Bump the go-modules group across 1 directory with 33 updates by dependabot[bot] · Pull Request #1741 · paketo-buildpacks/node-engine

dependabot · 2026-10-19T17:11:09Z

Bumps the go-modules group with 33 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go-v2	`1.47.1`	`1.47.3`
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream	`1.7.20`	`1.7.22`
github.com/aws/aws-sdk-go-v2/config	`1.33.7`	`1.33.9`
github.com/aws/aws-sdk-go-v2/credentials	`1.20.7`	`1.20.9`
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	`1.20.1`	`1.20.3`
github.com/aws/aws-sdk-go-v2/internal/configsources	`1.5.4`	`1.5.6`
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	`2.8.4`	`2.8.6`
github.com/aws/aws-sdk-go-v2/internal/v4a	`1.5.4`	`1.5.6`
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	`1.13.19`	`1.13.21`
github.com/aws/aws-sdk-go-v2/service/internal/checksum	`1.11.5`	`1.11.7`
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	`1.14.4`	`1.14.6`
github.com/aws/aws-sdk-go-v2/service/internal/s3shared	`1.20.4`	`1.20.6`
github.com/aws/aws-sdk-go-v2/service/s3	`1.114.1`	`1.114.3`
github.com/aws/aws-sdk-go-v2/service/signin	`1.10.2`	`1.10.4`
github.com/aws/aws-sdk-go-v2/service/sso	`1.38.2`	`1.38.4`
github.com/aws/aws-sdk-go-v2/service/ssooidc	`1.43.2`	`1.43.4`
github.com/aws/aws-sdk-go-v2/service/sts	`1.51.2`	`1.51.4`
github.com/aws/smithy-go	`1.28.4`	`1.28.5`
github.com/bmatcuk/doublestar/v4	`4.10.2`	`4.10.3`
github.com/charmbracelet/x/ansi	`0.11.8`	`0.11.9`
github.com/docker/cli	`29.8.2+incompatible`	`29.9.0+incompatible`
github.com/docker/docker-credential-helpers	`0.9.9`	`0.9.10`
github.com/github/go-spdx/v2	`2.7.0`	`2.7.1`
github.com/klauspost/compress	`1.20.1`	`1.20.3`
github.com/moby/moby/client	`0.6.1`	`0.6.2`
github.com/nwaples/rardecode/v2	`2.4.2`	`2.4.4`
golang.org/x/crypto	`0.57.0`	`0.58.0`
golang.org/x/mod	`0.41.0`	`0.42.0`
golang.org/x/net	`0.59.0`	`0.60.0`
golang.org/x/term	`0.46.0`	`0.47.0`
golang.org/x/text	`0.42.0`	`0.43.0`
golang.org/x/tools	`0.51.0`	`0.52.0`
modernc.org/libc	`1.77.1`	`1.78.0`

Updates github.com/aws/aws-sdk-go-v2 from 1.47.1 to 1.47.3

Commits

c8f4a44 Release 2026-10-09.2
3d21015 update to smithy-go v1.28.5 to pick up sparse-in-dense fix (#3587)
b058f58 Release 2026-10-09
6b5b3dd Regenerated Clients
2a845ae Update API model
c88f24b Release 2026-10-08
236b4e5 Regenerated Clients
1935912 Update API model
ab2110b Update to smithy-go v1.28.4 (#3584)
313f364 Release 2026-10-06
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.7.20 to 1.7.22

Commits

2223642 Release 2026-04-29
04c7e46 Regenerated Clients
5f56925 Update endpoints model
aac6d2b Update API model
bdaead7 upgrade to smithy-go v1.25.1 (#3399)
008e12c Release 2026-04-27
ef109d9 Regenerated Clients
6411e63 Update API model
e5bf970 Release 2026-04-24
bdbb88c Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.7 to 1.33.9

Commits

c8f4a44 Release 2026-10-09.2
3d21015 update to smithy-go v1.28.5 to pick up sparse-in-dense fix (#3587)
b058f58 Release 2026-10-09
6b5b3dd Regenerated Clients
2a845ae Update API model
c88f24b Release 2026-10-08
236b4e5 Regenerated Clients
1935912 Update API model
ab2110b Update to smithy-go v1.28.4 (#3584)
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.20.7 to 1.20.9

Commits

30383d5 Release 2023-04-07
352f89c Regenerated Clients
5042939 Update API model
d40a16e NXDOMAIN errors should not be retried (#2083)
439f88c Add announcement for next release for dlm
e4036a9 Release 2023-04-06
1c455e2 Regenerated Clients
adb09d3 Update endpoints model
3d4ed44 Update API model
296e005 Release 2023-04-05
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/ec2/imds from 1.20.1 to 1.20.3

Commits

396f97a Release 2023-08-18
08ab454 Regenerated Clients
b50999b Update SDK's smithy-go dependency to v1.14.2
d05e372 Update endpoints model
26ccae9 Update API model
5d3382b Merge pull request #2243 from aws/feat-protocol-test-2
f58ddae update time to ancient (#2133)
65023f3 Release 2023-08-17
0742a92 Regenerated Clients
0e3340f Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/internal/configsources from 1.5.4 to 1.5.6

Commits

b01c60e Release 2025-11-12
17946cc Regenerated Clients
a435b3c Update API model
1e4148a collapse changelogs
86618e5 track allocation improvements from codegen (#3227)
ab56437 Release 2025-11-11
3dcd1d8 Regenerated Clients
51e8881 Update API model
1ed4f27 add MAINTAINERS.md
a5136d5 host label
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 from 2.8.4 to 2.8.6

Commits

c8f4a44 Release 2026-10-09.2
3d21015 update to smithy-go v1.28.5 to pick up sparse-in-dense fix (#3587)
b058f58 Release 2026-10-09
6b5b3dd Regenerated Clients
2a845ae Update API model
c88f24b Release 2026-10-08
236b4e5 Regenerated Clients
1935912 Update API model
ab2110b Update to smithy-go v1.28.4 (#3584)
313f364 Release 2026-10-06
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/internal/v4a from 1.5.4 to 1.5.6

Commits

b01c60e Release 2025-11-12
17946cc Regenerated Clients
a435b3c Update API model
1e4148a collapse changelogs
86618e5 track allocation improvements from codegen (#3227)
ab56437 Release 2025-11-11
3dcd1d8 Regenerated Clients
51e8881 Update API model
1ed4f27 add MAINTAINERS.md
a5136d5 host label
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding from 1.13.19 to 1.13.21

Commits

60a0ef0 Release 2023-04-24
08a6461 Regenerated Clients
31f1bda Update endpoints model
c9ad0d0 Update API model
aadb5c6 Merge pull request #2106 from syall/apigw-exports-nullability-mediaconvert-fix
44acf0c Merge pull request #2105 from aws/recursion-detection
6c0e937 add runtime checks
6c2cf2a Fix APIGW exports
75061a4 capitalize recursion detection trace ID var name
6f80948 modify recursion detection and test
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/internal/checksum from 1.11.5 to 1.11.7

Commits

3d809f4 Release 2022-06-29
d4ec10b Regenerated Clients
79fe35a Update SDK's smithy-go dependency to v1.12.0
043b12a Update endpoints model
3147032 Update API model
09372e1 aws/signer/v4: Fix signer to not double sign Content-Length header (#1743)
3cc55fe codegen: Remove protocol test skipping for supported features. (#1630)
07e3d11 Release 2022-06-28
1ea26c6 Regenerated Clients
d1a2304 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/internal/presigned-url from 1.14.4 to 1.14.6

Changelog

Sourced from github.com/aws/aws-sdk-go-v2/service/internal/presigned-url's changelog.

Release (2023-03-21)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2/service/chimesdkmessaging: v1.13.0

Feature: Amazon Chime SDK messaging customers can now manage streaming configuration for messaging data for archival and analysis.

github.com/aws/aws-sdk-go-v2/service/cleanrooms: v1.1.0

Feature: GA Release of AWS Clean Rooms, Added Tagging Functionality

github.com/aws/aws-sdk-go-v2/service/ec2: v1.91.0

Feature: This release adds support for AWS Network Firewall, AWS PrivateLink, and Gateway Load Balancers to Amazon VPC Reachability Analyzer, and it makes the path destination optional as long as a destination address in the filter at source is provided.

github.com/aws/aws-sdk-go-v2/service/internal/s3shared: v1.14.0

Feature: port v1 sdk 100-continue http header customization for s3 PutObject/UploadPart request and enable user config

github.com/aws/aws-sdk-go-v2/service/iotsitewise: v1.28.0

Feature: Provide support for tagging of data streams and enabling tag based authorization for property alias

github.com/aws/aws-sdk-go-v2/service/mgn: v1.18.0

Feature: This release introduces the Import and export feature and expansion of the post-launch actions

github.com/aws/aws-sdk-go-v2/service/s3: v1.31.0

Feature: port v1 sdk 100-continue http header customization for s3 PutObject/UploadPart request and enable user config

Release (2023-03-20)

Module Highlights

github.com/aws/aws-sdk-go-v2/service/applicationautoscaling: v1.19.0

Feature: With this release customers can now tag their Application Auto Scaling registered targets with key-value pairs and manage IAM permissions for all the tagged resources centrally.

github.com/aws/aws-sdk-go-v2/service/neptune: v1.20.0

Feature: This release makes following few changes. db-cluster-identifier is now a required parameter of create-db-instance. describe-db-cluster will now return PendingModifiedValues and GlobalClusterIdentifier fields in the response.

github.com/aws/aws-sdk-go-v2/service/s3outposts: v1.16.0

Feature: S3 On Outposts added support for endpoint status, and a failed endpoint reason, if any

github.com/aws/aws-sdk-go-v2/service/workdocs: v1.14.0

Feature: This release adds a new API, SearchResources, which enable users to search through metadata and content of folders, documents, document versions and comments in a WorkDocs site.

Release (2023-03-17)

Module Highlights

github.com/aws/aws-sdk-go-v2/service/billingconductor: v1.6.0

Feature: This release adds a new filter to ListAccountAssociations API and a new filter to ListBillingGroups API.

github.com/aws/aws-sdk-go-v2/service/configservice: v1.30.0

Feature: This release adds resourceType enums for types released from October 2022 through February 2023.

github.com/aws/aws-sdk-go-v2/service/databasemigrationservice: v1.25.0

Feature: S3 setting to create AWS Glue Data Catalog. Oracle setting to control conversion of timestamp column. Support for Kafka SASL Plain authentication. Setting to map boolean from PostgreSQL to Redshift. SQL Server settings to force lob lookup on inline LOBs and to control access of database logs.

Release (2023-03-16)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2/config: v1.18.18

... (truncated)

Commits

390cf19 Release 2023-03-21
c37c72a Regenerated Clients
d1e5193 Update endpoints model
2506101 Update API model
c93b5cc Merge pull request #2051 from aws/add100ContinueCustomization
c01aac6 Keep one changelog for PR
3780faa Keep one changelog for PR
b94b5b7 Merge remote-tracking branch 'origin/add100ContinueCustomization' into add100...
6174ff2 Change some variable name and use operation shape id to represent operation s...
83491fc add changelog to last commit
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/internal/s3shared from 1.20.4 to 1.20.6

Commits

27acb6b Release 2023-12-15
d3d958f Regenerated Clients
b9e42b1 Update endpoints model
d61965f Update API model
dca6a24 Release 2023-12-14
65183ed Regenerated Clients
9a01654 Update endpoints model
87eb076 Update API model
aaea7b5 Release 2023-12-13
8b61d81 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.114.1 to 1.114.3

Commits

c8f4a44 Release 2026-10-09.2
3d21015 update to smithy-go v1.28.5 to pick up sparse-in-dense fix (#3587)
b058f58 Release 2026-10-09
6b5b3dd Regenerated Clients
2a845ae Update API model
c88f24b Release 2026-10-08
236b4e5 Regenerated Clients
1935912 Update API model
ab2110b Update to smithy-go v1.28.4 (#3584)
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/service/signin from 1.10.2 to 1.10.4

Commits

0d643a8 Release 2023-12-07
e38b534 Regenerated Clients
f394daf Update SDK's smithy-go dependency to v1.19.0
4fb654c Update endpoints model
8594ca0 Update API model
e33a34c fix codegen ci (#2418)
57a201c regenerate partitions (#2415)
be06f02 Merge pull request #2344 from aws/feat-request-compression-2
70bf410 Change config loading logic
8c02c46 Release 2023-12-06
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sso from 1.38.2 to 1.38.4

Commits

396f97a Release 2023-08-18
08ab454 Regenerated Clients
b50999b Update SDK's smithy-go dependency to v1.14.2
d05e372 Update endpoints model
26ccae9 Update API model
5d3382b Merge pull request #2243 from aws/feat-protocol-test-2
f58ddae update time to ancient (#2133)
65023f3 Release 2023-08-17
0742a92 Regenerated Clients
0e3340f Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ssooidc from 1.43.2 to 1.43.4

Commits

ebd1f6a Release 2026-08-05
bc99825 Regenerated Clients
8868ff7 Update API model
9604fe3 Set FIPS-approved TLS curve preferences when the FIPS module is active (#3499)
4af61eb Release 2026-08-04
73d66ab Regenerated Clients
e830452 Update API model
5d3779f Release 2026-08-03
27a73ff Regenerated Clients
8b197b7 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.51.2 to 1.51.4

Commits

be4380a Release 2024-03-07
d811bc7 Regenerated Clients
b3e8224 Update API model
5011554 regen for copying ddbstreams attribute value after dropping go-cmp
6c816bc dep: drop go-cmp dependency (#2538)
66663e7 Release 2024-03-06
9c61334 Regenerated Clients
50fd65b Update API model
bd15f86 Release 2024-03-05
3bfebf4 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/smithy-go from 1.28.4 to 1.28.5

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-10-09)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.28.5

Bug Fix: Retain the key with the zero value when encountering a null-value key in a dense map. This matches how legacy code-generated JSON deserializers behaved.

Release (2026-10-07)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.28.4

Bug Fix: Revert #698 that fixed JoinPath with trailing slash. This has a side effect on certain S3 API paths in the downstream SDK that need more consideration.

Release (2026-10-06)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.28.3

Bug Fix: Accept either casing of message/Message on modeled JSON error structures in schema-based deserialization, and emit the smithy.api#error trait in generated schemas

Bug Fix: Include the underlying error when logging failures to discard or close an HTTP response body

Release (2026-09-18)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.28.2

Bug Fix: Avoid allocating a slice in ValidateEndpointHost by indexing into the hostname instead of using strings.Split.

Bug Fix: Fix event stream decode panic on unknown header value type.

Bug Fix: Fix schema-serde CBOR decode panic on malformed string/blob length.

Bug Fix: JoinPath keeps a trailing slash when the added path is a slash.

Release (2026-08-26)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.28.1

Bug Fix: Fix broken AddLogger middleware since its insert point was removed.

Release (2026-08-25.2)

... (truncated)

Commits

d1674d5 Release 2026-10-09
dee8257 fix sparse-in-dense deser for maps (#729)
See full diff in compare view

Updates github.com/bmatcuk/doublestar/v4 from 4.10.2 to 4.10.3

Release notes

Sourced from github.com/bmatcuk/doublestar/v4's releases.

Handles character ranges when using WithCaseInsensitive

Character ranges, such as [a-z] would not match things like A when using WithCaseInsensitive. This release fixes that.

Thanks to @bensynapse for bringing this to my attention.

Full Changelog: bmatcuk/doublestar@v4.10.2...v4.10.3

Commits

03688d3 fix tests
7ac7790 case-insensitive character ranges
a922627 run symlink tests on windows
See full diff in compare view

Updates github.com/charmbracelet/x/ansi from 0.11.8 to 0.11.9

Commits

faa4adf ansi/v0.11.9
09f7503 feat(ansi): OSC 7501 (#1004)
ad85c59 chore(powernap): update lsp configs from nvim-lspconfig
953920d nerdfont/v0.1.0
4edfc00 feat(nerdfont): overrides (#1000)
7be62f4 chore(deps): bump golang.org/x/sys in /term in the all group (#996)
29bfdbd feat: nerdfont
9c77d67 chore(powernap): update lsp configs from nvim-lspconfig
d676b01 v0.1.0 for charmtone and slices
53e2afe chore(powernap): update lsp configs from nvim-lspconfig
Additional commits viewable in compare view

Updates github.com/docker/cli from 29.8.2+incompatible to 29.9.0+incompatible

Commits

f415da8 Merge pull request #7367 from thaJeztah/bump_trust_deps
45c2317 Merge pull request #7366 from thaJeztah/bump_runewidth
8308969 Merge pull request #7368 from vvoland/update-docker
cf80999 cmd/docker-trust: update dependencies
730c880 vendor: github.com/moby/moby/client v0.6.2
e63e4fe vendor: github.com/mattn/go-runewidth v0.0.31
e7df01f Merge pull request #7361 from thaJeztah/bump_go_connections
2e51107 Merge pull request #7363 from vvoland/update-go
949bf40 vendor: golang.org/x/net v0.60.0
9db9802 Update to go1.26.9
Additional commits viewable in compare view

Updates github.com/docker/docker-credential-helpers from 0.9.9 to 0.9.10

Release notes

Sourced from github.com/docker/docker-credential-helpers's releases.

v0.9.10

What's Changed

update to go1.26.9

build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2

build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1

build(deps): bump docker/setup-qemu-action from 4.2.0 to 4.3.0

build(deps): bump softprops/action-gh-release from 3.0.2 to 3.0.3

build(deps): bump the docker-actions group

Full Changelog: docker/docker-credential-helpers@v0.9.9...v0.9.10

Commits

6870d99 Merge pull request #471 from thaJeztah/bump_go
bc6b822 Merge pull request #470 from docker/dependabot/github_actions/actions/upload-...
17a8720 Update to go1.26.9
cea227e build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2
df2fce1 Merge pull request #468 from docker/dependabot/github_actions/docker-actions-...
8b14947 build(deps): bump the docker-actions group across 1 directory with 3 updates
4571e94 Merge pull request #469 from docker/dependabot/github_actions/codecov/codecov...
e6c5f70 build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1
e0c8fbb Merge pull request #466 from thaJeztah/bump_go
8ce57df Merge pull request #465 from docker/dependabot/github_actions/docker-actions-...
Additional commits viewable in compare view

Updates github.com/github/go-spdx/v2 from 2.7.0 to 2.7.1

Release notes

Sourced from github.com/github/go-spdx/v2's releases.

Release 2.7.1

Overview

Limited to new license, bug fixes, and dependabot updates.

What's Changed

Licenses:

license updates (#160)

Bug fixes:

fix LicenseRef handled incorrectly during satisfies check (#167) @elrayle, @MrBeldum

Catch open parenthesis with no following tokens (#168) @elrayle

Dependabot:

Add supply chain security defaults - dependabot cooldown (#151) @claire153

several dependabot updates

Full Changelog: github/go-spdx@v2.7.0...v2.7.1

Commits

065aa3f Merge pull request #168 from github/elr/nil-panic
4c59ece Catch open parenthesis with no following tokens
0e6bf86 Merge pull request #160 from github/auto-update-licenses
31bf003 Add updated license files
b18d8c0 Merge pull request #157 from github/dependabot/github_actions/golangci/golang...
4a38e14 Merge pull request #164 from github/pinner/actions-sha-pins-2026-09-10
5f873f4 Merge branch 'main' into pinner/actions-sha-pins-2026-09-10
ec76d72 Update GitHub Actions to use newer action versions
d9743b3 Upgrade actions/checkout and actions/setup-go versions
5d050a1 Merge pull request #167 from github/elr/or-ref
Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.20.1 to 1.20.3

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.20.3

What's Changed

zstd: two-pass decode with match-source prefetch on arm64 (largest win decoding SpeedBestCompression-class data) by @lizthegrey in klauspost/compress#1212

zstd: speed up better encoder hashing, primes in registers on arm64 by @lizthegrey in klauspost/compress#1230

zstd: reuse dictionary sequence tables in the encoder by @lizthegrey in klauspost/compress#1233

zstd: close most of the decode gap to libzstd on real corpora by @lizthegrey in klauspost/compress#1232

huff0: align the decode inner loops to 64 bytes by @lizthegrey in klauspost/compress#1236

zstd: keep default-encoder hash primes in registers on arm64 by @lizthegrey in klauspost/compress#1241

zstd: align the sequence decode and execute loops to 64 bytes by @lizthegrey in klauspost/compress#1240

zstd, huff0: cheaper per-block table setup by @lizthegrey in klauspost/compress#1234

zstd, s2, flate: smoke-test Silesia in CI, add real-corpus benchmarks by @lizthegrey in klauspost/compress#1237

zip: reject entries named "." in ReadDir to stop infinite fs.WalkDir by @Raghuvardhan-Reddy78 in klauspost/compress#1249

zstd: decode at full speed into exact-size destinations by @lizthegrey in klauspost/compress#1246

s2: Reject short index chunk in RemoveIndexHeaders by @Raghuvardhan-Reddy78 in klauspost/compress#1254

zstd, huff0: keep the encoder bit writers in registers by @lizthegrey in klauspost/compress#1245

huff0: reuse Scratch across inputs in the fuzzers by @lizthegrey in klauspost/compress#1257

New Contributors

@Raghuvardhan-Reddy78 made their first contribution in klauspost/compress#1235

@SulimanAbdulrazzaq made their first contribution in klauspost/compress#1255

Full Changelog: klauspost/compress@v1.20.1...v1.20.3

v1.20.2

zstd: Fix DecodeAll crash on specially crafted input. GHSA-fpmh-frq8-7rj8.

s2: fix LZ4 block conversion writing past dst by @klauspost in klauspost/compress#1244

dict: Stricter input validation by @klauspost in klauspost/compress#1250

zstd: reject snappy copy shorter than minimum match by @Raghuvardhan-Reddy78 in klauspost/compress#1235

Full Changelog: klauspost/compress@v1.20.1...v1.20.2

Co...

Description has been truncated

Bumps the go-modules group with 33 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.47.1` | `1.47.3` | | [github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream](https://github.com/aws/aws-sdk-go-v2) | `1.7.20` | `1.7.22` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.7` | `1.33.9` | | [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.20.7` | `1.20.9` | | [github.com/aws/aws-sdk-go-v2/feature/ec2/imds](https://github.com/aws/aws-sdk-go-v2) | `1.20.1` | `1.20.3` | | [github.com/aws/aws-sdk-go-v2/internal/configsources](https://github.com/aws/aws-sdk-go-v2) | `1.5.4` | `1.5.6` | | [github.com/aws/aws-sdk-go-v2/internal/endpoints/v2](https://github.com/aws/aws-sdk-go-v2) | `2.8.4` | `2.8.6` | | [github.com/aws/aws-sdk-go-v2/internal/v4a](https://github.com/aws/aws-sdk-go-v2) | `1.5.4` | `1.5.6` | | [github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding](https://github.com/aws/aws-sdk-go-v2) | `1.13.19` | `1.13.21` | | [github.com/aws/aws-sdk-go-v2/service/internal/checksum](https://github.com/aws/aws-sdk-go-v2) | `1.11.5` | `1.11.7` | | [github.com/aws/aws-sdk-go-v2/service/internal/presigned-url](https://github.com/aws/aws-sdk-go-v2) | `1.14.4` | `1.14.6` | | [github.com/aws/aws-sdk-go-v2/service/internal/s3shared](https://github.com/aws/aws-sdk-go-v2) | `1.20.4` | `1.20.6` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.114.1` | `1.114.3` | | [github.com/aws/aws-sdk-go-v2/service/signin](https://github.com/aws/aws-sdk-go-v2) | `1.10.2` | `1.10.4` | | [github.com/aws/aws-sdk-go-v2/service/sso](https://github.com/aws/aws-sdk-go-v2) | `1.38.2` | `1.38.4` | | [github.com/aws/aws-sdk-go-v2/service/ssooidc](https://github.com/aws/aws-sdk-go-v2) | `1.43.2` | `1.43.4` | | [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.51.2` | `1.51.4` | | [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.28.4` | `1.28.5` | | [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) | `4.10.2` | `4.10.3` | | [github.com/charmbracelet/x/ansi](https://github.com/charmbracelet/x) | `0.11.8` | `0.11.9` | | [github.com/docker/cli](https://github.com/docker/cli) | `29.8.2+incompatible` | `29.9.0+incompatible` | | [github.com/docker/docker-credential-helpers](https://github.com/docker/docker-credential-helpers) | `0.9.9` | `0.9.10` | | [github.com/github/go-spdx/v2](https://github.com/github/go-spdx) | `2.7.0` | `2.7.1` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.20.1` | `1.20.3` | | [github.com/moby/moby/client](https://github.com/moby/moby) | `0.6.1` | `0.6.2` | | [github.com/nwaples/rardecode/v2](https://github.com/nwaples/rardecode) | `2.4.2` | `2.4.4` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.57.0` | `0.58.0` | | [golang.org/x/mod](https://github.com/golang/mod) | `0.41.0` | `0.42.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.59.0` | `0.60.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.46.0` | `0.47.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.42.0` | `0.43.0` | | [golang.org/x/tools](https://github.com/golang/tools) | `0.51.0` | `0.52.0` | | [modernc.org/libc](https://gitlab.com/cznic/libc) | `1.77.1` | `1.78.0` | Updates `github.com/aws/aws-sdk-go-v2` from 1.47.1 to 1.47.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.47.1...v1.47.3) Updates `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream` from 1.7.20 to 1.7.22 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/notifications/v1.7.20...service/notifications/v1.7.22) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.7 to 1.33.9 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.33.7...config/v1.33.9) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.20.7 to 1.20.9 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/mq/v1.20.7...service/kms/v1.20.9) Updates `github.com/aws/aws-sdk-go-v2/feature/ec2/imds` from 1.20.1 to 1.20.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.20.1...v1.20.3) Updates `github.com/aws/aws-sdk-go-v2/internal/configsources` from 1.5.4 to 1.5.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/evs/v1.5.4...service/odb/v1.5.6) Updates `github.com/aws/aws-sdk-go-v2/internal/endpoints/v2` from 2.8.4 to 2.8.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@internal/endpoints/v2.8.4...internal/endpoints/v2.8.6) Updates `github.com/aws/aws-sdk-go-v2/internal/v4a` from 1.5.4 to 1.5.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/evs/v1.5.4...service/odb/v1.5.6) Updates `github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding` from 1.13.19 to 1.13.21 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@credentials/v1.13.19...credentials/v1.13.21) Updates `github.com/aws/aws-sdk-go-v2/service/internal/checksum` from 1.11.5 to 1.11.7 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/rum/v1.11.5...service/dax/v1.11.7) Updates `github.com/aws/aws-sdk-go-v2/service/internal/presigned-url` from 1.14.4 to 1.14.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/service/mq/v1.14.6/CHANGELOG.md) - [Commits](aws/aws-sdk-go-v2@service/pi/v1.14.4...service/mq/v1.14.6) Updates `github.com/aws/aws-sdk-go-v2/service/internal/s3shared` from 1.20.4 to 1.20.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/mq/v1.20.4...service/mq/v1.20.6) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.114.1 to 1.114.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.114.1...service/s3/v1.114.3) Updates `github.com/aws/aws-sdk-go-v2/service/signin` from 1.10.2 to 1.10.4 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.10.2...service/m2/v1.10.4) Updates `github.com/aws/aws-sdk-go-v2/service/sso` from 1.38.2 to 1.38.4 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.38.2...service/s3/v1.38.4) Updates `github.com/aws/aws-sdk-go-v2/service/ssooidc` from 1.43.2 to 1.43.4 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.43.2...v1.43.4) Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.51.2 to 1.51.4 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.51.2...service/s3/v1.51.4) Updates `github.com/aws/smithy-go` from 1.28.4 to 1.28.5 - [Release notes](https://github.com/aws/smithy-go/releases) - [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md) - [Commits](aws/smithy-go@v1.28.4...v1.28.5) Updates `github.com/bmatcuk/doublestar/v4` from 4.10.2 to 4.10.3 - [Release notes](https://github.com/bmatcuk/doublestar/releases) - [Commits](bmatcuk/doublestar@v4.10.2...v4.10.3) Updates `github.com/charmbracelet/x/ansi` from 0.11.8 to 0.11.9 - [Commits](charmbracelet/x@ansi/v0.11.8...ansi/v0.11.9) Updates `github.com/docker/cli` from 29.8.2+incompatible to 29.9.0+incompatible - [Commits](docker/cli@v29.8.2...v29.9.0) Updates `github.com/docker/docker-credential-helpers` from 0.9.9 to 0.9.10 - [Release notes](https://github.com/docker/docker-credential-helpers/releases) - [Commits](docker/docker-credential-helpers@v0.9.9...v0.9.10) Updates `github.com/github/go-spdx/v2` from 2.7.0 to 2.7.1 - [Release notes](https://github.com/github/go-spdx/releases) - [Commits](github/go-spdx@v2.7.0...v2.7.1) Updates `github.com/klauspost/compress` from 1.20.1 to 1.20.3 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.20.1...v1.20.3) Updates `github.com/moby/moby/client` from 0.6.1 to 0.6.2 - [Release notes](https://github.com/moby/moby/releases) - [Changelog](https://github.com/moby/moby/blob/v0.6.2/CHANGELOG.md) - [Commits](moby/moby@v0.6.1...v0.6.2) Updates `github.com/nwaples/rardecode/v2` from 2.4.2 to 2.4.4 - [Commits](nwaples/rardecode@v2.4.2...v2.4.4) Updates `golang.org/x/crypto` from 0.57.0 to 0.58.0 - [Commits](golang/crypto@v0.57.0...v0.58.0) Updates `golang.org/x/mod` from 0.41.0 to 0.42.0 - [Commits](golang/mod@v0.41.0...v0.42.0) Updates `golang.org/x/net` from 0.59.0 to 0.60.0 - [Commits](golang/net@v0.59.0...v0.60.0) Updates `golang.org/x/term` from 0.46.0 to 0.47.0 - [Commits](golang/term@v0.46.0...v0.47.0) Updates `golang.org/x/text` from 0.42.0 to 0.43.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.42.0...v0.43.0) Updates `golang.org/x/tools` from 0.51.0 to 0.52.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.51.0...v0.52.0) Updates `modernc.org/libc` from 1.77.1 to 1.78.0 - [Commits](https://gitlab.com/cznic/libc/compare/v1.77.1...v1.78.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.47.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream dependency-version: 1.7.22 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.33.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.20.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/feature/ec2/imds dependency-version: 1.20.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/internal/configsources dependency-version: 1.5.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 dependency-version: 2.8.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/internal/v4a dependency-version: 1.5.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding dependency-version: 1.13.21 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/checksum dependency-version: 1.11.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/presigned-url dependency-version: 1.14.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/s3shared dependency-version: 1.20.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.114.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/service/signin dependency-version: 1.10.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/service/sso dependency-version: 1.38.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/service/ssooidc dependency-version: 1.43.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/service/sts dependency-version: 1.51.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/smithy-go dependency-version: 1.28.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/bmatcuk/doublestar/v4 dependency-version: 4.10.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/charmbracelet/x/ansi dependency-version: 0.11.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/docker/cli dependency-version: 29.9.0+incompatible dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/docker/docker-credential-helpers dependency-version: 0.9.10 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/github/go-spdx/v2 dependency-version: 2.7.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/klauspost/compress dependency-version: 1.20.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/moby/moby/client dependency-version: 0.6.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/nwaples/rardecode/v2 dependency-version: 2.4.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: golang.org/x/crypto dependency-version: 0.58.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/mod dependency-version: 0.42.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/net dependency-version: 0.60.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/term dependency-version: 0.47.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/text dependency-version: 0.43.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/tools dependency-version: 0.52.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: modernc.org/libc dependency-version: 1.78.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-20T16:55:27Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot requested review from a team as code owners October 19, 2026 17:11

dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 19, 2026

dependabot Bot removed the request for review from a team October 19, 2026 17:11

dependabot Bot added the go Pull requests that update Go code label Oct 19, 2026

dependabot Bot requested review from pacostas and paketo-bot-reviewer October 19, 2026 17:11

paketo-bot added the semver:patch A change requiring a patch version bump label Oct 19, 2026

dependabot Bot closed this Oct 20, 2026

dependabot Bot deleted the dependabot/go_modules/go-modules-45bc8fe48d branch October 20, 2026 16:55

Navigation Menu

Repository navigation

Bump the go-modules group across 1 directory with 33 updates - #1741

Bump the go-modules group across 1 directory with 33 updates#1741
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-45bc8fe48d

dependabot Bot commented on behalf of github Oct 19, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 20, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release (2023-03-21)

General Highlights

Module Highlights

Release (2023-03-20)

Module Highlights

Release (2023-03-17)

Module Highlights

Release (2023-03-16)

General Highlights

Module Highlights

Release (2026-10-09)

General Highlights

Module Highlights

Release (2026-10-07)

General Highlights

Module Highlights

Release (2026-10-06)

General Highlights

Module Highlights

Release (2026-09-18)

General Highlights

Module Highlights

Release (2026-08-26)

General Highlights

Module Highlights

Release (2026-08-25.2)

Handles character ranges when using WithCaseInsensitive

v0.9.10

What's Changed

Release 2.7.1

Overview

What's Changed

v1.20.3

What's Changed

New Contributors

v1.20.2

Uh oh!

dependabot Bot commented on behalf of github Oct 20, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 19, 2026 •

edited

Loading