chore(go)(deps): bump the all-dependencies group with 10 updates by dependabot[bot] · Pull Request #184 · BoostryJP/ibet-Core

dependabot · 2026-09-15T23:12:58Z

Bumps the all-dependencies group with 10 updates:

Package	From	To
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob	`1.8.0`	`1.8.1`
github.com/aws/aws-sdk-go-v2	`1.46.0`	`1.47.0`
github.com/aws/aws-sdk-go-v2/config	`1.33.3`	`1.33.4`
github.com/aws/aws-sdk-go-v2/credentials	`1.20.3`	`1.20.4`
github.com/aws/aws-sdk-go-v2/service/kms	`1.59.0`	`1.60.0`
github.com/aws/aws-sdk-go-v2/service/route53	`1.69.0`	`1.70.0`
github.com/aws/aws-sdk-go-v2/service/secretsmanager	`1.48.0`	`1.49.0`
github.com/davecgh/go-spew	`1.1.1`	`1.1.2-0.20180830191138-d8f796af33cc`
golang.org/x/crypto	`0.56.0`	`0.57.0`
golang.org/x/text	`0.41.0`	`0.42.0`

Updates github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.8.0 to 1.8.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/storage/azblob's releases.

sdk/storage/azblob/v1.8.1

1.8.1 (2026-09-09)

Breaking Changes

DownloadBuffer and DownloadFile now use ETag locking to ensure consistency across parallel chunk requests when the blob size is not specified upfront (i.e., Range.Count is zero). If a blob is modified during a multi-chunk download, subsequent requests will fail with ConditionNotMet instead of silently returning data from mixed blob versions.

Bugs Fixed

Fixed CRLF injection vulnerability in Blob Batch subrequest serialization. Header values containing CR or LF characters are now rejected before serialization, preventing header injection in batch requests.

Fixed WASM compilation by using heap-allocated buffers on JS targets.

Fixed Structured Message CRC64 download validation being skipped when the final payload byte exactly fills the caller's read buffer; the trailing segment footer and message trailer CRC64 are now drained and validated in the same Read.

Fixed transient net.Error/io.ErrUnexpectedEOF failures during a Structured Message download not being retried: the decoder now preserves the error chain with %w and the retry reader classifies retryable errors with errors.Is/errors.As.

Structured Message download now rejects a response missing the negotiated CRC64 flag instead of silently skipping validation.

Fixed the Structured Message encoder emitting a valid, complete message when the source returned a non-EOF error exactly on a segment boundary; such errors are now propagated.

Structured Message decoding now rejects a payload that declares fewer segments and appends unvalidated trailing bytes (SMDecode requires the parsed message to consume the entire input, and the streaming decoder validates the consumed byte count against the declared message length).

Fixed the Structured Message encoder returning io.EOF when the source ends before the declared content length; a premature EOF is now surfaced as io.ErrUnexpectedEOF so callers do not accept a truncated message.

Fixed Structured Message decoder discarding errors (including net.Error and io.EOF) when the returned bytes exactly complete a segment; such errors are now propagated so RetryReader can retry transient failures at segment boundaries.

Premature EOF during Structured Message framing reads (header, segment footer, or message trailer) now wraps io.ErrUnexpectedEOF so RetryReader classifies truncated framing as retryable.

Other Changes

Optimized DownloadBuffer and DownloadFile to use an initial GET request instead of a HEAD (GetProperties) call for blob size discovery. For small blobs (<=4MB), the entire content is returned in a single request, reducing download latency by ~50%.

Updated azcore to v1.23.1.

sdk/storage/azblob/v1.8.1-beta.1

1.8.1-beta.1 (2026-07-24)

Features Added

Added support for Structured Message CRC64 content validation on upload and download operations using TransferValidationTypeComputeStructuredMessageCRC64.

Added StorageResponseFormat enum (Auto, XML, Arrow) for list blobs operations. Set ResponseFormat on ListBlobsFlatOptions/ListBlobsHierarchyOptions to opt into Apache Arrow format for improved performance. Auto defaults to XML for this release.

Added AccessTier, AccessTierInferred, AccessTierChangeTime, and SmartAccessTier fields to blob download response.

Blob put operations now return both ContentMD5 and ContentCRC64 in the response when a Content-MD5 header is provided (service version 2026-10-06+).

Bugs Fixed

Fixed UploadFile/UploadBuffer responses not including ContentCRC64 when returned by the service.

Other Changes

Updated code generator to @autorest/go@4.0.0-preview.80.

Default upload/download concurrency is now based on CPU core count (clamped between 8 and 96) instead of the fixed value of 5. Set AZURE_STORAGE_USE_LEGACY_DEFAULT_CONCURRENCY=true to revert to previous defaults.

Updated azidentity version to 1.14.0

Commits

d5e09ea Prepare azidentity v1.8.1 for release (#23954)
af8249d Increment package version after release of storage/azblob (#23940)
8b21042 Increment package version after release of storage/azdatalake (#23958)
a44e152 Release storage stg96 azdatalake preview (#23957)
b11c1a5 Relax tenant verification for credentials having optional tenant IDs (#23951)
e557039 remove erroneous package inclusion during package-properties evaluation (#23948)
0fb4336 Increment package version after release of messaging/azservicebus (#23950)
b1480a2 Updating docs.microsoft.com to learn.microsoft.com (#23934)
786b0be Credential chains continue iterating after unexpected IMDS responses (#23894)
7d4721b add liftr base package dep to emitter dep list (#23938)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.46.0 to 1.47.0

Commits

b189f38 Release 2026-09-09
0905d5f Regenerated Clients
9cc4bc5 Update API model
126fe2d fix GetObject deadlock (#3554)
5126885 Remove retry metrics header middleware (#3546)
bd8de4d Expand S3 operations that check for an error inside an HTTP 200 response (wav...
394ee64 Release 2026-09-08
3c9cb8b Regenerated Clients
6f85682 Update endpoints model
cc3942b Update API model
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.3 to 1.33.4

Commits

b189f38 Release 2026-09-09
0905d5f Regenerated Clients
9cc4bc5 Update API model
126fe2d fix GetObject deadlock (#3554)
5126885 Remove retry metrics header middleware (#3546)
bd8de4d Expand S3 operations that check for an error inside an HTTP 200 response (wav...
394ee64 Release 2026-09-08
3c9cb8b Regenerated Clients
6f85682 Update endpoints model
cc3942b Update API model
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.20.3 to 1.20.4

Commits

0d643a8 Release 2023-12-07
e38b534 Regenerated Clients
f394daf Update SDK's smithy-go dependency to v1.19.0
4fb654c Update endpoints model
8594ca0 Update API model
e33a34c fix codegen ci (#2418)
57a201c regenerate partitions (#2415)
be06f02 Merge pull request #2344 from aws/feat-request-compression-2
70bf410 Change config loading logic
8c02c46 Release 2023-12-06
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.59.0 to 1.60.0

Commits

4d36126 Release 2024-08-20
5ba784c Regenerated Clients
d447ea1 Update API model
33d4eab Remove deprecated codestar service (#2754)
6fe0e9b Release 2024-08-19
3c84b64 Regenerated Clients
c78cc2e Update endpoints model
72a29e1 Update API model
c8a8274 Release 2024-08-16
ebfdc50 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/route53 from 1.69.0 to 1.70.0

Commits

776903f Release 2024-12-02
170b13c Regenerated Clients
c1a02e7 Update API model
2835f7b Fix user agent to add business metrics at the end instead of prepend them (#2...
ba4965d Release 2024-11-27
55149b0 Regenerated Clients
fd6bb8b Update endpoints model
65ab4f8 Update API model
8939ed0 Release 2024-11-26
23cf36b Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.48.0 to 1.49.0

Commits

4fd9126 Release 2024-02-13
d22cecd Regenerated Clients
b640bf5 Update SDK's smithy-go dependency to v1.20.0
94e885c Update endpoints model
b3a6cd7 Update API model
5f328e6 chore: bump min go to 1.20 (#2494)
3cb2c97 ci: fix CI scripts for main branch case (#2491)
0e44db4 Release 2024-02-12
1d8fb3b Regenerated Clients
e4d556f Update API model
Additional commits viewable in compare view

Updates github.com/davecgh/go-spew from 1.1.1 to 1.1.2-0.20180830191138-d8f796af33cc

Commits

See full diff in compare view

Updates golang.org/x/crypto from 0.56.0 to 0.57.0

Commits

3f62bf1 go.mod: update golang.org/x dependencies
See full diff in compare view

Updates golang.org/x/text from 0.41.0 to 0.42.0

Commits

fafe4a0 go.mod: update golang.org/x dependencies
f53c316 unicode/norm: don't truncate runes in the recomposition map key
37867f6 unicode/norm: let any starter block composition in compose
0dd525f unicode/norm: compose non-Hangul runes after a Hangul syllable
bac26e5 unicode/norm: avoid improper ErrShortDst return in Form.transform
4f55186 unicode/norm: simplify short source detection in Form.transform
a1b6c10 unicode/norm: prevent decomposeSegment from moving backwards
cd1cbc9 unicode/bidi: panic rather than log.Panicf
a459614 internal/export/idna: fix conformance with optional validation disabled
be70a61 internal/export/idna: drop trie field from Profiles
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 10 updates: | Package | From | To | | --- | --- | --- | | [github.com/Azure/azure-sdk-for-go/sdk/storage/azblob](https://github.com/Azure/azure-sdk-for-go) | `1.8.0` | `1.8.1` | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.46.0` | `1.47.0` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.3` | `1.33.4` | | [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.20.3` | `1.20.4` | | [github.com/aws/aws-sdk-go-v2/service/kms](https://github.com/aws/aws-sdk-go-v2) | `1.59.0` | `1.60.0` | | [github.com/aws/aws-sdk-go-v2/service/route53](https://github.com/aws/aws-sdk-go-v2) | `1.69.0` | `1.70.0` | | [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2) | `1.48.0` | `1.49.0` | | [github.com/davecgh/go-spew](https://github.com/davecgh/go-spew) | `1.1.1` | `1.1.2-0.20180830191138-d8f796af33cc` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.56.0` | `0.57.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.41.0` | `0.42.0` | Updates `github.com/Azure/azure-sdk-for-go/sdk/storage/azblob` from 1.8.0 to 1.8.1 - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.8.0...sdk/azidentity/v1.8.1) Updates `github.com/aws/aws-sdk-go-v2` from 1.46.0 to 1.47.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.46.0...v1.47.0) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.3 to 1.33.4 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.33.3...config/v1.33.4) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.20.3 to 1.20.4 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.20.3...service/mq/v1.20.4) Updates `github.com/aws/aws-sdk-go-v2/service/kms` from 1.59.0 to 1.60.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.59.0...service/s3/v1.60.0) Updates `github.com/aws/aws-sdk-go-v2/service/route53` from 1.69.0 to 1.70.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.69.0...service/s3/v1.70.0) Updates `github.com/aws/aws-sdk-go-v2/service/secretsmanager` from 1.48.0 to 1.49.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.48.0...service/s3/v1.49.0) Updates `github.com/davecgh/go-spew` from 1.1.1 to 1.1.2-0.20180830191138-d8f796af33cc - [Commits](https://github.com/davecgh/go-spew/commits) Updates `golang.org/x/crypto` from 0.56.0 to 0.57.0 - [Commits](golang/crypto@v0.56.0...v0.57.0) Updates `golang.org/x/text` from 0.41.0 to 0.42.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.41.0...v0.42.0) --- updated-dependencies: - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/storage/azblob dependency-version: 1.8.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.33.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.20.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/kms dependency-version: 1.60.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/route53 dependency-version: 1.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/secretsmanager dependency-version: 1.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: github.com/davecgh/go-spew dependency-version: 1.1.2-0.20180830191138-d8f796af33cc dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: golang.org/x/crypto dependency-version: 0.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: golang.org/x/text dependency-version: 0.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 15, 2026

github-actions Bot requested review from YoshihitoAso and purplesmoke05 September 15, 2026 23:13

YoshihitoAso approved these changes Sep 16, 2026

View reviewed changes

YoshihitoAso merged commit f36e413 into dev-26.9 Sep 16, 2026
6 checks passed

dependabot Bot deleted the dependabot/go_modules/all-dependencies-e620a31e05 branch September 16, 2026 01:17

Navigation Menu

Repository navigation

chore(go)(deps): bump the all-dependencies group with 10 updates - #184

chore(go)(deps): bump the all-dependencies group with 10 updates#184
YoshihitoAso merged 1 commit into
dev-26.9from
dependabot/go_modules/all-dependencies-e620a31e05

dependabot Bot commented on behalf of github Sep 15, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 15, 2026

sdk/storage/azblob/v1.8.1

1.8.1 (2026-09-09)

Breaking Changes

Bugs Fixed

Other Changes

sdk/storage/azblob/v1.8.1-beta.1

1.8.1-beta.1 (2026-07-24)

Features Added

Bugs Fixed

Other Changes

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant