Skip to content

Bump the all-deps group across 1 directory with 8 updates#1386

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/all-deps-6e83dfa3ba
Open

Bump the all-deps group across 1 directory with 8 updates#1386
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/all-deps-6e83dfa3ba

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all-deps group with 7 updates in the / directory:

Package From To
github.com/apache/beam/sdks/v2 2.73.0 2.74.0
github.com/mattn/go-sqlite3 1.14.44 1.14.47
github.com/transparency-dev/formats 0.1.0 0.1.1
github.com/usbarmory/tamago 1.26.3 1.26.4
golang.org/x/crypto 0.52.0 0.53.0
golang.org/x/mod 0.36.0 0.37.0
google.golang.org/grpc 1.81.1 1.82.0

Updates github.com/apache/beam/sdks/v2 from 2.73.0 to 2.74.0

Release notes

Sourced from github.com/apache/beam/sdks/v2's releases.

Beam 2.74.0 release

We are happy to present the new 2.74.0 release of Beam. This release includes both improvements and new functionality. See the download page for this release.

For more information on changes in 2.74.0, check out the detailed release notes.

Highlights

  • Spark 4 runner support for Java SDK (#38255).

I/Os

  • IcebergIO: support declaring a table's sort order on dynamic table creation via the new sort_fields config (#38269).
  • IcebergIO: support writing with hash distribution mode, and with autosharding (#38061).

New Features / Improvements

  • Capability introduces an indicator for aggregations and timers firing during a pipeline drain, allowing users and sinks to recognize and appropriately handle potentially incomplete or partial data (#36884).
  • Added support for setting disk provisioned IOPS and throughput in Dataflow runner via --diskProvisionedIops and --diskProvisionedThroughputMibps pipeline options (Java/Go/Python) (#38349).
  • TriggerStateMachineRunner changes from BitSetCoder to SentinelBitSetCoder to encode finished bitset. SentinelBitSetCoder and BitSetCoder are state compatible. Both coders can decode encoded bytes from the other coder (#38139).
  • (Python) Added type alias for with_exception_handling to be used for typehints. (#38173).
  • (Java) BatchElements transform for Java SDK (#38369)
  • Added plugin mechanism to support different Lineage implementations (Java) (#36790).
  • (Python) Supported Python user type in Beam SQL. For example, SQL statements like SELECT some_field from PCOLLECTION can now operate a PCollection of Beam Row containing pickable Python user type (#20738).
  • (Python) Introduced beam.coders.registry.register_row as preferred API to register a named tuple or dataclass with a Beam Row. At pipelne runtime, the original type associated with the registered row are preserved across the serialization boundary (#38108).

Breaking Changes

  • (Python) Made Beartype the default fallback type checking tool. This can be disabled with the --disable_beartype pipeline option. (#38275)

Deprecations

  • Dropped Java 8 support (#31678).
  • Removed Samza Runner support (#35448).

Bugfixes

  • Fixed BigQueryEnrichmentHandler batch mode dropping earlier requests when multiple requests share the same enrichment key (Python) (#38035).
  • Added max_batch_duration_secs passthrough support in Python Enrichment BigQuery and CloudSQL handlers so batching duration can be forwarded to BatchElements (#38243).

According to git shortlog, the following people contributed to the 2.74.0 release. Thank you to all contributors!

Abdelrahman Ibrahim, Ahmed Abualsaud, Andrew Crites, Andrew Kabas, Arran Cudbard-Bell, Arun Pandian, Asish Kumar, Bentsi Leviav, Blake Jones, Bruno Volpato, Chris Jordan, Danny McCormick, Deji Ibrahim, Derrick Williams, Elia LIU, Ganesh Sivakumar, Jack McCluskey, Kenneth Knowles, Lalit Yadav, M Junaid Shaukat, Matej Aleksandrov, Prabhnoor Singh, Radek Stankiewicz, Radosław Stankiewicz, Reuven Lax, RuiLong J., Sam Whittle, Shunping Huang, Subramanya V, Tarun Annapareddy, Tobias Kaymak, TongruiLi, Valentyn Tymofieiev, Vitaly Terentyev, XQ Hu, Yi Hu, ZIHAN DAI, apanich, bambadiouf1, chenxuesdu, claudevdm, harshadkhetpal, johnjcasey, parveensania, tianz101

Changelog

Sourced from github.com/apache/beam/sdks/v2's changelog.

[2.74.0] - 2026-06-02

Highlights

  • Spark 4 runner support for Java SDK (#38255).

I/Os

  • IcebergIO: support declaring a table's sort order on dynamic table creation via the new sort_fields config (#38269).
  • IcebergIO: support writing with hash distribution mode, and with autosharding (#38061).

New Features / Improvements

  • Capability introduces an indicator for aggregations and timers firing during a pipeline drain, allowing users and sinks to recognize and appropriately handle potentially incomplete or partial data (#36884).
  • Added support for setting disk provisioned IOPS and throughput in Dataflow runner via --diskProvisionedIops and --diskProvisionedThroughputMibps pipeline options (Java/Go/Python) (#38349).
  • TriggerStateMachineRunner changes from BitSetCoder to SentinelBitSetCoder to encode finished bitset. SentinelBitSetCoder and BitSetCoder are state compatible. Both coders can decode encoded bytes from the other coder (#38139).
  • (Python) Added type alias for with_exception_handling to be used for typehints. (#38173).
  • (Java) BatchElements transform for Java SDK (#38369)
  • Added plugin mechanism to support different Lineage implementations (Java) (#36790).
  • (Python) Supported Python user type in Beam SQL. For example, SQL statements like SELECT some_field from PCOLLECTION can now operate a PCollection of Beam Row containing pickable Python user type (#20738).
  • (Python) Introduced beam.coders.registry.register_row as preferred API to register a named tuple or dataclass with a Beam Row. At pipelne runtime, the original type associated with the registered row are preserved across the serialization boundary (#38108).
  • (Python) Added type_overrides parameter to WriteToBigQuery allowing users to specify custom BigQuery to Python type mappings when using Storage Write API. This enables support for types like DATE, DATETIME, and JSON (Python) (#25946).

Breaking Changes

  • (Python) Made Beartype the default fallback type checking tool. This can be disabled with the --disable_beartype pipeline option. (#38275)

Deprecations

  • Dropped Java 8 support (#31678).
  • Removed Samza Runner support (#35448).

Bugfixes

  • Fixed BigQueryEnrichmentHandler batch mode dropping earlier requests when multiple requests share the same enrichment key (Python) (#38035).
  • Added max_batch_duration_secs passthrough support in Python Enrichment BigQuery and CloudSQL handlers so batching duration can be forwarded to BatchElements (#38243).
Commits

Updates github.com/mattn/go-sqlite3 from 1.14.44 to 1.14.47

Commits
  • 693de12 Merge pull request #1408 from dxbjavid/getfilename-cstring-leak
  • 837b4f2 Merge pull request #1413 from mattn/cache-stmt-column-metadata
  • e99486c cache column metadata for prepared and cached statements
  • eb06f26 Merge pull request #1412 from mattn/codex-5sxu1n
  • 423f960 Make callback handle lookups lock-free
  • a3cd5cd free leaked schema string in GetFilename
  • 379319c Merge pull request #1407 from mattn/blob-arg-call-order
  • c3e96cd call sqlite3_value_blob before sqlite3_value_bytes in callbackArgString
  • 518ffdb Merge pull request #1406 from dxbjavid/function-text-embedded-nul
  • b1e8d68 read text value before its byte length to match documented order
  • Additional commits viewable in compare view

Updates github.com/transparency-dev/formats from 0.1.0 to 0.1.1

Release notes

Sourced from github.com/transparency-dev/formats's releases.

v0.1.1

What's Changed

Deps

New Contributors

Full Changelog: transparency-dev/formats@v0.1.0...v0.1.1

Commits
  • f8d9ded Remove unused RSA 6962 support (#256)
  • 17c221a 🌱(deps): Bump golang.org/x/crypto (#254)
  • 157a44d 🌱(deps): Bump the all-gha-deps group with 3 updates (#255)
  • a97bebf 🌱(deps): Bump github/codeql-action in the all-gha-deps group (#253)
  • 909dc91 🌱(deps): Bump github/codeql-action in the all-gha-deps group (#252)
  • dc73bfb 🌱(deps): Bump the all-go-deps group with 2 updates (#251)
  • 1e3a4ad Improve generate func name (#250)
  • 7f7fdcf Add func to generate MLDSA key pairs (#249)
  • 8446089 🌱(deps): Bump github/codeql-action in the all-gha-deps group (#248)
  • e6e205e Add MLDSA-44 cosigner implementation (#247)
  • Additional commits viewable in compare view

Updates github.com/usbarmory/tamago from 1.26.3 to 1.26.4

Release notes

Sourced from github.com/usbarmory/tamago's releases.

v1.26.4

This release features:

  • improved CPU idle management for amd64, aimed at reducing CPU usage on multi-core (e.g. SMP) unikernels
  • improved AMD SEV-SNP support for vCPU creation
  • improved amd64 SMP support for external AP initialization (e.g. UEFI, AMD SEV-SNP)

Major changes for tamago package API:

Major changes for tamago package API to add AMD SEV-SNP support under SMP:

Major changes for tamago package internals:

Full Changelog: usbarmory/tamago@v1.26.3...v1.26.4

This release requires GOOS=tamago support in the Go distribution with tamago-go1.26.4 or later releases, it has been tested with tamago-go1.26.4.

Commits
  • 5e5171c bump toolchain
  • 3587cd6 tidying
  • 8b31c87 bind GHCB instance to vCPU at first use for SMP use
  • 6e32384 tidying
  • 04fb603 do not reload segment registers on IDT load
  • 855a632 improve SMP API
  • f4b3053 take arbitrary program counter for VMSA defaults initialization
  • 8ec6640 add SEV Features field
  • 7ab1167 add support for SEV-SNP AP Creation
  • 70d4167 export apinit address
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.52.0 to 0.53.0

Commits
  • 45460e0 go.mod: update golang.org/x dependencies
  • d37c95e pkcs12: limit PBKDF iteration count to prevent CPU exhaustion
  • e2ffffe ssh: reject incomplete gssapi-with-mic configurations
  • 60e158a ssh/test: isolate CLI tests from user SSH config and agent
  • 1b77d23 ssh/knownhosts: reject lines with multiple or unknown markers
  • 3872a2b ssh/knownhosts: verify declared key type matches decoded key
  • 9f72ecc ssh/knownhosts: treat only ASCII space and tab as whitespace
  • 8f405a4 ssh: validate ECDSA curve matches expected algorithm
  • bb41b3d ssh: improve DH GEX group selection using PreferredBits
  • e04e721 ssh/agent: validate ed25519 private key length in Add
  • Additional commits viewable in compare view

Updates golang.org/x/mod from 0.36.0 to 0.37.0

Commits
  • deb1dfc go.mod: update golang.org/x dependencies
  • 087f651 modfile: use slices.Backward
  • 343ee60 x/mod: allow for aggressively conslidating requires
  • See full diff in compare view

Updates golang.org/x/sync from 0.20.0 to 0.21.0

Commits

Updates google.golang.org/grpc from 1.81.1 to 1.82.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.0

Behavior Changes

  • server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)
  • transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)
  • balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

  • experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)
  • client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)
  • server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)

Bug Fixes

  • xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)
  • grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)
  • stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)
  • encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#9135)
  • channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#9109)
Commits
  • bd23985 Change version to 1.82.0 (#9170)
  • 0f3086d Fix minor issues not covered by PR #9137 (#9147)
  • fef07fb internal: Split v3procservicepb import into pb and grpc for extproc (#9163)
  • 91dd64f transport: surface subsequent data when receiving non-gRPC header (#8929)
  • adc97de test/kokoro: add config for regional-td test (#9158)
  • 57c9ff1 xds: ensure full-string matching for RBAC Filter rules (#9148)
  • b58f32d server: Set a pprof label on new stream goroutines (#9082)
  • 6c98be3 refactor(transport): extract shared stream state handling logic in `loopyWrit...
  • bcaa6f4 rls: only reset backoff on recovery from TRANSIENT_FAILURE (#9137)
  • 429e6e0 balancer: expose endpoint weight and hostname as experimental APIs (#9074)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 1, 2026 04:44
@dependabot
dependabot Bot requested review from AlCutter and removed request for a team July 1, 2026 04:44
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 1, 2026
@dpebot

dpebot commented Jul 1, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@dependabot
Bump the all-deps group across 1 directory with 8 updates
01855ed 
Bumps the all-deps group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/apache/beam/sdks/v2](https://github.com/apache/beam) | `2.73.0` | `2.74.0` |
| [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.44` | `1.14.47` |
| [github.com/transparency-dev/formats](https://github.com/transparency-dev/formats) | `0.1.0` | `0.1.1` |
| [github.com/usbarmory/tamago](https://github.com/usbarmory/tamago) | `1.26.3` | `1.26.4` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.52.0` | `0.53.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.36.0` | `0.37.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.81.1` | `1.82.0` |



Updates `github.com/apache/beam/sdks/v2` from 2.73.0 to 2.74.0
- [Release notes](https://github.com/apache/beam/releases)
- [Changelog](https://github.com/apache/beam/blob/master/CHANGES.md)
- [Commits](apache/beam@v2.73.0...v2.74.0)

Updates `github.com/mattn/go-sqlite3` from 1.14.44 to 1.14.47
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](mattn/go-sqlite3@v1.14.44...v1.14.47)

Updates `github.com/transparency-dev/formats` from 0.1.0 to 0.1.1
- [Release notes](https://github.com/transparency-dev/formats/releases)
- [Commits](transparency-dev/formats@v0.1.0...v0.1.1)

Updates `github.com/usbarmory/tamago` from 1.26.3 to 1.26.4
- [Release notes](https://github.com/usbarmory/tamago/releases)
- [Commits](usbarmory/tamago@v1.26.3...v1.26.4)

Updates `golang.org/x/crypto` from 0.52.0 to 0.53.0
- [Commits](golang/crypto@v0.52.0...v0.53.0)

Updates `golang.org/x/mod` from 0.36.0 to 0.37.0
- [Commits](golang/mod@v0.36.0...v0.37.0)

Updates `golang.org/x/sync` from 0.20.0 to 0.21.0
- [Commits](golang/sync@v0.20.0...v0.21.0)

Updates `google.golang.org/grpc` from 1.81.1 to 1.82.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.81.1...v1.82.0)

---
updated-dependencies:
- dependency-name: github.com/apache/beam/sdks/v2
  dependency-version: 2.74.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: github.com/mattn/go-sqlite3
  dependency-version: 1.14.47
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: github.com/transparency-dev/formats
  dependency-version: 0.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: github.com/usbarmory/tamago
  dependency-version: 1.26.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: golang.org/x/crypto
  dependency-version: 0.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: golang.org/x/mod
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: golang.org/x/sync
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: google.golang.org/grpc
  dependency-version: 1.82.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/all-deps-6e83dfa3ba branch from d2234d0 to 01855ed Compare July 4, 2026 14:09
@dpebot

dpebot commented Jul 4, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@AlCutter AlCutter Awaiting requested review from AlCutter AlCutter is a code owner automatically assigned from google/trillian-examples-reviews

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@dpebot