Skip to content

build(deps): bump the low-risk group across 1 directory with 4 updates#3

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/low-risk-17c6718926
Open

build(deps): bump the low-risk group across 1 directory with 4 updates#3
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/low-risk-17c6718926

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps the low-risk group with 3 updates in the / directory: github.com/aws/aws-sdk-go-v2/service/ssm, github.com/aws/aws-sdk-go-v2/config and github.com/hashicorp/go-plugin.

Updates github.com/aws/aws-sdk-go-v2/service/ssm from 1.68.4 to 1.68.6

Commits

Updates github.com/aws/aws-sdk-go-v2 from 1.41.5 to 1.41.7

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.14 to 1.32.17

Commits

Updates github.com/hashicorp/go-plugin from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/hashicorp/go-plugin's releases.

v1.8.0

What’s Changed

Compliance & Maintenance

  • updated copyright and license headers
  • Modernized build tags
  • Multiple GitHub Actions and dependency bumps

Fixes & Improvements

  • Fixed concurrency issue with pipesWaitGroup
  • Prevented pidfd leak in cmdrunner
  • Reduced logging configuration noise

Enhancements

  • Updated go_package to full path in proto
  • Improved gRPC example (plugin selection + encoding fix)
  • Added gRPC streaming example

Dependencies Upgrade

  • Upgraded protobuf
  • Several CI/CD action updates

New Contributors


Commits
  • 155dcdd cmdrunner: release process handle in _pidAlive to avoid pidfd leak (#378)
  • 96d18ee [chore] : Bump actions/upload-artifact in the actions group (#376)
  • a0c251c [chore] : Bump actions/setup-go from 6.3.0 to 6.4.0 in the actions group (#375)
  • 6a56553 [chore] : Bump the actions group with 2 updates (#373)
  • abeb978 Bump protobuf from 4.25.8 to 5.29.6 in /examples/grpc/plugin-python (#372)
  • a4c9002 examples: Add gRPC streaming example (#339)
  • 0ac49e2 [chore] : Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group (#370)
  • d662936 logging: lower priority of configuring messages (#311)
  • c57bf64 [chore] : Bump actions/setup-go from 6.1.0 to 6.2.0 in the actions group (#369)
  • a33e454 chore: add plugin selection and fix encoding in gRPC example (#368)
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the low-risk group with 3 updates in the / directory: [github.com/aws/aws-sdk-go-v2/service/ssm](https://github.com/aws/aws-sdk-go-v2), [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) and [github.com/hashicorp/go-plugin](https://github.com/hashicorp/go-plugin).


Updates `github.com/aws/aws-sdk-go-v2/service/ssm` from 1.68.4 to 1.68.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ssm/v1.68.4...service/ssm/v1.68.6)

Updates `github.com/aws/aws-sdk-go-v2` from 1.41.5 to 1.41.7
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.41.5...v1.41.7)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.14 to 1.32.17
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.14...config/v1.32.17)

Updates `github.com/hashicorp/go-plugin` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/hashicorp/go-plugin/releases)
- [Changelog](https://github.com/hashicorp/go-plugin/blob/main/CHANGELOG.md)
- [Commits](hashicorp/go-plugin@v1.7.0...v1.8.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ssm
  dependency-version: 1.68.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: low-risk
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.41.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: low-risk
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: low-risk
- dependency-name: github.com/hashicorp/go-plugin
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: low-risk
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 4, 2026

Assignees

The following users could not be added as assignees: elvenspellmaker. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 4, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 4, 2026

Code Coverage

Package Line Rate Health
github.com/DevLabFoundry/configmanager-plugin-awsparamstr 52%
github.com/DevLabFoundry/configmanager-plugin-awsparamstr/impl 95%
Summary 70% (32 / 46)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants