Skip to content

chore(deps): bump the go-modules group across 1 directory with 18 updates - #4531

Closed
dependabot[bot] wants to merge 1 commit into
V5.4from
dependabot/go_modules/V5.4/go-modules-3410fa21c8
Closed

dependabot[bot] wants to merge 1 commit into
V5.4from
dependabot/go_modules/V5.4/go-modules-3410fa21c8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-modules group with 14 updates in the / directory:

Package From To
github.com/avast/retry-go/v4 4.6.0 4.6.1
github.com/cbroglie/mustache 1.4.0 1.4.2
github.com/chromedp/chromedp 0.13.0 0.13.7
github.com/deepmap/oapi-codegen 1.16.2 1.16.3
github.com/golang-jwt/jwt/v5 5.2.2 5.2.3
github.com/labstack/echo/v4 4.15.3 4.15.4
github.com/lestrrat-go/jwx 1.2.29 1.2.31
github.com/magiconair/properties 1.8.7 1.8.10
github.com/mdp/qrterminal/v3 3.2.0 3.2.1
github.com/nats-io/nats-server/v2 2.11.15 2.11.17
github.com/nuts-foundation/go-stoabs 1.11.1 1.11.2
github.com/prometheus/client_model 0.6.1 0.6.3
github.com/sirupsen/logrus 1.9.3 1.9.4
github.com/spf13/pflag 1.0.6 1.0.10

Updates github.com/avast/retry-go/v4 from 4.6.0 to 4.6.1

Release notes

Sourced from github.com/avast/retry-go/v4's releases.

v4.6.1

What's Changed

New Contributors

Full Changelog: avast/retry-go@4.6.0...v4.6.1

Commits
  • 93932f8 🚀 (VERSION): bump version from 4.6.0 to 4.6.1 to reflect recent changes and i...
  • d20c351 Merge pull request #125 from haaawk/fix_124
  • 8d7cef7 Make sure DelayType function gets consistent values of n
  • 79a35c4 Merge pull request #123 from avast/dependabot/go_modules/github.com/stretchr/...
  • d873473 Bump github.com/stretchr/testify from 1.9.0 to 1.10.0
  • 0eeb96f Merge pull request #126 from avast/issue_99_failing_test_on_windows
  • ac94eb5 Update GitHub Actions workflow to use latest Go version and artifact naming
  • 6523ff3 Upgrade golangci-lint GitHub Actions workflow to latest version
  • 5197715 Update GitHub Actions workflow configuration
  • 1c0cc21 Update GitHub Actions artifact naming to include Go version
  • Additional commits viewable in compare view

Updates github.com/cbroglie/mustache from 1.4.0 to 1.4.2

Release notes

Sourced from github.com/cbroglie/mustache's releases.

v1.4.2

Full Changelog: cbroglie/mustache@v1.4.1...v1.4.2

v1.4.1

What's Changed

New Contributors

Full Changelog: cbroglie/mustache@v1.4.0...v1.4.1

Commits
  • 2d12423 Fix release CI: migrate to GoReleaser v2
  • bc8a53e Prevent stack overflow from deeply nested sections
  • 6d0f72f Fix panic in Set Delimiter parsing. (#91)
  • d50b8fb fix typo in RenderFile docs
  • 2926dd6 Update dependencies
  • c72b272 add option to customize escape function
  • c0cf5d2 updates installation instructions in CLI Overview
  • 6017cf8 Print errors to stderr
  • See full diff in compare view

Updates github.com/chromedp/chromedp from 0.13.0 to 0.13.7

Release notes

Sourced from github.com/chromedp/chromedp's releases.

chromedp v0.13.2

Full Changelog: chromedp/chromedp@v0.13.1...v0.13.2

Commits
  • c333789 allocator: fix race that causes workgroup panic
  • 2f3596f Run modernize -fix -test ./...
  • 743c1e4 Fix CreateTarget call
  • a2c672f fix: #1448
  • 5a4d7c0 Updating cdproto
  • f6fdfdd add tests for unmarshalling and marshalling json
  • 6c2d3ef pass unmarshal and marshal options
  • eae0058 log syntactic errors when reading messages
  • 9335dc3 Allow setting jsonv2 Marshal/Unmarshal options
  • 71458e1 fix: add page.EventFrameStartedNavigating to ignored events (Google Chrome 13...
  • See full diff in compare view

Updates github.com/deepmap/oapi-codegen from 1.16.2 to 1.16.3

Commits

Updates github.com/golang-jwt/jwt/v5 from 5.2.2 to 5.2.3

Release notes

Sourced from github.com/golang-jwt/jwt/v5's releases.

v5.2.3

What's Changed

New Contributors

Full Changelog: golang-jwt/jwt@v5.2.2...v5.2.3

Commits

Updates github.com/labstack/echo/v4 from 4.15.3 to 4.15.4

Release notes

Sourced from github.com/labstack/echo/v4's releases.

v4.15.4

Security

Fixes GHSA-vfp3-v2gw-7wfq: an encoded path separator (%2F or %5C) in a static file URL could bypass route-level middleware (e.g. authentication on a sibling route) and disclose static files. Both StaticDirectoryHandler (used by Static/StaticFS) and the Static middleware are affected. Backport of the v5 fix (#3016, released in v5.2.1). Thanks to @​a-tt-om and @​oran-gugu for reporting.


Make serving static file releated methods and middleware not unescape path by default - so how the way Router interprets paths and Static methods/middleware is consistent.

Given following situation:

// 0.
// given folder structure:
// private.txt
// public/
// public/index.html
// public/text.txt
// public/admin/private.txt
// 1. share public/ folder contents from the server root. This folder actually contains subfolder admin which
// contents we want to forbid from downloading
e.Static("/", "public")
// 2. naively assume that everything under /admin folder is now forbidden
e.GET("/admin/*", func(c *Context) error {
return ErrForbidden
})

Then requests to /admin%2fprivate.txt would not be matched to GET /admin/* route (routing does not look unescaped path) and static file serving will use unescaped path to serve the file.

Note: this way of "guarding" subfolders will never work for for paths like /assets/../admin%2fprivate.txt which will path.Clean("/assets/../admin%2fprivate.txt") to /admin/private.txt and are servable if static file serving is configured to unescape paths.

If you want to guard routes - use middlewares on Static* methods and before Static middleware.

Breaking change / migration: If you serve files whose names contain URL-encoded characters (e.g., /hello%20world.txthello world.txt), you must now opt in:

	e := echo.New()
	e.EnablePathUnescapingStaticFiles = true  // <-- enable old behavior
	e.Static("/", "public")

for static middleware

	e.Use(middleware.StaticWithConfig(middleware.StaticConfig{
		EnablePathUnescaping: true, // <-- enable old behavior
	}))

... (truncated)

Changelog

Sourced from github.com/labstack/echo/v4's changelog.

v4.15.4 - 2026-06-15

Security

Fixes GHSA-vfp3-v2gw-7wfq

Make serving static file releated methods and middleware not unescape path by default - so how the way Router interprets paths and Static methods/middleware is consistent.

Given following situation:

// 0.
// given folder structure:
// private.txt
// public/
// public/index.html
// public/text.txt
// public/admin/private.txt
// 1. share public/ folder contents from the server root. This folder actually contains subfolder admin which
// contents we want to forbid from downloading
e.Static("/", "public")
// 2. naively assume that everything under /admin folder is now forbidden
e.GET("/admin/*", func(c *Context) error {
return ErrForbidden
})

Then requests to /admin%2fprivate.txt would not be matched to GET /admin/* route (routing does not look unescaped path) and static file serving will use unescaped path to serve the file.

Note: this way of "guarding" subfolders will never work for for paths like /assets/../admin%2fprivate.txt which will path.Clean("/assets/../admin%2fprivate.txt") to /admin/private.txt and are servable if static file serving is configured to unescape paths.

If you want to guard routes - use middlewares on Static* methods and before Static middleware.

Breaking change / migration: If you serve files whose names contain URL-encoded characters (e.g., /hello%20world.txthello world.txt), you must now opt in:

	e := echo.New()
	e.EnablePathUnescapingStaticFiles = true  // <-- enable old behavior
	e.Static("/", "public")

for static middleware

	e.Use(middleware.StaticWithConfig(middleware.StaticConfig{
		EnablePathUnescaping: true, // <-- enable old behavior
	}))
Commits
  • ec79b58 Merge pull request #3020 from aldas/v4_v4-15-4_changelog
  • 2714c07 Changelog for v4.15.4 - security fix
  • 13f0ed1 Merge pull request #3019 from aldas/v4_backport_3016
  • d16a4ec backport PR 3016 from v4
  • 8f167b9 Merge pull request #3018 from aldas/v4_remove_v5_dep
  • 9afa4ba remove dependency on labstack/echo v5 introduced in go.mod and go.sum
  • 1e05f63 Merge pull request #3017 from aldas/v4_ci_updates
  • 11a3cc4 Update dependencies and add ignore for linting
  • 26bd016 Update CI action versions
  • aa52f6a ci: run workflows on the v4 branch, not just master (#3013)
  • See full diff in compare view

Updates github.com/lestrrat-go/jwx from 1.2.29 to 1.2.31

Release notes

Sourced from github.com/lestrrat-go/jwx's releases.

v1.2.31

What's Changed

This release was made to officially deprecate v1 series of github.com/lestrrat-go/jwx. Please use github.com/lestrrat-go/jwx/v3 or newer

Full Changelog: lestrrat-go/jwx@v1.2.30...v1.2.31

v1.2.30

v1.2.30 28 Jul 2024
  * Update minimum required go version to 1.20
  * Update tests so that they work on 32-bit systems
Changelog

Sourced from github.com/lestrrat-go/jwx's changelog.

v1.2.31 9 Apr 2025

  • Mark this version of github.com/lestrrat-go/jwx deprecated. Please use github.com/lestrrat-go/jwx/v3 or newer
  • Update tooling
  • Skip TestJoseCompatibility, because latchset/jose recently decided to set p2c to 32768, but we do not have the ability to set this number in v1

v1.2.30 28 Jul 2024

  • Update minimum required go version to 1.20
  • Update tests so that they work on 32-bit systems
Commits

Updates github.com/magiconair/properties from 1.8.7 to 1.8.10

Release notes

Sourced from github.com/magiconair/properties's releases.

v1.8.10

What's Changed

Full Changelog: magiconair/properties@v1.8.9...v1.8.10

v1.8.9

What's Changed

New Contributors

Full Changelog: magiconair/properties@v1.8.8...v1.8.9

v1.8.8

What's Changed

New Contributors

Full Changelog: magiconair/properties@v1.8.7...v1.8.8

Commits
  • 281f515 Merge pull request #81 from magiconair/issue-80
  • 6b7aa68 test with go1.24
  • 06f3133 escape leading whitespace on value in Write()
  • 3dfc3b5 Merge pull request #77 from magiconair/get32bit
  • b148584 Add 32bit numeric getters which do not panic
  • d8bdba3 Merge pull request #61 from rafaelhl/skip-ignored-private-field
  • d80fb15 test with more go versions
  • 7b90c47 cleanup README
  • 449f224 move CHANGELOG to Github Releases
  • e64054d fix workflow
  • Additional commits viewable in compare view

Updates github.com/mdp/qrterminal/v3 from 3.2.0 to 3.2.1

Release notes

Sourced from github.com/mdp/qrterminal/v3's releases.

v3.2.1

Changelog

  • 18176c8096af17810ecb1492345ee40c6f42b738 Fix: Default characters in config - Fixes #33
  • 4e76afd10340aac2b71923d765da2ad506870bbb Fix: Goreleaser
  • 2d4538ff732504ec0f32484414d618b22754b1d6 Fix: Goreleaser
  • 2d47ea1fb6316725f76c19fcf29c985e46cd8e94 Merge pull request #30 from mattn/resize
  • 8a6d60af404964960625f35d9acd71ebbddad9c2 Merge pull request #34 from mdp/mdp/fix_33
  • c8b993e02dd7d057c46e000a62901a6bb036c12c make sixel smaller when code is large

Released by GoReleaser.

Changelog

Sourced from github.com/mdp/qrterminal/v3's changelog.

3.2.1

  • Fix #33 - Default config to standard characters if not specified.
Commits

Updates github.com/nats-io/nats-server/v2 from 2.11.15 to 2.11.17

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.11.17

Changelog

Refer to the 2.11 Upgrade Guide for backwards compatibility notes with 2.10.x.

Go Version

  • 1.25.9

Dependencies

  • github.com/antithesishq/antithesis-sdk-go v0.7.0-default-no-op
  • github.com/klauspost/compress v1.18.5
  • github.com/minio/highwayhash v1.0.4
  • golang.org/x/crypto v0.50.0
  • golang.org/x/sys v0.43.0
  • github.com/nats-io/nats.go v1.51.0

Fixed

General

  • Reload logic on gateway pinned_certs configuration has been corrected
  • Repeated CONNECT messages on a connection now clear subscriptions
  • JWT claims with validity times that cross midnight are now validated correctly
  • The /connz monitoring endpoint no longer discloses bearer JWTs
  • Monitoring redaction of route and cluster URL secrets when passed in as command line arguments
  • Fixed a panic that could occur when negotiating compression on leafnode connections
  • Max control line enforcement for non-clients has been fixed
  • Fixed a bug where setting message headers could mutate the input message buffers

Complete Changes

nats-io/nats-server@v2.11.16...v2.11.17

Release v2.11.16

Changelog

Refer to the 2.11 Upgrade Guide for backwards compatibility notes with 2.10.x.

Go Version

  • 1.25.9

CVEs

  • TBD

Fixed

... (truncated)

Commits
  • 0f192db Release v2.11.17
  • 9972975 Cherry-picks for v2.11.17 (#99)
  • 73dbbaa Fix unit tests for TLS error returns
  • 68bc3be [FIXED] c.setHeader mutates input message
  • 237bef0 [FIXED] Max control line for non-clients
  • fc5fe39 [FIXED] Prevent pre-auth leafnode INFO nil derefs
  • 362b072 [FIXED] Redact route and cluster URL secrets in argv
  • 16b59f6 [FIXED] /connz?auth=true discloses bearer JWTs
  • 35a3060 [FIXED] validateTimes mishandles time ranges that cross midnight
  • 146c476 [FIXED] Re-CONNECT clears previous subscriptions
  • Additional commits viewable in compare view

Updates github.com/nats-io/nats.go from 1.49.0 to 1.51.0

Release notes

Sourced from github.com/nats-io/nats.go's releases.

Release v1.51.0

Changelog

ADDED

  • Core NATS:
    • Option to customize write buffer size (#2057)
    • Option to automatically reconnect on write error (#2055)
    • Accessors for JetStream API level and IsSysAccount from ServerInfo (#2060)

FIXED

  • Core NATS:
    • Make websocket frame validation more robust (#2050)
  • JetStream:
    • Fix deadlock in Consume() when calling Stop/Drain from ConsumeErrHandler (#2059)

IMPROVED

  • Fix typos in tests. Thanks @​deining for the contribution (#2049)
  • Fix deprecation warnings by bumping GH actions to their latest versions. Thanks @​deining for the contibution (#2048)
  • Code linting: remove functions min and max. Thanks @​deining for the contribution (#2047)

Complete Changes

nats-io/nats.go@v1.50.0...v1.51.0

Release v1.50.0

Changelog

FIXED

  • Core NATS:
    • Fix WebSocket close frame discarding buffered data frames (#2032)
  • JetStream:
    • Remove status listener in Consume()/Messages() cleanup. Thanks @​txuna for the contribution (#1993)
    • Fix race condition in orderedSubscription.Drain() (#2030)
    • Fixed OrderedConsumer.Consume() race in handler (#2043)

IMPROVED

  • Core NATS:
    • De-flake TestAlwaysReconnectOnAccountMaxConnectionsExceededErr (#2042)
    • Wrap EOF/connection reset errors with TLS context after handshake (#2031)
  • JetStream:
    • Reject control characters in stream and consumer names (#2038)
    • Add missing AccountLimits fields in jetstream package (#2041)
    • Fix flaky TestConsumerPrioritized/messages test (#2033)
  • KeyValue:
    • Deduplicate keys in KeyValue.Keys() and document ListKeys behavior (#2029)

... (truncated)

Commits
  • 17b6fd1 Release v1.51.0 (#2061)
  • b6d0226 [ADDED] Accessors for JS API level and IsSysAccount (#2060)
  • 7a2bb4a [IMPROVED] Code linting: remove functions min and max (#2047)
  • 0099a32 [IMPROVED] Fix deprecation warnings by bumping GH actions to their latest ver...
  • e23b40d [FIXED] Deadlock in Consume() whe calling Stop/Drain from ConsumeErrHandler (...
  • 1250dd6 [ADDED] Automatic reconnect on write error option (#2055)
  • e4a8c79 [ADDED] Option to customize write buffer size (#2057)
  • 9a88c4c Update Claude workflow permissions to contents:read and actions:read (#2056)
  • f945cd9 [IMPROVED] Fix typos (#2049)
  • 4bba571 [FIXED] Make websocket frame validation more robust (#2050)
  • Additional commits viewable in compare view

Updates github.com/nuts-foundation/go-stoabs from 1.11.1 to 1.11.2

Release notes

Sourced from github.com/nuts-foundation/go-stoabs's releases.

v1.11.2

What's changed

Security

  • Bump go.opentelemetry.io/otel 1.37.0 → 1.41.0, fixing CVE-2026-29181 (GHSA-mh2q-q3fh-2475): multi-value baggage header extraction caused excessive allocations (remote DoS amplification). (#151)

Dependencies

  • Bump github.com/dgraph-io/badger/v4 4.6.0 → 4.9.2 (#134)
  • Bump go.uber.org/mock 0.5.2 → 0.6.0 (#137)
  • Bump github.com/go-redsync/redsync/v4 4.13.0 → 4.16.0 (#143)
  • Bump github.com/redis/go-redis/v9 9.12.1 → 9.20.1 (#145)
  • Bump github.com/alicebob/miniredis/v2 2.34.0 → 2.38.0 (#129)

CI

  • Migrate CI from CircleCI to GitHub Actions (#149)

Full changelog: nuts-foundation/go-stoabs@v1.11.1...v1.11.2

Commits
  • 7aa1fbc Bump go.opentelemetry.io/otel from 1.37.0 to 1.41.0 (#151)
  • b8b7b17 Bump github.com/dgraph-io/badger/v4 from 4.6.0 to 4.9.2 (#134)
  • 714dac7 Bump go.uber.org/mock from 0.5.2 to 0.6.0 (#137)
  • 7f75e03 Bump github.com/go-redsync/redsync/v4 from 4.13.0 to 4.16.0 (#143)
  • 058a336 Bump github.com/redis/go-redis/v9 from 9.12.1 to 9.20.1 (#145)
  • 00d7c50 Bump github.com/alicebob/miniredis/v2 from 2.34.0 to 2.38.0 (#129)
  • 44f8e61 Merge pull request #149 from nuts-foundation/migrate-ci-to-github-actions
  • 8c44fac Migrate CI from CircleCI to GitHub Actions
  • See full diff in compare view

Updates github.com/prometheus/client_model from 0.6.1 to 0.6.3

Release notes

Sourced from github.com/prometheus/client_model's releases.

v0.6.3

What's Changed

New Contributors

Full Changelog: prometheus/client_model@v0.6.2...v0.6.3

What's Changed

... (truncated)

Commits
  • a834711 Bump google.golang.org/protobuf from 1.36.11 to 1.36.12 (#149)
  • 07078d2 Update common Prometheus files (#148)
  • 6ab4937 Update common Prometheus files (#146)
  • 10dc9df docs: Explained current state of the repo (#143)
  • abfdc7e Merge pull request #144 from prombot/repo_sync
  • c99203f Update common Prometheus files
  • 46d9cfb Update common Prometheus files (

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 10, 2026
…ates

Bumps the go-modules group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/avast/retry-go/v4](https://github.com/avast/retry-go) | `4.6.0` | `4.6.1` |
| [github.com/cbroglie/mustache](https://github.com/cbroglie/mustache) | `1.4.0` | `1.4.2` |
| [github.com/chromedp/chromedp](https://github.com/chromedp/chromedp) | `0.13.0` | `0.13.7` |
| [github.com/deepmap/oapi-codegen](https://github.com/deepmap/oapi-codegen) | `1.16.2` | `1.16.3` |
| [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.2.2` | `5.2.3` |
| [github.com/labstack/echo/v4](https://github.com/labstack/echo) | `4.15.3` | `4.15.4` |
| [github.com/lestrrat-go/jwx](https://github.com/lestrrat-go/jwx) | `1.2.29` | `1.2.31` |
| [github.com/magiconair/properties](https://github.com/magiconair/properties) | `1.8.7` | `1.8.10` |
| [github.com/mdp/qrterminal/v3](https://github.com/mdp/qrterminal) | `3.2.0` | `3.2.1` |
| [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) | `2.11.15` | `2.11.17` |
| [github.com/nuts-foundation/go-stoabs](https://github.com/nuts-foundation/go-stoabs) | `1.11.1` | `1.11.2` |
| [github.com/prometheus/client_model](https://github.com/prometheus/client_model) | `0.6.1` | `0.6.3` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.3` | `1.9.4` |
| [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.6` | `1.0.10` |



Updates `github.com/avast/retry-go/v4` from 4.6.0 to 4.6.1
- [Release notes](https://github.com/avast/retry-go/releases)
- [Commits](avast/retry-go@4.6.0...4.6.1)

Updates `github.com/cbroglie/mustache` from 1.4.0 to 1.4.2
- [Release notes](https://github.com/cbroglie/mustache/releases)
- [Commits](cbroglie/mustache@v1.4.0...v1.4.2)

Updates `github.com/chromedp/chromedp` from 0.13.0 to 0.13.7
- [Release notes](https://github.com/chromedp/chromedp/releases)
- [Commits](chromedp/chromedp@v0.13.0...v0.13.7)

Updates `github.com/deepmap/oapi-codegen` from 1.16.2 to 1.16.3
- [Release notes](https://github.com/deepmap/oapi-codegen/releases)
- [Commits](oapi-codegen/oapi-codegen@v1.16.2...v1.16.3)

Updates `github.com/golang-jwt/jwt/v5` from 5.2.2 to 5.2.3
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Commits](golang-jwt/jwt@v5.2.2...v5.2.3)

Updates `github.com/labstack/echo/v4` from 4.15.3 to 4.15.4
- [Release notes](https://github.com/labstack/echo/releases)
- [Changelog](https://github.com/labstack/echo/blob/v4.15.4/CHANGELOG.md)
- [Commits](labstack/echo@v4.15.3...v4.15.4)

Updates `github.com/lestrrat-go/jwx` from 1.2.29 to 1.2.31
- [Release notes](https://github.com/lestrrat-go/jwx/releases)
- [Changelog](https://github.com/lestrrat-go/jwx/blob/v1.2.31/Changes)
- [Commits](lestrrat-go/jwx@v1.2.29...v1.2.31)

Updates `github.com/magiconair/properties` from 1.8.7 to 1.8.10
- [Release notes](https://github.com/magiconair/properties/releases)
- [Commits](magiconair/properties@v1.8.7...v1.8.10)

Updates `github.com/mdp/qrterminal/v3` from 3.2.0 to 3.2.1
- [Release notes](https://github.com/mdp/qrterminal/releases)
- [Changelog](https://github.com/mdp/qrterminal/blob/main/CHANGELOG.md)
- [Commits](mdp/qrterminal@v3.2.0...v3.2.1)

Updates `github.com/nats-io/nats-server/v2` from 2.11.15 to 2.11.17
- [Release notes](https://github.com/nats-io/nats-server/releases)
- [Changelog](https://github.com/nats-io/nats-server/blob/main/RELEASES.md)
- [Commits](nats-io/nats-server@v2.11.15...v2.11.17)

Updates `github.com/nats-io/nats.go` from 1.49.0 to 1.51.0
- [Release notes](https://github.com/nats-io/nats.go/releases)
- [Commits](nats-io/nats.go@v1.49.0...v1.51.0)

Updates `github.com/nuts-foundation/go-stoabs` from 1.11.1 to 1.11.2
- [Release notes](https://github.com/nuts-foundation/go-stoabs/releases)
- [Commits](nuts-foundation/go-stoabs@v1.11.1...v1.11.2)

Updates `github.com/prometheus/client_model` from 0.6.1 to 0.6.3
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](prometheus/client_model@v0.6.1...v0.6.3)

Updates `github.com/redis/go-redis/v9` from 9.12.1 to 9.20.1
- [Release notes](https://github.com/redis/go-redis/releases)
- [Changelog](https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md)
- [Commits](redis/go-redis@v9.12.1...v9.20.1)

Updates `github.com/sirupsen/logrus` from 1.9.3 to 1.9.4
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.3...v1.9.4)

Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.10
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.6...v1.0.10)

Updates `go.uber.org/mock` from 0.5.2 to 0.6.0
- [Release notes](https://github.com/uber/mock/releases)
- [Changelog](https://github.com/uber-go/mock/blob/main/CHANGELOG.md)
- [Commits](uber-go/mock@v0.5.2...v0.6.0)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

---
updated-dependencies:
- dependency-name: github.com/avast/retry-go/v4
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/cbroglie/mustache
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/chromedp/chromedp
  dependency-version: 0.13.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/deepmap/oapi-codegen
  dependency-version: 1.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-version: 5.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/labstack/echo/v4
  dependency-version: 4.15.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/lestrrat-go/jwx
  dependency-version: 1.2.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/magiconair/properties
  dependency-version: 1.8.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/mdp/qrterminal/v3
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/nats-io/nats-server/v2
  dependency-version: 2.11.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/nats-io/nats.go
  dependency-version: 1.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/nuts-foundation/go-stoabs
  dependency-version: 1.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/redis/go-redis/v9
  dependency-version: 9.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: go.uber.org/mock
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the go-modules group with 18 updates chore(deps): bump the go-modules group across 1 directory with 18 updates Sep 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/V5.4/go-modules-3410fa21c8 branch from 585e83a to 19e78df Compare September 13, 2026 21:07
@reinkrul reinkrul closed this Sep 18, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 18, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/go_modules/V5.4/go-modules-3410fa21c8 branch September 18, 2026 14:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant