Skip to content

fix(deps): bump the external group across 1 directory with 2 updates#3451

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/sdk/external-6a1ccfaf5b
Open

fix(deps): bump the external group across 1 directory with 2 updates#3451
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/sdk/external-6a1ccfaf5b

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 8, 2026

Bumps the external group with 1 update in the /sdk directory: golang.org/x/text.

Updates golang.org/x/text from 0.36.0 to 0.37.0

Commits

Updates golang.org/x/tools from 0.43.0 to 0.44.0

Commits
  • 3dd188d go.mod: update golang.org/x dependencies
  • aebd870 gopls: improve doc link matching to support links followed by a colon
  • 5357b43 go/analysis/passes/modernize: rangeint: handle type parameter constraints
  • bf04c61 go/types/internal/play: show normal terms of selected type
  • 0ae2de0 gopls/internal/filecache: cache decoded objects in memCache
  • 8e51a5f go/ssa: support direct references to embedded fields in struct lit
  • 5005b9e internal/gcimporter: rename ureader_yes.go to ureader.go
  • 5ca865b go/types/objectpath: add debugging command
  • f6476fb internal/gcimporter: consume generic methods in gcimporter
  • b36d1d1 internal/pkgbits: sync version.go with goroot
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the external group with 1 update in the /sdk directory: [golang.org/x/text](https://github.com/golang/text).


Updates `golang.org/x/text` from 0.36.0 to 0.37.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.36.0...v0.37.0)

Updates `golang.org/x/tools` from 0.43.0 to 0.44.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.43.0...v0.44.0)

---
updated-dependencies:
- dependency-name: golang.org/x/text
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: golang.org/x/tools
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 8, 2026
@dependabot dependabot Bot requested review from a team as code owners May 8, 2026 17:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 8, 2026
@github-actions github-actions Bot added size/s comp:sdk A software development kit, including library, for client applications and inter-service communicati labels May 8, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 8, 2026

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 185.209396ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 93.297803ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 439.048209ms
Throughput 227.77 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 43.36924192s
Average Latency 431.831685ms
Throughput 115.29 requests/second

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 8, 2026

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

  • examples
  • otdfctl
  • sdk
  • service
  • lib/fixtures
  • tests-bdd

See the workflow run for details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

comp:sdk A software development kit, including library, for client applications and inter-service communicati dependencies Pull requests that update a dependency file go Pull requests that update Go code size/s

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants