Skip to content

build(deps): bump the gomod group with 5 updates - #4778

Merged
blotus merged 1 commit into
masterfrom
dependabot/go_modules/gomod-53f38d751c
Oct 26, 2026
Merged

blotus merged 1 commit into
masterfrom
dependabot/go_modules/gomod-53f38d751c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the gomod group with 5 updates:

Package From To
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs 1.89.3 1.90.0
github.com/aws/aws-sdk-go-v2/service/kinesis 1.56.4 1.56.5
github.com/aws/aws-sdk-go-v2/service/sqs 1.52.4 1.52.5
github.com/getkin/kin-openapi 0.149.0 0.151.0
github.com/go-openapi/strfmt 0.27.3 0.27.4

Updates github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.89.3 to 1.90.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/kinesis from 1.56.4 to 1.56.5

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sqs from 1.52.4 to 1.52.5

Commits

Updates github.com/getkin/kin-openapi from 0.149.0 to 0.151.0

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.151.0

What's Changed

Full Changelog: getkin/kin-openapi@v0.150.0...v0.151.0

v0.150.0

What's Changed

... (truncated)

Commits
  • a07ec19 openapi3filter: add Options.KeepValidatedValue (#1330)
  • 335a406 openapi3filter: decode anyOf/oneOf/allOf array items in path, header and cook...
  • c8ab60e openapi3filter: follow style and explode when applying query array defaults (...
  • 9b3e58a openapi3filter: report form-urlencoded values that fail to parse instead of d...
  • d170289 modernize
  • 1babfd2 openapi3: move the built-in schema validator to schema_3point0_validator.go
  • 6e5c9ef openapi3: compare enum values by JSON value
  • 004e718 openapi2: name the response in Responses decoding errors
  • 518da59 openapi3: avoid a race around sliceUniqueItemsChecker
  • 05a1724 ci: bandaid windows memory corruptions
  • Additional commits viewable in compare view

Updates github.com/go-openapi/strfmt from 0.27.3 to 0.27.4

Release notes

Sourced from github.com/go-openapi/strfmt's releases.

v0.27.4

0.27.4 - 2026-10-19

Full Changelog: go-openapi/strfmt@v0.27.3...v0.27.4

5 commits in this release.


Miscellaneous tasks

Updates

  • build(deps): bump go.mongodb.org/mongo-driver/v2 from 2.9.1 to 2.9.2 in the other-dependencies group across 1 directory by @​dependabot[bot] in #317 ...
  • build(deps): bump go.mongodb.org/mongo-driver/v2 from 2.9.1 to 2.9.2 in the other-dependencies group across 1 directory by @​dependabot[bot] in #318 ...
  • build(deps): bump the golang-org-dependencies group across 1 directory with 2 updates by @​dependabot[bot] in #316 ...
  • build(deps): bump the development-dependencies group with 10 updates by @​dependabot[bot] in #315 ...

People who contributed to this release


strfmt license terms

License

Per-module changes


enable/mongodb (0.27.4)

Miscellaneous tasks

... (truncated)

Commits
  • f4233e3 chore: prepare release v0.27.4
  • f993be0 build(deps): bump go.mongodb.org/mongo-driver/v2 (#317)
  • f468f40 build(deps): bump go.mongodb.org/mongo-driver/v2 (#318)
  • a4ec59a build(deps): bump the golang-org-dependencies group across 1 directory with 2...
  • 2df7671 build(deps): bump the development-dependencies group with 10 updates
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gomod group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs](https://github.com/aws/aws-sdk-go-v2) | `1.89.3` | `1.90.0` |
| [github.com/aws/aws-sdk-go-v2/service/kinesis](https://github.com/aws/aws-sdk-go-v2) | `1.56.4` | `1.56.5` |
| [github.com/aws/aws-sdk-go-v2/service/sqs](https://github.com/aws/aws-sdk-go-v2) | `1.52.4` | `1.52.5` |
| [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) | `0.149.0` | `0.151.0` |
| [github.com/go-openapi/strfmt](https://github.com/go-openapi/strfmt) | `0.27.3` | `0.27.4` |


Updates `github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs` from 1.89.3 to 1.90.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ecs/v1.89.3...service/s3/v1.90.0)

Updates `github.com/aws/aws-sdk-go-v2/service/kinesis` from 1.56.4 to 1.56.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ssm/v1.56.4...service/ssm/v1.56.5)

Updates `github.com/aws/aws-sdk-go-v2/service/sqs` from 1.52.4 to 1.52.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ssm/v1.52.4...service/ssm/v1.52.5)

Updates `github.com/getkin/kin-openapi` from 0.149.0 to 0.151.0
- [Release notes](https://github.com/getkin/kin-openapi/releases)
- [Commits](getkin/kin-openapi@v0.149.0...v0.151.0)

Updates `github.com/go-openapi/strfmt` from 0.27.3 to 0.27.4
- [Release notes](https://github.com/go-openapi/strfmt/releases)
- [Commits](go-openapi/strfmt@v0.27.3...v0.27.4)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs
  dependency-version: 1.90.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/aws/aws-sdk-go-v2/service/kinesis
  dependency-version: 1.56.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sqs
  dependency-version: 1.52.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/getkin/kin-openapi
  dependency-version: 0.151.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/go-openapi/strfmt
  dependency-version: 0.27.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added go Pull requests that update Go code kind/dependencies labels Oct 23, 2026
@blotus
blotus merged commit 3d369d6 into master Oct 26, 2026
16 of 17 checks passed
@blotus
blotus deleted the dependabot/go_modules/gomod-53f38d751c branch October 26, 2026 08:19
gabrielcosi pushed a commit to gabrielcosi/home-ops that referenced this pull request Oct 29, 2026
… ➔ v1.8.2) (#1487)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [docker.io/crowdsecurity/crowdsec](https://github.com/crowdsecurity/crowdsec) | patch | `v1.8.1` → `v1.8.2` |
| [docker.io/crowdsecurity/crowdsec](https://github.com/crowdsecurity/crowdsec) | patch | `v1.8.1-debian` → `v1.8.2-debian` |

---

### Release Notes

<details>
<summary>crowdsecurity/crowdsec (docker.io/crowdsecurity/crowdsec)</summary>

### [`v1.8.2`](https://github.com/crowdsecurity/crowdsec/releases/tag/v1.8.2)

[Compare Source](crowdsecurity/crowdsec@v1.8.1...v1.8.2)

##### Version 1.8.2

- Brings [custom JS fingerprinting capabilities](https://docs.crowdsec.net/docs/next/appsec/bot_detection/custom_js/) to the bot detection feature, allowing both users and us to distribute detection rules directly via the hub.
- Brings [rate limiting feature](https://docs.crowdsec.net/docs/next/appsec/rate_limiting/) to the WAF.
- Brings performance improvements to the Security Engine, optimizing both memory copy behaviors and relying on static analysis to avoid processing unnecessary regular expressions.
- Brings performance improvements to the WAF, optimizing out-of-band rules processing.
- Brings performance improvements to the Bot Detection, optimizing memory usage.

##### New Features & Major improvements

- \[WAF] Add RateLimiting feature ([#&#8203;4721](crowdsecurity/crowdsec#4721)) [@&#8203;blotus](https://github.com/blotus)
- \[bot-detection] Add custom JS fingerprinting capabilities ([#&#8203;4657](crowdsecurity/crowdsec#4657)) [@&#8203;buixor](https://github.com/buixor)
- \[bot-detection] Add cscli bot subcommand ([#&#8203;4666](crowdsecurity/crowdsec#4666)) [@&#8203;blotus](https://github.com/blotus)
- \[WAF] Improve out-of-band rules performances ([#&#8203;4722](crowdsecurity/crowdsec#4722)) [@&#8203;blotus](https://github.com/blotus)
- \[Security Engine] Run postoverflows in a separate goroutine to avoid blocking on slow enrichments ([#&#8203;4672](crowdsecurity/crowdsec#4672)) [@&#8203;blotus](https://github.com/blotus)
- \[bot-detection] Improve memory usage ([#&#8203;4674](crowdsecurity/crowdsec#4674)) [@&#8203;blotus](https://github.com/blotus)
- \[Security Engine] Various performance improvements to regular expression processing ([#&#8203;4736](crowdsecurity/crowdsec#4736)) ([#&#8203;4731](crowdsecurity/crowdsec#4731)) ([#&#8203;4729](crowdsecurity/crowdsec#4729)) [@&#8203;blotus](https://github.com/blotus) [@&#8203;buixor](https://github.com/buixor)

##### Improvements

- Add `cs_features` metric ([#&#8203;4770](crowdsecurity/crowdsec#4770)) [@&#8203;blotus](https://github.com/blotus)
- bot detection: add an option to set SameSite=None + Partitioned flag on cookie ([#&#8203;4764](crowdsecurity/crowdsec#4764)) [@&#8203;blotus](https://github.com/blotus)
- exprhelpers: add GetDecisionsSinceCountByScenario ([#&#8203;4756](crowdsecurity/crowdsec#4756)) [@&#8203;tommy-ng0](https://github.com/tommy-ng0)
- lapi: optionally limit concurrent decision stream requests ([#&#8203;4747](crowdsecurity/crowdsec#4747)) [@&#8203;tommy-ng0](https://github.com/tommy-ng0)
- exprhelpers: LookupHost goes through the DNS cache ([#&#8203;4741](crowdsecurity/crowdsec#4741)) [@&#8203;twiesing](https://github.com/twiesing)
- metrics: add CAPI last pull timestamp and error counter ([#&#8203;4749](crowdsecurity/crowdsec#4749)) [@&#8203;NazarkinRoman](https://github.com/NazarkinRoman)
- prometheus: add kind label to cs_alerts ([#&#8203;4742](crowdsecurity/crowdsec#4742)) [@&#8203;blotus](https://github.com/blotus)
- lapi: make decisions stream page size configurable ([#&#8203;4733](crowdsecurity/crowdsec#4733)) [@&#8203;tommy-ng0](https://github.com/tommy-ng0)
- Fix ValidateChallengeResponse ([#&#8203;4737](crowdsecurity/crowdsec#4737)) [@&#8203;buixor](https://github.com/buixor)
- bot-detection: add new FlagSubmission() helper ([#&#8203;4727](crowdsecurity/crowdsec#4727)) [@&#8203;blotus](https://github.com/blotus)
- appsec: add an optional category to the request score ([#&#8203;4715](crowdsecurity/crowdsec#4715)) [@&#8203;buixor](https://github.com/buixor)
- apiserver: reload the TLS server certificate when its files change ([#&#8203;4709](crowdsecurity/crowdsec#4709)) [@&#8203;ohartwig](https://github.com/ohartwig)
- fix image link ([#&#8203;4702](crowdsecurity/crowdsec#4702)) [@&#8203;buixor](https://github.com/buixor)
- waf: add SkipProcessing() helper ([#&#8203;4667](crowdsecurity/crowdsec#4667)) [@&#8203;blotus](https://github.com/blotus)
- \[bot-detection] drop the URI from the cookie ([#&#8203;4656](crowdsecurity/crowdsec#4656)) [@&#8203;buixor](https://github.com/buixor)

##### Bug Fixes

- acquisition/file: don't send half-written lines, or skip the lines after them ([#&#8203;4678](crowdsecurity/crowdsec#4678)) [@&#8203;n1koo](https://github.com/n1koo), [@&#8203;blotus](https://github.com/blotus), [@&#8203;claude](https://github.com/claude)
- fix(cscli): display human-readable timestamps in local time ([#&#8203;4759](crowdsecurity/crowdsec#4759)) [@&#8203;sep2](https://github.com/sep2)
- remove runtime Fatalf calls ([#&#8203;4760](crowdsecurity/crowdsec#4760)) [@&#8203;blotus](https://github.com/blotus)
- waf: fix log spam when usin unix socket on freebsd ([#&#8203;4745](crowdsecurity/crowdsec#4745)) [@&#8203;blotus](https://github.com/blotus)
- docker: read from now if container restarts ([#&#8203;4605](crowdsecurity/crowdsec#4605)) [@&#8203;blotus](https://github.com/blotus)
- splunk-notification: add an option to configure InsecureSkipVerify ([#&#8203;4720](crowdsecurity/crowdsec#4720)) [@&#8203;blotus](https://github.com/blotus)
- victorialogs: move the datasource to RestartableStreamer interface ([#&#8203;4738](crowdsecurity/crowdsec#4738)) [@&#8203;blotus](https://github.com/blotus)
- metrics: remove series of deleted machines and bouncers ([#&#8203;4712](crowdsecurity/crowdsec#4712)) [@&#8203;somaz94](https://github.com/somaz94)
- buckets: make a copy of all event maps before pouring the event to a bucket ([#&#8203;4481](crowdsecurity/crowdsec#4481)) [@&#8203;blotus](https://github.com/blotus)
- fix(database): keep simulated decisions from suppressing real bans ([#&#8203;4679](crowdsecurity/crowdsec#4679)) [@&#8203;4erdenko](https://github.com/4erdenko), [@&#8203;blotus](https://github.com/blotus)
- fix a nasty bug in transfrom where the effective uuid for a datasource ([#&#8203;4697](crowdsecurity/crowdsec#4697)) [@&#8203;sabban](https://github.com/sabban)
- hubtest: add a tiebreaker based on the alert date to have a consistent order ([#&#8203;4699](crowdsecurity/crowdsec#4699)) [@&#8203;blotus](https://github.com/blotus)
- syslog: copy buffer before handing it to the datasource ([#&#8203;4690](crowdsecurity/crowdsec#4690)) [@&#8203;blotus](https://github.com/blotus)
- Expand env vars in online_api_credentials.yaml ([#&#8203;4677](crowdsecurity/crowdsec#4677)) [@&#8203;kushiemoon-dev](https://github.com/kushiemoon-dev)

##### Chore / Deps

- build(deps): bump the gomod group with 5 updates ([#&#8203;4778](crowdsecurity/crowdsec#4778)) [@&#8203;dependabot\[bot\]](https://github.com/apps/dependabot)
- build(deps): bump the github-actions group with 2 updates ([#&#8203;4777](crowdsecurity/crowdsec#4777)) [@&#8203;dependabot\[bot\]](https://github.com/apps/dependabot)
- build(deps): bump certifi from 2026.1.4 to 2026.10.19 in /build/docker/test ([#&#8203;4780](crowdsecurity/crowdsec#4780)) [@&#8203;dependabot\[bot\]](https://github.com/apps/dependabot)
- build(deps): bump the github-actions group across 1 directory with 8 updates ([#&#8203;4766](crowdsecurity/crowdsec#4766)) [@&#8203;dependabot\[bot\]](https://github.com/apps/dependabot)
- build(deps): bump the gomod group with 16 updates ([#&#8203;4767](crowdsecurity/crowdsec#4767)) [@&#8203;dependabot\[bot\]](https://github.com/apps/dependabot)
- build(deps): bump the gomod group with 8 updates ([#&#8203;4753](crowdsecurity/crowdsec#4753)) [@&#8203;dependabot\[bot\]](https://github.com/apps/dependabot)
- fpscanner: use fork ([#&#8203;4761](crowdsecurity/crowdsec#4761)) [@&#8203;blotus](https://github.com/blotus)
- waf: update to coraza 3.8.0 ([#&#8203;4724](crowdsecurity/crowdsec#4724)) [@&#8203;blotus](https://github.com/blotus), [@&#8203;buixor](https://github.com/buixor)
- build(deps): bump the gomod group across 1 directory with 19 updates ([#&#8203;4730](crowdsecurity/crowdsec#4730)) [@&#8203;dependabot\[bot\]](https://github.com/apps/dependabot)
- CI: skip more docker tests on windows ([#&#8203;4728](crowdsecurity/crowdsec#4728)) [@&#8203;blotus](https://github.com/blotus)
- grok: embed grok library instead of having it as a dep ([#&#8203;4725](crowdsecurity/crowdsec#4725)) [@&#8203;blotus](https://github.com/blotus)
- docker datasource: skip tests on windows ([#&#8203;4719](crowdsecurity/crowdsec#4719)) [@&#8203;blotus](https://github.com/blotus)
- agents.md: keep comments to a reasonable level ([#&#8203;4716](crowdsecurity/crowdsec#4716)) [@&#8203;blotus](https://github.com/blotus)
- build(deps): bump the github-actions group with 7 updates ([#&#8203;4693](crowdsecurity/crowdsec#4693)) [@&#8203;dependabot\[bot\]](https://github.com/apps/dependabot)
- build(deps): bump the gomod group with 11 updates ([#&#8203;4694](crowdsecurity/crowdsec#4694)) [@&#8203;dependabot\[bot\]](https://github.com/apps/dependabot)
- build(deps): bump github.com/go-openapi/validate from 0.26.5 to 1.0.0 ([#&#8203;4682](crowdsecurity/crowdsec#4682)) [@&#8203;dependabot\[bot\]](https://github.com/apps/dependabot)
- build(deps): bump the gomod group with 19 updates ([#&#8203;4681](crowdsecurity/crowdsec#4681)) [@&#8203;dependabot\[bot\]](https://github.com/apps/dependabot)
- build(deps): bump cryptography from 48.0.1 to 50.0.0 in /build/docker/test ([#&#8203;4591](crowdsecurity/crowdsec#4591)) [@&#8203;dependabot\[bot\]](https://github.com/apps/dependabot)
- bump to go 1.27 ([#&#8203;4675](crowdsecurity/crowdsec#4675)) [@&#8203;blotus](https://github.com/blotus)
- build(deps): bump the github-actions group across 1 directory with 3 updates ([#&#8203;4658](crowdsecurity/crowdsec#4658)) [@&#8203;dependabot\[bot\]](https://github.com/apps/dependabot)
- build(deps): bump the gomod group across 1 directory with 21 updates ([#&#8203;4659](crowdsecurity/crowdsec#4659)) [@&#8203;dependabot\[bot\]](https://github.com/apps/dependabot)
- AGENTS.md: clearer guidance on tests ([#&#8203;4713](crowdsecurity/crowdsec#4713)) [@&#8203;blotus](https://github.com/blotus)
- pimp readme ([#&#8203;4701](crowdsecurity/crowdsec#4701)) [@&#8203;buixor](https://github.com/buixor)

##### Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from <a href="https://www.maxmind.com"><https://www.maxmind.com></a>.

##### Installation

Take a look at the [installation instructions](https://doc.crowdsec.net/docs/getting_started/install_crowdsec).

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/Berlin)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODEuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->

Reviewed-on: https://git.xcd.dev/gabrielcosi/home-ops/pulls/1487
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

go Pull requests that update Go code kind/dependencies needs/area

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant