Skip to content

chore(deps): bump the go-deps group across 1 directory with 24 updates#142

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-f3c7186014
Open

chore(deps): bump the go-deps group across 1 directory with 24 updates#142
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-f3c7186014

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-deps group with 14 updates in the / directory:

Package From To
github.com/anthropics/anthropic-sdk-go 1.36.0 1.51.0
github.com/getkin/kin-openapi 0.135.0 0.140.0
github.com/jackc/pgx/v5 5.9.1 5.10.0
github.com/quic-go/quic-go 0.59.0 0.60.0
github.com/quic-go/webtransport-go 0.10.0 0.11.0
github.com/rabbitmq/amqp091-go 1.10.0 1.12.0
github.com/redis/go-redis/v9 9.18.0 9.20.1
go.opentelemetry.io/otel 1.43.0 1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp 0.19.0 0.20.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp 1.43.0 1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace 1.43.0 1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp 1.43.0 1.44.0
google.golang.org/genai 1.54.0 1.61.0
modernc.org/sqlite 1.48.2 1.52.0

Updates github.com/anthropics/anthropic-sdk-go from 1.36.0 to 1.51.0

Release notes

Sourced from github.com/anthropics/anthropic-sdk-go's releases.

v1.51.0

1.51.0 (2026-06-18)

Full Changelog: v1.50.2...v1.51.0

Features

  • api: add support for new code_execution_20260120 tool (f54a4a8)

v1.50.2

1.50.2 (2026-06-15)

Full Changelog: v1.50.1...v1.50.2

Chores

  • api: remove retired models from API and SDKs (11f5c82)

v1.50.1

1.50.1 (2026-06-09)

Full Changelog: v1.50.0...v1.50.1

Bug Fixes

  • api: add frontier_llm refusal category (9ebbaf7)

v1.50.0

1.50.0 (2026-06-09)

Full Changelog: v1.49.0...v1.50.0

Features

  • api: add support for Managed Agents deployments and environment variable credentials (f72e1d8)

v1.49.0

1.49.0 (2026-06-09)

Full Changelog: v1.48.0...v1.49.0

Features

  • api: add support for claude-mythos-5 and claude-fable-5, with support for server-side fallbacks on refusal (782f223)
  • client: adds client-side fallbacks middleware for API providers that do not support server-side fallbacks (782f223)

Bug Fixes

... (truncated)

Changelog

Sourced from github.com/anthropics/anthropic-sdk-go's changelog.

1.51.0 (2026-06-18)

Full Changelog: v1.50.2...v1.51.0

Features

  • api: add support for new code_execution_20260120 tool (f54a4a8)

1.50.2 (2026-06-15)

Full Changelog: v1.50.1...v1.50.2

Chores

  • api: remove retired models from API and SDKs (11f5c82)

1.50.1 (2026-06-09)

Full Changelog: v1.50.0...v1.50.1

Bug Fixes

  • api: add frontier_llm refusal category (9ebbaf7)

1.50.0 (2026-06-09)

Full Changelog: v1.49.0...v1.50.0

Features

  • api: add support for Managed Agents deployments and environment variable credentials (f72e1d8)

1.49.0 (2026-06-09)

Full Changelog: v1.48.0...v1.49.0

Features

  • api: add support for claude-mythos-5 and claude-fable-5, with support for server-side fallbacks on refusal (782f223)
  • client: adds client-side fallbacks middleware for API providers that do not support server-side fallbacks (782f223)

Bug Fixes

1.48.0 (2026-06-06)

Full Changelog: v1.47.0...v1.48.0

... (truncated)

Commits
  • 4fad069 release: 1.51.0
  • 0561e1b feat(api): add support for new code_execution_20260120 tool
  • e65c5be release: 1.50.2
  • 5494576 chore(api): remove retired models from API and SDKs
  • def8bad release: 1.50.1
  • df4ec29 fix(api): add frontier_llm refusal category
  • 375a007 release: 1.50.0
  • 3befb3e feat(api): add support for Managed Agents deployments and environment variabl...
  • 4dbdaea release: 1.49.0
  • 5aef221 feat(api): add support for claude-mythos-5 and claude-fable-5, with support f...
  • Additional commits viewable in compare view

Updates github.com/getkin/kin-openapi from 0.135.0 to 0.140.0

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.140.0

What's Changed

Full Changelog: getkin/kin-openapi@v0.139.0...v0.140.0

v0.139.0

What's Changed

Full Changelog: getkin/kin-openapi@v0.138.0...v0.139.0

v0.138.0

What's Changed

Full Changelog: getkin/kin-openapi@v0.137.0...v0.138.0

v0.137.0

What's Changed

Full Changelog: getkin/kin-openapi@v0.136.0...v0.137.0

v0.136.0

What's Changed

... (truncated)

Commits
  • 5124898 chore: bump jsonpointer to v0.22.5 (#1198)
  • 5ece4a3 docs: update GoDoc links to Go Reference (#1197)
  • b8600c5 openapi2,openapi3: remove marshmallow dependency (#1196)
  • 3a5ddcd refactor: apply modernize fixes (#1195)
  • 742704d openapi3: remove decimal128 dependency (#1194)
  • 368327b openapi3: remove deepcopy dependency (#1193)
  • 4dc207c openapi3: document that a custom ReadFromURIFunc bypasses IsExternalRefsAllow...
  • 8381bfc openapi3: type the remaining bare-error validation sites (#1187)
  • d29b5c0 openapi3: fix validation of duplicated path templates (#1189)
  • e56c2c7 openapi3: aggregate independent validation errors via EnableMultiError (#1185)
  • Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.9.1 to 5.10.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.10.0 (June 3, 2026)

This release includes a significant amount of hardening against malicious or compromised PostgreSQL servers, contributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled message sizes, caps server-supplied SCRAM iteration counts, adds require_auth to restrict which authentication methods a server may use (mitigating downgrade attacks under sslmode=prefer), and ensures cancellation requests are sent over TLS when the original connection used TLS.

Features

  • Add require_auth to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)
  • Add ParseConfigOptions.ConnStringAllowedKeys to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)
  • Add StructArgs and StrictStructArgs for @-named queries (Tubelight30)
  • Add ErrConnClosed sentinel error and unwrap it from connLockError (Charlie Tonneslan)
  • pgxpool: check if connection is expired before acquire (arthurdotwork)

Security Hardening

  • Encrypt CancelRequest connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)
  • Cap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)
  • Default Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)
  • Bound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)
  • Bound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)
  • Bound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)
  • Bound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)
  • Document secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)
  • Fix panic on malformed geometric text; return an error instead (MaIII)

Fixes

  • Fix scanning "char" (OID 18) into *string in binary format (luongs3)
  • Fix handling of typed-nil driver.Valuer in array and composite codecs (Donncha Fahy)
  • Fix CopyData.Data hex decoding in UnmarshalJSON (Charlie Tonneslan)
  • Fix data race when context is cancelled during connect
  • Fix parseKeywordValueSettings rejecting trailing whitespace (alliasgher)
  • pgconn: preserve full error chain in normalizeTimeoutError (Charlie Tonneslan)
  • pgconn: use a fresh context for the fallback connection in connectPreferred (Charlie Tonneslan)
  • pgxpool: fix MaxLifetimeDestroyCount and ping order for acquire-time expiry check
  • Add missing error check of rows.Err to load types (Jen Altavilla)

5.9.2 (April 18, 2026)

Fix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)

SQL injection can occur when:

  1. The non-default simple protocol is used.
  2. A dollar quoted string literal is used in the SQL query.
  3. That query contains text that would be would be interpreted outside as a placeholder outside of a string literal.
  4. The value of that placeholder is controllable by the attacker.

... (truncated)

Commits
  • 7293fb1 Update changelog for v5.10.0
  • 1ade285 pgconn: document secure connection configuration
  • b4d6d4d pgtype: bound range, multirange, and tsvector binary decoders
  • 0639b37 pgconn: add ParseConfigOptions.ConnStringAllowedKeys
  • b28e65b pgtype: bound array element count against remaining message bytes
  • cd1f389 pgtype: bound array binary decode element length against remaining bytes
  • ff27b5b pgtype: bound hstore binary decode against malicious server input
  • a6002e1 pgproto3: default Frontend max message body length to ~1 GiB
  • 44f6173 pgconn: cap server-supplied SCRAM iteration count
  • 1a976f7 pgconn: add require_auth to restrict accepted server auth methods
  • Additional commits viewable in compare view

Updates github.com/quic-go/quic-go from 0.59.0 to 0.60.0

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.60.0

Starting with v0.60.0, quic-go is ready for use in FIPS 140-3 environments when built with Go 1.26 or newer and used with the Go Cryptographic Module. See FIPS140.md for details.

This required a number of changes:

  • switch QUIC HKDF usage to the standard library crypto/hkdf: #5461
  • use the Go standard library's TLS 1.3 AES-GCM implementation for QUIC packet protection AEADs: #5624
  • use cipher.NewGCMWithRandomNonce for address validation token encryption: #5625
  • disable FIPS 140-3 enforcement for the Retry packet integrity tag, which is outside the FIPS 140-3 scope: #5630
  • disable FIPS 140-3 enforcement for Initial packet protection, whose secrets are derived from public RFC constants: #5640
  • guard the internal ChaCha20-Poly1305 code path so it is not used in FIPS 140-3 mode: #5633
  • add FIPS / non-FIPS data transfer integration tests, including Retry and key updates: #5646

Breaking Changes

  • quic-go now requires Go 1.25 or newer: #5561

Notable Fixes

  • path probe packets now correctly pass the OOB data (needed to select the correct network interface in some system configurations): #5544, thanks to @​on-keyday
  • cancel the Stream and SendStream context when the connection is closed: #5556, thanks to @​zvdy
  • http3: validate Extended CONNECT ``:protocol` pseudo-header values according to HTTP token syntax: #5639
  • http3: always set http.Request.Scheme and http.Request.Host: #5554, thanks to @​qiulaidongfeng
  • http3: fixed a nil pointer dereference when Server.Logger is unset: #5671
  • fix maximum datagram size estimation after MTU discovery: #5650, thanks to @​jinq0123
  • OpenStreamSync now reliably returns the context error when the context is cancelled: #5660

Behind the scenes

In the last couple of months, we have reworked our fuzz setup and the integration into OSS-Fuzz: First of all, all fuzzers were rewritten to Go native fuzzing (#5592, #5599, #5600, #5603, #5613). We also added new fuzzers for the HTTP/3 frame parser (#5595), HTTP/3 request, response and trailer decoding (#5602) and the STREAM / CRYPTO frame sorter (#5620).

Since native Go fuzzing uses a different seed corpus format, we now use the newly implemented go-ossfuzz-seeds library to generate OSS-Fuzz compatible seed corpus files from f.Add calls.

We also enable ClusterFuzzLite batch fuzzing (#5605), including. a seed corpus (#5607). Fuzz coverage for both ClusterFuzzLite batch fuzzing (#5641) and for OSS-Fuzz fuzzing (#5655) is now submitted to Codecov.

Changelog

... (truncated)

Commits
  • 7612ad1 fix maximum datagram size estimation after MTU discovery (#5650)
  • c29d679 log build date and revisions in OSS-Fuzz build script (#5674)
  • 2728695 ci: bump docker/setup-qemu-action from 4.0.0 to 4.1.0 (#5673)
  • 4e4845b http3: fix nil pointer dereference when Server.Logger is unset (#5671)
  • 25c8e61 make frame sorter fuzz corpus accessible to OSS-Fuzz (#5670)
  • e444e69 ci: bump docker/login-action from 4.1.0 to 4.2.0 (#5668)
  • 23256b5 ci: bump docker/setup-buildx-action from 4.0.0 to 4.1.0 (#5665)
  • a7a3ef9 ci: bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#5666)
  • 0b49963 ci: bump docker/build-push-action from 7.1.0 to 7.2.0 (#5667)
  • 4f3577c ci: bump codecov/codecov-action from 6.0.0 to 6.0.1 (#5664)
  • Additional commits viewable in compare view

Updates github.com/quic-go/webtransport-go from 0.10.0 to 0.11.0

Release notes

Sourced from github.com/quic-go/webtransport-go's releases.

v0.11.0

This release focuses on full compatibility with draft-15. The server keeps limited backwards compatibility with older draft clients where this is straightforward, but that compatibility is intentionally not comprehensive.

WebTransport flow control is not supported yet (see issue #256).

Breaking Changes

  • webtransport-go now requires Go 1.25 or newer: #243

Protocol Changes

  • Use SETTINGS_WT_ENABLED for WebTransport draft-version negotiation. The server continues to accept the old ENABLE_WEBTRANSPORT setting for compatibility with older clients: #254
  • Send SETTINGS_WT_ENABLED from the client, as required by draft-15: #271 (thanks to @​tobbee)
  • Use webtransport-h3 as the Extended CONNECT :protocol token. The server continues to accept the legacy webtransport token for compatibility with older clients: #280 (thanks to @​tomholford)
  • Use the WT_REQUIREMENTS_NOT_MET error when the peer does not advertise the required HTTP/3 or WebTransport capabilities: #252
  • Add support for the WT_ALPN_ERROR session error: #277
  • Validate WebTransport session IDs before accepting incoming streams: #283
  • Advertise SETTINGS values as required by Safari 26.4: #261 (thanks to @​birros)

New Features

  • Added a runnable example server and client, including browser-side JavaScript and certificate hash verification in the Go client: #285

Notable Fixes

  • Fixed a stream close race condition where ReceiveStream.Read or SendStream.Write could block forever when the local and remote side closed a session concurrently: #267 (thanks to @​aler9)
  • Server.ListenAndServe now closes the UDP socket it creates: #274

What's Changed

... (truncated)

Commits

Updates github.com/rabbitmq/amqp091-go from 1.10.0 to 1.12.0

Release notes

Sourced from github.com/rabbitmq/amqp091-go's releases.

v1.12.0

What's Changed

New Contributors

Full Changelog: rabbitmq/amqp091-go@v1.11.0...v1.12.0

v1.11.0

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from github.com/rabbitmq/amqp091-go's changelog.

v1.12.0 (2026-06-16)

Full Changelog

Implemented enhancements:

  • Feature: implement automatic connection and channel recovery with state change notifications #339 (suchitd)
  • Add integration test for publish with immediate flag #338 (suchitd)
  • Add integration tests for QueueUnbind and QueuePurge #337 (suchitd)
  • Add integration test for exchange-to-exchange binding and unbinding #336 (suchitd)

Fixed bugs:

  • Fix Client example to work with RabbitMQ 4.3 #341 (suchitd)
  • Update CONTRIBUTING.md and .gitignore files #335 (suchitd)
  • Fix inconsistencies in the Makefile #334 (suchitd)
  • Fix integration tests for RabbitMQ 4.3 #331 (suchitd)

Closed issues:

  • PublishWithContext does not respect context cancellation #329

Merged pull requests:

v1.11.0 (2026-04-21)

Full Changelog

Implemented enhancements:

  • add better debug information on DialConfig #245

Fixed bugs:

  • Channel error when acking via go-routines #296

Closed issues:

  • PR #318 exposes a pre-existing race in Connection.Close(). #327
  • Entire header frame isn't always read #309
  • Incomplete support of 0-9-1 field type values #302
  • Redelivered Flag Not Exposed #301
  • consume input basicConsumeOk but response queueBindOk #291
  • Channel is closed after Channel.ExchangeDeclarePassive fails #290
  • Incomplete example in (*Channel).QueueBind documentation #279

... (truncated)

Commits
  • 672e671 Release v1.12.0 (#345)
  • 178f984 Merge pull request #343 from rabbitmq/doc/update-non-goals
  • b6d3274 doc: remove auto-reconnect from non-goals in README
  • 4f6ade4 Feature: implement automatic connection and channel recovery with state chang...
  • f98134c Merge pull request #342 from rabbitmq/add-claude
  • 840e11c Update CLAUDE.md to correct some technical inaccuracies
  • 32d8249 Merge branch 'main' into add-claude
  • ad86bd2 Merge pull request #341 from rabbitmq/fix/client-example-rmq-4.3
  • d751223 Add CLAUDE.md
  • 66a7a25 Fix Client example to work with RabbitMQ 4.3
  • Additional commits viewable in compare view

Updates github.com/redis/go-redis/v9 from 9.18.0 to 9.20.1

Release notes

Sourced from github.com/redis/go-redis/v9's releases.

9.20.1

This is a patch release containing bug fixes only. There are no new features or breaking changes; upgrading from 9.20.0 is a drop-in replacement.

🚀 Highlights

RESP3 pub/sub message loss fixed

PeekPushNotificationName previously inspected only the bytes already buffered by bufio, so when a push frame header straddled a buffer fill boundary it could return a truncated notification name (e.g. "messa" instead of "message"). The push processor then mis-routed the frame and ReadReply silently dropped it, causing intermittent RESP3 pub/sub message loss. The peek now grows its window (36 bytes → up to 4 KiB) and reads more from the connection until the header is complete, cleanly separating incomplete prefixes from corrupt frames (including overflow-safe bulk-length handling). Fixes #3839.

(#3842) by @​ndyakov

🐛 Bug Fixes

  • RESP3 push peeking: PeekPushNotificationName no longer returns a truncated notifi...

    Description has been truncated

@dependabot
chore(deps): bump the go-deps group across 1 directory with 24 updates
a9522cf 
Bumps the go-deps group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/anthropics/anthropic-sdk-go](https://github.com/anthropics/anthropic-sdk-go) | `1.36.0` | `1.51.0` |
| [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) | `0.135.0` | `0.140.0` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.1` | `5.10.0` |
| [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) | `0.59.0` | `0.60.0` |
| [github.com/quic-go/webtransport-go](https://github.com/quic-go/webtransport-go) | `0.10.0` | `0.11.0` |
| [github.com/rabbitmq/amqp091-go](https://github.com/rabbitmq/amqp091-go) | `1.10.0` | `1.12.0` |
| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.18.0` | `9.20.1` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp](https://github.com/open-telemetry/opentelemetry-go) | `0.19.0` | `0.20.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [google.golang.org/genai](https://github.com/googleapis/go-genai) | `1.54.0` | `1.61.0` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.48.2` | `1.52.0` |



Updates `github.com/anthropics/anthropic-sdk-go` from 1.36.0 to 1.51.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-go/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-go/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-go@v1.36.0...v1.51.0)

Updates `github.com/getkin/kin-openapi` from 0.135.0 to 0.140.0
- [Release notes](https://github.com/getkin/kin-openapi/releases)
- [Commits](getkin/kin-openapi@v0.135.0...v0.140.0)

Updates `github.com/jackc/pgx/v5` from 5.9.1 to 5.10.0
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.9.1...v5.10.0)

Updates `github.com/quic-go/quic-go` from 0.59.0 to 0.60.0
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](quic-go/quic-go@v0.59.0...v0.60.0)

Updates `github.com/quic-go/webtransport-go` from 0.10.0 to 0.11.0
- [Release notes](https://github.com/quic-go/webtransport-go/releases)
- [Commits](quic-go/webtransport-go@v0.10.0...v0.11.0)

Updates `github.com/rabbitmq/amqp091-go` from 1.10.0 to 1.12.0
- [Release notes](https://github.com/rabbitmq/amqp091-go/releases)
- [Changelog](https://github.com/rabbitmq/amqp091-go/blob/main/CHANGELOG.md)
- [Commits](rabbitmq/amqp091-go@v1.10.0...v1.12.0)

Updates `github.com/redis/go-redis/v9` from 9.18.0 to 9.20.1
- [Release notes](https://github.com/redis/go-redis/releases)
- [Changelog](https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md)
- [Commits](redis/go-redis@v9.18.0...v9.20.1)

Updates `go.opentelemetry.io/otel` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` from 0.19.0 to 0.20.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v0.19.0...v0.20.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/log` from 0.19.0 to 0.20.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v0.19.0...v0.20.0)

Updates `go.opentelemetry.io/otel/metric` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/sdk/log` from 0.19.0 to 0.20.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v0.19.0...v0.20.0)

Updates `go.opentelemetry.io/otel/sdk/metric` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/trace` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `golang.org/x/crypto` from 0.50.0 to 0.51.0
- [Commits](golang/crypto@v0.50.0...v0.51.0)

Updates `golang.org/x/net` from 0.53.0 to 0.55.0
- [Commits](golang/net@v0.53.0...v0.55.0)

Updates `golang.org/x/sys` from 0.43.0 to 0.45.0
- [Commits](golang/sys@v0.43.0...v0.45.0)

Updates `golang.org/x/text` from 0.36.0 to 0.37.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.36.0...v0.37.0)

Updates `google.golang.org/genai` from 1.54.0 to 1.61.0
- [Release notes](https://github.com/googleapis/go-genai/releases)
- [Changelog](https://github.com/googleapis/go-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/go-genai@v1.54.0...v1.61.0)

Updates `modernc.org/sqlite` from 1.48.2 to 1.52.0
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.48.2...v1.52.0)

---
updated-dependencies:
- dependency-name: github.com/anthropics/anthropic-sdk-go
  dependency-version: 1.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/getkin/kin-openapi
  dependency-version: 0.140.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.60.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/quic-go/webtransport-go
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/rabbitmq/amqp091-go
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/redis/go-redis/v9
  dependency-version: 9.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel/log
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel/sdk/log
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel/sdk/metric
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/crypto
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/net
  dependency-version: 0.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/sys
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/text
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: google.golang.org/genai
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: modernc.org/sqlite
  dependency-version: 1.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Dependency updates go Go service changes labels Jun 19, 2026
@dependabot dependabot Bot requested a review from eser as a code owner June 19, 2026 08:39
@dependabot dependabot Bot added dependencies Dependency updates go Go service changes labels Jun 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@eser eser Awaiting requested review from eser eser is a code owner

Assignees

No one assigned

Labels

dependencies Dependency updates go Go service changes

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants