Skip to content

fix(deps): bump the external group across 1 directory with 22 updates - #3831

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/service/external-2d8e699f77
Open

fix(deps): bump the external group across 1 directory with 22 updates#3831
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/service/external-2d8e699f77

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the external group with 18 updates in the /service directory:

Package From To
buf.build/go/protovalidate 1.0.0 1.2.0
connectrpc.com/grpchealth 1.4.0 1.5.0
github.com/casbin/casbin/v2 2.108.0 2.135.0
github.com/dgraph-io/ristretto/v2 2.4.0 2.4.2
github.com/eko/gocache/lib/v4 4.2.0 4.2.4
github.com/fsnotify/fsnotify 1.9.0 1.10.1
github.com/go-chi/cors 1.2.1 1.2.2
github.com/go-playground/validator/v10 10.26.0 10.30.3
github.com/go-viper/mapstructure/v2 2.4.0 2.5.0
github.com/jackc/pgx/v5 5.9.2 5.10.0
github.com/lestrrat-go/jwx/v2 2.1.6 2.1.7
github.com/lib/pq 1.10.9 1.12.3
github.com/mattn/go-sqlite3 1.14.48 1.14.49
github.com/open-policy-agent/opa 1.5.1 1.19.0
github.com/pressly/goose/v3 3.24.3 3.27.3
github.com/testcontainers/testcontainers-go 0.42.0 0.43.0
google.golang.org/grpc 1.82.1 1.83.0
github.com/go-ldap/ldap/v3 3.4.12 3.4.14

Updates buf.build/go/protovalidate from 1.0.0 to 1.2.0

Release notes

Sourced from buf.build/go/protovalidate's releases.

v1.2.0

This release is compatible with the v1.2.0 release of Protovalidate.

What's Changed

New Contributors

Full Changelog: bufbuild/protovalidate-go@v1.1.3...v1.2.0

v1.1.3

What's Changed

Full Changelog: bufbuild/protovalidate-go@v1.1.2...v1.1.3

v1.1.2

What's Changed

Full Changelog: bufbuild/protovalidate-go@v1.1.1...v1.1.2

v1.1.1

This release is compatible with the v1.1.0 release of Protovalidate.

What's Changed

Full Changelog: bufbuild/protovalidate-go@v1.1.0...v1.1.1

v1.1.0

This release is compatible with the v1.1.0 release of Protovalidate.

What's Changed

... (truncated)

Commits

Updates connectrpc.com/grpchealth from 1.4.0 to 1.5.0

Release notes

Sourced from connectrpc.com/grpchealth's releases.

v1.5.0

What's Changed

Governance

Add @​timostamm as a maintainer in connectrpc/grpchealth-go#80 🎉

Enhancements

Other changes

Full Changelog: connectrpc/grpchealth-go@v1.4.0...v1.5.0

Commits

Updates github.com/casbin/casbin/v2 from 2.108.0 to 2.135.0

Release notes

Sourced from github.com/casbin/casbin/v2's releases.

v2.135.0

2.135.0 (2025-12-09)

Features

  • remove Travis script and issue templates (5fc9fd8)

v2.134.0

2.134.0 (2025-11-14)

Features

  • fix inconsistent backslash handling between matcher literals and CSV-parsed values (#1577) (5d3134d)

v2.133.0

2.133.0 (2025-11-14)

Features

  • fix stale g() function cache in BuildRoleLinks causing incorrect permissions (#1580) (0a13664)

v2.132.0

2.132.0 (2025-11-04)

Features

v2.131.0

2.131.0 (2025-11-02)

Features

  • fix EscapeAssertion (matcher) incorrectly matching p./r. patterns inside quoted strings (#1572) (1eef59a)

v2.130.0

2.130.0 (2025-11-01)

Features

  • fix duplicate CI workflow runs and optimize to test only Go 1.21 (#1571) (bb1e443)

v2.129.0

2.129.0 (2025-11-01)

... (truncated)

Commits
  • 5fc9fd8 feat: remove Travis script and issue templates
  • 5d3134d feat: fix inconsistent backslash handling between matcher literals and CSV-pa...
  • 0a13664 feat: fix stale g() function cache in BuildRoleLinks causing incorrect permis...
  • 4b6c4c8 feat: improve README
  • 1eef59a feat: fix EscapeAssertion (matcher) incorrectly matching p./r. patterns insid...
  • bb1e443 feat: fix duplicate CI workflow runs and optimize to test only Go 1.21 (#1571)
  • 91b9cf2 feat: add OrBAC (Organisation-Based Access Control) model support (#1567)
  • 87e9956 feat: add ContextEnforcer: add ctx to AddPolicy and other APIs (#1553)
  • 1ef00ac feat: enable concurrent transactions using optimistic locking, versioning and...
  • 0c5a574 feat: add PBAC model support and test (#1548)
  • Additional commits viewable in compare view

Updates github.com/dgraph-io/ristretto/v2 from 2.4.0 to 2.4.2

Release notes

Sourced from github.com/dgraph-io/ristretto/v2's releases.

v2.4.2

Fixed

  • Revert eager pre-allocation of the sampledLFU keyCosts map (#482), which allocated NumCounters/10 map buckets at boot and caused a large RSS regression for caches with high NumCounters (#494, fixes #493)

Full Changelog: dgraph-io/ristretto@v2.4.1...v2.4.2

v2.4.1

Changed

  • Pre-allocate keyCosts map in sampledLFU (#482)

Fixed

  • Handle mremap size mismatch on Linux s390x (#491)

Full Changelog: dgraph-io/ristretto@v2.4.0...v2.4.1

Changelog

Sourced from github.com/dgraph-io/ristretto/v2's changelog.

[v2.4.2] - 2026-07-07

Fixed

  • Revert eager pre-allocation of the sampledLFU keyCosts map (#482), which allocated NumCounters/10 map buckets at boot and caused a large RSS regression for caches with high NumCounters

Full Changelog: dgraph-io/ristretto@v2.4.1...v2.4.2

[v2.4.1] - 2026-07-06

Changed

  • Pre-allocate keyCosts map in sampledLFU (#482)

Fixed

  • Handle mremap size mismatch on Linux s390x (#491)

Full Changelog: dgraph-io/ristretto@v2.4.0...v2.4.1

Commits
  • 8d05e8a fix: revert eager sampledLFU keyCosts pre-allocation (#482) (#494)
  • e89d89a chore: prepare release v2.4.1 (#492)
  • fe05eab fix: handle mremap size mismatch on Linux s390x
  • bb27952 chore(ci): add stale Action (#488)
  • 7aac03a docs: add contributing guide and code of conduct
  • b483e0c perf: pre-allocate keyCosts map in sampledLFU
  • 469a1a0 Update trunk conf
  • 3ac041b chore: update ci-ristretto-tests.yml
  • See full diff in compare view

Updates github.com/eko/gocache/lib/v4 from 4.2.0 to 4.2.4

Release notes

Sourced from github.com/eko/gocache/lib/v4's releases.

lib/v4.2.4

What's Changed

New Contributors

Full Changelog: eko/gocache@lib/v4.2.3...lib/v4.2.4

store/memcache/v4.2.3

What's Changed

Full Changelog: eko/gocache@lib/v4.2.1...store/memcache/v4.2.3

store/bigcache/v4.2.3

What's Changed

New Contributors

Full Changelog: eko/gocache@store/memcache/v4.2.3...store/bigcache/v4.2.3

store/freecache/v4.2.3

What's Changed

New Contributors

Full Changelog: eko/gocache@store/memcache/v4.2.3...store/freecache/v4.2.3

store/go_cache/v4.2.3

What's Changed

New Contributors

Full Changelog: eko/gocache@store/memcache/v4.2.3...store/go_cache/v4.2.3

lib/v4.2.3

What's Changed

... (truncated)

Commits
  • 8d8d3b1 Merge pull request #309 from c-tonneslan/fix/chain-empty-caches
  • c86532e feat(marshaler): added a ErrUnsupportedValueType error
  • 0cc251f feat(loadable): fixed closing panic issue
  • e540537 fix(chain): fixed missing Close() method on chain cache
  • 80a4279 cache(chain): return an error from Get when no caches are configured
  • 6692fac Merge pull request #306 from semihbkgr/fix/memcache-tags-ttl
  • f22c1c6 Merge pull request #307 from semihbkgr/fix/memcache-tag-ttl-refresh
  • ba2f816 Merge pull request #308 from semihbkgr/fix/hazelcast-tags-cas
  • 16fada6 test(memcache): rename test for naming convention
  • bba80a3 fix(hazelcast): atomic tag list updates and TTL refresh
  • Additional commits viewable in compare view

Updates github.com/fsnotify/fsnotify from 1.9.0 to 1.10.1

Release notes

Sourced from github.com/fsnotify/fsnotify's releases.

v1.10.1

Changes and fixes

  • inotify: don't remove sibling watches sharing a path prefix (#754)

  • inotify, windows: don't rename sibling watches sharing a path prefix (#755)

#754: fsnotify/fsnotify#754 #755: fsnotify/fsnotify#755

v1.10.0

This version of fsnotify needs Go 1.23.

Changes and fixes

  • inotify: improve initialization error message (#731)

  • inotify: send Rename event if recursive watch is renamed (#696)

  • inotify: avoid copying event buffers when reading names (#741)

  • kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)

  • kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)

  • windows: fix nil pointer dereference in remWatch (#736)

  • windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)

#696: fsnotify/fsnotify#696 #709: fsnotify/fsnotify#709 #731: fsnotify/fsnotify#731 #736: fsnotify/fsnotify#736 #740: fsnotify/fsnotify#740 #741: fsnotify/fsnotify#741 #748: fsnotify/fsnotify#748 #749: fsnotify/fsnotify#749

Changelog

Sourced from github.com/fsnotify/fsnotify's changelog.

1.10.1 2026-05-04

Changes and fixes

  • inotify: don't remove sibling watches sharing a path prefix (#754)

  • inotify, windows: don't rename sibling watches sharing a path prefix (#755)

#754: fsnotify/fsnotify#754 #755: fsnotify/fsnotify#755

1.10.0 2026-04-30

This version of fsnotify needs Go 1.23.

Changes and fixes

  • inotify: improve initialization error message (#731)

  • inotify: send Rename event if recursive watch is renamed (#696)

  • inotify: avoid copying event buffers when reading names (#741)

  • kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)

  • kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)

  • windows: fix nil pointer dereference in remWatch (#736)

  • windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)

#696: fsnotify/fsnotify#696 #709: fsnotify/fsnotify#709 #731: fsnotify/fsnotify#731 #736: fsnotify/fsnotify#736 #740: fsnotify/fsnotify#740 #741: fsnotify/fsnotify#741 #748: fsnotify/fsnotify#748 #749: fsnotify/fsnotify#749

Commits
  • 76b01a6 Release 1.10.1
  • fec150b Update changelog
  • 162b421 inotify, windows: don't rename sibling watches sharing a path prefix (#755)
  • 224257f inotify: don't remove sibling watches sharing a path prefix (#754)
  • e0c956c windows: document directory Write events and stabilize tests (#745)
  • 8d01d7b Release 1.10.0
  • 602284e Update changelog
  • 7f03e59 kqueue: skip ENOENT entries in watchDirectoryFiles (#748)
  • dab9dde windows: lock watch field updates against concurrent WatchList (#709) (#749)
  • eadf267 kqueue: drop watches directly in Close() instead of going through remove() (#...
  • Additional commits viewable in compare view

Updates github.com/go-chi/cors from 1.2.1 to 1.2.2

Release notes

Sourced from github.com/go-chi/cors's releases.

v1.2.2

What's Changed

New Contributors

Full Changelog: go-chi/cors@v1.2.1...v1.2.2

Commits

Updates github.com/go-playground/validator/v10 from 10.26.0 to 10.30.3

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

v10.30.3

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.30.2...v10.30.3

v10.30.2

What's Changed

... (truncated)

Commits
  • ac4c1ba fix(docs): correct ripemd160 tag name in README validation table (#1582)
  • feacb34 feat: omit blank tag names from namespace (#1567)
  • 5ed0a7e chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#1580)
  • 0364541 fix(cron): anchor regex and accept full cron syntax (#1577)
  • 8eb2659 chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 (#1571)
  • f7e1721 chore(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 (#1572)
  • cf37fce fix(lint): correctly disable govet inline analyzer & deprecated gomodguard (#...
  • 7c334e5 fix: reject hostnames with trailing hyphen in RFC 952 validator (#1569)
  • 6bcb7bc feat: add origin validator for web origin URLs (#1565)
  • 6fd2fa8 docs: fix typos (#1568)
  • Additional commits viewable in compare view

Updates github.com/go-viper/mapstructure/v2 from 2.4.0 to 2.5.0

Release notes

Sourced from github.com/go-viper/mapstructure/v2's releases.

v2.5.0

What's Changed

New Contributors

Full Changelog: go-viper/mapstructure@v2.4.0...v2.5.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 4, 2026
@dependabot
dependabot Bot requested review from a team as code owners August 4, 2026 16:18
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 4, 2026
@github-actions github-actions Bot added the size/m label Aug 4, 2026
Bumps the external group with 18 updates in the /service directory:

| Package | From | To |
| --- | --- | --- |
| [buf.build/go/protovalidate](https://github.com/bufbuild/protovalidate-go) | `1.0.0` | `1.2.0` |
| [connectrpc.com/grpchealth](https://github.com/connectrpc/grpchealth-go) | `1.4.0` | `1.5.0` |
| [github.com/casbin/casbin/v2](https://github.com/casbin/casbin) | `2.108.0` | `2.135.0` |
| [github.com/dgraph-io/ristretto/v2](https://github.com/dgraph-io/ristretto) | `2.4.0` | `2.4.2` |
| [github.com/eko/gocache/lib/v4](https://github.com/eko/gocache) | `4.2.0` | `4.2.4` |
| [github.com/fsnotify/fsnotify](https://github.com/fsnotify/fsnotify) | `1.9.0` | `1.10.1` |
| [github.com/go-chi/cors](https://github.com/go-chi/cors) | `1.2.1` | `1.2.2` |
| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.26.0` | `10.30.3` |
| [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) | `2.4.0` | `2.5.0` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` |
| [github.com/lestrrat-go/jwx/v2](https://github.com/lestrrat-go/jwx) | `2.1.6` | `2.1.7` |
| [github.com/lib/pq](https://github.com/lib/pq) | `1.10.9` | `1.12.3` |
| [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.48` | `1.14.49` |
| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `1.5.1` | `1.19.0` |
| [github.com/pressly/goose/v3](https://github.com/pressly/goose) | `3.24.3` | `3.27.3` |
| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.42.0` | `0.43.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.82.1` | `1.83.0` |
| [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap) | `3.4.12` | `3.4.14` |



Updates `buf.build/go/protovalidate` from 1.0.0 to 1.2.0
- [Release notes](https://github.com/bufbuild/protovalidate-go/releases)
- [Commits](bufbuild/protovalidate-go@v1.0.0...v1.2.0)

Updates `connectrpc.com/grpchealth` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/connectrpc/grpchealth-go/releases)
- [Commits](connectrpc/grpchealth-go@1.4.0...v1.5.0)

Updates `github.com/casbin/casbin/v2` from 2.108.0 to 2.135.0
- [Release notes](https://github.com/casbin/casbin/releases)
- [Commits](apache/casbin@v2.108.0...v2.135.0)

Updates `github.com/dgraph-io/ristretto/v2` from 2.4.0 to 2.4.2
- [Release notes](https://github.com/dgraph-io/ristretto/releases)
- [Changelog](https://github.com/dgraph-io/ristretto/blob/main/CHANGELOG.md)
- [Commits](dgraph-io/ristretto@v2.4.0...v2.4.2)

Updates `github.com/eko/gocache/lib/v4` from 4.2.0 to 4.2.4
- [Release notes](https://github.com/eko/gocache/releases)
- [Commits](eko/gocache@lib/v4.2.0...lib/v4.2.4)

Updates `github.com/fsnotify/fsnotify` from 1.9.0 to 1.10.1
- [Release notes](https://github.com/fsnotify/fsnotify/releases)
- [Changelog](https://github.com/fsnotify/fsnotify/blob/main/CHANGELOG.md)
- [Commits](fsnotify/fsnotify@v1.9.0...v1.10.1)

Updates `github.com/go-chi/cors` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/go-chi/cors/releases)
- [Commits](go-chi/cors@v1.2.1...v1.2.2)

Updates `github.com/go-playground/validator/v10` from 10.26.0 to 10.30.3
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.26.0...v10.30.3)

Updates `github.com/go-viper/mapstructure/v2` from 2.4.0 to 2.5.0
- [Release notes](https://github.com/go-viper/mapstructure/releases)
- [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md)
- [Commits](go-viper/mapstructure@v2.4.0...v2.5.0)

Updates `github.com/jackc/pgx/v5` from 5.9.2 to 5.10.0
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.9.2...v5.10.0)

Updates `github.com/lestrrat-go/jwx/v2` from 2.1.6 to 2.1.7
- [Release notes](https://github.com/lestrrat-go/jwx/releases)
- [Changelog](https://github.com/lestrrat-go/jwx/blob/v2.1.7/Changes)
- [Commits](lestrrat-go/jwx@v2.1.6...v2.1.7)

Updates `github.com/lib/pq` from 1.10.9 to 1.12.3
- [Release notes](https://github.com/lib/pq/releases)
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md)
- [Commits](lib/pq@v1.10.9...v1.12.3)

Updates `github.com/mattn/go-sqlite3` from 1.14.48 to 1.14.49
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](mattn/go-sqlite3@v1.14.48...v1.14.49)

Updates `github.com/open-policy-agent/opa` from 1.5.1 to 1.19.0
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa@v1.5.1...v1.19.0)

Updates `github.com/pressly/goose/v3` from 3.24.3 to 3.27.3
- [Release notes](https://github.com/pressly/goose/releases)
- [Changelog](https://github.com/pressly/goose/blob/main/CHANGELOG.md)
- [Commits](pressly/goose@v3.24.3...v3.27.3)

Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.2
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.9.1...v1.10.2)

Updates `github.com/spf13/viper` from 1.20.1 to 1.21.0
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](spf13/viper@v1.20.1...v1.21.0)

Updates `github.com/testcontainers/testcontainers-go` from 0.42.0 to 0.43.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.42.0...v0.43.0)

Updates `golang.org/x/net` from 0.55.0 to 0.57.0
- [Commits](golang/net@v0.55.0...v0.57.0)

Updates `google.golang.org/grpc` from 1.82.1 to 1.83.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.82.1...v1.83.0)

Updates `github.com/go-ldap/ldap/v3` from 3.4.12 to 3.4.14
- [Release notes](https://github.com/go-ldap/ldap/releases)
- [Commits](go-ldap/ldap@v3.4.12...v3.4.14)

Updates `golang.org/x/text` from 0.37.0 to 0.40.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.37.0...v0.40.0)

---
updated-dependencies:
- dependency-name: buf.build/go/protovalidate
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: connectrpc.com/grpchealth
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: github.com/casbin/casbin/v2
  dependency-version: 2.135.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: github.com/dgraph-io/ristretto/v2
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: github.com/eko/gocache/lib/v4
  dependency-version: 4.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: github.com/fsnotify/fsnotify
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: github.com/go-chi/cors
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: github.com/go-ldap/ldap/v3
  dependency-version: 3.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: github.com/go-playground/validator/v10
  dependency-version: 10.30.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: github.com/go-viper/mapstructure/v2
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: github.com/lestrrat-go/jwx/v2
  dependency-version: 2.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: github.com/lib/pq
  dependency-version: 1.12.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: github.com/mattn/go-sqlite3
  dependency-version: 1.14.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: github.com/open-policy-agent/opa
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: github.com/pressly/goose/v3
  dependency-version: 3.27.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: github.com/spf13/viper
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: golang.org/x/net
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: golang.org/x/text
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: google.golang.org/grpc
  dependency-version: 1.82.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/service/external-2d8e699f77 branch from 67142b8 to dc502a9 Compare August 4, 2026 17:16
@github-actions

github-actions Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

See the workflow run for details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code size/m

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants