fix(deps): update go module updates patch by netic-renovate[bot] · Pull Request #335 · neticdk/go-common

netic-renovate · 2026-06-15T08:52:25Z

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/MicahParks/keyfunc/v3	`v3.8.0` → `v3.8.2`
github.com/go-git/go-billy/v5	`v5.9.0` → `v5.9.1`
github.com/go-jose/go-jose/v4	`v4.1.4` → `v4.1.5`
github.com/mattn/go-isatty	`v0.0.22` → `v0.0.24`
github.com/mattn/go-shellwords	`v1.0.13` → `v1.0.14`
gorm.io/driver/postgres	`v1.6.0` → `v1.6.2`
gorm.io/gorm	`v1.31.1` → `v1.31.2`

Release Notes

MicahParks/keyfunc (github.com/MicahParks/keyfunc/v3)

`v3.8.2`

Compare Source

`v3.8.1`

Compare Source

go-git/go-billy (github.com/go-git/go-billy/v5)

`v5.9.1`

Compare Source

What's Changed

build: Update module golang.org/x/net to v0.55.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #216
build: Update module golang.org/x/text to v0.39.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #230
build: Update module golang.org/x/net to v0.56.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #229

Full Changelog: go-git/go-billy@v5.9.0...v5.9.1

go-jose/go-jose (github.com/go-jose/go-jose/v4)

`v4.1.5`

Compare Source

Fixed security issues

cipher/cbc_hmac: don't panic on empty ciphertext (#292)
cipher/cbc_hmac: don't panic on invalid key (#291)
json: limit stack depth (#290)
jwt: reject out-of-range NumericDate values (#278)
Check alg against pubkey curve during verify. (#293)
Reject malformed Ed25519 JWKs (#250)
jws: choose verification key per-signature (#243)

Changed

Verify OpaqueSigner's Public() return is public (#260)
jws: skip signature on ErrJWKSKidNotFound (#248)
Handle JWE JSON without protected header (#240)
jws: don't strip internal whitespace before parsing JSON (#239)
jws: fewer calls to OpaqueSigner.Public() (#224)
Return a specific error when parsing empty string (#216)
Reject typed nil at Verify time (#285)

mattn/go-isatty (github.com/mattn/go-isatty)

`v0.0.24`

Compare Source

`v0.0.23`

Compare Source

mattn/go-shellwords (github.com/mattn/go-shellwords)

`v1.0.14`

Compare Source

go-gorm/postgres (gorm.io/driver/postgres)

`v1.6.2`

Compare Source

`v1.6.1`

Compare Source

go-gorm/gorm (gorm.io/gorm)

`v1.31.2`

Compare Source

Changes

Fix potential rows leak on panic by deferring rows.Close() @omer-cengel (#7798)
perf: replace fmt.Sprintf with strconv in ExplainSQL numeric formatting @alpardfm (#7796)
Document NowFunc timezone behavior @morning-verlu (#7799)
correct typo and rename fileType to fieldType in AlterColumn @cragone (#7748)
fix: panic when using clause.Returning with CreateInBatches @Truongquangkhang (#7768)
fix(migrator): add nil guards to ColumnType methods to prevent panic @lihan3238 (#7767)
ci: switch tests Go matrix to stable/oldstable and update setup-go @smf-h (#7726)
chore(ci): bump actions/stale to v9 @Olexandr88 (#7696)
fix(migrator): don't clear alterColumn when defaults match @qqxhb (#7728)
Add package comments to fix ST1000 warnings @twocs (#7708)
generics: populate WithResult error @qqxhb (#7723)
fix(utils): restore FileWithLineNum caller depth and add regression test @smf-h (#7717)
tests: skip customized foreign key many2many on MySQL 8.4+ @smf-h (#7727)
fix tiny typo in error message @snelg (#7738)
Add unit test verifying chainable query methods mutate statement @miladev95 (#7684)
fix: Close connection after ping failure to prevent goroutine leak @liang09255 (#7689)
fix: Row() and Rows() functions should automaticaly apply the generic type as model @hakanakyurek (#7664)
internal/lru: improve concurrency with RWMutex @miladev95 (#7668)
Fix nil pointer panic in serializer for nil any-type fields @doraemonkeys (#7634)
staticcheck QF1001 @miladev95 (#7648)
Support array/slice expansion for named SQL parameters in parentheses @bafflingbug (#7614)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

netic-renovate · 2026-06-15T08:52:28Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

39 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=2 days

Details:

Package	Change
`go.opentelemetry.io/otel`	`v1.43.0` -> `v1.44.0`
`go.opentelemetry.io/otel/trace`	`v1.43.0` -> `v1.44.0`
`golang.org/x/crypto`	`v0.51.0` -> `v0.54.0`
`golang.org/x/mod`	`v0.36.0` -> `v0.37.0`
`golang.org/x/term`	`v0.43.0` -> `v0.45.0`
`k8s.io/apimachinery`	`v0.36.1` -> `v0.36.2`
`cyphar.com/go-pathrs`	`v0.2.1` -> `v0.2.5`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp`	`v1.31.0` -> `v1.32.0`
`github.com/Masterminds/semver/v3`	`v3.4.0` -> `v3.5.0`
`github.com/MicahParks/jwkset`	`v0.11.0` -> `v0.11.3`
`github.com/ProtonMail/go-crypto`	`v1.4.0` -> `v1.4.1`
`github.com/cncf/xds/go`	`v0.0.0-20251210132809-ee656c7534f5` -> `v0.0.0-20260202195803-dba9d589def2`
`github.com/cyphar/filepath-securejoin`	`v0.6.1` -> `v0.7.0`
`github.com/envoyproxy/go-control-plane/envoy`	`v1.36.0` -> `v1.37.0`
`github.com/envoyproxy/protoc-gen-validate`	`v1.3.0` -> `v1.3.3`
`github.com/google/pprof`	`v0.0.0-20250630185457-6e76a2b096b5` -> `v0.0.0-20260115054156-294ebfa9ad83`
`github.com/jackc/pgx/v5`	`v5.9.2` -> `v5.10.0`
`github.com/lib/pq`	`v1.11.2` -> `v1.12.3`
`go.opentelemetry.io/contrib/detectors/gcp`	`v1.39.0` -> `v1.43.0`
`go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc`	`v0.63.0` -> `v0.65.0`
`go.opentelemetry.io/otel/metric`	`v1.43.0` -> `v1.44.0`
`golang.org/x/net`	`v0.53.0` -> `v0.56.0`
`golang.org/x/sync`	`v0.20.0` -> `v0.22.0`
`golang.org/x/sys`	`v0.44.0` -> `v0.47.0`
`golang.org/x/text`	`v0.37.0` -> `v0.40.0`
`golang.org/x/tools`	`v0.44.0` -> `v0.47.0`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20260401024825-9d38bb4040a9` -> `v0.0.0-20260414002931-afd174a4e478`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260406210006-6f92a3bedf2d` -> `v0.0.0-20260414002931-afd174a4e478`
`google.golang.org/grpc`	`v1.80.0` -> `v1.82.1`
`k8s.io/api`	`v0.35.1` -> `v0.36.2`
`k8s.io/apiextensions-apiserver`	`v0.35.1` -> `v0.36.2`
`k8s.io/apiserver`	`v0.35.1` -> `v0.36.2`
`k8s.io/cli-runtime`	`v0.35.1` -> `v0.36.2`
`k8s.io/client-go`	`v0.35.1` -> `v0.36.2`
`k8s.io/component-base`	`v0.35.1` -> `v0.36.2`
`k8s.io/kubectl`	`v0.35.1` -> `v0.36.2`
`oras.land/oras-go/v2`	`v2.6.0` -> `v2.6.1`
`sigs.k8s.io/kustomize/api`	`v0.20.1` -> `v0.21.1`
`sigs.k8s.io/kustomize/kyaml`	`v0.20.1` -> `v0.21.1`

gh-netic-robot

All checks passed, automatically approving.

netic-renovate Bot added the renovate-auto-approve Enables auto approval for Renovate PRs label Jun 15, 2026

netic-renovate Bot requested review from a team and gh-netic-robot as code owners June 15, 2026 08:52

netic-renovate Bot force-pushed the renovate/go-module-updates-patch branch from afcc5dd to 2671a87 Compare June 16, 2026 17:21

gh-netic-robot previously approved these changes Jun 16, 2026

View reviewed changes

netic-renovate Bot dismissed gh-netic-robot’s stale review via 1d8c2c4 June 18, 2026 08:27

netic-renovate Bot force-pushed the renovate/go-module-updates-patch branch 3 times, most recently from 0d5f94d to 354f127 Compare June 25, 2026 08:00

netic-renovate Bot force-pushed the renovate/go-module-updates-patch branch 2 times, most recently from 2c78984 to 24f745a Compare July 20, 2026 07:46

netic-renovate Bot force-pushed the renovate/go-module-updates-patch branch 4 times, most recently from 1070f30 to 04f87b6 Compare July 31, 2026 10:26

netic-renovate Bot force-pushed the renovate/go-module-updates-patch branch from 04f87b6 to 6590e63 Compare August 3, 2026 10:52

netic-renovate Bot force-pushed the renovate/go-module-updates-patch branch from 6590e63 to 8454ebb Compare August 17, 2026 06:56

netic-renovate Bot force-pushed the renovate/go-module-updates-patch branch from 8454ebb to 9d95a3e Compare August 24, 2026 07:01

fix(deps): update go module updates patch

21aad22

netic-renovate Bot force-pushed the renovate/go-module-updates-patch branch from 9d95a3e to 21aad22 Compare September 7, 2026 07:14

Navigation Menu

Uh oh!

fix(deps): update go module updates patch - #335

fix(deps): update go module updates patch#335
netic-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-module-updates-patch

netic-renovate Bot commented Jun 15, 2026 •

edited

Loading

Uh oh!

netic-renovate Bot commented Jun 15, 2026 •

edited

Loading

Uh oh!

gh-netic-robot left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

netic-renovate Bot commented Jun 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

Fixed security issues

Changed

Changes

Configuration

Uh oh!

netic-renovate Bot commented Jun 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

gh-netic-robot left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

netic-renovate Bot commented Jun 15, 2026 •

edited

Loading

netic-renovate Bot commented Jun 15, 2026 •

edited

Loading