Skip to content

chore(deps): bump the go-deps group across 1 directory with 14 updates - #12501

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-6179174f6a
Closed

chore(deps): bump the go-deps group across 1 directory with 14 updates#12501
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-6179174f6a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-deps group with 11 updates in the / directory:

Package From To
github.com/aws/aws-sdk-go-v2/config 1.32.28 1.32.30
github.com/aws/aws-sdk-go-v2/service/cloudcontrol 1.31.0 1.31.1
github.com/aws/aws-sdk-go-v2/service/cloudformation 1.74.0 1.74.1
github.com/aws/aws-sdk-go-v2/service/ec2 1.313.0 1.316.1
github.com/aws/aws-sdk-go-v2/service/ecr 1.59.0 1.59.1
github.com/fluxcd/source-controller/api 1.9.2 1.9.3
github.com/getkin/kin-openapi 0.140.0 0.142.0
github.com/hashicorp/terraform-json 0.27.2 0.28.0
golang.org/x/crypto 0.53.0 0.54.0
helm.sh/helm/v4 4.2.2 4.2.3
oras.land/oras-go/v2 2.6.1 2.6.2

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.28 to 1.32.30

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.27 to 1.19.29

Commits

Updates github.com/aws/aws-sdk-go-v2/service/cloudcontrol from 1.31.0 to 1.31.1

Commits

Updates github.com/aws/aws-sdk-go-v2/service/cloudformation from 1.74.0 to 1.74.1

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ec2 from 1.313.0 to 1.316.1

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.59.0 to 1.59.1

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.44.0 to 1.44.1

Commits

Updates github.com/fluxcd/source-controller/api from 1.9.2 to 1.9.3

Release notes

Sourced from github.com/fluxcd/source-controller/api's releases.

v1.9.3

Changelog

v1.9.3 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.9.3
  • ghcr.io/fluxcd/source-controller:v1.9.3

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/source-controller/api's changelog.

1.9.3

Release date: 2026-07-13

This patch release fixes the HelmChart CRD description for .status.url, which was copy-pasted from Bucket and pointed users at BucketStatus.Artifact instead of HelmChartStatus.Artifact.

Improvements:

  • Fix HelmChartStatus.URL doc-comment referencing BucketStatus #2110
Commits
  • ed61ebd Merge pull request #2111 from fluxcd/release-v1.9.3
  • 03a1208 Release v1.9.3
  • f1e431a Add changelog entry for v1.9.3
  • deec0f1 Merge pull request #2110 from fluxcd/backport-2109-to-release/v1.9.x
  • 048ce5c docs: regenerate API reference after doc-comment fix
  • 2b0b313 Fix HelmChartStatus.URL doc-comment referencing BucketStatus
  • See full diff in compare view

Updates github.com/getkin/kin-openapi from 0.140.0 to 0.142.0

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.142.0

What's Changed

Full Changelog: getkin/kin-openapi@v0.141.0...v0.142.0

v0.141.0

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.140.0...v0.141.0

Commits
  • 1223a0f openapi3filter: fix unbounded allocation in deepObject array decoding (C-02)
  • 61f37b6 openapi3: move a test file under a test package
  • eab5230 openapi3: fix test that relied on now non-resolving domain
  • 1d0a337 Merge commit from fork
  • 98d9564 qol: Makefile for shorthand commands + preflight scripts (#1217)
  • b5bb6bc openapi3: make operation responses optional for 3.1+ (#1214)
  • ae6bf33 openapi3: support OAS 3.2 itemSchema (#1213)
  • 1b54e4c docs: Go Report Card has been sunset (#1210)
  • 4a0d049 origin: record scalar-valued map keys for location lookup (#1208)
  • 26c42cf openapi3: record block end on Origin.Key (EndLine/EndColumn) (#1207)
  • Additional commits viewable in compare view

Updates github.com/hashicorp/terraform-json from 0.27.2 to 0.28.0

Release notes

Sourced from github.com/hashicorp/terraform-json's releases.

v0.28.0

ENHANCEMENTS:

INTERNAL:

New Contributors

Full Changelog: hashicorp/terraform-json@v0.27.2...v0.28.0

Commits
  • 1e0dcb8 validate: add Diagnostic.Address (#204)
  • 34ea8d0 build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 in the github-actions-...
  • ff68feb Merge pull request #201 from hashicorp/dependabot/github_actions/github-actio...
  • f3efae0 build(deps): bump actions/checkout in the github-actions-breaking group
  • 0966153 Merge pull request #200 from renescheepers/rs/add-action-reason
  • b4487cd Link ActionReason constants to Terraform's canonical enum
  • eefb8b2 Add ActionReason to ResourceChange
  • 5738e0a build(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions-...
  • e77c39e Merge pull request #196 from hashicorp/dependabot/go_modules/github.com/hashi...
  • 703bd74 build(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.53.0 to 0.54.0

Commits
  • cdce021 go.mod: update golang.org/x dependencies
  • d9474cc openpgp: make the deprecation message more explicit
  • 7626c50 ssh: verify declared key type matches decoded key in authorized_keys
  • 0471e79 ssh/agent: enforce strict limits on DSA key parameters
  • 6435c37 ssh: sanitize client disconnect messages
  • 7d695da ssh/agent: drain channel stderr in agent forwarders
  • 5b7f841 acme/autocert: fix data race in Manager.createCert
  • 0b316e7 argon2: update RFC 9106 parameter recommendations
  • 55aec0a x509roots/fallback: update bundle
  • 5f2de1a internal: remove wycheproof tests
  • See full diff in compare view

Updates golang.org/x/text from 0.39.0 to 0.40.0

Commits
  • 724af9c go.mod: update golang.org/x dependencies
  • bf5b9d6 internal/export/idna: always treat Punycode encoding pure ASCII as an error
  • See full diff in compare view

Updates helm.sh/helm/v4 from 4.2.2 to 4.2.3

Release notes

Sourced from helm.sh/helm/v4's releases.

Helm v4.2.3 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v4.2.3. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.4 and 3.21.4 are the next patch releases scheduled for August 12, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 43e8b7feece8beb0fcba47059ec9b522fd929a64 (Terry Howe)
Commits
  • 43e8b7f chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0
  • See full diff in compare view

Updates oras.land/oras-go/v2 from 2.6.1 to 2.6.2

Release notes

Sourced from oras.land/oras-go/v2's releases.

v2.6.2

This is a security patch release addressing advisories in the content and remote layers, plus additional hardening and bug fixes since v2.6.1.

Security Fixes

  • Resolve the hardlink (TypeLink) target before passing it to os.Link, preventing a crafted OCI artifact from hardlinking a file outside the extraction directory via the process CWD (#1232, GHSA-fxhp-mv3v-67qp / CVE-2026-50163)
  • Bound tag and referrer list pagination to prevent a malicious or misbehaving registry from advertising an endless page chain and forcing unbounded client requests (client-side DoS) (#1215)

Bug Fixes

  • Bound content.ReadAll allocation by actual content read rather than the descriptor size, correcting the over-broad 32 MiB cap introduced for GHSA-f36w-mj3v-6jqv so legitimate in-memory Push/FetchAll/FetchBytes are not rejected (#1223)

Other Changes

  • Bump golang.org/x/sync from 0.20.0 to 0.21.0 (#1208)
Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 21, 2026
Copilot AI review requested due to automatic review settings July 21, 2026 17:21
@dependabot
dependabot Bot requested a review from a team as a code owner July 21, 2026 17:21
@dependabot @github

dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: deps/gomod. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested review from a team as code owners July 21, 2026 17:21
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 21, 2026
Copilot AI reviewed Jul 21, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates Go module dependencies (both root module and the test/magpiego module) to newer patch/minor versions, likely to pick up fixes and keep the dependency graph current.

Changes:

  • Bumped golang.org/x/* dependencies in test/magpiego (x/crypto, x/sys, x/text).
  • Bumped multiple root-module dependencies (AWS SDK v2 submodules, FluxCD API, kin-openapi, terraform-json, Helm, ORAS, and some golang.org/x/*).
  • Updated corresponding go.sum entries to match the new module versions.

Reviewed changes

Copilot reviewed 2 out of 4 changed files in this pull request and generated no comments.

File Description
test/magpiego/go.mod Updates indirect golang.org/x/* dependencies for the test module.
test/magpiego/go.sum Refreshes checksums for the test module after dependency bumps.
go.mod Updates root module dependency versions (AWS SDK v2 services, FluxCD, kin-openapi, terraform-json, Helm, ORAS, golang.org/x/*).
go.sum Refreshes root module checksums to align with updated dependency versions.

@github-actions

github-actions Bot commented Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 19 package(s) with unknown licenses.
See the Details below.

License Issues

go.mod

PackageVersionLicenseIssue Type
github.com/aws/aws-sdk-go-v2/config1.32.30NullUnknown License
github.com/aws/aws-sdk-go-v2/credentials1.19.29NullUnknown License
github.com/aws/aws-sdk-go-v2/service/cloudformation1.74.1NullUnknown License
github.com/aws/aws-sdk-go-v2/service/ec21.316.1NullUnknown License
github.com/aws/aws-sdk-go-v2/service/ecr1.59.1NullUnknown License
github.com/aws/aws-sdk-go-v2/service/sso1.32.1NullUnknown License
github.com/aws/aws-sdk-go-v2/service/ssooidc1.37.1NullUnknown License
github.com/aws/aws-sdk-go-v2/service/sts1.44.1NullUnknown License
github.com/getkin/kin-openapi0.142.0NullUnknown License
github.com/hashicorp/terraform-json0.28.0NullUnknown License
golang.org/x/crypto0.54.0NullUnknown License
golang.org/x/sys0.47.0NullUnknown License
golang.org/x/term0.45.0NullUnknown License
golang.org/x/text0.40.0NullUnknown License
github.com/oasdiff/yaml0.1.1NullUnknown License
github.com/oasdiff/yaml30.0.14NullUnknown License

test/magpiego/go.mod

PackageVersionLicenseIssue Type
golang.org/x/crypto0.54.0NullUnknown License
golang.org/x/sys0.47.0NullUnknown License
golang.org/x/text0.40.0NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
gomod/github.com/aws/aws-sdk-go-v2/config 1.32.30 UnknownUnknown
gomod/github.com/aws/aws-sdk-go-v2/credentials 1.19.29 UnknownUnknown
gomod/github.com/aws/aws-sdk-go-v2/service/cloudcontrol 1.31.1 🟢 6.4
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 4/30 approved changesets -- score normalized to 1
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 10security policy file detected
SAST🟢 7SAST tool is not run on all commits -- score normalized to 7
Fuzzing⚠️ 0project is not fuzzed
Binary-Artifacts🟢 9binaries present in source code
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
gomod/github.com/aws/aws-sdk-go-v2/service/cloudformation 1.74.1 UnknownUnknown
gomod/github.com/aws/aws-sdk-go-v2/service/ec2 1.316.1 UnknownUnknown
gomod/github.com/aws/aws-sdk-go-v2/service/ecr 1.59.1 UnknownUnknown
gomod/github.com/aws/aws-sdk-go-v2/service/signin 1.4.1 🟢 6.4
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 4/30 approved changesets -- score normalized to 1
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 10security policy file detected
SAST🟢 7SAST tool is not run on all commits -- score normalized to 7
Fuzzing⚠️ 0project is not fuzzed
Binary-Artifacts🟢 9binaries present in source code
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
gomod/github.com/aws/aws-sdk-go-v2/service/sso 1.32.1 UnknownUnknown
gomod/github.com/aws/aws-sdk-go-v2/service/ssooidc 1.37.1 UnknownUnknown
gomod/github.com/aws/aws-sdk-go-v2/service/sts 1.44.1 UnknownUnknown
gomod/github.com/fluxcd/source-controller/api 1.9.3 🟢 8
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices🟢 5badge detected: Passing
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy🟢 10security policy file detected
Signed-Releases🟢 105 out of the last 5 releases have a total of 10 signed artifacts.
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST🟢 9SAST tool is not run on all commits -- score normalized to 9
gomod/github.com/getkin/kin-openapi 0.142.0 UnknownUnknown
gomod/github.com/hashicorp/terraform-json 0.28.0 UnknownUnknown
gomod/github.com/oasdiff/yaml 0.1.1 UnknownUnknown
gomod/github.com/oasdiff/yaml3 0.0.14 UnknownUnknown
gomod/golang.org/x/crypto 0.54.0 UnknownUnknown
gomod/golang.org/x/sys 0.47.0 UnknownUnknown
gomod/golang.org/x/term 0.45.0 UnknownUnknown
gomod/golang.org/x/text 0.40.0 UnknownUnknown
gomod/helm.sh/helm/v4 4.2.3 🟢 9.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Dependency-Update-Tool🟢 10update tool detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 9security policy file detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
License🟢 10license file detected
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 91 existing vulnerabilities detected
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
SAST🟢 10SAST tool is run on all commits
Fuzzing🟢 10project is fuzzed
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
CI-Tests🟢 1025 out of 25 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 59 contributing companies or organizations
gomod/oras.land/oras-go/v2 2.6.2 🟢 7.3
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 7Found 9/12 approved changesets -- score normalized to 7
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 9security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 10all dependencies are pinned
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
SAST🟢 10SAST tool is run on all commits
gomod/golang.org/x/crypto 0.54.0 UnknownUnknown
gomod/golang.org/x/sys 0.47.0 UnknownUnknown
gomod/golang.org/x/text 0.40.0 UnknownUnknown

Scanned Files

  • go.mod
  • test/magpiego/go.mod

@github-actions

github-actions Bot commented Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown

Functional Tests - corerp-noncloud

180 tests  ±0   178 ✅ ±0   1h 9m 44s ⏱️ - 10m 10s
  3 suites ±0     2 💤 ±0 
  1 files   ±0     0 ❌ ±0 

Results for commit cd7244c. ± Comparison against base commit 13b3e87.

♻️ This comment has been updated with latest results.

@github-actions

github-actions Bot commented Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown

Unit Tests

    2 files  ±0    457 suites  ±0   7m 22s ⏱️ -15s
6 063 tests ±0  6 061 ✅ ±0  2 💤 ±0  0 ❌ ±0 
7 270 runs  ±0  7 268 ✅ ±0  2 💤 ±0  0 ❌ ±0 

Results for commit cd7244c. ± Comparison against base commit 13b3e87.

♻️ This comment has been updated with latest results.

@github-actions

github-actions Bot commented Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown

Functional Tests - corerp-cloud

30 tests  ±0   23 ✅  - 6   54m 21s ⏱️ + 31m 51s
 2 suites ±0    1 💤 ±0 
 1 files   ±0    6 ❌ +6 

For more details on these failures, see this check.

Results for commit cd7244c. ± Comparison against base commit 13b3e87.

♻️ This comment has been updated with latest results.

@github-actions github-actions Bot mentioned this pull request Jul 22, 2026
Closed
@DariuszPorowski

DariuszPorowski commented Jul 23, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
chore(deps): bump the go-deps group across 1 directory with 14 updates
cd7244c 
Bumps the go-deps group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.28` | `1.32.30` |
| [github.com/aws/aws-sdk-go-v2/service/cloudcontrol](https://github.com/aws/aws-sdk-go-v2) | `1.31.0` | `1.31.1` |
| [github.com/aws/aws-sdk-go-v2/service/cloudformation](https://github.com/aws/aws-sdk-go-v2) | `1.74.0` | `1.74.1` |
| [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) | `1.313.0` | `1.316.1` |
| [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.59.0` | `1.59.1` |
| [github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller) | `1.9.2` | `1.9.3` |
| [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) | `0.140.0` | `0.142.0` |
| [github.com/hashicorp/terraform-json](https://github.com/hashicorp/terraform-json) | `0.27.2` | `0.28.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.53.0` | `0.54.0` |
| [helm.sh/helm/v4](https://github.com/helm/helm) | `4.2.2` | `4.2.3` |
| [oras.land/oras-go/v2](https://github.com/oras-project/oras-go) | `2.6.1` | `2.6.2` |



Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.28 to 1.32.30
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.28...config/v1.32.30)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.27 to 1.19.29
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.19.27...credentials/v1.19.29)

Updates `github.com/aws/aws-sdk-go-v2/service/cloudcontrol` from 1.31.0 to 1.31.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.31.0...config/v1.31.1)

Updates `github.com/aws/aws-sdk-go-v2/service/cloudformation` from 1.74.0 to 1.74.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.74.0...service/s3/v1.74.1)

Updates `github.com/aws/aws-sdk-go-v2/service/ec2` from 1.313.0 to 1.316.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ec2/v1.313.0...service/ec2/v1.316.1)

Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.59.0 to 1.59.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.59.0...service/ssm/v1.59.1)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.44.0 to 1.44.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.44.0...service/iot/v1.44.1)

Updates `github.com/fluxcd/source-controller/api` from 1.9.2 to 1.9.3
- [Release notes](https://github.com/fluxcd/source-controller/releases)
- [Changelog](https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/source-controller@v1.9.2...v1.9.3)

Updates `github.com/getkin/kin-openapi` from 0.140.0 to 0.142.0
- [Release notes](https://github.com/getkin/kin-openapi/releases)
- [Commits](getkin/kin-openapi@v0.140.0...v0.142.0)

Updates `github.com/hashicorp/terraform-json` from 0.27.2 to 0.28.0
- [Release notes](https://github.com/hashicorp/terraform-json/releases)
- [Commits](hashicorp/terraform-json@v0.27.2...v0.28.0)

Updates `golang.org/x/crypto` from 0.53.0 to 0.54.0
- [Commits](golang/crypto@v0.53.0...v0.54.0)

Updates `golang.org/x/text` from 0.39.0 to 0.40.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.39.0...v0.40.0)

Updates `helm.sh/helm/v4` from 4.2.2 to 4.2.3
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v4.2.2...v4.2.3)

Updates `oras.land/oras-go/v2` from 2.6.1 to 2.6.2
- [Release notes](https://github.com/oras-project/oras-go/releases)
- [Commits](oras-project/oras-go@v2.6.1...v2.6.2)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.19.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/aws/aws-sdk-go-v2/service/cloudcontrol
  dependency-version: 1.31.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/aws/aws-sdk-go-v2/service/cloudformation
  dependency-version: 1.74.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2
  dependency-version: 1.316.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr
  dependency-version: 1.59.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.44.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/source-controller/api
  dependency-version: 1.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/getkin/kin-openapi
  dependency-version: 0.142.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/hashicorp/terraform-json
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/crypto
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/text
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: helm.sh/helm/v4
  dependency-version: 4.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: oras.land/oras-go/v2
  dependency-version: 2.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI review requested due to automatic review settings July 23, 2026 01:33
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-deps-6179174f6a branch from d88391b to cd7244c Compare July 23, 2026 01:33
Copilot AI reviewed Jul 23, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 2 out of 4 changed files in this pull request and generated no new comments.

@radius-functional-tests

radius-functional-tests Bot commented Jul 23, 2026 •
edited
Loading

Copy link
Copy Markdown

Radius functional test overview

🔍 Go to test action run

Click here to see the test run details
Name Value
Repository radius-project/radius
Commit ref cd7244c
Unique ID func1c68e58b53
Image tag pr-func1c68e58b53
  • Dapr: 1.14.4
  • Azure KeyVault CSI driver: 1.4.2
  • Azure Workload identity webhook: 1.3.0
  • Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-func1c68e58b53
  • Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
  • applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-func1c68e58b53
  • dynamic-rp test image location: ghcr.io/radius-project/dev/dynamic-rp:pr-func1c68e58b53
  • controller test image location: ghcr.io/radius-project/dev/controller:pr-func1c68e58b53
  • ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-func1c68e58b53
  • deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting ucp-cloud functional tests...
⌛ Starting corerp-cloud functional tests...
✅ ucp-cloud functional tests succeeded
❌ corerp-cloud functional test failed. Please check the logs for more details

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown

Functional Tests - statestore-noncloud

2 tests  ±0   1 ✅  - 1   2m 20s ⏱️ -42s
1 suites ±0   0 💤 ±0 
1 files   ±0   1 ❌ +1 

For more details on these failures, see this check.

Results for commit cd7244c. ± Comparison against base commit 13b3e87.

@dependabot @github

dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 23, 2026
auto-merge was automatically disabled July 23, 2026 02:13

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/go_modules/go-deps-6179174f6a branch July 23, 2026 02:13
@github-actions github-actions Bot mentioned this pull request Jul 23, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@radius-dependabot-manager radius-dependabot-manager[bot] radius-dependabot-manager[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@DariuszPorowski