Skip to content

build(deps): bump the gomod group across 1 directory with 3 updates - #30

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-b6cf33de8e
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-b6cf33de8e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 11, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the gomod group with 3 updates in the / directory: github.com/codefly-dev/core, github.com/stretchr/testify and google.golang.org/grpc.

Updates github.com/codefly-dev/core from 0.3.11 to 0.3.24

Commits
  • 80611ae feat(companions): publish companion images to ghcr.io/codefly-dev (#407)
  • e7b6566 fix: provision configs from a source-referenced aggregator submodule (#404) (...
  • 1c9d3f2 fix: accept resolve.<name>.git overlay directive in the core validator (#402)...
  • f7e9180 feat(solution): surface api.consumes to a running solution backend (#400) (#401)
  • 1ddbe68 fix(companions/proto): preserve enum allow_alias when stripping options (#398...
  • 337c213 fix: provision composed module config defaults for source-referenced modules ...
  • ea0540e release: v0.3.20
  • 504b934 fix(companions/proto): invoke facade plugins with strategy: all (#395)
  • 6c0b833 fix: omit unsatisfiable ${endpoint:…} in run-wide workspace config (#393) (#394)
  • ff19262 feat(provider/llm): vendor-parameterize the manifest and add rerank (#391) (#...
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • 959dbda Merge pull request #1935 from harryzcy/yaml-update
  • 9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.83.0 to 1.83.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)

Release 1.83.1

Security

  • xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
  • xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
  • xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
  • xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
  • xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Performance

  • transport: Restrict memory overhead of buffering small data frames. (#9331)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 11, 2026
Bumps the gomod group with 3 updates in the / directory: [github.com/codefly-dev/core](https://github.com/codefly-dev/core), [github.com/stretchr/testify](https://github.com/stretchr/testify) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `github.com/codefly-dev/core` from 0.3.11 to 0.3.24
- [Changelog](https://github.com/codefly-dev/core/blob/main/docs/releaseupdate.md)
- [Commits](codefly-dev/core@v0.3.11...v0.3.24)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

Updates `google.golang.org/grpc` from 1.83.0 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.0...v1.83.2)

---
updated-dependencies:
- dependency-name: github.com/codefly-dev/core
  dependency-version: 0.3.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the gomod group with 3 updates build(deps): bump the gomod group across 1 directory with 3 updates Sep 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/gomod-b6cf33de8e branch from 471c9e8 to 6037ef4 Compare September 12, 2026 16:48
@dependabot @github

dependabot Bot commented on behalf of github Sep 12, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 12, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/gomod-b6cf33de8e branch September 12, 2026 17:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants