dev: bump the safe group across 1 directory with 9 updates by dependabot[bot] · Pull Request #7965 · TheThingsNetwork/lorawan-stack

dependabot · 2026-07-08T12:15:33Z

Bumps the safe group with 9 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go-v2/config	`1.32.24`	`1.32.28`
github.com/aws/aws-sdk-go-v2/service/s3	`1.103.3`	`1.105.0`
github.com/coder/websocket	`1.8.14`	`1.8.15`
github.com/felixge/httpsnoop	`1.0.4`	`1.1.0`
github.com/getsentry/sentry-go	`0.46.2`	`0.47.0`
github.com/klauspost/compress	`1.18.6`	`1.19.0`
github.com/nats-io/nats-server/v2	`2.14.2`	`2.14.3`
golang.org/x/net	`0.55.0`	`0.56.0`
golang.org/x/sync	`0.21.0`	`0.22.0`

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.24 to 1.32.28

Commits

fc087ca Release 2026-07-06
a0dc66e Regenerated Clients
0e93979 Update endpoints model
1e51eb5 Update API model
a4cd1c9 add serialization snapshot tests (#3463)
8d5a855 set rollout strategy 2 (#3467)
bdb9681 Release 2026-07-02
dad37d5 Regenerated Clients
019a359 Update endpoints model
c51ba98 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.103.3 to 1.105.0

Commits

fc087ca Release 2026-07-06
a0dc66e Regenerated Clients
0e93979 Update endpoints model
1e51eb5 Update API model
a4cd1c9 add serialization snapshot tests (#3463)
8d5a855 set rollout strategy 2 (#3467)
bdb9681 Release 2026-07-02
dad37d5 Regenerated Clients
019a359 Update endpoints model
c51ba98 Update API model
Additional commits viewable in compare view

Updates github.com/coder/websocket from 1.8.14 to 1.8.15

Release notes

Sourced from github.com/coder/websocket's releases.

v1.8.15

Changes

chore: fix typo in Accept function by @IgorSilvestre in coder/websocket#544

fix: transmit in single frame when compression enabled by @DanielleMaywood in coder/websocket#552

docs: add document for AI agents (AGENTS.md) by @mafredri in coder/websocket#547

docs: remove mention of resolved issue in README by @tamird in coder/websocket#556

docs: fix lint issue by @mafredri in coder/websocket#557

docs: fix roadmap links after repo transfer by @GeObts in coder/websocket#558

avoid per-frame cleanup closures on read to remove 2 allocs per frame read by @mitchellh in coder/websocket#565

conn: skip timeout callbacks for background contexts by @mitchellh in coder/websocket#566

New Contributors

@IgorSilvestre made their first contribution in coder/websocket#544

@tamird made their first contribution in coder/websocket#556

@GeObts made their first contribution in coder/websocket#558

@mitchellh made their first contribution in coder/websocket#565

Full Changelog: coder/websocket@v1.8.14...v1.8.15

Commits

9c8faad conn: skip timeout callbacks for background contexts (#566)
7039364 avoid per-frame cleanup closures on read to remove 2 allocs per frame read (#...
d099e16 docs: fix roadmap links (#558)
c98e9dc docs: fix lint issue (#557)
39b7b07 docs: remove mention of resolved issue in README (#556)
9f473ad docs: add document for AI agents (AGENTS.md) (#547)
8d3545a fix: transmit in single frame when compression enabled (#552)
8bf6dd2 chore: fix typo in Accept function (#544)
See full diff in compare view

Updates github.com/felixge/httpsnoop from 1.0.4 to 1.1.0

Release notes

Sourced from github.com/felixge/httpsnoop's releases.

v1.1.0

felixge/httpsnoop@v1.0.4...v1.1.0

Commits

0fc9006 fix: preserve hooks for added writer interfaces (#35)
e413b2a Bump golang version, add io.StringWriter and improve performance (#33)
9a9390b fix: populate duration when handler panics (#31)
d3fc968 feat: Support SetReadDeadline, SetWriteDeadline and EnableFullDuplex (#29)
See full diff in compare view

Updates github.com/getsentry/sentry-go from 0.46.2 to 0.47.0

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.47.0

Breaking Changes 🛠
Fix transaction_info source getting set incorrectly across HTTP middleware integrations (http, fasthttp, fiber). Users should now expect traces to properly get grouped with their parameterized path. Transactions in affected integrations may regroup after upgrading. by @giortzisg in #1325
remove deprecatedotel.NewSentrySpanProcessor. Users should now use the sentryotlp.NewTraceExporter instead by @giortzisg in #1307
// Before
sentry.Init(sentry.ClientOptions{Dsn: dsn, EnableTracing: true, TracesSampleRate: 1.0})
tp := sdktrace.NewTracerProvider(
sdktrace.WithSpanProcessor(sentryotel.NewSentrySpanProcessor()),
)
otel.SetTextMapPropagator(sentryotel.NewSentryPropagator())
otel.SetTracerProvider(tp)
// After:
sentry.Init(sentry.ClientOptions{
Dsn: dsn, EnableTracing: true, TracesSampleRate: 1.0,
Integrations: func(i []sentry.Integration) []sentry.Integration {
return append(i, sentryotel.NewOtelIntegration())
},
})
exporter, _ := sentryotlp.NewTraceExporter(ctx, dsn)
tp := sdktrace.NewTracerProvider(sdktrace.WithBatcher(exporter))
otel.SetTracerProvider(tp)
Enable logs by default to skip double allow behavior. Enabling logs now happens once when setting up either sentry.NewLogger or any supported integration. Also the EnableLogs flag changes to DisableLogs for a global override switch by @giortzisg in #1306

Remove the ContextifyFrames integration. The recommended way to add source context is SCM by @giortzisg in #1302
New Features ✨
Add fiber v3 integration by @giortzisg in #1324

Bump fasthttp from 1.51.0 to 1.71.0 by @giortzisg in #1324
Add sentrysql SQL tracing integration by @giortzisg in #1305

Supports multiple integration paths depending on how your app opens database connections: sentrysql.Open(...), sentrysql.OpenDB(...), and wrapped drivers/connectors for custom setups.

Database metadata is not inferred in every setup. If the database name is not discoverable automatically, pass sentrysql.WithDatabaseName(...) so spans are populated correctly.

Example:
 // Simple driver-based setup
 db, err := sentrysql.Open("sqlite", ":memory:",
     sentrysql.WithDatabaseSystem(sentrysql.SystemSQLite),
     sentrysql.WithDatabaseName("main"),
 )
Internal Changes 🔧

Deps

... (truncated)

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.47.0

Breaking Changes 🛠
Fix transaction_info source getting set incorrectly across HTTP middleware integrations (http, fasthttp, fiber). Users should now expect traces to properly get grouped with their parameterized path. Transactions in affected integrations may regroup after upgrading. by @giortzisg in #1325
remove deprecatedotel.NewSentrySpanProcessor. Users should now use the sentryotlp.NewTraceExporter instead by @giortzisg in #1307
// Before
sentry.Init(sentry.ClientOptions{Dsn: dsn, EnableTracing: true, TracesSampleRate: 1.0})
tp := sdktrace.NewTracerProvider(
sdktrace.WithSpanProcessor(sentryotel.NewSentrySpanProcessor()),
)
otel.SetTextMapPropagator(sentryotel.NewSentryPropagator())
otel.SetTracerProvider(tp)
// After:
sentry.Init(sentry.ClientOptions{
Dsn: dsn, EnableTracing: true, TracesSampleRate: 1.0,
Integrations: func(i []sentry.Integration) []sentry.Integration {
return append(i, sentryotel.NewOtelIntegration())
},
})
exporter, _ := sentryotlp.NewTraceExporter(ctx, dsn)
tp := sdktrace.NewTracerProvider(sdktrace.WithBatcher(exporter))
otel.SetTracerProvider(tp)
Enable logs by default to skip double allow behavior. Enabling logs now happens once when setting up either sentry.NewLogger or any supported integration. Also the EnableLogs flag changes to DisableLogs for a global override switch by @giortzisg in #1306

Remove the ContextifyFrames integration. The recommended way to add source context is SCM by @giortzisg in #1302
New Features ✨
Add fiber v3 integration by @giortzisg in #1324

Bump fasthttp from 1.51.0 to 1.71.0 by @giortzisg in #1324
Add sentrysql SQL tracing integration by @giortzisg in #1305

Supports multiple integration paths depending on how your app opens database connections: sentrysql.Open(...), sentrysql.OpenDB(...), and wrapped drivers/connectors for custom setups.

Database metadata is not inferred in every setup. If the database name is not discoverable automatically, pass sentrysql.WithDatabaseName(...) so spans are populated correctly.

Example:
 // Simple driver-based setup
 db, err := sentrysql.Open("sqlite", ":memory:",
     sentrysql.WithDatabaseSystem(sentrysql.SystemSQLite),
     sentrysql.WithDatabaseName("main"),
 )
Internal Changes 🔧

Deps

... (truncated)

Commits

9b7a562 release: 0.47.0
320597c chore: update bump-version script to also bump crosstest (#1327)
02a836d build(deps): sync go.work (#1326)
dc18868 feat: add fiberv3 integration (#1324)
f970fb5 feat: add sql transaction instrumentation (#1305)
1010c03 fix!: transaction source for integrations (#1325)
97b9ddf build(deps): bump getsentry/github-workflows from 71588ddf95134f804e82c5970a8...
9cce79e feat(sql): add lexer and obfuscator (#1299)
063a573 feat(sql): add span instrumentation (#1286)
34d7db0 chore(otel): remove unused semconv helpers (#1321)
Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.18.6 to 1.19.0

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.19.0

What's Changed

zstd: Add true concurrent stream encoding by @klauspost in klauspost/compress#1136

zstd: arm64 decoder asm by @lizthegrey in klauspost/compress#1160

zstd: avoid unused BuildDict encoder allocation by @snissn in klauspost/compress#1147

flate: Add inflate checkpoints by @klauspost in klauspost/compress#1154

snappy/s2: Limit length of varint in decodedLen by @eustas in klauspost/compress#1148

gzhttp: match qvalue parameter case-insensitively (RFC 7231) by @z9z in klauspost/compress#1149

zip: add NameDecoder callback for legacy encoding rewrite by @SAY-5 in klauspost/compress#1150

huff0: Allow building tables from histogram. by @klauspost in klauspost/compress#1155

huff0: Allow building table from oversized histogram. by @klauspost in klauspost/compress#1156

s2sx: Clean symlink targets by @klauspost in klauspost/compress#1163

New Contributors

@snissn made their first contribution in klauspost/compress#1147

@eustas made their first contribution in klauspost/compress#1148

@z9z made their first contribution in klauspost/compress#1149

@SAY-5 made their first contribution in klauspost/compress#1150

@HNO3Miracle made their first contribution in klauspost/compress#1165

Full Changelog: klauspost/compress@v1.18.6...v1.19.0

v1.18.7

Fix s2.NewDict OOB read.

Security release without other changes.

Full Changelog: klauspost/compress@v1.18.6...v1.18.7

Commits

f0953f9 flate: fix buffer formatting in tests (#1165)
ab2e3cc zstd: Add arm64 decoder asm (#1160)
bb2723d Merge commit from fork
539243b s2sx: Clean symlink targets (#1163)
bd9228c Apply go fix and check in CI (#1158)
4cc176c zstd: Add true concurrent stream encoding (#1136)
4705fcb build(deps): bump the github-actions group with 3 updates (#1157)
e9c2e56 huff0: Allow building table from oversized histogram. (#1156)
ecdb779 huff0: Allow building tables from histogram. (#1155)
38efa45 zip: add NameDecoder callback for legacy encoding rewrite (#1150)
Additional commits viewable in compare view

Updates github.com/nats-io/nats-server/v2 from 2.14.2 to 2.14.3

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.14.3

Changelog

Refer to the 2.14 Upgrade Guide for backwards compatibility notes with 2.12.x. Please note that the 2.13.x version was skipped.

Go Version

1.26.4 (#8281)

Dependencies

golang.org/x/crypto v0.53.0 (#8297)

golang.org/x/sys v0.46.0 (#8297)

github.com/nats-io/jwt/v2 v2.8.2

github.com/nats-io/nkeys v0.4.16

Improved

General

Per-connection log lines that could be noisy in normal operation have been demoted to debug level (#8289)

Writer options are now applied consistently when using the s2_fast compression mode (#8047)

JetStream

Stream and consumer assignment handling has been refactored for more consistent migration and info behavior (#8262)

Meta, stream and consumer write errors are now registered more consistently for health and recovery handling (#8293)

Removed

Monitoring

JSONP callback support has been removed from monitoring endpoints

Fixed

General

Long-running reconnect and OCSP loops no longer retain unused timers, reducing memory pressure over time (#8204)

Inherited JWT default permissions are now refreshed when account claims are updated (#8276)

External auth configuration is now cleared correctly when account claims are updated (#8275)

PROXY protocol detection, TLS sniffing with allow_non_tls and PROXY v1 address-family parsing have been fixed (#8302)

A race in gateway CONNECT handling has been fixed (#8306)

Trusted proxy tracking no longer leaks closed clients during concurrent updates (#8307)

Service import replies can now be delivered across cluster routes (#8317)

Message tracing now works correctly with service imports and exports

Several panic, fatal and data race conditions in authentication, routing, monitoring and clustered request handling have been fixed

NoAuthUser now checks connection restrictions

Leaf connections no longer bypass Nats-Trace-Dest publish permission checks

CONNZ and SUBSZ pagination now guard against Offset and Limit integer overflow panics

... (truncated)

Commits

9b17a58 Release v2.14.3
2be2525 Release v2.14.3-RC.2
563d55f Cherry-picks for v2.14.3-RC.2 (#126)
e242ca0 NRG: Don't campaign with an uncommitted membership change about ourselves
0e4d935 NRG: Exclude uncommitted membership change from snapshot
0ab7302 NRG: Remove redundant known peer tracking
6eb7d76 NRG: Truncated uncommitted membership change leaves stale state
8157b56 [TEST] Campaign early on NRG tests
712b3d2 [FIXED] Nil pointer panic when resolver dir parent is not traversable
f11c26b [FIXED] Skipped messages set last time to now
Additional commits viewable in compare view

Updates golang.org/x/net from 0.55.0 to 0.56.0

Commits

9e7fdbf internal/http3: fix wrong argument being given when validating header value
b686e5f internal/http3: add gzip support to transport
8a34885 go.mod: update golang.org/x dependencies
72eaf98 dns/dnsmessage: correctly validate SVCB record parameter order
82e7868 dns/dnsmessage: avoid panic when parsing SVCB record with truncated data
b64f1fa internal/http3: add server support for "Trailer:" magic prefix
2707ee2 internal/http3: implement HTTP/3 clientConn methods
31358cc internal/http3: snapshot response headers at WriteHeader time
8ecbaa9 html: don't adjust xml:base
8ae811a html: properly handle end script tag in fragment mode
Additional commits viewable in compare view

Updates golang.org/x/sync from 0.21.0 to 0.22.0

Commits

1eb64d4 semaphore: panic on negative weights
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the safe group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.24` | `1.32.28` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.103.3` | `1.105.0` | | [github.com/coder/websocket](https://github.com/coder/websocket) | `1.8.14` | `1.8.15` | | [github.com/felixge/httpsnoop](https://github.com/felixge/httpsnoop) | `1.0.4` | `1.1.0` | | [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) | `0.46.2` | `0.47.0` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.6` | `1.19.0` | | [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) | `2.14.2` | `2.14.3` | | [golang.org/x/net](https://github.com/golang/net) | `0.55.0` | `0.56.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.21.0` | `0.22.0` | Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.24 to 1.32.28 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.24...config/v1.32.28) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.103.3 to 1.105.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.103.3...service/s3/v1.105.0) Updates `github.com/coder/websocket` from 1.8.14 to 1.8.15 - [Release notes](https://github.com/coder/websocket/releases) - [Commits](coder/websocket@v1.8.14...v1.8.15) Updates `github.com/felixge/httpsnoop` from 1.0.4 to 1.1.0 - [Release notes](https://github.com/felixge/httpsnoop/releases) - [Commits](felixge/httpsnoop@v1.0.4...v1.1.0) Updates `github.com/getsentry/sentry-go` from 0.46.2 to 0.47.0 - [Release notes](https://github.com/getsentry/sentry-go/releases) - [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-go@v0.46.2...v0.47.0) Updates `github.com/klauspost/compress` from 1.18.6 to 1.19.0 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.18.6...v1.19.0) Updates `github.com/nats-io/nats-server/v2` from 2.14.2 to 2.14.3 - [Release notes](https://github.com/nats-io/nats-server/releases) - [Changelog](https://github.com/nats-io/nats-server/blob/main/RELEASES.md) - [Commits](nats-io/nats-server@v2.14.2...v2.14.3) Updates `golang.org/x/net` from 0.55.0 to 0.56.0 - [Commits](golang/net@v0.55.0...v0.56.0) Updates `golang.org/x/sync` from 0.21.0 to 0.22.0 - [Commits](golang/sync@v0.21.0...v0.22.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.105.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: github.com/coder/websocket dependency-version: 1.8.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: github.com/felixge/httpsnoop dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: github.com/getsentry/sentry-go dependency-version: 0.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: github.com/klauspost/compress dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: github.com/nats-io/nats-server/v2 dependency-version: 2.14.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: golang.org/x/net dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: golang.org/x/sync dependency-version: 0.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 8, 2026

dependabot Bot requested a review from a team as a code owner July 8, 2026 12:15

dependabot Bot requested a review from halimi July 8, 2026 12:15

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 8, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

dev: bump the safe group across 1 directory with 9 updates#7965

dev: bump the safe group across 1 directory with 9 updates#7965
dependabot[bot] wants to merge 1 commit into
v3.36from
dependabot/go_modules/safe-d88581e65a

dependabot Bot commented on behalf of github Jul 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 8, 2026

v1.8.15

Changes

New Contributors

v1.1.0

0.47.0

Breaking Changes 🛠

New Features ✨

Internal Changes 🔧

Deps

0.47.0

Breaking Changes 🛠

New Features ✨

Internal Changes 🔧

Deps

v1.19.0

What's Changed

New Contributors

v1.18.7

Release v2.14.3

Changelog

Go Version

Dependencies

Improved

Removed

Fixed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants