Skip to content

build(deps): bump the go_modules group across 4 directories with 3 updates#100

Closed
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/go_modules/examples/multi-engine-eventbus/go_modules-6081caf46e
Closed

build(deps): bump the go_modules group across 4 directories with 3 updates#100
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/go_modules/examples/multi-engine-eventbus/go_modules-6081caf46e

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 8, 2026

Bumps the go_modules group with 1 update in the /examples/multi-engine-eventbus directory: github.com/aws/aws-sdk-go-v2/service/kinesis.
Bumps the go_modules group with 1 update in the /examples/nats-eventbus directory: github.com/aws/aws-sdk-go-v2/service/kinesis.
Bumps the go_modules group with 2 updates in the /modules/eventbus directory: github.com/aws/aws-sdk-go-v2/service/kinesis and github.com/nats-io/nats-server/v2.
Bumps the go_modules group with 1 update in the /modules/letsencrypt directory: github.com/go-jose/go-jose/v4.

Updates github.com/aws/aws-sdk-go-v2/service/kinesis from 1.38.0 to 1.43.5

Commits

Updates github.com/aws/aws-sdk-go-v2/service/kinesis from 1.38.0 to 1.43.5

Commits

Updates github.com/aws/aws-sdk-go-v2/service/kinesis from 1.38.0 to 1.43.5

Commits

Updates github.com/aws/aws-sdk-go-v2/service/kinesis from 1.38.0 to 1.43.5

Commits

Updates github.com/aws/aws-sdk-go-v2/service/kinesis from 1.38.0 to 1.43.5

Commits

Updates github.com/aws/aws-sdk-go-v2/service/kinesis from 1.38.0 to 1.43.5

Commits

Updates github.com/aws/aws-sdk-go-v2/service/kinesis from 1.38.0 to 1.43.5

Commits

Updates github.com/aws/aws-sdk-go-v2/service/kinesis from 1.38.0 to 1.43.5

Commits

Updates github.com/aws/aws-sdk-go-v2/service/kinesis from 1.38.0 to 1.43.5

Commits

Updates github.com/nats-io/nats-server/v2 from 2.12.4 to 2.12.6

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.12.6

Changelog

Refer to the 2.12 Upgrade Guide for backwards compatibility notes with 2.11.x.

Go Version

  • 1.25.8

Dependencies

  • golang.org/x/crypto v0.49.0 (#7953)
  • github.com/nats-io/jwt/v2 v2.8.1 (#7960)
  • golang.org/x/sys v0.42.0 (#7923)
  • golang.org/x/time v0.15.0 (#7923)

CVEs

Changed

General

  • There is now a 1MB size limit on JWTs (#7960)

Improved

General

  • Non-WebSocket leafnode connections can now be proxied using HTTP CONNECT (#7781)
  • The $SYS.REQ.USER.INFO response now includes the friendly nametag of the account and/or user if known (#7973)

JetStream

  • The stream peer-remove command now accepts a peer ID as well as a server name (#7952)

MQTT

  • Protocol compliance has been improved, including more error handling on invalid or malformed MQTT packets (#7933)

Fixed

... (truncated)

Commits
  • 0e06390 Release v2.12.6
  • f593d27 Cherry-picks for 2.12.6 (#61)
  • 9f904de [FIXED] Incomplete route pool on premature pong
  • b510192 [FIXED] Avoid stalling read loop on leafnode ErrMinimumVersionRequired
  • 53941c2 Report the account and user name in USER.INFO request
  • 1ab002a [IMPROVED] Support HTTP proxy connection from leaf nodes also for TCP
  • 8b64082 Release v2.12.6-RC.3
  • e6ab7e9 Cherry-picks for 2.12.6-RC.3 (#59)
  • 9f4d960 Make the deduplication window actually work for deduplication for sourcing
  • 304e184 Remove FIXME about auth callout nonce
  • Additional commits viewable in compare view

Updates github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4

Release notes

Sourced from github.com/go-jose/go-jose/v4's releases.

v4.1.4

What's Changed

Fixes Panic in JWE decryption. See GHSA-78h2-9frx-2jm8

Full Changelog: go-jose/go-jose@v4.1.3...v4.1.4

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 8, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 8, 2026

📋 API Contract Changes Summary

No breaking changes detected - only additions and non-breaking modifications

Changed Components:

Core Framework

Contract diff saved to artifacts/diffs/core.json

Module: auth

Contract diff saved to artifacts/diffs/auth.json

Module: cache

Contract diff saved to artifacts/diffs/cache.json

Module: database

Contract diff saved to artifacts/diffs/database.json

Module: eventbus

Contract diff saved to artifacts/diffs/eventbus.json

Module: jsonschema

Contract diff saved to artifacts/diffs/jsonschema.json

Module: letsencrypt

Contract diff saved to artifacts/diffs/letsencrypt.json

Module: reverseproxy

Contract diff saved to artifacts/diffs/reverseproxy.json

Artifacts

📁 Full contract diffs and JSON artifacts are available in the workflow artifacts.

…dates

Bumps the go_modules group with 1 update in the /examples/multi-engine-eventbus directory: [github.com/aws/aws-sdk-go-v2/service/kinesis](https://github.com/aws/aws-sdk-go-v2).
Bumps the go_modules group with 1 update in the /examples/nats-eventbus directory: [github.com/aws/aws-sdk-go-v2/service/kinesis](https://github.com/aws/aws-sdk-go-v2).
Bumps the go_modules group with 2 updates in the /modules/eventbus directory: [github.com/aws/aws-sdk-go-v2/service/kinesis](https://github.com/aws/aws-sdk-go-v2) and [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server).
Bumps the go_modules group with 1 update in the /modules/letsencrypt directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose).


Updates `github.com/aws/aws-sdk-go-v2/service/kinesis` from 1.38.0 to 1.43.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.38.0...service/ivs/v1.43.5)

Updates `github.com/aws/aws-sdk-go-v2/service/kinesis` from 1.38.0 to 1.43.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.38.0...service/ivs/v1.43.5)

Updates `github.com/aws/aws-sdk-go-v2/service/kinesis` from 1.38.0 to 1.43.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.38.0...service/ivs/v1.43.5)

Updates `github.com/aws/aws-sdk-go-v2/service/kinesis` from 1.38.0 to 1.43.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.38.0...service/ivs/v1.43.5)

Updates `github.com/aws/aws-sdk-go-v2/service/kinesis` from 1.38.0 to 1.43.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.38.0...service/ivs/v1.43.5)

Updates `github.com/aws/aws-sdk-go-v2/service/kinesis` from 1.38.0 to 1.43.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.38.0...service/ivs/v1.43.5)

Updates `github.com/aws/aws-sdk-go-v2/service/kinesis` from 1.38.0 to 1.43.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.38.0...service/ivs/v1.43.5)

Updates `github.com/aws/aws-sdk-go-v2/service/kinesis` from 1.38.0 to 1.43.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.38.0...service/ivs/v1.43.5)

Updates `github.com/aws/aws-sdk-go-v2/service/kinesis` from 1.38.0 to 1.43.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.38.0...service/ivs/v1.43.5)

Updates `github.com/nats-io/nats-server/v2` from 2.12.4 to 2.12.6
- [Release notes](https://github.com/nats-io/nats-server/releases)
- [Changelog](https://github.com/nats-io/nats-server/blob/main/RELEASES.md)
- [Commits](nats-io/nats-server@v2.12.4...v2.12.6)

Updates `github.com/go-jose/go-jose/v4` from 4.1.3 to 4.1.4
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](go-jose/go-jose@v4.1.3...v4.1.4)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/kinesis
  dependency-version: 1.43.5
  dependency-type: indirect
- dependency-name: github.com/aws/aws-sdk-go-v2/service/kinesis
  dependency-version: 1.43.5
  dependency-type: indirect
- dependency-name: github.com/aws/aws-sdk-go-v2/service/kinesis
  dependency-version: 1.43.5
  dependency-type: direct:production
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.4
  dependency-type: indirect
- dependency-name: github.com/nats-io/nats-server/v2
  dependency-version: 2.12.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/examples/multi-engine-eventbus/go_modules-6081caf46e branch from 1d0b3f9 to 4845545 Compare May 6, 2026 19:40
@codecov
Copy link
Copy Markdown

codecov Bot commented May 6, 2026

Codecov Report

❌ Patch coverage is 0% with 1 line in your changes missing coverage. Please review.

Files with missing lines Patch % Lines
application.go 0.00% 1 Missing ⚠️

📢 Thoughts on this report? Let us know!

@intel352
Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 26, 2026

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@intel352
Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 29, 2026

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

intel352 added a commit that referenced this pull request May 29, 2026
Re-applies the still-needed portion of dependabot #100 on current main.
Main already advanced past #100's nats-io and golang.org/x bumps; only the
aws-sdk-go-v2 group remained outstanding. Bumps:
  aws-sdk-go-v2/service/kinesis 1.38.0 -> 1.43.5
  aws-sdk-go-v2 1.38.0 -> 1.41.5 (indirect)
  smithy-go 1.22.5 -> 1.24.2 (indirect)
across modules/eventbus + examples/{nats,multi-engine}-eventbus.
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 29, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/go_modules/examples/multi-engine-eventbus/go_modules-6081caf46e branch May 29, 2026 00:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant