Skip to content

chore(deps): bump the go group across 3 directories with 17 updates#6540

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go-6904bc859d
Closed

chore(deps): bump the go group across 3 directories with 17 updates#6540
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go-6904bc859d

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 24, 2026 •
edited
Loading

Bumps the go group with 9 updates in the / directory:

Package From To
github.com/fatih/color 1.18.0 1.19.0
github.com/go-ldap/ldap/v3 3.4.12 3.4.13
github.com/grpc-ecosystem/grpc-gateway/v2 2.27.8 2.28.0
github.com/hashicorp/go-bexpr 0.1.15 0.1.16
github.com/hashicorp/vault/api 1.22.0 1.23.0
github.com/jackc/pgx/v5 5.8.0 5.9.1
github.com/lib/pq 1.11.2 1.12.0
github.com/zalando/go-keyring 0.2.6 0.2.8
golang.org/x/crypto 0.48.0 0.49.0

Bumps the go group with 2 updates in the /api directory: github.com/hashicorp/boundary/sdk and golang.org/x/time.
Bumps the go group with 1 update in the /sdk directory: github.com/grpc-ecosystem/grpc-gateway/v2.

Updates github.com/fatih/color from 1.18.0 to 1.19.0

Release notes

Sourced from github.com/fatih/color's releases.

v1.19.0

What's Changed

New Contributors

Full Changelog: fatih/color@v1.18.0...v1.19.0

Commits
  • ca25f6e Merge pull request #266 from fatih/dependabot/github_actions/actions/setup-go-6
  • 1205984 Bump actions/setup-go from 5 to 6
  • 5715c20 Merge pull request #269 from UnSubble/main
  • 2f6e200 Merge branch 'main' into main
  • f72ec94 Merge pull request #273 from fatih/dependabot/github_actions/actions/checkout-6
  • 848e633 Merge branch 'main' into main
  • 4c2cd34 Add tests
  • 7f812f0 Bump actions/checkout from 4 to 6
  • b7fc9f9 Merge pull request #259 from fatih/dependabot/github_actions/dominikh/staticc...
  • 239a88f Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0
  • Additional commits viewable in compare view

Updates github.com/go-ldap/ldap/v3 from 3.4.12 to 3.4.13

Release notes

Sourced from github.com/go-ldap/ldap/v3's releases.

v3.4.13

What's Changed

New Contributors

Full Changelog: go-ldap/ldap@v3.4.12...v3.4.13

Commits
  • 3bbbfb1 Address panic in GetLDAPError, add fuzzer (#582)
  • 539d8f5 chore: update dependencies (#581)
  • 570560b feat: add PostalAddress type (#579)
  • 8bb1a96 refactor: simplify WhoAmI implementation using Extended API (#577)
  • f881ce8 refactor: remove redundant ResultCode field from ExtendedResponse struct
  • 5f4b937 refactor: remove accidently published Referral field from `ExtendedResponse...
  • bdde9c5 fix: correct extended request/response handling in Extended
  • d5557d0 refactor: simplify container command resolution in Makefile
  • dbef7be Fix ExtendedResponse parsing (#575)
  • 0935f92 Update search.go: fix typo (#574)
  • Additional commits viewable in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.8 to 2.28.0

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.28.0

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.8...v2.28.0

Commits
  • 13a31f4 fix(protoc-gen-openapiv2): fix panic on enum resolution in nested messages (#...
  • 8e678ff chore(deps): update googleapis digest to 27ffde2 (#6369)
  • 41651ff chore(deps): update googleapis digest to b026ba8 (#6368)
  • d083140 chore(deps): update googleapis digest to 537554c (#6365)
  • eb2fada chore(deps): update googleapis digest to 7b25d8c (#6364)
  • d8dddc9 chore(deps): update googleapis digest to 6781051 (#6363)
  • 3c4354f chore(deps): update googleapis digest to 055f92c (#6362)
  • b2eb1b5 fix(deps): update module google.golang.org/grpc to v1.79.1 (#6361)
  • 61b9d73 chore(deps): update googleapis digest to d84d3c2 (#6360)
  • e0880e3 chore(deps): update googleapis digest to 6eead6e (#6359)
  • Additional commits viewable in compare view

Updates github.com/hashicorp/go-bexpr from 0.1.15 to 0.1.16

Release notes

Sourced from github.com/hashicorp/go-bexpr's releases.

v0.1.16

Improvements

  • Adds "is nil" and "is not nil" selector. [GH-129]

Bug Fixes

  • Fixed a bug where using "is empty" or "is not empty" with a non-slice or non-map value would panic. [GH-129]

Full Changelog: hashicorp/go-bexpr@v0.1.15...v0.1.16

Changelog

Sourced from github.com/hashicorp/go-bexpr's changelog.

0.1.16 (March 5, 2026)

Improvements

  • Adds "is nil" and "is not nil" selector. [GH-129]

Bug Fixes

  • Fixed a bug where using "is empty" or "is not empty" with a non-slice or non-map value would panic. [GH-129]

Security

Commits
  • 51ee900 changelog for 0.1.16 (#130)
  • 2fcb6f9 support "is nil" and "is not nil" and make "is empty" safer (#129)
  • 27250df [chore] : Bump actions/setup-go from 6.2.0 to 6.3.0 (#127)
  • b31a265 [chore] : Bump actions/upload-artifact from 6.0.0 to 7.0.0 (#128)
  • e811c0e [chore] : Bump golangci/golangci-lint-action from 3.4.0 to 9.2.0 (#122)
  • 562069a [chore] : Bump actions/checkout from 6.0.0 to 6.0.2 (#125)
  • 010cd61 [chore] : Bump actions/setup-go from 6.0.0 to 6.2.0 (#124)
  • 61f1983 [chore] : Bump actions/upload-artifact from 5.0.0 to 6.0.0 (#123)
  • ee482b7 [chore] : Bump actions/checkout from 5.0.0 to 6.0.0 (#118)
  • 5e27ec8 Merge pull request #116 from hashicorp/compliance/update-headers
  • Additional commits viewable in compare view

Updates github.com/hashicorp/vault/api from 1.22.0 to 1.23.0

Commits
  • d430306 Merge remote-tracking branch 'remotes/from/ce/main'
  • a3bc0a3 (enos): Add LDAP secrets engine blackbox tests to Plugin Scenario (#13072) (#...
  • f8df539 Merge remote-tracking branch 'remotes/from/ce/main'
  • 2b0ec25 VAULT-43444 Addressed races in tests (#13278) (#13285)
  • a097d1f Merge remote-tracking branch 'remotes/from/ce/main'
  • 7e587fd Update vault-plugin-auth-kubernetes to v0.24.1 (#13259) (#13287)
  • 1331818 UI: Fix namespace search showing empty state when namespaces exist (#13257) (...
  • 7b12feb Merge remote-tracking branch 'remotes/from/ce/main'
  • 7d4395c Update vault-plugin-auth-jwt to v0.26.1 (#13242) (#13283)
  • 6d4b615 adds flag to fix chrome in ci (#13279) (#13282)
  • Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.8.0 to 5.9.1

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.9.1 (March 22, 2026)

  • Fix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)

5.9.0 (March 21, 2026)

This release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and PostgreSQL protocol 3.2 support.

It significantly reduces the amount of network traffic when using prepared statements (which are used automatically by default) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.

It also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends deliberately malformed messages.

  • Require Go 1.25+
  • Add SCRAM-SHA-256-PLUS support (Adam Brightwell)
  • Add OAuth authentication support for PostgreSQL 18 (David Schneider)
  • Add PostgreSQL protocol 3.2 support (Dirkjan Bussink)
  • Add tsvector type support (Adam Brightwell)
  • Skip Describe Portal for cached prepared statements reducing network round trips
  • Make LoadTypes query easier to support on "postgres-like" servers (Jelte Fennema-Nio)
  • Default empty user to current OS user matching libpq behavior (ShivangSrivastava)
  • Optimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)
  • Optimize date scanning by replacing regex with manual parsing (Mathias Bogaert)
  • Optimize pgio append/set functions with direct byte shifts (Mathias Bogaert)
  • Make RowsAffected faster (Abhishek Chanda)
  • Fix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)
  • Fix: ContextWatcher goroutine leak (Hank Donnay)
  • Fix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)
  • Fix: pipelineBatchResults.Exec silently swallowing lastRows error
  • Fix: ColumnTypeLength using BPCharArrayOID instead of BPCharOID
  • Fix: TSVector text encoding returning nil for valid empty tsvector
  • Fix: wrong error messages for Int2 and Int4 underflow
  • Fix: Numeric nil Int pointer dereference with Valid: true
  • Fix: reversed strings.ContainsAny arguments in Numeric.ScanScientific
  • Fix: message length parsing on 32-bit platforms
  • Fix: FunctionCallResponse.Decode mishandling of signed result size
  • Fix: returning wrong error in configTLS when DecryptPEMBlock fails (Maxim Motyshen)
  • Fix: misleading ParseConfig error when default_query_exec_mode is invalid (Skarm)
  • Fix: missed Unwatch in Pipeline error paths
  • Clarify too many failed acquire attempts error message
  • Better error wrapping with context and SQL statement (Aneesh Makala)
  • Enable govet and ineffassign linters (Federico Guerinoni)
  • Guard against various malformed binary messages (arrays, hstore, multirange, protocol messages)
  • Fix various godoc comments (ferhat elmas)
  • Fix typos in comments (Oleksandr Redko)
Commits
  • 4e4eaed Release v5.9.1
  • 6273188 Fix batch result format corruption when using cached prepared statements
  • f7b90c2 Merge pull request #2524 from dbussink/pipeline-result-format-reuse
  • 3ce6d75 Add failing test: batch scan corrupted in cache_statement mode
  • b4d8e62 Release v5.9.0
  • c227cd4 Bump minimum Go version from 1.24 to 1.25
  • f492c14 Use reflect.TypeFor instead of reflect.TypeOf for static types
  • ad8fb08 Use sync.WaitGroup.Go to simplify goroutine spawning
  • 3033773 Remove go1.26 build tag from synctest test
  • 83ffb3c Validate multirange element count against source length before allocating
  • Additional commits viewable in compare view

Updates github.com/lib/pq from 1.11.2 to 1.12.0

Release notes

Sourced from github.com/lib/pq's releases.

v1.12.0

  • The next release may change the default sslmode from require to prefer. See #1271 for details.

  • CopyIn() and CopyInToSchema() have been marked as deprecated. These are simple query builders and not needed for COPY [..] FROM STDIN support (which is not deprecated). (#1279)

    // Old
tx.Prepare(CopyIn("temp", "num", "text", "blob", "nothing"))

    // Replacement
tx.Prepare(copy temp (num, text, blob, nothing) from stdin)

Features

  • Support protocol 3.2, and the min_protocol_version and max_protocol_version DSN parameters (#1258).

  • Support sslmode=prefer and sslmode=allow (#1270).

  • Support ssl_min_protocol_version and ssl_max_protocol_version (#1277).

  • Support connection service file to load connection details (#1285).

  • Support sslrootcert=system and use ~/.postgresql/root.crt as the default value of sslrootcert (#1280, #1281).

  • Add a new pqerror package with PostgreSQL error codes (#1275).

    For example, to test if an error is a UNIQUE constraint violation:

    if pqErr, ok := errors.AsType[*pq.Error](https://github.com/lib/pq/blob/HEAD/err); ok && pqErr.Code == pqerror.UniqueViolation {
    log.Fatalf("email %q already exsts", email)
}

    To make this a bit more convenient, it also adds a pq.As() function:

    pqErr := pq.As(err, pqerror.UniqueViolation)
if pqErr != nil {
    log.Fatalf("email %q already exsts", email)
}

Fixes

  • Fix SSL key permission check to allow modes stricter than 0600/0640 (#1265).

  • Fix Hstore to work with binary parameters (#1278).

  • Clearer error when starting a new query while pq is still processing another query (#1272).

  • Send intermediate CAs with client certificates, so they can be signed by an intermediate CA (#1267).

  • Use time.UTC for UTC aliases such as Etc/UTC (#1283).

... (truncated)

Changelog

Sourced from github.com/lib/pq's changelog.

v1.12.0 (2026-03-18)

  • The next release may change the default sslmode from require to prefer. See #1271 for details.

  • CopyIn() and CopyInToSchema() have been marked as deprecated. These are simple query builders and not needed for COPY [..] FROM STDIN support (which is not deprecated). (#1279)

    // Old
tx.Prepare(CopyIn("temp", "num", "text", "blob", "nothing"))

    // Replacement
tx.Prepare(copy temp (num, text, blob, nothing) from stdin)

Features

  • Support protocol 3.2, and the min_protocol_version and max_protocol_version DSN parameters (#1258).

  • Support sslmode=prefer and sslmode=allow (#1270).

  • Support ssl_min_protocol_version and ssl_max_protocol_version (#1277).

  • Support connection service file to load connection details (#1285).

  • Support sslrootcert=system and use ~/.postgresql/root.crt as the default value of sslrootcert (#1280, #1281).

  • Add a new pqerror package with PostgreSQL error codes (#1275).

    For example, to test if an error is a UNIQUE constraint violation:

    if pqErr, ok := errors.AsType[*pq.Error](https://github.com/lib/pq/blob/master/err); ok && pqErr.Code == pqerror.UniqueViolation {
    log.Fatalf("email %q already exsts", email)
}

    To make this a bit more convenient, it also adds a pq.As() function:

    pqErr := pq.As(err, pqerror.UniqueViolation)
if pqErr != nil {
    log.Fatalf("email %q already exsts", email)
}

Fixes

  • Fix SSL key permission check to allow modes stricter than 0600/06400600 (#1265).

  • Fix Hstore to work with binary parameters (#1278).

... (truncated)

Commits
  • 42ab0ff Change default sslmode from "require" to "prefer"
  • 6d40f13 Release v1.12.0
  • 386fc0e Document NULL behaviour with COPY
  • a62682e Better staticcheck cache 2
  • 87ee06c Better staticcheck cache
  • 0962458 Rewrite tests to use pqerror, pq.As()
  • 0d20981 Don't move pq.Error to pqerror.Error
  • 4332138 Add pqerror package
  • 620d6d5 Make tests run faster
  • dc8ff5d Implement connection service file
  • Additional commits viewable in compare view

Updates github.com/zalando/go-keyring from 0.2.6 to 0.2.8

Release notes

Sourced from github.com/zalando/go-keyring's releases.

v0.2.8

What's Changed

Full Changelog: zalando/go-keyring@v0.2.7...v0.2.8

v0.2.7

What's Changed

New Contributors

Full Changelog: zalando/go-keyring@v0.2.6...v0.2.7

Commits
  • a8cdfe3 Merge pull request #141 from zalando/gh/hardening-workflows
  • d4162d9 gh: hardening workflows
  • e0dd98f Merge pull request #140 from zalando/dependabot/go_modules/all-go-mod-patch-a...
  • 98f9091 Merge pull request #139 from zalando/dependabot/github_actions/actions/setup-...
  • 40806c2 Merge pull request #138 from zalando/dependabot/github_actions/actions/checko...
  • 1d4d07c Bump the all-go-mod-patch-and-minor group with 2 updates
  • e6c0d8a Bump actions/setup-go from 5 to 6
  • 0151d30 Bump actions/checkout from 4 to 6
  • d6ac580 Merge pull request #137 from zalando/security/gh-actions
  • 036041f security: GH Actions should be able read only
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.48.0 to 0.49.0

Commits
  • 982eaa6 go.mod: update golang.org/x dependencies
  • 159944f ssh,acme: clean up tautological/impossible nil conditions
  • a408498 acme: only require prompt if server has terms of service
  • cab0f71 all: upgrade go directive to at least 1.25.0 [generated]
  • 2f26647 x509roots/fallback: update bundle
  • See full diff in compare view

Updates golang.org/x/net from 0.49.0 to 0.51.0

Commits
  • 60b3f6f internal/http3: prevent Server handler from writing longer body than declared
  • b0ca456 internal/http3: fix Write in Server Handler returning the wrong value
  • 1558ba7 publicsuffix: update to 2026-02-06
  • 4e1c745 internal/http3: make Server response include headers that can be inferred
  • 19f580f http2: fix nil panic in typeFrameParser for unassigned frame types
  • 818aad7 internal/http3: add server to client trailer header support
  • c1bbe1a internal/http3: add client to server trailer header support
  • 29181b8 all: remove go1.25 and older build constraints
  • 8109305 all: upgrade go directive to at least 1.25.0 [generated]
  • 0b37bdf quic: don't run TestStreamsCreateConcurrency in synctest bubble
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.19.0 to 0.20.0

Commits
  • ec11c4a errgroup: fix a typo in the documentation
  • 1a58307 all: modernize interface{} -> any
  • 3172ca5 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates golang.org/x/sys from 0.41.0 to 0.42.0

Commits
  • eaaaaee windows/registry: correct KeyInfo.ModTime calculation
  • 942780b cpu: darwin/arm64 feature detection
  • acef388 unix/linux: Prefixmsg and PrefixCacheinfo structs
  • 3687fbd cpu: better defaults on darwin ARM64
  • 48062e9 plan9: change Note to alias syscall.Note
  • 4f23f80 windows: change Signal to alias syscall.Signal
  • 7548802 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates golang.org/x/term from 0.40.0 to 0.41.0

Commits
  • 9d2dc07 go.mod: update golang.org/x dependencies
  • d954e03 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates golang.org/x/text from 0.34.0 to 0.35.0

Commits
  • 7ca2c6d go.mod: update golang.org/x dependencies
  • 73d1ba9 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates golang.org/x/tools from 0.41.0 to 0.42.0

Commits
  • 009367f go.mod: update golang.org/x dependencies
  • 2182926 go/ast/inspector: add Cursor.ParentEdge{Kind,Index} methods
  • 27020ac internal/server: add module upgrade pathway after vulncheck scanning
  • c4ec0f5 internal/server: list vulnerabilities within vulncheck prompt
  • 80d1715 gopls/internal/protocol: add document uri field type
  • 0e23509 gopls/doc: update link to Acme LSP plugin
  • 7b3ed75 gopls/internal/server: respect SemanticTokens option during initialization
  • fddd4a6 gopls/filecache: prevent premature CAS file eviction
  • e3a69ff gopls/internal/golang: refactor.inline.variable: add parens
  • 955d132 gopls/internal/golang: migrate pkgdoc to cursor
  • Additional commits viewable in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.8 to 2.28.0

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.28.0

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.8...v2.28.0

Commits
  • 13a31f4 fix(protoc-gen-openapiv2): fix panic on enum resolution in nested messages (#...
  • 8e678ff chore(deps): update googleapis digest to 27ffde2 (#6369)
  • 41651ff chore(deps): update googleapis digest to b026ba8 (#6368)
  • d083140 chore(deps): update googleapis digest to 537554c (#6365)
  • eb2fada chore(deps): update googleapis digest to 7b25d8c (#6364)
  • d8dddc9 chore(deps): update googleapis digest to 6781051 (#6363)
  • 3c4354f chore(deps): update googleapis digest to 055f92c (#6362)
  • b2eb1b5 fix(deps): update module google.golang.org/grpc to v1.79.1 (#6361)
  • 61b9d73 chore(deps): update googleapis digest to d84d3c2 (#6360)
  • e0880e3 chore(deps): update googleapis digest to 6eead6e (#6359)
  • Additional commits viewable in compare view

Updates github.com/hashicorp/boundary/sdk from 0.0.56 to 0.0.58

Commits

Updates golang.org/x/time from 0.14.0 to 0.15.0

Commits
  • 812b343 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates github.com/hashicorp/boundary/sdk from 0.0.56 to 0.0.58

Commits

Updates github.com/hashicorp/boundary/sdk from 0.0.56 to 0.0.58

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 24, 2026
@dependabot dependabot Bot requested a review from a team as a code owner March 24, 2026 14:35
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 24, 2026
@github-actions github-actions Bot added the api label Mar 24, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/go-6904bc859d branch from 0aeb3b1 to 7be48c0 Compare March 24, 2026 15:51
@dependabot
chore(deps): bump the go group across 3 directories with 17 updates
b4e08ec 
Bumps the go group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/fatih/color](https://github.com/fatih/color) | `1.18.0` | `1.19.0` |
| [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap) | `3.4.12` | `3.4.13` |
| [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.27.8` | `2.28.0` |
| [github.com/hashicorp/go-bexpr](https://github.com/hashicorp/go-bexpr) | `0.1.15` | `0.1.16` |
| [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault) | `1.22.0` | `1.23.0` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.8.0` | `5.9.1` |
| [github.com/lib/pq](https://github.com/lib/pq) | `1.11.2` | `1.12.0` |
| [github.com/zalando/go-keyring](https://github.com/zalando/go-keyring) | `0.2.6` | `0.2.8` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.48.0` | `0.49.0` |

Bumps the go group with 2 updates in the /api directory: [github.com/hashicorp/boundary/sdk](https://github.com/hashicorp/boundary) and [golang.org/x/time](https://github.com/golang/time).
Bumps the go group with 1 update in the /sdk directory: [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway).


Updates `github.com/fatih/color` from 1.18.0 to 1.19.0
- [Release notes](https://github.com/fatih/color/releases)
- [Commits](fatih/color@v1.18.0...v1.19.0)

Updates `github.com/go-ldap/ldap/v3` from 3.4.12 to 3.4.13
- [Release notes](https://github.com/go-ldap/ldap/releases)
- [Commits](go-ldap/ldap@v3.4.12...v3.4.13)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.8 to 2.28.0
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Commits](grpc-ecosystem/grpc-gateway@v2.27.8...v2.28.0)

Updates `github.com/hashicorp/go-bexpr` from 0.1.15 to 0.1.16
- [Release notes](https://github.com/hashicorp/go-bexpr/releases)
- [Changelog](https://github.com/hashicorp/go-bexpr/blob/main/CHANGELOG.md)
- [Commits](hashicorp/go-bexpr@v0.1.15...v0.1.16)

Updates `github.com/hashicorp/vault/api` from 1.22.0 to 1.23.0
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG-v1.10-v1.15.md)
- [Commits](hashicorp/vault@api/v1.22.0...api/v1.23.0)

Updates `github.com/jackc/pgx/v5` from 5.8.0 to 5.9.1
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.8.0...v5.9.1)

Updates `github.com/lib/pq` from 1.11.2 to 1.12.0
- [Release notes](https://github.com/lib/pq/releases)
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md)
- [Commits](lib/pq@v1.11.2...v1.12.0)

Updates `github.com/zalando/go-keyring` from 0.2.6 to 0.2.8
- [Release notes](https://github.com/zalando/go-keyring/releases)
- [Commits](zalando/go-keyring@v0.2.6...v0.2.8)

Updates `golang.org/x/crypto` from 0.48.0 to 0.49.0
- [Commits](golang/crypto@v0.48.0...v0.49.0)

Updates `golang.org/x/net` from 0.49.0 to 0.51.0
- [Commits](golang/net@v0.49.0...v0.51.0)

Updates `golang.org/x/sync` from 0.19.0 to 0.20.0
- [Commits](golang/sync@v0.19.0...v0.20.0)

Updates `golang.org/x/sys` from 0.41.0 to 0.42.0
- [Commits](golang/sys@v0.41.0...v0.42.0)

Updates `golang.org/x/term` from 0.40.0 to 0.41.0
- [Commits](golang/term@v0.40.0...v0.41.0)

Updates `golang.org/x/text` from 0.34.0 to 0.35.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.34.0...v0.35.0)

Updates `golang.org/x/tools` from 0.41.0 to 0.42.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.41.0...v0.42.0)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.8 to 2.28.0
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Commits](grpc-ecosystem/grpc-gateway@v2.27.8...v2.28.0)

Updates `github.com/hashicorp/boundary/sdk` from 0.0.56 to 0.0.58
- [Release notes](https://github.com/hashicorp/boundary/releases)
- [Changelog](https://github.com/hashicorp/boundary/blob/main/CHANGELOG.md)
- [Commits](api/v0.0.56...api/v0.0.58)

Updates `golang.org/x/time` from 0.14.0 to 0.15.0
- [Commits](golang/time@v0.14.0...v0.15.0)

Updates `github.com/hashicorp/boundary/sdk` from 0.0.56 to 0.0.58
- [Release notes](https://github.com/hashicorp/boundary/releases)
- [Changelog](https://github.com/hashicorp/boundary/blob/main/CHANGELOG.md)
- [Commits](api/v0.0.56...api/v0.0.58)

Updates `github.com/hashicorp/boundary/sdk` from 0.0.56 to 0.0.58
- [Release notes](https://github.com/hashicorp/boundary/releases)
- [Changelog](https://github.com/hashicorp/boundary/blob/main/CHANGELOG.md)
- [Commits](api/v0.0.56...api/v0.0.58)

Updates `github.com/hashicorp/boundary/sdk` from 0.0.56 to 0.0.58
- [Release notes](https://github.com/hashicorp/boundary/releases)
- [Changelog](https://github.com/hashicorp/boundary/blob/main/CHANGELOG.md)
- [Commits](api/v0.0.56...api/v0.0.58)

Updates `github.com/hashicorp/boundary/sdk` from 0.0.56 to 0.0.58
- [Release notes](https://github.com/hashicorp/boundary/releases)
- [Changelog](https://github.com/hashicorp/boundary/blob/main/CHANGELOG.md)
- [Commits](api/v0.0.56...api/v0.0.58)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.8 to 2.28.0
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Commits](grpc-ecosystem/grpc-gateway@v2.27.8...v2.28.0)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.8 to 2.28.0
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Commits](grpc-ecosystem/grpc-gateway@v2.27.8...v2.28.0)

---
updated-dependencies:
- dependency-name: github.com/fatih/color
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/go-ldap/ldap/v3
  dependency-version: 3.4.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/hashicorp/go-bexpr
  dependency-version: 0.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/hashicorp/vault/api
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/lib/pq
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/zalando/go-keyring
  dependency-version: 0.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: golang.org/x/crypto
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/net
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/sync
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/sys
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/term
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/text
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/tools
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/hashicorp/boundary/sdk
  dependency-version: 0.0.58
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: golang.org/x/time
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/hashicorp/boundary/sdk
  dependency-version: 0.0.58
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/hashicorp/boundary/sdk
  dependency-version: 0.0.58
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/hashicorp/boundary/sdk
  dependency-version: 0.0.58
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/hashicorp/boundary/sdk
  dependency-version: 0.0.58
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/go-6904bc859d branch from 7be48c0 to b4e08ec Compare March 29, 2026 10:16
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 5, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 5, 2026
@dependabot dependabot Bot deleted the dependabot/go_modules/go-6904bc859d branch April 5, 2026 10:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

api dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants