.10.1` | | [github.com/go-chi/cors](https://github.com/go-chi/cors) | `1.2.1` | `1.2.2` | | [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.26.0` | `10.30.4` | | [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) | `2.4.0` | `2.5.0` | | [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.11.0` | | [github.com/lib/pq](https://github.com/lib/pq) | `1.10.9` | `1.12.3` | | [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.48` | `1.14.52` | | [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `1.5.1` | `1.20.2` | | [github.com/pressly/goose/v3](https://github.com/pressly/goose) | `3.24.3` | `3.28.0` | | [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.44.0` | | [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap) | `3.4.12` | `3.4.14` | Updates `buf.build/go/protovalidate` from 1.0.0 to 1.4.0 - [Release notes](https://github.com/bufbuild/protovalidate-go/releases) - [Commits](bufbuild/protovalidate-go@v1.0.0...v1.4.0) Updates `connectrpc.com/connect` from 1.20.0 to 1.21.0 - [Release notes](https://github.com/connectrpc/connect-go/releases) - [Changelog](https://github.com/connectrpc/connect-go/blob/main/RELEASE.md) - [Commits](connectrpc/connect-go@v1.20.0...v1.21.0) Updates `github.com/casbin/casbin/v2` from 2.108.0 to 2.135.0 - [Release notes](https://github.com/casbin/casbin/releases) - [Commits](apache/casbin@v2.108.0...v2.135.0) Updates `github.com/dgraph-io/ristretto/v2` from 2.4.0 to 2.4.2 - [Release notes](https://github.com/dgraph-io/ristretto/releases) - [Changelog](https://github.com/dgraph-io/ristretto/blob/main/CHANGELOG.md) - [Commits](dgraph-io/ristretto@v2.4.0...v2.4.2) Updates `github.com/eko/gocache/lib/v4` from 4.2.0 to 4.2.4 - [Release notes](https://github.com/eko/gocache/releases) - [Commits](eko/gocache@lib/v4.2.0...lib/v4.2.4) Updates `github.com/eko/gocache/store/ristretto/v4` from 4.3.2 to 4.3.5 - [Release notes](https://github.com/eko/gocache/releases) - [Commits](eko/gocache@store/ristretto/v4.3.2...store/ristretto/v4.3.5) Updates `github.com/fsnotify/fsnotify` from 1.9.0 to 1.10.1 - [Release notes](https://github.com/fsnotify/fsnotify/releases) - [Changelog](https://github.com/fsnotify/fsnotify/blob/main/CHANGELOG.md) - [Commits](fsnotify/fsnotify@v1.9.0...v1.10.1) Updates `github.com/go-chi/cors` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/go-chi/cors/releases) - [Commits](go-chi/cors@v1.2.1...v1.2.2) Updates `github.com/go-playground/validator/v10` from 10.26.0 to 10.30.4 - [Release notes](https://github.com/go-playground/validator/releases) - [Commits](go-playground/validator@v10.26.0...v10.30.4) Updates `github.com/go-viper/mapstructure/v2` from 2.4.0 to 2.5.0 - [Release notes](https://github.com/go-viper/mapstructure/releases) - [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md) - [Commits](go-viper/mapstructure@v2.4.0...v2.5.0) Updates `github.com/jackc/pgx/v5` from 5.9.2 to 5.11.0 - [Release notes](https://github.com/jackc/pgx/releases) - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.9.2...v5.11.0) Updates `github.com/lib/pq` from 1.10.9 to 1.12.3 - [Release notes](https://github.com/lib/pq/releases) - [Changelog](https://github.com/lib/pq/blob/main/CHANGELOG.md) - [Commits](lib/pq@v1.10.9...v1.12.3) Updates `github.com/mattn/go-sqlite3` from 1.14.48 to 1.14.52 - [Release notes](https://github.com/mattn/go-sqlite3/releases) - [Commits](mattn/go-sqlite3@v1.14.48...v1.14.52) Updates `github.com/open-policy-agent/opa` from 1.5.1 to 1.20.2 - [Release notes](https://github.com/open-policy-agent/opa/releases) - [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md) - [Commits](open-policy-agent/opa@v1.5.1...v1.20.2) Updates `github.com/pressly/goose/v3` from 3.24.3 to 3.28.0 - [Release notes](https://github.com/pressly/goose/releases) - [Changelog](https://github.com/pressly/goose/blob/main/CHANGELOG.md) - [Commits](pressly/goose@v3.24.3...v3.28.0) Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.2 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.9.1...v1.10.2) Updates `github.com/spf13/viper` from 1.20.1 to 1.21.0 - [Release notes](https://github.com/spf13/viper/releases) - [Commits](spf13/viper@v1.20.1...v1.21.0) Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.11.1...v1.12.1) Updates `github.com/testcontainers/testcontainers-go` from 0.42.0 to 0.44.0 - [Release notes](https://github.com/testcontainers/testcontainers-go/releases) - [Commits](testcontainers/testcontainers-go@v0.42.0...v0.44.0) Updates `go.opentelemetry.io/otel` from 1.44.0 to 1.46.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.46.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.44.0 to 1.46.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.46.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.44.0 to 1.46.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.46.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.44.0 to 1.46.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.46.0) Updates `go.opentelemetry.io/otel/exporters/stdout/stdouttrace` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/sdk` from 1.44.0 to 1.46.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.46.0) Updates `go.opentelemetry.io/otel/trace` from 1.44.0 to 1.46.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.46.0) Updates `golang.org/x/net` from 0.55.0 to 0.58.0 - [Commits](golang/net@v0.55.0...v0.58.0) Updates `google.golang.org/grpc` from 1.83.1 to 1.83.2 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.83.1...v1.83.2) Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12 Updates `github.com/go-ldap/ldap/v3` from 3.4.12 to 3.4.14 - [Release notes](https://github.com/go-ldap/ldap/releases) - [Commits](go-ldap/ldap@v3.4.12...v3.4.14) Updates `golang.org/x/text` from 0.38.0 to 0.41.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.38.0...v0.41.0) --- updated-dependencies: - dependency-name: buf.build/go/protovalidate dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: connectrpc.com/connect dependency-version: 1.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/casbin/casbin/v2 dependency-version: 2.135.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/dgraph-io/ristretto/v2 dependency-version: 2.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external - dependency-name: github.com/eko/gocache/lib/v4 dependency-version: 4.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external - dependency-name: github.com/eko/gocache/store/ristretto/v4 dependency-version: 4.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external - dependency-name: github.com/fsnotify/fsnotify dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/go-chi/cors dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external - dependency-name: github.com/go-playground/validator/v10 dependency-version: 10.30.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/go-viper/mapstructure/v2 dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/lib/pq dependency-version: 1.12.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/mattn/go-sqlite3 dependency-version: 1.14.52 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external - dependency-name: github.com/open-policy-agent/opa dependency-version: 1.20.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/pressly/goose/v3 dependency-version: 3.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/spf13/cobra dependency-version: 1.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/spf13/viper dependency-version: 1.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/stretchr/testify dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/testcontainers/testcontainers-go dependency-version: 0.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: go.opentelemetry.io/otel dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: go.opentelemetry.io/otel/exporters/stdout/stdouttrace dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: golang.org/x/net dependency-version: 0.58.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: google.golang.org/grpc dependency-version: 1.83.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external - dependency-name: google.golang.org/protobuf dependency-version: 1.36.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external - dependency-name: github.com/go-ldap/ldap/v3 dependency-version: 3.4.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external - dependency-name: golang.org/x/text dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-09-11T17:55:26Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: d978aa1d-e6a1-4772-b8ac-073adbfcc7ef

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

github-actions · 2026-09-11T17:55:59Z

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

See the workflow run for details.

github-actions · 2026-09-11T17:59:47Z

X-Test Failure Report

server-logs-go@pull-4041-v0.9.0
opentdf~~platform~~T4V7IH.dockerbuild
server-logs-java@main-main
server-logs-go@pull-4041-main
server-logs-js@main-main
server-logs-go@main-v0.9.0
server-logs-js@main-v0.9.0
server-logs-go@main-main
server-logs-java@main-v0.9.0

dependabot · 2026-09-14T17:54:41Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 11, 2026

dependabot Bot requested review from a team as code owners September 11, 2026 17:55

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 11, 2026

github-actions Bot added the size/l label Sep 11, 2026

dependabot Bot closed this Sep 14, 2026

dependabot Bot deleted the dependabot/go_modules/service/external-ecfb62df8e branch September 14, 2026 17:54

Navigation Menu

Uh oh!

fix(deps): bump the external group across 1 directory with 31 updates - #4041

fix(deps): bump the external group across 1 directory with 31 updates#4041
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/service/external-ecfb62df8e

dependabot Bot commented on behalf of github Sep 11, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Sep 11, 2026

Review skipped

Uh oh!

github-actions Bot commented Sep 11, 2026

Uh oh!

github-actions Bot commented Sep 11, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.4.0

What's Changed

v1.3.0

What's Changed

New Contributors

v1.2.0

What's Changed

New Contributors

v1.1.3

What's Changed

v1.21.0

What's Changed

Governance

Enhancements

Bugfixes

New Contributors

v2.135.0

2.135.0 (2025-12-09)

Features

v2.134.0

2.134.0 (2025-11-14)

Features

v2.133.0

2.133.0 (2025-11-14)

Features

v2.132.0

2.132.0 (2025-11-04)

Features

v2.131.0

2.131.0 (2025-11-02)

Features

v2.130.0

2.130.0 (2025-11-01)

Features

v2.129.0

2.129.0 (2025-11-01)

v2.4.2

Fixed

v2.4.1

Changed

Fixed

[v2.4.2] - 2026-07-07

Fixed

[v2.4.1] - 2026-07-06

Changed

Fixed

lib/v4.2.4

What's Changed

New Contributors

store/memcache/v4.2.3

What's Changed

store/bigcache/v4.2.3

What's Changed

New Contributors

store/freecache/v4.2.3

What's Changed

New Contributors

store/go_cache/v4.2.3

What's Changed

New Contributors

lib/v4.2.3

What's Changed

store/ristretto/v4.3.5

What's Changed

v1.10.1

Changes and fixes

v1.10.0

Changes and fixes

1.10.1 2026-05-04

Changes and fixes

1.10.0 2026-04-30

Changes and fixes

v1.2.2

What's Changed

New Contributors

v10.30.4

dependabot Bot commented on behalf of github Sep 11, 2026 •

edited

Loading