Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 22, 2025

Bumps the common group with 7 updates in the / directory:

Package From To
github.com/Azure/azure-sdk-for-go/sdk/azidentity 1.12.0 1.13.0
github.com/hashicorp/go-getter 1.8.1 1.8.2
github.com/open-policy-agent/opa 1.8.0 1.9.0
github.com/samber/lo 1.51.0 1.52.0
golang.org/x/mod 0.27.0 0.29.0
golang.org/x/term 0.35.0 0.36.0
modernc.org/sqlite 1.39.0 1.39.1

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.12.0 to 1.13.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.13.0

1.13.0 (2025-10-07)

Features Added

  • Added AzurePowerShellCredential, which authenticates as the identity logged in to Azure PowerShell (thanks ArmaanMcleod)
  • When AZURE_TOKEN_CREDENTIALS is set to ManagedIdentityCredential, DefaultAzureCredential behaves the same as does ManagedIdentityCredential when used directly. It doesn't apply special retry configuration or attempt to determine whether IMDS is available. (#25265)

Breaking Changes

  • Removed the WorkloadIdentityCredential support for identity binding mode added in v1.13.0-beta.1. It will return in v1.14.0-beta.1

sdk/azidentity/v1.13.0-beta.1

1.13.0-beta.1 (2025-09-17)

Features Added

  • Added AzurePowerShellCredential, which authenticates as the identity logged in to Azure PowerShell (thanks ArmaanMcleod)
  • WorkloadIdentityCredential supports identity binding mode (#25056)
Commits
  • 94c22e6 [azcore] prepping for release (#23192)
  • c5213b1 Redesign persistent token cache API (#23114)
  • 5df73f9 [azopenai]: Update custom_client.go to enable insecure credential with HTTP (...
  • b4b4721 [azcore] Adding in a function create a policy.Request using an existing *http...
  • 80dbc7d Update CODEOWNERS_baseline_errors.txt (#23191)
  • d254d11 Increment package version after release of internal (#23190)
  • 62f7a3d Test credential factory supports Pipelines federated auth (#23184)
  • 5aaedf4 [Release] sdk/resourcemanager/informaticadatamgmt/arminformaticadatamgmt/1.0....
  • ce39ed9 Sync eng/common directory with azure-sdk-tools for PR 8598 (#23175)
  • 75d30bb Enable use of pipeline credential. Fixes https://github.com/microsoft/azure-p...
  • Additional commits viewable in compare view

Updates github.com/hashicorp/go-getter from 1.8.1 to 1.8.2

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.8.2

What's Changed

New Contributors

Full Changelog: hashicorp/go-getter@v1.8.1...v1.8.2

Commits

Updates github.com/open-policy-agent/opa from 1.8.0 to 1.9.0

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v1.9.0

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

  • Compile API extensions ported from EOPA
  • Improved rule indexing

Compile Rego Queries Into SQL Filters (#7887)

Compile API extensions with support for SQL filter generation previously exclusive to EOPA has been ported into OPA.

Example

With OPA running with this policy, we'll compile the query data.filters.include into SQL filters:

package filters
METADATA
scope: document
compile:
unknowns: [input.fruits]
include if input.fruits.name == input.favorite

Example Request
POST /v1/compile/filters/include HTTP/1.1
Content-Type: application/json
Accept: application/vnd.opa.sql.postgresql+json
{
  "input": {
    "favorite": "pineapple"
  }
}
Example Response
HTTP/1.1 200 OK
Content-Type: application/vnd.opa.sql.postgresql+json
{
  "result": {
    "query": "WHERE fruits.name = E'pineapple'"
  }
</tr></table> 

... (truncated)

Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

1.9.0

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

  • Compile API extensions ported from EOPA
  • Improved rule indexing

Compile Rego Queries Into SQL Filters (#7887)

Compile API extensions with support for SQL filter generation previously exclusive to EOPA has been ported into OPA.

Example

With OPA running with this policy, we'll compile the query data.filters.include into SQL filters:

package filters
METADATA
scope: document
compile:
unknowns: [input.fruits]
include if input.fruits.name == input.favorite

Example Request
POST /v1/compile/filters/include HTTP/1.1
Content-Type: application/json
Accept: application/vnd.opa.sql.postgresql+json
{
  "input": {
    "favorite": "pineapple"
  }
}
Example Response
HTTP/1.1 200 OK
Content-Type: application/vnd.opa.sql.postgresql+json
{
  "result": {
    "query": "WHERE fruits.name = E'pineapple'"
</tr></table> 

... (truncated)

Commits
  • c49e670 Prepare v1.9.0 release (#7940)
  • 3738431 rego: Add comprehensive WASM performance benchmarks (#7841)
  • e35e9a8 build(deps): bump the gha-dependencies group with 5 updates
  • 85a0e2a Compile API: switch to compile annotation key (#7936)
  • 9c1cf16 build(deps): bump the go-opentelemetry-io group across 1 directory with 7 upd...
  • c24ad37 plugin/decision: encoder return event same size as limit immediately (#7928)
  • 162edff docs: Add Style Guide to policy authoring docs (#7932)
  • 008c9da docs: Update references to cheat sheet and awesome-opa (#7930)
  • 1e999ec plugin/decision: correctly reconfigure limit based on buffer type (#7926)
  • d3d014d build(deps): bump the dependencies group across 2 directories with 12 updates
  • Additional commits viewable in compare view

Updates github.com/samber/lo from 1.51.0 to 1.52.0

Release notes

Sourced from github.com/samber/lo's releases.

v1.52.0

Thrilled to announce the latest release of samber/lo!

This version brings major improvements:

  • A new it/ sub-package for everything related to the iter package added in Go 1.23. Big up to @​NathanBaulch for its help on this
  • A new documentation -> lo.samber.dev
  • Lots of micro fixes and performance improvements
  • Better code quality with many more linters

✨ A good introduction to streams in Go !

What's Changed

Tests

Style

... (truncated)

Commits
  • a25c42d bump v1.52.0
  • 15ac624 docs: adding go playground examples to it/ package (#708)
  • c7e9459 docs: lots of various doc improvements (#706)
  • fa2d724 doc: add it/mutable/parallel sub-package to llms.txt (#707)
  • aa3a48d fix(doc): add missing "contributing" entry in the menu
  • 5def06d fix(doc): various hot fixes
  • f9a57ef chore(deps-dev): bump typescript from 5.6.3 to 5.9.3 in /docs (#704)
  • 8b8aa28 fix(doc): make "iter" package visible in doc sidebar
  • 39e418f doc: adding a "contributing" page
  • 1b3cb42 fix(doc): improve algolia search
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.41.0 to 0.42.0

Commits
  • 5307a0c go.mod: update golang.org/x dependencies
  • 9d77937 acme: include order problem in OrderError
  • 8f580de ssh: remove Go 1.24 build tag for ML-KEM kex
  • a4d1237 ssh/knownhosts: improve IPv6 support in Normalize
  • b8d8dae curve25519: include potential fips140=only error in panic message
  • f5a2eab ssh: use curve25519.X25519 instead of curve25519.ScalarMult
  • 44ecf3a all: upgrade go directive to at least 1.24.0 [generated]
  • See full diff in compare view

Updates golang.org/x/mod from 0.27.0 to 0.29.0

Commits
  • bba3e06 go.mod: update golang.org/x dependencies
  • 1759e96 go.mod: update golang.org/x dependencies
  • f060e16 all: upgrade go directive to at least 1.24.0 [generated]
  • See full diff in compare view

Updates golang.org/x/net from 0.43.0 to 0.44.0

Commits
  • 3b23d57 http2: fix race condition when disabling goroutine debugging for one test
  • 8741050 http2: simplify TestServer_Push_RejectAfterGoAway
  • 96e405c http2: modernize TestTransportRoundtripCloseOnWriteError
  • 6dc6880 http2: simplify ClientConn Close and Shutdown tests
  • 4e2915b http2: modernize TestTransportAllocationsAfterResponseBodyClose
  • 30b0e78 http2: modernize TestRoundTripDoesntConsumeRequestBodyEarly
  • b9acd77 http2: speed up TestTransportFlowControl
  • 5153f4d go.mod: update golang.org/x dependencies
  • 9338bdd http2: speed up TestTransportHandlerBodyClose
  • 6b20036 http2: add synchronous handler support to serverTester
  • Additional commits viewable in compare view

Updates golang.org/x/term from 0.35.0 to 0.36.0

Commits

Updates golang.org/x/text from 0.28.0 to 0.29.0

Commits
  • e69f31b go.mod: update golang.org/x dependencies
  • 60c9786 all: upgrade go directive to at least 1.24.0 [generated]
  • See full diff in compare view

Updates modernc.org/sqlite from 1.39.0 to 1.39.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the common group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.12.0` | `1.13.0` |
| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.8.1` | `1.8.2` |
| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `1.8.0` | `1.9.0` |
| [github.com/samber/lo](https://github.com/samber/lo) | `1.51.0` | `1.52.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.27.0` | `0.29.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.35.0` | `0.36.0` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.39.0` | `1.39.1` |



Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.12.0 to 1.13.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/sdk-breaking-changes-guide-migration.md)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.12.0...sdk/azcore/v1.13.0)

Updates `github.com/hashicorp/go-getter` from 1.8.1 to 1.8.2
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Changelog](https://github.com/hashicorp/go-getter/blob/main/.goreleaser.yml)
- [Commits](hashicorp/go-getter@v1.8.1...v1.8.2)

Updates `github.com/open-policy-agent/opa` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa@v1.8.0...v1.9.0)

Updates `github.com/samber/lo` from 1.51.0 to 1.52.0
- [Release notes](https://github.com/samber/lo/releases)
- [Commits](samber/lo@v1.51.0...v1.52.0)

Updates `golang.org/x/crypto` from 0.41.0 to 0.42.0
- [Commits](golang/crypto@v0.41.0...v0.42.0)

Updates `golang.org/x/mod` from 0.27.0 to 0.29.0
- [Commits](golang/mod@v0.27.0...v0.29.0)

Updates `golang.org/x/net` from 0.43.0 to 0.44.0
- [Commits](golang/net@v0.43.0...v0.44.0)

Updates `golang.org/x/term` from 0.35.0 to 0.36.0
- [Commits](golang/term@v0.35.0...v0.36.0)

Updates `golang.org/x/text` from 0.28.0 to 0.29.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.28.0...v0.29.0)

Updates `modernc.org/sqlite` from 1.39.0 to 1.39.1
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.39.0...v1.39.1)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/hashicorp/go-getter
  dependency-version: 1.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: github.com/open-policy-agent/opa
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/samber/lo
  dependency-version: 1.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/crypto
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/mod
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/net
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/term
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/text
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: modernc.org/sqlite
  dependency-version: 1.39.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 22, 2025
@dependabot dependabot bot requested a review from knqyf263 as a code owner October 22, 2025 06:45
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 22, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants