Skip to content

chore(deps): bump the go-mod group across 1 directory with 16 updates#191

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go-mod-dceb76b1d0
Open

chore(deps): bump the go-mod group across 1 directory with 16 updates#191
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go-mod-dceb76b1d0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 1, 2026 •
edited
Loading

Bumps the go-mod group with 10 updates in the / directory:

Package From To
github.com/authzed/authzed-go 1.6.0 1.8.0
github.com/authzed/spicedb 1.47.1 1.51.0
github.com/cschleiden/go-workflows 1.0.1 1.4.1
github.com/go-playground/validator/v10 10.27.0 10.30.2
github.com/puzpuzpuz/xsync/v4 4.2.0 4.4.0
github.com/samber/lo 1.52.0 1.53.0
github.com/warpstreamlabs/bento 1.8.2 1.16.2
k8s.io/component-base 0.34.1 0.35.3
k8s.io/klog/v2 2.130.1 2.140.0
k8s.io/kubernetes 1.34.1 1.35.3

Updates github.com/authzed/authzed-go from 1.6.0 to 1.8.0

Release notes

Sourced from github.com/authzed/authzed-go's releases.

v1.8.0

What's Changed

New Contributors

Full Changelog: authzed/authzed-go@v1.7.0...v1.8.0

v1.7.0

What's Changed

New Contributors

Full Changelog: authzed/authzed-go@v1.6.0...v1.7.0

Commits
  • d8c9a1a Merge pull request #394 from authzed/dependabot/go_modules/magefiles/go-mod-m...
  • ed6f0b8 chore(deps): bump the go-mod-magefiles group across 1 directory with 3 updates
  • bdf5808 Merge pull request #393 from authzed/dependabot/go_modules/go-mod-d64280bf30
  • 8adc898 chore(deps): bump the go-mod group with 3 updates
  • 43eca72 Merge pull request #375 from ivanauth/fix/issue-142-add-api-examples
  • 2ea2f5c Merge pull request #388 from ivanauth/fix/issue-137-contributing-local-protos
  • 41234c1 Merge pull request #389 from authzed/dependabot/go_modules/go-mod-bb2d16fde3
  • 70ff9af Merge pull request #390 from authzed/dependabot/github_actions/github-actions...
  • ea4533e Merge pull request #391 from authzed/dependabot/go_modules/magefiles/go-mod-m...
  • dcb53b3 chore(deps): bump the go-mod-magefiles group
  • Additional commits viewable in compare view

Updates github.com/authzed/spicedb from 1.47.1 to 1.51.0

Release notes

Sourced from github.com/authzed/spicedb's releases.

v1.51.0

Changed

Fixed

  • Fix increase in memory usage brought in v1.50.0 due to replacing protoc-gen-validate with protovalidate (authzed/spicedb#2984)
  • Fix duplicate diagnostics in LSP server when VS Code pulls diagnostics (authzed/spicedb#2977)
  • In DevContext's schema position mapper, only the first occurrence of a caveat parameter could be found (authzed/spicedb#2972)

What's Changed

Full Changelog: authzed/spicedb@v1.50.0...v1.51.0

Docker Images

This release is available at authzed/spicedb:v1.51.0, quay.io/authzed/spicedb:v1.51.0, ghcr.io/authzed/spicedb:v1.51.0

v1.50.0

⚠️ This release comes with an increase in memory usage that we will mitigate in v1.51.0.

Added

Changed

Fixed

  • Regression introduced in 1.49.2: missing spans in ReadSchema calls (authzed/spicedb#2947)
  • Long standing bug in the way postgres revisions were being compared. Sometimes revisions that were actually overlapping were erroneously being ordered. (authzed/spicedb#2958)
  • Prevent panics in schema compiler, which can reproduce if using the VSCode extension or zed (authzed/spicedb#2971)

What's Changed

... (truncated)

Changelog

Sourced from github.com/authzed/spicedb's changelog.

[1.51.0] - 2026-03-24

Changed

Fixed

  • Fix duplicate diagnostics in LSP server when VS Code pulls diagnostics (authzed/spicedb#2977)
  • In DevContext's schema position mapper, only the first occurrence of a caveat parameter could be found (authzed/spicedb#2972)
  • Fix increase in memory usage brought in v1.50.0 due to replacing protoc-gen-validate with protovalidate (authzed/spicedb#2984)

[1.50.0] - 2026-03-19

⚠️ Warning: Due to an increase in memory usage, we recommend using 1.51.0.

Added

  • New pkg/query/queryopt package for building optimizations into the query plan

Changed

Fixed

  • Regression introduced in 1.49.2: missing spans in ReadSchema calls (authzed/spicedb#2947)
  • Long standing bug in the way postgres revisions were being compared. Sometimes revisions that were actually overlapping were erroneously being ordered. (authzed/spicedb#2958)
  • Prevent panics in schema compiler, which can reproduce if using the VSCode extension or zed (authzed/spicedb#2971)

[1.49.2] - 2026-03-02

Added

Changed

  • Begin deprecation of library "github.com/dlmiddlecote/sqlstats" (authzed/spicedb#2904). NOTE: in a future release, MySQL metrics will change.
  • Add support for imports and partials to the schemadsl package that drives the LSP and development server (authzed/spicedb#2919).
  • Added support for CRDB 26.1 by fixing how version information is read from the cluster (authzed/spicedb#2907).

Fixed

[1.49.1] - 2026-02-06

Added

Changed

... (truncated)

Commits
  • b041b8f feat: update DevContext and LSP to support composable schemas (#2965)
  • 5d081d3 fix(memory): use global protovalidate instance and bump protovalidate (#2984)
  • 3cc2a8f fix: pin trivy while they figure things out (#2983)
  • 9483d72 chore: pass ctx to generator.GenerateSchema (#2981)
  • 70fe885 fix(devContext): only the first occurrence of a caveat parameter coul… (#2972)
  • 3bd3501 test(*): remove all t.Parallel() calls in the tests (#2955)
  • 075454c fix: duplicate diagnostics in LSP server (#2977)
  • 8e2054a chore: bump grpc for CVE (#2976)
  • aace279 chore: release 1.50.0 (#2974)
  • c4410bc fix: prevent panics in case of nils (#2971)
  • Additional commits viewable in compare view

Updates github.com/cschleiden/go-workflows from 1.0.1 to 1.4.1

Release notes

Sourced from github.com/cschleiden/go-workflows's releases.

v1.4.1

What's Changed

Other Changes

Full Changelog: cschleiden/go-workflows@v1.4.0...v1.4.1

v1.4.0

What's Changed

Features

Bugfixes

Other Changes

Docs

New Contributors

Full Changelog: cschleiden/go-workflows@v1.3.0...v1.4.0

v1.3.0

What's Changed

Other Changes

... (truncated)

Commits
  • 2441ef3 Bump github.com/jackc/pgx/v5 from 5.3.1 to 5.5.4
  • caa8320 Fix GitHub URL in postgres README (remove www prefix)
  • 8a92a65 Add PostgreSQL backend documentation following SQLite/MySQL pattern
  • e065cb2 fix(samples): correct database creation query syntax
  • 23b924e refactor: rename package from postgresbackend to postgres
  • f32a821 fix: update makefile
  • 0c57436 migrations: squash migrations into a single file
  • 73e15af fix: lint errors
  • f363ca7 feat: add Postgres benchmarking and testing workflows
  • 5787158 feat: add postgres backend
  • Additional commits viewable in compare view

Updates github.com/go-playground/validator/v10 from 10.27.0 to 10.30.2

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

v10.30.2

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.30.1...v10.30.2

Release 10.30.1

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.30.0...v10.30.1

Release 10.30.0

What's Changed

New Contributors

... (truncated)

Commits
  • b9258bd fix(fqdn): allow hyphens in last domain label (#1548)
  • b9f1d79 feat: add postcode patterns for Colombia (CO) and British Virgin Islands (VG)...
  • 7fa9599 chore(deps): bump golang.org/x/crypto from 0.48.0 to 0.49.0 (#1546)
  • 8ca29ec chore(deps): bump golang.org/x/text from 0.34.0 to 0.35.0 (#1545)
  • 5e1bedf docs: add Valuer interface documentation and example (#1540)
  • 42927a0 feat: implement ValidatorValuer interface feature (#1416)
  • c254ece docs: fix typos (#1527)
  • 4325386 fix: prevent panic in unique validation with nil pointer elements (#1532)
  • d3f35da Go 1.26 support (#1535)
  • f5c74ce chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 (#1533)
  • Additional commits viewable in compare view

Updates github.com/google/cel-go from 0.26.0 to 0.27.0

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.27.0

Release Summary

This release focuses on improving developer tooling and stability. Key highlights include significant enhancements to the REPL (YAML configuration support and parse-only evaluation), the addition of cost estimation for regex operations, and improved test coverage reporting.

On the stability front, this release addresses race conditions in reference types, improves namespace resolution, and ensures formatting directives align strictly with the CEL specification.

Note: This release includes a breaking change regarding how types are handled as variables. Please review the "Breaking Changes" section below.

⚠ Breaking Changes

Remove types as variables: The logic for handling types has been relaxed to support safe rollout of feature packages which introduce new types whose names may collide with existing variables. Please review your policies if you relied on types behaving strictly as variables in previous versions. [PR #1262](google/cel-go#1262)

Features & Enhancements

REPL & Tooling

Core Library

  • Regex Costing: Added support for cost estimation and tracking within the regex library. [PR #1200](google/cel-go#1200)

  • JSON Type Exposure: Exposed CEL JSON types to assist developers in converting to native values. [PR #1261](google/cel-go#1261)

  • Policy Composition: Source information is now preserved during CEL policy composition, aiding in debugging. [PR #1253](google/cel-go#1253)

Extensibility:

  • Updated extension option factory to resolve by ID (#1249).

  • Refactored match output compiling to accept user-defined logic (#1246).

  • Exposed Match source ID to callers (#1227).

Build & Maintenance

Bug Fixes

... (truncated)

Commits
  • 450089b Preserve source information during CEL policy composition. (#1253)
  • c66b313 Remove types as variables to allow user-defined variables to shadow type decl...
  • bff3a72 Expose the CEL JSON types to assist with conversion to native values (#1261)
  • 559cbc9 Remove errant diff checked into a prior PR (#1260)
  • fe26efa Simplify the disambiguation logic to a single boolean (#1263)
  • 52280ba Clean up unused source info after checker rewrites the AST. (#1258)
  • 3cb5705 Namespace resolution fix (#1256)
  • 409bcbe Refactor match output compiling to accept user-defined logic. (#1246)
  • e9f15ea Enable two var comprehension conformance tests. (#1255)
  • 057fa1a Add parse only evaluation to REPL (#1254)
  • Additional commits viewable in compare view

Updates github.com/puzpuzpuz/xsync/v4 from 4.2.0 to 4.4.0

Release notes

Sourced from github.com/puzpuzpuz/xsync/v4's releases.

v4.4.0

  • Micro-optimize Map for integer keys #185
  • Add Map.RangeRelaxed method for faster map iteration #187
  • Add Map.DeleteMatching method for batch entry deletion #186

Read-heavy operations on Map with integer keys are now 24-29% faster due to a more efficient hash function, as well as a number of micro-optimizations.

RangeRelaxed is a much faster (~11x), lock-free alternative to Range. The downside is that the same key may be visited by RangeRelaxed more than once if it is concurrently deleted and re-inserted during the iteration. RangeRelaxed should be preferred over Range in all cases when weaker consistency is acceptable.

m := xsync.NewMap[string, int]()
m.Store("alice", 10)
m.Store("bob", 20)
m.Store("carol", 30)
m.Store("dave", 40)
// Iterate map entries and calculate sum of all values.
sum := 0
m.RangeRelaxed(func(key string, value int) bool {
sum += value
return true // continue iteration
})

DeleteMatching deletes all entries for which the delete return value of the input function is true. If the cancel return value is true, the iteration stops immediately. The function returns the number of deleted entries. The call locks a hash table bucket for the duration of evaluating the function for all entries in the bucket and performing deletions. It performs up to 20% faster than Range + Delete, yet if the percentage of the entries to-be-deleted is low, RangeRelaxed + Delete combination should be more efficient.

// Delete entries with value greater than 25.
deleted := m.DeleteMatching(func(key string, value int) (delete, cancel bool) {
	return value > 25, false
})

v4.3.0

  • Add iterator function Map.All #181
  • Make shrink resize lock-free on target buckets #180

All is similar to Range, but returns an iter.Seq2, so is compatible with Go 1.23+ iterators. All of the same caveats and behavior from Range apply to All.

m := xsync.NewMap[string, int]()
for i := range 100 {
  m.Store(strconv.Itoa(i), i)
}
// Will print all of the map entries
for key, val := range m.All() {
fmt.Printf("m[%q] = %q\n")
}

... (truncated)

Commits

Updates github.com/samber/lo from 1.52.0 to 1.53.0

Release notes

Sourced from github.com/samber/lo's releases.

v1.53.0

Announcing the latest release of lo with lots of good gifts! 🎁

🌊 First, a big thanks to @​d-enk for making lots of performance improvements in the recent weeks.

🧪 Second, this release introduces a new simd experimental package. If you run on an amd64 architecture and a recent CPU, you can perform very fast operations thanks to SIMD CPU instructions. -> Documentation: https://lo.samber.dev/docs/experimental/simd

💥 Third, this version adds *Err variants of many lo helpers (like MapErr, FlatMapErr, ReduceErr, etc.) whose callbacks can return an error and short-circuit execution when one occurs.

[!NOTE] The simd sub-package is considered not stable. We might break the initial API based on developers' feedback in the coming months.

Features & improvements

@dependabot
chore(deps): bump the go-mod group across 1 directory with 16 updates
c6bca98 
Bumps the go-mod group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/authzed/authzed-go](https://github.com/authzed/authzed-go) | `1.6.0` | `1.8.0` |
| [github.com/authzed/spicedb](https://github.com/authzed/spicedb) | `1.47.1` | `1.51.0` |
| [github.com/cschleiden/go-workflows](https://github.com/cschleiden/go-workflows) | `1.0.1` | `1.4.1` |
| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.27.0` | `10.30.2` |
| [github.com/puzpuzpuz/xsync/v4](https://github.com/puzpuzpuz/xsync) | `4.2.0` | `4.4.0` |
| [github.com/samber/lo](https://github.com/samber/lo) | `1.52.0` | `1.53.0` |
| [github.com/warpstreamlabs/bento](https://github.com/warpstreamlabs/bento) | `1.8.2` | `1.16.2` |
| [k8s.io/component-base](https://github.com/kubernetes/component-base) | `0.34.1` | `0.35.3` |
| [k8s.io/klog/v2](https://github.com/kubernetes/klog) | `2.130.1` | `2.140.0` |
| [k8s.io/kubernetes](https://github.com/kubernetes/kubernetes) | `1.34.1` | `1.35.3` |



Updates `github.com/authzed/authzed-go` from 1.6.0 to 1.8.0
- [Release notes](https://github.com/authzed/authzed-go/releases)
- [Commits](authzed/authzed-go@v1.6.0...v1.8.0)

Updates `github.com/authzed/spicedb` from 1.47.1 to 1.51.0
- [Release notes](https://github.com/authzed/spicedb/releases)
- [Changelog](https://github.com/authzed/spicedb/blob/main/CHANGELOG.md)
- [Commits](authzed/spicedb@v1.47.1...v1.51.0)

Updates `github.com/cschleiden/go-workflows` from 1.0.1 to 1.4.1
- [Release notes](https://github.com/cschleiden/go-workflows/releases)
- [Commits](cschleiden/go-workflows@v1.0.1...v1.4.1)

Updates `github.com/go-playground/validator/v10` from 10.27.0 to 10.30.2
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.27.0...v10.30.2)

Updates `github.com/google/cel-go` from 0.26.0 to 0.27.0
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.26.0...v0.27.0)

Updates `github.com/puzpuzpuz/xsync/v4` from 4.2.0 to 4.4.0
- [Release notes](https://github.com/puzpuzpuz/xsync/releases)
- [Commits](puzpuzpuz/xsync@v4.2.0...v4.4.0)

Updates `github.com/samber/lo` from 1.52.0 to 1.53.0
- [Release notes](https://github.com/samber/lo/releases)
- [Commits](samber/lo@v1.52.0...v1.53.0)

Updates `github.com/spf13/cobra` from 1.10.1 to 1.10.2
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.10.1...v1.10.2)

Updates `github.com/warpstreamlabs/bento` from 1.8.2 to 1.16.2
- [Release notes](https://github.com/warpstreamlabs/bento/releases)
- [Changelog](https://github.com/warpstreamlabs/bento/blob/main/CHANGELOG.md)
- [Commits](warpstreamlabs/bento@v1.8.2...v1.16.2)

Updates `golang.org/x/sync` from 0.18.0 to 0.20.0
- [Commits](golang/sync@v0.18.0...v0.20.0)

Updates `google.golang.org/grpc` from 1.76.0 to 1.79.3
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.79.3)

Updates `google.golang.org/protobuf` from 1.36.10 to 1.36.11

Updates `k8s.io/client-go` from 0.34.1 to 0.34.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.34.1...v0.34.2)

Updates `k8s.io/component-base` from 0.34.1 to 0.35.3
- [Commits](kubernetes/component-base@v0.34.1...v0.35.3)

Updates `k8s.io/klog/v2` from 2.130.1 to 2.140.0
- [Release notes](https://github.com/kubernetes/klog/releases)
- [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md)
- [Commits](kubernetes/klog@v2.130.1...2.140.0)

Updates `k8s.io/kubernetes` from 1.34.1 to 1.35.3
- [Release notes](https://github.com/kubernetes/kubernetes/releases)
- [Commits](kubernetes/kubernetes@v1.34.1...v1.35.3)

---
updated-dependencies:
- dependency-name: github.com/authzed/authzed-go
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/authzed/spicedb
  dependency-version: 1.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/cschleiden/go-workflows
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/go-playground/validator/v10
  dependency-version: 10.30.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/google/cel-go
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/puzpuzpuz/xsync/v4
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/samber/lo
  dependency-version: 1.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/warpstreamlabs/bento
  dependency-version: 1.16.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: golang.org/x/sync
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: k8s.io/component-base
  dependency-version: 0.35.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: k8s.io/klog/v2
  dependency-version: 2.140.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: k8s.io/kubernetes
  dependency-version: 1.35.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the area/dependencies Affects dependencies label Apr 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

area/dependencies Affects dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants