build(deps): Bump the go group across 1 directory with 14 updates by dependabot[bot] · Pull Request #2102 · getsops/sops

dependabot · 2026-03-09T09:15:45Z

Bumps the go group with 10 updates in the / directory:

Package	From	To
github.com/ProtonMail/go-crypto	`1.3.0`	`1.4.0`
github.com/aws/aws-sdk-go-v2	`1.41.1`	`1.41.3`
github.com/aws/aws-sdk-go-v2/config	`1.32.9`	`1.32.11`
github.com/aws/aws-sdk-go-v2/feature/s3/manager	`1.22.2`	`1.22.6`
github.com/aws/aws-sdk-go-v2/service/kms	`1.50.0`	`1.50.2`
golang.org/x/net	`0.50.0`	`0.51.0`
golang.org/x/oauth2	`0.35.0`	`0.36.0`
golang.org/x/sys	`0.41.0`	`0.42.0`
google.golang.org/api	`0.267.0`	`0.269.0`
google.golang.org/grpc	`1.79.1`	`1.79.2`

Updates github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.0

Release notes

Sourced from github.com/ProtonMail/go-crypto's releases.

Release v1.4.0

What's Changed

Ignore leading and trailing whitespaces in the armor body in ProtonMail/go-crypto#288

Update key_generation.go, rename variables to avoid shadowing in ProtonMail/go-crypto#290

Add InsecureGenerateNonCriticalKeyFlags option to generate non-critical key flags signature subpackets in ProtonMail/go-crypto#291

Add InsecureGenerateNonCriticalSignatureCreationTime option to generate non-critical signature creation time subpackets in ProtonMail/go-crypto#292

Bump dependencies and min go version to 1.23 in ProtonMail/go-crypto#294

ECDHv4: Error on low-order x25519 public key curve points in ProtonMail/go-crypto#299

Cleartext: Only allow valid hashes in header in ProtonMail/go-crypto#298

Full Changelog: ProtonMail/go-crypto@v1.3.0...v1.4.0

Release v1.4.0-proton

This release is v1.4.0 with support for the following non-standardized features:

Presistent symmetric keys experimental + latest draft draft-ietf-openpgp-persistent-symmetric-keys-00

Automatic forwarding draft-wussler-openpgp-forwarding-00

Post-quantum algorithms draft-ietf-openpgp-pqc (Updated to draft-ietf-openpgp-pqc-09)

Commits

a8cc4f0 Merge pull request #298 from ProtonMail/feat/cleartext-hash-header
57f891b Merge branch 'main' into feat/cleartext-hash-header
da5c190 Merge pull request #299 from ProtonMail/fix/ecdh-low-order-curve-points
3cc59b0 Merge branch 'main' into feat/cleartext-hash-header
b11bd23 fix(ecdh): Do not allow low order public key points
b6bdd12 Merge pull request #294 from ProtonMail/chore/bump-go-and-circl
b1ff3d5 Bump crypto dependencies and min go version to 1.23
cfb2af9 fix(cleartext): Check hashes in headers
de87788 Add InsecureGenerateNonCriticalSignatureCreationTime option to generate non-c...
0906643 Add InsecureGenerateNonCriticalKeyFlags option to generate non-critical key f...
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.41.1 to 1.41.3

Commits

967c920 Release 2026-03-03
23daf2b Regenerated Clients
ae690a7 Update endpoints model
42acfb9 Update API model
790446e Run new Go tool 'go fix' on non-codegen files (#3337)
e64a7d0 migrate protocol test codegen to smithy-go (#3335)
d5b9ac6 Bump Go version to 1.24 (#3334)
ddb9538 Release 2026-02-27
deda70f Regenerated Clients
7d5acbd Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.9 to 1.32.11

Commits

967c920 Release 2026-03-03
23daf2b Regenerated Clients
ae690a7 Update endpoints model
42acfb9 Update API model
790446e Run new Go tool 'go fix' on non-codegen files (#3337)
e64a7d0 migrate protocol test codegen to smithy-go (#3335)
d5b9ac6 Bump Go version to 1.24 (#3334)
ddb9538 Release 2026-02-27
deda70f Regenerated Clients
7d5acbd Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.9 to 1.19.11

Commits

967c920 Release 2026-03-03
23daf2b Regenerated Clients
ae690a7 Update endpoints model
42acfb9 Update API model
790446e Run new Go tool 'go fix' on non-codegen files (#3337)
e64a7d0 migrate protocol test codegen to smithy-go (#3335)
d5b9ac6 Bump Go version to 1.24 (#3334)
ddb9538 Release 2026-02-27
deda70f Regenerated Clients
7d5acbd Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.22.2 to 1.22.6

Commits

c964dbd Release 2024-05-15
ce84395 Regenerated Clients
8de9119 Update API model
05fcf66 internal: true up internal metrics collection for post-SRA middleware (#2642)
1148427 reformat signer/v4 package doc (#2640)
b238d3f Release 2024-05-14
85f8268 Regenerated Clients
ebaee4c Update endpoints model
593b966 Update API model
bfb02f0 Merge customizations for S3
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.50.0 to 1.50.2

Commits

de4f646 Release 2024-02-20
a31327a Regenerated Clients
d133395 Update API model
b135f99 fix(2502): zero region should explicitly fail endpoint resolution (#2503)
7cb105f Release 2024-02-19
7f9c4d2 Regenerated Clients
a60d4b2 Update API model
be0accd fix: panic due to potentially uncomparable wrapped fn in express_resolve (#2500)
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.96.0 to 1.96.4

Commits

38de242 Release 2026-03-05
ecc8d05 Regenerated Clients
17f88d8 Update endpoints model
32a2e29 Update API model
10568eb read the correct signing name for sigv4a (#3338)
20f3253 track protocol benchmarks (#3339)
921ad89 fix event stream v2 deser (#3340)
f0e4daf Release 2026-03-04
f94e7b7 Regenerated Clients
fb776cb Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.41.6 to 1.41.8

Commits

e7dfd72 Release 2024-05-08
316c7cd Regenerated Clients
ba18a1e Update API model
31c2861 fix: improve Go doc formatter (#2636)
7a87a62 add missing changelog (#2635)
8cc2bc3 Release 2024-05-07
36b4e92 Regenerated Clients
9e70bfa Update API model
7a654f5 dep: bump x/net to 0.23.0 (#2631)
eff2620 Release 2024-05-06
Additional commits viewable in compare view

Updates golang.org/x/net from 0.50.0 to 0.51.0

Commits

60b3f6f internal/http3: prevent Server handler from writing longer body than declared
b0ca456 internal/http3: fix Write in Server Handler returning the wrong value
1558ba7 publicsuffix: update to 2026-02-06
4e1c745 internal/http3: make Server response include headers that can be inferred
19f580f http2: fix nil panic in typeFrameParser for unassigned frame types
818aad7 internal/http3: add server to client trailer header support
c1bbe1a internal/http3: add client to server trailer header support
29181b8 all: remove go1.25 and older build constraints
8109305 all: upgrade go directive to at least 1.25.0 [generated]
0b37bdf quic: don't run TestStreamsCreateConcurrency in synctest bubble
Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.35.0 to 0.36.0

Commits

4d954e6 all: upgrade go directive to at least 1.25.0 [generated]
See full diff in compare view

Updates golang.org/x/sys from 0.41.0 to 0.42.0

Commits

eaaaaee windows/registry: correct KeyInfo.ModTime calculation
942780b cpu: darwin/arm64 feature detection
acef388 unix/linux: Prefixmsg and PrefixCacheinfo structs
3687fbd cpu: better defaults on darwin ARM64
48062e9 plan9: change Note to alias syscall.Note
4f23f80 windows: change Signal to alias syscall.Signal
7548802 all: upgrade go directive to at least 1.25.0 [generated]
See full diff in compare view

Updates google.golang.org/api from 0.267.0 to 0.269.0

Release notes

Sourced from google.golang.org/api's releases.

v0.269.0

0.269.0 (2026-02-24)

Features

all: Auto-regenerate discovery clients (#3512) (7565f1c)

Bug Fixes

generator: Handle preview version pkg name (#3511) (2a249ce)

v0.268.0

0.268.0 (2026-02-23)

Features

all: Auto-regenerate discovery clients (#3502) (5ccf9b9)

all: Auto-regenerate discovery clients (#3505) (f405df9)

all: Auto-regenerate discovery clients (#3506) (cda923a)

all: Auto-regenerate discovery clients (#3507) (e9015cc)

all: Auto-regenerate discovery clients (#3508) (20fbcc1)

all: Auto-regenerate discovery clients (#3509) (20c1e0f)

Update to go 1.26 (#3504) (cc5baec)

Changelog

Sourced from google.golang.org/api's changelog.

0.269.0 (2026-02-24)

Features

all: Auto-regenerate discovery clients (#3512) (7565f1c)

Bug Fixes

generator: Handle preview version pkg name (#3511) (2a249ce)

0.268.0 (2026-02-23)

Features

all: Auto-regenerate discovery clients (#3502) (5ccf9b9)

all: Auto-regenerate discovery clients (#3505) (f405df9)

all: Auto-regenerate discovery clients (#3506) (cda923a)

all: Auto-regenerate discovery clients (#3507) (e9015cc)

all: Auto-regenerate discovery clients (#3508) (20fbcc1)

all: Auto-regenerate discovery clients (#3509) (20c1e0f)

Update to go 1.26 (#3504) (cc5baec)

Commits

312ac01 chore(main): release 0.268.1 (#3513)
7565f1c feat(all): auto-regenerate discovery clients (#3512)
2a249ce fix(generator): handle preview version pkg name (#3511)
26ea889 chore(all): update all (#3498)
5b078d9 chore(main): release 0.268.0 (#3503)
20c1e0f feat(all): auto-regenerate discovery clients (#3509)
20fbcc1 feat(all): auto-regenerate discovery clients (#3508)
e9015cc feat(all): auto-regenerate discovery clients (#3507)
cc5baec feat: update to go 1.26 (#3504)
cda923a feat(all): auto-regenerate discovery clients (#3506)
Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20260203192932-546029d2fa20 to 0.0.0-20260217215200-42d3e9bedb6d

Commits

See full diff in compare view

Updates google.golang.org/grpc from 1.79.1 to 1.79.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.79.2

Bug Fixes

stats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (grpc/grpc-go#8874)

Commits

8902ab6 Change the version to release 1.79.2 (#8947)
a928670 Cherry-pick #8874 to v1.79.x (#8904)
06df363 Change version to 1.79.2-dev (#8903)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto) | `1.3.0` | `1.4.0` | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.1` | `1.41.3` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.9` | `1.32.11` | | [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.22.2` | `1.22.6` | | [github.com/aws/aws-sdk-go-v2/service/kms](https://github.com/aws/aws-sdk-go-v2) | `1.50.0` | `1.50.2` | | [golang.org/x/net](https://github.com/golang/net) | `0.50.0` | `0.51.0` | | [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.35.0` | `0.36.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.41.0` | `0.42.0` | | [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.267.0` | `0.269.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.79.1` | `1.79.2` | Updates `github.com/ProtonMail/go-crypto` from 1.3.0 to 1.4.0 - [Release notes](https://github.com/ProtonMail/go-crypto/releases) - [Commits](ProtonMail/go-crypto@v1.3.0...v1.4.0) Updates `github.com/aws/aws-sdk-go-v2` from 1.41.1 to 1.41.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.41.1...v1.41.3) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.9 to 1.32.11 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.9...config/v1.32.11) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.9 to 1.19.11 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/m2/v1.19.9...credentials/v1.19.11) Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.22.2 to 1.22.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.22.2...service/mq/v1.22.6) Updates `github.com/aws/aws-sdk-go-v2/service/kms` from 1.50.0 to 1.50.2 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.50.0...service/s3/v1.50.2) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.96.0 to 1.96.4 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.96.0...service/s3/v1.96.4) Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.41.6 to 1.41.8 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/sts/v1.41.6...service/ecs/v1.41.8) Updates `golang.org/x/net` from 0.50.0 to 0.51.0 - [Commits](golang/net@v0.50.0...v0.51.0) Updates `golang.org/x/oauth2` from 0.35.0 to 0.36.0 - [Commits](golang/oauth2@v0.35.0...v0.36.0) Updates `golang.org/x/sys` from 0.41.0 to 0.42.0 - [Commits](golang/sys@v0.41.0...v0.42.0) Updates `google.golang.org/api` from 0.267.0 to 0.269.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.267.0...v0.269.0) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260203192932-546029d2fa20 to 0.0.0-20260217215200-42d3e9bedb6d - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.79.1 to 1.79.2 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.79.1...v1.79.2) --- updated-dependencies: - dependency-name: github.com/ProtonMail/go-crypto dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.41.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.19.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager dependency-version: 1.22.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/kms dependency-version: 1.50.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.96.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/sts dependency-version: 1.41.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: golang.org/x/net dependency-version: 0.51.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/oauth2 dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/sys dependency-version: 0.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/api dependency-version: 0.269.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20260217215200-42d3e9bedb6d dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/grpc dependency-version: 1.79.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>

felixfontein · 2026-03-09T16:56:32Z

go.mod

 module github.com/getsops/sops/v3

-go 1.24.0
+go 1.25.0


Same problem as in #2092 (comment)

dependabot bot added the dependencies Pull requests that update a dependency file label Mar 9, 2026

felixfontein requested changes Mar 9, 2026

View reviewed changes

go.mod

module github.com/getsops/sops/v3

go 1.24.0

go 1.25.0

Copy link

Contributor

felixfontein Mar 9, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same problem as in #2092 (comment)

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): Bump the go group across 1 directory with 14 updates#2102

build(deps): Bump the go group across 1 directory with 14 updates#2102
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go-5e8841725a

dependabot bot commented on behalf of github Mar 9, 2026

Uh oh!

felixfontein Mar 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Mar 9, 2026

Release v1.4.0

What's Changed

Release v1.4.0-proton

v0.269.0

0.269.0 (2026-02-24)

Features

Bug Fixes

v0.268.0

0.268.0 (2026-02-23)

Features

0.269.0 (2026-02-24)

Features

Bug Fixes

0.268.0 (2026-02-23)

Features

Release 1.79.2

Bug Fixes

Uh oh!

felixfontein Mar 9, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant