Skip to content

build(deps): bump the gomod group across 1 directory with 5 updates#3321

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/gomod-280baa9248
Open

build(deps): bump the gomod group across 1 directory with 5 updates#3321
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/gomod-280baa9248

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 6, 2026

Bumps the gomod group with 5 updates in the / directory:

Package From To
github.com/go-jose/go-jose/v3 3.0.4 3.0.5
github.com/hashicorp/terraform-plugin-sdk/v2 2.38.2 2.40.0
github.com/hashicorp/terraform-plugin-testing 1.14.0 1.15.0
golang.org/x/crypto 0.48.0 0.49.0
golang.org/x/oauth2 0.35.0 0.36.0

Updates github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5

Release notes

Sourced from github.com/go-jose/go-jose/v3's releases.

v3.0.5

What's Changed

Fixes GHSA-78h2-9frx-2jm8

We recommend migrating from v3 to v4, and we will stop support v3 in the near future.

Full Changelog: go-jose/go-jose@v3.0.4...v3.0.5

Commits

Updates github.com/hashicorp/terraform-plugin-sdk/v2 from 2.38.2 to 2.40.0

Release notes

Sourced from github.com/hashicorp/terraform-plugin-sdk/v2's releases.

v2.40.0

NOTES:

  • This release moves the resource configuration generation logic for the -generate-config-out flag from Terraform Core to the SDKv2 for Terraform v1.14.0 and above. There should be no functionality changes for resource configuration generation in this release. (#1559)
  • This Go module has been updated to Go 1.25 per the Go support policy. Any consumers building on earlier Go versions may experience errors. (#1564)

v2.39.0

ENHANCEMENTS:

  • helper/schema: Added support for deprecation messages on attributes and blocks, which are now populated from the Schema's Deprecated field and passed through to the protocol layer (#1553)
Changelog

Sourced from github.com/hashicorp/terraform-plugin-sdk/v2's changelog.

2.40.0 (March 10, 2026)

NOTES:

  • This release moves the resource configuration generation logic for the -generate-config-out flag from Terraform Core to the SDKv2 for Terraform v1.14.0 and above. There should be no functionality changes for resource configuration generation in this release. (#1559)
  • This Go module has been updated to Go 1.25 per the Go support policy. Any consumers building on earlier Go versions may experience errors. (#1564)

2.39.0 (February 27, 2026)

ENHANCEMENTS:

  • helper/schema: Added support for deprecation messages on attributes and blocks, which are now populated from the Schema's Deprecated field and passed through to the protocol layer (#1553)
Commits
  • dde4384 Update changelog
  • 9136f3a Update meta package SDKVersion
  • 86877a0 Implement GenerateResourceConfig RPC and existing Terraform default logic (#...
  • 3643171 [Chore] Upgrade Go version to 1.25 (#1564)
  • 9c60d2f build(deps): bump github.com/hashicorp/copywrite in /tools (#1563)
  • 328ad99 build(deps): bump github.com/cloudflare/circl in /tools (#1561)
  • ff0698e build(deps): bump the github-actions group across 1 directory with 4 updates ...
  • f661d42 Update changelog
  • 19ef5a4 Update meta package SDKVersion
  • 9a14d44 feat: add deprecation messages for attributes and blocks in configschema (#1553)
  • Additional commits viewable in compare view

Updates github.com/hashicorp/terraform-plugin-testing from 1.14.0 to 1.15.0

Release notes

Sourced from github.com/hashicorp/terraform-plugin-testing's releases.

v1.15.0

NOTES:

  • This Go module has been updated to Go 1.25 per the Go support policy. Any consumers building on earlier Go versions may experience errors. (#629)

FEATURES:

  • helper/resource: Added new StateStore testing mode to TestStep, which can be used to smoke test Terraform state storage. (#591)

BUG FIXES:

  • helper/resource: Test steps in Config mode using Destroy: true and Check functions will now create an additional destroy plan prior to running terraform apply to avoid a potential "Saved Plan is Stale" error from Terraform. (#602)
  • helper/resource: Test steps in Config mode using the TF_ACC_REFRESH_AFTER_APPLY compatibility flag will not refresh if ExpectNonEmptyPlan is true. (#602)

v1.14.1

BUG FIXES:

  • Backport: Remove the redundant post-apply refresh triggered by resource/refreshAfterApply so acceptance tests avoid an extra refresh cycle. (#641)
Changelog

Sourced from github.com/hashicorp/terraform-plugin-testing's changelog.

1.15.0 (March 10, 2026)

NOTES:

  • This Go module has been updated to Go 1.25 per the Go support policy. Any consumers building on earlier Go versions may experience errors. (#629)

FEATURES:

  • helper/resource: Added new StateStore testing mode to TestStep, which can be used to smoke test Terraform state storage. (#591)

BUG FIXES:

  • helper/resource: Test steps in Config mode using Destroy: true and Check functions will now create an additional destroy plan prior to running terraform apply to avoid a potential "Saved Plan is Stale" error from Terraform. (#602)
  • helper/resource: Test steps in Config mode using the TF_ACC_REFRESH_AFTER_APPLY compatibility flag will not refresh if ExpectNonEmptyPlan is true. (#602)
Commits
  • 7d4f9d9 Update changelog
  • d112e30 Update downstream dependencies and implement GenerateResourceConfig RPC (#630)
  • 72ec2ae [Chore] Upgrade Go version to 1.25 (#629)
  • 8d3e875 build(deps): Bump github.com/hashicorp/copywrite in /tools (#627)
  • 3bd8a60 resource/refreshAfterApply: remove extra refresh (#628)
  • 6fe50f0 build(deps): Bump github.com/cloudflare/circl in /tools (#624)
  • b7ba5b7 build(deps): Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 (#623)
  • 09e67ab querycheck.ExpectResourceKnownValues: Improve readability when there are mu...
  • c528540 build(deps): Bump the github-actions group across 1 directory with 4 updates ...
  • aaf54da build(deps): Bump github.com/hashicorp/terraform-plugin-sdk/v2 (#625)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.48.0 to 0.49.0

Commits
  • 982eaa6 go.mod: update golang.org/x dependencies
  • 159944f ssh,acme: clean up tautological/impossible nil conditions
  • a408498 acme: only require prompt if server has terms of service
  • cab0f71 all: upgrade go directive to at least 1.25.0 [generated]
  • 2f26647 x509roots/fallback: update bundle
  • See full diff in compare view

Updates golang.org/x/oauth2 from 0.35.0 to 0.36.0

Commits
  • 4d954e6 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 6, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/gomod-280baa9248 branch from ef50b32 to 53edd54 Compare April 9, 2026 14:44
@dependabot dependabot Bot force-pushed the dependabot/go_modules/gomod-280baa9248 branch from 53edd54 to 2aa9393 Compare April 20, 2026 03:31
Bumps the gomod group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) | `3.0.4` | `3.0.5` |
| [github.com/hashicorp/terraform-plugin-sdk/v2](https://github.com/hashicorp/terraform-plugin-sdk) | `2.38.2` | `2.40.0` |
| [github.com/hashicorp/terraform-plugin-testing](https://github.com/hashicorp/terraform-plugin-testing) | `1.14.0` | `1.15.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.48.0` | `0.49.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.35.0` | `0.36.0` |



Updates `github.com/go-jose/go-jose/v3` from 3.0.4 to 3.0.5
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](go-jose/go-jose@v3.0.4...v3.0.5)

Updates `github.com/hashicorp/terraform-plugin-sdk/v2` from 2.38.2 to 2.40.0
- [Release notes](https://github.com/hashicorp/terraform-plugin-sdk/releases)
- [Changelog](https://github.com/hashicorp/terraform-plugin-sdk/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-plugin-sdk@v2.38.2...v2.40.0)

Updates `github.com/hashicorp/terraform-plugin-testing` from 1.14.0 to 1.15.0
- [Release notes](https://github.com/hashicorp/terraform-plugin-testing/releases)
- [Changelog](https://github.com/hashicorp/terraform-plugin-testing/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-plugin-testing@v1.14.0...v1.15.0)

Updates `golang.org/x/crypto` from 0.48.0 to 0.49.0
- [Commits](golang/crypto@v0.48.0...v0.49.0)

Updates `golang.org/x/oauth2` from 0.35.0 to 0.36.0
- [Commits](golang/oauth2@v0.35.0...v0.36.0)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v3
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/hashicorp/terraform-plugin-sdk/v2
  dependency-version: 2.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/hashicorp/terraform-plugin-testing
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/crypto
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/gomod-280baa9248 branch from 2aa9393 to d435ab2 Compare April 21, 2026 17:17
@deiga deiga added this to the v6.13.0 milestone Apr 21, 2026
Copy link
Copy Markdown
Collaborator

@deiga deiga left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ran tests and one testacc, linting and formatting to verify that there are no hidden changes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant