Skip to content

fix(deps): bump the external group across 1 directory with 10 updates #2875

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Nov 13, 2025
Merged

fix(deps): bump the external group across 1 directory with 10 updates #2875

merged 1 commit into from
Nov 13, 2025

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 4, 2025 •
edited
Loading

Bumps the external group with 7 updates in the /sdk directory:

Package From To
connectrpc.com/connect 1.18.1 1.19.1
github.com/Masterminds/semver/v3 3.3.1 3.4.0
github.com/grpc-ecosystem/go-grpc-middleware/v2 2.3.2 2.3.3
github.com/stretchr/testify 1.10.0 1.11.1
github.com/testcontainers/testcontainers-go 0.37.0 0.39.0
golang.org/x/oauth2 0.30.0 0.32.0
golang.org/x/text 0.26.0 0.30.0

Updates connectrpc.com/connect from 1.18.1 to 1.19.1

Release notes

Sourced from connectrpc.com/connect's releases.

v1.19.1

What's Changed

Bugfixes

Full Changelog: connectrpc/connect-go@v1.19.0...v1.19.1

v1.19.0

This release introduces the highly requested "simple" flag for code generation, making Connect significantly more ergonomic for everyday RPC development.

The new simple flag in protoc-gen-connect-go generates cleaner, more intuitive client and handler interfaces that eliminate request/response wrappers for most use cases. This addresses community feedback about verbosity and provides a more straightforward API. When enabled, metadata (headers/trailers) can be passed through context instead of explicit wrapper objects, optimizing for the common case where developers don't need direct access to HTTP headers.

What's Changed

Enhancements

Bugfixes

Other changes

New Contributors

Full Changelog: connectrpc/connect-go@v1.18.1...v1.19.0

Commits

Updates github.com/Masterminds/semver/v3 from 3.3.1 to 3.4.0

Release notes

Sourced from github.com/Masterminds/semver/v3's releases.

v3.4.0

There are a few changes in this release to highlight:

  1. Constraints now has a property IncludePrerelease. When set to true the Check and Validate methods will include prereleases.
  2. When an AND group has one constraint with a prerelease but more than one constraint then prereleases will be included. For example, >1.0.0-beta.1 < 2. In the past this would not have included prereleases because each constraint needed to have a prerelease. Now, only one constraint needs to have a prerelease. This is considered a long standing bug fix. Note, this does not carry across OR groups. For example, >1.0.0-beta.1 < 2 || > 3. In this case, prereleases will not be included when evaluating against >3.
  3. NewVersion coercion with leading "0"'s is restored. This can be disabled by setting the package level property CoerceNewVersion to false.

What's Changed

New Contributors

Full Changelog: Masterminds/semver@v3.3.1...v3.4.0

Changelog

Sourced from github.com/Masterminds/semver/v3's changelog.

3.4.0 (2025-06-27)

Added

  • #268: Added property to Constraints to include prereleases for Check and Validate

Changed

  • #263: Updated Go testing for 1.24, 1.23, and 1.22
  • #269: Updated the error message handling for message case and wrapping errors
  • #266: Restore the ability to have leading 0's when parsing with NewVersion. Opt-out of this by setting CoerceNewVersion to false.

Fixed

  • #257: Fixed the CodeQL link (thanks @​dmitris)
  • #262: Restored detailed errors when failed to parse with NewVersion. Opt-out of this by setting DetailedNewVersionErrors to false for faster performance.
  • #267: Handle pre-releases for an "and" group if one constraint includes them
Commits
  • 61fc460 Merge pull request #270 from mattfarina/relnotes-3.4.0
  • 69a63e7 Update the release notes and readme for new version
  • dc05094 Merge pull request #269 from mattfarina/lowercase-error-strings
  • a2cd9c2 Updating the error message handling
  • 9760c47 Merge pull request #268 from mattfarina/include-prerelease
  • c374751 Add property to include prereleases
  • 057c901 Merge pull request #267 from mattfarina/fix-259
  • abab1c2 Handle pre-releases on all in an and group
  • ebda872 Merge pull request #266 from mattfarina/restore-calver
  • 4ed619e Restore the ability to have leading 0's with NewVersion
  • Additional commits viewable in compare view

Updates github.com/grpc-ecosystem/go-grpc-middleware/v2 from 2.3.2 to 2.3.3

Release notes

Sourced from github.com/grpc-ecosystem/go-grpc-middleware/v2's releases.

v2.3.3

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.3.2...v2.3.3

Commits
  • 390bcef avoid unnecessary logging field creation when payload logging is disabled (#809)
  • 748e2b2 fix metric label initialize (#810)
  • af451d0 fix(ci): tidy module before linting (#808)
  • 2dc9821 feat: add ContextLabels to ClientMetrics (#798)
  • 2338d5a fix(#794): Wrapping codes.OK should not cause panic (#795)
  • 6ec6dd3 chore: use actions/setup-go native cache (#787)
  • f7911cc chore: enable hugeParam rule from go-critic (#786)
  • e2d5773 build(deps): bump google.golang.org/grpc from 1.67.1 to 1.74.2 (#785)
  • d75e7d9 chore: enable usetesting linter (#784)
  • c8a612b chore: enable promlinter linter (#771)
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.10.0 to 1.11.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.11.1

This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • 2a57335 Merge pull request #1788 from brackendawson/1785-backport-1.11
  • af8c912 Backport #1786 to release/1.11
  • b7801fb Merge pull request #1778 from stretchr/dependabot/github_actions/actions/chec...
  • 69831f3 build(deps): bump actions/checkout from 4 to 5
  • a53be35 Improve captureTestingT helper
  • aafb604 mock: improve formatting of error message
  • 7218e03 improve error msg
  • 929a212 Merge pull request #1758 from stretchr/dolmen/suite-faster-method-filtering
  • bc7459e suite: faster filtering of methods (-testify.m)
  • 7d37b5c suite: refactor methodFilter
  • Additional commits viewable in compare view

Updates github.com/testcontainers/testcontainers-go from 0.37.0 to 0.39.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.39.0

What's Changed

🚀 Features

🐛 Bug Fixes

📖 Documentation

  • docs: clarify no client SDKs in production modules/images, in contributing.md (#3279) @​nimdrak

🧹 Housekeeping

📦 Dependency updates

... (truncated)

Commits
  • da47f5d chore: use new version (v0.39.0) in modules and examples
  • 404b345 chore(atlas): simplify host-port calculation in tests (#3300)
  • 6e14bda feat(atlaslocal): add MongoDB Atlas Local module (#3254)
  • 1fdd847 chore(deps): bump golang.org/x/net from 0.28.0 to 0.38.0 (#3299)
  • 88dead6 feat: allow saving specific platforms for an image (#3218)
  • 44d970c chore(deps): bump dario.cat/mergo from 1.0.1 to 1.0.2 (#3238)
  • ac8fdd3 chore(deps): bump golang.org/x/sys from 0.32.0 to 0.36.0 (#3282)
  • d254caa feat(redpanda): add support for http proxy (#3258)
  • f54a356 chore(deps): bump github/codeql-action from 3.29.3 to 3.30.3 (#3287)
  • 7098d80 chore(go): bump to Go 1.24 as minimal version (#3298)
  • Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.30.0 to 0.32.0

Commits
  • 792c877 oauth2: use strings.Builder instead of bytes.Buffer
  • 014cf77 all: upgrade go directive to at least 1.24.0 [generated]
  • 3c76ce5 endpoints: correct Naver OAuth2 endpoint URLs
  • See full diff in compare view

Updates golang.org/x/text from 0.26.0 to 0.30.0

Commits
  • c6abd03 go.mod: update golang.org/x dependencies
  • 42f038d x/text: fix nil dereference in gotext extract
  • a42f0e2 all: use built-in max/min to simplify the code
  • e69f31b go.mod: update golang.org/x dependencies
  • 60c9786 all: upgrade go directive to at least 1.24.0 [generated]
  • 425d715 go.mod: update golang.org/x dependencies
  • b6d2645 go.mod: update golang.org/x dependencies
  • See full diff in compare view

Updates golang.org/x/tools from 0.34.0 to 0.37.0

Commits
  • d49da96 go/analysis/internal/checker: fix panic due to nil Pass
  • 9da4f7b gopls/internal/test/integration/completion: make test go1.26-robust
  • 4409ea7 gopls/internal/server: add telemetry for Zed, Helix clientInfo
  • 75023ae go/ast/inspector: update outdated documentation
  • 785cd66 gopls/internal/test/integration/completion: skip TestFuzzFunc pre-go1.25
  • ac2e4a5 go.mod: update golang.org/x dependencies
  • bc9374d go/callgraph/vta: remove unnecessary use of unsafe
  • 12d7e15 gopls/internal/analysis/modernize: add test of no gopls imports
  • 263a769 gopls/internal/mcp: use official go mcp sdk
  • e548c70 gopls/internal/analysis/modernize: fix bad edit in var ( ... ) decl
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.73.0 to 1.74.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.74.2

New Features

  • grpc: introduce new DialOptions and ServerOptions (WithStaticStreamWindowSize, WithStaticConnWindowSize, StaticStreamWindowSize, StaticConnWindowSize) that force fixed window sizes for all HTTP/2 connections. By default, gRPC uses dynamic sizing of these windows based upon a BDP estimation algorithm. The existing options (WithInitialWindowSize, etc) also disable BDP estimation, but this behavior will be changed in a following release. (#8283)

API Changes

  • balancer: add ExitIdle method to Balancer interface. Earlier, implementing this method was optional. (#8367)

Behavior Changes

  • xds: Remove the GRPC_EXPERIMENTAL_ENABLE_LEAST_REQUEST environment variable that allows disabling the least request balancer with xDS. Least request was made available by default with xDS in v1.72.0. (#8248)
  • server: allow 0s grpc-timeout header values, which older gRPC-Java versions could send. This restores the behavior of grpc-go before v1.73.0. (#8439)

Bug Fixes

  • googledirectpath: avoid logging the error message Attempt to set a bootstrap configuration... when creating multiple directpath channels. (#8419)

Performance Improvements

  • transport: reduce heap allocations by pooling objects and avoiding method-to-closure conversions. (#8361)
  • transport: reduce heap allocations by re-using mem.Reader objects. (#8360)

Documentation

  • examples: add examples to demonstrate enabling experimental metrics using the OpenTelemetry plugin. (#8388)

Release 1.74.1

Version 1.74.1 retracts release v1.74.0 and itself. Release 1.74.0 was accidentally tagged on the wrong commit and should not be used. Version 1.73.0 should be used until 1.74.2 is released.

Release 1.74.0 was accidentally tagged on the wrong commit and should not be used. Version 1.73.0 should be used until 1.74.1 is released.

Release 1.73.1

Bug Fixes

  • server: Fix a regression preventing streams from being cancelled or timed out when blocked on flow control. (grpc/grpc-go#8528)
Commits

Updates google.golang.org/protobuf from 1.36.6 to 1.36.9

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 4, 2025
@dependabot dependabot bot requested review from a team as code owners November 4, 2025 17:10
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 4, 2025
@github-actions github-actions bot added comp:sdk A software development kit, including library, for client applications and inter-service communicati size/m labels Nov 4, 2025
@github-actions
Copy link
Contributor

github-actions bot commented Nov 4, 2025

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 179.719577ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 103.991806ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 369.680532ms
Throughput 270.50 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 39.671046857s
Average Latency 395.288843ms
Throughput 126.04 requests/second

NANOTDF Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 27.266177871s
Average Latency 271.780202ms
Throughput 183.38 requests/second

@github-actions
Copy link
Contributor

github-actions bot commented Nov 4, 2025

X-Test Results

opentdfplatformBOFA7Z.dockerbuild
cukes-report
✅ java-v0.4.34
✅ js-v0.4.34
✅ go-v0.4.34
bats-test-results
✅ js-pull-2875
✅ java-pull-2875
✅ go-pull-2875

@dependabot dependabot bot force-pushed the dependabot/go_modules/sdk/external-e4772d3ebe branch from d3cc9d1 to 6de46eb Compare November 5, 2025 17:10
@github-actions
Copy link
Contributor

github-actions bot commented Nov 5, 2025

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 183.199793ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 107.565624ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 369.399732ms
Throughput 270.71 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 39.981730001s
Average Latency 398.545649ms
Throughput 125.06 requests/second

NANOTDF Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 27.723635547s
Average Latency 275.932378ms
Throughput 180.35 requests/second

@github-actions
Copy link
Contributor

github-actions bot commented Nov 5, 2025

X-Test Results

opentdfplatformUEEUOE.dockerbuild
cukes-report
✅ java-v0.4.34
✅ js-v0.4.34
✅ go-v0.4.34
bats-test-results
✅ js-pull-2875
✅ java-pull-2875
✅ go-pull-2875

@dependabot dependabot bot force-pushed the dependabot/go_modules/sdk/external-e4772d3ebe branch from 6de46eb to 6aae122 Compare November 6, 2025 17:10
@github-actions
Copy link
Contributor

github-actions bot commented Nov 6, 2025

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 172.719128ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 102.906996ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 358.820642ms
Throughput 278.69 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 39.070355195s
Average Latency 389.05512ms
Throughput 127.97 requests/second

NANOTDF Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 26.936783484s
Average Latency 268.596437ms
Throughput 185.62 requests/second

@github-actions
Copy link
Contributor

github-actions bot commented Nov 6, 2025

X-Test Results

opentdfplatformSE31E4.dockerbuild
cukes-report
✅ java-v0.4.34
✅ js-v0.4.34
✅ go-v0.4.34
bats-test-results
✅ js-pull-2875
✅ java-pull-2875
✅ go-pull-2875

@dependabot dependabot bot force-pushed the dependabot/go_modules/sdk/external-e4772d3ebe branch from 6aae122 to fb8797f Compare November 7, 2025 17:11
@github-actions
Copy link
Contributor

github-actions bot commented Nov 7, 2025

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 196.056319ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 99.485714ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 366.57152ms
Throughput 272.80 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 41.326936612s
Average Latency 411.160284ms
Throughput 120.99 requests/second

NANOTDF Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 28.585725979s
Average Latency 284.739401ms
Throughput 174.91 requests/second

@github-actions
Copy link
Contributor

github-actions bot commented Nov 7, 2025

X-Test Results

opentdfplatformOZJBZ7.dockerbuild
✅ js-v0.4.34
cukes-report
✅ java-v0.4.34
✅ go-v0.4.34
bats-test-results
✅ js-pull-2875
✅ java-pull-2875
✅ go-pull-2875

@dependabot dependabot bot force-pushed the dependabot/go_modules/sdk/external-e4772d3ebe branch from fb8797f to 2b89885 Compare November 12, 2025 17:11
@github-actions
Copy link
Contributor

github-actions bot commented Nov 12, 2025

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 192.613584ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 105.232111ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 374.888328ms
Throughput 266.75 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 41.54075956s
Average Latency 413.778534ms
Throughput 120.36 requests/second

NANOTDF Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 28.759573248s
Average Latency 286.41992ms
Throughput 173.86 requests/second

@github-actions
Copy link
Contributor

github-actions bot commented Nov 12, 2025

X-Test Results

opentdfplatformK41WM5.dockerbuild
cukes-report
✅ js-v0.4.34
✅ java-v0.4.34
✅ go-v0.4.34
bats-test-results
✅ js-pull-2875
✅ java-pull-2875
✅ go-pull-2875

@dependabot dependabot bot force-pushed the dependabot/go_modules/sdk/external-e4772d3ebe branch from 2b89885 to f83c65c Compare November 13, 2025 17:11
@github-actions
Copy link
Contributor

github-actions bot commented Nov 13, 2025

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 176.385814ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 101.836744ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 358.624873ms
Throughput 278.84 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 39.565311427s
Average Latency 394.094843ms
Throughput 126.37 requests/second

NANOTDF Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 27.797698465s
Average Latency 276.910263ms
Throughput 179.87 requests/second

@github-actions
Copy link
Contributor

github-actions bot commented Nov 13, 2025

X-Test Results

opentdfplatformWH4XJD.dockerbuild
cukes-report
✅ js-v0.4.34
✅ java-v0.4.34
✅ go-v0.4.34
bats-test-results
✅ js-pull-2875
✅ java-pull-2875
✅ go-pull-2875

@dependabot
fix(deps): bump the external group across 1 directory with 10 updates
1cef971 
Bumps the external group with 7 updates in the /sdk directory:

| Package | From | To |
| --- | --- | --- |
| [connectrpc.com/connect](https://github.com/connectrpc/connect-go) | `1.18.1` | `1.19.1` |
| [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) | `3.3.1` | `3.4.0` |
| [github.com/grpc-ecosystem/go-grpc-middleware/v2](https://github.com/grpc-ecosystem/go-grpc-middleware) | `2.3.2` | `2.3.3` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.10.0` | `1.11.1` |
| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.37.0` | `0.39.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.30.0` | `0.32.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.26.0` | `0.30.0` |



Updates `connectrpc.com/connect` from 1.18.1 to 1.19.1
- [Release notes](https://github.com/connectrpc/connect-go/releases)
- [Changelog](https://github.com/connectrpc/connect-go/blob/main/RELEASE.md)
- [Commits](connectrpc/connect-go@v1.18.1...v1.19.1)

Updates `github.com/Masterminds/semver/v3` from 3.3.1 to 3.4.0
- [Release notes](https://github.com/Masterminds/semver/releases)
- [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md)
- [Commits](Masterminds/semver@v3.3.1...v3.4.0)

Updates `github.com/grpc-ecosystem/go-grpc-middleware/v2` from 2.3.2 to 2.3.3
- [Release notes](https://github.com/grpc-ecosystem/go-grpc-middleware/releases)
- [Commits](grpc-ecosystem/go-grpc-middleware@v2.3.2...v2.3.3)

Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.10.0...v1.11.1)

Updates `github.com/testcontainers/testcontainers-go` from 0.37.0 to 0.39.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.37.0...v0.39.0)

Updates `golang.org/x/oauth2` from 0.30.0 to 0.32.0
- [Commits](golang/oauth2@v0.30.0...v0.32.0)

Updates `golang.org/x/text` from 0.26.0 to 0.30.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.26.0...v0.30.0)

Updates `golang.org/x/tools` from 0.34.0 to 0.37.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.34.0...v0.37.0)

Updates `google.golang.org/grpc` from 1.73.0 to 1.74.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.73.0...v1.74.2)

Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.9

---
updated-dependencies:
- dependency-name: connectrpc.com/connect
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: github.com/Masterminds/semver/v3
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: github.com/grpc-ecosystem/go-grpc-middleware/v2
  dependency-version: 2.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: golang.org/x/text
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: golang.org/x/tools
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: google.golang.org/grpc
  dependency-version: 1.74.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/sdk/external-e4772d3ebe branch from f83c65c to 1cef971 Compare November 13, 2025 17:33
@github-actions
Copy link
Contributor

github-actions bot commented Nov 13, 2025

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 188.323612ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 96.3694ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 364.267136ms
Throughput 274.52 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 39.388931923s
Average Latency 391.550363ms
Throughput 126.94 requests/second

NANOTDF Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 28.039717071s
Average Latency 279.262373ms
Throughput 178.32 requests/second

@github-actions
Copy link
Contributor

github-actions bot commented Nov 13, 2025

X-Test Results

opentdfplatformDHFXV6.dockerbuild
cukes-report
✅ js-v0.4.34
✅ java-v0.4.34
✅ go-v0.4.34
bats-test-results
✅ js-pull-2875
✅ java-pull-2875
✅ go-pull-2875

@elizabethhealy elizabethhealy added this pull request to the merge queue Nov 13, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 13, 2025

Dependabot attempted to update this pull request, but because the branch dependabot/go_modules/sdk/external-e4772d3ebe is protected it was unable to do so.

Merged via the queue into main with commit 971bf73 Nov 13, 2025
39 checks passed
@elizabethhealy elizabethhealy deleted the dependabot/go_modules/sdk/external-e4772d3ebe branch November 13, 2025 18:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@elizabethhealy elizabethhealy elizabethhealy approved these changes

Assignees

No one assigned

Labels

comp:sdk A software development kit, including library, for client applications and inter-service communicati dependencies Pull requests that update a dependency file go Pull requests that update Go code size/m

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@elizabethhealy