chore(deps): bump the go group across 3 directories with 14 updates #6145

dependabot · 2025-10-12T10:07:47Z

Bumps the go group with 7 updates in the / directory:

Package	From	To
github.com/docker/docker	`28.4.0+incompatible`	`28.5.1+incompatible`
github.com/grpc-ecosystem/grpc-gateway/v2	`2.27.2`	`2.27.3`
github.com/hashicorp/go-kms-wrapping/v2	`2.0.18`	`2.0.19`
github.com/hashicorp/vault/api	`1.21.0`	`1.22.0`
golang.org/x/crypto	`0.42.0`	`0.43.0`
golang.org/x/tools	`0.37.0`	`0.38.0`
google.golang.org/grpc	`1.75.1`	`1.76.0`

Bumps the go group with 4 updates in the /api directory: github.com/hashicorp/go-kms-wrapping/v2, google.golang.org/grpc, google.golang.org/protobuf and golang.org/x/time.
Bumps the go group with 3 updates in the /sdk directory: github.com/grpc-ecosystem/grpc-gateway/v2, github.com/hashicorp/go-kms-wrapping/v2 and google.golang.org/grpc.

Updates github.com/docker/docker from 28.4.0+incompatible to 28.5.1+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v28.5.1

28.5.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

docker/cli, 28.5.1 milestone

moby/moby, 28.5.1 milestone

Deprecated and removed features, see Deprecated Features.

Changes to the Engine API, see API version history.

Bug fixes and enhancements

Update BuildKit to v0.25.1. moby/moby#51137

Update Go runtime to 1.24.8. moby/moby#51133, docker/cli#6541

Deprecations

api/types/image: InspectResponse: deprecate Parent and DockerVersion fields. moby/moby#51105

api/types/plugin: deprecate Config.DockerVersion field. moby/moby#51110

v28.5.0

28.5.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

docker/cli, 28.5.0 milestone

moby/moby, 28.5.0 milestone

Deprecated and removed features, see Deprecated Features.

Changes to the Engine API, see API version history.

Bug fixes and enhancements

Don't print warnings in docker info for broken symlinks in CLI-plugin directories. docker/cli#6476

Fix a panic during stats on empty event Actor.ID. docker/cli#6471

Packaging updates

Remove support for legacy CBC cipher suites. docker/cli#6474

Update Buildkit to v0.25.0. moby/moby#51075

Update Dockerfile syntax to v1.19.0. moby/moby#51075

Networking

Eliminated harmless warning about deletion of endpoint_count from the data store. moby/moby#51064

Fix a bug causing IPAM plugins to not be loaded on Windows. moby/moby#51035

API

Deprecate support for kernel memory TCP accounting (KernelMemoryTCP). moby/moby#51067

Fix GET containers/{name}/checkpoints returning null instead of empty JSON array when there are no checkpoints. moby/moby#51052

... (truncated)

Commits

f8215cc Merge pull request #51137 from austinvazquez/cherry-pick-vendor-buildkit-0.25...
40a856a hack: add patch to buildkit tests
5d1c311 vendor: update buildkit to v0.25.1
90506c1 Merge pull request #51133 from vvoland/51132-28.x
17db0cd Merge pull request #51128 from thaJeztah/28.x_backport_gcpolicy-invalid-calcu...
f7c40ea update to go1.24.8
dccf7c8 builder: use proper percentage calculations for default gc policy
0f040aa Merge pull request #51126 from vvoland/51124-28.x
5b1a039 ci: fix cache for go modules
8fa4bd5 Merge pull request #51121 from crazy-max/28.x_ci-caches-fixes
Additional commits viewable in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.2 to 2.27.3

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.27.3

What's Changed

refactor(runtime): using reflect.TypeFor by @cuiweixie in grpc-ecosystem/grpc-gateway#5868

fix(runtime): annotate context even if no incoming headers by @boolangery in grpc-ecosystem/grpc-gateway#5887

feat: add Opaque API and Protobuf Editions support by @kop in grpc-ecosystem/grpc-gateway#5723

fix: annotate healthz endpoint handler by @ZY-Ang in grpc-ecosystem/grpc-gateway#5914

expand_slash_patterns=true now converts parameters with hyphens correctly by @goulashify in grpc-ecosystem/grpc-gateway#5938

New Contributors

@cuiweixie made their first contribution in grpc-ecosystem/grpc-gateway#5868

@boolangery made their first contribution in grpc-ecosystem/grpc-gateway#5887

@kop made their first contribution in grpc-ecosystem/grpc-gateway#5723

@ZY-Ang made their first contribution in grpc-ecosystem/grpc-gateway#5914

@goulashify made their first contribution in grpc-ecosystem/grpc-gateway#5938

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.2...v2.27.3

Commits

ab243ac chore(deps): update googleapis digest to 9070e63 (#5970)
30abf93 fix(deps): update module google.golang.org/protobuf to v1.36.10 (#5969)
b73048f chore(deps): update dependency bazel to v8.4.2 (#5968)
95f123b chore(deps): update googleapis digest to 3990e05 (#5967)
fb9da67 chore(deps): update googleapis digest to 063f9e1 (#5966)
208372a chore(deps): update googleapis digest to e78280f (#5965)
1a315aa fix(deps): update google.golang.org/genproto/googleapis/api digest to 57b25ae...
b862f0b fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 57b25ae...
e6cdbc7 chore(deps): update googleapis digest to eab82ec (#5962)
7fefac0 chore(deps): update googleapis digest to a4ded73 (#5961)
Additional commits viewable in compare view

Updates github.com/hashicorp/go-kms-wrapping/v2 from 2.0.18 to 2.0.19

Commits

7f7ab88 Add IBM Key Protect (IBM Cloud KMS) wrapper (#23) (#292)
a58e4f4 Update codeowners (#290)
0ed1bf9 Add pci pr template (#287)
dec44ad Update golang.org/x/crypto to v0.39.0 to resolve GO-2025-3487 (#286)
e54e60a Update golang.org/x/net to v0.38.0 to resolve GO-2025-3503 (#283)
7145b55 Update various Github Action versions using tsccr (#284)
da6aa5d Fix incompatibility between workload identity and managed identity auth (#280)
62b9bdd Update golang.org/x/net to 0.34.0 across all modules (#278)
0ea6bba Facilitate use of User Managed Identities (#277)
See full diff in compare view

Updates github.com/hashicorp/vault/api from 1.21.0 to 1.22.0

Commits

526ac82 Merge remote-tracking branch 'remotes/from/ce/main'
8041281 Backport Update vault-plugin-secrets-terraform to v0.13.0 into ce/main (#9814)
dce7d8a Backport Update vault-plugin-secrets-kubernetes to v0.12.0 into ce/main (#9811)
9cae193 Merge remote-tracking branch 'remotes/from/ce/main'
abde734 UI: Fix MFA validation timing issue (#9774) (#9799)
da04c45 Merge remote-tracking branch 'remotes/from/ce/main'
bf32d52 [UI] Ember Data Migration - KV Cleanup (#9623) (#9794)
0c3dcbc Backport Update vault-plugin-auth-azure to v0.22.0 into ce/main (#9782)
69b8abb Merge remote-tracking branch 'remotes/from/ce/main'
8cf2228 Fix auth method config submit following ember data migration (#9755) (#9793)
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.42.0 to 0.43.0

Commits

627cb89 go.mod: update golang.org/x dependencies
dca4914 acme: fix autocert TestHTTPHandlerDefaultFallback
1336e21 x509roots/fallback: update bundle
2beaa59 ssh: add VerifiedPublicKeyCallback
66c3d8c ssh: add support for FIPS mode
ddb4e80 ssh: remove custom contains, use slices.Contains
f4d47b0 ssh: return clearer error when signature algorithm is used as key format
96dc232 x509roots/fallback/bundle: add bundle package to export root certs
8c9ba31 all: freeze and deprecate more packages
559e062 ssh/agent: return an error for unexpected message types
See full diff in compare view

Updates golang.org/x/net from 0.44.0 to 0.45.0

Commits

59706cd html: impose open element stack size limit
6ec8895 html: align in row insertion mode with spec
5393563 http2: fix RFC 9218 write scheduler not being idempotent
b2ab371 internal/httpsfv: implement parsing support for date and display string
edb764c internal/httpsfv: add parsing functionality for types defined in RFC 8941
fbba2c2 internal/httpsfv: add support for consuming Display String and Date type
47a241f http2: make the error channel pool per-Server
51f657b webdav/internal/xml: use the built-in min function
f2e909b internal/httpsfv: implement parsing support for Dictionary and List type.
7d8cfce internal/httpsfv: add support for Bare Inner List and Item type.
Additional commits viewable in compare view

Updates golang.org/x/sys from 0.36.0 to 0.37.0

Commits

1edeebe unix: mkall.sh: fail if docker build failed
ecada54 unix: use slices.{Equal,Sort} in tests
5e63aa5 windows: export O_FILE_FLAG_* to be used in os.OpenFile on windows
033906b unix: add (*CPUSet).Fill helper to enable all CPUs
6be6c58 windows: add FlushConsoleInputBuffer and GetNumberOfConsoleInputEvents
32e2038 unix: use Go 1.21+ clear built-in
137f2ed sys: add support for NetBSD getvfsstat
See full diff in compare view

Updates golang.org/x/term from 0.35.0 to 0.36.0

Commits

3a0828a go.mod: update golang.org/x dependencies
See full diff in compare view

Updates golang.org/x/text from 0.29.0 to 0.30.0

Commits

c6abd03 go.mod: update golang.org/x dependencies
42f038d x/text: fix nil dereference in gotext extract
a42f0e2 all: use built-in max/min to simplify the code
See full diff in compare view

Updates golang.org/x/tools from 0.37.0 to 0.38.0

Commits

a22b5e8 go.mod: update golang.org/x dependencies
4bbcc9f all: use reflect.TypeFor instead of reflect.TypeOf when we have known the type
122c93a internal/refactor: AddImport: remove unnecessary result
76aace8 internal/analysisinternal: rationalize
8cf2d63 gopls/internal/golang: add condition for enabling package move
1f054fd x/tools: downgrade token.FileSet parameters to token.File
44e71e5 go/analysis/passes/printf: check anonymous functions too
9095e9b internal/analysisinternal: extract DeleteVar
62a1b26 internal/analysisinternal: IsChildOf(Cursor, edge.Kind) bool
d32fb50 internal/analysisinternal: export EnclosingFile
Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20250818200422-3122310a409c to 0.0.0-20250929231259-57b25ae835d4

Commits

See full diff in compare view

Updates google.golang.org/grpc from 1.75.1 to 1.76.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.76.0

Dependencies

Minimum supported Go version is now 1.24 (#8509)

Special Thanks: @kevinGC

Bug Fixes

client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#8523)

client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#8518)

Special Thanks: @vinothkumarr227

pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#8615)

New Features

credentials: Add credentials/jwt package providing file-based JWT PerRPCCredentials (A97). (#8431)

Special Thanks: @dimpavloff

Performance Improvements

client: Improve HTTP/2 header size estimate to reduce re-allocations. (#8547)

encoding/proto: Avoid redundant message size calculation when marshaling. (#8569)

Special Thanks: @rs-unity

Commits

d96c2ef Change version to 1.76.0 (#8584)
79c553c Cherry pick #8610, #8615 to v1.76.x (#8621)
0513350 client: minor improvements to log messages (#8564)
ebaf486 credentials: implement file-based JWT Call Credentials (part 1 for A97) (#8431)
ca78c90 xds/resolver_test: fix flaky test ResolverBadServiceUpdate_NACKedWithoutCache...
83bead4 internal/buffer: set closed flag when closing channel in the Load method (#8575)
0f45079 encoding/proto: enable use cached size option (#8569)
8420f3f transport: avoid slice reallocation during header creation (#8547)
b36320e Revert "stats/opentelemetry: record retry attempts from clientStream (#8342)"...
c122250 stats/opentelemetry: record retry attempts from clientStream (#8342)
Additional commits viewable in compare view

Updates github.com/hashicorp/go-kms-wrapping/v2 from 2.0.18 to 2.0.19

Commits

7f7ab88 Add IBM Key Protect (IBM Cloud KMS) wrapper (#23) (#292)
a58e4f4 Update codeowners (#290)
0ed1bf9 Add pci pr template (#287)
dec44ad Update golang.org/x/crypto to v0.39.0 to resolve GO-2025-3487 (#286)
e54e60a Update golang.org/x/net to v0.38.0 to resolve GO-2025-3503 (#283)
7145b55 Update various Github Action versions using tsccr (#284)
da6aa5d Fix incompatibility between workload identity and managed identity auth (#280)
62b9bdd Update golang.org/x/net to 0.34.0 across all modules (#278)
0ea6bba Facilitate use of User Managed Identities (#277)
See full diff in compare view

Updates google.golang.org/grpc from 1.75.1 to 1.76.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.76.0

Dependencies

Minimum supported Go version is now 1.24 (#8509)

Special Thanks: @kevinGC

Bug Fixes

client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#8523)

client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#8518)

Special Thanks: @vinothkumarr227

pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#8615)

New Features

credentials: Add credentials/jwt package providing file-based JWT PerRPCCredentials (A97). (#8431)

Special Thanks: @dimpavloff

Performance Improvements

client: Improve HTTP/2 header size estimate to reduce re-allocations. (#8547)

encoding/proto: Avoid redundant message size calculation when marshaling. (#8569)

Special Thanks: @rs-unity

Commits

d96c2ef Change version to 1.76.0 (#8584)
79c553c Cherry pick #8610, #8615 to v1.76.x (#8621)
0513350 client: minor improvements to log messages (#8564)
ebaf486 credentials: implement file-based JWT Call Credentials (part 1 for A97) (#8431)
ca78c90 xds/resolver_test: fix flaky test ResolverBadServiceUpdate_NACKedWithoutCache...
83bead4 internal/buffer: set closed flag when closing channel in the Load method (#8575)
0f45079 encoding/proto: enable use cached size option (#8569)
8420f3f transport: avoid slice reallocation during header creation (#8547)
b36320e Revert "stats/opentelemetry: record retry attempts from clientStream (#8342)"...
c122250 stats/opentelemetry: record retry attempts from clientStream (#8342)
Additional commits viewable in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.2 to 2.27.3

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.27.3

What's Changed

refactor(runtime): using reflect.TypeFor by @cuiweixie in grpc-ecosystem/grpc-gateway#5868

fix(runtime): annotate context even if no incoming headers by @boolangery in grpc-ecosystem/grpc-gateway#5887

feat: add Opaque API and Protobuf Editions support by @kop in grpc-ecosystem/grpc-gateway#5723

fix: annotate healthz endpoint handler by @ZY-Ang in grpc-ecosystem/grpc-gateway#5914

expand_slash_patterns=true now converts parameters with hyphens correctly by @goulashify in grpc-ecosystem/grpc-gateway#5938

New Contributors

@cuiweixie made their first contribution in grpc-ecosystem/grpc-gateway#5868

@boolangery made their first contribution in grpc-ecosystem/grpc-gateway#5887

@kop made their first contribution in grpc-ecosystem/grpc-gateway#5723

@ZY-Ang made their first contribution in grpc-ecosystem/grpc-gateway#5914

@goulashify made their first contribution in grpc-ecosystem/grpc-gateway#5938

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.2...v2.27.3

Commits

ab243ac chore(deps): update googleapis digest to 9070e63 (#5970)
30abf93 fix(deps): update module google.golang.org/protobuf to v1.36.10 (#5969)
b73048f chore(deps): update dependency bazel to v8.4.2 (#5968)
95f123b chore(deps): update googleapis digest to 3990e05 (#5967)
fb9da67 chore(deps): update googleapis digest to 063f9e1 (#5966)
208372a chore(deps): update googleapis digest to e78280f (#5965)
1a315aa fix(deps): update google.golang.org/genproto/googleapis/api digest to 57b25ae...
b862f0b fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 57b25ae...
e6cdbc7 chore(deps): update googleapis digest to eab82ec (#5962)
7fefac0 chore(deps): update googleapis digest to a4ded73 (#5961)
Additional commits viewable in compare view

Updates github.com/hashicorp/go-kms-wrapping/v2 from 2.0.18 to 2.0.19

Commits

7f7ab88 Add IBM Key Protect (IBM Cloud KMS) wrapper (#23) (#292)
a58e4f4 Update codeowners (#290)
0ed1bf9 Add pci pr template (#287)
dec44ad Update golang.org/x/crypto to v0.39.0 to resolve GO-2025-3487 (#286)
e54e60a Update golang.org/x/net to v0.38.0 to resolve GO-2025-3503 (#283)
7145b55 Update various Github Action versions using tsccr (#284)
da6aa5d Fix incompatibility between workload identity and managed identity auth (#280)
62b9bdd Update golang.org/x/net to 0.34.0 across all modules (#278)
0ea6bba Facilitate use of User Managed Identities (#277)
See full diff in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20250818200422-3122310a409c to 0.0.0-20250929231259-57b25ae835d4

Commits

See full diff in compare view

Updates google.golang.org/grpc from 1.75.1 to 1.76.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.76.0

Dependencies

Minimum supported Go version is now 1.24 (#8509)

Special Thanks: @kevinGC

Bug Fixes

client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#8523)

client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#8518)

Special Thanks: @vinothkumarr227

pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#8615)

New Features

credentials: Add credentials/jwt package providing file-based JWT PerRPCCredentials (A97). (#8431)

Special Thanks: @dimpavloff

Performance Improvements

client: Improve HTTP/2 header size estimate to reduce re-allocations. (#8547)

encoding/proto: Avoid redundant message size calculation when marshaling. (#8569)

Special Thanks: @rs-unity

Commits

d96c2ef Change version to 1.76.0 (#8584)
79c553c Cherry pick #8610, #8615 to v1.76.x (#8621)
0513350 client: minor improvements to log messages (#8564)
ebaf486 credentials: implement file-based JWT Call Credentials (part 1 for A97) (#8431)
ca78c90 xds/resolver_test: fix flaky test ResolverBadServiceUpdate_NACKedWithoutCache...
83bead4 internal/buffer: set closed flag when closing channel in the Load method (#8575)
0f45079 encoding/proto: enable use cached size option (#8569)
8420f3f transport: avoid slice reallocation during header creation (#8547)
b36320e Revert "stats/opentelemetry: record retry attempts from clientStream (#8342)"...
c122250 stats/opentelemetry: record retry attempts from clientStream (#8342)
Additional commits viewable in compare view

Updates github.com/hashicorp/go-kms-wrapping/v2 from 2.0.18 to 2.0.19

Commits

7f7ab88 Add IBM Key Protect (IBM Cloud KMS) wrapper (#23) (#292)
a58e4f4 Update codeowners (#290)
0ed1bf9 Add pci pr template (#287)
dec44ad Update golang.org/x/crypto to v0.39.0 to resolve GO-2025-3487 (#286)
e54e60a Update golang.org/x/net to v0.38.0 to resolve GO-2025-3503 (#283)
7145b55 Update various Github Action versions using tsccr (#284)
da6aa5d Fix incompatibility between workload identity and managed identity auth (#280)
62b9bdd Update golang.org/x/net to 0.34.0 across all modules (#278)
0ea6bba Facilitate use of User Managed Identities (#277)
See full diff in compare view

Updates google.golang.org/grpc from 1.75.1 to 1.76.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.76.0

Dependencies

Minimum supported Go version is now 1.24 (#8509)

Special Thanks: @kevinGC

Bug Fixes

client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#8523)

client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#8518)

Special Thanks: @vinothkumarr227

pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#8615)

New Features

credentials: Add credentials/jwt package providing file-based JWT PerRPCCredentials (A97). (#8431)

Special Thanks: @dimpavloff

Performance Improvements

client: Improve HTTP/2 header size estimate to reduce re-allocations. (#8547)

encoding/proto: Avoid redundant message size calculation when marshaling. (#8569)

Special Thanks: @rs-unity

Commits

d96c2ef Change version to 1.76.0 (#8584)
79c553c Cherry pick #8610, #8615 to v1.76.x (#8621)
0513350 client: minor improvements to log messages (#8564)
ebaf486 credentials: implement file-based JWT Call Credentials (part 1 for A97) (#8431)
ca78c90 xds/resolver_test: fix flaky test ResolverBadServiceUpdate_NACKedWithoutCache...
83bead4 internal/buffer: set closed flag when closing channel in the Load method (#8575)
0f45079 encoding/proto: enable use cached size option (#8569)
8420f3f transport: avoid slice reallocation during header creation (#8547)
b36320e Revert "stats/opentelemetry: record retry attempts from clientStream (#8342)"...
c122250 stats/opentelemetry: record retry attempts from clientStream (#8342)
Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.36.9 to 1.36.10

Updates github.com/hashicorp/go-kms-wrapping/v2 from 2.0.18 to 2.0.19

Commits

7f7ab88 Add IBM Key Protect (IBM Cloud KMS) wrapper (#23) (#292)
a58e4f4 Update codeowners (#290)
0ed1bf9 Add pci pr template (#287)
dec44ad Update golang.org/x/crypto to v0.39.0 to resolve GO-2025-3487 (#286)
e54e60a Update golang.org/x/net to v0.38.0 to resolve GO-2025-3503 (#283)
7145b55 Update various Github Action versions using tsccr (#284)
da6aa5d Fix incompatibility between workload identity and managed identity auth (#280)
62b9bdd Update golang.org/x/net to 0.34.0 across all modules (#278)
0ea6bba Facilitate use of User Managed Identities (#277)
See full diff in compare view

Updates golang.org/x/time from 0.13.0 to 0.14.0

Commits

2b4e439 rate: use time.Time.Equal instead of ==<...
Description has been truncated

Bumps the go group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/docker/docker](https://github.com/docker/docker) | `28.4.0+incompatible` | `28.5.1+incompatible` | | [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.27.2` | `2.27.3` | | [github.com/hashicorp/go-kms-wrapping/v2](https://github.com/hashicorp/go-kms-wrapping) | `2.0.18` | `2.0.19` | | [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault) | `1.21.0` | `1.22.0` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.42.0` | `0.43.0` | | [golang.org/x/tools](https://github.com/golang/tools) | `0.37.0` | `0.38.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.75.1` | `1.76.0` | Bumps the go group with 4 updates in the /api directory: [github.com/hashicorp/go-kms-wrapping/v2](https://github.com/hashicorp/go-kms-wrapping), [google.golang.org/grpc](https://github.com/grpc/grpc-go), google.golang.org/protobuf and [golang.org/x/time](https://github.com/golang/time). Bumps the go group with 3 updates in the /sdk directory: [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway), [github.com/hashicorp/go-kms-wrapping/v2](https://github.com/hashicorp/go-kms-wrapping) and [google.golang.org/grpc](https://github.com/grpc/grpc-go). Updates `github.com/docker/docker` from 28.4.0+incompatible to 28.5.1+incompatible - [Release notes](https://github.com/docker/docker/releases) - [Commits](moby/moby@v28.4.0...v28.5.1) Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.2 to 2.27.3 - [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases) - [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/main/.goreleaser.yml) - [Commits](grpc-ecosystem/grpc-gateway@v2.27.2...v2.27.3) Updates `github.com/hashicorp/go-kms-wrapping/v2` from 2.0.18 to 2.0.19 - [Commits](hashicorp/go-kms-wrapping@v2.0.18...v2.0.19) Updates `github.com/hashicorp/vault/api` from 1.21.0 to 1.22.0 - [Release notes](https://github.com/hashicorp/vault/releases) - [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG-v1.10-v1.15.md) - [Commits](hashicorp/vault@api/v1.21.0...api/v1.22.0) Updates `golang.org/x/crypto` from 0.42.0 to 0.43.0 - [Commits](golang/crypto@v0.42.0...v0.43.0) Updates `golang.org/x/net` from 0.44.0 to 0.45.0 - [Commits](golang/net@v0.44.0...v0.45.0) Updates `golang.org/x/sys` from 0.36.0 to 0.37.0 - [Commits](golang/sys@v0.36.0...v0.37.0) Updates `golang.org/x/term` from 0.35.0 to 0.36.0 - [Commits](golang/term@v0.35.0...v0.36.0) Updates `golang.org/x/text` from 0.29.0 to 0.30.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.29.0...v0.30.0) Updates `golang.org/x/tools` from 0.37.0 to 0.38.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.37.0...v0.38.0) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250818200422-3122310a409c to 0.0.0-20250929231259-57b25ae835d4 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.75.1 to 1.76.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.75.1...v1.76.0) Updates `github.com/hashicorp/go-kms-wrapping/v2` from 2.0.18 to 2.0.19 - [Commits](hashicorp/go-kms-wrapping@v2.0.18...v2.0.19) Updates `google.golang.org/grpc` from 1.75.1 to 1.76.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.75.1...v1.76.0) Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.2 to 2.27.3 - [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases) - [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/main/.goreleaser.yml) - [Commits](grpc-ecosystem/grpc-gateway@v2.27.2...v2.27.3) Updates `github.com/hashicorp/go-kms-wrapping/v2` from 2.0.18 to 2.0.19 - [Commits](hashicorp/go-kms-wrapping@v2.0.18...v2.0.19) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250818200422-3122310a409c to 0.0.0-20250929231259-57b25ae835d4 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.75.1 to 1.76.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.75.1...v1.76.0) Updates `github.com/hashicorp/go-kms-wrapping/v2` from 2.0.18 to 2.0.19 - [Commits](hashicorp/go-kms-wrapping@v2.0.18...v2.0.19) Updates `google.golang.org/grpc` from 1.75.1 to 1.76.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.75.1...v1.76.0) Updates `google.golang.org/protobuf` from 1.36.9 to 1.36.10 Updates `github.com/hashicorp/go-kms-wrapping/v2` from 2.0.18 to 2.0.19 - [Commits](hashicorp/go-kms-wrapping@v2.0.18...v2.0.19) Updates `golang.org/x/time` from 0.13.0 to 0.14.0 - [Commits](golang/time@v0.13.0...v0.14.0) Updates `google.golang.org/grpc` from 1.75.1 to 1.76.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.75.1...v1.76.0) Updates `google.golang.org/protobuf` from 1.36.9 to 1.36.10 Updates `github.com/hashicorp/go-kms-wrapping/v2` from 2.0.18 to 2.0.19 - [Commits](hashicorp/go-kms-wrapping@v2.0.18...v2.0.19) Updates `google.golang.org/grpc` from 1.75.1 to 1.76.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.75.1...v1.76.0) Updates `google.golang.org/protobuf` from 1.36.9 to 1.36.10 Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.2 to 2.27.3 - [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases) - [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/main/.goreleaser.yml) - [Commits](grpc-ecosystem/grpc-gateway@v2.27.2...v2.27.3) Updates `github.com/hashicorp/go-kms-wrapping/v2` from 2.0.18 to 2.0.19 - [Commits](hashicorp/go-kms-wrapping@v2.0.18...v2.0.19) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250818200422-3122310a409c to 0.0.0-20250929231259-57b25ae835d4 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.75.1 to 1.76.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.75.1...v1.76.0) Updates `google.golang.org/protobuf` from 1.36.9 to 1.36.10 Updates `github.com/hashicorp/go-kms-wrapping/v2` from 2.0.18 to 2.0.19 - [Commits](hashicorp/go-kms-wrapping@v2.0.18...v2.0.19) Updates `google.golang.org/grpc` from 1.75.1 to 1.76.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.75.1...v1.76.0) Updates `google.golang.org/protobuf` from 1.36.9 to 1.36.10 Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.2 to 2.27.3 - [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases) - [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/main/.goreleaser.yml) - [Commits](grpc-ecosystem/grpc-gateway@v2.27.2...v2.27.3) Updates `github.com/hashicorp/go-kms-wrapping/v2` from 2.0.18 to 2.0.19 - [Commits](hashicorp/go-kms-wrapping@v2.0.18...v2.0.19) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250818200422-3122310a409c to 0.0.0-20250929231259-57b25ae835d4 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.75.1 to 1.76.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.75.1...v1.76.0) Updates `google.golang.org/protobuf` from 1.36.9 to 1.36.10 --- updated-dependencies: - dependency-name: github.com/docker/docker dependency-version: 28.5.1+incompatible dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2 dependency-version: 2.27.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-kms-wrapping/v2 dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/vault/api dependency-version: 1.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/crypto dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/net dependency-version: 0.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/sys dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/term dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/text dependency-version: 0.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/tools dependency-version: 0.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20250929231259-57b25ae835d4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/grpc dependency-version: 1.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/hashicorp/go-kms-wrapping/v2 dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/grpc dependency-version: 1.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2 dependency-version: 2.27.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-kms-wrapping/v2 dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20250929231259-57b25ae835d4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/grpc dependency-version: 1.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/hashicorp/go-kms-wrapping/v2 dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/grpc dependency-version: 1.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-kms-wrapping/v2 dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: golang.org/x/time dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/grpc dependency-version: 1.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-kms-wrapping/v2 dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/grpc dependency-version: 1.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2 dependency-version: 2.27.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-kms-wrapping/v2 dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20250929231259-57b25ae835d4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/grpc dependency-version: 1.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-kms-wrapping/v2 dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/grpc dependency-version: 1.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2 dependency-version: 2.27.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-kms-wrapping/v2 dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20250929231259-57b25ae835d4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/grpc dependency-version: 1.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 12, 2025

dependabot bot requested a review from a team as a code owner October 12, 2025 10:07

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 12, 2025

github-actions bot added the api label Oct 12, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the go group across 3 directories with 14 updates #6145

chore(deps): bump the go group across 3 directories with 14 updates #6145

Uh oh!

dependabot bot commented on behalf of github Oct 12, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

chore(deps): bump the go group across 3 directories with 14 updates #6145

Are you sure you want to change the base?

chore(deps): bump the go group across 3 directories with 14 updates #6145

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 12, 2025

v28.5.1

28.5.1

Bug fixes and enhancements

Deprecations

v28.5.0

28.5.0

Bug fixes and enhancements

Packaging updates

Networking

API

v2.27.3

What's Changed

New Contributors

Release 1.76.0

Dependencies

Bug Fixes

New Features

Performance Improvements

Release 1.76.0

Dependencies

Bug Fixes

New Features

Performance Improvements

v2.27.3

What's Changed

New Contributors

Release 1.76.0

Dependencies

Bug Fixes

New Features

Performance Improvements

Release 1.76.0

Dependencies

Bug Fixes

New Features

Performance Improvements

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants