chores: bump the go-modules group with 7 updates by dependabot[bot] · Pull Request #371 · ClickHouse/clickhouse-operator

dependabot · 2026-10-20T13:54:38Z

Bumps the go-modules group with 7 updates:

Package	From	To
github.com/Microsoft/go-winio	`0.6.3`	`0.6.4`
github.com/ebitengine/purego	`0.11.1`	`0.11.2`
github.com/grpc-ecosystem/grpc-gateway/v2	`2.31.0`	`2.32.0`
github.com/klauspost/compress	`1.20.1`	`1.20.3`
golang.org/x/exp	`0.0.0-20260908205506-85c1c2202aba`	`0.0.0-20261014143641-f0251eb4aa3e`
google.golang.org/genproto/googleapis/api	`0.0.0-20260928230214-8a89bd6388cc`	`0.0.0-20261012220534-4341edf3f941`
google.golang.org/genproto/googleapis/rpc	`0.0.0-20260928230214-8a89bd6388cc`	`0.0.0-20261005182115-fad411399dd8`

Updates github.com/Microsoft/go-winio from 0.6.3 to 0.6.4

Release notes

Sourced from github.com/Microsoft/go-winio's releases.

v0.6.4

What's Changed

Bump golang.org/x/sys from 0.48.0 to 0.49.0 by @dependabot[bot] in microsoft/go-winio#393

Fix regression in mkwinsyscall for non SystemDLLs by @jterry75 in microsoft/go-winio#394

Full Changelog: microsoft/go-winio@v0.6.3...v0.6.4

Commits

b900fd8 Fix regression in mkwinsyscall for non SystemDLLs (#394)
48c993a Bump golang.org/x/sys from 0.48.0 to 0.49.0 (#393)
See full diff in compare view

Updates github.com/ebitengine/purego from 0.11.1 to 0.11.2

Release notes

Sourced from github.com/ebitengine/purego's releases.

v0.11.2

Fix a crash during CPU profiling on macOS, FreeBSD, and NetBSD caused by incorrect signal masking when creating threads (#553).

Commits

0fd9f62 internal/fakecgo: use per-OS values for pthread_sigmask how (#553)
See full diff in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.31.0 to 2.32.0

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.32.0

What's Changed

fix(openapiv2): render Any additional properties as true by @Boulea7 in grpc-ecosystem/grpc-gateway#7215

refuse client headers spoofing gateway x-forwarded-* metadata by @itecz26 in grpc-ecosystem/grpc-gateway#7418

avoid copying path components per handler in ServeMux.ServeHTTP by @itecz26 in grpc-ecosystem/grpc-gateway#7426

fix field mask path for nested Any in FieldMaskFromRequestBody by @itecz26 in grpc-ecosystem/grpc-gateway#7438

fix: handle CRLF line endings in proto comments by @somaz94 in grpc-ecosystem/grpc-gateway#7419

ci: detect deleted generated files by @Boulea7 in grpc-ecosystem/grpc-gateway#7420

stop double-unescaping path params in ServeMux.ServeHTTP by @itecz26 in grpc-ecosystem/grpc-gateway#7449

fix(httprule): reject invalid characters in HTTP path verb by @Sducabbagedog in grpc-ecosystem/grpc-gateway#7454

fix: preserve empty dynamic objects in field masks by @tianrking in grpc-ecosystem/grpc-gateway#7450

fix NewDoubleArray dropping path params that share a prefix by @itecz26 in grpc-ecosystem/grpc-gateway#7452

fix(openapiv2): pick merge leader from openapi_configuration too by @LuisFigueroaG in grpc-ecosystem/grpc-gateway#7471

fix(runtime): accept unpadded base64 for bytes parameters by @LuisFigueroaG in grpc-ecosystem/grpc-gateway#7472

treat %2f as a path separator in encodedPathSplitter by @itecz26 in grpc-ecosystem/grpc-gateway#7486

feat(openapiv3): support security schemes and requirements by @LuisFigueroaG in grpc-ecosystem/grpc-gateway#7481

feat(openapiv3): add openapiv3_tag service annotation by @LuisFigueroaG in grpc-ecosystem/grpc-gateway#7495

reject duplicate fields in DefaultQueryParser.Parse by @itecz26 in grpc-ecosystem/grpc-gateway#7500

fix(openapiv3): don't repeat nested path parameters as query parameters by @LuisFigueroaG in grpc-ecosystem/grpc-gateway#7501

Gate strict ** matching from #7412 behind strict_deep_wildcard generator flag by @johanbrandhorst in grpc-ecosystem/grpc-gateway#7527

New Contributors

@Boulea7 made their first contribution in grpc-ecosystem/grpc-gateway#7215

@somaz94 made their first contribution in grpc-ecosystem/grpc-gateway#7419

@Sducabbagedog made their first contribution in grpc-ecosystem/grpc-gateway#7454

@tianrking made their first contribution in grpc-ecosystem/grpc-gateway#7450

@LuisFigueroaG made their first contribution in grpc-ecosystem/grpc-gateway#7471

@TonyWu2333 made their first contribution in grpc-ecosystem/grpc-gateway#7484

@pujitha24 made their first contribution in grpc-ecosystem/grpc-gateway#7493

Full Changelog: grpc-ecosystem/grpc-gateway@v2.31.0...v2.32.0

Commits

9b13706 Gate strict ** matching from #7412 behind strict_deep_wildcard generator ...
e2bc4bb chore(deps): update googleapis digest to a6f4580 (#7526)
796f2c3 chore(deps): update googleapis digest to d7dd444 (#7525)
4f04466 chore(deps): update golang.org/x/exp digest to f0251eb (#7524)
a62432a chore(deps): update golang.org/x/exp digest to 2ab7f3c (#7519)
596056e chore(deps): update googleapis digest to b6efa15 (#7520)
52de616 chore(deps): update googleapis digest to 0b2e1ee (#7518)
14c1da7 fix(deps): update google.golang.org/genproto/googleapis/api digest to 4341edf...
9b863f4 chore(deps): update googleapis digest to f5f34cc (#7514)
04c1457 chore(deps): update goreleaser/goreleaser-action digest to a4f02ab (#7515)
Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.20.1 to 1.20.3

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.20.3

What's Changed

zstd: two-pass decode with match-source prefetch on arm64 (largest win decoding SpeedBestCompression-class data) by @lizthegrey in klauspost/compress#1212

zstd: speed up better encoder hashing, primes in registers on arm64 by @lizthegrey in klauspost/compress#1230

zstd: reuse dictionary sequence tables in the encoder by @lizthegrey in klauspost/compress#1233

zstd: close most of the decode gap to libzstd on real corpora by @lizthegrey in klauspost/compress#1232

huff0: align the decode inner loops to 64 bytes by @lizthegrey in klauspost/compress#1236

zstd: keep default-encoder hash primes in registers on arm64 by @lizthegrey in klauspost/compress#1241

zstd: align the sequence decode and execute loops to 64 bytes by @lizthegrey in klauspost/compress#1240

zstd, huff0: cheaper per-block table setup by @lizthegrey in klauspost/compress#1234

zstd, s2, flate: smoke-test Silesia in CI, add real-corpus benchmarks by @lizthegrey in klauspost/compress#1237

zip: reject entries named "." in ReadDir to stop infinite fs.WalkDir by @Raghuvardhan-Reddy78 in klauspost/compress#1249

zstd: decode at full speed into exact-size destinations by @lizthegrey in klauspost/compress#1246

s2: Reject short index chunk in RemoveIndexHeaders by @Raghuvardhan-Reddy78 in klauspost/compress#1254

zstd, huff0: keep the encoder bit writers in registers by @lizthegrey in klauspost/compress#1245

huff0: reuse Scratch across inputs in the fuzzers by @lizthegrey in klauspost/compress#1257

New Contributors

@Raghuvardhan-Reddy78 made their first contribution in klauspost/compress#1235

@SulimanAbdulrazzaq made their first contribution in klauspost/compress#1255

Full Changelog: klauspost/compress@v1.20.1...v1.20.3

v1.20.2

zstd: Fix DecodeAll crash on specially crafted input. GHSA-fpmh-frq8-7rj8.

s2: fix LZ4 block conversion writing past dst by @klauspost in klauspost/compress#1244

dict: Stricter input validation by @klauspost in klauspost/compress#1250

zstd: reject snappy copy shorter than minimum match by @Raghuvardhan-Reddy78 in klauspost/compress#1235

Full Changelog: klauspost/compress@v1.20.1...v1.20.2

Commits

b946d41 Revert #1255 (#1261)
748550b Merge commit from fork
dd54d86 huff0: reuse Scratch across inputs in the fuzzers (#1257)
d189b4c gzhttp: do not compress 206 responses without Content-Range, read Accept-Enco...
6b91995 zstd, huff0: keep the encoder bit writers in registers (#1245)
402c3a5 s2: Reject short index chunk in RemoveIndexHeaders (#1254)
29f5f81 build(deps): bump the github-actions group with 4 updates (#1252)
9b8ba61 dict: Stricter input validation (#1250)
da4df9c zstd: decode at full speed into exact-size destinations (#1246)
1971eec reject zip entries named "." in ReadDir (#1249)
Additional commits viewable in compare view

Updates golang.org/x/exp from 0.0.0-20260908205506-85c1c2202aba to 0.0.0-20261014143641-f0251eb4aa3e

Commits

See full diff in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20260928230214-8a89bd6388cc to 0.0.0-20261012220534-4341edf3f941

Commits

See full diff in compare view

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20260928230214-8a89bd6388cc to 0.0.0-20261005182115-fad411399dd8

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-modules group with 7 updates: | Package | From | To | | --- | --- | --- | | [github.com/Microsoft/go-winio](https://github.com/Microsoft/go-winio) | `0.6.3` | `0.6.4` | | [github.com/ebitengine/purego](https://github.com/ebitengine/purego) | `0.11.1` | `0.11.2` | | [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.31.0` | `2.32.0` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.20.1` | `1.20.3` | | [golang.org/x/exp](https://github.com/golang/exp) | `0.0.0-20260908205506-85c1c2202aba` | `0.0.0-20261014143641-f0251eb4aa3e` | | [google.golang.org/genproto/googleapis/api](https://github.com/googleapis/go-genproto) | `0.0.0-20260928230214-8a89bd6388cc` | `0.0.0-20261012220534-4341edf3f941` | | [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20260928230214-8a89bd6388cc` | `0.0.0-20261005182115-fad411399dd8` | Updates `github.com/Microsoft/go-winio` from 0.6.3 to 0.6.4 - [Release notes](https://github.com/Microsoft/go-winio/releases) - [Commits](microsoft/go-winio@v0.6.3...v0.6.4) Updates `github.com/ebitengine/purego` from 0.11.1 to 0.11.2 - [Release notes](https://github.com/ebitengine/purego/releases) - [Commits](ebitengine/purego@v0.11.1...v0.11.2) Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.31.0 to 2.32.0 - [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases) - [Commits](grpc-ecosystem/grpc-gateway@v2.31.0...v2.32.0) Updates `github.com/klauspost/compress` from 1.20.1 to 1.20.3 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.20.1...v1.20.3) Updates `golang.org/x/exp` from 0.0.0-20260908205506-85c1c2202aba to 0.0.0-20261014143641-f0251eb4aa3e - [Commits](https://github.com/golang/exp/commits) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260928230214-8a89bd6388cc to 0.0.0-20261012220534-4341edf3f941 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260928230214-8a89bd6388cc to 0.0.0-20261005182115-fad411399dd8 - [Commits](https://github.com/googleapis/go-genproto/commits) --- updated-dependencies: - dependency-name: github.com/Microsoft/go-winio dependency-version: 0.6.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/ebitengine/purego dependency-version: 0.11.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2 dependency-version: 2.32.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/klauspost/compress dependency-version: 1.20.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: golang.org/x/exp dependency-version: 0.0.0-20261014143641-f0251eb4aa3e dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20261012220534-4341edf3f941 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20261005182115-fad411399dd8 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 20, 2026

GrigoryPervakov approved these changes Oct 20, 2026

View reviewed changes

GrigoryPervakov enabled auto-merge (squash) October 20, 2026 14:11

GrigoryPervakov merged commit a13367a into main Oct 20, 2026
28 checks passed

GrigoryPervakov deleted the dependabot/go_modules/go-modules-cc3f73f58e branch October 20, 2026 14:14

Navigation Menu

Repository navigation

chores: bump the go-modules group with 7 updates - #371

chores: bump the go-modules group with 7 updates#371
GrigoryPervakov merged 1 commit into
mainfrom
dependabot/go_modules/go-modules-cc3f73f58e

dependabot Bot commented on behalf of github Oct 20, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 20, 2026

v0.6.4

What's Changed

v0.11.2

v2.32.0

What's Changed

New Contributors

v1.20.3

What's Changed

New Contributors

v1.20.2

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant