Skip to content

Build(deps): Bump the pre-approved group with 14 updates - #1022

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/go_modules/pre-approved-2c79f17b66
Nov 11, 2026
Merged

Build(deps): Bump the pre-approved group with 14 updates#1022
github-actions[bot] merged 1 commit into
mainfrom
dependabot/go_modules/pre-approved-2c79f17b66

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the pre-approved group with 14 updates:

Package From To
github.com/aws/aws-sdk-go-v2 1.47.5 1.47.8
github.com/aws/aws-sdk-go-v2/config 1.33.13 1.33.16
github.com/aws/aws-sdk-go-v2/credentials 1.20.13 1.20.16
github.com/aws/aws-sdk-go-v2/service/dynamodb 1.72.3 1.73.2
github.com/aws/aws-sdk-go-v2/service/s3 1.114.6 1.114.9
github.com/aws/aws-sdk-go-v2/service/sts 1.51.6 1.51.9
github.com/aws/smithy-go 1.28.7 1.28.8
github.com/dogmatiq/enginekit 0.30.0 0.31.0
github.com/dogmatiq/protobuf 0.2.0 0.7.0
github.com/jackc/pgx/v5 5.11.0 5.12.0
github.com/testcontainers/testcontainers-go 0.44.0 0.45.0
github.com/testcontainers/testcontainers-go/modules/dynamodb 0.44.0 0.45.0
github.com/testcontainers/testcontainers-go/modules/localstack 0.44.0 0.45.0
github.com/testcontainers/testcontainers-go/modules/postgres 0.44.0 0.45.0

Updates github.com/aws/aws-sdk-go-v2 from 1.47.5 to 1.47.8

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.13 to 1.33.16

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.20.13 to 1.20.16

Commits

Updates github.com/aws/aws-sdk-go-v2/service/dynamodb from 1.72.3 to 1.73.2

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.114.6 to 1.114.9

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.51.6 to 1.51.9

Commits

Updates github.com/aws/smithy-go from 1.28.7 to 1.28.8

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-11-09)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.9
    • Bug Fix: Fix schema serde serializing struct members marked with the SDK-internal NoSerialize trait.
    • Bug Fix: Fix unions inside lists and maps being serialized with the wrong element names or keys under schema serde for awsQuery and XML protocols.
  • github.com/aws/smithy-go/aws-http-auth: v1.2.2
    • Bug Fix: Sort canonical query parameters after URI-encoding them, as required by SigV4.

Release (2026-11-03)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.8
    • Bug Fix: Preserve the exact value of numbers in JSON codec instead of automatically parsing to float64.

Release (2026-10-27)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.7
    • Bug Fix: Fix a panic or EOF error when deserializing a JSON union that contains a member not modeled by the client and whose value is not null.
    • Bug Fix: Log the underlying error when dumping an HTTP request or response for logging fails

Release (2026-10-21)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.6
    • Bug Fix: Enforce event stream header key value length limit instead of truncating
    • Bug Fix: Retain the value in a list with the zero value when encountering a null entry on a dense list. This matches how legacy code-generated JSON deserializers behaved.

Release (2026-10-09)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.5
    • Bug Fix: Retain the key with the zero value when encountering a null-value key in a dense map. This matches how legacy code-generated JSON deserializers behaved.

... (truncated)

Commits
  • 5f09676 Release 2026-11-03
  • 022048e preserve number precision in json documents (#745)
  • 7f50fd8 fix event stream issues found during corpus protocol test (#743)
  • 8c9c804 fixup broken protocol test compilation (#740)
  • cf3594a Fix malformed JSON when serializing nil lists or maps in union members, map v...
  • See full diff in compare view

Updates github.com/dogmatiq/enginekit from 0.30.0 to 0.31.0

Release notes

Sourced from github.com/dogmatiq/enginekit's releases.

Version 0.31.0

Changed

  • Updated to [github.com/dogmatiq/protobuf] v0.7.0.

Removed

  • [BC] Removed the x/xsync package. Its types are now provided by github.com/dogmatiq/cosyne, with the same names, except that xsync.SucceedOnce is now cosyne.Once. xsync.ChangeObservable() has no replacement.
Changelog

Sourced from github.com/dogmatiq/enginekit's changelog.

[0.31.0] - 2026-11-06

Changed

  • Updated to [github.com/dogmatiq/protobuf] v0.7.0.

Removed

  • [BC] Removed the x/xsync package. Its types are now provided by github.com/dogmatiq/cosyne, with the same names, except that xsync.SucceedOnce is now cosyne.Once. xsync.ChangeObservable() has no replacement.
Commits
  • ab64799 Bump version to 0.31.0
  • 760f45a Bump github.com/dogmatiq/protobuf to v0.7.0.
  • 6d75133 Merge pull request #191 from dogmatiq/remove-xsync
  • 29e36db Remove x/xsync, which is replaced by cosyne.
  • 936c6ef Regenerate APM configuration from template.
  • See full diff in compare view

Updates github.com/dogmatiq/protobuf from 0.2.0 to 0.7.0

Release notes

Sourced from github.com/dogmatiq/protobuf's releases.

Version 0.7.0

Added

  • Added Go AsMultiEnvelopes() and TypeScript asMultiEnvelopes() to group consecutive envelopes with equivalent headers into multi-envelopes while preserving message order.

Changed

  • [BC] TypeScript getExtension() and getBaggage() now throw when the requested value is absent. Use tryGetExtension() and tryGetBaggage() for the previous behavior of returning undefined. Both forms still throw when the selected value cannot be decoded.
  • [BC] Changed WatchEvents to return ABORTED instead of RESOURCE_EXHAUSTED when a client cannot keep up, so that it can't be confused with RESOURCE_EXHAUSTED errors produced by gRPC itself or by proxies.

Removed

  • [BC] Removed EventStreamConsumerTooSlow and the Go helper EventStreamConsumerTooSlowError(). The ABORTED code alone identifies the error.
  • [BC] Removed UnrecognizedEventStream and the Go helper UnrecognizedEventStreamError(). ReadEvents still returns NOT_FOUND for an unrecognized stream ID, without error details.

Version 0.6.0

Added

  • Restored MultiEnvelope and its Go and TypeScript batching, expansion and validation helpers.

Changed

  • [BC] Changed EventStreamSegment.envelopes to contain MultiEnvelope values again, preserving message order within and across multi-envelopes.

Version 0.5.0

Added

  • Added MessageFilter with explicit all-types and specific-types selections, and Go and TypeScript validation helpers.
  • Added EventStreamConsumerTooSlow and the Go helper EventStreamConsumerTooSlowError() for RESOURCE_EXHAUSTED errors when a client cannot keep up and event stream delivery can no longer continue contiguously.

Changed

  • [BC] Changed EventStreamSegment.envelopes to contain individual Envelope values instead of MultiEnvelope values.
  • [BC] Replaced message_type_ids in WatchEventsRequest and ReadEventsRequest with a required filter. Missing filters, filters with no selection, and empty specific-type selections are invalid and result in INVALID_ARGUMENT from either RPC.
  • Clarified event matching, stream discovery and segment continuity requirements for WatchEvents and ReadEvents.
  • Changed WatchEvents to return RESOURCE_EXHAUSTED with an attached EventStreamConsumerTooSlow detail when a client cannot keep up and delivery can no longer continue contiguously.

Removed

  • [BC] Removed MultiEnvelope and its Go and TypeScript batching, expansion and validation helpers. Use individual Envelope values instead.

Fixed

  • Fixed TypeScript validateUUID() accepting negative or overflowing UUID components when their version and variant bits were otherwise valid.

... (truncated)

Changelog

Sourced from github.com/dogmatiq/protobuf's changelog.

[0.7.0] - 2026-11-06

Added

  • Added Go AsMultiEnvelopes() and TypeScript asMultiEnvelopes() to group consecutive envelopes with equivalent headers into multi-envelopes while preserving message order.

Changed

  • [BC] TypeScript getExtension() and getBaggage() now throw when the requested value is absent. Use tryGetExtension() and tryGetBaggage() for the previous behavior of returning undefined. Both forms still throw when the selected value cannot be decoded.
  • [BC] Changed WatchEvents to return ABORTED instead of RESOURCE_EXHAUSTED when a client cannot keep up, so that it can't be confused with RESOURCE_EXHAUSTED errors produced by gRPC itself or by proxies.

Removed

  • [BC] Removed EventStreamConsumerTooSlow and the Go helper EventStreamConsumerTooSlowError(). The ABORTED code alone identifies the error.
  • [BC] Removed UnrecognizedEventStream and the Go helper UnrecognizedEventStreamError(). ReadEvents still returns NOT_FOUND for an unrecognized stream ID, without error details.

[0.6.0] - 2026-11-06

Added

  • Restored MultiEnvelope and its Go and TypeScript batching, expansion and validation helpers.

Changed

  • [BC] Changed EventStreamSegment.envelopes to contain MultiEnvelope values again, preserving message order within and across multi-envelopes.

[0.5.0] - 2026-11-06

Added

  • Added MessageFilter with explicit all-types and specific-types selections, and Go and TypeScript validation helpers.
  • Added EventStreamConsumerTooSlow and the Go helper EventStreamConsumerTooSlowError() for RESOURCE_EXHAUSTED errors when a client cannot keep up and event stream delivery can no longer continue contiguously.

... (truncated)

Commits
  • 9964006 Bump version to 0.7.0
  • a753d27 Merge pull request #29 from dogmatiq/group-envelopes
  • c79d8b3 Remove error-details types and use ABORTED for slow consumers
  • 2c600ff Rename multi-envelope conversion files and remove benchmarks
  • a4d6ed6 Make direct body batching advice explicit in API docs
  • 6bf6d9a Space Go control flow and combine adjacent var declarations
  • 7d772ec Put multiline builder arguments on separate lines
  • fb2f2dd Format Go builder chains with one call per line
  • 57dcdb9 Name sequence conversion AsMultiEnvelopes
  • d265ca1 Clarify multi-envelope grouping names and buffering behavior
  • Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.11.0 to 5.12.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.12.0 (October 30, 2026)

This release fixes two security vulnerabilities with narrow triggering conditions but serious impact. Affected applications should upgrade to v5.12.0; see Security Fixes below.

It also adds batched transaction startup, client certificate policy controls, and per-query batch timing, and improves connection pool cancellation and type handling. Custom implementations of BatchResults, including mocks, must add the new Tx method.

Security Fixes

  • SQL injection in simple-protocol batches (GHSA-j38q-h3ph-jjpq, high severity). In pgx v5 before v5.12.0, SendBatch using the non-default simple protocol could allow arbitrary SQL execution with the application's database privileges when a queued query ends in a -- comment without a newline and the next query has an attacker-controlled string argument on its first line. Batched queries are now separated by a newline to end such comments. Extended-protocol modes are unaffected. Reported by Igor Kupczyński (@​igor-kupczynski).
  • Bypass of require_auth and channel_binding=require (GHSA-95fj-3fxw-g62g, high severity). In pgx v5.9.0 through v5.11.0, applications relying on these settings without verifying the server's identity with sslmode=verify-full (or equivalent TLS verification) could accept an impersonating server that skips authentication. The attacker could read queries and parameters and return fabricated results. pgx now enforces authentication completion and required channel binding before accepting the connection. This vulnerability does not bypass TLS server certificate verification. Reported by @​president-xd.

Features

  • Add Batch.BeginTx and BatchResults.Tx to begin a transaction as the first query of a batch, saving the round trip for BeginTx. Call Batch.BeginTx before queuing any queries, consume the begin query's result first, and close the batch before using the transaction. With pgxpool.Pool.SendBatch, the connection remains acquired until the transaction is committed or rolled back. Add FailedBatchResults for wrappers that fail before sending a batch (Timo Furrer)
  • Add TraceBatchQueryData.ReadStartTime and per-query durations to tracelog batch query entries. These measure result consumption, including application time spent reading rows, rather than server execution alone (Yasser-Ameur)
  • pgconn: support the sslcertmode connection parameter, PGSSLCERTMODE environment variable, and Config.SSLCertMode. The default, allow, sends an available client certificate when requested; disable prevents sending one and skips loading certificate/key files; require fails unless the server requests and receives a certificate. require does not guarantee server-side certificate validation, disables TLS session resumption, and stops further host or TLS fallbacks when the certificate requirement fails (k-zshiba)
  • pgtype: add support for PostgreSQL 19's oid8 and oid8[] (k-zshiba)

Changes

  • pgxpool: background attempts to satisfy MinConns and MinIdleConns now have a 60-second timeout, including connection hooks. Initial background connections preserve the constructor context's values but ignore its cancellation and deadline.
  • pgxpool: canceling Acquire during a health-check ping now returns promptly and lets a successful ping return

... (truncated)

Commits
  • b2ef08b Update changelog for v5.12.0
  • 8199015 Merge commit from fork
  • 5b1a6a0 Merge commit from fork
  • 65a4125 Merge pull request #2697 from b84330808/windows-default-servicefile
  • f2701a0 pgconn: only fall back when Windows service file is missing
  • db95468 Merge pull request #2696 from k-zshiba/support-oid8
  • fa2327d Start each query on a new line when joining a simple protocol batch
  • 2283b85 pgconn: read the default service file from %APPDATA%\postgresql on Windows
  • efc0b74 Merge upstream master into support-oid8
  • 5a17450 pgconn: require AuthenticationOk before ReadyForQuery
  • Additional commits viewable in compare view

Updates github.com/testcontainers/testcontainers-go from 0.44.0 to 0.45.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.45.0

What's Changed

⚠️ Breaking Changes

Client SDK dependencies have moved into separate examples modules. For CockroachDB, ConnectionConfig is now available through cockroachdbexamples.NewContainer(c) in modules/cockroachdb/examples. The parent’s ConnectionString and MustConnectionString now return PostgreSQL URLs instead of registered pgx handles, and importing the parent no longer registers the pgx SQL driver. Use the examples adapter to retain the previous SDK behavior, or configure the driver yourself.

For Dex, AddClient, RemoveClient, AddUser, and RemoveUser have moved from *dex.Container to dexexamples.NewAdminClient(c) in modules/dex/examples. Static configuration through WithClient and WithUser is unchanged.

For Cosmos DB, ContainerPolicy and NewContainerPolicy have moved from modules/azure/cosmosdb to modules/azure/examples/cosmosdb. Update the adapter import; its constructor still accepts the parent container. Run, Container, and ConnectionString remain unchanged in the parent module.

🔒 Security

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

... (truncated)

Commits
  • b4fe821 chore: use new version (v0.45.0) in modules and examples
  • d40be72 chore(deps): bump github.com/go-jose/go-jose/v4 in /modules/dex/examples (#4088)
  • 0d12cc6 chore(modules): finish test client isolation and document examples modules (#...
  • 9cc89fd chore(modules): isolate eight remaining compatible client SDKs (#4086)
  • 9ec5407 chore(modules)!: extract CockroachDB and Dex client adapters (#4087)
  • 5c9480f chore(modules): isolate client examples across eleven more modules (#4084)
  • 6aaef66 fix(ci): initialize sbx network policy before tests (#4085)
  • 55f58fe chore(modules): isolate client examples across eleven modules (#4083)
  • ea5a2e8 chore(deps): bump go.mongodb.org/mongo-driver (#4075)
  • 60b08c4 docs: show cumulative clones and unique cloners (#4082)
  • Additional commits viewable in compare view

Updates github.com/testcontainers/testcontainers-go/modules/dynamodb from 0.44.0 to 0.45.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go/modules/dynamodb's releases.

v0.45.0

What's Changed

⚠️ Breaking Changes

Client SDK dependencies have moved into separate examples modules. For CockroachDB, ConnectionConfig is now available through cockroachdbexamples.NewContainer(c) in modules/cockroachdb/examples. The parent’s ConnectionString and MustConnectionString now return PostgreSQL URLs instead of registered pgx handles, and importing the parent no longer registers the pgx SQL driver. Use the examples adapter to retain the previous SDK behavior, or configure the driver yourself.

For Dex, AddClient, RemoveClient, AddUser, and RemoveUser have moved from *dex.Container to dexexamples.NewAdminClient(c) in modules/dex/examples. Static configuration through WithClient and WithUser is unchanged.

For Cosmos DB, ContainerPolicy and NewContainerPolicy have moved from modules/azure/cosmosdb to modules/azure/examples/cosmosdb. Update the adapter import; its constructor still accepts the parent container. Run, Container, and ConnectionString remain unchanged in the parent module.

🔒 Security

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

... (truncated)

Commits
  • b4fe821 chore: use new version (v0.45.0) in modules and examples
  • d40be72 chore(deps): bump github.com/go-jose/go-jose/v4 in /modules/dex/examples (#4088)
  • 0d12cc6 chore(modules): finish test client isolation and document examples modules (#...
  • 9cc89fd chore(modules): isolate eight remaining compatible client SDKs (#4086)
  • 9ec5407 chore(modules)!: extract CockroachDB and Dex client adapters (#4087)
  • 5c9480f chore(modules): isolate client examples across eleven more modules (#4084)
  • 6aaef66 fix(ci): initialize sbx network policy before tests (#4085)
  • 55f58fe chore(modules): isolate client examples across eleven modules (#4083)
  • ea5a2e8 chore(deps): bump go.mongodb.org/mongo-driver (#4075)
  • 60b08c4 docs: show cumulative clones and unique cloners (#4082)
  • Additional commits viewable in compare view

Updates github.com/testcontainers/testcontainers-go/modules/localstack from 0.44.0 to 0.45.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go/modules/localstack's releases.

v0.45.0

What's Changed

⚠️ Breaking Changes

Client SDK dependencies have moved into separate examples modules. For CockroachDB, ConnectionConfig is now available through cockroachdbexamples.NewContainer(c) in modules/cockroachdb/examples. The parent’s ConnectionString and MustConnectionString now return PostgreSQL URLs instead of registered pgx handles, and importing the parent no longer registers the pgx SQL driver. Use the examples adapter to retain the previous SDK behavior, or configure the driver yourself.

For Dex, AddClient, RemoveClient, AddUser, and RemoveUser have moved from *dex.Container to dexexamples.NewAdminClient(c) in modules/dex/examples. Static configuration through WithClient and WithUser is unchanged.

For Cosmos DB, ContainerPolicy and NewContainerPolicy have moved from modules/azure/cosmosdb to modules/azure/examples/cosmosdb. Update the adapter import; its constructor still accepts the parent container. Run, Container, and ConnectionString remain unchanged in the parent module.

🔒 Security

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

... (truncated)

Commits
  • b4fe821 chore: use new version (v0.45.0) in modules and examples
  • d40be72 chore(deps): bump github.com/go-jose/go-jose/v4 in /modules/dex/examples (#4088)
  • 0d12cc6 chore(modules): finish test client isolation and document examples modules (#...
  • 9cc89fd chore(modules): isolate eight remaining compatible client SDKs (#4086)
  • 9ec5407 chore(modules)!: extract CockroachDB and Dex client adapters (#4087)
  • 5c9480f chore(modules): isolate client examples across eleven more modules (#4084)

@dependabot
Build(deps): Bump the pre-approved group with 14 updates
0986f29 
Bumps the pre-approved group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.47.5` | `1.47.8` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.13` | `1.33.16` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.20.13` | `1.20.16` |
| [github.com/aws/aws-sdk-go-v2/service/dynamodb](https://github.com/aws/aws-sdk-go-v2) | `1.72.3` | `1.73.2` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.114.6` | `1.114.9` |
| [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.51.6` | `1.51.9` |
| [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.28.7` | `1.28.8` |
| [github.com/dogmatiq/enginekit](https://github.com/dogmatiq/enginekit) | `0.30.0` | `0.31.0` |
| [github.com/dogmatiq/protobuf](https://github.com/dogmatiq/protobuf) | `0.2.0` | `0.7.0` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.11.0` | `5.12.0` |
| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.44.0` | `0.45.0` |
| [github.com/testcontainers/testcontainers-go/modules/dynamodb](https://github.com/testcontainers/testcontainers-go) | `0.44.0` | `0.45.0` |
| [github.com/testcontainers/testcontainers-go/modules/localstack](https://github.com/testcontainers/testcontainers-go) | `0.44.0` | `0.45.0` |
| [github.com/testcontainers/testcontainers-go/modules/postgres](https://github.com/testcontainers/testcontainers-go) | `0.44.0` | `0.45.0` |


Updates `github.com/aws/aws-sdk-go-v2` from 1.47.5 to 1.47.8
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.47.5...v1.47.8)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.13 to 1.33.16
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.33.13...config/v1.33.16)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.20.13 to 1.20.16
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.20.13...credentials/v1.20.16)

Updates `github.com/aws/aws-sdk-go-v2/service/dynamodb` from 1.72.3 to 1.73.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.72.3...service/s3/v1.73.2)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.114.6 to 1.114.9
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.114.6...service/s3/v1.114.9)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.51.6 to 1.51.9
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/fsx/v1.51.6...service/fsx/v1.51.9)

Updates `github.com/aws/smithy-go` from 1.28.7 to 1.28.8
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.28.7...v1.28.8)

Updates `github.com/dogmatiq/enginekit` from 0.30.0 to 0.31.0
- [Release notes](https://github.com/dogmatiq/enginekit/releases)
- [Changelog](https://github.com/dogmatiq/enginekit/blob/main/CHANGELOG.md)
- [Commits](dogmatiq/enginekit@v0.30.0...v0.31.0)

Updates `github.com/dogmatiq/protobuf` from 0.2.0 to 0.7.0
- [Release notes](https://github.com/dogmatiq/protobuf/releases)
- [Changelog](https://github.com/dogmatiq/protobuf/blob/main/CHANGELOG.md)
- [Commits](dogmatiq/protobuf@v0.2.0...v0.7.0)

Updates `github.com/jackc/pgx/v5` from 5.11.0 to 5.12.0
- [Release notes](https://github.com/jackc/pgx/releases)
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.11.0...v5.12.0)

Updates `github.com/testcontainers/testcontainers-go` from 0.44.0 to 0.45.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.44.0...v0.45.0)

Updates `github.com/testcontainers/testcontainers-go/modules/dynamodb` from 0.44.0 to 0.45.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.44.0...v0.45.0)

Updates `github.com/testcontainers/testcontainers-go/modules/localstack` from 0.44.0 to 0.45.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.44.0...v0.45.0)

Updates `github.com/testcontainers/testcontainers-go/modules/postgres` from 0.44.0 to 0.45.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.44.0...v0.45.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.47.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pre-approved
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pre-approved
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.20.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pre-approved
- dependency-name: github.com/aws/aws-sdk-go-v2/service/dynamodb
  dependency-version: 1.73.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pre-approved
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.114.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pre-approved
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.51.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pre-approved
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.28.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pre-approved
- dependency-name: github.com/dogmatiq/enginekit
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pre-approved
- dependency-name: github.com/dogmatiq/protobuf
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pre-approved
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pre-approved
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pre-approved
- dependency-name: github.com/testcontainers/testcontainers-go/modules/dynamodb
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pre-approved
- dependency-name: github.com/testcontainers/testcontainers-go/modules/localstack
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pre-approved
- dependency-name: github.com/testcontainers/testcontainers-go/modules/postgres
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pre-approved
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 11, 2026
@dependabot dependabot Bot mentioned this pull request Nov 11, 2026
Closed
@github-actions
github-actions Bot enabled auto-merge November 11, 2026 07:52
This was referenced Nov 11, 2026
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
@github-actions
github-actions Bot merged commit 54d987b into main Nov 11, 2026
10 of 11 checks passed
@github-actions
github-actions Bot deleted the dependabot/go_modules/pre-approved-2c79f17b66 branch November 11, 2026 07:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants