Bump the go-deps group across 1 directory with 16 updates by dependabot[bot] · Pull Request #11 · useblacksmith/bazel-remote

dependabot · 2026-07-10T18:15:16Z

Bumps the go-deps group with 12 updates in the / directory:

Package	From	To
github.com/klauspost/compress	`1.17.8`	`1.19.0`
github.com/minio/minio-go/v7	`7.0.72`	`7.2.1`
github.com/prometheus/client_golang	`1.19.0`	`1.23.2`
github.com/slok/go-http-metrics	`0.11.0`	`0.13.0`
github.com/urfave/cli/v2	`2.27.1`	`2.27.7`
golang.org/x/oauth2	`0.34.0`	`0.36.0`
golang.org/x/sync	`0.20.0`	`0.22.0`
google.golang.org/grpc	`1.79.3`	`1.82.1`
github.com/Azure/azure-sdk-for-go/sdk/azcore	`1.11.1`	`1.22.0`
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob	`0.4.1`	`1.8.0`
github.com/johannesboyne/gofakes3	`0.0.0-20230506070712-04da935ef877`	`1.2.0`
github.com/valyala/gozstd	`1.20.1`	`1.25.0`

Updates github.com/klauspost/compress from 1.17.8 to 1.19.0

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.19.0

What's Changed

zstd: Add true concurrent stream encoding by @klauspost in klauspost/compress#1136

zstd: arm64 decoder asm by @lizthegrey in klauspost/compress#1160

zstd: avoid unused BuildDict encoder allocation by @snissn in klauspost/compress#1147

flate: Add inflate checkpoints by @klauspost in klauspost/compress#1154

snappy/s2: Limit length of varint in decodedLen by @eustas in klauspost/compress#1148

gzhttp: match qvalue parameter case-insensitively (RFC 7231) by @z9z in klauspost/compress#1149

zip: add NameDecoder callback for legacy encoding rewrite by @SAY-5 in klauspost/compress#1150

huff0: Allow building tables from histogram. by @klauspost in klauspost/compress#1155

huff0: Allow building table from oversized histogram. by @klauspost in klauspost/compress#1156

s2sx: Clean symlink targets by @klauspost in klauspost/compress#1163

New Contributors

@snissn made their first contribution in klauspost/compress#1147

@eustas made their first contribution in klauspost/compress#1148

@z9z made their first contribution in klauspost/compress#1149

@SAY-5 made their first contribution in klauspost/compress#1150

@HNO3Miracle made their first contribution in klauspost/compress#1165

Full Changelog: klauspost/compress@v1.18.6...v1.19.0

v1.18.7

Fix s2.NewDict OOB read.

Security release without other changes.

Full Changelog: klauspost/compress@v1.18.6...v1.18.7

v1.18.6

What's Changed

s2: Fix amd64 stack frame corruption by @klauspost in klauspost/compress#1145

gzhttp: Canonicalize ETag header by @justinmayhew in klauspost/compress#1139

perf: pool hash tables in Go encode paths to reduce allocations by @huynhanx03 in klauspost/compress#1143

New Contributors

@justinmayhew made their first contribution in klauspost/compress#1139

@huynhanx03 made their first contribution in klauspost/compress#1143

@thaJeztah made their first contribution in klauspost/compress#1144

Full Changelog: klauspost/compress@v1.18.5...v1.18.6

v1.18.5

What's Changed

zstd: Fix crash when changing encoder dictionary with same ID by @klauspost in klauspost/compress#1135

zstd: Default to full zero frames by @klauspost in klauspost/compress#1134

flate: Clean up histogram order by @klauspost in klauspost/compress#1133

... (truncated)

Commits

f0953f9 flate: fix buffer formatting in tests (#1165)
ab2e3cc zstd: Add arm64 decoder asm (#1160)
bb2723d Merge commit from fork
539243b s2sx: Clean symlink targets (#1163)
bd9228c Apply go fix and check in CI (#1158)
4cc176c zstd: Add true concurrent stream encoding (#1136)
4705fcb build(deps): bump the github-actions group with 3 updates (#1157)
e9c2e56 huff0: Allow building table from oversized histogram. (#1156)
ecdb779 huff0: Allow building tables from histogram. (#1155)
38efa45 zip: add NameDecoder callback for legacy encoding rewrite (#1150)
Additional commits viewable in compare view

Updates github.com/minio/minio-go/v7 from 7.0.72 to 7.2.1

Release notes

Sourced from github.com/minio/minio-go/v7's releases.

v7.2.0

What's Changed

Use go tool for ci-lint check by @klauspost in minio/minio-go#2229

Rename github.com/go-ini/ini to gopkg.in/ini.v1 by @ramondeklein in minio/minio-go#2232

Add RDMA / NVIDIA GPU Direct Storage support by @harshavardhana in minio/minio-go#2233

Full Changelog: minio/minio-go@v7.1.0...v7.2.0

Release v7.1.0

What's Changed

GetObjectAttributes: Add missing checksum & type by @klauspost in minio/minio-go#2217

support x-minio-source-time header for getobject / statObject by @jiuker in minio/minio-go#2219

Add new AWS checksums by @klauspost in minio/minio-go#2221

Full Changelog: minio/minio-go@v7.0.100...v7.1.0

v7.0.98

What's Changed

Only marshal lifecycle rule Filter XML when not empty by @amigan in minio/minio-go#2177

Add post-call checks on AppendObject by @klauspost in minio/minio-go#2178

Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v3 by @emike922 in minio/minio-go#2182

Support GCS bulk delete with serialized single DELETE requests by @harshavardhana in minio/minio-go#2185

Add automatic checksum test by @klauspost in minio/minio-go#2184

Fix wrong checksum type field name by @klauspost in minio/minio-go#2188

Upgrade dependencies, remove toolchain by @klauspost in minio/minio-go#2189

Increase max object size to ~48.83TiB (5GiB * 10000 parts) by @harshavardhana in minio/minio-go#2190

Add generic Set[T comparable] implementation to pkg/set by @harshavardhana in minio/minio-go#2192

Refactor: Use pkg/set types for internal set collections by @harshavardhana in minio/minio-go#2193

New Contributors

@amigan made their first contribution in minio/minio-go#2177

@emike922 made their first contribution in minio/minio-go#2182

Full Changelog: minio/minio-go@v7.0.97...v7.0.98

Bugfix Release

What's Changed

test: add test for PresignedPostPolicy with empty fileName by @jiuker in minio/minio-go#2119

fix: prefix should use stringLike when new a bucketPolicy (2) by @mannreis in minio/minio-go#2124

update all deps by @harshavardhana in minio/minio-go#2125

set checksum headers requested properly by @harshavardhana in minio/minio-go#2130

fix: missing append() API behavior by @harshavardhana in minio/minio-go#2131

extend more missing headers for PartUploads by @harshavardhana in minio/minio-go#2132

fix: explicitly use UTC for expiration field when marshaling PostPolicy by @qwwqe in minio/minio-go#2135

fix: DurationSeconds is a QueryValues not a Form data (#2128) by @vlaborie in minio/minio-go#2129

make sure to avoid closing the input reader by @harshavardhana in minio/minio-go#2137

New Contributors

... (truncated)

Commits

7e34713 feat: support in mc inventory for custom run schedule (#2244)
016d0fd feat: stream GetObjectAnnotation payload via io.ReadCloser (#2243)
6c51637 feat: stream PutObjectAnnotation payload via io.ReadSeeker (#2242)
07c682a feat: add object annotation client APIs (#2241)
53b504a fix: caching defer bug (#2237)
291e83f add new aws region ap-southeast-6 (#2234)
33792ec Add RDMA / NVIDIA GPU Direct Storage support (#2233)
6bb13f7 Rename github.com/go-ini/ini to gopkg.in/ini.v1 (#2232)
d6341dc Use go tool for ci-lint check (#2229)
f29e568 Add new AWS checksums (#2221)
Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.19.0 to 1.23.2

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.2 - 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

[release-1.23] Upgrade to prometheus/common@v0.66.1 by @aknuds1 in prometheus/client_golang#1869

[release-1.23] Cut v1.23.2 by @aknuds1 in prometheus/client_golang#1870

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1 - 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

[release-1.23] Upgrade to prometheus/common v0.66 by @aknuds1 in prometheus/client_golang#1866

[release-1.23] Cut v1.23.1 by @aknuds1 in prometheus/client_golang#1867

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

v1.23.0 - 2025-07-30

[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812

[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766

[FEATURE] Add exemplars for native histograms #1686

[ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823

[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833

[BUGFIX] exp/api: client prompt return on context cancellation #1729

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

1.23.0 / 2025-07-30

[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812

[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766

[FEATURE] Add exemplars for native histograms #1686

[ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823

[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833

[BUGFIX] exp/api: client prompt return on context cancellation #1729

1.22.0 / 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:
import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
[FEATURE] prometheus: Add new CollectorFunc utility #1724

[CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738

[FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743

[CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

1.21.1 / 2025-03-04

[BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low contention cases.

[BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags.

1.21.0 / 2025-02-17

⚠️ This release contains potential breaking change if you upgrade github.com/prometheus/common to 0.62+ together with client_golang. ⚠️

... (truncated)

Commits

8179a56 Cut v1.23.2 (#1870)
4142b59 Merge pull request #1869 from prometheus/arve/upgrade-common
4ff40f0 Cut v1.23.1 (#1867)
989b029 Upgrade to prometheus/common v0.66 (#1866)
e4b2208 Cut v1.23.0 (#1848)
d9492af cut v1.23.0-rc.1 (#1842)
aeae8a0 Cut v1.23.0-rc.0 (#1837)
b157309 Update common Prometheus files (#1832)
a704e28 build(deps): bump the github-actions group with 3 updates (#1826)
c774311 Fix errNotImplemented reference (#1835)
Additional commits viewable in compare view

Updates github.com/slok/go-http-metrics from 0.11.0 to 0.13.0

Release notes

Sourced from github.com/slok/go-http-metrics's releases.

v0.13.0

0.13.0 - 2024-09-05

Added

Added IgnoredPaths option to ignore measuring specific exact paths.

Changed

Dependency updates.

Use Go 1.23.

v0.12.0

0.12.0 - 2024-04-19

Changed

Gin middleware now records the path using the regex from FullPath() instead of the real URL, avoiding cardinality explosion.

Dependency updates.

Use Go 1.22.

Changelog

Sourced from github.com/slok/go-http-metrics's changelog.

[0.13.0] - 2024-09-05

Added

Added IgnoredPaths option to ignore measuring specific exact paths.

Changed

Dependency updates.

Use Go 1.23.

[0.12.0] - 2024-04-19

Changed

Gin middleware now records the path using the regex from FullPath() instead of the real URL, avoiding cardinality explosion.

Dependency updates.

Use Go 1.22.

Commits

dab00f5 Bump v0.13.0
b266f85 Merge pull request #229 from slok/update-deps-20240905
85d2360 Update deps
d7e6c4e Merge pull request #228 from slok/slok/improve-ux-ignore-paths
5cb9780 Improve UX of ignore paths
8005104 Merge pull request #111 from angristan/skip-paths
764140e Use map instead of list, and add test
3bddbe2 Merge pull request #220 from slok/slok/v0120
7a7d132 Prepare for v0.12.0
bafadc8 Merge pull request #219 from slok/slok/deps
Additional commits viewable in compare view

Updates github.com/urfave/cli/v2 from 2.27.1 to 2.27.7

Release notes

Sourced from github.com/urfave/cli/v2's releases.

v2.27.7

What's Changed

Update dependencies in v2 series by @meatballhat in urfave/cli#2159

Full Changelog: urfave/cli@v2.27.6...v2.27.7

v2.27.6

What's Changed

Use usage template in subcommand help by @meatballhat in urfave/cli#1986

Docs: Update cli.yml by @dearchap in urfave/cli#2015

Fix:(issue_2069) Add sep for string slice by @dearchap in urfave/cli#2070

Full Changelog: urfave/cli@v2.27.5...v2.27.6

v2.27.5

What's Changed

docs(flag): add UseShortOptionHandling description by @BlackHole1 in urfave/cli#1956

[Backport] Fix: Use $0 env var to correctly retrieve the current active shell by @asahasrabuddhe in urfave/cli#1970

Update dependencies in v2-maint by @meatballhat in urfave/cli#1980

Full Changelog: urfave/cli@v2.27.4...v2.27.5

v2.27.4

What's Changed

Fix:(issue_1962) Fix tests failing on 32 bit architectures by @dearchap in urfave/cli#1963

Full Changelog: urfave/cli@v2.27.3...v2.27.4

v2.27.3

What's Changed

v2 Docs: Mention value from env as default value by @sj14 in urfave/cli#1910

Bump github.com/xrash/smetrics dependency by @elezar in urfave/cli#1911

fix: disable bash completion if double dash is included in arguments (v2) by @suzuki-shunsuke in urfave/cli#1938

Fix improper whitespace formatting in usageTemplate, AppHelpTemplate … by @caeret in urfave/cli#1947

New Contributors

@sj14 made their first contribution in urfave/cli#1910

@elezar made their first contribution in urfave/cli#1911

@caeret made their first contribution in urfave/cli#1947

Full Changelog: urfave/cli@v2.27.2...v2.27.3

v2.27.2

What's Changed

Cleanup: Remove unnecessary intermediate variables by @1ambd4 in urfave/cli#1857

Docs:(issue_1866) Fix documentation on filepath vs env preference by @dearchap in urfave/cli#1867

... (truncated)

Commits

19b951a Merge pull request #2159 from urfave/v2-deps-up
dd134b5 Update dependencies in v2 series
347cd02 Merge pull request #2157 from urfave/v2-not-dependabot
0acf2e4 Dependabot does not work like this (v2)
c7bc0a9 Merge pull request #2154 from urfave/v2-dependabot-maybe
6ec0368 Is this file needed on each release branch? (v2)
9d76d15 Merge pull request #2070 from dearchap/issue_2069
4abc9c3 Fix:(issue_2069) Add sep for string slice
3b17080 Merge pull request #2015 from urfave/update_docs_v2
1e15e30 Update cli.yml
Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.34.0 to 0.36.0

Commits

4d954e6 all: upgrade go directive to at least 1.25.0 [generated]
89ff2e1 google: add safer credentials JSON loading options.
See full diff in compare view

Updates golang.org/x/sync from 0.20.0 to 0.22.0

Commits

1eb64d4 semaphore: panic on negative weights
5071ed6 all: fix some comments to improve readability
See full diff in compare view

Updates google.golang.org/grpc from 1.79.3 to 1.82.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.1

Security

server: Stop reading from the connection when flooded by HTTP/2 frames. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.

xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.

xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.

xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.

Release 1.82.0

Behavior Changes

server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)

transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)

balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)

Special Thanks: @seth-epps

client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)

Special Thanks: @chengxilo

server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)

Special Thanks: @dfinkel

Bug Fixes

xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)

grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)

Special Thanks: @evilgensec

stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)

encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#9135)

channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#9109)

Release 1.81.1

Security

xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)

Special Thanks: @al4an444

Bug Fixes

otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)

Release 1.81.0

Behavior Changes

balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#8808)

Dependencies

... (truncated)

Commits

ebd8f06 Change version to 1.82.1 (#9238)
4ea465d Cherry-pick commits (#9236)
9494a2c Change version to 1.82.1-dev (#9171)
bd23985 Change version to 1.82.0 (#9170)
0f3086d Fix minor issues not covered by PR #9137 (#9147)
fef07fb internal: Split v3procservicepb import into pb and grpc for extproc (#9163)
91dd64f transport: surface subsequent data when receiving non-gRPC header (#8929)
adc97de test/kokoro: add config for regional-td test (#9158)
57c9ff1 xds: ensure full-string matching for RBAC Filter rules (#9148)
b58f32d server: Set a pprof label on new stream goroutines (#9082)
Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.36.10 to 1.36.11

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.11.1 to 1.22.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azidentity/v1.14.0

1.14.0 (2026-06-15)

Breaking Changes

These changes affect only code written against a beta version such as v1.14.0-beta.3

Removed WorkloadIdentityCredentialOptions.EnableAzureProxy. It will return in v1.15.0-beta.1

Bugs Fixed

AzureDeveloperCLICredential improved reporting of error messages returned from azd

Other Changes

Returned azidentity errors include links to the troubleshooting guide when appropriate

This module now requires a minimum Go version of 1.25

Upgraded dependencies

Commits

a19f613 Prep azcore@v1.22.0 for release (#26926)
5803c0e Increment package version after release of storage/azblob (#26935) (#26943)
9a979ff [Automation] Regenerate SDK based on typespec-go branch main 【batch 6】 (#26939)
711094d eng/tools/generator: release v0.4.14 (#26934)
20bd677 Deprecate Change Analysis SDK (#26913)
92a31ec [Automation] Regenerate SDK based on typespec-go branch main 【batch 5】 (#26932)
768459d azcertificates: live recording for PlatformManaged + review fixes (follow-up ...
e845f72 Update codeowners (#26918)
118bb35 eng/tools/internal/exports: handle untyped const with selector expr value (#2...
2b3767b Configurations: 'specification/containerservice/resource-manager/Microsoft.C...
Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.6.0 to 1.13.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/storage/azblob/v1.8.0

1.8.0 (2026-06-15)

Features Added

Includes all features from 1.8.0-beta.1 and 1.8.0-beta.2

sdk/storage/azfile/v1.7.0

1.7.0 (2026-06-15)

Features Added

Includes all features from 1.7.0-beta.1

Commits

6bb9b03 azidentity v1.13.1 (#25574)
e18dbd7 Increment package version after release of azidentity (#25367)
4f0facc Prepare azidentity v1.13.0 for release (#25352)
2d8c98b Selecting ManagedIdentityCredential disables DefaultAzureCredential's IMDS pr...
67dd4fc Increment package version after release of azidentity (#25263)
1a74bc8 Prepare azidentity v1.12.0 for release (#25231)
839a355 Test IMDS managed identity with a remote VM (#25237)
c352be3 Sync eng/common directory with azure-sdk-tools for PR 11931 (#25243)
c994eca gofmt (#25234)
9c95d95 [Release] sdk/resourcemanager/computefleet/armcomputefleet/2.0.0-beta.1 gener...
Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 0.4.1 to 1.8.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/storage/azblob's releases.

sdk/storage/azblob/v1.8.0

1.8.0 (2026-06-15)

Features Added

Includes all features from 1.8.0-beta.1 and 1.8.0-beta.2

sdk/storage/azfile/v1.7.0

1.7.0 (2026-06-15)

Features Added

Includes all features from 1.7.0-beta.1

sdk/storage/azdatalake/v1.6.0

1.6.0 (2026-06-15)

Features Added

Includes all features from 1.6.0-beta.1

sdk/security/keyvault/azkeys/v1.6.0-beta.1

1.6.0-beta.1 (2026-06-09)

Features Added

Added the SecureWrapKey and SecureUnwrapKey operations

Added the JSONWebKeyWrapAlgorithm type and the ExternalKey, SecureKeyOperationResult, SecureKeyUnWrapOperationParameters, and SecureKeyWrapOperationParameters models

Added the ExternalKey and KeySize fields to KeyAttributes

Other Changes

Upgraded to API service version 2026-01-01-preview

Upgraded dependencies

The tests now require a new environment variable when recording: EKM_EXTERNAL_ID (name of an external key exposed by the EKM proxy)

sdk/security/keyvault/azadmin/v1.6.0-beta.1

1.6.0-beta.1 (2026-06-09)

Features Added

Added the ekm package for external key management operations

Other Changes

Upgraded to API service version 2026-01-01-preview

Upgraded dependencies

The ekm package's tests require two new environment variables when recording: EKM_PROXY_HOST (EKM proxy host:port), EKM_SERVER_CA_CERTIFICATE (PEM or base64-encoded DER CA chain)

sdk/data/azcosmos/v1.5.0

1.5.0 (2026-07-13)

Breaking Changes

... (truncated)

Commits

42def97 Add breaking changes to release notes (#21696)
112db83 Azcore v1.8.0 (#21694)
204a3c4 Prep azcore v1.7.2 for release (#21506)
89497f5 Add changelog entry for WASM fix (#21493)
0414a4b Transport dialer: setting nil for wasm build (#21451)
b1db0be Enable TLS renegotiation (#21182)
624baba bump azcore version number
ce7217c Prep for azcore v1.7.0 release (#21149)
62a8079 Add support for shallow cloning azcore.Client instances (#21065) (#21098)
47286b0 Add flag to enable skipping of dependency checks (#21146)
Additional commits viewable in compare view

Updates github.com/johannesboyne/gofakes3 from 0.0.0-20230506070712-04da935ef877 to 1.2.0

Release notes

Sourced from github.com/johannesboyne/gofakes3's releases.

v1.2.0

Adds paginated bucket listing to the s3bolt backend.

Features

s3bolt: ListBucket now honours page.Marker and page.MaxKeys instead of returning ErrInternalPageNotImplemented, so listing a bolt-backed bucket can be paginated (#114) — thanks @Aliexe-code

Bug fixes

s3bolt: fix infinite pagination when listing with a delimiter — NextMarker now advances past the whole common-prefix group instead of pointing at the prefix itself, so delimited listings terminate and each common prefix is returned exactly once (closes #66)

Delimited and flat multi-page listings are covered by new regression tests.

v1.1.0

Maintenance release: correctness fixes, S3 compatibility improvements, and dependency updates.

Note on tag naming: starting with this release, tags use the Go-required v prefix (see #116). A matching v1.0.0 tag was also added so go get github.com/johannesboyne/gofakes3@v1.0.0 resolves correctly.

Bug fixes

Fix CopyObject panic when X-Amz-Copy-Source is fully URL-encoded (
^{Need help on this PR? Tag /codesmith with what you need. Autofix is disabled. (Staging)}

cursor

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit da8f8df. Configure here.}

cursor · 2026-07-10T18:21:36Z

+	google.golang.org/genproto/googleapis/api v0.0.0-20260414002931-afd174a4e478
 	google.golang.org/genproto/googleapis/bytestream v0.0.0-20240401170217-c3f982113cda
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478


Bazel builds skip dependency bumps

High Severity

This PR bumps versions only in go.mod and go.sum, but release binaries and OCI images are built with Bazel using pinned versions in deps.bzl and WORKSPACE (for example minio-go v7.0.72, azblob v0.4.1, grpc v1.79.3). Those artifacts therefore keep the pre-bump dependencies while go build/go test resolve the new ones.

^{Reviewed by Cursor Bugbot for commit da8f8df. Configure here.}

Bumps the go-deps group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.8` | `1.19.0` | | [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.0.72` | `7.2.1` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.19.0` | `1.23.2` | | [github.com/slok/go-http-metrics](https://github.com/slok/go-http-metrics) | `0.11.0` | `0.13.0` | | [github.com/urfave/cli/v2](https://github.com/urfave/cli) | `2.27.1` | `2.27.7` | | [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.34.0` | `0.36.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.20.0` | `0.22.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.79.3` | `1.82.1` | | [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.11.1` | `1.22.0` | | [github.com/Azure/azure-sdk-for-go/sdk/storage/azblob](https://github.com/Azure/azure-sdk-for-go) | `0.4.1` | `1.8.0` | | [github.com/johannesboyne/gofakes3](https://github.com/johannesboyne/gofakes3) | `0.0.0-20230506070712-04da935ef877` | `1.2.0` | | [github.com/valyala/gozstd](https://github.com/valyala/gozstd) | `1.20.1` | `1.25.0` | Updates `github.com/klauspost/compress` from 1.17.8 to 1.19.0 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.17.8...v1.19.0) Updates `github.com/minio/minio-go/v7` from 7.0.72 to 7.2.1 - [Release notes](https://github.com/minio/minio-go/releases) - [Commits](minio/minio-go@v7.0.72...v7.2.1) Updates `github.com/prometheus/client_golang` from 1.19.0 to 1.23.2 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.19.0...v1.23.2) Updates `github.com/slok/go-http-metrics` from 0.11.0 to 0.13.0 - [Release notes](https://github.com/slok/go-http-metrics/releases) - [Changelog](https://github.com/slok/go-http-metrics/blob/master/CHANGELOG.md) - [Commits](slok/go-http-metrics@v0.11.0...v0.13.0) Updates `github.com/urfave/cli/v2` from 2.27.1 to 2.27.7 - [Release notes](https://github.com/urfave/cli/releases) - [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md) - [Commits](urfave/cli@v2.27.1...v2.27.7) Updates `golang.org/x/oauth2` from 0.34.0 to 0.36.0 - [Commits](golang/oauth2@v0.34.0...v0.36.0) Updates `golang.org/x/sync` from 0.20.0 to 0.22.0 - [Commits](golang/sync@v0.20.0...v0.22.0) Updates `google.golang.org/grpc` from 1.79.3 to 1.82.1 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.79.3...v1.82.1) Updates `google.golang.org/protobuf` from 1.36.10 to 1.36.11 Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.11.1 to 1.22.0 - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.11.1...sdk/azcore/v1.22.0) Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.6.0 to 1.13.1 - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.6.0...sdk/azidentity/v1.13.1) Updates `github.com/Azure/azure-sdk-for-go/sdk/storage/azblob` from 0.4.1 to 1.8.0 - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Commits](Azure/azure-sdk-for-go@sdk/azcore/v0.4.1...sdk/azcore/v1.8.0) Updates `github.com/johannesboyne/gofakes3` from 0.0.0-20230506070712-04da935ef877 to 1.2.0 - [Release notes](https://github.com/johannesboyne/gofakes3/releases) - [Commits](https://github.com/johannesboyne/gofakes3/commits/v1.2.0) Updates `github.com/valyala/gozstd` from 1.20.1 to 1.25.0 - [Commits](valyala/gozstd@v1.20.1...v1.25.0) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20251202230838-ff82c1b0f217 to 0.0.0-20260414002931-afd174a4e478 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20251202230838-ff82c1b0f217 to 0.0.0-20260414002931-afd174a4e478 - [Commits](https://github.com/googleapis/go-genproto/commits) --- updated-dependencies: - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore dependency-version: 1.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity dependency-version: 1.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/storage/azblob dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: go-deps - dependency-name: github.com/johannesboyne/gofakes3 dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: go-deps - dependency-name: github.com/klauspost/compress dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/minio/minio-go/v7 dependency-version: 7.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/prometheus/client_golang dependency-version: 1.23.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/slok/go-http-metrics dependency-version: 0.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/urfave/cli/v2 dependency-version: 2.27.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/valyala/gozstd dependency-version: 1.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/oauth2 dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/sync dependency-version: 0.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20260414002931-afd174a4e478 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20260414002931-afd174a4e478 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/grpc dependency-version: 1.82.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: google.golang.org/protobuf dependency-version: 1.36.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 10, 2026

cursor Bot reviewed Jul 10, 2026

View reviewed changes

dependabot Bot changed the title ~~Bump the go-deps group with 16 updates~~ Bump the go-deps group across 1 directory with 16 updates Jul 17, 2026

dependabot Bot force-pushed the dependabot/go_modules/go-deps-72f879b7dc branch from da8f8df to 08d1d01 Compare July 17, 2026 13:35

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the go-deps group across 1 directory with 16 updates#11

Bump the go-deps group across 1 directory with 16 updates#11
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-72f879b7dc

dependabot Bot commented on behalf of github Jul 10, 2026 •

edited by blacksmith-staging Bot

Loading

Uh oh!

cursor Bot left a comment

Uh oh!

cursor Bot Jul 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 10, 2026 • edited by blacksmith-staging Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.19.0

What's Changed

New Contributors

v1.18.7

v1.18.6

What's Changed

New Contributors

v1.18.5

What's Changed

v7.2.0

What's Changed

Release v7.1.0

What's Changed

v7.0.98

What's Changed

New Contributors

Bugfix Release

What's Changed

New Contributors

v1.23.2 - 2025-09-05

v1.23.1 - 2025-09-04

v1.23.0 - 2025-07-30

1.23.2 / 2025-09-05

1.23.1 / 2025-09-04

1.23.0 / 2025-07-30

1.22.0 / 2025-04-07

1.21.1 / 2025-03-04

1.21.0 / 2025-02-17

v0.13.0

0.13.0 - 2024-09-05

Added

Changed

v0.12.0

0.12.0 - 2024-04-19

Changed

[0.13.0] - 2024-09-05

Added

Changed

[0.12.0] - 2024-04-19

Changed

v2.27.7

What's Changed

v2.27.6

What's Changed

v2.27.5

What's Changed

v2.27.4

What's Changed

v2.27.3

What's Changed

New Contributors

v2.27.2

What's Changed

Release 1.82.1

Security

Release 1.82.0

Behavior Changes

New Features

Bug Fixes

Release 1.81.1

Security

Bug Fixes

Release 1.81.0

Behavior Changes

Dependencies

sdk/azidentity/v1.14.0

1.14.0 (2026-06-15)

Breaking Changes

Bugs Fixed

Other Changes

sdk/storage/azblob/v1.8.0

1.8.0 (2026-06-15)

Features Added

sdk/storage/azfile/v1.7.0

1.7.0 (2026-06-15)

Features Added

dependabot Bot commented on behalf of github Jul 10, 2026 •

edited by blacksmith-staging Bot

Loading