chore(deps): bump the go group across 12 directories with 49 updates by dependabot[bot] · Pull Request #6789 · hashicorp/boundary

dependabot · 2026-10-09T16:38:00Z

Bumps the go group with 39 updates in the / directory:

Package	From	To
github.com/coder/websocket	`1.8.14`	`1.8.15`
github.com/fatih/color	`1.18.0`	`1.19.0`
github.com/go-ldap/ldap/v3	`3.4.12`	`3.4.14`
github.com/golang-migrate/migrate/v4	`4.19.1`	`4.20.1`
github.com/grpc-ecosystem/grpc-gateway/v2	`2.27.8`	`2.31.0`
github.com/hashicorp/cap	`0.12.0`	`0.14.0`
github.com/hashicorp/go-bexpr	`0.1.15`	`0.1.16`
github.com/hashicorp/go-kms-wrapping/v2	`2.0.20`	`2.0.26`
github.com/hashicorp/go-uuid	`1.0.3`	`1.0.4`
github.com/hashicorp/go-version	`1.8.0`	`1.9.0`
github.com/hashicorp/nodeenrollment	`0.2.15`	`0.2.17`
github.com/hashicorp/vault/api	`1.22.0`	`1.23.0`
github.com/jackc/pgx/v5	`5.9.2`	`5.11.0`
github.com/lib/pq	`1.11.2`	`1.12.3`
github.com/mattn/go-colorable	`0.1.14`	`0.1.16`
github.com/miekg/dns	`1.1.72`	`1.1.73`
github.com/moby/moby/api	`1.53.0`	`1.54.2`
github.com/moby/moby/client	`0.2.2`	`0.4.1`
github.com/mr-tron/base58	`1.2.0`	`1.3.0`
github.com/pires/go-proxyproto	`0.11.0`	`0.15.0`
github.com/prometheus/client_golang	`1.23.2`	`1.24.1`
github.com/sevlyar/go-daemon	`0.1.6`	`0.1.7`
github.com/stretchr/testify	`1.11.1`	`1.12.1`
github.com/zalando/go-keyring	`0.2.6`	`0.2.8`
go.uber.org/atomic	`1.11.0`	`1.12.0`
golang.org/x/crypto	`0.56.0`	`0.57.0`
golang.org/x/exp	`0.0.0-20250408133849-7e4ce0ab07d0`	`0.0.0-20260908205506-85c1c2202aba`
golang.org/x/net	`0.58.0`	`0.59.0`
golang.org/x/sync	`0.22.0`	`0.23.0`
golang.org/x/sys	`0.47.0`	`0.48.0`
golang.org/x/term	`0.45.0`	`0.46.0`
golang.org/x/text	`0.41.0`	`0.42.0`
golang.org/x/tools	`0.48.0`	`0.50.0`
google.golang.org/genproto	`0.0.0-20250603155806-513f23925822`	`0.0.0-20260630182238-925bb5da69e7`
google.golang.org/genproto/googleapis/api	`0.0.0-20260817212433-ac3dfec99bb1`	`0.0.0-20260921155816-b14227669459`
google.golang.org/grpc	`1.85.0-dev.0.20260825072537-93e31b48545e`	`1.86.0-dev`
google.golang.org/grpc/cmd/protoc-gen-go-grpc	`1.6.1`	`1.6.2`
gorm.io/driver/postgres	`1.6.0`	`1.6.3`
mvdan.cc/gofumpt	`0.9.2`	`0.12.0`

Bumps the go group with 9 updates in the /api directory:

Package	From	To
github.com/coder/websocket	`1.8.14`	`1.8.15`
github.com/hashicorp/go-kms-wrapping/v2	`2.0.20`	`2.0.26`
github.com/hashicorp/go-uuid	`1.0.3`	`1.0.4`
github.com/mr-tron/base58	`1.2.0`	`1.3.0`
github.com/stretchr/testify	`1.11.1`	`1.12.1`
go.uber.org/atomic	`1.11.0`	`1.12.0`
google.golang.org/grpc	`1.85.0-dev.0.20260825072537-93e31b48545e`	`1.86.0-dev`
github.com/hashicorp/boundary/sdk	`0.0.56`	`0.0.60`
golang.org/x/time	`0.14.0`	`0.16.0`

Bumps the go group with 2 updates in the /plugins/boundary/mains/aws directory: github.com/hashicorp/boundary/sdk and github.com/hashicorp/boundary-plugin-aws.
Bumps the go group with 1 update in the /plugins/boundary/mains/azure directory: github.com/hashicorp/boundary/sdk.
Bumps the go group with 1 update in the /plugins/boundary/mains/gcp directory: github.com/hashicorp/boundary/sdk.
Bumps the go group with 2 updates in the /plugins/boundary/mains/minio directory: github.com/hashicorp/boundary/sdk and github.com/hashicorp/boundary-plugin-minio.
Bumps the go group with 1 update in the /plugins/kms/mains/alicloudkms directory: github.com/hashicorp/go-kms-wrapping/wrappers/alicloudkms/v2.
Bumps the go group with 1 update in the /plugins/kms/mains/awskms directory: github.com/hashicorp/go-kms-wrapping/wrappers/awskms/v4.
Bumps the go group with 1 update in the /plugins/kms/mains/azurekeyvault directory: github.com/hashicorp/go-kms-wrapping/wrappers/azurekeyvault/v2.
Bumps the go group with 1 update in the /plugins/kms/mains/gcpckms directory: github.com/hashicorp/go-kms-wrapping/wrappers/gcpckms/v2.
Bumps the go group with 1 update in the /plugins/kms/mains/ocikms directory: github.com/hashicorp/go-kms-wrapping/wrappers/ocikms/v2.
Bumps the go group with 7 updates in the /sdk directory:

Package	From	To
github.com/coder/websocket	`1.8.14`	`1.8.15`
github.com/grpc-ecosystem/grpc-gateway/v2	`2.27.8`	`2.31.0`
github.com/hashicorp/go-kms-wrapping/v2	`2.0.20`	`2.0.26`
github.com/stretchr/testify	`1.11.1`	`1.12.1`
google.golang.org/genproto/googleapis/api	`0.0.0-20260817212433-ac3dfec99bb1`	`0.0.0-20260921155816-b14227669459`
google.golang.org/grpc	`1.85.0-dev.0.20260825072537-93e31b48545e`	`1.86.0-dev`
github.com/hashicorp/go-plugin	`1.7.0`	`1.8.0`

Updates github.com/coder/websocket from 1.8.14 to 1.8.15

Release notes

Sourced from github.com/coder/websocket's releases.

v1.8.15

Changes

chore: fix typo in Accept function by @IgorSilvestre in coder/websocket#544

fix: transmit in single frame when compression enabled by @DanielleMaywood in coder/websocket#552

docs: add document for AI agents (AGENTS.md) by @mafredri in coder/websocket#547

docs: remove mention of resolved issue in README by @tamird in coder/websocket#556

docs: fix lint issue by @mafredri in coder/websocket#557

docs: fix roadmap links after repo transfer by @GeObts in coder/websocket#558

avoid per-frame cleanup closures on read to remove 2 allocs per frame read by @mitchellh in coder/websocket#565

conn: skip timeout callbacks for background contexts by @mitchellh in coder/websocket#566

New Contributors

@IgorSilvestre made their first contribution in coder/websocket#544

@tamird made their first contribution in coder/websocket#556

@GeObts made their first contribution in coder/websocket#558

@mitchellh made their first contribution in coder/websocket#565

Full Changelog: coder/websocket@v1.8.14...v1.8.15

Commits

9c8faad conn: skip timeout callbacks for background contexts (#566)
7039364 avoid per-frame cleanup closures on read to remove 2 allocs per frame read (#...
d099e16 docs: fix roadmap links (#558)
c98e9dc docs: fix lint issue (#557)
39b7b07 docs: remove mention of resolved issue in README (#556)
9f473ad docs: add document for AI agents (AGENTS.md) (#547)
8d3545a fix: transmit in single frame when compression enabled (#552)
8bf6dd2 chore: fix typo in Accept function (#544)
See full diff in compare view

Updates github.com/fatih/color from 1.18.0 to 1.19.0

Release notes

Sourced from github.com/fatih/color's releases.

v1.19.0

What's Changed

Bump golang.org/x/sys from 0.25.0 to 0.28.0 by @dependabot[bot] in fatih/color#246

Fix for issue #230 set/unsetwriter symmetric wrt color support detection by @ataypamart in fatih/color#243

chore: go mod cleanup by @sashamelentyev in fatih/color#244

Bump golang.org/x/sys from 0.28.0 to 0.30.0 by @dependabot[bot] in fatih/color#249

Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14 by @dependabot[bot] in fatih/color#248

Update CI and go deps by @fatih in fatih/color#254

Bump golang.org/x/sys from 0.31.0 to 0.37.0 by @dependabot[bot] in fatih/color#268

fix: include escape codes in byte counts from Fprint, Fprintf by @qualidafial in fatih/color#282

Bump golang.org/x/sys from 0.37.0 to 0.40.0 by @dependabot[bot] in fatih/color#277

fix: add nil check for os.Stdout to prevent panic on Windows services by @majiayu000 in fatih/color#275

Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0 by @dependabot[bot] in fatih/color#259

Bump actions/checkout from 4 to 6 by @dependabot[bot] in fatih/color#273

Optimize Color.Equals performance (O(n²) → O(n)) by @UnSubble in fatih/color#269

Bump actions/setup-go from 5 to 6 by @dependabot[bot] in fatih/color#266

New Contributors

@ataypamart made their first contribution in fatih/color#243

@sashamelentyev made their first contribution in fatih/color#244

@qualidafial made their first contribution in fatih/color#282

@majiayu000 made their first contribution in fatih/color#275

@UnSubble made their first contribution in fatih/color#269

Full Changelog: fatih/color@v1.18.0...v1.19.0

Commits

ca25f6e Merge pull request #266 from fatih/dependabot/github_actions/actions/setup-go-6
1205984 Bump actions/setup-go from 5 to 6
5715c20 Merge pull request #269 from UnSubble/main
2f6e200 Merge branch 'main' into main
f72ec94 Merge pull request #273 from fatih/dependabot/github_actions/actions/checkout-6
848e633 Merge branch 'main' into main
4c2cd34 Add tests
7f812f0 Bump actions/checkout from 4 to 6
b7fc9f9 Merge pull request #259 from fatih/dependabot/github_actions/dominikh/staticc...
239a88f Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0
Additional commits viewable in compare view

Updates github.com/go-ldap/ldap/v3 from 3.4.12 to 3.4.14

Release notes

Sourced from github.com/go-ldap/ldap/v3's releases.

v3.4.14

I want to thank everyone who contributed in the recents months. Compared to last year, the number of activities and PRs (including open ones) has increased dramatically. I would like to thank everyone who contributed to the project.

Personal note: Please keep in mind that this project is not funded or supported by a large company or similar organization. We work on the library in our free time after work. I appreciate your support, but please keep this in mind (including with other open-source projects).

What's Changed

make stop-local-server fails with Docker due to unsupported -t option by @t2y in go-ldap/ldap#584

Fix panic on malformed LDAP responses by @Bahtya in go-ldap/ldap#586

chore(deps): bump github.com/Azure/go-ntlmssp from 0.1.0 to 0.1.1 in /v3 by @dependabot[bot] in go-ldap/ldap#587

Reject unescaped special characters in DN values per RFC 4514 by @t2y in go-ldap/ldap#588

v3/control: replace unchecked type asserts in DecodeControl with comma-ok by @c-tonneslan in go-ldap/ldap#589

fix(conn): parse ldapi:// URLs per RFC 4516 by @c-tonneslan in go-ldap/ldap#590

fix: decode Server Side Sorting controlValue as BER-encoded OCTET STRING per RFC 2891 by @ahanwhite in go-ldap/ldap#593

fix: generate digest-md5 cnonce with crypto/rand by @netliomax25-code in go-ldap/ldap#594

fix: escape quoted-string metacharacters in digest-md5 response by @netliomax25-code in go-ldap/ldap#595

fix: escape attribute and matching rule in DecompileFilter by @netliomax25-code in go-ldap/ldap#596

fix: set Result code when decoding ServerSideSortingResult control by @netliomax25-code in go-ldap/ldap#597

fix: reject trailing bytes in hex-encoded DN attribute value by @netliomax25-code in go-ldap/ldap#598

fix: synchronize writes to Conn.err with GetLastError by @netliomax25-code in go-ldap/ldap#601

unescape quoted-pair sequences in digest-md5 challenge parser by @netliomax25-code in go-ldap/ldap#600

fix: avoid uint16 overflow in gssapi UnmarshalWrapToken offset by @netliomax25-code in go-ldap/ldap#602

fix(conn): finish Unbind message context to prevent Close deadlock by @efd6 in go-ldap/ldap#599

fix: compare multi-valued RDN attributes as a multiset by @netliomax25-code in go-ldap/ldap#604

fix: respect backslash parity for escaped trailing space in DN value by @netliomax25-code in go-ldap/ldap#603

fix: skip empty referral sequence in getReferral by @netliomax25-code in go-ldap/ldap#610

fix: guard malformed paging control in DecodeControl by @netliomax25-code in go-ldap/ldap#611

handle linear whitespace in digest-md5 challenge parser by @netliomax25-code in go-ldap/ldap#607

chore: crypto update by @CameronJHall in go-ldap/ldap#613

fix: guard malformed responseValue in PasswordModify by @netliomax25-code in go-ldap/ldap#614

decode extended responseName by context class by @netliomax25-code in go-ldap/ldap#605

fix: prevent SearchAsync goroutine leak when context is cancelled during send by @t2y in go-ldap/ldap#615

fix: guard nil responseValue when parsing WhoAmI result by @johnweldon in go-ldap/ldap#617

fix: guard constructed-form attributeType in server-side sort decode by @johnweldon in go-ldap/ldap#618

chore: Update dependencies by @cpuschma in go-ldap/ldap#620

New Contributors

@Bahtya made their first contribution in go-ldap/ldap#586

@c-tonneslan made their first contribution in go-ldap/ldap#589

@ahanwhite made their first contribution in go-ldap/ldap#593

@netliomax25-code made their first contribution in go-ldap/ldap#594

@efd6 made their first contribution in go-ldap/ldap#599

@CameronJHall made their first contribution in go-ldap/ldap#613

Full Changelog: go-ldap/ldap@v3.4.13...v3.4.14

v3.4.13

What's Changed

fix DirSync flags encoding by @johnallers in go-ldap/ldap#571

Remove execute bit from test file by @gibmat in go-ldap/ldap#572

chore(deps): bump golang.org/x/crypto from 0.36.0 to 0.45.0 in /v3 by @dependabot[bot] in go-ldap/ldap#573

... (truncated)

Commits

9e343e2 chore: update dependencies (#620)
c381fd4 fix: guard constructed-form attributeType in server-side sort decode (#618)
be69007 fix: guard nil responseValue when parsing WhoAmI result (#617)
d6d6b04 fix: prevent SearchAsync goroutine leak when context is cancelled during send...
c90b197 decode extended responseName by context class (#605)
ab9c0c1 guard malformed responseValue decode in PasswordModify (#614)
8656c7a chore(deps): bump golang.org/x/net from 0.50.0 to 0.55.0 in /v3 (#613)
8a98971 handle linear whitespace in digest-md5 challenge parser (#607)
0059675 fix: guard malformed paging control in DecodeControl (#611)
189d84e fix: skip empty referral sequence in getReferral (#610)
Additional commits viewable in compare view

Updates github.com/golang-migrate/migrate/v4 from 4.19.1 to 4.20.1

Release notes

Sourced from github.com/golang-migrate/migrate/v4's releases.

v4.20.1

[!NOTE] This release is the immediate mitigation of the CI / release failure in v4.20.0, to distribute the latest version to all registries.

What's Changed

ci: fix GoReleaser build matrix by @Fontinalis in golang-migrate/migrate#1434

Full Changelog: golang-migrate/migrate@v4.20.0...v4.20.1

v4.20.0

[!WARNING] Due to a bug in the release workflow, GoReleaser failed and v4.20.0 was not published to Docker or other package registries. We did not want to re-tag (due to the possible impacts of that action), so we will attempt to backfill this shortly.

To mitigate this in the immediate term, v4.20.1 is being released with the patched workflow and distributed to all registries.

What's Changed

ci: update golangci-lint to v2 by @PascalBourdier in golang-migrate/migrate#1341

Upgrade pgx v5 to latest version by @achanda in golang-migrate/migrate#1320

Bump go.opentelemetry.io/otel/sdk from 1.36.0 to 1.40.0 in the go_modules group across 1 directory by @dependabot[bot] in golang-migrate/migrate#1361

fix(security): migrate docker/docker to moby/moby modules (BlackDuck Polaris findings) by @fzl-22 in golang-migrate/migrate#1402

Bump google.golang.org/grpc from 1.74.2 to 1.79.3 in the go_modules group across 1 directory by @dependabot[bot] in golang-migrate/migrate#1373

build: use Go 1.25 and 1.26 to build project by @joschi in golang-migrate/migrate#1389

test(yugabyte): run YugabyteDB tests with supported versions by @joschi in golang-migrate/migrate#1396

spanner: Update spansql statement parser version by @adamhicks in golang-migrate/migrate#1398

build: bump alpine docker image to 3.24 by @Fontinalis in golang-migrate/migrate#1431

fix(mongodb): replace deprecated DecodeBytes by @Fontinalis in golang-migrate/migrate#1432

build(deps): bump the go_modules group across 1 directory with 3 updates by @dependabot[bot] in golang-migrate/migrate#1429

fix(source/aws_s3): paginate ListObjects to load >1000 migrations by @EylonLevy in golang-migrate/migrate#1412

perf(source): build migrations index lazily to avoid quadratic startup by @YuheiTakagawa in golang-migrate/migrate#1424

test: add MSSQL 2025 to test matrix by @joschi in golang-migrate/migrate#1390

test: update PostgreSQL test matrix by @joschi in golang-migrate/migrate#1388

New Contributors

@PascalBourdier made their first contribution in golang-migrate/migrate#1341

@achanda made their first contribution in golang-migrate/migrate#1320

@fzl-22 made their first contribution in golang-migrate/migrate#1402

@adamhicks made their first contribution in golang-migrate/migrate#1398

@EylonLevy made their first contribution in golang-migrate/migrate#1412

@YuheiTakagawa made their first contribution in golang-migrate/migrate#1424

Full Changelog: golang-migrate/migrate@v4.19.1...v4.20.0

Commits

504568a ci: fix GoReleaser build matrix (#1434)
9429a3c test: update PostgreSQL test matrix (#1388)
276d060 test: add MSSQL 2025 to test matrix (#1390)
10173f0 perf(source): build migrations index lazily to avoid quadratic startup (#1424)
5bcd008 fix(source/aws_s3): paginate ListObjects to load >1000 migrations (#1412)
15c4690 build(deps): bump the go_modules group across 1 directory with 3 updates (#1429)
3eac5d5 fix(mongodb): replace deprecated DecodeBytes (#1432)
01a9643 build: bump alpine docker image to 3.24 (#1431)
7724986 spanner: Update spansql statement parser version (#1398)
18966c7 test(yugabyte): run YugabyteDB tests with supported versions (#1396)
Additional commits viewable in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.8 to 2.31.0

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.31.0

What's Changed

Update minimum Go version from 1.25.0 to 1.26.0 by @johanbrandhorst in grpc-ecosystem/grpc-gateway#7269

fix(openapiv2): omit oneof siblings of path parameters from query parameters by @hsdfat in grpc-ecosystem/grpc-gateway#7207

fix: import response type package when response_body is set by @MicBun in grpc-ecosystem/grpc-gateway#7225

openapiv3: add extension (x-*) support by @Abmun in grpc-ecosystem/grpc-gateway#7237

docs: add a security considerations page by @cleitonaugusto in grpc-ecosystem/grpc-gateway#7282

fix(openapiv2): emit map key type in query parameter names by @iamrajiv in grpc-ecosystem/grpc-gateway#7307

Fix template_test format strings by @skitt in grpc-ecosystem/grpc-gateway#7323

Add edition 2026 support by @printfn in grpc-ecosystem/grpc-gateway#7352

fix(openapiv2): emit a primitive type for well-known object query parameters by @iamrajiv in grpc-ecosystem/grpc-gateway#7351

reject out-of-range numeric enum query values in parseField by @itecz26 in grpc-ecosystem/grpc-gateway#7369

feat(protoc-gen-openapiv3): support response_body binding by @tobiaskohlbau in grpc-ecosystem/grpc-gateway#7371

clamp overflowing grpc-timeout to max duration by @itecz26 in grpc-ecosystem/grpc-gateway#7382

validate forwarded header values before adding to grpc metadata by @itecz26 in grpc-ecosystem/grpc-gateway#7390

reject out-of-range enum numbers in jsonpb non-proto decoder by @itecz26 in grpc-ecosystem/grpc-gateway#7397

fix(openapiv2): emit minItems and maxItems on query parameters by @wofiporia in grpc-ecosystem/grpc-gateway#7389

reject grpc-metadata headers mapping into reserved grpcgateway- namespace by @itecz26 in grpc-ecosystem/grpc-gateway#7401

parse integer and enum path params as base 10 in convert.go by @itecz26 in grpc-ecosystem/grpc-gateway#7405

protoc-gen-openapiv2: allow proto files without a go_package option by @cipherprofessor in grpc-ecosystem/grpc-gateway#7409

runtime: deep wildcard (**) must not match zero segments after a preceding literal by @cipherprofessor in grpc-ecosystem/grpc-gateway#7412

New Contributors

@MicBun made their first contribution in grpc-ecosystem/grpc-gateway#7225

@Abmun made their first contribution in grpc-ecosystem/grpc-gateway#7237

@cleitonaugusto made their first contribution in grpc-ecosystem/grpc-gateway#7282

@skitt made their first contribution in grpc-ecosystem/grpc-gateway#7323

@itecz26 made their first contribution in grpc-ecosystem/grpc-gateway#7369

@tobiaskohlbau made their first contribution in grpc-ecosystem/grpc-gateway#7371

@wofiporia made their first contribution in grpc-ecosystem/grpc-gateway#7389

@cipherprofessor made their first contribution in grpc-ecosystem/grpc-gateway#7409

Full Changelog: grpc-ecosystem/grpc-gateway@v2.30.0...v2.31.0

v2.30.0

New Features

protoc-gen-openapiv3: Brand new minimal OpenAPI v3 generator (#6623), plus follow-ups:

Visibility selectors (#6673)

disable_default_errors option (#6672)

Annotation support (#6681)

Improved plugin error surfacing (#6937)

field_behavior REQUIRED support for query parameters (#7180) — @maydietwice

openapiv3-merge: New standalone tool for merging OpenAPI v3 documents (#6771) — @johanbrandhorst

protoc-gen-openapiv2 moved to the protoc toolchain (#6988) — @EliSauder

Fixes

Change PR Contributor

... (truncated)

Commits

1dbf071 runtime: deep wildcard (**) must not match zero segments after a preceding li...
53e28c4 chore(deps): update google/oss-fuzz digest to bd2ce21 (#7413)
84afe50 chore(deps): update googleapis digest to 665784f (#7411)
dc62ab3 chore(deps): update google/oss-fuzz digest to bee2a55 (#7410)
87fcd67 protoc-gen-openapiv2: allow proto files without a go_package option (#7409)
e534705 fix(deps): update module github.com/go-openapi/errors to v0.22.9 (#7408)
5fc39f4 chore(deps): update googleapis digest to cdf35e7 (#7407)
a2e3b17 chore(deps): update dependency com_github_bazelbuild_buildtools to v10.1.0 (#...
296885a chore(deps): update googleapis digest to d22e357 (#7406)
ca06c22 parse integer and enum path params as base 10 in convert.go (#7405)
Additional commits viewable in compare view

Updates github.com/hashicorp/cap from 0.12.0 to 0.14.0

Release notes

Sourced from github.com/hashicorp/cap's releases.

v0.14.0

What's Changed

hardening: guard against homoglyph keys during claims (un)marshaling by @pkazmierczak in hashicorp/cap#191

[COMPLIANCE] Add/Update Copyright Headers by @hashicorp-copywrite[bot] in hashicorp/cap#190

Azure EntraID Group Overage Claim Resolution by @RyanDerr in hashicorp/cap#200

New Contributors

@pkazmierczak made their first contribution in hashicorp/cap#191

@RyanDerr made their first contribution in hashicorp/cap#200

@bgajjala8 made their first contribution in hashicorp/cap#200 Full Changelog: hashicorp/cap@v0.13.0...v0.14.0

v0.13.0

What's Changed

chore: update CHANGELOG for 0.12.0 by @johanbrandhorst in hashicorp/cap#175

[IND-4227] [COMPLIANCE] Update Copyright Headers (Batch 1 of 1) by @oss-core-libraries-dashboard[bot] in hashicorp/cap#174

fix unbounded split by @Ayomi-gh in hashicorp/cap#177

[VAULT-43467] saml: resolve CVE-2026-33487, GHSA-hwqm-qvj9-4jr2, and GHSA-pcgw-qcv5-h8ch by @ryancragun in hashicorp/cap#180

chore: update go-jose to address CVE-2026-34986 by @irenarindos in hashicorp/cap#185

JWT: add optional KeySetSearcher callback to Validator by @suraj-simha in hashicorp/cap#187

chore: update CHANGELOG for 0.13.0 by @jimlambrt in hashicorp/cap#189

New Contributors

@oss-core-libraries-dashboard[bot] made their first contribution in hashicorp/cap#174

@Ayomi-gh made their first contribution in hashicorp/cap#177

@ryancragun made their first contribution in hashicorp/cap#180

@irenarindos made their first contribution in hashicorp/cap#185

@suraj-simha made their first contribution in hashicorp/cap#187

Full Changelog: hashicorp/cap@v0.12.0...v0.13.0

Changelog

Sourced from github.com/hashicorp/cap's changelog.

cap CHANGELOG

Canonical reference for changes, improvements, and bugfixes for cap.

Next

saml: fix InResponseTo request-correlation bypass ([PR #192](hashicorp/cap#192))

0.13.0

feat (jwt): add optional callback to dynamically fetch key sets in validator ([PR #187](hashicorp/cap#187))

fix (saml): always validate response and assertion signatures when signatures are present ([PR #180](hashicorp/cap#180))

Commits

52edefb feat(oidc): resolve Azure group claims during token exchange
247c6a6 feat(oidc): Add EffectiveClaims Method On Tk To Merge Resolved Overage Claims...
f3396fd feat(azure): Creation of azure package for fetching user groups from distrubu...
4415c37 feat(oidc): Creation Of New Provider Type Option For Provider Config
ec7615e [COMPLIANCE] Add/Update Copyright Headers (#190)
cf52420 hardening: guard against homoglyph keys during claims (un)marshaling (#191)
2bc0bff chore: update CHANGELOG for 0.13.0 (#189)
9d4dd6d JWT: add optional KeySetSearcher callback to Validator (#187)
dfeea34 chore: update go-jose to address CVE-2026-34986 (#185)
2026dd0 [VAULT-43467] saml: resolve CVE-2026-33487, GHSA-hwqm-qvj9-4jr2, and GHSA-pcg...
Additional commits viewable in compare view

Updates github.com/hashicorp/go-bexpr from 0.1.15 to 0.1.16

Release notes

Sourced from github.com/hashicorp/go-bexpr's releases.

v0.1.16

Improvements

Adds "is nil" and "is not nil" selector. [GH-129]

Bug Fixes

Fixed a bug where using "is empty" or "is not empty" with a non-slice or non-map value would panic. [GH-129]

Full Changelog: hashicorp/go-bexpr@v0.1.15...v0.1.16

Changelog

Sourced from github.com/hashicorp/go-bexpr's changelog.

0.1.16 (March 5, 2026)

Improvements

Adds "is nil" and "is not nil" selector. [GH-129]

Bug Fixes

Fixed a bug where using "is empty" or "is not empty" with a non-slice or non-map value would panic. [GH-129]

Security

Commits

51ee900 changelog for 0.1.16 (#130)
2fcb6f9 support "is nil" and "is not nil" and make "is empty" safer (#129)
27250df [chore] : Bump actions/setup-go from 6.2.0 to 6.3.0 (#127)
b31a265 [chore] : Bump actions/upload-artifact from 6.0.0 to 7.0.0 (#128)
e811c0e [chore] : Bump golangci/golangci-lint-action from 3.4.0 to 9.2.0 (#122)
562069a [chore] : Bump actions/checkout from 6.0.0 to 6.0.2 (#125)
010cd61 [chore] : Bump actions/setup-go from 6.0.0 to 6.2.0 (#124)
61f1983 [chore] : Bump actions/upload-artifact from 5.0.0 to 6.0.0 (#123)
ee482b7 [chore] : Bump actions/checkout from 5.0.0 to 6.0.0 (#118)
5e27ec8 Merge pull request #116 from hashicorp/compliance/update-headers
Additional commits viewable in compare view

Updates github.com/hashicorp/go-kms-wrapping/v2 from 2.0.20 to 2.0.26

Commits

5b971a6 Release commit for v2.0.26

Bumps the go group with 39 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/coder/websocket](https://github.com/coder/websocket) | `1.8.14` | `1.8.15` | | [github.com/fatih/color](https://github.com/fatih/color) | `1.18.0` | `1.19.0` | | [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap) | `3.4.12` | `3.4.14` | | [github.com/golang-migrate/migrate/v4](https://github.com/golang-migrate/migrate) | `4.19.1` | `4.20.1` | | [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.27.8` | `2.31.0` | | [github.com/hashicorp/cap](https://github.com/hashicorp/cap) | `0.12.0` | `0.14.0` | | [github.com/hashicorp/go-bexpr](https://github.com/hashicorp/go-bexpr) | `0.1.15` | `0.1.16` | | [github.com/hashicorp/go-kms-wrapping/v2](https://github.com/hashicorp/go-kms-wrapping) | `2.0.20` | `2.0.26` | | [github.com/hashicorp/go-uuid](https://github.com/hashicorp/go-uuid) | `1.0.3` | `1.0.4` | | [github.com/hashicorp/go-version](https://github.com/hashicorp/go-version) | `1.8.0` | `1.9.0` | | [github.com/hashicorp/nodeenrollment](https://github.com/hashicorp/nodeenrollment) | `0.2.15` | `0.2.17` | | [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault) | `1.22.0` | `1.23.0` | | [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.11.0` | | [github.com/lib/pq](https://github.com/lib/pq) | `1.11.2` | `1.12.3` | | [github.com/mattn/go-colorable](https://github.com/mattn/go-colorable) | `0.1.14` | `0.1.16` | | [github.com/miekg/dns](https://github.com/miekg/dns) | `1.1.72` | `1.1.73` | | [github.com/moby/moby/api](https://github.com/moby/moby) | `1.53.0` | `1.54.2` | | [github.com/moby/moby/client](https://github.com/moby/moby) | `0.2.2` | `0.4.1` | | [github.com/mr-tron/base58](https://github.com/mr-tron/base58) | `1.2.0` | `1.3.0` | | [github.com/pires/go-proxyproto](https://github.com/pires/go-proxyproto) | `0.11.0` | `0.15.0` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.23.2` | `1.24.1` | | [github.com/sevlyar/go-daemon](https://github.com/sevlyar/go-daemon) | `0.1.6` | `0.1.7` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` | | [github.com/zalando/go-keyring](https://github.com/zalando/go-keyring) | `0.2.6` | `0.2.8` | | [go.uber.org/atomic](https://github.com/uber-go/atomic) | `1.11.0` | `1.12.0` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.56.0` | `0.57.0` | | [golang.org/x/exp](https://github.com/golang/exp) | `0.0.0-20250408133849-7e4ce0ab07d0` | `0.0.0-20260908205506-85c1c2202aba` | | [golang.org/x/net](https://github.com/golang/net) | `0.58.0` | `0.59.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.22.0` | `0.23.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.47.0` | `0.48.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.45.0` | `0.46.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.41.0` | `0.42.0` | | [golang.org/x/tools](https://github.com/golang/tools) | `0.48.0` | `0.50.0` | | [google.golang.org/genproto](https://github.com/googleapis/go-genproto) | `0.0.0-20250603155806-513f23925822` | `0.0.0-20260630182238-925bb5da69e7` | | [google.golang.org/genproto/googleapis/api](https://github.com/googleapis/go-genproto) | `0.0.0-20260817212433-ac3dfec99bb1` | `0.0.0-20260921155816-b14227669459` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.85.0-dev.0.20260825072537-93e31b48545e` | `1.86.0-dev` | | [google.golang.org/grpc/cmd/protoc-gen-go-grpc](https://github.com/grpc/grpc-go) | `1.6.1` | `1.6.2` | | [gorm.io/driver/postgres](https://github.com/go-gorm/postgres) | `1.6.0` | `1.6.3` | | [mvdan.cc/gofumpt](https://github.com/mvdan/gofumpt) | `0.9.2` | `0.12.0` | Bumps the go group with 9 updates in the /api directory: | Package | From | To | | --- | --- | --- | | [github.com/coder/websocket](https://github.com/coder/websocket) | `1.8.14` | `1.8.15` | | [github.com/hashicorp/go-kms-wrapping/v2](https://github.com/hashicorp/go-kms-wrapping) | `2.0.20` | `2.0.26` | | [github.com/hashicorp/go-uuid](https://github.com/hashicorp/go-uuid) | `1.0.3` | `1.0.4` | | [github.com/mr-tron/base58](https://github.com/mr-tron/base58) | `1.2.0` | `1.3.0` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` | | [go.uber.org/atomic](https://github.com/uber-go/atomic) | `1.11.0` | `1.12.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.85.0-dev.0.20260825072537-93e31b48545e` | `1.86.0-dev` | | [github.com/hashicorp/boundary/sdk](https://github.com/hashicorp/boundary) | `0.0.56` | `0.0.60` | | [golang.org/x/time](https://github.com/golang/time) | `0.14.0` | `0.16.0` | Bumps the go group with 2 updates in the /plugins/boundary/mains/aws directory: [github.com/hashicorp/boundary/sdk](https://github.com/hashicorp/boundary) and [github.com/hashicorp/boundary-plugin-aws](https://github.com/hashicorp/boundary-plugin-aws). Bumps the go group with 1 update in the /plugins/boundary/mains/azure directory: [github.com/hashicorp/boundary/sdk](https://github.com/hashicorp/boundary). Bumps the go group with 1 update in the /plugins/boundary/mains/gcp directory: [github.com/hashicorp/boundary/sdk](https://github.com/hashicorp/boundary). Bumps the go group with 2 updates in the /plugins/boundary/mains/minio directory: [github.com/hashicorp/boundary/sdk](https://github.com/hashicorp/boundary) and [github.com/hashicorp/boundary-plugin-minio](https://github.com/hashicorp/boundary-plugin-minio). Bumps the go group with 1 update in the /plugins/kms/mains/alicloudkms directory: [github.com/hashicorp/go-kms-wrapping/wrappers/alicloudkms/v2](https://github.com/hashicorp/go-kms-wrapping). Bumps the go group with 1 update in the /plugins/kms/mains/awskms directory: [github.com/hashicorp/go-kms-wrapping/wrappers/awskms/v4](https://github.com/hashicorp/go-kms-wrapping). Bumps the go group with 1 update in the /plugins/kms/mains/azurekeyvault directory: [github.com/hashicorp/go-kms-wrapping/wrappers/azurekeyvault/v2](https://github.com/hashicorp/go-kms-wrapping). Bumps the go group with 1 update in the /plugins/kms/mains/gcpckms directory: [github.com/hashicorp/go-kms-wrapping/wrappers/gcpckms/v2](https://github.com/hashicorp/go-kms-wrapping). Bumps the go group with 1 update in the /plugins/kms/mains/ocikms directory: [github.com/hashicorp/go-kms-wrapping/wrappers/ocikms/v2](https://github.com/hashicorp/go-kms-wrapping). Bumps the go group with 7 updates in the /sdk directory: | Package | From | To | | --- | --- | --- | | [github.com/coder/websocket](https://github.com/coder/websocket) | `1.8.14` | `1.8.15` | | [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.27.8` | `2.31.0` | | [github.com/hashicorp/go-kms-wrapping/v2](https://github.com/hashicorp/go-kms-wrapping) | `2.0.20` | `2.0.26` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` | | [google.golang.org/genproto/googleapis/api](https://github.com/googleapis/go-genproto) | `0.0.0-20260817212433-ac3dfec99bb1` | `0.0.0-20260921155816-b14227669459` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.85.0-dev.0.20260825072537-93e31b48545e` | `1.86.0-dev` | | [github.com/hashicorp/go-plugin](https://github.com/hashicorp/go-plugin) | `1.7.0` | `1.8.0` | Updates `github.com/coder/websocket` from 1.8.14 to 1.8.15 - [Release notes](https://github.com/coder/websocket/releases) - [Commits](coder/websocket@v1.8.14...v1.8.15) Updates `github.com/fatih/color` from 1.18.0 to 1.19.0 - [Release notes](https://github.com/fatih/color/releases) - [Commits](fatih/color@v1.18.0...v1.19.0) Updates `github.com/go-ldap/ldap/v3` from 3.4.12 to 3.4.14 - [Release notes](https://github.com/go-ldap/ldap/releases) - [Commits](go-ldap/ldap@v3.4.12...v3.4.14) Updates `github.com/golang-migrate/migrate/v4` from 4.19.1 to 4.20.1 - [Release notes](https://github.com/golang-migrate/migrate/releases) - [Commits](golang-migrate/migrate@v4.19.1...v4.20.1) Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.8 to 2.31.0 - [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases) - [Commits](grpc-ecosystem/grpc-gateway@v2.27.8...v2.31.0) Updates `github.com/hashicorp/cap` from 0.12.0 to 0.14.0 - [Release notes](https://github.com/hashicorp/cap/releases) - [Changelog](https://github.com/hashicorp/cap/blob/main/CHANGELOG.md) - [Commits](hashicorp/cap@v0.12.0...v0.14.0) Updates `github.com/hashicorp/go-bexpr` from 0.1.15 to 0.1.16 - [Release notes](https://github.com/hashicorp/go-bexpr/releases) - [Changelog](https://github.com/hashicorp/go-bexpr/blob/main/CHANGELOG.md) - [Commits](hashicorp/go-bexpr@v0.1.15...v0.1.16) Updates `github.com/hashicorp/go-kms-wrapping/v2` from 2.0.20 to 2.0.26 - [Release notes](https://github.com/hashicorp/go-kms-wrapping/releases) - [Commits](hashicorp/go-kms-wrapping@v2.0.20...v2.0.26) Updates `github.com/hashicorp/go-uuid` from 1.0.3 to 1.0.4 - [Commits](hashicorp/go-uuid@v1.0.3...v1.0.4) Updates `github.com/hashicorp/go-version` from 1.8.0 to 1.9.0 - [Release notes](https://github.com/hashicorp/go-version/releases) - [Changelog](https://github.com/hashicorp/go-version/blob/main/CHANGELOG.md) - [Commits](hashicorp/go-version@v1.8.0...v1.9.0) Updates `github.com/hashicorp/nodeenrollment` from 0.2.15 to 0.2.17 - [Release notes](https://github.com/hashicorp/nodeenrollment/releases) - [Commits](hashicorp/nodeenrollment@v0.2.15...v0.2.17) Updates `github.com/hashicorp/vault/api` from 1.22.0 to 1.23.0 - [Release notes](https://github.com/hashicorp/vault/releases) - [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md) - [Commits](hashicorp/vault@api/v1.22.0...api/v1.23.0) Updates `github.com/jackc/pgx/v5` from 5.9.2 to 5.11.0 - [Release notes](https://github.com/jackc/pgx/releases) - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.9.2...v5.11.0) Updates `github.com/lib/pq` from 1.11.2 to 1.12.3 - [Release notes](https://github.com/lib/pq/releases) - [Changelog](https://github.com/lib/pq/blob/main/CHANGELOG.md) - [Commits](lib/pq@v1.11.2...v1.12.3) Updates `github.com/mattn/go-colorable` from 0.1.14 to 0.1.16 - [Release notes](https://github.com/mattn/go-colorable/releases) - [Commits](mattn/go-colorable@v0.1.14...v0.1.16) Updates `github.com/miekg/dns` from 1.1.72 to 1.1.73 - [Commits](miekg/dns@v1.1.72...v1.1.73) Updates `github.com/moby/moby/api` from 1.53.0 to 1.54.2 - [Release notes](https://github.com/moby/moby/releases) - [Commits](moby/moby@api/v1.53.0...api/v1.54.2) Updates `github.com/moby/moby/client` from 0.2.2 to 0.4.1 - [Release notes](https://github.com/moby/moby/releases) - [Changelog](https://github.com/moby/moby/blob/v0.4.1/CHANGELOG.md) - [Commits](moby/moby@v0.2.2...v0.4.1) Updates `github.com/mr-tron/base58` from 1.2.0 to 1.3.0 - [Release notes](https://github.com/mr-tron/base58/releases) - [Commits](mr-tron/base58@v1.2.0...v1.3.0) Updates `github.com/pires/go-proxyproto` from 0.11.0 to 0.15.0 - [Release notes](https://github.com/pires/go-proxyproto/releases) - [Commits](pires/go-proxyproto@v0.11.0...v0.15.0) Updates `github.com/prometheus/client_golang` from 1.23.2 to 1.24.1 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.23.2...v1.24.1) Updates `github.com/sevlyar/go-daemon` from 0.1.6 to 0.1.7 - [Release notes](https://github.com/sevlyar/go-daemon/releases) - [Commits](sevlyar/go-daemon@v0.1.6...v0.1.7) Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.11.1...v1.12.1) Updates `github.com/zalando/go-keyring` from 0.2.6 to 0.2.8 - [Release notes](https://github.com/zalando/go-keyring/releases) - [Commits](zalando/go-keyring@v0.2.6...v0.2.8) Updates `go.uber.org/atomic` from 1.11.0 to 1.12.0 - [Release notes](https://github.com/uber-go/atomic/releases) - [Changelog](https://github.com/uber-go/atomic/blob/master/CHANGELOG.md) - [Commits](uber-go/atomic@v1.11.0...v1.12.0) Updates `golang.org/x/crypto` from 0.56.0 to 0.57.0 - [Commits](golang/crypto@v0.56.0...v0.57.0) Updates `golang.org/x/exp` from 0.0.0-20250408133849-7e4ce0ab07d0 to 0.0.0-20260908205506-85c1c2202aba - [Commits](https://github.com/golang/exp/commits) Updates `golang.org/x/net` from 0.58.0 to 0.59.0 - [Commits](golang/net@v0.58.0...v0.59.0) Updates `golang.org/x/sync` from 0.22.0 to 0.23.0 - [Commits](golang/sync@v0.22.0...v0.23.0) Updates `golang.org/x/sys` from 0.47.0 to 0.48.0 - [Commits](golang/sys@v0.47.0...v0.48.0) Updates `golang.org/x/term` from 0.45.0 to 0.46.0 - [Commits](golang/term@v0.45.0...v0.46.0) Updates `golang.org/x/text` from 0.41.0 to 0.42.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.41.0...v0.42.0) Updates `golang.org/x/tools` from 0.48.0 to 0.50.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.48.0...v0.50.0) Updates `google.golang.org/genproto` from 0.0.0-20250603155806-513f23925822 to 0.0.0-20260630182238-925bb5da69e7 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260817212433-ac3dfec99bb1 to 0.0.0-20260921155816-b14227669459 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.85.0-dev.0.20260825072537-93e31b48545e to 1.86.0-dev - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/commits/v1.86.0-dev) Updates `google.golang.org/grpc/cmd/protoc-gen-go-grpc` from 1.6.1 to 1.6.2 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@cmd/protoc-gen-go-grpc/v1.6.1...cmd/protoc-gen-go-grpc/v1.6.2) Updates `gorm.io/driver/postgres` from 1.6.0 to 1.6.3 - [Commits](go-gorm/postgres@v1.6.0...v1.6.3) Updates `mvdan.cc/gofumpt` from 0.9.2 to 0.12.0 - [Release notes](https://github.com/mvdan/gofumpt/releases) - [Changelog](https://github.com/mvdan/gofumpt/blob/master/CHANGELOG.md) - [Commits](mvdan/gofumpt@v0.9.2...v0.12.0) Updates `github.com/coder/websocket` from 1.8.14 to 1.8.15 - [Release notes](https://github.com/coder/websocket/releases) - [Commits](coder/websocket@v1.8.14...v1.8.15) Updates `github.com/hashicorp/go-kms-wrapping/v2` from 2.0.20 to 2.0.26 - [Release notes](https://github.com/hashicorp/go-kms-wrapping/releases) - [Commits](hashicorp/go-kms-wrapping@v2.0.20...v2.0.26) Updates `github.com/hashicorp/go-uuid` from 1.0.3 to 1.0.4 - [Commits](hashicorp/go-uuid@v1.0.3...v1.0.4) Updates `github.com/mr-tron/base58` from 1.2.0 to 1.3.0 - [Release notes](https://github.com/mr-tron/base58/releases) - [Commits](mr-tron/base58@v1.2.0...v1.3.0) Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.11.1...v1.12.1) Updates `go.uber.org/atomic` from 1.11.0 to 1.12.0 - [Release notes](https://github.com/uber-go/atomic/releases) - [Changelog](https://github.com/uber-go/atomic/blob/master/CHANGELOG.md) - [Commits](uber-go/atomic@v1.11.0...v1.12.0) Updates `google.golang.org/grpc` from 1.85.0-dev.0.20260825072537-93e31b48545e to 1.86.0-dev - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/commits/v1.86.0-dev) Updates `github.com/hashicorp/boundary/sdk` from 0.0.56 to 0.0.60 - [Release notes](https://github.com/hashicorp/boundary/releases) - [Changelog](https://github.com/hashicorp/boundary/blob/main/CHANGELOG.md) - [Commits](api/v0.0.56...api/v0.0.60) Updates `golang.org/x/time` from 0.14.0 to 0.16.0 - [Commits](golang/time@v0.14.0...v0.16.0) Updates `github.com/hashicorp/boundary/sdk` from 0.0.58 to 0.0.60 - [Release notes](https://github.com/hashicorp/boundary/releases) - [Changelog](https://github.com/hashicorp/boundary/blob/main/CHANGELOG.md) - [Commits](api/v0.0.56...api/v0.0.60) Updates `github.com/hashicorp/boundary-plugin-aws` from 0.5.2 to 0.7.0 - [Release notes](https://github.com/hashicorp/boundary-plugin-aws/releases) - [Commits](hashicorp/boundary-plugin-aws@v0.5.2...v0.7.0) Updates `github.com/hashicorp/boundary/sdk` from 0.0.58 to 0.0.60 - [Release notes](https://github.com/hashicorp/boundary/releases) - [Changelog](https://github.com/hashicorp/boundary/blob/main/CHANGELOG.md) - [Commits](api/v0.0.56...api/v0.0.60) Updates `github.com/hashicorp/boundary/sdk` from 0.0.58 to 0.0.60 - [Release notes](https://github.com/hashicorp/boundary/releases) - [Changelog](https://github.com/hashicorp/boundary/blob/main/CHANGELOG.md) - [Commits](api/v0.0.56...api/v0.0.60) Updates `github.com/hashicorp/boundary/sdk` from 0.0.58 to 0.0.60 - [Release notes](https://github.com/hashicorp/boundary/releases) - [Changelog](https://github.com/hashicorp/boundary/blob/main/CHANGELOG.md) - [Commits](api/v0.0.56...api/v0.0.60) Updates `github.com/hashicorp/boundary-plugin-minio` from 0.1.7 to 0.2.3 - [Release notes](https://github.com/hashicorp/boundary-plugin-minio/releases) - [Commits](hashicorp/boundary-plugin-minio@v0.1.7...v0.2.3) Updates `github.com/hashicorp/go-kms-wrapping/wrappers/alicloudkms/v2` from 2.0.4 to 2.0.5 - [Release notes](https://github.com/hashicorp/go-kms-wrapping/releases) - [Commits](hashicorp/go-kms-wrapping@v2.0.4...v2.0.5) Updates `github.com/hashicorp/go-kms-wrapping/wrappers/awskms/v4` from 4.0.0 to 4.0.4 - [Release notes](https://github.com/hashicorp/go-kms-wrapping/releases) - [Commits](hashicorp/go-kms-wrapping@wrappers/awskms/v4.0.0...wrappers/awskms/v4.0.4) Updates `github.com/hashicorp/go-kms-wrapping/wrappers/azurekeyvault/v2` from 2.0.14 to 2.0.16 - [Release notes](https://github.com/hashicorp/go-kms-wrapping/releases) - [Commits](hashicorp/go-kms-wrapping@v2.0.14...v2.0.16) Updates `github.com/hashicorp/go-kms-wrapping/wrappers/gcpckms/v2` from 2.0.13 to 2.0.14 - [Release notes](https://github.com/hashicorp/go-kms-wrapping/releases) - [Commits](hashicorp/go-kms-wrapping@v2.0.13...v2.0.14) Updates `github.com/hashicorp/go-kms-wrapping/wrappers/ocikms/v2` from 2.0.9 to 2.0.11 - [Release notes](https://github.com/hashicorp/go-kms-wrapping/releases) - [Commits](hashicorp/go-kms-wrapping@v2.0.9...v2.0.11) Updates `github.com/coder/websocket` from 1.8.14 to 1.8.15 - [Release notes](https://github.com/coder/websocket/releases) - [Commits](coder/websocket@v1.8.14...v1.8.15) Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.8 to 2.31.0 - [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases) - [Commits](grpc-ecosystem/grpc-gateway@v2.27.8...v2.31.0) Updates `github.com/hashicorp/go-kms-wrapping/v2` from 2.0.20 to 2.0.26 - [Release notes](https://github.com/hashicorp/go-kms-wrapping/releases) - [Commits](hashicorp/go-kms-wrapping@v2.0.20...v2.0.26) Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.11.1...v1.12.1) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260817212433-ac3dfec99bb1 to 0.0.0-20260921155816-b14227669459 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.85.0-dev.0.20260825072537-93e31b48545e to 1.86.0-dev - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/commits/v1.86.0-dev) Updates `github.com/hashicorp/go-plugin` from 1.7.0 to 1.8.0 - [Release notes](https://github.com/hashicorp/go-plugin/releases) - [Changelog](https://github.com/hashicorp/go-plugin/blob/main/CHANGELOG.md) - [Commits](hashicorp/go-plugin@v1.7.0...v1.8.0) --- updated-dependencies: - dependency-name: github.com/coder/websocket dependency-version: 1.8.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/fatih/color dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-ldap/ldap/v3 dependency-version: 3.4.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/golang-migrate/migrate/v4 dependency-version: 4.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2 dependency-version: 2.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/hashicorp/cap dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/hashicorp/go-bexpr dependency-version: 0.1.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-kms-wrapping/v2 dependency-version: 2.0.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-uuid dependency-version: 1.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-version dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/hashicorp/nodeenrollment dependency-version: 0.2.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/vault/api dependency-version: 1.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/lib/pq dependency-version: 1.12.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/mattn/go-colorable dependency-version: 0.1.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/miekg/dns dependency-version: 1.1.73 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/moby/moby/api dependency-version: 1.54.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/moby/moby/client dependency-version: 0.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/mr-tron/base58 dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/pires/go-proxyproto dependency-version: 0.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/prometheus/client_golang dependency-version: 1.24.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/sevlyar/go-daemon dependency-version: 0.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/stretchr/testify dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/zalando/go-keyring dependency-version: 0.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: go.uber.org/atomic dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/crypto dependency-version: 0.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/exp dependency-version: 0.0.0-20260908205506-85c1c2202aba dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: golang.org/x/net dependency-version: 0.59.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/sync dependency-version: 0.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/sys dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/term dependency-version: 0.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/text dependency-version: 0.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/tools dependency-version: 0.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/genproto dependency-version: 0.0.0-20260630182238-925bb5da69e7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20260921155816-b14227669459 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/grpc dependency-version: 1.86.0-dev dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/grpc/cmd/protoc-gen-go-grpc dependency-version: 1.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: gorm.io/driver/postgres dependency-version: 1.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: mvdan.cc/gofumpt dependency-version: 0.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/coder/websocket dependency-version: 1.8.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-kms-wrapping/v2 dependency-version: 2.0.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-uuid dependency-version: 1.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/mr-tron/base58 dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/stretchr/testify dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: go.uber.org/atomic dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/grpc dependency-version: 1.86.0-dev dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/hashicorp/boundary/sdk dependency-version: 0.0.60 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: golang.org/x/time dependency-version: 0.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/hashicorp/boundary/sdk dependency-version: 0.0.60 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/boundary-plugin-aws dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/hashicorp/boundary/sdk dependency-version: 0.0.60 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/boundary/sdk dependency-version: 0.0.60 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/boundary/sdk dependency-version: 0.0.60 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/boundary-plugin-minio dependency-version: 0.2.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/hashicorp/go-kms-wrapping/wrappers/alicloudkms/v2 dependency-version: 2.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-kms-wrapping/wrappers/awskms/v4 dependency-version: 4.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-kms-wrapping/wrappers/azurekeyvault/v2 dependency-version: 2.0.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-kms-wrapping/wrappers/gcpckms/v2 dependency-version: 2.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-kms-wrapping/wrappers/ocikms/v2 dependency-version: 2.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/coder/websocket dependency-version: 1.8.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2 dependency-version: 2.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/hashicorp/go-kms-wrapping/v2 dependency-version: 2.0.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/stretchr/testify dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20260921155816-b14227669459 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/grpc dependency-version: 1.86.0-dev dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/hashicorp/go-plugin dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 9, 2026

github-actions Bot added the api label Oct 9, 2026

dependabot Bot mentioned this pull request Oct 9, 2026

chore(deps): bump the go group across 12 directories with 49 updates #6787

Closed

Navigation Menu

Repository navigation

chore(deps): bump the go group across 12 directories with 49 updates - #6789

chore(deps): bump the go group across 12 directories with 49 updates#6789
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-856d4326cb

dependabot Bot commented on behalf of github Oct 9, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 9, 2026

v1.8.15

Changes

New Contributors

v1.19.0

What's Changed

New Contributors

v3.4.14

What's Changed

New Contributors

v3.4.13

What's Changed

v4.20.1

What's Changed

v4.20.0

What's Changed

New Contributors

v2.31.0

What's Changed

New Contributors

v2.30.0

New Features

Fixes

v0.14.0

What's Changed

New Contributors

v0.13.0

What's Changed

New Contributors

cap CHANGELOG

Next

0.13.0

v0.1.16

Improvements

Bug Fixes

0.1.16 (March 5, 2026)

Improvements

Bug Fixes

Security

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants