chore(deps): bump the all-deps group across 1 directory with 9 updates #118

dependabot · 2025-11-01T06:06:43Z

Bumps the all-deps group with 8 updates in the / directory:

Package	From	To
github.com/Azure/azure-sdk-for-go/sdk/azidentity	`1.11.0`	`1.13.0`
github.com/aws/aws-sdk-go-v2	`1.38.3`	`1.39.5`
github.com/aws/aws-sdk-go-v2/config	`1.31.6`	`1.31.16`
github.com/aws/aws-sdk-go-v2/service/ec2	`1.249.0`	`1.260.0`
github.com/aws/aws-sdk-go-v2/service/rds	`1.104.1`	`1.108.6`
github.com/spf13/cobra	`1.9.1`	`1.10.1`
github.com/spf13/viper	`1.20.1`	`1.21.0`
golang.org/x/sync	`0.16.0`	`0.17.0`

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.11.0 to 1.13.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.13.0

1.13.0 (2025-10-07)

Features Added

Added AzurePowerShellCredential, which authenticates as the identity logged in to Azure PowerShell (thanks ArmaanMcleod)

When AZURE_TOKEN_CREDENTIALS is set to ManagedIdentityCredential, DefaultAzureCredential behaves the same as does ManagedIdentityCredential when used directly. It doesn't apply special retry configuration or attempt to determine whether IMDS is available. (#25265)

Breaking Changes

Removed the WorkloadIdentityCredential support for identity binding mode added in v1.13.0-beta.1. It will return in v1.14.0-beta.1

sdk/azidentity/v1.13.0-beta.1

1.13.0-beta.1 (2025-09-17)

Features Added

Added AzurePowerShellCredential, which authenticates as the identity logged in to Azure PowerShell (thanks ArmaanMcleod)

WorkloadIdentityCredential supports identity binding mode (#25056)

sdk/azidentity/v1.12.0

1.12.0 (2025-09-16)

Features Added

Added DefaultAzureCredentialOptions.RequireAzureTokenCredentials. NewDefaultAzureCredential returns an error when this option is true and the environment variable AZURE_TOKEN_CREDENTIALS has no value.

Other Changes

AzureDeveloperCLICredential no longer hangs when AZD_DEBUG is set

GetToken methods of AzureCLICredential and AzureDeveloperCLICredential return an error when TokenRequestOptions.Claims has a value because these credentials can't acquire a token in that case. The error messages describe the action required to get a token.

sdk/internal/v1.11.2

1.11.2 (2025-07-30)

Other Changes

errorinfo.NonRetriable() doesn't wrap errors which are already NonRetriable

Commits

94c22e6 [azcore] prepping for release (#23192)
c5213b1 Redesign persistent token cache API (#23114)
5df73f9 [azopenai]: Update custom_client.go to enable insecure credential with HTTP (...
b4b4721 [azcore] Adding in a function create a policy.Request using an existing *http...
80dbc7d Update CODEOWNERS_baseline_errors.txt (#23191)
d254d11 Increment package version after release of internal (#23190)
62f7a3d Test credential factory supports Pipelines federated auth (#23184)
5aaedf4 [Release] sdk/resourcemanager/informaticadatamgmt/arminformaticadatamgmt/1.0....
ce39ed9 Sync eng/common directory with azure-sdk-tools for PR 8598 (#23175)
75d30bb Enable use of pipeline credential. Fixes https://github.com/microsoft/azure-p...
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.38.3 to 1.39.5

Commits

d8ed081 Release 2025-10-30
a2c9cb4 Regenerated Clients
7af054b Update endpoints model
2e5ed49 Update API model
f3a3b6c remove arbitrary response read timeout in kinesis GetRecords (#3221)
56af155 Release 2025-10-29
b23832a Regenerated Clients
33ea965 Update API model
f70c788 Release 2025-10-28
f8aa1f3 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.31.6 to 1.31.16

Commits

d8ed081 Release 2025-10-30
a2c9cb4 Regenerated Clients
7af054b Update endpoints model
2e5ed49 Update API model
f3a3b6c remove arbitrary response read timeout in kinesis GetRecords (#3221)
56af155 Release 2025-10-29
b23832a Regenerated Clients
33ea965 Update API model
f70c788 Release 2025-10-28
f8aa1f3 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ec2 from 1.249.0 to 1.260.0

Commits

3242971 Release 2025-10-31
2db47dc Regenerated Clients
9f932c7 Update endpoints model
98c3500 Update API model
d8ed081 Release 2025-10-30
a2c9cb4 Regenerated Clients
7af054b Update endpoints model
2e5ed49 Update API model
f3a3b6c remove arbitrary response read timeout in kinesis GetRecords (#3221)
56af155 Release 2025-10-29
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/rds from 1.104.1 to 1.108.6

Commits

d8ed081 Release 2025-10-30
a2c9cb4 Regenerated Clients
7af054b Update endpoints model
2e5ed49 Update API model
f3a3b6c remove arbitrary response read timeout in kinesis GetRecords (#3221)
56af155 Release 2025-10-29
b23832a Regenerated Clients
33ea965 Update API model
f70c788 Release 2025-10-28
f8aa1f3 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/smithy-go from 1.23.0 to 1.23.1

Commits

695755c Release 2025-10-15
4355cab changelog
40bb509 bump to go1.23 (#606)
0ccf069 Update Smithy to 1.62.0 (#605)
04e063a Release 2025-09-18
fd9193a changelog
1ec19f0 Added support for SIG4/SIGV4A querystring authentication. (#595)
62e8fe9 Make make commands multi-module aware (#600)
5ef2d96 Allow unused required parameters in endpoint rule set (#601)
See full diff in compare view

Updates github.com/spf13/cobra from 1.9.1 to 1.10.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.1

🐛 Fix

chore: upgrade pflags v1.0.9 by @jpmcb in spf13/cobra#2305

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

What's Changed

🚨 Attention!

Bump pflag to 1.0.8 by @tomasaschan in spf13/cobra#2303

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`

or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: spf13/cobra#2303

✨ Features

Flow context to command in SetHelpFunc by @Frassle in spf13/cobra#2241

The default ShellCompDirective can be customized for a command and its subcommands by @albers in spf13/cobra#2238

🐛 Fix

Upgrade golangci-lint to v2, address findings by @scop in spf13/cobra#2279

🪠 Testing

Test with Go 1.24 by @harryzcy in spf13/cobra#2236

chore: Rm GitHub Action PR size labeler by @jpmcb in spf13/cobra#2256

📝 Docs

Remove traling curlybrace by @yedayak in spf13/cobra#2237

Update command.go by @styee in spf13/cobra#2248

feat: Add security policy by @jpmcb in spf13/cobra#2253

Update Readme (Warp) by @ericdachen in spf13/cobra#2267

Add Periscope to the list of projects using Cobra by @anishathalye in spf13/cobra#2299

New Contributors

@harryzcy made their first contribution in spf13/cobra#2236

@yedayak made their first contribution in spf13/cobra#2237

@Frassle made their first contribution in spf13/cobra#2241

... (truncated)

Commits

7da941c chore: Bump pflag to v1.0.9 (#2305)
51d6751 Bump pflag to 1.0.8 (#2303)
3f3b818 Update README.md with new logo
dcaf42e Add Periscope to the list of projects using Cobra (#2299)
6dec1ae The default ShellCompDirective can be customized for a command and its subcom...
c8289c1 chore(golangci-lint): add some exclusion presets
4af7b64 refactor: apply golangci-lint autofixes, work around false positives
75790e4 chore(golangci-lint): upgrade to v2
db3ddb5 Adding sponsorship to README.md
67171d6 putting sponsorship below header
Additional commits viewable in compare view

Updates github.com/spf13/viper from 1.20.1 to 1.21.0

Release notes

Sourced from github.com/spf13/viper's releases.

v1.21.0

What's Changed

Enhancements 🚀

Add support for flags pflag.BoolSlice, pflag.UintSlice and pflag.Float64Slice by @nmvalera in spf13/viper#2015

feat: use maintained yaml library by @sagikazarmark in spf13/viper#2040

Bug Fixes 🐛

fix(config): get config type from v.configType or config file ext by @GuillaumeBAECHLER in spf13/viper#2003

fix: config type check when loading any config by @sagikazarmark in spf13/viper#2007

Dependency Updates ⬆️

Update dependencies by @sagikazarmark in spf13/viper#1993

build(deps): bump github.com/spf13/cast from 1.7.1 to 1.8.0 by @dependabot[bot] in spf13/viper#2017

build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.3 to 2.2.4 by @dependabot[bot] in spf13/viper#2013

build(deps): bump github.com/sagikazarmark/locafero from 0.8.0 to 0.9.0 by @dependabot[bot] in spf13/viper#2008

build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 in /remote by @dependabot[bot] in spf13/viper#2016

build(deps): bump github.com/spf13/cast from 1.8.0 to 1.9.2 by @dependabot[bot] in spf13/viper#2020

build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 by @dependabot[bot] in spf13/viper#2028

build(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 by @dependabot[bot] in spf13/viper#2035

build(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7 by @dependabot[bot] in spf13/viper#2036

build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 by @dependabot[bot] in spf13/viper#2012

build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @dependabot[bot] in spf13/viper#2052

build(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 in /remote by @dependabot[bot] in spf13/viper#2048

build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10 by @dependabot[bot] in spf13/viper#2056

chore: update dependencies by @sagikazarmark in spf13/viper#2057

Other Changes

Update update guide with mapstructure package replacement. by @aldas in spf13/viper#2004

refactor: use the built-in max/min to simplify the code by @yingshanghuangqiao in spf13/viper#2029

New Contributors

@GuillaumeBAECHLER made their first contribution in spf13/viper#2003

@aldas made their first contribution in spf13/viper#2004

@nmvalera made their first contribution in spf13/viper#2015

@yingshanghuangqiao made their first contribution in spf13/viper#2029

@ccoVeille made their first contribution in spf13/viper#2046

@spacez320 made their first contribution in spf13/viper#2050

Full Changelog: spf13/viper@v1.20.0...v1.21.0

Commits

394040c ci: build on go 1.25
812f548 chore: update dependencies
d5271ef ci: update stale workflow
dff303b feat: add a stale issue scheduled action
1287976 build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10
38932cd build(deps): bump github.com/go-viper/mapstructure/v2 in /remote
6d014be build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1
b74c7ee build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0
acd05e1 fix: linting issues
ae5a8e2 ci: upgrade golangci-lint
Additional commits viewable in compare view

Updates golang.org/x/sync from 0.16.0 to 0.17.0

Commits

04914c2 all: upgrade go directive to at least 1.24.0 [generated]
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-deps group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.11.0` | `1.13.0` | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.38.3` | `1.39.5` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.31.6` | `1.31.16` | | [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) | `1.249.0` | `1.260.0` | | [github.com/aws/aws-sdk-go-v2/service/rds](https://github.com/aws/aws-sdk-go-v2) | `1.104.1` | `1.108.6` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.9.1` | `1.10.1` | | [github.com/spf13/viper](https://github.com/spf13/viper) | `1.20.1` | `1.21.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.16.0` | `0.17.0` | Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.11.0 to 1.13.0 - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.11.0...sdk/azcore/v1.13.0) Updates `github.com/aws/aws-sdk-go-v2` from 1.38.3 to 1.39.5 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@v1.38.3...v1.39.5) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.31.6 to 1.31.16 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@config/v1.31.6...config/v1.31.16) Updates `github.com/aws/aws-sdk-go-v2/service/ec2` from 1.249.0 to 1.260.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/ec2/v1.249.0...service/ec2/v1.260.0) Updates `github.com/aws/aws-sdk-go-v2/service/rds` from 1.104.1 to 1.108.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/rds/v1.104.1...service/rds/v1.108.6) Updates `github.com/aws/smithy-go` from 1.23.0 to 1.23.1 - [Release notes](https://github.com/aws/smithy-go/releases) - [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md) - [Commits](aws/smithy-go@v1.23.0...v1.23.1) Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.1 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.9.1...v1.10.1) Updates `github.com/spf13/viper` from 1.20.1 to 1.21.0 - [Release notes](https://github.com/spf13/viper/releases) - [Commits](spf13/viper@v1.20.1...v1.21.0) Updates `golang.org/x/sync` from 0.16.0 to 0.17.0 - [Commits](golang/sync@v0.16.0...v0.17.0) --- updated-dependencies: - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity dependency-version: 1.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.39.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.31.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2 dependency-version: 1.260.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: github.com/aws/aws-sdk-go-v2/service/rds dependency-version: 1.108.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: github.com/aws/smithy-go dependency-version: 1.23.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: github.com/spf13/cobra dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: github.com/spf13/viper dependency-version: 1.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: golang.org/x/sync dependency-version: 0.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 1, 2025

hskiba merged commit f40b985 into main Nov 3, 2025
4 checks passed

hskiba deleted the dependabot/go_modules/all-deps-7a9d78d5db branch November 3, 2025 07:31

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the all-deps group across 1 directory with 9 updates #118

chore(deps): bump the all-deps group across 1 directory with 9 updates #118

Uh oh!

dependabot bot commented on behalf of github Nov 1, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(deps): bump the all-deps group across 1 directory with 9 updates #118

chore(deps): bump the all-deps group across 1 directory with 9 updates #118

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 1, 2025

sdk/azidentity/v1.13.0

1.13.0 (2025-10-07)

Features Added

Breaking Changes

sdk/azidentity/v1.13.0-beta.1

1.13.0-beta.1 (2025-09-17)

Features Added

sdk/azidentity/v1.12.0

1.12.0 (2025-09-16)

Features Added

Other Changes

sdk/internal/v1.11.2

1.11.2 (2025-07-30)

Other Changes

v1.10.1

🐛 Fix

v1.10.0

What's Changed

🚨 Attention!

✨ Features

🐛 Fix

🪠 Testing

📝 Docs

New Contributors

v1.21.0

What's Changed

Enhancements 🚀

Bug Fixes 🐛

Dependency Updates ⬆️

Other Changes

New Contributors

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants