chore(deps): bump the gomod-version-updates group across 1 directory with 7 updates #512

dependabot · 2025-09-08T09:08:53Z

Bumps the gomod-version-updates group with 5 updates in the / directory:

Package	From	To
github.com/golang-jwt/jwt/v5	`5.2.2`	`5.3.0`
github.com/grpc-ecosystem/grpc-gateway/v2	`2.27.1`	`2.27.2`
github.com/stretchr/testify	`1.10.0`	`1.11.1`
golang.org/x/oauth2	`0.30.0`	`0.31.0`
google.golang.org/protobuf	`1.36.7`	`1.36.8`

Updates github.com/golang-jwt/jwt/v5 from 5.2.2 to 5.3.0

Release notes

Sourced from github.com/golang-jwt/jwt/v5's releases.

v5.3.0

This release is almost identical to to v5.2.3 but now correctly indicates Go 1.21 as minimum requirement.

What's Changed

Create CODEOWNERS by @oxisto in golang-jwt/jwt#449

Bump Go version to indicate correct minimum requirement by @oxisto in golang-jwt/jwt#452

Full Changelog: golang-jwt/jwt@v5.2.3...v5.3.0

v5.2.3

What's Changed

Bump GitHub workflows and Go versions by @mfridman in golang-jwt/jwt#438

Implementing validation of multiple audiences by @oxisto in golang-jwt/jwt#433

Bump golangci/golangci-lint-action from 7 to 8 by @dependabot[bot] in golang-jwt/jwt#440

replaced interface{} to any by @aachex in golang-jwt/jwt#445

Fix bug in validation of multiple audiences by @sfinnman-cotn in golang-jwt/jwt#441

New Contributors

@aachex made their first contribution in golang-jwt/jwt#445

@sfinnman-cotn made their first contribution in golang-jwt/jwt#441

Full Changelog: golang-jwt/jwt@v5.2.2...v5.2.3

Commits

e9547a1 Bump Go version to indicate correct minimum requirement (#452)
3839817 Create CODEOWNERS (#449)
d83e545 Fix bug in validation of multiple audiences (#441)
75740f1 replaced interface{} to any (#445)
048854f Bump golangci/golangci-lint-action from 7 to 8 (#440)
497a38e Implementing validation of multiple audiences (#433)
12384ea Bump GitHub workflows and Go versions (#438)
See full diff in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.1 to 2.27.2

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.27.2

What's Changed

Fix nested schema definition for body parameter (#3058) by @ilyongcho-moloco in grpc-ecosystem/grpc-gateway#5827

Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v3 by @MB175 in grpc-ecosystem/grpc-gateway#5857

New Contributors

@ilyongcho-moloco made their first contribution in grpc-ecosystem/grpc-gateway#5827

@MB175 made their first contribution in grpc-ecosystem/grpc-gateway#5857

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.1...v2.27.2

Commits

91958df chore(deps): update dependency rules_shell to v0.6.0 (#5862)
74cf2e0 Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v3 (#5857)
2fba191 chore(deps): update googleapis digest to 3b2a2ae (#5860)
ed12336 fix(deps): update module google.golang.org/grpc to v1.75.0 (#5859)
c2a8616 chore(deps): update googleapis digest to 2032c33 (#5858)
77e504f Fix nested schema definition for body parameter (#3058) (#5827)
7df4168 fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 3122310...
6d1d1fc fix(deps): update google.golang.org/genproto/googleapis/api digest to 3122310...
ec3d9b2 chore(deps): update googleapis digest to d869249 (#5852)
8499438 chore(deps): update googleapis digest to 6429996 (#5851)
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.10.0 to 1.11.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.11.1

This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Backport #1786 to release/1.11: mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in stretchr/testify#1788

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Call stack perf change for CallerInfo by @mikeauclair in stretchr/testify#1614

Lazily render mock diff output on successful match by @mikeauclair in stretchr/testify#1615

assert: check early in Eventually, EventuallyWithT, and Never by @cszczepaniak in stretchr/testify#1427

assert: add IsNotType by @bartventer in stretchr/testify#1730

assert.JSONEq: shortcut if same strings by @dolmen in stretchr/testify#1754

assert.YAMLEq: shortcut if same strings by @dolmen in stretchr/testify#1755

assert: faster and simpler isEmpty using reflect.Value.IsZero by @dolmen in stretchr/testify#1761

suite: faster methods filtering (internal refactor) by @dolmen in stretchr/testify#1758

Fixes

assert.ErrorAs: log target type by @craig65535 in stretchr/testify#1345

Fix failure message formatting for Positive and Negative asserts in stretchr/testify#1062

Improve ErrorIs message when error is nil but an error was expected by @tsioftas in stretchr/testify#1681

fix Subset/NotSubset when calling with mixed input types by @siliconbrain in stretchr/testify#1729

Improve ErrorAs failure message when error is nil by @ccoVeille in stretchr/testify#1734

mock.AssertNumberOfCalls: improve error msg by @3scalation in stretchr/testify#1743

Documentation, Build & CI

docs: Fix typo in README by @alexandear in stretchr/testify#1688

Replace deprecated io/ioutil with io and os by @alexandear in stretchr/testify#1684

Document consequences of calling t.FailNow() by @greg0ire in stretchr/testify#1710

chore: update docs for Unset #1621 by @techfg in stretchr/testify#1709

README: apply gofmt to examples by @alexandear in stretchr/testify#1687

refactor: use %q and %T to simplify fmt.Sprintf by @alexandear in stretchr/testify#1674

Propose Christophe Colombier (ccoVeille) as approver by @brackendawson in stretchr/testify#1716

Update documentation for the Error function in assert or require package by @architagr in stretchr/testify#1675

assert: remove deprecated build constraints by @alexandear in stretchr/testify#1671

assert: apply gofumpt to internal test suite by @ccoVeille in stretchr/testify#1739

CI: fix shebang in .ci.*.sh scripts by @dolmen in stretchr/testify#1746

assert,require: enable parallel testing on (almost) all top tests by @dolmen in stretchr/testify#1747

suite.Passed: add one more status test report by @Ararsa-Derese in stretchr/testify#1706

Add Helper() method in internal mocks and assert.CollectT by @dolmen in stretchr/testify#1423

assert.Same/NotSame: improve usage of Sprintf by @ccoVeille in stretchr/testify#1742

mock: enable parallel testing on internal testsuite by @dolmen in stretchr/testify#1756

suite: cleanup use of 'testing' internals at runtime by @dolmen in stretchr/testify#1751

assert: check test failure message for Empty and NotEmpty by @ccoVeille in stretchr/testify#1745

... (truncated)

Commits

2a57335 Merge pull request #1788 from brackendawson/1785-backport-1.11
af8c912 Backport #1786 to release/1.11
b7801fb Merge pull request #1778 from stretchr/dependabot/github_actions/actions/chec...
69831f3 build(deps): bump actions/checkout from 4 to 5
a53be35 Improve captureTestingT helper
aafb604 mock: improve formatting of error message
7218e03 improve error msg
929a212 Merge pull request #1758 from stretchr/dolmen/suite-faster-method-filtering
bc7459e suite: faster filtering of methods (-testify.m)
7d37b5c suite: refactor methodFilter
Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.30.0 to 0.31.0

Commits

014cf77 all: upgrade go directive to at least 1.24.0 [generated]
3c76ce5 endpoints: correct Naver OAuth2 endpoint URLs
See full diff in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20250603155806-513f23925822 to 0.0.0-20250818200422-3122310a409c

Commits

See full diff in compare view

Updates google.golang.org/grpc from 1.74.2 to 1.75.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.75.0

Behavior Changes

xds: Remove support for GRPC_EXPERIMENTAL_XDS_FALLBACK environment variable. Fallback support can no longer be disabled. (#8482)

stats: Introduce DelayedPickComplete event, a type alias of PickerUpdated. (#8465)

This (combined) event will now be emitted only once per call, when a transport is successfully selected for the attempt.

OpenTelemetry metrics will no longer have multiple "Delayed LB pick complete" events in Go, matching other gRPC languages.

A future release will delete the PickerUpdated symbol.

credentials: Properly apply grpc.WithAuthority as the highest-priority option for setting authority, above the setting in the credentials themselves. (#8488)

Now that this WithAuthority is available, the credentials should not be used to override the authority.

round_robin: Randomize the order in which addresses are connected to in order to spread out initial RPC load between clients. (#8438)

server: Return status code INTERNAL when a client sends more than one request in unary and server streaming RPC. (#8385)

This is a behavior change but also a bug fix to bring gRPC-Go in line with the gRPC spec.

New Features

dns: Add an environment variable (GRPC_ENABLE_TXT_SERVICE_CONFIG) to provide a way to disable TXT lookups in the DNS resolver (by setting it to false). By default, TXT lookups are enabled, as they were previously. (#8377)

Bug Fixes

xds: Fix regression preventing empty node IDs in xDS bootstrap configuration. (#8476)

Special Thanks: @davinci26

xds: Fix possible panic when certain invalid resources are encountered. (#8412)

Special Thanks: @wooffie

xdsclient: Fix a rare panic caused by processing a response from a closed server. (#8389)

stats: Fix metric unit formatting by enclosing non-standard units like call and endpoint in curly braces to comply with UCUM and gRPC OpenTelemetry guidelines. (#8481)

xds: Fix possible panic when clusters are removed from the xds configuration. (#8428)

xdsclient: Fix a race causing "resource doesn not exist" when rapidly subscribing and unsubscribing to the same resource. (#8369)

client: When determining the authority, properly percent-encode (if needed, which is unlikely) when the target string omits the hostname and only specifies a port (grpc.NewClient(":<port-number-or-name>")). (#8488)

Commits

b9788ef Change version to 1.75.0 (#8493)
2bd74b2 credentials: fix behavior of grpc.WithAuthority and credential handshake prec...
9fa3267 xds: remove xds client fallback environment variable (#8482)
62ec29f grpc: Fix cardinality violations in non-client streaming RPCs. (#8385)
85240a5 stats: change non-standard units to annotations (#8481)
ac13172 update deps (#8478)
0a895bc examples/opentelemetry: use experimental metrics in example (#8441)
8b61e8f xdsclient: do not process updates from closed server channels (#8389)
7238ab1 Allow empty nodeID (#8476)
9186ebd cleanup: use slices.Equal to simplify code (#8472)
Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.36.7 to 1.36.8

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…with 7 updates Bumps the gomod-version-updates group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.2.2` | `5.3.0` | | [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.27.1` | `2.27.2` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.10.0` | `1.11.1` | | [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.30.0` | `0.31.0` | | google.golang.org/protobuf | `1.36.7` | `1.36.8` | Updates `github.com/golang-jwt/jwt/v5` from 5.2.2 to 5.3.0 - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md) - [Commits](golang-jwt/jwt@v5.2.2...v5.3.0) Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.1 to 2.27.2 - [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases) - [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/main/.goreleaser.yml) - [Commits](grpc-ecosystem/grpc-gateway@v2.27.1...v2.27.2) Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.10.0...v1.11.1) Updates `golang.org/x/oauth2` from 0.30.0 to 0.31.0 - [Commits](golang/oauth2@v0.30.0...v0.31.0) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250603155806-513f23925822 to 0.0.0-20250818200422-3122310a409c - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.74.2 to 1.75.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.74.2...v1.75.0) Updates `google.golang.org/protobuf` from 1.36.7 to 1.36.8 --- updated-dependencies: - dependency-name: github.com/golang-jwt/jwt/v5 dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod-version-updates - dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2 dependency-version: 2.27.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod-version-updates - dependency-name: github.com/stretchr/testify dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod-version-updates - dependency-name: golang.org/x/oauth2 dependency-version: 0.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod-version-updates - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20250818200422-3122310a409c dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod-version-updates - dependency-name: google.golang.org/grpc dependency-version: 1.75.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod-version-updates - dependency-name: google.golang.org/protobuf dependency-version: 1.36.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod-version-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Sep 8, 2025

dependabot bot force-pushed the dependabot/go_modules/gomod-version-updates-db29789eb2 branch from 1886e6c to 5879e6e Compare September 22, 2025 07:17

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the gomod-version-updates group across 1 directory with 7 updates #512

chore(deps): bump the gomod-version-updates group across 1 directory with 7 updates #512

Uh oh!

dependabot bot commented on behalf of github Sep 8, 2025 •

edited

Loading

Uh oh!

Uh oh!

chore(deps): bump the gomod-version-updates group across 1 directory with 7 updates #512

Are you sure you want to change the base?

chore(deps): bump the gomod-version-updates group across 1 directory with 7 updates #512

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.3.0

What's Changed

v5.2.3

What's Changed

New Contributors

v2.27.2

What's Changed

New Contributors

v1.11.1

What's Changed

v1.11.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

Release 1.75.0

Behavior Changes

New Features

Bug Fixes

Uh oh!

Uh oh!

dependabot bot commented on behalf of github Sep 8, 2025 •

edited

Loading