Skip to content

build(deps): bump the go_modules group across 4 directories with 7 updates - #906

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/registry-kit/go_modules-e028ee437a
Open

build(deps): bump the go_modules group across 4 directories with 7 updates#906
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/registry-kit/go_modules-e028ee437a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go_modules group with 6 updates in the / directory:

Package From To
github.com/getkin/kin-openapi 0.133.0 0.144.0
github.com/grafana/loki/v3 3.0.0-20250710111934-7be3efac7bc5 3.6.4
github.com/moby/go-archive 0.2.0 0.3.0
github.com/oapi-codegen/oapi-codegen/v2 2.5.1 2.7.1
github.com/pion/dtls/v3 3.1.2 3.1.4
github.com/pion/stun/v3 3.1.2 3.1.5

Bumps the go_modules group with 3 updates in the /integration-tests directory: github.com/moby/go-archive, github.com/pion/dtls/v3 and github.com/pion/stun/v3.
Bumps the go_modules group with 1 update in the /party-ceremony/integration-tests directory: github.com/moby/go-archive.
Bumps the go_modules group with 1 update in the /registry-kit directory: github.com/moby/go-archive.

Updates github.com/getkin/kin-openapi from 0.133.0 to 0.144.0

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.144.0

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.143.0...v0.144.0

v0.143.0

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.142.0...v0.143.0

v0.142.0

What's Changed

Full Changelog: getkin/kin-openapi@v0.141.0...v0.142.0

v0.141.0

What's Changed

... (truncated)

Commits
  • f0407d5 Merge commit from fork
  • c947670 some fixes to please my moulinette (#1232)
  • 68ac2af Merge commit from fork
  • 3e5d7f4 openapi3filter: prefer non-empty value for repeated scalar query params (#1231)
  • 30e2923 Merge commit from fork
  • c11a481 openapi3gen: inline embedded struct with options-only JSON tag (#1229)
  • 0fb1f0e openapi3filter: skip schema checks for empty allowEmptyValue strings (#1228)
  • a872c57 openapi3: stable codes for validation errors (#1223)
  • d2f115e openapi3: preserve origin for a $ref to a schema under an arbitrary top-level...
  • 49523e0 openapi3filter: skip Split allocation for single-value array query params (#1...
  • Additional commits viewable in compare view

Updates github.com/grafana/loki/v3 from 3.0.0-20250710111934-7be3efac7bc5 to 3.6.4

Release notes

Sourced from github.com/grafana/loki/v3's releases.

v3.6.4

3.6.4 (2026-01-21)

Features

Bug Fixes

  • Backport gzip fix release 3.6.x (#20514) (d805266)
  • deps: [Release 3.6.x] Update dskit to resolve Otel conflict (#20368) (fb05a36)

v3.6.3

3.6.3 (2025-12-11)

Bug Fixes

  • Do not override S3 region if already specified in configuration chain (backport release-3.6.x) (#20128) (38582ac)
  • Fix regression in S3 client configuration (backport release-3.6.x) (#20118) (7d8176f)

v3.6.2

3.6.2 (2025-11-25)

Bug Fixes

v3.6.1

3.6.1 (2025-11-21)

Bug Fixes

  • docker: missing permissions to start docker (backport release-3.6.x) (#19948) (48b507f)
  • docker: set WORKDIR to root in loki Dockerfiles (#19952) (6040a09)

v3.6.0

Features

  • Add method to get zone-aware partition consumers (#17377) (4a733fc)
  • analytics: Change how analytics proxy works (#19098)
  • API: Add endpoint returning tenant configured limits (#17101) (6818c90)
  • API: Loki Improvement Document (LID) for query splitting (#16958) (66f0f0b)
  • ci: Add workflow_dispatch for querytee-images workflow (#19541)
  • compactor: Compactor deletion manifest builder (#17474) (47961f8)
  • compactor HS: Add a dashboard for monitoring deletion with horizontally scalable compactor (#18588) (10db8ab)

... (truncated)

Changelog

Sourced from github.com/grafana/loki/v3's changelog.

3.6.4 (2026-01-21)

Features

Bug Fixes

  • Backport gzip fix release 3.6.x (#20514) (d805266)
  • deps: [Release 3.6.x] Update dskit to resolve Otel conflict (#20368) (fb05a36)

3.6.3 (2025-12-11)

Bug Fixes

  • Do not override S3 region if already specified in configuration chain (backport release-3.6.x) (#20128) (38582ac)
  • Fix regression in S3 client configuration (backport release-3.6.x) (#20118) (7d8176f)

3.6.2 (2025-11-25)

Bug Fixes

3.6.1 (2025-11-21)

Bug Fixes

  • docker: missing permissions to start docker (backport release-3.6.x) (#19948) (48b507f)
  • docker: set WORKDIR to root in loki Dockerfiles (#19952) (6040a09)

3.6.0 (2025-11-05)

  • Add method to get zone-aware partition consumers (#17377) (4a733fc)
  • analytics: Change how analytics proxy works (#19098)
  • API: Add endpoint returning tenant configured limits (#17101) (6818c90)
  • API: Loki Improvement Document (LID) for query splitting (#16958) (66f0f0b)
  • ci: Add workflow_dispatch for querytee-images workflow (#19541)
  • compactor: Compactor deletion manifest builder (#17474) (47961f8)
  • compactor HS: Add a dashboard for monitoring deletion with horizontally scalable compactor (#18588) (10db8ab)
  • compactor HS: Add a job runner for processing of deletion jobs (#18058)
  • compactor HS: Add job queue and deletion job builder (#17843) (#17843)
  • compactor HS: Add jsonnet for deploying horizontally scalable compactor (#18550) (5e28950)
  • compactor HS: Add support for applying storage updates after finishing processing of deletion manifest (#18294) (ba3c670)
  • compactor HS: Add support for worker for processing of jobs from the compactor's job queue (#18165) (d05c4bc)
  • compactor HS: Fixes and changes for getting horizontally scalable compactor to work well (#18526) (000f90d)
  • compactor HS: Refactor interfaces and build a link between delete requests manager and compactor for HS of compactor (#18326) (3646607)
  • compactor HS: Store index updates per processed segment in the manifest to the object storage (#18212) (8007e22)
  • compactor HS: tune compactor worker config and add experimental feature warning to the docs (#18539) (5bf3f74)

... (truncated)

Commits

Updates github.com/moby/go-archive from 0.2.0 to 0.3.0

Release notes

Sourced from github.com/moby/go-archive's releases.

v0.3.0

Security

This release fixes CVE-2026-17106 / GHSA-hfg8-hc9c-6c3h, where a crafted tar archive could use links to cause extraction operations to create or overwrite files outside the intended destination directory.

The issue affected Unpack, UnpackLayer, Untar, UntarUncompressed, and the ApplyLayer helpers. Users should upgrade and avoid extracting untrusted archives with earlier versions.

What's Changed

Test and CI changes

Full Changelog: moby/go-archive@v0.2.1...v0.3.0

v0.2.1

What's Changed

... (truncated)

Commits
  • 1c23372 Merge pull request #43 from thaJeztah/fix_rebase_from_root
  • 8829a25 RebaseArchiveEntries: fix archive path rebasing
  • c583b20 Merge pull request #90 from thaJeztah/chtimes_nofollow
  • a0576cb archive: do not follow reparse points in chtimes
  • b0d5baf archive: add test for unexpected reparse points in chtimes
  • c23e4e5 Merge pull request #79 from thaJeztah/test_chtimes
  • aa1541a archive: fix creation time updates on Windows
  • c68e60d archive: add Windows creation time test
  • a11565d Merge pull request #91 from thaJeztah/breakout_unwrap
  • b680a61 Merge pull request #89 from moby/dependabot/github_actions/codeql-actions-ba9...
  • Additional commits viewable in compare view

Updates github.com/oapi-codegen/oapi-codegen/v2 from 2.5.1 to 2.7.1

Release notes

Sourced from github.com/oapi-codegen/oapi-codegen/v2's releases.

Security fix for Go code injection

This is a security fix for a code injection vulnerability in v2.7.0, please see:

GHSA-rjwr-m7qx-3fjr

[!NOTE] A vulnerability like this requires that it is missed in code review and that you then call the malicious method.

Using an init() function could be enough to not require a direct call to the code, and instead rely on you importing the package, but either way, code review should be performed before any oapi-codegen generated code is executed.

We strongly recommend all users to be reviewing changes to their generated code before they execute anything within it, to protect against supply chain attacks or malicious injected code.

This is also why we recommend oapi-codegen generated code is committed to source control.

We're more strict about escaping strings passed into the OpenAPI specification, so that people can't inject Go code into generated code.

The problem was that it was possible to craft a description for server URL's which would emit arbitrary Go code, so if an attacker controlled your specification, they could inject Go code into your generated code which could do something malicious.

v2.7.0: Squashing bugs, many bugs (and adding some features)

Many improvements and even more bug fixes

This v2.7.0 release of oapi-codegen contains quite a bit of internal refactoring, focused on our most historically fragile code paths, which relate to the aggregate types (allOf/anyOf/oneOf), $ref to external specs, enums, and the spec traversal logic missing quite a few leaf nodes where models should have been generated, but were skipped.

The biggest changes are explicitly described in the sections below, and the full list of commits is at the bottom.

Thank you to all contributors, we've been going through all past PR's and updating them and merging where we can, and thanks to all our users for reporting issues that you hit.

I've (@​mromaszewicz) used a lot of LLM help here to scrub through old issues and do some deep internal refactoring to address common problem areas. I intend to continue doing this, since the conditional generation logic is getting quite complicated. When I originally released oapi-codegen, the use case was much simpler, all the models were under #/components/schemas, and all the references to them were in the requests, responses, etc. I never imagine how many things would be external references or unions, and how many complex OpenAPI specifications people would be generating code for. The initial design was never flexible enough to handle that, so ongoing bug fixes are getting increasingly complex due to edge cases. This version has a lot of internal changes you won't see as a user, but the way we handle type generation internally is unifying lots of copy/paste re-implementations into reusable code for consistency. Most of these changes can be done transparently, but some can't, so, onto the changes:

Code generation changes which might require some changes on your end

This release contains three changes, all very narrow in scope, which will require some manual adjustment of your own code. We've decided that these are small enough and uncommon enough not to require opt-in, which causes internal complexity. It's always a judgment call with these. If we got it wrong, we're happy to revisit it in a maintenance release.

Strict-server external response refs require strict-server generation in both packages (#2357)

If your strict-server spec uses an external $ref to a components/responses/... defined in another spec, that other spec must also be generated with strict-server: true. Add it to the source spec's config and regenerate:

# config for the spec being $ref'd
generate:
  models: true
  strict-server: true   # now required when imported by a strict-server spec

This restores the v2.0.0 behavior that lets you cast response models across package boundaries — the standard pattern for sharing error models (e.g. a common 400) across services. PR #1387 had silently changed the embedded type from N400JSONResponse to the bare externalRef0.N400, so the local and external response structs no longer had matching types and casts stopped compiling.

Many more anonymous inner schemas are now hoisted into top level schemas

... (truncated)

Commits

Updates github.com/pion/dtls/v3 from 3.1.2 to 3.1.4

Release notes

Sourced from github.com/pion/dtls/v3's releases.

v3.1.4

Changelog

  • e4aad60b48a4f5619443902fb484053f53c4759b Retact v3.1.3 for breaking compatiblity with firefox
  • 0e3867b253131964ba5f527576ab739ff3cb2fac Restore Firefox compatibility
  • 12eb398551d48b762b067b412d311502030e66a5 Fix panic unmarshaling ECDHE_PSK ServerKeyExchange
  • 85fca0aac85f315fe1a35e918bbff024e5b1c987 Add MasterKeyIdentifier to use_srtp ext in flight3 (#835)
  • fd27a52a64265097a621432090926a651109b4cb Add private min and max version API (#823)
  • 620d6425fb873786357f9786982cf0e0981f34f2 Improve fuzzing for all extensions (#805)
  • 977de19f2d4f559f631c69280b2351f8478aa938 Update CI configs to v0.12.2
  • e6950f0291850b86fb704f65acf3ace88cd5b9d7 Filter non-approved FIPS curves in FIPS mode (#817)
  • 848c4bc17e147981c0b9e40bef866bb7f7c0a773 Optimize handshake memory usage
  • d0e736c2e6bcd89dada06355ef95fd0fe3957d14 DTLS 1.3 OID filter extension (#814)
  • 956d41df4ab17c1e1e387060c62242c72e8cd763 Update module golang.org/x/crypto to v0.48.0 (#809)
  • b86cb7515e56183ec0a3918d4f2738dc9b51f6ea Add missing checks and validations
  • 726522d91c73331f242ea6b5006a80e4c4244a6c Apply modernize and lint upgrades
  • d994b8bf4f571f1cf37a2f59d2c5e9b2c7a5efd7 Update CI configs to v0.12.1
  • 4fcce60395bf052abc530afd4a5ec25876e18fb4 Fix handshake hang on Finish in retransmit state
  • a25c8b860afe987ca4f17e0cc213ff686da652af Add ListenConfig option to Listener
  • 42b83fe3850722740d5258f878de148486a3ec83 Remove custom AddUint48 helper
  • 5a4e85a2fa567cc1da818d08ad2dad0d7a3346e2 DTLS 1.3 Add the Certificate Authorities extension (#807)
  • 812fc22c4f43abdf4d1da216e69e92421a64aa2c DTLS 1.3 post handshake auth extension (#806)
  • 39f310037631fb84fc47ff73447b23387eb666e3 DTLS 1.3 Add EarlyDataIndication extension (#804)
  • d1d58f212102887ef3c7e6b696d6bc218af3d7b9 Update CI configs to v0.12.0
  • 16413bad7fa0426de4c11d95f1ed2e76c0159d8b Add HKDF funcs for Key Scheduling - DTLS v1.3 (#737)
  • accee59ca63fc19171f0b807b378bb96aa49d33a Implement ChaCha20-Poly1305 Ciphersuite (#794)
  • 6b4fe8c044e03a73b6ecc8516911c7842268a430 Add RSA_PSS_RSAE back to DTLS 1.2 and fix parsing (#801)
  • 5ee9206c372458946776fe12cc7239acdd792e29 Upgrade E2E Test Docker Image (for OpenSSL 3.x) (#799)

v3.1.3

Changelog

  • 49458d604a4f3ebce1bf9587a0f3e5f3f6b4a55e Fix panic unmarshaling ECDHE_PSK ServerKeyExchange
  • e4b257d7ea9ce71c683f62a8533e06ffe1c433ee Add MasterKeyIdentifier to use_srtp ext in flight3 (#835)
  • fd27a52a64265097a621432090926a651109b4cb Add private min and max version API (#823)
  • 620d6425fb873786357f9786982cf0e0981f34f2 Improve fuzzing for all extensions (#805)
  • 977de19f2d4f559f631c69280b2351f8478aa938 Update CI configs to v0.12.2
  • e6950f0291850b86fb704f65acf3ace88cd5b9d7 Filter non-approved FIPS curves in FIPS mode (#817)
  • 848c4bc17e147981c0b9e40bef866bb7f7c0a773 Optimize handshake memory usage
  • d0e736c2e6bcd89dada06355ef95fd0fe3957d14 DTLS 1.3 OID filter extension (#814)
  • 956d41df4ab17c1e1e387060c62242c72e8cd763 Update module golang.org/x/crypto to v0.48.0 (#809)
  • b86cb7515e56183ec0a3918d4f2738dc9b51f6ea Add missing checks and validations
  • 726522d91c73331f242ea6b5006a80e4c4244a6c Apply modernize and lint upgrades
  • d994b8bf4f571f1cf37a2f59d2c5e9b2c7a5efd7 Update CI configs to v0.12.1
  • 4fcce60395bf052abc530afd4a5ec25876e18fb4 Fix handshake hang on Finish in retransmit state
  • a25c8b860afe987ca4f17e0cc213ff686da652af Add ListenConfig option to Listener
  • 42b83fe3850722740d5258f878de148486a3ec83 Remove custom AddUint48 helper
  • 5a4e85a2fa567cc1da818d08ad2dad0d7a3346e2 DTLS 1.3 Add the Certificate Authorities extension (#807)
  • 812fc22c4f43abdf4d1da216e69e92421a64aa2c DTLS 1.3 post handshake auth extension (#806)
  • 39f310037631fb84fc47ff73447b23387eb666e3 DTLS 1.3 Add EarlyDataIndication extension (#804)
  • d1d58f212102887ef3c7e6b696d6bc218af3d7b9 Update CI configs to v0.12.0
  • 16413bad7fa0426de4c11d95f1ed2e76c0159d8b Add HKDF funcs for Key Scheduling - DTLS v1.3 (#737)

... (truncated)

Commits
  • e4aad60 Retact v3.1.3 for breaking compatiblity with firefox
  • 0e3867b Restore Firefox compatibility
  • 12eb398 Fix panic unmarshaling ECDHE_PSK ServerKeyExchange
  • 85fca0a Add MasterKeyIdentifier to use_srtp ext in flight3 (#835)
  • fd27a52 Add private min and max version API (#823)
  • 620d642 Improve fuzzing for all extensions (#805)
  • 977de19 Update CI configs to v0.12.2
  • e6950f0 Filter non-approved FIPS curves in FIPS mode (#817)
  • 848c4bc Optimize handshake memory usage
  • d0e736c DTLS 1.3 OID filter extension (#814)
  • Additional commits viewable in compare view

Updates github.com/pion/stun/v3 from 3.1.2 to 3.1.5

Release notes

Sourced from github.com/pion/stun/v3's releases.

v3.1.5

Changelog

  • 02391b37388c7be80b4dafaec9b3e708d58d2aed Upgrade dtls to fix compatibility with firefox

v3.1.4

Changelog

  • 6a869cb3ce12869699dbf007fa48e1ce6760eca5 Update module github.com/pion/dtls/v3 to v3.1.3
  • 8f24ef3b428599b877f0c013fe2cc93670e5bc04 Update module github.com/pion/transport/v4 to v4.0.2

v3.1.3

Changelog

  • fa9f074a33a8059c76c960b1fbee39f308002423 Fix panic on short XOR-MAPPED-ADDRESS value
  • 01aa5b8eefd0c0934c6aebd2bd6b6fa7d3c7d715 Throw an error when parsing message type 0x000
  • c41a7f3240229f74db15968e1657c05b1ecb1037 Add opt-in strict mode and custom logger
  • bc40ca270a5fe67eabce506c1f4e154f804dbc36 Ignore attributes after message-integrity
  • 293095f9198ea72918620fb1e0177a9aaeb211db Update CI configs to v0.12.2
Commits
  • 02391b3 Upgrade dtls to fix compatibility with firefox
  • 6a869cb Update module github.com/pion/dtls/v3 to v3.1.3
  • 8f24ef3 Update module github.com/pion/transport/v4 to v4.0.2
  • fa9f074 Fix panic on short XOR-MAPPED-ADDRESS value
  • 01aa5b8 Throw an error when parsing message type 0x000
  • c41a7f3 Add opt-in strict mode and custom logger
  • bc40ca2 Ignore attributes after message-integrity
  • 293095f Update CI configs to v0.12.2
  • See full diff in compare view

Updates github.com/prometheus/prometheus from 0.304.2 to 0.305.1-0.20250806170547-208187eaa19b

Commits

Updates github.com/moby/go-archive from 0.2.0 to 0.3.0

Release notes

Sourced from github.com/moby/go-archive's releases.

v0.3.0

Security

This release fixes CVE-2026-17106 / GHSA-hfg8-hc9c-6c3h, where a crafted tar archive could use links to cause extraction operations to create or overwrite files outside the intended destination directory.

The issue affected Unpack, UnpackLayer, Untar, UntarUncompressed, and the ApplyLayer helpers. Users should upgrade and avoid extracting untrusted archives with earlier versions.

What's Changed

Test and CI changes

Full Changelog: moby/go-archive@v0.2.1...v0.3.0

v0.2.1

What's Changed

... (truncated)

Commits
  • 1c23372 Merge pull request #43 from thaJeztah/fix_rebase_from_root
  • 8829a25 RebaseArchiveEntries: fix archive path rebasing
  • c583b20 Merge pull request #90 from thaJeztah/chtimes_nofollow
  • a0576cb archive: do not follow reparse points in chtimes
  • b0d5baf archive: add test for unexpected reparse points in chtimes
  • c23e4e5 Merge pull request #79 from thaJeztah/test_chtimes
  • aa1541a archive: fix creation time updates on Windows
  • c68e60d archive: add Windows creation time test
  • a11565d Merge pull request #91 from thaJeztah/breakout_unwrap
  • b680a61 Merge pull request #89 from moby/dependabot/github_actions/codeql-actions-ba9...
  • Additional commits viewable in compare view

Updates github.com/pion/dtls/v3 from 3.1.2 to 3.1.4

Release notes

Sourced from github.com/pion/dtls/v3's releases.

v3.1.4

Changelog

  • e4aad60b48a4f5619443902fb484053f53c4759b Retact v3.1.3 for breaking compatiblity with firefox
  • 0e3867b253131964ba5f527576ab739ff3cb2fac Restore Firefox compatibility
  • 12eb398551d48b762b067b412d311502030e66a5 Fix panic unmarshaling ECDHE_PSK ServerKeyExchange
  • 85fca0aac85f315fe1a35e918bbff024e5b1c987 Add MasterKeyIdentifier to use_srtp ext in flight3 (#835)
  • fd27a52a64265097a621432090926a651109b4cb Add private min and max version API (#823)
  • 620d6425fb873786357f9786982cf0e0981f34f2 Improve fuzzing for all extensions (#805)
  • 977de19f2d4f559f631c69280b2351f8478aa938 Update CI configs to v0.12.2
  • e6950f0291850b86fb704f65acf3ace88cd5b9d7 Filter non-approved FIPS curves in FIPS mode (#817)
  • 848c4bc17e147981c0b9e40bef866bb7f7c0a773 Optimize handshake memory usage
  • d0e736c2e6bcd89dada06355ef95fd0fe3957d14 DTLS 1.3 OID filter extension (#814)
  • 956d41df4ab17c1e1e387060c62242c72e8cd763 Update module golang.org/x/crypto to v0.48.0 (#809)
  • b86cb7515e56183ec0a3918d4f2738dc9b51f6ea Add missing checks and validations
  • 726522d91c73331f242ea6b5006a80e4c4244a6c Apply modernize and lint upgrades
  • d994b8bf4f571f1cf37a2f59d2c5e9b2c7a5efd7 Update CI configs to v0.12.1
  • 4fcce60395bf052abc530afd4a5ec25876e18fb4 Fix handshake hang on Finish in retransmit state
  • a25c8b860afe987ca4f17e0cc213ff686da652af Add ListenConfig option to Listener
  • 42b83fe3850722740d5258f878de148486a3ec83 Remove custom AddUint48 helper
  • 5a4e85a2fa567cc1da818d08ad2dad0d7a3346e2 DTLS 1.3 Add the Certificate Authorities extension (#807)
  • 812fc22c4f43abdf4d1da216e69e92421a64aa2c DTLS 1.3 post handshake auth extension (#806)
  • 39f310037631fb84fc47ff73447b23387eb666e3 DTLS 1.3 Add EarlyDataIndication extension (#804)
  • d1d58f212102887ef3c7e6b696d6bc218af3d7b9 Update CI configs to v0.12.0
  • 16413bad7fa0426de4c11d95f1ed2e76c0159d8b Add HKDF funcs for Key Scheduling - DTLS v1.3 (#737)
  • accee59ca63fc19171f0b807b378bb96aa49d33a Implement ChaCha20-Poly1305 Ciphersuite (#794)
  • 6b4fe8c044e03a73b6ecc8516911c7842268a430 Add RSA_PSS_RSAE back to DTLS 1.2 and fix parsing (#801)
  • 5ee9206c372458946776fe12cc7239acdd792e29 Upgrade E2E Test Docker Image (for OpenSSL 3.x) (#799)

v3.1.3

Changelog

  • 49458d604a4f3ebce1bf9587a0f3e5f3f6b4a55e Fix panic unmarshaling ECDHE_PSK ServerKeyExchange
  • e4b257d7ea9ce71c683f62a8533e06ffe1c433ee Add MasterKeyIdentifier to use_srtp ext in flight3 (#835)
  • fd27a52a64265097a621432090926a651109b4cb Add private min and max version API (#823)
  • 620d6425fb873786357f9786982cf0e0981f34f2 Improve fuzzing for all extensions (#805)
  • 977de19f2d4f559f631c69280b2351f8478aa938 Update CI configs to v0.12.2
  • e6950f0291850b86fb704f65acf3ace88cd5b9d7 Filter non-approved FIPS curves in FIPS mode (#817)
  • 848c4bc17e147981c0b9e40bef866bb7f7c0a773 Optimize handshake memory usage
  • d0e736c2e6bcd89dada06355ef95fd0fe3957d14 DTLS 1.3 OID filter extension (#814)
  • 956d41df4ab17c1e1e387060c62242c72e8cd763 Update module golang.org/x/crypto to v0.48.0 (#809)
  • b86cb7515e56183ec0a3918d4f2738dc9b51f6ea Add missing checks and validations
  • 726522d91c73331f242ea6b5006a80e4c4244a6c Apply modernize and lint upgrades
  • d994b8bf4f571f1cf37a2f59d2c5e9b2c7a5efd7 Update CI configs to v0.12.1
  • 4fcce60395bf052abc530afd4a5ec25876e18fb4 Fix handshake hang on Finish in retransmit state
  • a25c8b860afe987ca4f17e0cc213ff686da652af Add ListenConfig option to Listener
  • 42b83fe3850722740d5258f878de148486a3ec83 Remove custom AddUint48 helper
  • 5a4e85a2fa567cc1da818d08ad2dad0d7a3346e2 DTLS 1.3 Add the Certificate Authorities extension (#807)
  • 812fc22c4f43abdf4d1da216e69e92421a64aa2c DTLS 1.3 post handshake auth extension (#806)
  • 39f310037631fb84fc47ff73447b23387eb666e3 DTLS 1.3 Add EarlyDataIndication extension (#804)
  • d1d58f212102887ef3c7e6b696d6bc218af3d7b9 Update CI configs to v0.12.0
  • 16413bad7fa0426de4c11d95f1ed2e76c0159d8b Add HKDF funcs for Key Scheduling - DTLS v1.3 (#737)

... (truncated)

Commits
  • e4aad60 Retact v3.1.3 for breaking compatiblity with firefox
  • 0e3867b Restore Firefox compatibility
  • 12eb398 Fix panic unmarshaling ECDHE_PSK ServerKeyExchange

@dependabot dependabot Bot added the dependencies-go Go Dependency Updates label Aug 18, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 18, 2026 22:40
@dependabot dependabot Bot mentioned this pull request Aug 18, 2026
Closed
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/registry-kit/go_modules-e028ee437a branch 2 times, most recently from e7432c3 to bd124ba Compare August 24, 2026 16:52
@dependabot
build(deps): bump the go_modules group across 4 directories with 7 up…
17abefb 
…dates

Bumps the go_modules group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) | `0.133.0` | `0.144.0` |
| [github.com/grafana/loki/v3](https://github.com/grafana/loki) | `3.0.0-20250710111934-7be3efac7bc5` | `3.6.4` |
| [github.com/moby/go-archive](https://github.com/moby/go-archive) | `0.2.0` | `0.3.0` |
| [github.com/oapi-codegen/oapi-codegen/v2](https://github.com/oapi-codegen/oapi-codegen) | `2.5.1` | `2.7.1` |
| [github.com/pion/dtls/v3](https://github.com/pion/dtls) | `3.1.2` | `3.1.4` |
| [github.com/pion/stun/v3](https://github.com/pion/stun) | `3.1.2` | `3.1.5` |

Bumps the go_modules group with 3 updates in the /integration-tests directory: [github.com/moby/go-archive](https://github.com/moby/go-archive), [github.com/pion/dtls/v3](https://github.com/pion/dtls) and [github.com/pion/stun/v3](https://github.com/pion/stun).
Bumps the go_modules group with 1 update in the /party-ceremony/integration-tests directory: [github.com/moby/go-archive](https://github.com/moby/go-archive).
Bumps the go_modules group with 1 update in the /registry-kit directory: [github.com/moby/go-archive](https://github.com/moby/go-archive).


Updates `github.com/getkin/kin-openapi` from 0.133.0 to 0.144.0
- [Release notes](https://github.com/getkin/kin-openapi/releases)
- [Commits](getkin/kin-openapi@v0.133.0...v0.144.0)

Updates `github.com/grafana/loki/v3` from 3.0.0-20250710111934-7be3efac7bc5 to 3.6.4
- [Release notes](https://github.com/grafana/loki/releases)
- [Changelog](https://github.com/grafana/loki/blob/main/CHANGELOG.md)
- [Commits](https://github.com/grafana/loki/commits/v3.6.4)

Updates `github.com/moby/go-archive` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/moby/go-archive/releases)
- [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go)
- [Commits](moby/go-archive@v0.2.0...v0.3.0)

Updates `github.com/oapi-codegen/oapi-codegen/v2` from 2.5.1 to 2.7.1
- [Release notes](https://github.com/oapi-codegen/oapi-codegen/releases)
- [Commits](oapi-codegen/oapi-codegen@v2.5.1...v2.7.1)

Updates `github.com/pion/dtls/v3` from 3.1.2 to 3.1.4
- [Release notes](https://github.com/pion/dtls/releases)
- [Commits](pion/dtls@v3.1.2...v3.1.4)

Updates `github.com/pion/stun/v3` from 3.1.2 to 3.1.5
- [Release notes](https://github.com/pion/stun/releases)
- [Commits](pion/stun@v3.1.2...v3.1.5)

Updates `github.com/prometheus/prometheus` from 0.304.2 to 0.305.1-0.20250806170547-208187eaa19b
- [Release notes](https://github.com/prometheus/prometheus/releases)
- [Changelog](https://github.com/prometheus/prometheus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/prometheus/commits)

Updates `github.com/moby/go-archive` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/moby/go-archive/releases)
- [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go)
- [Commits](moby/go-archive@v0.2.0...v0.3.0)

Updates `github.com/pion/dtls/v3` from 3.1.2 to 3.1.4
- [Release notes](https://github.com/pion/dtls/releases)
- [Commits](pion/dtls@v3.1.2...v3.1.4)

Updates `github.com/pion/stun/v3` from 3.1.2 to 3.1.5
- [Release notes](https://github.com/pion/stun/releases)
- [Commits](pion/stun@v3.1.2...v3.1.5)

Updates `github.com/moby/go-archive` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/moby/go-archive/releases)
- [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go)
- [Commits](moby/go-archive@v0.2.0...v0.3.0)

Updates `github.com/moby/go-archive` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/moby/go-archive/releases)
- [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go)
- [Commits](moby/go-archive@v0.2.0...v0.3.0)

Updates `github.com/moby/go-archive` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/moby/go-archive/releases)
- [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go)
- [Commits](moby/go-archive@v0.2.0...v0.3.0)

Updates `github.com/pion/dtls/v3` from 3.1.2 to 3.1.4
- [Release notes](https://github.com/pion/dtls/releases)
- [Commits](pion/dtls@v3.1.2...v3.1.4)

Updates `github.com/pion/stun/v3` from 3.1.2 to 3.1.5
- [Release notes](https://github.com/pion/stun/releases)
- [Commits](pion/stun@v3.1.2...v3.1.5)

Updates `github.com/moby/go-archive` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/moby/go-archive/releases)
- [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go)
- [Commits](moby/go-archive@v0.2.0...v0.3.0)

Updates `github.com/pion/dtls/v3` from 3.1.2 to 3.1.4
- [Release notes](https://github.com/pion/dtls/releases)
- [Commits](pion/dtls@v3.1.2...v3.1.4)

Updates `github.com/pion/stun/v3` from 3.1.2 to 3.1.5
- [Release notes](https://github.com/pion/stun/releases)
- [Commits](pion/stun@v3.1.2...v3.1.5)

Updates `github.com/moby/go-archive` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/moby/go-archive/releases)
- [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go)
- [Commits](moby/go-archive@v0.2.0...v0.3.0)

Updates `github.com/moby/go-archive` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/moby/go-archive/releases)
- [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go)
- [Commits](moby/go-archive@v0.2.0...v0.3.0)

Updates `github.com/moby/go-archive` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/moby/go-archive/releases)
- [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go)
- [Commits](moby/go-archive@v0.2.0...v0.3.0)

Updates `github.com/moby/go-archive` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/moby/go-archive/releases)
- [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go)
- [Commits](moby/go-archive@v0.2.0...v0.3.0)

Updates `github.com/moby/go-archive` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/moby/go-archive/releases)
- [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go)
- [Commits](moby/go-archive@v0.2.0...v0.3.0)

Updates `github.com/moby/go-archive` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/moby/go-archive/releases)
- [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go)
- [Commits](moby/go-archive@v0.2.0...v0.3.0)

Updates `github.com/moby/go-archive` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/moby/go-archive/releases)
- [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go)
- [Commits](moby/go-archive@v0.2.0...v0.3.0)

Updates `github.com/moby/go-archive` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/moby/go-archive/releases)
- [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go)
- [Commits](moby/go-archive@v0.2.0...v0.3.0)

Updates `github.com/moby/go-archive` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/moby/go-archive/releases)
- [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go)
- [Commits](moby/go-archive@v0.2.0...v0.3.0)

Updates `github.com/moby/go-archive` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/moby/go-archive/releases)
- [Changelog](https://github.com/moby/go-archive/blob/main/changes_test.go)
- [Commits](moby/go-archive@v0.2.0...v0.3.0)

---
updated-dependencies:
- dependency-name: github.com/getkin/kin-openapi
  dependency-version: 0.144.0
  dependency-type: indirect
- dependency-name: github.com/grafana/loki/v3
  dependency-version: 3.6.4
  dependency-type: indirect
- dependency-name: github.com/moby/go-archive
  dependency-version: 0.3.0
  dependency-type: indirect
- dependency-name: github.com/moby/go-archive
  dependency-version: 0.3.0
  dependency-type: indirect
- dependency-name: github.com/moby/go-archive
  dependency-version: 0.3.0
  dependency-type: indirect
- dependency-name: github.com/moby/go-archive
  dependency-version: 0.3.0
  dependency-type: indirect
- dependency-name: github.com/oapi-codegen/oapi-codegen/v2
  dependency-version: 2.7.1
  dependency-type: indirect
- dependency-name: github.com/pion/dtls/v3
  dependency-version: 3.1.4
  dependency-type: indirect
- dependency-name: github.com/pion/dtls/v3
  dependency-version: 3.1.4
  dependency-type: indirect
- dependency-name: github.com/pion/stun/v3
  dependency-version: 3.1.5
  dependency-type: indirect
- dependency-name: github.com/pion/stun/v3
  dependency-version: 3.1.5
  dependency-type: indirect
- dependency-name: github.com/prometheus/prometheus
  dependency-version: 0.305.1-0.20250806170547-208187eaa19b
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/registry-kit/go_modules-e028ee437a branch from af099ad to 17abefb Compare August 25, 2026 20:23
@app-token-issuer-integrations
[dependabot skip] Tidy all Go modules
eac1723 
This commit was created from the local commit with hash 4125c7697f56b403511523836dc6fc755591e29a.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies-go Go Dependency Updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants