Skip to content

build(deps): bump the go group across 4 directories with 27 updates - #91

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/lego/backend/go-ddd4fb5d9f
Closed

build(deps): bump the go group across 4 directories with 27 updates#91
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/lego/backend/go-ddd4fb5d9f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go group with 17 updates in the /lego/backend directory:

Package From To
github.com/aws/aws-sdk-go-v2 1.42.1 1.47.0
github.com/aws/aws-sdk-go-v2/credentials 1.19.28 1.20.5
github.com/aws/aws-sdk-go-v2/service/s3 1.105.0 1.113.1
github.com/getkin/kin-openapi 0.144.0 0.149.0
github.com/modelcontextprotocol/go-sdk 1.6.1 1.8.0
github.com/santhosh-tekuri/jsonschema/v6 6.0.2 6.0.3
github.com/stripe/stripe-go/v86 86.1.1 86.4.2
k8s.io/apimachinery 0.35.0 0.37.0
k8s.io/client-go 0.35.0 0.37.0
sigs.k8s.io/controller-runtime 0.23.3 0.25.1
github.com/golang-migrate/migrate/v4 4.19.1 4.20.1
github.com/jackc/pgx/v5 5.10.0 5.11.0
github.com/prometheus/client_golang 1.23.2 1.24.0
github.com/prometheus/client_model 0.6.2 0.6.3
github.com/prometheus/common 0.66.1 0.70.0
golang.org/x/time 0.12.0 0.15.0
k8s.io/utils 0.0.0-20251002143259-bc988d571ff4 0.0.0-20260626114624-be93311217bd

Bumps the go group with 1 update in the /lego/cli directory: github.com/sigstore/protobuf-specs.
Bumps the go group with 17 updates in the /lego/operator directory:

Package From To
github.com/aws/aws-sdk-go-v2 1.43.7 1.47.0
github.com/aws/aws-sdk-go-v2/service/s3 1.107.3 1.113.1
k8s.io/apimachinery 0.35.0 0.37.0
k8s.io/client-go 0.35.0 0.37.0
sigs.k8s.io/controller-runtime 0.23.3 0.25.1
github.com/prometheus/client_golang 1.23.2 1.24.0
github.com/prometheus/client_model 0.6.2 0.6.3
k8s.io/utils 0.0.0-20251002143259-bc988d571ff4 0.0.0-20260626114624-be93311217bd
filippo.io/age 1.3.1 1.3.2
github.com/aws/aws-sdk-go-v2/config 1.32.38 1.33.5
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager 0.3.15 0.4.7
github.com/aws/smithy-go 1.27.8 1.28.1
github.com/onsi/ginkgo/v2 2.27.2 2.27.4
github.com/onsi/gomega 1.38.2 1.39.0
github.com/prometheus/prometheus 0.54.1 0.314.0
github.com/redis/go-redis/v9 9.17.2 9.22.0
github.com/Masterminds/semver/v3 3.4.0 3.5.0

Bumps the go group with 2 updates in the /lego/types directory: k8s.io/apimachinery and sigs.k8s.io/controller-runtime.

Updates github.com/aws/aws-sdk-go-v2 from 1.42.1 to 1.47.0
Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.28 to 1.20.5
Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.105.0 to 1.113.1
Updates github.com/getkin/kin-openapi from 0.144.0 to 0.149.0

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.149.0

What's Changed

Full Changelog: getkin/kin-openapi@v0.148.0...v0.149.0

v0.148.0

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.147.0...v0.148.0

v0.147.0

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.146.0...v0.147.0

v0.146.0

What's Changed

Full Changelog: getkin/kin-openapi@v0.145.0...v0.146.0

v0.145.0

What's Changed

... (truncated)

Commits
  • 1a812b4 openapi3: accept boolean schemas (#1258)
  • 9814d1f Merge commit from fork
  • 9245cef Merge commit from fork
  • 4487f19 Merge commit from fork
  • 53c2ab1 openapi3: validate prefixItems positionally (#1259)
  • ba23e9d docs: add inspect.software health badge (#1253)
  • 94fcebf openapi3: compare multipleOf on exact rationals, not fixed-precision decimals...
  • e9e5e11 openapi3: add FormatOfStringForUUIDOfRFC9562 for UUID v6-v8 (#1251)
  • df7e8f4 openapi3: do not forget to carry schema format validators over to OAS3.1 (#1250)
  • eda80e2 Merge commit from fork
  • Additional commits viewable in compare view

Updates github.com/modelcontextprotocol/go-sdk from 1.6.1 to 1.8.0

Release notes

Sourced from github.com/modelcontextprotocol/go-sdk's releases.

v1.8.0

This release is equivalent to v1.8.0-pre.2. Thank you to those who tested the pre-release.

In this release we introduce several fixes and improvements on top of v1.7.0. It adds no new protocol revision: the supported set is unchanged, and 2026-07-28 remains the newest version the SDK negotiates.

The bulk of the work is hardening the transports against resource exhaustion, closing session leaks, deadlocks and teardown hangs found by users running the new protocol at scale, and giving servers explicit control over which protocol versions they advertise.

Two behavior changes are guarded by new MCPGODEBUG flags; see the section below.

Hardening against resource exhaustion

Every decoding path that buffers incoming input is now bounded. JSON payloads are rejected past 1000 levels of nesting, before the parser recurses. Both SSE readers cap the bytes buffered for a single event via MaxEventSize on SSEClientTransport and StreamableClientTransport, and the stdio transport caps a single JSON-RPC frame via StdioTransport.MaxLineLength.

On the OAuth side, dynamic client registration responses are bounded to 1 MB, and the discovery code now validates metadata documents rather than trusting them.

Restricting the protocol versions a server supports

ServerOptions.SupportedProtocolVersions lets a server narrow the set of versions it advertises and negotiates. The list can only narrow, never widen; naming a version the SDK does not implement panics at construction. Relatedly, a stateful streamable handler receiving a 2026-07-28 request now returns that same JSON-RPC error instead of a plain-text 400, so the client can renegotiate down instead of losing the connection.

Per-request cache control

ServerOptions.SetCacheable is a new hook that decides the ttlMs and cacheScope fields of every result carrying them: server/discover, the four list methods, and resources/read. It runs once per result, after the handler returns, with the values that handler produced, so it can set a policy globally while still letting an individual handler override it. Anything left unset falls back to the protocol default of public.

Behavior changes guarded by MCPGODEBUG

Two new escape-hatch flags restore the previous behavior of the changes above. Both will be removed in v1.9.0.

  • plaintextstatefulrejection=1 — restore the plain-text http.Error 400 body a stateful StreamableHTTPHandler previously returned for a request carrying per-request metadata. The default is now a JSON-RPC -32022 CodeUnsupportedProtocolVersion error with an UnsupportedProtocolVersionData payload advertising the legacy versions the server supports. Introduced by #1143.
  • blockingcancelnotify=1 — restore the previous behavior where a cancelled call waits synchronously for notifications/cancelled to be delivered (up to 5s) before returning, joining any delivery error into the caller's error. The default now retires the call immediately and sends the notification asynchronously. Introduced by #1151.

Options below were removed, according to plan:

  • seterroroverwrite
  • enableoriginverification
  • disablecontenttypecheck

... (truncated)

Commits
  • 3f3b699 refactor: remove legacy MCPGODEBUG compatibility for new protocol release (#1...
  • 830f0b7 mcp: update conformance tests (#1231)
  • 12cbafe oauthex: oauth discovery checks (#1220)
  • 3632967 mcp: add an sse event size cap (#1205)
  • 0d3036f mcp: allow per request Cacheable customization (#1203)
  • cb0de64 mcp: add a max request body size of the old transport (#1224)
  • 2fdabde mcp: do not check metatada on notifications (#1215)
  • 59185e6 build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#1217)
  • a6764cf build(deps): bump golang/govulncheck-action from 1.0.4 to 1.1.0 (#1218)
  • 8227246 fix: only subscribe when server advertises capability (#1221)
  • Additional commits viewable in compare view

Updates github.com/santhosh-tekuri/jsonschema/v6 from 6.0.2 to 6.0.3

Release notes

Sourced from github.com/santhosh-tekuri/jsonschema/v6's releases.

v6.0.3

bugfixes:

  • empty instLocation for propetyNames and contentSchema
  • fix intLocation for items and additionalItems validation
  • check invalid floats NaN/Inf
  • fix closing quote check in email validation
  • ensure both are numbers in equals validation

features

  • ef59f39: ref like property in custom vocab
Commits
  • b0fc661 ci: upgrade golangci/golangci-lint-action from v4 to v6
  • 3d8c98f ci: upgrade actions/setup-go from v3 to v6
  • b0cc7ab ci: upgrade actions/checkout from v3 to v7
  • 4bdda86 validator/fix: empty instLocation for propetyNames and contentSchema
  • 833329d fix/typo: fix type in error message
  • 180cde3 misc: remove vim swap file (#254)
  • 1a20556 validator/items: fix instanceLocation
  • cfca0e3 validator: check invalid floats NaN/Inf (#249)
  • befd2c1 validator/additionalItems: fix instanceLocation (#253)
  • dfcec1c format/email: add closing quote check (#251)
  • Additional commits viewable in compare view

Updates github.com/stripe/stripe-go/v86 from 86.1.1 to 86.4.2

Release notes

Sourced from github.com/stripe/stripe-go/v86's releases.

v86.4.2

  • #2429 Validate that webhook secrets are non-empty

See the changelog for more details.

v86.4.1

  • #2424 Harden API requestor code against malicious URLs

See the changelog for more details.

v86.4.0

This release changes the pinned API version to 2026-08-26.dahlia.

  • #2410 Add new EventNotificationHandler class for better thin event management

  • #2417 Update generated code

    • Add support for new resource BillingFeedbackOption
    • Add support for Deactivate, Get, List, New, and Update methods on resource BillingFeedbackOption
    • Add support for PaymentMethodSettings on AccountSessionComponentsParams and AccountSessionComponents
    • Add support for FeedbackOptions on BillingPortalConfigurationFeaturesSubscriptionCancelCancellationReasonParams and BillingPortalConfigurationFeaturesSubscriptionCancelCancellationReason
    • Add support for CustomerUpdate on BillingPortalSessionFlow
    • Add support for new value customer_update on enum BillingPortalSessionFlow.Type
    • Add support for FundingSourceGroup on ChargePaymentMethodDetailsCardWalletLink and ChargePaymentMethodDetailsLink
    • Add support for FundingTypesBlocked on CheckoutSessionPaymentMethodOptionsCardRestrictionsParams and CheckoutSessionPaymentMethodOptionsCardRestrictions
    • Add support for Metadata on ConfirmationToken
    • Add support for ActiveEntitlements and CustomerPortal on CustomerSessionComponentsParams and CustomerSessionComponents
    • Add support for Country on FinancialConnectionsSessionFilters
    • Add support for FrozenFields on InvoiceItem
    • Add support for Billie on InvoicePaymentSettingsPaymentMethodOptionsParams, InvoicePaymentSettingsPaymentMethodOptions, SubscriptionPaymentSettingsPaymentMethodOptionsParams, and SubscriptionPaymentSettingsPaymentMethodOptions
    • Add support for new value billie on enums InvoicePaymentSettings.PaymentMethodTypes and SubscriptionPaymentSettings.PaymentMethodTypes
    • ⚠️ Remove support for Cryptogram on PaymentAttemptRecordPaymentMethodDetailsCardThreeDSecure and PaymentRecordPaymentMethodDetailsCardThreeDSecure
    • Add support for new value touch_n_go on enums PaymentIntent.AllowedPaymentMethodTypes and SetupIntent.AllowedPaymentMethodTypes
    • Add support for ApplicationFeeAmount, ApplicationFeePercent, OnBehalfOf, and TransferData on PaymentLinkParams
    • Add support for FeedbackOption on SubscriptionCancelCancellationDetailsParams, SubscriptionCancellationDetailsParams, and SubscriptionCancellationDetails
    • Add support for Igic on TaxRegistrationCountryOptionsAtParams, TaxRegistrationCountryOptionsAt, TaxRegistrationCountryOptionsBeParams, TaxRegistrationCountryOptionsBe, TaxRegistrationCountryOptionsBgParams, TaxRegistrationCountryOptionsBg, TaxRegistrationCountryOptionsCyParams, TaxRegistrationCountryOptionsCy, TaxRegistrationCountryOptionsCzParams, TaxRegistrationCountryOptionsCz, TaxRegistrationCountryOptionsDeParams, TaxRegistrationCountryOptionsDe, TaxRegistrationCountryOptionsDkParams, TaxRegistrationCountryOptionsDk, TaxRegistrationCountryOptionsEeParams, TaxRegistrationCountryOptionsEe, TaxRegistrationCountryOptionsEsParams, TaxRegistrationCountryOptionsEs, TaxRegistrationCountryOptionsFiParams, TaxRegistrationCountryOptionsFi, TaxRegistrationCountryOptionsFrParams, TaxRegistrationCountryOptionsFr, TaxRegistrationCountryOptionsGrParams, TaxRegistrationCountryOptionsGr, TaxRegistrationCountryOptionsHrParams, TaxRegistrationCountryOptionsHr, TaxRegistrationCountryOptionsHuParams, TaxRegistrationCountryOptionsHu, TaxRegistrationCountryOptionsIeParams, TaxRegistrationCountryOptionsIe, TaxRegistrationCountryOptionsItParams, TaxRegistrationCountryOptionsIt, TaxRegistrationCountryOptionsLtParams, TaxRegistrationCountryOptionsLt, TaxRegistrationCountryOptionsLuParams, TaxRegistrationCountryOptionsLu, TaxRegistrationCountryOptionsLvParams, TaxRegistrationCountryOptionsLv, TaxRegistrationCountryOptionsMtParams, TaxRegistrationCountryOptionsMt, TaxRegistrationCountryOptionsNlParams, TaxRegistrationCountryOptionsNl, TaxRegistrationCountryOptionsPlParams, TaxRegistrationCountryOptionsPl, TaxRegistrationCountryOptionsPtParams, TaxRegistrationCountryOptionsPt, TaxRegistrationCountryOptionsRoParams, TaxRegistrationCountryOptionsRo, TaxRegistrationCountryOptionsSeParams, TaxRegistrationCountryOptionsSe, TaxRegistrationCountryOptionsSiParams, TaxRegistrationCountryOptionsSi, TaxRegistrationCountryOptionsSkParams, and TaxRegistrationCountryOptionsSk
    • Add support for error codes authentication_failure, capability_not_active, expired_payment_method, incorrect_postal_code, invalid_canceled_subscription_fields, and payment_method_restricted on Error, InvoiceLastFinalizationError, PaymentIntentLastPaymentError, SetupAttemptSetupError, SetupIntentLastSetupError, StripeError, and TerminalReaderActionApiError

See the changelog for more details.

v86.4.0-alpha.2

  • #2407 Update generated code for private-preview
    • Add support for new resources BillingFeedbackOption and PaymentPlan
    • ⚠️ Remove support for resource BillingFeedbackOptions
    • Add support for Get, List, New, and Update methods on resource PaymentPlan
    • Add support for Update method on resource V2MoneyManagementTransaction
    • Add support for WeChatPayPayments on AccountSettingsParams and AccountSettings

... (truncated)

Changelog

Sourced from github.com/stripe/stripe-go/v86's changelog.

86.4.2 - 2026-09-09

  • #2429 Validate that webhook secrets are non-empty

86.4.1 - 2026-09-01

  • #2424 Harden API requestor code against malicious URLs

86.4.0 - 2026-08-26

This release changes the pinned API version to 2026-08-26.dahlia.

  • #2410 Add new EventNotificationHandler class for better thin event management
  • ⚠️ #2417 Update generated code
    • Add support for new resource BillingFeedbackOption
    • Add support for Deactivate, Get, List, New, and Update methods on resource BillingFeedbackOption
    • Add support for PaymentMethodSettings on AccountSessionComponentsParams and AccountSessionComponents
    • Add support for FeedbackOptions on BillingPortalConfigurationFeaturesSubscriptionCancelCancellationReasonParams and BillingPortalConfigurationFeaturesSubscriptionCancelCancellationReason
    • Add support for CustomerUpdate on BillingPortalSessionFlow
    • Add support for new value customer_update on enum BillingPortalSessionFlow.Type
    • Add support for FundingSourceGroup on ChargePaymentMethodDetailsCardWalletLink and ChargePaymentMethodDetailsLink
    • Add support for FundingTypesBlocked on CheckoutSessionPaymentMethodOptionsCardRestrictionsParams and CheckoutSessionPaymentMethodOptionsCardRestrictions
    • Add support for Metadata on ConfirmationToken
    • Add support for ActiveEntitlements and CustomerPortal on CustomerSessionComponentsParams and CustomerSessionComponents
    • Add support for Country on FinancialConnectionsSessionFilters
    • Add support for FrozenFields on InvoiceItem
    • Add support for Billie on InvoicePaymentSettingsPaymentMethodOptionsParams, InvoicePaymentSettingsPaymentMethodOptions, SubscriptionPaymentSettingsPaymentMethodOptionsParams, and SubscriptionPaymentSettingsPaymentMethodOptions
    • Add support for new value billie on enums InvoicePaymentSettings.PaymentMethodTypes and SubscriptionPaymentSettings.PaymentMethodTypes
    • ⚠️ Remove support for Cryptogram on PaymentAttemptRecordPaymentMethodDetailsCardThreeDSecure and PaymentRecordPaymentMethodDetailsCardThreeDSecure
    • Add support for new value touch_n_go on enums PaymentIntent.AllowedPaymentMethodTypes and SetupIntent.AllowedPaymentMethodTypes
    • Add support for ApplicationFeeAmount, ApplicationFeePercent, OnBehalfOf, and TransferData on PaymentLinkParams
    • Add support for FeedbackOption on SubscriptionCancelCancellationDetailsParams, SubscriptionCancellationDetailsParams, and SubscriptionCancellationDetails
    • Add support for Igic on TaxRegistrationCountryOptionsAtParams, TaxRegistrationCountryOptionsAt, TaxRegistrationCountryOptionsBeParams, TaxRegistrationCountryOptionsBe, TaxRegistrationCountryOptionsBgParams, TaxRegistrationCountryOptionsBg, TaxRegistrationCountryOptionsCyParams, TaxRegistrationCountryOptionsCy, TaxRegistrationCountryOptionsCzParams, TaxRegistrationCountryOptionsCz, TaxRegistrationCountryOptionsDeParams, TaxRegistrationCountryOptionsDe, TaxRegistrationCountryOptionsDkParams, TaxRegistrationCountryOptionsDk, TaxRegistrationCountryOptionsEeParams, TaxRegistrationCountryOptionsEe, TaxRegistrationCountryOptionsEsParams, TaxRegistrationCountryOptionsEs, TaxRegistrationCountryOptionsFiParams, TaxRegistrationCountryOptionsFi, TaxRegistrationCountryOptionsFrParams, TaxRegistrationCountryOptionsFr, TaxRegistrationCountryOptionsGrParams, TaxRegistrationCountryOptionsGr, TaxRegistrationCountryOptionsHrParams, TaxRegistrationCountryOptionsHr, TaxRegistrationCountryOptionsHuParams, TaxRegistrationCountryOptionsHu, TaxRegistrationCountryOptionsIeParams, TaxRegistrationCountryOptionsIe, TaxRegistrationCountryOptionsItParams, TaxRegistrationCountryOptionsIt, TaxRegistrationCountryOptionsLtParams, TaxRegistrationCountryOptionsLt, TaxRegistrationCountryOptionsLuParams, TaxRegistrationCountryOptionsLu, TaxRegistrationCountryOptionsLvParams, TaxRegistrationCountryOptionsLv, TaxRegistrationCountryOptionsMtParams, TaxRegistrationCountryOptionsMt, TaxRegistrationCountryOptionsNlParams, TaxRegistrationCountryOptionsNl, TaxRegistrationCountryOptionsPlParams, TaxRegistrationCountryOptionsPl, TaxRegistrationCountryOptionsPtParams, TaxRegistrationCountryOptionsPt, TaxRegistrationCountryOptionsRoParams, TaxRegistrationCountryOptionsRo, TaxRegistrationCountryOptionsSeParams, TaxRegistrationCountryOptionsSe, TaxRegistrationCountryOptionsSiParams, TaxRegistrationCountryOptionsSi, TaxRegistrationCountryOptionsSkParams, and TaxRegistrationCountryOptionsSk
    • Add support for error codes authentication_failure, capability_not_active, expired_payment_method, incorrect_postal_code, invalid_canceled_subscription_fields, and payment_method_restricted on Error, InvoiceLastFinalizationError, PaymentIntentLastPaymentError, SetupAttemptSetupError, SetupIntentLastSetupError, StripeError, and TerminalReaderActionApiError

86.3.0 - 2026-08-10

  • #2399 add/adjust event parsing helpers
    • Added methods that return their respective Event/EventNotification structs without verifying authenticity. Use them when you've previously verified an event (e.g. you verified, put the event in a queue, and are now processing). Supports events from AWS EventBridge and Azure Event Grid natively.
      • stripe.ConstructEventWithoutVerification(payload, opts ...WebhookOption)
      • Client.ConstructEventWithoutVerification(payload, opts ...WebhookOption)
      • Client.ParseEventNotificationWithoutVerification(payload)

86.2.0 - 2026-07-29

This release changes the pinned API version to 2026-07-29.dahlia.

  • #2400 Update generated code
    • Add support for new resource FinancialConnectionsAuthorization
    • Add support for Unreject method on resource Account
    • Add support for List method on resource PaymentRecord

... (truncated)

Commits

Updates k8s.io/apimachinery from 0.35.0 to 0.37.0

Commits
  • 7164e39 Update dependencies to v0.37.0 tag
  • e55f9ba feat(api): Update node restriction admission to use new API
  • cb0680d Merge pull request #129125 from pohly/log-client-go-tools-apis
  • 97b2132 Merge pull request #140194 from gnufied/implement-volume-health-api
  • f21afab Add validation for camelcase in reason field
  • d7ad413 Merge pull request #140782 from dims/update-kube-openapi
  • e15ad7c Merge pull request #138808 from chenk008/cbor-streaminglist
  • 464b5d1 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
  • 0de14ec Merge pull request #140732 from thockin/dv-add-prefixed-label-key
  • 95258eb Merge pull request #134037 from ibihim/ibihim/2025-09-09_unsafe-delete-of-cor...
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.35.0 to 0.37.0

Commits
  • 2807644 Update dependencies to v0.37.0 tag
  • 50c6f9b metrics: Register: Fix incorrect assignment
  • 49f0a7b Merge pull request #140931 from pohly/client-go-changelog-adding-apigroups
  • 74d4b1e Merge pull request #140966 from alancaldelas/client-go-fakecustomstore-store
  • 2bf14f2 Merge pull request #140990 from xigang/revert-140448
  • 7b892fe Revert "Merge pull request #140448 from xigang/event_broadcaster_goroutine_leak"
  • df92378 Merge pull request #140334 from nojnhuh/dra-workloadresourceclaims-beta
  • 45a0ff1 client-go: restore FakeCustomStore conformance to cache.Store
  • 9d3b531 Merge pull request #139795 from omeryahud/worktree-kep-5963-device-compat-groups
  • 694f4eb apidiff: ignore adding entirely new API groups
  • Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.23.3 to 0.25.1

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.25.1

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.25.0...v0.25.1

v0.25.0

Highlights

This version of controller-runtime introduces a new experimental ReadYourWritesConsistency feature, which ensures that all writes are reflected in subsequent reads from the default cache-backed client. Stale client reads are arguably the biggest source of friction and sometimes bugs for controller authors, providing this functionality at the library level eliminates that class of problems entirely.

Try it out by setting Client.EnableReadYourWritesConsistency: new(true) in your manager and leave any feedback you may have on the tracking issue.

⚠️ Breaking Changes

✨ New Features

  • Client: Add a read-your-own-writes client (#3472)
  • Fakeclient: Add WithGlobalResourceVersionCounter (#3581)
  • Fakeclient: Add scale subresource support for Apply (#3569)
  • Metrics: Allow opt-in for client-go REST client metrics (#3510)
  • Metrics: Allow overriding client-go REST client metrics latency histogram buckets (#3573)
  • Source: Add TypedInformer source (#3520)
  • Webhooks: Allow to disable the webhook server by setting the port to -1 (#3481)

🐛 Bug Fixes

  • Cache: Fix goroutine leaks in cache Start() methods (#3565)
  • Client: Fix regression in Apply typed error handling (#3515)
  • Controller: Unlock when Controller.Start() returns with error (#3545)
  • Envtest: Fix envtest process stop on Windows (#3519)
  • Fakeclient: Allow updating managedFields through Update (#3585)
  • Fakeclient: Fix AddIndex panic when wrapped with an interceptor (#3583)
  • Fakeclient: Fix PartialObjectMeta handling (#3571)
  • Fakeclient: Support scale subresource get/update for unstructured objects (#3546)
  • Fakeclient: Update object on subresource apply (#3570)
  • PriorityQueue: Fix PriorityQueue deadlock on shutdown (#3540)
  • Testing/Process: Fix process Stop timeout error handling (#3523)

🌱 Others

... (truncated)

Commits
  • 67b72c2 [release-0.25] 🐛 client: fix subresource create RV parse error under read-you...
  • f997220 [release-0.25] 🐛 priorityqueue: fix data race on []*item in logState (#3593)
  • e8f9455 🐛 fakeclient: Allow updating managedFields through Update (#3585)
  • 0cc1315 Merge pull request #3565 from dongjiang1989/fix-leak
  • fa96780 🐛 Fix goroutine leaks in cache Start() methods
  • 1f5514b ✨ Add a read-your-own-write client (#3472)
  • df386c7 🌱 Bump to golangci-lint v2.13.1 (#3580)
  • dc7618f Merge pull request #3583 from pujitha24/auto/issue-3582
  • 37fe235 🐛 fake: fix AddIndex panic when client is wrapped with an interceptor
  • 01c7782 ✨ Allow overriding REST client latency histogram buckets (#3573)
  • Additional commits viewable in compare view

Updates github.com/golang-migrate/migrate/v4 from 4.19.1 to 4.20.1

Release notes

Sourced from github.com/golang-migrate/migrate/v4's releases.

v4.20.1

[!NOTE] This release is the immediate mitigation of the CI / release failure in v4.20.0, to distribute the latest version to all registries.

What's Changed

Full Changelog: golang-migrate/migrate@v4.20.0...v4.20.1

v4.20.0

[!WARNING] Due to a bug in the release workflow, GoReleaser failed and v4.20.0 was not published to Docker or other package registries. We did not want to re-tag (due to the possible impacts of that action), so we will attempt to backfill this shortly.

To mitigate this in the immediate term, v4.20.1 is being released with the patched workflow and distributed to all registries.

What's Changed

@dependabot
build(deps): bump the go group across 4 directories with 27 updates
17763f0 
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.20.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.113.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/getkin/kin-openapi
  dependency-version: 0.149.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/modelcontextprotocol/go-sdk
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/santhosh-tekuri/jsonschema/v6
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/stripe/stripe-go/v86
  dependency-version: 86.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/client-go
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.25.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/golang-migrate/migrate/v4
  dependency-version: 4.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/prometheus/common
  dependency-version: 0.70.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/time
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/utils
  dependency-version: 0.0.0-20260626114624-be93311217bd
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/sigstore/protobuf-specs
  dependency-version: 0.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.113.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/client-go
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.25.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/utils
  dependency-version: 0.0.0-20260626114624-be93311217bd
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: filippo.io/age
  dependency-version: 1.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager
  dependency-version: 0.4.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.27.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/prometheus/prometheus
  dependency-version: 0.314.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/redis/go-redis/v9
  dependency-version: 9.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/Masterminds/semver/v3
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.25.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 15, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 16, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 16, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/lego/backend/go-ddd4fb5d9f branch October 16, 2026 02:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants