dev: bump the safe group across 1 directory with 7 updates by dependabot[bot] · Pull Request #7954 · TheThingsNetwork/lorawan-stack

dependabot · 2026-06-29T22:56:42Z

Bumps the safe group with 7 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go-v2/config	`1.32.24`	`1.32.26`
github.com/aws/aws-sdk-go-v2/service/s3	`1.103.3`	`1.104.1`
github.com/coder/websocket	`1.8.14`	`1.8.15`
github.com/felixge/httpsnoop	`1.0.4`	`1.1.0`
github.com/getsentry/sentry-go	`0.46.2`	`0.47.0`
github.com/nats-io/nats-server/v2	`2.14.2`	`2.14.3`
golang.org/x/net	`0.55.0`	`0.56.0`

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.24 to 1.32.26

Commits

26060c5 Release 2026-06-29
24e918a Regenerated Clients
334471f Update API model
96d81dc Deprecate iotevents, ioteventsdata, panorama and simspaceweaver (#3458)
30502cb feat: mark common plugins and fix per-op ordering for invokeOperation refacto...
8881653 Revert "feat: mark common plugins and fix per-op ordering for invokeOperation...
eba2f01 feat: mark common plugins and fix per-op ordering for invokeOperation… (#3443)
2c5e1db Release 2026-06-23
d09eeb5 Regenerated Clients
2f5f5f9 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.103.3 to 1.104.1

Commits

26060c5 Release 2026-06-29
24e918a Regenerated Clients
334471f Update API model
96d81dc Deprecate iotevents, ioteventsdata, panorama and simspaceweaver (#3458)
30502cb feat: mark common plugins and fix per-op ordering for invokeOperation refacto...
8881653 Revert "feat: mark common plugins and fix per-op ordering for invokeOperation...
eba2f01 feat: mark common plugins and fix per-op ordering for invokeOperation… (#3443)
2c5e1db Release 2026-06-23
d09eeb5 Regenerated Clients
2f5f5f9 Update API model
Additional commits viewable in compare view

Updates github.com/coder/websocket from 1.8.14 to 1.8.15

Release notes

Sourced from github.com/coder/websocket's releases.

v1.8.15

Changes

chore: fix typo in Accept function by @IgorSilvestre in coder/websocket#544

fix: transmit in single frame when compression enabled by @DanielleMaywood in coder/websocket#552

docs: add document for AI agents (AGENTS.md) by @mafredri in coder/websocket#547

docs: remove mention of resolved issue in README by @tamird in coder/websocket#556

docs: fix lint issue by @mafredri in coder/websocket#557

docs: fix roadmap links after repo transfer by @GeObts in coder/websocket#558

avoid per-frame cleanup closures on read to remove 2 allocs per frame read by @mitchellh in coder/websocket#565

conn: skip timeout callbacks for background contexts by @mitchellh in coder/websocket#566

New Contributors

@IgorSilvestre made their first contribution in coder/websocket#544

@tamird made their first contribution in coder/websocket#556

@GeObts made their first contribution in coder/websocket#558

@mitchellh made their first contribution in coder/websocket#565

Full Changelog: coder/websocket@v1.8.14...v1.8.15

Commits

9c8faad conn: skip timeout callbacks for background contexts (#566)
7039364 avoid per-frame cleanup closures on read to remove 2 allocs per frame read (#...
d099e16 docs: fix roadmap links (#558)
c98e9dc docs: fix lint issue (#557)
39b7b07 docs: remove mention of resolved issue in README (#556)
9f473ad docs: add document for AI agents (AGENTS.md) (#547)
8d3545a fix: transmit in single frame when compression enabled (#552)
8bf6dd2 chore: fix typo in Accept function (#544)
See full diff in compare view

Updates github.com/felixge/httpsnoop from 1.0.4 to 1.1.0

Release notes

Sourced from github.com/felixge/httpsnoop's releases.

v1.1.0

felixge/httpsnoop@v1.0.4...v1.1.0

Commits

0fc9006 fix: preserve hooks for added writer interfaces (#35)
e413b2a Bump golang version, add io.StringWriter and improve performance (#33)
9a9390b fix: populate duration when handler panics (#31)
d3fc968 feat: Support SetReadDeadline, SetWriteDeadline and EnableFullDuplex (#29)
See full diff in compare view

Updates github.com/getsentry/sentry-go from 0.46.2 to 0.47.0

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.47.0

Breaking Changes 🛠
Fix transaction_info source getting set incorrectly across HTTP middleware integrations (http, fasthttp, fiber). Users should now expect traces to properly get grouped with their parameterized path. Transactions in affected integrations may regroup after upgrading. by @giortzisg in #1325
remove deprecatedotel.NewSentrySpanProcessor. Users should now use the sentryotlp.NewTraceExporter instead by @giortzisg in #1307
// Before
sentry.Init(sentry.ClientOptions{Dsn: dsn, EnableTracing: true, TracesSampleRate: 1.0})
tp := sdktrace.NewTracerProvider(
sdktrace.WithSpanProcessor(sentryotel.NewSentrySpanProcessor()),
)
otel.SetTextMapPropagator(sentryotel.NewSentryPropagator())
otel.SetTracerProvider(tp)
// After:
sentry.Init(sentry.ClientOptions{
Dsn: dsn, EnableTracing: true, TracesSampleRate: 1.0,
Integrations: func(i []sentry.Integration) []sentry.Integration {
return append(i, sentryotel.NewOtelIntegration())
},
})
exporter, _ := sentryotlp.NewTraceExporter(ctx, dsn)
tp := sdktrace.NewTracerProvider(sdktrace.WithBatcher(exporter))
otel.SetTracerProvider(tp)
Enable logs by default to skip double allow behavior. Enabling logs now happens once when setting up either sentry.NewLogger or any supported integration. Also the EnableLogs flag changes to DisableLogs for a global override switch by @giortzisg in #1306

Remove the ContextifyFrames integration. The recommended way to add source context is SCM by @giortzisg in #1302
New Features ✨
Add fiber v3 integration by @giortzisg in #1324

Bump fasthttp from 1.51.0 to 1.71.0 by @giortzisg in #1324
Add sentrysql SQL tracing integration by @giortzisg in #1305

Supports multiple integration paths depending on how your app opens database connections: sentrysql.Open(...), sentrysql.OpenDB(...), and wrapped drivers/connectors for custom setups.

Database metadata is not inferred in every setup. If the database name is not discoverable automatically, pass sentrysql.WithDatabaseName(...) so spans are populated correctly.

Example:
 // Simple driver-based setup
 db, err := sentrysql.Open("sqlite", ":memory:",
     sentrysql.WithDatabaseSystem(sentrysql.SystemSQLite),
     sentrysql.WithDatabaseName("main"),
 )
Internal Changes 🔧

Deps

... (truncated)

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.47.0

Breaking Changes 🛠
Fix transaction_info source getting set incorrectly across HTTP middleware integrations (http, fasthttp, fiber). Users should now expect traces to properly get grouped with their parameterized path. Transactions in affected integrations may regroup after upgrading. by @giortzisg in #1325
remove deprecatedotel.NewSentrySpanProcessor. Users should now use the sentryotlp.NewTraceExporter instead by @giortzisg in #1307
// Before
sentry.Init(sentry.ClientOptions{Dsn: dsn, EnableTracing: true, TracesSampleRate: 1.0})
tp := sdktrace.NewTracerProvider(
sdktrace.WithSpanProcessor(sentryotel.NewSentrySpanProcessor()),
)
otel.SetTextMapPropagator(sentryotel.NewSentryPropagator())
otel.SetTracerProvider(tp)
// After:
sentry.Init(sentry.ClientOptions{
Dsn: dsn, EnableTracing: true, TracesSampleRate: 1.0,
Integrations: func(i []sentry.Integration) []sentry.Integration {
return append(i, sentryotel.NewOtelIntegration())
},
})
exporter, _ := sentryotlp.NewTraceExporter(ctx, dsn)
tp := sdktrace.NewTracerProvider(sdktrace.WithBatcher(exporter))
otel.SetTracerProvider(tp)
Enable logs by default to skip double allow behavior. Enabling logs now happens once when setting up either sentry.NewLogger or any supported integration. Also the EnableLogs flag changes to DisableLogs for a global override switch by @giortzisg in #1306

Remove the ContextifyFrames integration. The recommended way to add source context is SCM by @giortzisg in #1302
New Features ✨
Add fiber v3 integration by @giortzisg in #1324

Bump fasthttp from 1.51.0 to 1.71.0 by @giortzisg in #1324
Add sentrysql SQL tracing integration by @giortzisg in #1305

Supports multiple integration paths depending on how your app opens database connections: sentrysql.Open(...), sentrysql.OpenDB(...), and wrapped drivers/connectors for custom setups.

Database metadata is not inferred in every setup. If the database name is not discoverable automatically, pass sentrysql.WithDatabaseName(...) so spans are populated correctly.

Example:
 // Simple driver-based setup
 db, err := sentrysql.Open("sqlite", ":memory:",
     sentrysql.WithDatabaseSystem(sentrysql.SystemSQLite),
     sentrysql.WithDatabaseName("main"),
 )
Internal Changes 🔧

Deps

... (truncated)

Commits

9b7a562 release: 0.47.0
320597c chore: update bump-version script to also bump crosstest (#1327)
02a836d build(deps): sync go.work (#1326)
dc18868 feat: add fiberv3 integration (#1324)
f970fb5 feat: add sql transaction instrumentation (#1305)
1010c03 fix!: transaction source for integrations (#1325)
97b9ddf build(deps): bump getsentry/github-workflows from 71588ddf95134f804e82c5970a8...
9cce79e feat(sql): add lexer and obfuscator (#1299)
063a573 feat(sql): add span instrumentation (#1286)
34d7db0 chore(otel): remove unused semconv helpers (#1321)
Additional commits viewable in compare view

Updates github.com/nats-io/nats-server/v2 from 2.14.2 to 2.14.3

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.14.3

Changelog

Refer to the 2.14 Upgrade Guide for backwards compatibility notes with 2.12.x. Please note that the 2.13.x version was skipped.

Go Version

1.26.4 (#8281)

Dependencies

golang.org/x/crypto v0.53.0 (#8297)

golang.org/x/sys v0.46.0 (#8297)

github.com/nats-io/jwt/v2 v2.8.2

github.com/nats-io/nkeys v0.4.16

Improved

General

Per-connection log lines that could be noisy in normal operation have been demoted to debug level (#8289)

Writer options are now applied consistently when using the s2_fast compression mode (#8047)

JetStream

Stream and consumer assignment handling has been refactored for more consistent migration and info behavior (#8262)

Meta, stream and consumer write errors are now registered more consistently for health and recovery handling (#8293)

Removed

Monitoring

JSONP callback support has been removed from monitoring endpoints

Fixed

General

Long-running reconnect and OCSP loops no longer retain unused timers, reducing memory pressure over time (#8204)

Inherited JWT default permissions are now refreshed when account claims are updated (#8276)

External auth configuration is now cleared correctly when account claims are updated (#8275)

PROXY protocol detection, TLS sniffing with allow_non_tls and PROXY v1 address-family parsing have been fixed (#8302)

A race in gateway CONNECT handling has been fixed (#8306)

Trusted proxy tracking no longer leaks closed clients during concurrent updates (#8307)

Service import replies can now be delivered across cluster routes (#8317)

Message tracing now works correctly with service imports and exports

Several panic, fatal and data race conditions in authentication, routing, monitoring and clustered request handling have been fixed

NoAuthUser now checks connection restrictions

Leaf connections no longer bypass Nats-Trace-Dest publish permission checks

CONNZ and SUBSZ pagination now guard against Offset and Limit integer overflow panics

... (truncated)

Commits

9b17a58 Release v2.14.3
2be2525 Release v2.14.3-RC.2
563d55f Cherry-picks for v2.14.3-RC.2 (#126)
e242ca0 NRG: Don't campaign with an uncommitted membership change about ourselves
0e4d935 NRG: Exclude uncommitted membership change from snapshot
0ab7302 NRG: Remove redundant known peer tracking
6eb7d76 NRG: Truncated uncommitted membership change leaves stale state
8157b56 [TEST] Campaign early on NRG tests
712b3d2 [FIXED] Nil pointer panic when resolver dir parent is not traversable
f11c26b [FIXED] Skipped messages set last time to now
Additional commits viewable in compare view

Updates golang.org/x/net from 0.55.0 to 0.56.0

Commits

9e7fdbf internal/http3: fix wrong argument being given when validating header value
b686e5f internal/http3: add gzip support to transport
8a34885 go.mod: update golang.org/x dependencies
72eaf98 dns/dnsmessage: correctly validate SVCB record parameter order
82e7868 dns/dnsmessage: avoid panic when parsing SVCB record with truncated data
b64f1fa internal/http3: add server support for "Trailer:" magic prefix
2707ee2 internal/http3: implement HTTP/3 clientConn methods
31358cc internal/http3: snapshot response headers at WriteHeader time
8ecbaa9 html: don't adjust xml:base
8ae811a html: properly handle end script tag in fragment mode
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the safe group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.24` | `1.32.26` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.103.3` | `1.104.1` | | [github.com/coder/websocket](https://github.com/coder/websocket) | `1.8.14` | `1.8.15` | | [github.com/felixge/httpsnoop](https://github.com/felixge/httpsnoop) | `1.0.4` | `1.1.0` | | [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) | `0.46.2` | `0.47.0` | | [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) | `2.14.2` | `2.14.3` | | [golang.org/x/net](https://github.com/golang/net) | `0.55.0` | `0.56.0` | Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.24 to 1.32.26 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.24...config/v1.32.26) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.103.3 to 1.104.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.103.3...service/s3/v1.104.1) Updates `github.com/coder/websocket` from 1.8.14 to 1.8.15 - [Release notes](https://github.com/coder/websocket/releases) - [Commits](coder/websocket@v1.8.14...v1.8.15) Updates `github.com/felixge/httpsnoop` from 1.0.4 to 1.1.0 - [Release notes](https://github.com/felixge/httpsnoop/releases) - [Commits](felixge/httpsnoop@v1.0.4...v1.1.0) Updates `github.com/getsentry/sentry-go` from 0.46.2 to 0.47.0 - [Release notes](https://github.com/getsentry/sentry-go/releases) - [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-go@v0.46.2...v0.47.0) Updates `github.com/nats-io/nats-server/v2` from 2.14.2 to 2.14.3 - [Release notes](https://github.com/nats-io/nats-server/releases) - [Changelog](https://github.com/nats-io/nats-server/blob/main/RELEASES.md) - [Commits](nats-io/nats-server@v2.14.2...v2.14.3) Updates `golang.org/x/net` from 0.55.0 to 0.56.0 - [Commits](golang/net@v0.55.0...v0.56.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.104.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: github.com/coder/websocket dependency-version: 1.8.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: github.com/felixge/httpsnoop dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: github.com/getsentry/sentry-go dependency-version: 0.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: github.com/nats-io/nats-server/v2 dependency-version: 2.14.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: golang.org/x/net dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 29, 2026

dependabot Bot requested a review from a team as a code owner June 29, 2026 22:56

dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 29, 2026

dependabot Bot requested a review from halimi June 29, 2026 22:56

dependabot Bot added the go Pull requests that update Go code label Jun 29, 2026

Copilot started work on behalf of halimi July 1, 2026 14:00 View session

dev: Sync tools module dependencies

78f276f

Copilot AI requested a review from a team as a code owner July 1, 2026 14:04

Copilot AI requested a review from KrishnaIyer July 1, 2026 14:04

Copilot finished work on behalf of halimi July 1, 2026 14:06

github-actions Bot added the tooling Development tooling label Jul 1, 2026

halimi approved these changes Jul 1, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

dev: bump the safe group across 1 directory with 7 updates#7954

dev: bump the safe group across 1 directory with 7 updates#7954
dependabot[bot] wants to merge 2 commits into
v3.36from
dependabot/go_modules/safe-e72b1b92c8

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 29, 2026

v1.8.15

Changes

New Contributors

v1.1.0

0.47.0

Breaking Changes 🛠

New Features ✨

Internal Changes 🔧

Deps

0.47.0

Breaking Changes 🛠

New Features ✨

Internal Changes 🔧

Deps

Release v2.14.3

Changelog

Go Version

Dependencies

Improved

Removed

Fixed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants