Skip to content

build(deps): bump the google group across 2 directories with 7 updates - #7366

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/google-cfbe751281
Open

build(deps): bump the google group across 2 directories with 7 updates#7366
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/google-cfbe751281

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the google group with 5 updates in the / directory:

Package From To
cloud.google.com/go/firestore 1.22.0 1.25.0
cloud.google.com/go/profiler 0.3.1 0.6.0
cloud.google.com/go/secretmanager 1.20.0 1.21.0
cloud.google.com/go/storage 1.65.0 1.67.0
google.golang.org/api 0.287.1 0.297.0

Bumps the google group with 1 update in the /pkg/plugin/sdk directory: google.golang.org/grpc.

Updates cloud.google.com/go/firestore from 1.22.0 to 1.25.0

Release notes

Sourced from cloud.google.com/go/firestore's releases.

redis: v1.25.0

1.25.0 (2026-07-23)

Features

firestore: v1.25.0

1.25.0 (2026-08-07)

Features

Changelog

Sourced from cloud.google.com/go/firestore's changelog.

1.25.0 (2024-02-09)

Features

  • documentai: Expose model_type in v1 processor, so that user can see the model_type after get or list processor version (2fcf55c)

1.24.0 (2024-02-06)

Features

  • documentai: Add model_type in v1beta3 processor proto (#9355) (05e9e1f)

1.23.8 (2024-01-30)

Bug Fixes

  • documentai: Enable universe domain resolution options (fd1d569)

1.23.7 (2023-12-13)

Documentation

  • documentai: Clarify Properties documentation (757c1b0)

1.23.6 (2023-11-27)

Documentation

  • documentai: Update comment for ProcessOptions.page_range (63ffff2)

1.23.5 (2023-11-01)

Bug Fixes

  • documentai: Bump google.golang.org/api to v0.149.0 (8d2ab9f)

Documentation

  • documentai: Updated comments (24e410e)

1.23.4 (2023-10-26)

... (truncated)

Commits
  • 1b34244 chore: librarian release pull request: 20260122T080909Z (#13657)
  • e31373e chore: tidy snippets (#13655)
  • 2103cc6 chore: librarian release pull request: 20260121T212954Z (#13654)
  • 8ddeca5 chore: librarian generate pull request: 20260121T080645Z (#13650)
  • a80159a chore(all): update deps (major) (#13644)
  • e6111d4 chore: disable major version upgrade of pubsub (#13648)
  • 8e33ea0 chore(all): update opentelemetry-go monorepo to v1.39.0 (#13643)
  • 3876978 fix(auth): add InternalOptions.TelemetryAttributes for internal client use (#...
  • 736b758 chore: update spanner test module (#13639)
  • 4fecc87 chore(all): update module golang.org/x/crypto to v0.45.0 [SECURITY] (#13640)
  • Additional commits viewable in compare view

Updates cloud.google.com/go/profiler from 0.3.1 to 0.6.0

Release notes

Sourced from cloud.google.com/go/profiler's releases.

commerceproducer: v0.4.0

0.4.0 (2026-08-07)

Features

Changelog

Sourced from cloud.google.com/go/profiler's changelog.

v0.6.0

  • Beta release of BigQuery, DataStore, Logging and Storage. See the blog post.

  • bigquery:

    • struct support. Read a row directly into a struct with RowIterator.Next, and upload a row directly from a struct with Uploader.Put. You can also use field tags. See the [package documentation][cloud-bigquery-ref] for details.

    • The ValueList type was removed. It is no longer necessary. Instead of

    var v ValueList
... it.Next(&v) ..

    use

    var v []Value
... it.Next(&v) ...

    • Previously, repeatedly calling RowIterator.Next on the same []Value or ValueList would append to the slice. Now each call resets the size to zero first.

    • Schema inference will infer the SQL type BYTES for a struct field of type []byte. Previously it inferred STRING.

    • The types uint, uint64 and uintptr are no longer supported in schema inference. BigQuery's integer type is INT64, and those types may hold values that are not correctly represented in a 64-bit signed integer.

v0.5.0

  • bigquery:
    • The SQL types DATE, TIME and DATETIME are now supported. They correspond to the Date, Time and DateTime types in the new cloud.google.com/go/civil package.
    • Support for query parameters.
    • Support deleting a dataset.
    • Values from INTEGER columns will now be returned as int64, not int. This will avoid errors arising from large values on 32-bit systems.
  • datastore:
    • Nested Go structs encoded as Entity values, instead of a flattened list of the embedded struct's fields. This means that you may now have twice-nested slices, eg. 
      type State struct {
  Cities  []struct{
    Populations []int

... (truncated)

Commits
  • c116c79 bigquery: cache schema inference
  • dd37f36 bigquery: check for recursive types during schema inference
  • 0c87a68 bigquery,logging,storage,datastore: mention beta status in doc comment
  • 1e032f3 datastore: implement structCodec using internal/fields
  • ee72afc README: change "experimental" to "alpha"
  • 9d965e6 README: update status of select clients
  • 3d66f77 fields: factor out fast cache to separate package.
  • e80926d bigquery: support uploading structs directly
  • 5bfd313 internal/fields: adds func for validating struct
  • c9f70e2 bigquery: support struct field tags
  • Additional commits viewable in compare view

Updates cloud.google.com/go/secretmanager from 1.20.0 to 1.21.0

Release notes

Sourced from cloud.google.com/go/secretmanager's releases.

secretmanager: v1.21.0

1.21.0 (2026-07-20)

Features

batch: v1.21.0

1.21.0 (2026-07-23)

Features

Changelog

Sourced from cloud.google.com/go/secretmanager's changelog.

1.21.0 (2023-07-18)

Features

  • documentai: Removed id field from Document message (4a5651c)
Commits
  • 94d24ca chore: librarian release pull request: 20260507T184113Z (#14549)
  • 541569e docs: update README to reflect Gemini Enterprise Agent Platform
  • 237533a Merge pull request #14545 from googleapis:release-agentplatform-0.20.0
  • d70876a chore: release agentplatform@v0.20.0
  • 32a256f feat(agentplatform): Add structured data and memory type to Memory.
  • 37572e3 chore: update librarian to use new config command (#14540)
  • d6d7382 chore(agentplatform): update deps
  • fd34e97 feat(geminidataanlytics): generate v1 client (#14542)
  • 07fe29b feat: update API sources and regenerate (#14537)
  • 6b9f6c7 feat(memorystore): enable gRPC transport (#14532)
  • Additional commits viewable in compare view

Updates cloud.google.com/go/storage from 1.65.0 to 1.67.0

Release notes

Sourced from cloud.google.com/go/storage's releases.

compute: v1.67.0

1.67.0 (2026-08-26)

Features

storage: v1.67.0

1.67.0 (2026-09-03)

Features

  • storage: Promote WithGRPCBidiReads and WithGRPCAppendableUploads out of experimental (#20387) (de23089)

compute: v1.66.0

1.66.0 (2026-08-07)

Features

storage: v1.66.0

1.66.0 (2026-08-26)

Features

storage: v1.65.1

1.65.1 (2026-08-25)

Bug Fixes

  • storage: Enforce gRPC writer chunk retry deadlines by tying timers to server acks (#20059) (dbb5f6f)
Commits
  • 1831f9d chore: release main (#20428)
  • 7801736 chore(main): release pubsub 2.7.0 (#20429)
  • eb07af9 feat: update API sources and regenerate (#20427)
  • 3ab7d13 chore(main): release storage 1.65.1 (#20420)
  • 25e6d40 chore: update librarian to v0.39.0 (#20423)
  • 0d8983d chore(agentplatform): Remove the tools submodule from AgentPlatform.
  • 08d06c0 fix(internal/kokoro): skip testing modules with no Go source files (#20419)
  • 081d506 BREAKING_CHANGE(agentplatform): Migrate Memory Bank methods to `client.memory...
  • 574d42d chore(storage): remove redundant internal OTEL attributes (#20421)
  • dbb5f6f fix(storage): enforce gRPC writer chunk retry deadlines by tying timers to se...
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.287.1 to 0.297.0

Release notes

Sourced from google.golang.org/api's releases.

v0.297.0

0.297.0 (2026-09-01)

Features

  • Move to go1.26.0 as the lowest supported go version (#3724) (7770e01)

v0.296.0

0.296.0 (2026-08-31)

Features

v0.295.0

0.295.0 (2026-08-28)

Features

v0.294.0

0.294.0 (2026-08-26)

Features

v0.293.0

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.297.0 (2026-09-01)

Features

  • Move to go1.26.0 as the lowest supported go version (#3724) (7770e01)

0.296.0 (2026-08-31)

Features

0.295.0 (2026-08-28)

Features

0.294.0 (2026-08-26)

Features

0.293.0 (2026-08-11)

Features

... (truncated)

Commits

Updates google.golang.org/grpc from 1.82.1 to 1.83.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)
Commits

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12

Updates google.golang.org/grpc from 1.83.1 to 1.83.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the google group across 2 directories with 7 updates
535c08c 
Bumps the google group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/firestore](https://github.com/googleapis/google-cloud-go) | `1.22.0` | `1.25.0` |
| [cloud.google.com/go/profiler](https://github.com/googleapis/google-cloud-go) | `0.3.1` | `0.6.0` |
| [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) | `1.20.0` | `1.21.0` |
| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.65.0` | `1.67.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.287.1` | `0.297.0` |

Bumps the google group with 1 update in the /pkg/plugin/sdk directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `cloud.google.com/go/firestore` from 1.22.0 to 1.25.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@dlp/v1.22.0...kms/v1.25.0)

Updates `cloud.google.com/go/profiler` from 0.3.1 to 0.6.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@ai/v0.3.1...v0.6.0)

Updates `cloud.google.com/go/secretmanager` from 1.20.0 to 1.21.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@kms/v1.20.0...run/v1.21.0)

Updates `cloud.google.com/go/storage` from 1.65.0 to 1.67.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@compute/v1.65.0...compute/v1.67.0)

Updates `google.golang.org/api` from 0.287.1 to 0.297.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.287.1...v0.297.0)

Updates `google.golang.org/grpc` from 1.82.1 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.1...v1.83.2)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

Updates `google.golang.org/grpc` from 1.83.1 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.1...v1.83.2)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/firestore
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: google
- dependency-name: cloud.google.com/go/profiler
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: google
- dependency-name: cloud.google.com/go/secretmanager
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: google
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: google
- dependency-name: google.golang.org/api
  dependency-version: 0.297.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: google
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: google
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: google
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: google
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 10, 2026
Copilot AI lite review requested due to automatic review settings September 10, 2026 13:38
@dependabot
dependabot Bot requested review from a team as code owners September 10, 2026 13:38
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 10, 2026
@dependabot
dependabot Bot requested a review from Warashi September 10, 2026 13:38
@dependabot dependabot Bot added the go Pull requests that update Go code label Sep 10, 2026
This was referenced Sep 10, 2026
Closed
Closed
@netlify

netlify Bot commented Sep 10, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for pipecd-site canceled.

Name Link
🔨 Latest commit 535c08c
🔍 Latest deploy log https://app.netlify.com/projects/pipecd-site/deploys/6aa2b2e2c73e5a0008ebe99c

@mohammedfirdouss
mohammedfirdouss enabled auto-merge (squash) September 10, 2026 13:47
Copilot AI reviewed Sep 10, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The root module now depends on a prerelease (github.com/golang/mock v1.7.0-rc.1), which should be replaced with a stable tag (or explicitly justified) before merging.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

This PR updates Google-related Go dependencies across the root module, the plugin SDK, several pipedv1 plugins, and an internal GitHub Action tool to keep the project aligned with newer Google Cloud / gRPC / protobuf releases.

Changes:

  • Bump root module Google Cloud clients (Firestore/Profiler/Secret Manager/Storage) and Google API + gRPC/protobuf versions.
  • Refresh transitive dependency versions in pkg/plugin/sdk and multiple pkg/app/pipedv1/plugin/* Go modules (go.mod/go.sum).
  • Update the tool/actions-plan-preview module’s protobuf dependency and sums.
File summaries
File Description
go.mod Bumps root module Google Cloud / Google API / gRPC / protobuf versions and associated direct deps.
tool/actions-plan-preview/go.mod Updates protobuf requirement for the plan-preview action module.
tool/actions-plan-preview/go.sum Updates sums for the plan-preview action module after dependency changes.
pkg/plugin/sdk/go.mod Bumps gRPC and refreshes indirect Google-related deps for the plugin SDK module.
pkg/plugin/sdk/go.sum Updates sums for the plugin SDK module after dependency changes.
pkg/app/pipedv1/plugin/waitapproval/go.mod Refreshes indirect Google-related dependencies for the waitapproval plugin module.
pkg/app/pipedv1/plugin/wait/go.mod Refreshes indirect Google-related dependencies for the wait plugin module.
pkg/app/pipedv1/plugin/terraform/go.mod Refreshes indirect Google-related dependencies for the terraform plugin module.
pkg/app/pipedv1/plugin/terraform/go.sum Updates sums for the terraform plugin module after dependency changes.
pkg/app/pipedv1/plugin/scriptrun/go.mod Refreshes indirect Google-related dependencies for the scriptrun plugin module.
pkg/app/pipedv1/plugin/kubernetes/go.mod Refreshes indirect Google-related dependencies for the kubernetes plugin module.
pkg/app/pipedv1/plugin/kubernetes/go.sum Updates sums for the kubernetes plugin module after dependency changes.
pkg/app/pipedv1/plugin/kubernetes_multicluster/go.mod Refreshes indirect Google-related dependencies for the kubernetes_multicluster plugin module.
pkg/app/pipedv1/plugin/kubernetes_multicluster/go.sum Updates sums for the kubernetes_multicluster plugin module after dependency changes.
pkg/app/pipedv1/plugin/ecs/go.mod Refreshes indirect Google-related dependencies for the ecs plugin module (and updates x/sync).
pkg/app/pipedv1/plugin/cloudrun/go.mod Refreshes indirect Google-related dependencies for the cloudrun plugin module.
pkg/app/pipedv1/plugin/cloudrun/go.sum Updates sums for the cloudrun plugin module after dependency changes.
pkg/app/pipedv1/plugin/analysis/go.mod Refreshes indirect Google-related dependencies for the analysis plugin module.
pkg/app/pipedv1/plugin/analysis/go.sum Updates sums for the analysis plugin module after dependency changes.
Review details
  • Files reviewed: 12/24 changed files
  • Comments generated: 1
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread go.mod
github.com/goccy/go-yaml v1.9.8
github.com/golang-jwt/jwt/v5 v5.2.2
github.com/golang/mock v1.6.0
github.com/golang/mock v1.7.0-rc.1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort, defaults to Lite
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@Warashi Warashi Awaiting requested review from Warashi Warashi is a code owner automatically assigned from pipe-cd/pipecd-approvers
@khanhtc1202 khanhtc1202 Awaiting requested review from khanhtc1202 khanhtc1202 is a code owner automatically assigned from pipe-cd/pipecd-approvers
@armistcxy armistcxy Awaiting requested review from armistcxy armistcxy is a code owner automatically assigned from pipe-cd/pipecd-approvers

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

area/go area/pipedv1 area/plugin-sdk piped-plugin-sdk area/tool dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant