Skip to content

Bump the golang group across 1 directory with 7 updates - #16

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/golang-ee95d195eb
Open

Bump the golang group across 1 directory with 7 updates#16
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/golang-ee95d195eb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the golang group with 7 updates in the / directory:

Package From To
github.com/dgraph-io/badger/v4 4.9.2 4.9.5
github.com/go-ldap/ldap/v3 3.4.13 3.4.14
github.com/mattn/go-sqlite3 1.14.46 1.14.49
github.com/minio/minio-go/v7 7.2.0 7.2.1
github.com/prometheus/procfs 0.20.1 0.21.1
go.mongodb.org/mongo-driver/v2 2.6.2 2.8.0
golang.org/x/image 0.41.0 0.44.0

Updates github.com/dgraph-io/badger/v4 from 4.9.2 to 4.9.5

Release notes

Sourced from github.com/dgraph-io/badger/v4's releases.

v4.9.5

What's Changed

New Contributors

Full Changelog: dgraph-io/badger@v4.9.4...v4.9.5

v4.9.4

What's Changed

New Contributors

Full Changelog: dgraph-io/badger@v4.9.3...v4.9.4

v4.9.3

What's Changed

New Contributors

Full Changelog: dgraph-io/badger@v4.9.2...v4.9.3

Changelog

Sourced from github.com/dgraph-io/badger/v4's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog.

[4.9.4] - 2026-07-08

Fixed

  • fix(db): don't drop acknowledged writes during DropPrefix/DropAll (#2313)
  • fix: fix an issue where the compactor causes previously deleted data to reappear (#2278)

Docs

  • docs(changelog): backfill 4.9.2, add 4.9.3, fix 4.9.0 compare link (#2311)

Full Changelog: dgraph-io/badger@v4.9.3...v4.9.4

[4.9.3] - 2026-07-06

Performance

  • perf(db): signal-based L0 write backpressure (replace busy-sleeps) (#2308)

Fixed

  • fix(vlog): prevent deleted key from reappearing after value-log GC (#2310)

Docs

  • docs: update CONTRIBUTING (TOC, code style, license header, master→main) (#2300)

CI

  • chore(ci): add stale Action (#2302)
  • ci: keep required checks green on docs-only PRs (#2301)

Full Changelog: dgraph-io/badger@v4.9.2...v4.9.3

Commits
  • 21c0bc6 fix: prevent nil deref when reading in-memory tables (#2316)
  • 4292e70 chore(deps): bump go.opentelemetry.io/otel to v1.41.0 (CVE-2026-29181) (#2323)
  • 0a02e66 ci: test PR's badger code against dgraph instead of main (#2320)
  • 9b0ef41 chore: prepare for release v4.9.4 (#2314)
  • bcef113 fix: fix an issue where the compactor causes previously deleted data to reapp...
  • 7df4b2f fix(db): don't drop acknowledged writes during DropPrefix/DropAll (#2313)
  • 45d5bd1 docs(changelog): backfill 4.9.2, add 4.9.3, fix 4.9.0 compare link (#2311)
  • c3489dc perf(db): signal-based L0 write backpressure (replace busy-sleeps) (#2308)
  • 34dba21 fix(vlog): prevent deleted key from reappearing after value-log GC (#2310)
  • 5e2d536 chore (ci): add stale Action (#2302)
  • Additional commits viewable in compare view

Updates github.com/go-ldap/ldap/v3 from 3.4.13 to 3.4.14

Release notes

Sourced from github.com/go-ldap/ldap/v3's releases.

v3.4.14

I want to thank everyone who contributed in the recents months. Compared to last year, the number of activities and PRs (including open ones) has increased dramatically. I would like to thank everyone who contributed to the project.

Personal note: Please keep in mind that this project is not funded or supported by a large company or similar organization. We work on the library in our free time after work. I appreciate your support, but please keep this in mind (including with other open-source projects).

What's Changed

New Contributors

Full Changelog: go-ldap/ldap@v3.4.13...v3.4.14

Commits
  • 9e343e2 chore: update dependencies (#620)
  • c381fd4 fix: guard constructed-form attributeType in server-side sort decode (#618)
  • be69007 fix: guard nil responseValue when parsing WhoAmI result (#617)
  • d6d6b04 fix: prevent SearchAsync goroutine leak when context is cancelled during send...
  • c90b197 decode extended responseName by context class (#605)
  • ab9c0c1 guard malformed responseValue decode in PasswordModify (#614)
  • 8656c7a chore(deps): bump golang.org/x/net from 0.50.0 to 0.55.0 in /v3 (#613)
  • 8a98971 handle linear whitespace in digest-md5 challenge parser (#607)
  • 0059675 fix: guard malformed paging control in DecodeControl (#611)
  • 189d84e fix: skip empty referral sequence in getReferral (#610)
  • Additional commits viewable in compare view

Updates github.com/mattn/go-sqlite3 from 1.14.46 to 1.14.49

Release notes

Sourced from github.com/mattn/go-sqlite3's releases.

1.14.49

What's Changed

Full Changelog: mattn/go-sqlite3@v1.14.48...v1.14.49

1.14.48

What's Changed

... (truncated)

Commits
  • cc41b8c Merge pull request #1442 from mattn/sqlite-amalgamation-3053004
  • 18308a8 Upgrade SQLite to version 3053004
  • c1a1466 Merge pull request #1440 from mattn/fix-limit-example-stmt-leak
  • 18f2ec3 Assert the expected too many SQL variables error
  • 210e260 Merge pull request #1439 from mattn/fix-hook-example-rows-leak
  • dccd45f Merge pull request #1438 from mattn/fix-vtable-example-declare
  • c0861de Quote table name before interpolating into DeclareVTab
  • e664cc6 Merge pull request #1437 from mattn/fix-series-vtable-example
  • 2195c5d Merge pull request #1436 from mattn/fix-fuzz-off-by-one
  • df9873f Merge pull request #1435 from mattn/fix-upgrade-error-handling
  • Additional commits viewable in compare view

Updates github.com/minio/minio-go/v7 from 7.2.0 to 7.2.1

Commits

Updates github.com/prometheus/procfs from 0.20.1 to 0.21.1

Release notes

Sourced from github.com/prometheus/procfs's releases.

v0.21.0

What's Changed

New Contributors

Full Changelog: prometheus/procfs@v0.20.1...v0.21.0

Commits

Updates go.mongodb.org/mongo-driver/v2 from 2.6.2 to 2.8.0

Release notes

Sourced from go.mongodb.org/mongo-driver/v2's releases.

MongoDB Go Driver 2.8.0

The MongoDB Go Driver Team is pleased to release version 2.8.0 of the official MongoDB Go Driver.

Release Highlights

This release supports the general availability of Queryable Encryption string queries. The query types prefix, suffix, and substring are added as generally available for MongoDB 9.0+ and libmongocrypt 1.20.0. The query types prefixPreview, suffixPreview, and substringPreview remain experimental for 8.2–8.x servers and may be removed in a future release.

Other key facts:

  • The algorithm TextPreview is replaced with String.
  • API rename: options.Text()options.String(); TextOptions*StringOptions*; EncryptOptionsBuilder.SetTextOptionsSetStringOptions.

What's Changed

✨ New Features

📦 Dependency Updates

Full Changelog: mongodb/mongo-go-driver@v2.7.0...v2.8.0

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. For issues with, questions about, or feedback for the Go Driver, please look into our support channels, including StackOverflow. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

MongoDB Go Driver 2.7.0

The MongoDB Go Driver Team is pleased to release version 2.7.0 of the official MongoDB Go Driver.

Release Highlights

This release adds support for sending afterClusterTime on writes in causally consistent sessions, improving alignment between read and write behavior in session-based workflows. It also continues cleanup of session-related and internal-only APIs by deprecating the experimental session API, helping clarify which surfaces are intended for long-term public use. Alongside that, the release includes a handful of targeted quality improvements across BSON validation, change streams, and error reporting to make the driver more predictable and easier to debug.

What's Changed

✨ New Features

🐛 Fixed

... (truncated)

Commits
  • b724f0a BUMP v2.8.0
  • 794aab6 GODRIVER-4002: Add substring to QE GA (#2471)
  • df356c0 Bump golang.org/x/crypto from 0.50.0 to 0.52.0 in /internal/test/goleak (#2469)
  • a59df1a GODRIVER-4015: Bump testdata/specifications from 34479c6 to ea6be20 (#2468)
  • 5db45dc Bump github/codeql-action from 4.36.2 to 4.36.3 in the actions group (#2465)
  • 2426eed Merge pull request #2463 from matthewdale/godriver2962-rename-insert
  • 056dbf1 Merge release/2.7 into master (#2467)
  • 3c8fa07 Merge branch 'master' into merge-release/2.7-into-master-1783517184972
  • 6e6f7dd GODRIVER-3976: Skip change stream csot periodic noop interval secs (#2462)
  • dd14275 GODRIVER-3888 Move update to the mongo package. (#2450)
  • Additional commits viewable in compare view

Updates golang.org/x/image from 0.41.0 to 0.44.0

Commits
  • 891abcb go.mod: update golang.org/x dependencies
  • f50490d font: document (lack of) security hardening in font packages
  • 7a0cfda webp: check for VP8L dimension mismatch before allocation
  • 4339315 tiff: consistently skip horizontal padding in tiled images
  • b5baf41 tiff: avoid overflow when reading IFD entries
  • e7513b5 tiff: limit the amount of data read in IFD entries
  • cb9f1a6 tiff: limit uncompressed data reads
  • 304d4cc tiff: reject tiles too much larger than the image
  • 7c04344 tiff: add buffer slice overflow checks for 32-bit systems
  • c5511df webp: require that VP8/VP8L dimensions match canvas dimensions
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 20, 2026
Bumps the golang group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/dgraph-io/badger/v4](https://github.com/dgraph-io/badger) | `4.9.2` | `4.9.5` |
| [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap) | `3.4.13` | `3.4.14` |
| [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.46` | `1.14.49` |
| [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.2.0` | `7.2.1` |
| [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.20.1` | `0.21.1` |
| [go.mongodb.org/mongo-driver/v2](https://github.com/mongodb/mongo-go-driver) | `2.6.2` | `2.8.0` |
| [golang.org/x/image](https://github.com/golang/image) | `0.41.0` | `0.44.0` |



Updates `github.com/dgraph-io/badger/v4` from 4.9.2 to 4.9.5
- [Release notes](https://github.com/dgraph-io/badger/releases)
- [Changelog](https://github.com/dgraph-io/badger/blob/main/CHANGELOG.md)
- [Commits](dgraph-io/badger@v4.9.2...v4.9.5)

Updates `github.com/go-ldap/ldap/v3` from 3.4.13 to 3.4.14
- [Release notes](https://github.com/go-ldap/ldap/releases)
- [Commits](go-ldap/ldap@v3.4.13...v3.4.14)

Updates `github.com/mattn/go-sqlite3` from 1.14.46 to 1.14.49
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](mattn/go-sqlite3@v1.14.46...v1.14.49)

Updates `github.com/minio/minio-go/v7` from 7.2.0 to 7.2.1
- [Release notes](https://github.com/minio/minio-go/releases)
- [Commits](minio/minio-go@v7.2.0...v7.2.1)

Updates `github.com/prometheus/procfs` from 0.20.1 to 0.21.1
- [Release notes](https://github.com/prometheus/procfs/releases)
- [Commits](prometheus/procfs@v0.20.1...v0.21.1)

Updates `go.mongodb.org/mongo-driver/v2` from 2.6.2 to 2.8.0
- [Release notes](https://github.com/mongodb/mongo-go-driver/releases)
- [Commits](mongodb/mongo-go-driver@v2.6.2...v2.8.0)

Updates `golang.org/x/image` from 0.41.0 to 0.44.0
- [Commits](golang/image@v0.41.0...v0.44.0)

---
updated-dependencies:
- dependency-name: github.com/dgraph-io/badger/v4
  dependency-version: 4.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: github.com/go-ldap/ldap/v3
  dependency-version: 3.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: github.com/mattn/go-sqlite3
  dependency-version: 1.14.48
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: github.com/minio/minio-go/v7
  dependency-version: 7.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: github.com/prometheus/procfs
  dependency-version: 0.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: go.mongodb.org/mongo-driver/v2
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: golang.org/x/image
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/golang-ee95d195eb branch from 3db5c45 to c096e26 Compare August 3, 2026 05:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants