Skip to content

build(deps): bump the dependencies group across 1 directory with 11 updates - #683

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/dependencies-aaf92ca7e1
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/dependencies-aaf92ca7e1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 22, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 11 updates in the / directory:

Package From To
github.com/aws/aws-sdk-go-v2 1.43.6 1.47.0
github.com/aws/aws-sdk-go-v2/config 1.32.37 1.33.5
github.com/aws/aws-sdk-go-v2/credentials 1.19.36 1.20.5
github.com/aws/aws-sdk-go-v2/service/secretsmanager 1.44.6 1.50.0
github.com/aws/aws-sdk-go-v2/service/ssm 1.73.6 1.78.0
github.com/aws/aws-sdk-go-v2/service/sts 1.45.6 1.51.0
github.com/aws/smithy-go 1.27.8 1.28.1
google.golang.org/grpc 1.83.2 1.84.0
k8s.io/apimachinery 0.36.3 0.37.0
k8s.io/client-go 0.36.3 0.37.0
sigs.k8s.io/secrets-store-csi-driver 1.6.0 1.6.1

Updates github.com/aws/aws-sdk-go-v2 from 1.43.6 to 1.47.0

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.37 to 1.33.5

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.36 to 1.20.5

Commits
  • f2706c8 Release 2023-12-08
  • 1dac0c9 Regenerated Clients
  • cbd9216 Update API model
  • c7357bb fix: reinstate presence of retryer when functional opts run but still respect...
  • c5c34b3 fix: translation of ini service sections into shared config (#2416)
  • b3c7fbf update express cache key (#2414)
  • 9b90af4 fix: add non-vhostable buckets to path when using legacy endpoint resolver (#...
  • 0d643a8 Release 2023-12-07
  • e38b534 Regenerated Clients
  • f394daf Update SDK's smithy-go dependency to v1.19.0
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.44.6 to 1.50.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ssm from 1.73.6 to 1.78.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.45.6 to 1.51.0

Commits

Updates github.com/aws/smithy-go from 1.27.8 to 1.28.1

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-09-18)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.2
    • Bug Fix: Avoid allocating a slice in ValidateEndpointHost by indexing into the hostname instead of using strings.Split.
    • Bug Fix: Fix event stream decode panic on unknown header value type.
    • Bug Fix: Fix schema-serde CBOR decode panic on malformed string/blob length.
    • Bug Fix: JoinPath keeps a trailing slash when the added path is a slash.

Release (2026-08-26)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.1
    • Bug Fix: Fix broken AddLogger middleware since its insert point was removed.

Release (2026-08-25.2)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.0
    • Feature: Set Content-Length inline when the request body is set via SetStream. The ComputeContentLength middleware is now deprecated.

Release (2026-08-25)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.10
    • Bug Fix: Fix a data race on the underlying writer when an event stream is closed while an event write is in flight.
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-21)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.9
    • Bug Fix: Fix a generic event stream exception not carrying the error code and message from its payload.
    • Bug Fix: Fix an event stream not being closed when its connection is lost, which would cause a caller writing to the stream to block indefinitely.
    • Bug Fix: Fix deserialization of an empty list producing a nil slice instead of an empty one.

... (truncated)

Commits

Updates google.golang.org/grpc from 1.83.2 to 1.84.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.84.0

Behavior Changes

  • stats/otel: The grpc.lb.pick_first.* metrics have been removed and replaced with grpc.subchannel.* metrics. See gRFC A94 for more details. (#9215)

New Features

  • xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

  • client: Fix a bug where a ClientConn could get permanently stuck in IDLE when an RPC was canceled during stream creation. Previously, such cancellations triggered stream cleanup twice, corrupting the channel's idleness state and causing subsequent RPCs to fail with deadline exceeded errors. (#9191)
  • client: Fix a bug where non-gRPC HTTP responses ending with an empty DATA frame failed the RPC with status code Internal instead of preserving the HTTP-mapped status code and response body. (#9217)
  • credentials: Validate metadata returned by per-RPC credentials, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from credentials was sent to the server in outgoing HTTP/2 requests. (#9202)
  • credentials/sts: Prevent potential token leakage by disallowing HTTP redirects during STS token exchange. Previously, 3xx redirects were followed automatically, replaying the request body containing authentication tokens to the redirect destination. (#9299)
  • randomsubsetting: Ignore endpoints that contain no addresses. Previously, this could cause the policy to panic while computing hashes. (#9259)
  • stats/otel: Ensure method names are populated in trace spans when metrics are disabled. Previously, running with tracing enabled and metrics disabled resulted in server trace spans lacking the RPC method name (recording only "Recv."). (#9262)
  • transport: Return io.ErrUnexpectedEOF when EOF is encountered after partial header or message body reads. Previously, partial reads could return a plain io.EOF, failing to distinguish truncated data from a clean end of stream. (#9204)
  • transport: Validate metadata supplied by balancers (in PickResult.Metadata) and resolver addresses, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from these sources was sent to the server in outgoing HTTP/2 requests. (#9203)
  • xds: Fix a rare corner case that could prevent a cluster from being removed when it is no longer in use. (#9140)
  • xds: Fix panic during route matching for routes containing header matchers with empty exact_match strings. (#9223)
  • xds: Reject routes containing header matchers with empty prefix_match or suffix_match strings. Previously, this caused a panic during route matching. (#9223)
  • xds: Fix EDS drop policies being applied at a much lower rate than configured due to an integer overflow. (#9257)
  • xds: Reject EDS resources containing drop policies with unsupported denominators. Previously, such resources caused the client to panic when calculating drop rates. (#9218)
  • xds/rbac: Reject RBAC configurations containing nested Principal or Permission rules with :scheme or grpc- prefixed header matchers. Previously, such configurations could cause DENY policies to fail open. (#9258)
  • xds/rbac: Rewrite host header matchers to :authority in nested Principal and Permission rules. Previously, this rewrite only applied to top-level rules, causing nested host matchers to never match incoming requests and DENY policies to fail open. (#9258)
  • xds/rbac: Reject CidrRanges with an unset prefix length. Previously, an omitted prefix_len field caused a panic during RBAC configuration parsing. (#9250)

Performance Improvements

  • transport: Avoid a heap allocation when flushing shared write buffers. (#9233)
  • credentials/alts: Support dynamic frame size negotiation and add the GRPC_GO_EXPERIMENTAL_ALTS_MAX_FRAME_SIZE environment variable (default 4KiB, max 512KiB) to configure the maximum ALTS record frame size. (#9268)
Commits

Updates k8s.io/apimachinery from 0.36.3 to 0.37.0

Commits
  • 7164e39 Update dependencies to v0.37.0 tag
  • e55f9ba feat(api): Update node restriction admission to use new API
  • cb0680d Merge pull request #129125 from pohly/log-client-go-tools-apis
  • 97b2132 Merge pull request #140194 from gnufied/implement-volume-health-api
  • f21afab Add validation for camelcase in reason field
  • d7ad413 Merge pull request #140782 from dims/update-kube-openapi
  • e15ad7c Merge pull request #138808 from chenk008/cbor-streaminglist
  • 464b5d1 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
  • 0de14ec Merge pull request #140732 from thockin/dv-add-prefixed-label-key
  • 95258eb Merge pull request #134037 from ibihim/ibihim/2025-09-09_unsafe-delete-of-cor...
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.36.3 to 0.37.0

Commits
  • 2807644 Update dependencies to v0.37.0 tag
  • 50c6f9b metrics: Register: Fix incorrect assignment
  • 49f0a7b Merge pull request #140931 from pohly/client-go-changelog-adding-apigroups
  • 74d4b1e Merge pull request #140966 from alancaldelas/client-go-fakecustomstore-store
  • 2bf14f2 Merge pull request #140990 from xigang/revert-140448
  • 7b892fe Revert "Merge pull request #140448 from xigang/event_broadcaster_goroutine_leak"
  • df92378 Merge pull request #140334 from nojnhuh/dra-workloadresourceclaims-beta
  • 45a0ff1 client-go: restore FakeCustomStore conformance to cache.Store
  • 9d3b531 Merge pull request #139795 from omeryahud/worktree-kep-5963-device-compat-groups
  • 694f4eb apidiff: ignore adding entirely new API groups
  • Additional commits viewable in compare view

Updates sigs.k8s.io/secrets-store-csi-driver from 1.6.0 to 1.6.1

Release notes

Sourced from sigs.k8s.io/secrets-store-csi-driver's releases.

v1.6.1 - 2026-09-09

Changelog

Bug Fixes 🐞

  • 59006a99842bb8b34d78f53dd42c70a5ebe2672c fix: update vulnerable image dependencies
  • 6de69f60f602164bc427983eaae1b17b94a9f58f fix: prevent secret update hotloop
  • 4241090981d3f23532b52319d3da80c06e3da8ae fix: correct log format for missing targetpath modification time

Maintenance 🔧

  • 32c27ce90fe10cd40cf8dc6214472ef3ad77d0af chore: Bump golang to 1.26 and upgrade dependencies

Security Fix 🛡️

  • afd1b69037d4f3aa2e044c055fe0ab0a595f12b2 security: bump golang to 1.25.10 and kubectl to v1.34.8 to fix image CVEs
  • 919026973c2dffa26d2dcd0b643638b7837ba2af security: bump golang.org/x/net to v0.53.0 to fix GO-2026-4918
Changelog

Sourced from sigs.k8s.io/secrets-store-csi-driver's changelog.

Release Process

Overview

The release process consists of three phases: versioning, building and publishing

Versioning involves maintaining the following files:

  • Makefile - the Makefile contains a IMAGE_VERSION variable that defines the version of the project.
  • secrets-store-csi-driver.yaml - the Linux driver deployment yaml that contains the latest release tag image of the project.
  • secrets-store-csi-driver-windows.yaml - the Windows driver deployment yaml that contains the latest release tag image of the project.
  • deploy/ dir that contains all the secrets-store-csi-driver resources to be deployed to the cluster including the latest release tag image of the project.
  • .github/workflows/e2e.yaml file contains the default image tag released in staging and is used for e2e testing before releasing production images.

The steps below explain how to update these files. In addition, the repository should be tagged with the semantic version identifying the release.

Building involves obtaining a copy of the repository and triggering an automatic build as part of the prow job.

Publishing involves creating a release tag and creating a new Release on GitHub.

Prerequisites

These steps require your git remote to be configured so that origin is your fork and upstream is github.com/kubernetes-sigs/secrets-store-csi-driver.

The Makefiles and scripts assume the gnu version of sed. This can be installed on OSX with brew install gnu-sed.

The scripts also require the gh tool, available from https://github.com/cli/cli#installation

Versioning

There are two possible branches to take here:

  1. New Minor Release
  2. Backport Fixes to a Previous Minor Release

New Minor Release Branch Pre-Steps

  1. Compare the previous release tag with the proposed release tag and update docs/book/src if the published documentation would otherwise be stale (for example, Compare tags v1.6.1 to v1.6.0).
  2. Create a new release branch release-X.X using the "new branch" button in the UI (to avoid git push'ing directly to the repo). Write access to the repository is required in order to have access to the button.
  3. Wait for the new branch to receive branch protection.
  4. On your own fork, update the version to the semantic version of the new release in the Makefile and docker/Makefile similar to this.
  5. Commit the changes and push to remote repository and create a pull request from your forks to the newly created release-X.X branch
git checkout <RELEASE_BRANCH>
git checkout -b bump-version-<NEW_VERSION>
git commit -m "release: bump version to <NEW_VERSION> in <RELEASE_BRANCH>"
git push <YOUR FORK>

... (truncated)

Commits
  • 0e4ceeb Merge pull request #2084pmengelbert/automated-cherry-pick-of-#2083
  • 32a6f33 Promote staging manifest v1.6.1
  • cae9826 Merge pull request #2082 from enj/release-1.6
  • 324ceeb Use same QEMU version for image builds
  • 4f49f5a Trigger secrets-store-csi-driver-push-image
  • 51eb918 Merge pull request #2081 from enj/enj-patch-2
  • c5b6186 Trigger secrets-store-csi-driver-push-image
  • 20e0a72 Trigger secrets-store-csi-driver-push-image
  • b6c66c6 Merge pull request #2078 from stlaz/fix-arm64
  • 9a66cd0 bump golangci to fix linting issues
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…pdates

Bumps the dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.43.6` | `1.47.0` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.37` | `1.33.5` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.19.36` | `1.20.5` |
| [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2) | `1.44.6` | `1.50.0` |
| [github.com/aws/aws-sdk-go-v2/service/ssm](https://github.com/aws/aws-sdk-go-v2) | `1.73.6` | `1.78.0` |
| [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.45.6` | `1.51.0` |
| [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.27.8` | `1.28.1` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.2` | `1.84.0` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.36.3` | `0.37.0` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.3` | `0.37.0` |
| [sigs.k8s.io/secrets-store-csi-driver](https://github.com/kubernetes-sigs/secrets-store-csi-driver) | `1.6.0` | `1.6.1` |



Updates `github.com/aws/aws-sdk-go-v2` from 1.43.6 to 1.47.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.43.6...v1.47.0)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.37 to 1.33.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.37...config/v1.33.5)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.36 to 1.20.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.19.36...service/mq/v1.20.5)

Updates `github.com/aws/aws-sdk-go-v2/service/secretsmanager` from 1.44.6 to 1.50.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ssm/v1.44.6...service/s3/v1.50.0)

Updates `github.com/aws/aws-sdk-go-v2/service/ssm` from 1.73.6 to 1.78.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ssm/v1.73.6...service/s3/v1.78.0)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.45.6 to 1.51.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/sts/v1.45.6...service/s3/v1.51.0)

Updates `github.com/aws/smithy-go` from 1.27.8 to 1.28.1
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.27.8...v1.28.1)

Updates `google.golang.org/grpc` from 1.83.2 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.2...v1.84.0)

Updates `k8s.io/apimachinery` from 0.36.3 to 0.37.0
- [Commits](kubernetes/apimachinery@v0.36.3...v0.37.0)

Updates `k8s.io/client-go` from 0.36.3 to 0.37.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.36.3...v0.37.0)

Updates `sigs.k8s.io/secrets-store-csi-driver` from 1.6.0 to 1.6.1
- [Release notes](https://github.com/kubernetes-sigs/secrets-store-csi-driver/releases)
- [Changelog](https://github.com/kubernetes-sigs/secrets-store-csi-driver/blob/main/docs/RELEASE.md)
- [Commits](kubernetes-sigs/secrets-store-csi-driver@v1.6.0...v1.6.1)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.20.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/secretsmanager
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ssm
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sigs.k8s.io/secrets-store-csi-driver
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 22, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 22, 2026 08:13
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 22, 2026
@codecov

codecov Bot commented Sep 22, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 61.62%. Comparing base (a8f9f58) to head (18d0fda).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #683   +/-   ##
=======================================
  Coverage   61.62%   61.62%           
=======================================
  Files          11       11           
  Lines         740      740           
=======================================
  Hits          456      456           
  Misses        265      265           
  Partials       19       19           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

This branch had an error being deployed

1 failed deployment
code-review — 18d0fda7 Deployed Sep 22, 2026 by dependabot[bot] via review #100
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants