Skip to content

build(deps): bump the gomod group with 2 updates - #137

Merged
cristim merged 1 commit into
mainfrom
dependabot/go_modules/gomod-d5e8abd98a
Nov 9, 2026
Merged

cristim merged 1 commit into
mainfrom
dependabot/go_modules/gomod-d5e8abd98a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the gomod group with 2 updates: github.com/Azure/azure-sdk-for-go/sdk/azcore and github.com/aws/smithy-go.

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.23.3 to 1.24.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.24.0

1.24.0 (2026-11-02)

Features Added

  • Added tracing.WrapTracer to decorate a tracer while preserving attribute override ordering.
  • Added supporting infrastructure for SSE responses. This includes streaming types, runtime support, and fakes.
  • Added arm.ResourceID.ValidateResourceTypeChain to validate complete resource-type ancestry.

Bugs Fixed

  • Client tracing spans now redact the request URL in error descriptions using the pipeline's query parameter allow list.
  • Retry logging now uses the pipeline's query parameter allow list and redacts request URLs in errors.

Other Changes

  • Upgraded to Go 1.26.0.
  • Upgraded dependencies.
Commits
  • e0b565c Prep azcore@v1.24.0 for release (#27899)
  • b8bc42d NO_CI update Go dependencies (#27894)
  • 2a36830 Fix auto-release eligibility for shared CI triggers (#27883)
  • abdfbaf Use global vars for Go versions (#27897)
  • 3e18dc9 [AutoPR sdk-resourcemanager/netapp/armnetapp]-generated-from-SDK Generation -...
  • 7ff7eca [AutoPR sdk-resourcemanager/aiinfraoptimization/armaiinfraoptimization]-gener...
  • a4da5ab [AutoPR sdk-resourcemanager/hybridconnectivity/armhybridconnectivity]-generat...
  • e948fd2 docs: fix typos underlaying -> underlying, similiar -> similar (#27446)
  • 344629a [AutoPR sdk-resourcemanager/storagemover/armstoragemover]-generated-from-SDK ...
  • 70dc4fa [AutoPR sdk-resourcemanager/privatetrafficmanager/armprivatetrafficmanager]-g...
  • Additional commits viewable in compare view

Updates github.com/aws/smithy-go from 1.28.7 to 1.28.8

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-11-03)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.8
    • Bug Fix: Preserve the exact value of numbers in JSON codec instead of automatically parsing to float64.

Release (2026-10-27)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.7
    • Bug Fix: Fix a panic or EOF error when deserializing a JSON union that contains a member not modeled by the client and whose value is not null.
    • Bug Fix: Log the underlying error when dumping an HTTP request or response for logging fails

Release (2026-10-21)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.6
    • Bug Fix: Enforce event stream header key value length limit instead of truncating
    • Bug Fix: Retain the value in a list with the zero value when encountering a null entry on a dense list. This matches how legacy code-generated JSON deserializers behaved.

Release (2026-10-09)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.5
    • Bug Fix: Retain the key with the zero value when encountering a null-value key in a dense map. This matches how legacy code-generated JSON deserializers behaved.

Release (2026-10-07)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.4
    • Bug Fix: Revert #698 that fixed JoinPath with trailing slash. This has a side effect on certain S3 API paths in the downstream SDK that need more consideration.

Release (2026-10-06)

General Highlights

... (truncated)

Commits
  • 5f09676 Release 2026-11-03
  • 022048e preserve number precision in json documents (#745)
  • 7f50fd8 fix event stream issues found during corpus protocol test (#743)
  • 8c9c804 fixup broken protocol test compilation (#740)
  • cf3594a Fix malformed JSON when serializing nil lists or maps in union members, map v...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gomod group with 2 updates: [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) and [github.com/aws/smithy-go](https://github.com/aws/smithy-go).


Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.23.3 to 1.24.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.23.3...sdk/azcore/v1.24.0)

Updates `github.com/aws/smithy-go` from 1.28.7 to 1.28.8
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.28.7...v1.28.8)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.28.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Nov 7, 2026
@coderabbitai

coderabbitai Bot commented Nov 7, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@cristim cristim left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

APPROVED 4c632c1 by claude-nibblets

gomod group (azcore 1.23.3 -> 1.24.0, smithy-go 1.28.7 -> 1.28.8, yaml.v3 3.0.5 -> 3.0.6 indirect). Every added go.sum/go.work.sum line matches sum.golang.org (azcore looked up with the case-encoded path). Merged-tree check vs control: go mod download and verify ok, tidy clean, build, vet and tests (3 packages) pass on both.

@cristim

cristim commented Nov 9, 2026

Copy link
Copy Markdown
Member

APPROVE @ 4c632c1 by claude-nibblets

Fresh re-verification at the current head (same head as my earlier approval; this PR still has only one counted approval, mine, and no second reviewer assigned). gomod group: azcore 1.23.3 to 1.24.0, smithy-go 1.28.7 to 1.28.8, yaml.v3 3.0.5 to 3.0.6 (indirect). I re-checked all 7 added lines in go.sum and go.work.sum against sum.golang.org (azcore with the case-encoded path): 7 match, 0 differ; the change touches only go.mod, go.sum and go.work.sum. CI at this head: 11 pass, 1 skipping. My earlier merged-tree run (download and verify, tidy clean, build, vet, tests in 3 packages, control and PR identical) was at this same head. A second independent approver is still needed to reach two.

@cristim
cristim merged commit 0e5795a into main Nov 9, 2026
12 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/gomod-d5e8abd98a branch November 9, 2026 19:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant