Skip to content

Bump the dependencies group with 5 updates#271

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/go_modules/dependencies-389dd6f5c6
Jun 3, 2026
Merged

Bump the dependencies group with 5 updates#271
github-actions[bot] merged 1 commit into
mainfrom
dependabot/go_modules/dependencies-389dd6f5c6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 5 updates:

Package From To
github.com/SaveTheRbtz/zstd-seekable-format-go/pkg 0.8.3 0.9.0
github.com/aws/aws-sdk-go-v2/config 1.32.18 1.32.21
github.com/aws/aws-sdk-go-v2/feature/rds/auth 1.6.23 1.6.26
github.com/jackc/pgx/v5 5.9.2 5.10.0
github.com/shirou/gopsutil/v4 4.26.4 4.26.5

Updates github.com/SaveTheRbtz/zstd-seekable-format-go/pkg from 0.8.3 to 0.9.0

Release notes

Sourced from github.com/SaveTheRbtz/zstd-seekable-format-go/pkg's releases.

pkg/v0.9.0

What's Changed

Full Changelog: SaveTheRbtz/zstd-seekable-format-go@pkg/v0.8.3...pkg/v0.9.0

Commits
  • 7b26d83 go: lower pkg version to 1.25.0 (#236)
  • 1f1fa4b build(deps): bump actions/dependency-review-action from 4 to 5 (#233)
  • ea8902a build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#235)
  • e9c5e0e build(deps): bump codecov/codecov-action from 5 to 6 (#234)
  • fbcd6db vscode: remove stale config
  • 70921db Update report badge links in README.md
  • 041bea0 Update README.md
  • 124d216 cmd/zstdseek: bump pkg to v0.8.3 (#231)
  • See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.18 to 1.32.21

Commits
  • b4d02c5 Release 2026-06-02
  • 48e375b Regenerated Clients
  • b8a4fc1 Update API model
  • e8627b4 Merge pull request #3430 from aws/fix-remove-ioutil
  • 4e258a3 chore: update changelog description per review
  • e1176df chore: add changelog entry
  • a157f15 chore: regenerate SDK with new smithy-go
  • 0d4a893 chore: bump SMITHY_GO_CODEGEN_VERSION for ioutil cleanup
  • 858d954 fix: remove deprecated io/ioutil from codegen templates
  • 35a3c50 Release 2026-06-01
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.6.23 to 1.6.26

Commits
  • b4d02c5 Release 2026-06-02
  • 48e375b Regenerated Clients
  • b8a4fc1 Update API model
  • e8627b4 Merge pull request #3430 from aws/fix-remove-ioutil
  • 4e258a3 chore: update changelog description per review
  • e1176df chore: add changelog entry
  • a157f15 chore: regenerate SDK with new smithy-go
  • 0d4a893 chore: bump SMITHY_GO_CODEGEN_VERSION for ioutil cleanup
  • 858d954 fix: remove deprecated io/ioutil from codegen templates
  • 35a3c50 Release 2026-06-01
  • Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.9.2 to 5.10.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.10.0 (June 3, 2026)

This release includes a significant amount of hardening against malicious or compromised PostgreSQL servers, contributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled message sizes, caps server-supplied SCRAM iteration counts, adds require_auth to restrict which authentication methods a server may use (mitigating downgrade attacks under sslmode=prefer), and ensures cancellation requests are sent over TLS when the original connection used TLS.

Features

  • Add require_auth to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)
  • Add ParseConfigOptions.ConnStringAllowedKeys to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)
  • Add StructArgs and StrictStructArgs for @-named queries (Tubelight30)
  • Add ErrConnClosed sentinel error and unwrap it from connLockError (Charlie Tonneslan)
  • pgxpool: check if connection is expired before acquire (arthurdotwork)

Security Hardening

  • Encrypt CancelRequest connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)
  • Cap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)
  • Default Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)
  • Bound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)
  • Bound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)
  • Bound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)
  • Bound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)
  • Document secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)
  • Fix panic on malformed geometric text; return an error instead (MaIII)

Fixes

  • Fix scanning "char" (OID 18) into *string in binary format (luongs3)
  • Fix handling of typed-nil driver.Valuer in array and composite codecs (Donncha Fahy)
  • Fix CopyData.Data hex decoding in UnmarshalJSON (Charlie Tonneslan)
  • Fix data race when context is cancelled during connect
  • Fix parseKeywordValueSettings rejecting trailing whitespace (alliasgher)
  • pgconn: preserve full error chain in normalizeTimeoutError (Charlie Tonneslan)
  • pgconn: use a fresh context for the fallback connection in connectPreferred (Charlie Tonneslan)
  • pgxpool: fix MaxLifetimeDestroyCount and ping order for acquire-time expiry check
  • Add missing error check of rows.Err to load types (Jen Altavilla)
Commits
  • 7293fb1 Update changelog for v5.10.0
  • 1ade285 pgconn: document secure connection configuration
  • b4d6d4d pgtype: bound range, multirange, and tsvector binary decoders
  • 0639b37 pgconn: add ParseConfigOptions.ConnStringAllowedKeys
  • b28e65b pgtype: bound array element count against remaining message bytes
  • cd1f389 pgtype: bound array binary decode element length against remaining bytes
  • ff27b5b pgtype: bound hstore binary decode against malicious server input
  • a6002e1 pgproto3: default Frontend max message body length to ~1 GiB
  • 44f6173 pgconn: cap server-supplied SCRAM iteration count
  • 1a976f7 pgconn: add require_auth to restrict accepted server auth methods
  • Additional commits viewable in compare view

Updates github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5

Release notes

Sourced from github.com/shirou/gopsutil/v4's releases.

v4.26.5

What's Changed

disk

net

process

New Contributors

Full Changelog: shirou/gopsutil@v4.26.4...v4.26.5

Commits
  • d781152 Merge pull request #2062 from HarshalPatel1972/fix/windows-process-snap-perf
  • bf6e949 fix: address maintainer review — adjust PID 0 order, remove 0-thread guard, a...
  • 71672e2 Merge pull request #2092 from kerlenton/fix/darwin-cmdline-envp-leak
  • f806418 [process]: skip exact 4 bytes of nargs in darwin cmdlineSlice
  • e9f021e [process]: fix envp leak into Cmdline on darwin
  • 6a240d8 Merge pull request #2074 from shirou/dependabot/github_actions/actions/upload...
  • ba20283 Merge pull request #2065 from shirou/dependabot/github_actions/actions/setup-...
  • e7b2fd0 Merge pull request #2088 from shirou/dependabot/github_actions/actions/labele...
  • e26eaf3 Merge pull request #2089 from shirou/feat/add_ProtoCounters_godoc
  • 22bc830 [net]: add more information on ProtoCounters godoc
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/SaveTheRbtz/zstd-seekable-format-go/pkg](https://github.com/SaveTheRbtz/zstd-seekable-format-go) | `0.8.3` | `0.9.0` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.18` | `1.32.21` |
| [github.com/aws/aws-sdk-go-v2/feature/rds/auth](https://github.com/aws/aws-sdk-go-v2) | `1.6.23` | `1.6.26` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` |
| [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) | `4.26.4` | `4.26.5` |


Updates `github.com/SaveTheRbtz/zstd-seekable-format-go/pkg` from 0.8.3 to 0.9.0
- [Release notes](https://github.com/SaveTheRbtz/zstd-seekable-format-go/releases)
- [Commits](SaveTheRbtz/zstd-seekable-format-go@pkg/v0.8.3...pkg/v0.9.0)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.18 to 1.32.21
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.18...config/v1.32.21)

Updates `github.com/aws/aws-sdk-go-v2/feature/rds/auth` from 1.6.23 to 1.6.26
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/rbin/v1.6.23...feature/rds/auth/v1.6.26)

Updates `github.com/jackc/pgx/v5` from 5.9.2 to 5.10.0
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.9.2...v5.10.0)

Updates `github.com/shirou/gopsutil/v4` from 4.26.4 to 4.26.5
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v4.26.4...v4.26.5)

---
updated-dependencies:
- dependency-name: github.com/SaveTheRbtz/zstd-seekable-format-go/pkg
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/rds/auth
  dependency-version: 1.6.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/shirou/gopsutil/v4
  dependency-version: 4.26.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 3, 2026
@github-actions github-actions Bot enabled auto-merge June 3, 2026 05:32
@github-actions github-actions Bot merged commit 2d773df into main Jun 3, 2026
3 checks passed
@github-actions github-actions Bot deleted the dependabot/go_modules/dependencies-389dd6f5c6 branch June 3, 2026 05:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants