chore(deps): bump the go group with 10 updates by dependabot[bot] · Pull Request #2089 · open-component-model/ocm

dependabot · 2026-08-23T08:29:10Z

Bumps the go group with 10 updates:

Package	From	To
github.com/aws/aws-sdk-go-v2	`1.43.5`	`1.43.6`
github.com/aws/aws-sdk-go-v2/config	`1.32.36`	`1.32.37`
github.com/aws/aws-sdk-go-v2/credentials	`1.19.35`	`1.19.36`
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager	`0.3.12`	`0.3.14`
github.com/aws/aws-sdk-go-v2/service/ecr	`1.60.5`	`1.60.6`
github.com/aws/aws-sdk-go-v2/service/s3	`1.107.1`	`1.107.2`
github.com/aws/smithy-go	`1.27.7`	`1.27.8`
github.com/go-openapi/swag/conv	`0.28.0`	`0.29.0`
github.com/sirupsen/logrus	`1.10.0`	`1.10.1`
github.com/stretchr/testify	`1.12.0`	`1.12.1`

Updates github.com/aws/aws-sdk-go-v2 from 1.43.5 to 1.43.6

Commits

168c59c Release 2026-08-14
95fee35 Regenerated Clients
12e7ccd Update endpoints model
93e74b8 Update API model
fe3cb6a fix: close original S3 response body in 200-error handling (#3517)
800a56b Release 2026-08-13
e739a5d Regenerated Clients
f75a3c4 Update API model
b0973f9 delete stale response snapshots (#3516)
c3679fb remove broken internal changelog recipe (#3515)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.36 to 1.32.37

Commits

168c59c Release 2026-08-14
95fee35 Regenerated Clients
12e7ccd Update endpoints model
93e74b8 Update API model
fe3cb6a fix: close original S3 response body in 200-error handling (#3517)
800a56b Release 2026-08-13
e739a5d Regenerated Clients
f75a3c4 Update API model
b0973f9 delete stale response snapshots (#3516)
c3679fb remove broken internal changelog recipe (#3515)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.35 to 1.19.36

Commits

168c59c Release 2026-08-14
95fee35 Regenerated Clients
12e7ccd Update endpoints model
93e74b8 Update API model
fe3cb6a fix: close original S3 response body in 200-error handling (#3517)
800a56b Release 2026-08-13
e739a5d Regenerated Clients
f75a3c4 Update API model
b0973f9 delete stale response snapshots (#3516)
c3679fb remove broken internal changelog recipe (#3515)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.3.12 to 0.3.14

Commits

215a950 Release 2026-08-18
7914158 Regenerated Clients
256e396 Update API model
aaa3547 Close each file after its transfer finished during directory upload/download ...
7a7d0a5 Release 2026-08-17
c7ab71c Regenerated Clients
ecbadc5 Update API model
168c59c Release 2026-08-14
95fee35 Regenerated Clients
12e7ccd Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.60.5 to 1.60.6

Commits

168c59c Release 2026-08-14
95fee35 Regenerated Clients
12e7ccd Update endpoints model
93e74b8 Update API model
fe3cb6a fix: close original S3 response body in 200-error handling (#3517)
800a56b Release 2026-08-13
e739a5d Regenerated Clients
f75a3c4 Update API model
b0973f9 delete stale response snapshots (#3516)
c3679fb remove broken internal changelog recipe (#3515)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.1 to 1.107.2

Commits

168c59c Release 2026-08-14
95fee35 Regenerated Clients
12e7ccd Update endpoints model
93e74b8 Update API model
fe3cb6a fix: close original S3 response body in 200-error handling (#3517)
800a56b Release 2026-08-13
e739a5d Regenerated Clients
f75a3c4 Update API model
b0973f9 delete stale response snapshots (#3516)
c3679fb remove broken internal changelog recipe (#3515)
Additional commits viewable in compare view

Updates github.com/aws/smithy-go from 1.27.7 to 1.27.8

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-08-21)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.9

Bug Fix: Fix a generic event stream exception not carrying the error code and message from its payload.

Bug Fix: Fix an event stream not being closed when its connection is lost, which would cause a caller writing to the stream to block indefinitely.

Bug Fix: Fix deserialization of an empty list producing a nil slice instead of an empty one.

Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-14)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.8

Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-07)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.7

Bug Fix: Don't serialize unset JSON documents as nil in structure members.

Bug Fix: Fix a deserialization panic around collection members in recursive shape configs.

Release (2026-07-31)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.6

Bug Fix: Fix failure to deserialize any @httpPayload struct with a non-string member.

Bug Fix: Fix failure to serialize any @httpPayload struct with a nested struct.

Release (2026-07-27)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.5

Bug Fix: Fix a performance issue in awsQuery with large response payloads.

... (truncated)

Commits

b6ea087 Release 2026-08-14
496caee fix: drain response body before closing in CloseResponseBody (#696)
See full diff in compare view

Updates github.com/go-openapi/swag/conv from 0.28.0 to 0.29.0

Release notes

Sourced from github.com/go-openapi/swag/conv's releases.

v0.29.0

0.29.0 - 2026-08-19

New fsutils on top of io.FS

Full Changelog: go-openapi/swag@v0.28.0...v0.29.0

10 commits in this release.

Implemented enhancements

feat(fsutils): new utilities on top of io/fs.FS by @fredbi in #237 ...

Documentation

doc: updated contributors file by @bot-go-openapi[bot] in #232 ...

Testing

test: rename the fixtures directories to testdata by @fredbi ...

Miscellaneous tasks

chore: prepare release v0.29.0 by @bot-go-openapi[bot] in #238 ...

chore: update go dependencies by @fredbi in #236 ...

chore: tuned quality reporting tools by @fredbi ...

Updates

build(deps): bump the development-dependencies group with 9 updates by @dependabot[bot] in #234 ...

build(deps): bump the development-dependencies group with 9 updates by @dependabot[bot] in #233 ...

build(deps): bump the other-dependencies group across 8 directories with 1 update by @dependabot[bot] in #231 ...

Other (technical)

Test/move fixtures to testdata by @fredbi in #235 ...

People who contributed to this release

@fredbi

... (truncated)

Commits

805afa3 chore: prepare release v0.29.0
3fd99ce feat(fsutils): new utilities on top of io/fs.FS (#237)
606af28 chore: updated go dependencies (#236)
60116a7 Merge pull request #235 from fredbi/test/move-fixtures-to-testdata
47a8f7b chore: tuned quality reporting tools
299a7ef test: rename the fixtures directories to testdata
f05ceb2 build(deps): bump the development-dependencies group with 9 updates
58683ab build(deps): bump the development-dependencies group with 9 updates
21b44e9 build(deps): bump the other-dependencies group across 8 directories with 1 up...
5559cd0 doc: updated contributors file
See full diff in compare view

Updates github.com/sirupsen/logrus from 1.10.0 to 1.10.1

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.1

Logrus v1.10.1

This patch release fixes two issues in field formatting and handling:

Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.

Allow function-backed values implementing error to be used with WithError, WithField, and WithFields.

Dependency Changes

update github.com/stretchr/testify to v1.12.0

Full Changelog: sirupsen/logrus@v1.10.0...v1.10.1

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.1

Fixes:

Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.

Allow function-backed implementations of error as field values.

Commits

8b673a9 Merge pull request #1583 from thaJeztah/release_1.10.1
0b920ad Merge pull request #1584 from thaJeztah/more_coverage
5e20694 TextFormatter: cover nil pointer method receivers
8312732 update changelog for v1.10.1
e987a40 Merge pull request #1582 from thaJeztah/panic_handler
17d574b TextFormatter: recover panics from Error and String methods
134c80f Merge pull request #1579 from thaJeztah/err_handling
7350f42 logger: WithError: wrap logger.WithError for consistency
b3369d2 entry: allow function-backed error fields
1080083 Merge pull request #1578 from thaJeztah/err_handling_tests
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.12.0 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in stretchr/testify#1935

change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

@harryzcy made their first contribution in stretchr/testify#1935

@boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in stretchr/testify#1935

change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

@harryzcy made their first contribution in stretchr/testify#1935

@boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

Commits

959dbda Merge pull request #1935 from harryzcy/yaml-update
9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
0358d0e change yaml library to go.yaml.in/yaml/v3
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 10 updates: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.43.5` | `1.43.6` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.36` | `1.32.37` | | [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.19.35` | `1.19.36` | | [github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager](https://github.com/aws/aws-sdk-go-v2) | `0.3.12` | `0.3.14` | | [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.60.5` | `1.60.6` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.107.1` | `1.107.2` | | [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.27.7` | `1.27.8` | | [github.com/go-openapi/swag/conv](https://github.com/go-openapi/swag) | `0.28.0` | `0.29.0` | | [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.10.0` | `1.10.1` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.12.0` | `1.12.1` | Updates `github.com/aws/aws-sdk-go-v2` from 1.43.5 to 1.43.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.43.5...v1.43.6) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.36 to 1.32.37 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.36...config/v1.32.37) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.35 to 1.19.36 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@credentials/v1.19.35...credentials/v1.19.36) Updates `github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager` from 0.3.12 to 0.3.14 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@feature/s3/transfermanager/v0.3.12...feature/s3/transfermanager/v0.3.14) Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.60.5 to 1.60.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/ecr/v1.60.5...service/ecr/v1.60.6) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.107.1 to 1.107.2 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.107.1...service/s3/v1.107.2) Updates `github.com/aws/smithy-go` from 1.27.7 to 1.27.8 - [Release notes](https://github.com/aws/smithy-go/releases) - [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md) - [Commits](aws/smithy-go@v1.27.7...v1.27.8) Updates `github.com/go-openapi/swag/conv` from 0.28.0 to 0.29.0 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.28.0...v0.29.0) Updates `github.com/sirupsen/logrus` from 1.10.0 to 1.10.1 - [Release notes](https://github.com/sirupsen/logrus/releases) - [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md) - [Commits](sirupsen/logrus@v1.10.0...v1.10.1) Updates `github.com/stretchr/testify` from 1.12.0 to 1.12.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.12.0...v1.12.1) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.43.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.37 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.19.36 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager dependency-version: 0.3.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr dependency-version: 1.60.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.107.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/smithy-go dependency-version: 1.27.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/swag/conv dependency-version: 0.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/sirupsen/logrus dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/stretchr/testify dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Aug 23, 2026

dependabot Bot requested a review from a team as a code owner August 23, 2026 08:29

dependabot Bot added kind/dependency dependency update, etc. kind/chore chore, maintenance, etc. labels Aug 23, 2026

github-actions Bot added the size/m Medium label Aug 23, 2026

matthiasbruns approved these changes Aug 24, 2026

View reviewed changes

matthiasbruns merged commit 4e14bc5 into main Aug 24, 2026
21 checks passed

dependabot Bot deleted the dependabot/go_modules/go-17d23ab384 branch August 24, 2026 04:19

Navigation Menu

Uh oh!

chore(deps): bump the go group with 10 updates - #2089

chore(deps): bump the go group with 10 updates#2089
matthiasbruns merged 1 commit into
mainfrom
dependabot/go_modules/go-17d23ab384

dependabot Bot commented on behalf of github Aug 23, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 23, 2026

Release (2026-08-21)

General Highlights

Module Highlights

Release (2026-08-14)

General Highlights

Module Highlights

Release (2026-08-07)

General Highlights

Module Highlights

Release (2026-07-31)

General Highlights

Module Highlights

Release (2026-07-27)

General Highlights

Module Highlights

v0.29.0

0.29.0 - 2026-08-19

Implemented enhancements

Documentation

Testing

Miscellaneous tasks

Updates

Other (technical)

People who contributed to this release

v1.10.1

Logrus v1.10.1

1.10.1

v1.12.1

What's Changed

New Contributors

What's Changed

New Contributors

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant