chore(deps): bump the go-deps group across 1 directory with 5 updates by dependabot[bot] · Pull Request #76 · voidrunner3074/aastro

dependabot · 2026-11-02T03:06:37Z

Bumps the go-deps group with 5 updates in the / directory:

Package	From	To
github.com/go-chi/chi/v5	`5.3.2`	`5.5.0`
github.com/goccy/go-json	`0.11.2`	`0.12.0`
github.com/lestrrat-go/jwx/v3	`3.3.0`	`3.4.0`
github.com/prometheus/client_golang	`1.24.1`	`1.25.0`
golang.org/x/sync	`0.23.0`	`0.24.0`

Updates github.com/go-chi/chi/v5 from 5.3.2 to 5.5.0

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.5.0

What's Changed

middleware: add Deprecation (RFC 9745), make Sunset RFC 8594 only by @VojtechVitek in go-chi/chi#1195

middleware: test ClientIPFromHeader does not fall back to other headers by @renanmpimentel in go-chi/chi#1208

middleware: build Maybe handler once by @lowgame in go-chi/chi#1197

middleware: round and clamp Retry-After delays up to whole seconds by @VojtechVitek in go-chi/chi#1217

middleware: parse quoted ContentCharset media parameters by @VojtechVitek in go-chi/chi#1218

middleware: SupressNotFound must not mutate the request's route context by @VojtechVitek in go-chi/chi#1220

New Contributors

@renanmpimentel made their first contribution in go-chi/chi#1208

@lowgame made their first contribution in go-chi/chi#1197

Full Changelog: go-chi/chi@v5.4.0...v5.5.0

v5.4.0

What's Changed

Improve godoc: add links and titles by @dolmen in go-chi/chi#1027

Add Clone method to Context by @VojtechVitek in go-chi/chi#1157

middleware: ContentCharset should skip requests without a body by @VojtechVitek in go-chi/chi#1158

Update compress middleware support Brotli support documentation by @sm3142 in go-chi/chi#1007

fix: panic on Mount() when a router is mounted onto itself by @sk-sanjay01 in go-chi/chi#1159

test(middleware): Improves test coverage by @nszilard in go-chi/chi#700

Remove superfluous import aliases by @JRaspass in go-chi/chi#1166

Bump minimum Go to 1.24, use b.Loop() by @JRaspass in go-chi/chi#1164

Use slices.Backward where appropriate by @JRaspass in go-chi/chi#1165

Replace "interface{}" with "any" by @JRaspass in go-chi/chi#1167

Simplify chi.URLParam, call chi.URLParamFromCtx by @JRaspass in go-chi/chi#1168

middleware: record response status when flushing by @jakezwang in go-chi/chi#1174

middleware: honor Discard when flushing by @LeulTew in go-chi/chi#1185

README: point middleware doc links to chi/v5 by @VojtechVitek in go-chi/chi#1196

middleware: treat RemoteAddr as the rightmost hop in ClientIPFrom* by @VojtechVitek in go-chi/chi#1214

Fixes GHSA-j6qf-3m9c-vwj3

New Contributors

@dolmen made their first contribution in go-chi/chi#1027

@sm3142 made their first contribution in go-chi/chi#1007

@sk-sanjay01 made their first contribution in go-chi/chi#1159

@nszilard made their first contribution in go-chi/chi#700

@jakezwang made their first contribution in go-chi/chi#1174

@LeulTew made their first contribution in go-chi/chi#1185

Full Changelog: go-chi/chi@v5.3.2...v5.4.0

Commits

3a33ba5 middleware: SupressNotFound must not mutate the request's route context (#1220)
6075570 middleware: parse quoted ContentCharset media parameters (#1218)
46295d0 middleware: test Retry-After rounding in one table test (#1217)
c6e33a1 middleware: build Maybe handler once (#1197)
c9744a3 middleware: test ClientIPFromHeader does not fall back to other headers (#1208)
fff8bb2 middleware: add Deprecation (RFC 9745), make Sunset RFC 8594 only (#1195)
7f9b744 middleware: treat RemoteAddr as the rightmost hop in ClientIPFrom* (#1214)
167e1e3 README: point middleware doc links to chi/v5 (#1196)
3d1777a middleware: honor Discard when flushing (#1185)
b1c9ab4 middleware: record response status when flushing (#1174)
Additional commits viewable in compare view

Updates github.com/goccy/go-json from 0.11.2 to 0.12.0

Release notes

Sourced from github.com/goccy/go-json's releases.

v0.12.0

What's Changed

Encoder: call a pointer-receiver marshaler with the address of a pointer-sized value by @goccy in goccy/go-json#692

Add github.com/goccy/go-json/jsontext, faster than encoding/json/jsontext by @goccy in goccy/go-json#689

Share number, string and formatting code between v1 and jsontext, and fix v1 deviations by @goccy in goccy/go-json#693

Look up a type the recent opcodes miss in the shared table without a call by @goccy in goccy/go-json#674

Prepare the encoder and jsontext for github.com/goccy/go-json/v2 by @goccy in goccy/go-json#695

Add the compile mode of the encoding/json/v2 semantics to the encoder by @goccy in goccy/go-json#696

Add github.com/goccy/go-json/v2 with Marshal, MarshalWrite and MarshalEncode by @goccy in goccy/go-json#698

Add MarshalOf and MarshalWriteOf to github.com/goccy/go-json/v2, and benchmark the v2 encoder by @goccy in goccy/go-json#699

Report the coverage by octocov instead of Codecov by @goccy in goccy/go-json#700

Decoder: follow an embedded pointer to an unexported struct which is set by @minhnhathoang in goccy/go-json#697

Encoder: read maps by values of their own size, and detect cycles through map values by @goccy in goccy/go-json#704

Encoder: fix crashes on maps of keys of no size and of values of an interface type with methods by @goccy in goccy/go-json#705

Encoder: record the values of cycle detection by their types, and a pointer in an interface by itself by @goccy in goccy/go-json#706

v2: fix panics on keys of an interface type with methods and on misuse of a method's encoder by @goccy in goccy/go-json#707

jsontext: fail an attached encoder which ends the level it is attached in by @goccy in goccy/go-json#708

v2: fail the value of a method when a call of MarshalEncode within it fails by @goccy in goccy/go-json#709

v2: detect cycles through declined values and MarshalEncode called by methods by @goccy in goccy/go-json#710

v2: write json.Number as a number and fail time.Duration map keys by @goccy in goccy/go-json#711

v2: rewrite only raw values by the options which rewrite raw values by @goccy in goccy/go-json#712

Encode json.Number and pointer map keys by their names by @goccy in goccy/go-json#713

v2: give the string option of a field to its methods and functions by @goccy in goccy/go-json#714

v2: name keys in interfaces and behind pointers by the functions of their values by @goccy in goccy/go-json#715

v2: escape field names for JavaScript and keep the escapes of nested calls by @goccy in goccy/go-json#716

Fail values nested deeper than 10000 levels by @goccy in goccy/go-json#717

v2: keep nothing of the caller's output in the state of MarshalEncode by @goccy in goccy/go-json#718

v2: count the depth of methods, nested calls and declined values in the whole output by @goccy in goccy/go-json#719

v2: fix the names which methods write for map keys by @goccy in goccy/go-json#720

Count the levels a type nests in its frame for the max depth by @goccy in goccy/go-json#721

v2: give the functions of marshaling a pointer at the top level as its value by @goccy in goccy/go-json#722

Fix the option ,string with Colorize and on a pointer to a pointer by @goccy in goccy/go-json#723

Write a pointer to a nil value with omitempty as null by @goccy in goccy/go-json#724

Fix small defects found by a review of the whole encoder by @goccy in goccy/go-json#725

Choose and indent the fields of embedded structs as encoding/json does by @goccy in goccy/go-json#726

Fail for a value of an unsupported type only when it is encoded by @goccy in goccy/go-json#727

Add benchmarks of decoding a stream from a chunked reader by @goccy in goccy/go-json#728

Decode the option ,string on pointers and keys of pointer types as encoding/json of Go 1.27 does by @goccy in goccy/go-json#729

Add benchmarks of encoding maps under every condition by @goccy in goccy/go-json#732

Decode the keys of maps as encoding/json does by @goccy in goccy/go-json#733

Encode the values of a sorted map in the order of the names by @goccy in goccy/go-json#730

Name a map key of pointers by what they lead to, and fail for a cycle by @goccy in goccy/go-json#735

Decoder: bound the memory of a stream (supersedes #734) by @goccy in goccy/go-json#736

Add the sonic Decoder to the stream benchmarks which had none by @goccy in goccy/go-json#737

Decoder: match encoding/json at the depth limit wherever the reads end by @goccy in goccy/go-json#739

Decode as encoding/json of Go 1.27 on every version of Go by @goccy in goccy/go-json#740

Encode a pointer type which is a value of itself through what it points to by @goccy in goccy/go-json#738

README: describe decoding as Go 1.27's on every Go version, and the stream decoder by elements by @goccy in goccy/go-json#741

Decode recursive slice, map and array types instead of overflowing the stack by @goccy in goccy/go-json#742

Decode the fields of embedded structs as encoding/json chooses them by @goccy in goccy/go-json#743

... (truncated)

Commits

c0214cb Docs: decoded values keep only their own memory, and DecodeNoCopyString keeps...
8a0f087 Decoded values keep alive no memory but their own (#775) (#777)
1b0ea32 Path: return errors instead of panics, and select by .. at any depth (#774) (...
483eceb issues: drop the parts which master fixed, and state the rest as master has i...
9adc5cb Decode a float whose digits wrap the mantissa around to 0 (#770) (#772)
5c8a7dd Call MarshalJSONTo and UnmarshalJSONFrom from the root package (#769)
8d26d8c Add the options of encoding/json, applied by the engine of v2 (#771)
8850196 Follow encoding/json of Go 1.27.3, and pin CI to it (#768)
0ceaba2 Prepare v0.12.0: describe v2 and jsontext in the README, and pass the tests o...
b6e231f v2: decode structs, streams and UnmarshalDecode by v1's paths where v2 decode...
Additional commits viewable in compare view

Updates github.com/lestrrat-go/jwx/v3 from 3.3.0 to 3.4.0

Release notes

Sourced from github.com/lestrrat-go/jwx/v3's releases.

v3.4.0

For more detailed release notes, see Changes.

What's Changed

build(deps): bump github/codeql-action from 4.37.9 to 4.38.0 by @dependabot[bot] in lestrrat-go/jwx#2352

build(deps): bump github/codeql-action from 4.38.0 to 4.38.2 by @dependabot[bot] in lestrrat-go/jwx#2361

build(deps): bump github.com/goccy/go-json from 0.10.6 to 0.11.0 by @dependabot[bot] in lestrrat-go/jwx#2364

build(deps): bump github.com/goccy/go-json from 0.11.0 to 0.11.2 by @dependabot[bot] in lestrrat-go/jwx#2371

[v3] keep trying jwe key providers after errors by @lestrrat in lestrrat-go/jwx#2385

[v3] allow empty jwe ciphertext in JSON form by @lestrrat in lestrrat-go/jwx#2387

[v3] write jwe unprotected header as JSON object by @lestrrat in lestrrat-go/jwx#2389

[v3] jwsbb: size SignBuffer per encoded part by @lestrrat in lestrrat-go/jwx#2401

[v3] jwe: find WithKeySet kid in protected header by @lestrrat in lestrrat-go/jwx#2405

[v3] jwt: honor NumericDate format precision by @lestrrat in lestrrat-go/jwx#2410

[v3] jwt: parse negative NumericDate values by @lestrrat in lestrrat-go/jwx#2412

[v3] jwt: parse decimal NumericDate values exactly by @lestrrat in lestrrat-go/jwx#2414

build(deps): bump github/codeql-action from 4.38.2 to 4.38.3 by @dependabot[bot] in lestrrat-go/jwx#2419

[v3] jws: sign only the transmitted header by @lestrrat in lestrrat-go/jwx#2416

[v3] jws: add opt-in WithAlgorithmMatch by @lestrrat in lestrrat-go/jwx#2423

build(deps): bump github/codeql-action from 4.38.3 to 4.39.0 by @dependabot[bot] in lestrrat-go/jwx#2427

use crypto/pbkdf2 and drop x/crypto by @lestrrat in lestrrat-go/jwx#2431

[v3] jws: add WithVerifiedSignature verify option by @lestrrat in lestrrat-go/jwx#2436

[v3] jwe: add WithDecryptedRecipient decrypt option by @lestrrat in lestrrat-go/jwx#2440

[v3] jws: fix crit and multi-signature docs by @lestrrat in lestrrat-go/jwx#2437

[v3] jwe: document per-recipient headers by @lestrrat in lestrrat-go/jwx#2441

[v3] jws: fix comment in header example by @lestrrat in lestrrat-go/jwx#2447

[v3] release v3.4.0 by @lestrrat in lestrrat-go/jwx#2449

Full Changelog: lestrrat-go/jwx@v3.3.0...v3.4.0

Changelog

Sourced from github.com/lestrrat-go/jwx/v3's changelog.

v3.4.0 23 Oct 2026

[jwe] jwe.Decrypt now tries each key provider in turn and moves on to the next one when a provider returns an error, as jws.Verify does. For example, jwe.WithKeySet with a set that has no usable key, followed by a working jwe.WithKey, decrypts with the working key. If no key works, the returned error wraps the last failure, so errors.Is can find it. (#2385)

[jwe] JSON serialization of a JWE now always includes the ciphertext member, jwe.Parse now accepts an empty ciphertext, and jwe.Decrypt now returns an empty payload for it. A JWE that encrypts an empty plaintext with AES-GCM therefore round-trips through jwe.Encrypt(..., jwe.WithJSON()), jwe.Parse, json.Marshal, and jwe.Decrypt. A missing, null, or non-string ciphertext is still rejected, and the iv and tag members must still be non-empty. (#2387)

[jwe] jwe.Decrypt now rejects a message whose tag or iv is not exactly the length the content encryption algorithm uses. Bytes can no longer be moved between ciphertext and tag to produce a different message that still decrypts. (#2387)

[jwe] JSON serialization of a JWE now writes the shared unprotected header as a JSON object, as RFC 7516 requires. A JWE with a shared unprotected header therefore round-trips through jwe.Parse, json.Marshal, jwe.Parse, and jwe.Decrypt. (#2389)

[jwt] jwt.WithNumericDateFormatPrecision now applies when a token is serialized. It covers the exp, iat, and nbf claims of jwt.Token, and those claims plus updated_at in openid.Token. Previously the option never had any effect on serialized tokens, which always wrote these claims as whole seconds.

With a precision above 0, a date that has a fraction is written as a JSON number with up to that many fractional digits. Extra digits are rounded down, toward the earlier time, and trailing zeros are removed. At precision 3, an iat of 2000000000.123456789 is written as 2000000000.123, and 2000000000.1 as 2000000000.1. A date with no fraction is written as an integer, and output at the default precision of 0 is unchanged. Callers who set a precision above 0 will see fractional dates in their tokens, in the bytes jwt.Sign signs, and in what jwt.Equal compares. (#2410)

[jwt] NumericDate claims such as exp, iat, and nbf now parse negative values, which are dates before 1970, with or without jwt.WithNumericDateParsePedantic(true). The sign covers the fraction too, so -1.5 is one and a half seconds before the epoch. Fractional digits beyond jwt.WithNumericDateParsePrecision are rounded down, toward the earlier time, the same way serialization rounds: at the default precision of 0, -1.5 parses as -2. Positive values parse as before.

... (truncated)

Commits

86f71b2 Merge pull request #2449 from lestrrat-go/chore-v3-release-3.4.0
c22fdc8 release v3.4.0
eff2810 jws: fix signature index comment in header example (#2447)
4aa8e99 Merge pull request #2441 from lestrrat-go/docs-v3-jwe-per-recipient-headers
0b44bc9 Merge pull request #2437 from lestrrat-go/docs-v3-jws-crit-extension
ac1ed67 merge develop/v3
33bd92f Merge pull request #2440 from lestrrat-go/feat-v3-jwe-decrypted-recipient
a99856c merge develop/v3
9853f21 merge develop/v3
102b593 Merge pull request #2436 from lestrrat-go/feat-v3-jws-verified-signature
Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.24.1 to 1.25.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.25.0

⚠️ This release raises the minimum required Go version to 1.26 and includes breaking API changes in api/prometheus/v1 (see the [CHANGE] entries below). ⚠️

1.25.0 / 2026-10-07

[CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138

[CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963

[CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928

[FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091

[FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146

[ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142

[ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095

[ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125

[BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136

[BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139

[BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135

What's Changed

fix: Remove unneeded and broken CI badge by @bwplotka in prometheus/client_golang#2057

Synchronize common files from prometheus/prometheus by @prombot in prometheus/client_golang#2060

build(deps): bump the codeql group with 4 updates by @dependabot[bot] in prometheus/client_golang#2066

build(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by @dependabot[bot] in prometheus/client_golang#2071

build(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 in the golang-org-x group across 1 directory by @dependabot[bot] in prometheus/client_golang#2069

build(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 in /exp by @dependabot[bot] in prometheus/client_golang#2072

build(deps): bump github.com/prometheus/common from 0.69.0 to 0.70.1 in /exp by @dependabot[bot] in prometheus/client_golang#2073

build(deps): bump github.com/prometheus/common from 0.69.0 to 0.70.1 by @dependabot[bot] in prometheus/client_golang#2070

build(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 in /tutorials/whatsup by @dependabot[bot] in prometheus/client_golang#2075

Pin GitHub Actions by @SuperQ in prometheus/client_golang#2074

build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in prometheus/client_golang#2067

promhttp: fix panic on requests with nil URL by @SAY-5 in prometheus/client_golang#2065

Return info annotations in addition to warnings in the API by @zenador in prometheus/client_golang#1963

build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @dependabot[bot] in prometheus/client_golang#2082

Synchronize common files from prometheus/prometheus by @prombot in prometheus/client_golang#2084

Synchronize common files from prometheus/prometheus by @prombot in prometheus/client_golang#2086

Synchronize common files from prometheus/prometheus by @prombot in prometheus/client_golang#2088

Regenerate Go collector runtime metrics for Go 1.25 and Go 1.26 by @bwplotka in prometheus/client_golang#2090

go.mod: remove obsolete exclude rule by @thaJeztah in prometheus/client_golang#2077

Synchronize common files from prometheus/prometheus by @prombot in prometheus/client_golang#2093

README: document the OpenTelemetry OTLP push bridge by @mvanhorn in prometheus/client_golang#1987

docs: add AGENTS.md contributor and maintainer guide by @bwplotka in prometheus/client_golang#2056

testutil: add GatherAndFormat helper by @wieghx in prometheus/client_golang#2091

build(deps): bump the codeql group with 4 updates by @dependabot[bot] in prometheus/client_golang#2101

build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 by @dependabot[bot] in prometheus/client_golang#2097

build(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 by @dependabot[bot] in prometheus/client_golang#2098

build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 in /exp by @dependabot[bot] in prometheus/client_golang#2099

build(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 in /exp by @dependabot[bot] in prometheus/client_golang#2100

build(deps): bump github.com/prometheus/procfs from 0.21.1 to 0.22.0 in the prometheus group across 1 directory by @dependabot[bot] in prometheus/client_golang#2096

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.25.0 / 2026-10-07

[CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138

[CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963

[CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928

[FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091

[FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146

[ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142

[ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095

[ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125

[BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136

[BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139

[BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135

Commits

0d88875 Cut v1.25.0 (#2164)
e9946ee Cut v1.25.0-rc.0 (#2154)
de866d6 Merge pull request #2152 from prometheus/dependabot/go_modules/api/prometheus...
a37302f prometheus: fix modernize lint findings (#2151)
a3fa380 build(deps): bump google.golang.org/grpc
9da3fcc fix: updates for tsdb blocks handling (#1928)
0ecb5c2 api: match complete URL placeholders (#2136)
2ad001a exp/api/remote: reset buffer before generic marshal (#2139)
0db8d43 promhttp: vary negotiated metrics responses (#2142)
b1f9c7a Merge pull request #2144 from prometheus/dependabot/go_modules/exp/github.com...
Additional commits viewable in compare view

Updates golang.org/x/sync from 0.23.0 to 0.24.0

Commits

36f2d70 errgroup: modernize the usage of closures in goroutines
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-deps group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.3.2` | `5.5.0` | | [github.com/goccy/go-json](https://github.com/goccy/go-json) | `0.11.2` | `0.12.0` | | [github.com/lestrrat-go/jwx/v3](https://github.com/lestrrat-go/jwx) | `3.3.0` | `3.4.0` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.24.1` | `1.25.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.23.0` | `0.24.0` | Updates `github.com/go-chi/chi/v5` from 5.3.2 to 5.5.0 - [Release notes](https://github.com/go-chi/chi/releases) - [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md) - [Commits](go-chi/chi@v5.3.2...v5.5.0) Updates `github.com/goccy/go-json` from 0.11.2 to 0.12.0 - [Release notes](https://github.com/goccy/go-json/releases) - [Changelog](https://github.com/goccy/go-json/blob/master/CHANGELOG.md) - [Commits](goccy/go-json@v0.11.2...v0.12.0) Updates `github.com/lestrrat-go/jwx/v3` from 3.3.0 to 3.4.0 - [Release notes](https://github.com/lestrrat-go/jwx/releases) - [Changelog](https://github.com/lestrrat-go/jwx/blob/v3.4.0/Changes) - [Commits](lestrrat-go/jwx@v3.3.0...v3.4.0) Updates `github.com/prometheus/client_golang` from 1.24.1 to 1.25.0 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/v1.25.0/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.24.1...v1.25.0) Updates `golang.org/x/sync` from 0.23.0 to 0.24.0 - [Commits](golang/sync@v0.23.0...v0.24.0) --- updated-dependencies: - dependency-name: github.com/go-chi/chi/v5 dependency-version: 5.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/goccy/go-json dependency-version: 0.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/lestrrat-go/jwx/v3 dependency-version: 3.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/prometheus/client_golang dependency-version: 1.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/sync dependency-version: 0.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 2, 2026

voidrunner3074 merged commit 01045ca into master Nov 6, 2026
6 of 7 checks passed

Navigation Menu

Repository navigation

chore(deps): bump the go-deps group across 1 directory with 5 updates - #76

chore(deps): bump the go-deps group across 1 directory with 5 updates#76
voidrunner3074 merged 1 commit into
masterfrom
dependabot/go_modules/go-deps-723f922920

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 2, 2026

v5.5.0

What's Changed

New Contributors

v5.4.0

What's Changed

New Contributors

v0.12.0

What's Changed

v3.4.0

What's Changed

v1.25.0

1.25.0 / 2026-10-07

What's Changed

1.25.0 / 2026-10-07

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant