build(deps): bump the gomod group with 12 updates by dependabot[bot] · Pull Request #4560 · crowdsecurity/crowdsec

dependabot · 2026-07-10T14:45:57Z

Bumps the gomod group with 12 updates:

Package	From	To
github.com/aws/aws-sdk-go-v2/config	`1.32.28`	`1.32.29`
github.com/aws/aws-sdk-go-v2/feature/s3/manager	`1.22.31`	`1.22.32`
github.com/getkin/kin-openapi	`0.140.0`	`0.141.0`
github.com/go-co-op/gocron/v2	`2.21.2`	`2.22.0`
github.com/prometheus/common	`0.69.0`	`0.70.0`
github.com/wasilibs/go-re2	`1.11.0`	`1.12.0`
golang.org/x/crypto	`0.53.0`	`0.54.0`
golang.org/x/mod	`0.36.0`	`0.37.0`
golang.org/x/net	`0.56.0`	`0.57.0`
golang.org/x/sync	`0.21.0`	`0.22.0`
golang.org/x/sys	`0.46.0`	`0.47.0`
golang.org/x/text	`0.38.0`	`0.40.0`

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.28 to 1.32.29

Commits

ed75d3d Release 2026-07-08.2
d67404a Regenerated Clients
8a21e09 Update API model
cb69824 Release 2026-07-08
0f18a1f Regenerated Clients
982e0d0 Update API model
2872bae Add missing options.RequestChecksumCalculation (#3470)
ef1f0fe fix(feature/s3/transfermanager): allow multiple symlinks to share the same ta...
0df1b91 Release 2026-07-07
b4ef730 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.22.31 to 1.22.32

Commits

ed75d3d Release 2026-07-08.2
d67404a Regenerated Clients
8a21e09 Update API model
cb69824 Release 2026-07-08
0f18a1f Regenerated Clients
982e0d0 Update API model
2872bae Add missing options.RequestChecksumCalculation (#3470)
ef1f0fe fix(feature/s3/transfermanager): allow multiple symlinks to share the same ta...
0df1b91 Release 2026-07-07
b4ef730 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/getkin/kin-openapi from 0.140.0 to 0.141.0

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.141.0

What's Changed

openapi3filter: honor comma-separated and wildcard encoding.contentType by @utah-KT in getkin/kin-openapi#1201

openapi3: typed context wrappers for combinator and tag validation by @reuvenharrison in getkin/kin-openapi#1199

openapi3: enforce unique required entries and unique tag names in Validate() by @reuvenharrison in getkin/kin-openapi#1203

openapi3gen: Add an option to customize generated field names (properties) for structs by @d1vbyz3r0 in getkin/kin-openapi#1204

openapi3: add T.WalkSchemas to visit every schema in a document by @reuvenharrison in getkin/kin-openapi#1206

openapi3: record block end on Origin.Key (EndLine/EndColumn) by @reuvenharrison in getkin/kin-openapi#1207

openapi3: record scalar-valued map keys for origin location lookup by @reuvenharrison in getkin/kin-openapi#1208

docs: Go Report Card has been sunset by @alexandear in getkin/kin-openapi#1210

openapi3: support OAS 3.2 itemSchema by @fenollp in getkin/kin-openapi#1213

openapi3: make operation responses optional for 3.1+ by @AlexanderWangY in getkin/kin-openapi#1214

qol: Makefile for shorthand commands + preflight scripts by @AlexanderWangY in getkin/kin-openapi#1217

New Contributors

@AlexanderWangY made their first contribution in getkin/kin-openapi#1214

Full Changelog: getkin/kin-openapi@v0.140.0...v0.141.0

Commits

1d0a337 Merge commit from fork
98d9564 qol: Makefile for shorthand commands + preflight scripts (#1217)
b5bb6bc openapi3: make operation responses optional for 3.1+ (#1214)
ae6bf33 openapi3: support OAS 3.2 itemSchema (#1213)
1b54e4c docs: Go Report Card has been sunset (#1210)
4a0d049 origin: record scalar-valued map keys for location lookup (#1208)
26c42cf openapi3: record block end on Origin.Key (EndLine/EndColumn) (#1207)
6b0df72 openapi3: add T.WalkSchemas to visit every schema in a document (#1206)
e56b2a1 openapi3gen: Add an option to customize generated field names (properties) fo...
6c01290 openapi3: enforce unique required entries and unique tag names in Validate() ...
Additional commits viewable in compare view

Updates github.com/go-co-op/gocron/v2 from 2.21.2 to 2.22.0

Release notes

Sourced from github.com/go-co-op/gocron/v2's releases.

v2.22.0

What's Changed

build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @dependabot[bot] in go-co-op/gocron#927

build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot[bot] in go-co-op/gocron#929

build(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in go-co-op/gocron#928

fix: various performance improvements and clean up by @JohnRoesler in go-co-op/gocron#930

fixes: internal job func call handles param len mismatch, and global job options supports multiple calls by @JohnRoesler in go-co-op/gocron#931

fix(scheduler): skipped runs no longer consume WithLimitedRuns budget by @JohnRoesler in go-co-op/gocron#932

refactor(scheduler): make nextScheduled ascending-time invariant explicit by @JohnRoesler in go-co-op/gocron#933

refactor: adding modernize and embeddedstructfieldcheck linters by @manuelarte in go-co-op/gocron#934

M-tier hygiene: constants, dedup, ErrSchedulerBusy, docs by @JohnRoesler in go-co-op/gocron#935

L-tier finale: typed LimitMode, docstrings, invariant comments by @JohnRoesler in go-co-op/gocron#936

fix: eliminate shared mutable state across jobs (C4, H5) by @JohnRoesler in go-co-op/gocron#937

ci: gate pre-commit config, add Dependabot pin updates by @JohnRoesler in go-co-op/gocron#938

ci: track Go stable/oldstable instead of pinned versions by @JohnRoesler in go-co-op/gocron#942

build(deps): bump https://github.com/TekWizely/pre-commit-golang from v1.0.0-rc.1 to 1.0.0.pre.rc.4 by @dependabot[bot] in go-co-op/gocron#941

build(deps): bump https://github.com/pre-commit/pre-commit-hooks from v5.0.0 to 6.0.0 by @dependabot[bot] in go-co-op/gocron#940

build(deps): bump https://github.com/golangci/golangci-lint from v2.11.4 to 2.12.2 by @dependabot[bot] in go-co-op/gocron#939

test(scheduler): regression test for issue #943 OneTimeJob CPU spin by @JohnRoesler in go-co-op/gocron#944

Full Changelog: go-co-op/gocron@v2.21.2...v2.22.0

Commits

10cdd5e test(scheduler): regression test for issue #943 OneTimeJob CPU spin (#944)
c4697d4 build(deps): bump https://github.com/golangci/golangci-lint (#939)
fe80573 build(deps): bump https://github.com/pre-commit/pre-commit-hooks (#940)
2ff4927 build(deps): bump https://github.com/TekWizely/pre-commit-golang (#941)
4e7939d ci: track Go stable/oldstable instead of pinned versions (#942)
c3fa241 ci: gate pre-commit config, add Dependabot pin updates (#938)
afb9e5a fix: eliminate shared mutable state across jobs (C4, H5) (#937)
f7abd19 L-tier finale: typed LimitMode, docstrings, invariant comments (#936)
48ff511 M-tier hygiene: constants, dedup, ErrSchedulerBusy, docs (#935)
b870629 refactor: adding modernize and embeddedstructfieldcheck linters (#934)
Additional commits viewable in compare view

Updates github.com/prometheus/common from 0.69.0 to 0.70.0

Release notes

Sourced from github.com/prometheus/common's releases.

v0.70.0

What's Changed

config: fix TLSVersion.String() printing pointer address by @s3onghyun in prometheus/common#929

build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 by @dependabot[bot] in prometheus/common#933

Manually go mod tidy by @SuperQ in prometheus/common#934

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#937

route: add support for the QUERY HTTP method by @roidelapluie in prometheus/common#932

Combine and extend Prometheus text and OpenMetrics 1.0 encoder benchmarks by @dashpole in prometheus/common#943

build(deps): bump the codeql group with 4 updates by @dependabot[bot] in prometheus/common#938

build(deps): bump actions/setup-go from 6.2.0 to 6.5.0 by @dependabot[bot] in prometheus/common#940

build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 by @dependabot[bot] in prometheus/common#942

build(deps): bump ossf/scorecard-action from 2.1.2 to 2.4.3 by @dependabot[bot] in prometheus/common#939

build(deps): bump actions/checkout from 3.1.0 to 7.0.0 by @dependabot[bot] in prometheus/common#941

New Contributors

@s3onghyun made their first contribution in prometheus/common#929

Full Changelog: prometheus/common@v0.69.0...v0.70.0

Changelog

Sourced from github.com/prometheus/common's changelog.

v0.70.0 / 2026-07-10

Enhancements

route: add support for the QUERY HTTP method. #932

Bugfixes

config: fix TLSVersion.String() printing a pointer address instead of the numeric version for unknown TLS versions. #929

Internal

expfmt: add BenchmarkConvertMetricFamily comparing the Prometheus text and OpenMetrics 1.0 encoders. #943

Update Go dependencies. #933 #934

Synchronize common files from prometheus/prometheus. #923 #927 #930 #937

Update GitHub Actions. #938 #939 #940 #941 #942

Full Changelog: prometheus/common@v0.69.0...v0.70.0

Commits

5eff7a8 Merge pull request #941 from prometheus/dependabot/github_actions/actions/che...
a23c5b3 Merge pull request #939 from prometheus/dependabot/github_actions/ossf/scorec...
9e1eb87 Merge pull request #942 from prometheus/dependabot/github_actions/actions/upl...
ab2736d Merge pull request #940 from prometheus/dependabot/github_actions/actions/set...
e596873 Merge pull request #938 from prometheus/dependabot/github_actions/codeql-ac07...
97c066a Add BenchmarkConvertMetricFamily comparing Prometheus text and OpenMetrics 1....
62e9d0f Merge pull request #932 from roidelapluie/roidelapluie/route-query
6c31239 build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1
755e9d6 build(deps): bump actions/checkout from 3.1.0 to 7.0.0
556d740 build(deps): bump actions/setup-go from 6.2.0 to 6.5.0
Additional commits viewable in compare view

Updates github.com/wasilibs/go-re2 from 1.11.0 to 1.12.0

Release notes

Sourced from github.com/wasilibs/go-re2's releases.

v1.12.0

This is a big release - the default backend has been switched from wazero to wasm2go, which has been available for preview since 1.11.0. Thanks to help from @ncruces, wasm2go has gotten even faster and now we see it beat wazero in almost all benchmark cases (just 1 exception in compiling a pathological expression where it's a little slower). It is also using less memory and should have improved concurrency, and with less reliance on Go internals, it should have less issues on new Go version releases than we have seen in the past. re2_wazero build tag is preserved for now if you need to fallback - and please file an issue if you do! In a future version it will be retired.

This release also retires support for TinyGo via build tags - if you still use this with TinyGo, it is recommended to pin to an older version.

Full Changelog: wasilibs/go-re2@v1.11.0...v1.12.0

Commits

35b35ec Remove remaining tinygo references (#252)
edc64fc Switch default backend to wasm2go (#251)
4482bc1 Update module github.com/curioswitch/go-build to v0.8.1 (#250)
6cb9ea4 Update curioswitch/go-build action to v0.8.1 (#249)
86b24c9 Reduce stack size for wasm2go (#248)
a986698 Disable race detector for exhaustive test like Go (#247)
5a1b67d Raise test timeout
ec9272b Update module github.com/curioswitch/go-build to v0.7.4 (#244)
a42ba24 Update to latest wasm2go (#246)
a435f6d Update cross-platform-actions/action action to v1.3.0 (#245)
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.53.0 to 0.54.0

Commits

cdce021 go.mod: update golang.org/x dependencies
d9474cc openpgp: make the deprecation message more explicit
7626c50 ssh: verify declared key type matches decoded key in authorized_keys
0471e79 ssh/agent: enforce strict limits on DSA key parameters
6435c37 ssh: sanitize client disconnect messages
7d695da ssh/agent: drain channel stderr in agent forwarders
5b7f841 acme/autocert: fix data race in Manager.createCert
0b316e7 argon2: update RFC 9106 parameter recommendations
55aec0a x509roots/fallback: update bundle
5f2de1a internal: remove wycheproof tests
See full diff in compare view

Updates golang.org/x/mod from 0.36.0 to 0.37.0

Commits

deb1dfc go.mod: update golang.org/x dependencies
087f651 modfile: use slices.Backward
343ee60 x/mod: allow for aggressively conslidating requires
See full diff in compare view

Updates golang.org/x/net from 0.56.0 to 0.57.0

Commits

b8f09f6 go.mod: update golang.org/x dependencies
f05f21b idna: reject all-ASCII xn-- labels on all Go versions
0f748cf internal/http3: clean up stream I/O methods usages in tests
0bb961e internal/http3: add net/http.ResponseController support
0ca694d webdav: document Dir's lack of defense against filesystem modification
bd5f1dc http2: initialize Transport on NewClientConn
488ff63 bpf: add security considerations to package docs
93d1f25 xsrftoken: avoid token collisions
5a3baee internal/http3: prevent panic in QPACK decoder due to overflow
See full diff in compare view

Updates golang.org/x/sync from 0.21.0 to 0.22.0

Commits

1eb64d4 semaphore: panic on negative weights
See full diff in compare view

Updates golang.org/x/sys from 0.46.0 to 0.47.0

Commits

9e7e939 cpu: handle vendor suffixes in parseRelease
f6fb8a1 unix: use epoll_pwait rather than epoll_wait
f3eeabf windows: avoid length overflow in NewNTString
3cb6647 unix: update glibc to 2.43
c507910 windows: document safe usage of TrusteeValue
See full diff in compare view

Updates golang.org/x/text from 0.38.0 to 0.40.0

Commits

724af9c go.mod: update golang.org/x dependencies
bf5b9d6 internal/export/idna: always treat Punycode encoding pure ASCII as an error
b326f3d go.mod: update golang.org/x dependencies
5ae8e57 unicode/norm: avoid infinite loop on invalid input
0dc94a2 all: fix some comments
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gomod group with 12 updates: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.28` | `1.32.29` | | [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.22.31` | `1.22.32` | | [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) | `0.140.0` | `0.141.0` | | [github.com/go-co-op/gocron/v2](https://github.com/go-co-op/gocron) | `2.21.2` | `2.22.0` | | [github.com/prometheus/common](https://github.com/prometheus/common) | `0.69.0` | `0.70.0` | | [github.com/wasilibs/go-re2](https://github.com/wasilibs/go-re2) | `1.11.0` | `1.12.0` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.53.0` | `0.54.0` | | [golang.org/x/mod](https://github.com/golang/mod) | `0.36.0` | `0.37.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.56.0` | `0.57.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.21.0` | `0.22.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.46.0` | `0.47.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.38.0` | `0.40.0` | Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.28 to 1.32.29 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.28...config/v1.32.29) Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.22.31 to 1.22.32 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@feature/s3/manager/v1.22.31...feature/s3/manager/v1.22.32) Updates `github.com/getkin/kin-openapi` from 0.140.0 to 0.141.0 - [Release notes](https://github.com/getkin/kin-openapi/releases) - [Commits](getkin/kin-openapi@v0.140.0...v0.141.0) Updates `github.com/go-co-op/gocron/v2` from 2.21.2 to 2.22.0 - [Release notes](https://github.com/go-co-op/gocron/releases) - [Commits](go-co-op/gocron@v2.21.2...v2.22.0) Updates `github.com/prometheus/common` from 0.69.0 to 0.70.0 - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md) - [Commits](prometheus/common@v0.69.0...v0.70.0) Updates `github.com/wasilibs/go-re2` from 1.11.0 to 1.12.0 - [Release notes](https://github.com/wasilibs/go-re2/releases) - [Commits](wasilibs/go-re2@v1.11.0...v1.12.0) Updates `golang.org/x/crypto` from 0.53.0 to 0.54.0 - [Commits](golang/crypto@v0.53.0...v0.54.0) Updates `golang.org/x/mod` from 0.36.0 to 0.37.0 - [Commits](golang/mod@v0.36.0...v0.37.0) Updates `golang.org/x/net` from 0.56.0 to 0.57.0 - [Commits](golang/net@v0.56.0...v0.57.0) Updates `golang.org/x/sync` from 0.21.0 to 0.22.0 - [Commits](golang/sync@v0.21.0...v0.22.0) Updates `golang.org/x/sys` from 0.46.0 to 0.47.0 - [Commits](golang/sys@v0.46.0...v0.47.0) Updates `golang.org/x/text` from 0.38.0 to 0.40.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.38.0...v0.40.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager dependency-version: 1.22.32 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/getkin/kin-openapi dependency-version: 0.141.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/go-co-op/gocron/v2 dependency-version: 2.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/prometheus/common dependency-version: 0.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/wasilibs/go-re2 dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/crypto dependency-version: 0.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/mod dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/net dependency-version: 0.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/sync dependency-version: 0.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/sys dependency-version: 0.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/text dependency-version: 0.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added go Pull requests that update Go code kind/dependencies labels Jul 10, 2026

github-actions Bot added the needs/area label Jul 10, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the gomod group with 12 updates#4560

build(deps): bump the gomod group with 12 updates#4560
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/gomod-92b6e2462f

dependabot Bot commented on behalf of github Jul 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 10, 2026

v0.141.0

What's Changed

New Contributors

v2.22.0

What's Changed

v0.70.0

What's Changed

New Contributors

v0.70.0 / 2026-07-10

Enhancements

Bugfixes

Internal

v1.12.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants