Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 14 updates - #119

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/minor-and-patch-c0494e2daa
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/minor-and-patch-c0494e2daa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 14 updates in the / directory:

Package From To
github.com/go-webauthn/webauthn 0.17.4 0.18.1
github.com/xraph/chronicle 1.6.2 1.6.4
github.com/xraph/forge 1.11.0 1.11.1
github.com/xraph/forge/extensions/auth 1.11.0 1.11.1
github.com/xraph/herald 1.6.1 1.6.2
github.com/xraph/keysmith 1.6.2 1.6.3
github.com/xraph/relay 1.6.2 1.6.3
github.com/xraph/warden 1.6.2 1.6.4
go.mongodb.org/mongo-driver/v2 2.8.0 2.9.1
golang.org/x/crypto 0.55.0 0.57.0
golang.org/x/oauth2 0.36.0 0.37.0
github.com/xraph/dispatch 1.6.2 1.6.7
github.com/xraph/ledger 1.6.1 1.6.4
github.com/xraph/vault 1.6.1 1.6.4

Updates github.com/go-webauthn/webauthn from 0.17.4 to 0.18.1

Release notes

Sourced from github.com/go-webauthn/webauthn's releases.

v0.18.1

0.18.1 (2026-09-10)

This release just updates dependencies.

v0.18.0

0.18.0 (2026-08-27)

This release is a fairly major milestone in the development of this library. It has quite a few breaking changes but has added support for most if not all of the extension requirements natively, and adds formal support for Post-Quantum Cryptography with support for ML-DSA-44, ML-DSA-65, and ML-DSA-87 when used with go 1.27.

Details on the migration requirements for this version can be found int https://github.com/go-webauthn/webauthn/blob/HEAD/MIGRATION.md as they are substantial between ths version and prior versions.

Bug Fixes

  • metadata: align members with mds 3.1.1 and ctap 2.3 (#739) (397152c)
  • metadata: consistent revocation policy and client timeouts (#740) (34d324b)
  • metadata: handle certificate chains of any depth (#737) (309ea69)
  • metadata: honour status report order and effective dates (#736) (8be5355)
  • metadata: mds3 parsing conformance and cache integrity (#735) (8115143)
  • metadata: prevent panic corrupt blob (#698) (c5fd013)
  • metadata: report malformed status report urls (#738) (ed82f7c)
  • protocol: allow any attestation eku (#728) (f4e33fc)
  • protocol: androidkey missing authorization list member (#727) (9b02b19)
  • protocol: androidkey union generated (#729) (3ed3e75)
  • protocol: bind credential public key curve to its algorithm (#752) (314c2be)
  • protocol: compound attestation sub-statement unmarshalling (#751) (a582ecf)
  • protocol: compound returns incorrect type (#731) (025d897)
  • protocol: credential public key match limited to ECDSA (#732) (b4df26e)
  • protocol: harden credential response and options handling (#763) (de0ae6c)
  • protocol: missing tpm steps (#725) (f9a63f9)
  • protocol: opaque origin matching and validation (#758) (37f065a)
  • protocol: possible panic conditions (#719) (0ea14e7)
  • protocol: safetynet validation steps (#726) (e12f6e8)
  • protocol: single signature encoding policy and canonical der (#744) (99bbbdb)
  • webauthncbor: reject data trailing the first cbor item (#762) (0801b5d)
  • webauthncose: validate okp key algorithm (#759) (98c528b)
  • webauthn: deprecations and handle check (#745) (8619bb9)
  • webauthn: include backup flag check in registration (#748) (26a4868)
  • webauthn: only update uv flag (#746) (b39c822)
  • webauthn: use session relying party id (#747) (ebb45e2)

Features

  • metadata: update to r46 anchor (#780) (20f33e6)
  • ml-dsa preference list and gated availability (#768) (db1e068)
  • protocol: client capability enumeration (#765) (62f4489)

... (truncated)

Changelog

Sourced from github.com/go-webauthn/webauthn's changelog.

0.18.1 (2026-09-10)

This release just updates dependencies.

0.18.0 (2026-08-27)

This release is a fairly major milestone in the development of this library. It has quite a few breaking changes but has added support for most if not all of the extension requirements natively, and adds formal support for Post-Quantum Cryptography with support for ML-DSA-44, ML-DSA-65, and ML-DSA-87 when used with go 1.27.

Details on the migration requirements for this version can be found int [MIGRATION.md] as they are substantial between ths version and prior versions.

Bug Fixes

  • metadata: align members with mds 3.1.1 and ctap 2.3 (#739) (397152c)
  • metadata: consistent revocation policy and client timeouts (#740) (34d324b)
  • metadata: handle certificate chains of any depth (#737) (309ea69)
  • metadata: honour status report order and effective dates (#736) (8be5355)
  • metadata: mds3 parsing conformance and cache integrity (#735) (8115143)
  • metadata: prevent panic corrupt blob (#698) (c5fd013)
  • metadata: report malformed status report urls (#738) (ed82f7c)
  • protocol: allow any attestation eku (#728) (f4e33fc)
  • protocol: androidkey missing authorization list member (#727) (9b02b19)
  • protocol: androidkey union generated (#729) (3ed3e75)
  • protocol: bind credential public key curve to its algorithm (#752) (314c2be)
  • protocol: compound attestation sub-statement unmarshalling (#751) (a582ecf)
  • protocol: compound returns incorrect type (#731) (025d897)
  • protocol: credential public key match limited to ECDSA (#732) (b4df26e)
  • protocol: harden credential response and options handling (#763) (de0ae6c)
  • protocol: missing tpm steps (#725) (f9a63f9)
  • protocol: opaque origin matching and validation (#758) (37f065a)
  • protocol: possible panic conditions (#719) (0ea14e7)
  • protocol: safetynet validation steps (#726) (e12f6e8)
  • protocol: single signature encoding policy and canonical der (#744) (99bbbdb)
  • webauthncbor: reject data trailing the first cbor item (#762) (0801b5d)
  • webauthncose: validate okp key algorithm (#759) (98c528b)
  • webauthn: deprecations and handle check (#745) (8619bb9)
  • webauthn: include backup flag check in registration (#748) (26a4868)
  • webauthn: only update uv flag (#746) (b39c822)
  • webauthn: use session relying party id (#747) (ebb45e2)

Features

  • metadata: update to r46 anchor (#780) (20f33e6)
  • ml-dsa preference list and gated availability (#768) (db1e068)
  • protocol: client capability enumeration (#765) (62f4489)
  • protocol: compound sub-statement scope (#742) (34271da)
  • protocol: current user details signal constructor (#766) (b6db923)

... (truncated)

Commits
  • 11e925a build(deps): update module github.com/go-webauthn/x to v0.3.1 (#788)
  • ed90e05 ci: remove 1.25 (#789)
  • 694270d build(deps): update github/codeql-action action to v4.38.0 (#787)
  • 88cfed9 refactor(webauthncose): ensure completeness by including oid (#786)
  • f4b5ef4 test(protocol): add ml-dsa tests (#785)
  • a3acfe3 build(deps): update go toolchain directive to v1.27.1 (#784)
  • d55288e build(deps): update step-security/harden-runner action to v2.21.1 (#783)
  • 109da34 release: v0.18.0 (#782)
  • 4977ba1 docs: breaking (#781)
  • f8eb85e build(deps): update github/codeql-action action to v4.37.9 (#779)
  • Additional commits viewable in compare view

Updates github.com/xraph/chronicle from 1.6.2 to 1.6.4

Release notes

Sourced from github.com/xraph/chronicle's releases.

v1.6.4

Changes

  • ci: ran go mod tidy (c5ffddc)

Installation

go get github.com/xraph/chronicle@v1.6.4

Full Changelog: xraph/chronicle@v1.6.3...v1.6.4

v1.6.3

Changes

  • chore: bumped version of forge deps (7c50015)

Installation

go get github.com/xraph/chronicle@v1.6.3

Full Changelog: xraph/chronicle@v1.6.2...v1.6.3

Commits

Updates github.com/xraph/forge from 1.11.0 to 1.11.1

Release notes

Sourced from github.com/xraph/forge's releases.

v1.11.1

Forge Framework v1.11.1 (2026-09-15T14:11:32Z)

Welcome to this new release of Forge Framework!

Changelog

New Features

  • 9523267bba65912c93c0da903224efd7795e435e: feat(cli): scaffold a Next.js dashboard with forge dashboard new --target=next (#103) (@​juicycleff)
  • d5c970e36bb2d0e6085d6fa284f9574e5a4ae38c: feat(client): duplex stream channels with a send path (#107) (@​juicycleff)
  • 1c23a5c6927eac031f908f06a051ee034e0bdd11: feat(client-devtools)!: make /overlay the full panel, move the lean view to /mini (#104) (@​juicycleff)
  • a84dc2dc61b64463a21eca7532f580e59a645bf1: feat(client-devtools): causal trace, network view and control rail (#101) (@​juicycleff)
  • a4c59755fa8d1c292ad5bfeb8dd918a18a617194: feat(client-devtools): close the gap to the panel design (#102) (@​juicycleff)

Bug Fixes

  • d96026ccddebc4d05f685497e7981cbf8910a9cc: fix(client-devtools): stop table columns collapsing, deprecate the lean view (#105) (@​juicycleff)
  • 4ee53c37c2f411421c1c02f1907233697ccd46e4: fix(deps): move the last three modules onto forge v1.11.0 (@​juicycleff)

Refactoring

  • 4f29ed012aaa27df396a1a9728314d74f330e507: refactor(dashboard)!: replace the server-rendered UI with React plugins (#99) (@​juicycleff)

Installation

Using Go Install

go install github.com/xraph/forge/cmd/forge@v1.11.1

Download Binary

Download the appropriate binary for your platform from the assets below.

Using Package Managers

# Homebrew (macOS/Linux)
brew install xraph/tap/forge
Scoop (Windows)
scoop bucket add xraph https://github.com/xraph/scoop-bucket
scoop install forge

What's Changed

Full changelog: xraph/forge@v1.11.0...v1.11.1

Changelog

Sourced from github.com/xraph/forge's changelog.

1.11.1 (2026-09-15)

Features

  • client: duplex stream channels with a send path (#107) (d5c970e3)
  • client-devtools: feat(client-devtools)!: make /overlay the full panel, move the lean view to /mini (#104) (1c23a5c6)
  • cli: scaffold a Next.js dashboard with forge dashboard new --target=next (#103) (9523267b)
  • client-devtools: close the gap to the panel design (#102) (a4c59755)
  • client-devtools: causal trace, network view and control rail (#101) (a84dc2dc)

Bug Fixes

  • client-devtools: stop table columns collapsing, deprecate the lean view (#105) (d96026cc)
  • deps: move the last three modules onto forge v1.11.0 (4ee53c37)

Refactoring

  • dashboard: refactor(dashboard)!: replace the server-rendered UI with React plugins (#99) (4f29ed01)
Commits
  • d5c970e feat(client): duplex stream channels with a send path (#107)
  • d96026c fix(client-devtools): stop table columns collapsing, deprecate the lean view ...
  • 1c23a5c feat(client-devtools)!: make /overlay the full panel, move the lean view to /...
  • 9523267 feat(cli): scaffold a Next.js dashboard with forge dashboard new --target=nex...
  • a4c5975 feat(client-devtools): close the gap to the panel design (#102)
  • a84dc2d feat(client-devtools): causal trace, network view and control rail (#101)
  • 4f29ed0 refactor(dashboard)!: replace the server-rendered UI with React plugins (#99)
  • 4ee53c3 fix(deps): move the last three modules onto forge v1.11.0
  • See full diff in compare view

Updates github.com/xraph/forge/extensions/auth from 1.11.0 to 1.11.1

Release notes

Sourced from github.com/xraph/forge/extensions/auth's releases.

v1.11.1

Forge Framework v1.11.1 (2026-09-15T14:11:32Z)

Welcome to this new release of Forge Framework!

Changelog

New Features

  • 9523267bba65912c93c0da903224efd7795e435e: feat(cli): scaffold a Next.js dashboard with forge dashboard new --target=next (#103) (@​juicycleff)
  • d5c970e36bb2d0e6085d6fa284f9574e5a4ae38c: feat(client): duplex stream channels with a send path (#107) (@​juicycleff)
  • 1c23a5c6927eac031f908f06a051ee034e0bdd11: feat(client-devtools)!: make /overlay the full panel, move the lean view to /mini (#104) (@​juicycleff)
  • a84dc2dc61b64463a21eca7532f580e59a645bf1: feat(client-devtools): causal trace, network view and control rail (#101) (@​juicycleff)
  • a4c59755fa8d1c292ad5bfeb8dd918a18a617194: feat(client-devtools): close the gap to the panel design (#102) (@​juicycleff)

Bug Fixes

  • d96026ccddebc4d05f685497e7981cbf8910a9cc: fix(client-devtools): stop table columns collapsing, deprecate the lean view (#105) (@​juicycleff)
  • 4ee53c37c2f411421c1c02f1907233697ccd46e4: fix(deps): move the last three modules onto forge v1.11.0 (@​juicycleff)

Refactoring

  • 4f29ed012aaa27df396a1a9728314d74f330e507: refactor(dashboard)!: replace the server-rendered UI with React plugins (#99) (@​juicycleff)

Installation

Using Go Install

go install github.com/xraph/forge/cmd/forge@v1.11.1

Download Binary

Download the appropriate binary for your platform from the assets below.

Using Package Managers

# Homebrew (macOS/Linux)
brew install xraph/tap/forge
Scoop (Windows)
scoop bucket add xraph https://github.com/xraph/scoop-bucket
scoop install forge

What's Changed

Full changelog: xraph/forge@v1.11.0...v1.11.1

Changelog

Sourced from github.com/xraph/forge/extensions/auth's changelog.

1.11.1 (2026-09-15)

Features

  • client: duplex stream channels with a send path (#107) (d5c970e3)
  • client-devtools: feat(client-devtools)!: make /overlay the full panel, move the lean view to /mini (#104) (1c23a5c6)
  • cli: scaffold a Next.js dashboard with forge dashboard new --target=next (#103) (9523267b)
  • client-devtools: close the gap to the panel design (#102) (a4c59755)
  • client-devtools: causal trace, network view and control rail (#101) (a84dc2dc)

Bug Fixes

  • client-devtools: stop table columns collapsing, deprecate the lean view (#105) (d96026cc)
  • deps: move the last three modules onto forge v1.11.0 (4ee53c37)

Refactoring

  • dashboard: refactor(dashboard)!: replace the server-rendered UI with React plugins (#99) (4f29ed01)
Commits
  • d5c970e feat(client): duplex stream channels with a send path (#107)
  • d96026c fix(client-devtools): stop table columns collapsing, deprecate the lean view ...
  • 1c23a5c feat(client-devtools)!: make /overlay the full panel, move the lean view to /...
  • 9523267 feat(cli): scaffold a Next.js dashboard with forge dashboard new --target=nex...
  • a4c5975 feat(client-devtools): close the gap to the panel design (#102)
  • a84dc2d feat(client-devtools): causal trace, network view and control rail (#101)
  • 4f29ed0 refactor(dashboard)!: replace the server-rendered UI with React plugins (#99)
  • 4ee53c3 fix(deps): move the last three modules onto forge v1.11.0
  • See full diff in compare view

Updates github.com/xraph/herald from 1.6.1 to 1.6.2

Release notes

Sourced from github.com/xraph/herald's releases.

v1.6.2

Changes

  • chore: updated forge deps (992da03)
  • build: require sibling modules at versions that exist (65fba95)

Installation

go get github.com/xraph/herald@v1.6.2

Full Changelog: xraph/herald@v1.6.1...v1.6.2

Commits

Updates github.com/xraph/keysmith from 1.6.2 to 1.6.3

Release notes

Sourced from github.com/xraph/keysmith's releases.

v1.6.3

Changes

  • chore: updated forge deps (55b057f)

Installation

go get github.com/xraph/keysmith@v1.6.3

Full Changelog: xraph/keysmith@v1.6.2...v1.6.3

Commits

Updates github.com/xraph/relay from 1.6.2 to 1.6.3

Release notes

Sourced from github.com/xraph/relay's releases.

v1.6.3

Changes

  • chore: updated forge deps (617d25b)
  • chore: bumped version of forge deps (8163f7c)
  • chore: updated gitignore (c6ee6b4)

Installation

go get github.com/xraph/relay@v1.6.3

Full Changelog: xraph/relay@v1.6.2...v1.6.3

Commits

Updates github.com/xraph/warden from 1.6.2 to 1.6.4

Release notes

Sourced from github.com/xraph/warden's releases.

v1.6.4

Warden v1.6.4 (2026-09-03T04:08:45Z)

Composable RBAC + ABAC + ReBAC + PBAC for Go, with a declarative .warden config language and language server in the box.

Changelog

Installation

Using go install

go install github.com/xraph/warden/cmd/warden@v1.6.4
go install github.com/xraph/warden/cmd/warden-lsp@v1.6.4

Pre-built binaries

Download the appropriate archive for your platform from the assets below. Each archive contains both warden and warden-lsp.

Verify checksums:

shasum -a 256 -c checksums.txt

VS Code extension

The companion VS Code extension is published as xraph.vscode-warden and released on its own vscode-warden/v*.*.* tag schedule. See the extension README.

What's Changed

Full changelog: xraph/warden@v1.6.3...v1.6.4

v1.6.3

Warden v1.6.3 (2026-08-26T14:01:05Z)

Composable RBAC + ABAC + ReBAC + PBAC for Go, with a declarative .warden config language and language server in the box.

Changelog

Installation

Using go install

... (truncated)

Commits

Updates go.mongodb.org/mongo-driver/v2 from 2.8.0 to 2.9.1

Release notes

Sourced from go.mongodb.org/mongo-driver/v2's releases.

MongoDB Go Driver 2.9.1

The MongoDB Go Driver Team is pleased to release version 2.9.1 of the official MongoDB Go Driver.

Release Highlights

[!WARNING]
Go Driver versions v1.0.0 through v1.17.9 and v2.0.0 through v2.9.0 are affected by a security issue CVE-2026-88031 in the GridFS delete methods. This release resolves that security issue in Go Driver v2. Users are encouraged to upgrade to Go Driver v2.9.1 as soon as possible. For the fix in Go Driver v1, see the v1.17.10 release.

This release addresses CVE-2026-88031, a security issue in GridFS delete methods where the file ID lookup could match more loosely than intended, potentially causing unintended file (and chunk) deletions instead of an exact match on the given file ID.

Users can manually restrict the file ID with a $eq operator before passing it to GridFSBucket methods using code like the following.

func exactMatch(id any) bson.D {
	return bson.D{{"$eq", id}}
}
// e.g., for v2, (*GridFSBucket).Delete() with an exact match on the file ID.
gridFSBucket.Delete(context.TODO(), exactMatch(id))

What's Changed

🐛 Fixed

  • GODRIVER-4081: Use exact match for file ID in GridFS delete methods. by @​qingyang-hu

Full Changelog: v2.9.0...v2.9.1

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. For issues with, questions about, or feedback for the Go Driver, please look into our support channels, including StackOverflow. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

MongoDB Go Driver 2.9.0

The MongoDB Go Driver Team is pleased to release version 2.9.0 of the official MongoDB Go Driver.

Release Highlights

[!WARNING] The minimum supported MongoDB server version is now 4.4.

[!WARNING] The minimum supported Go version is now 1.25. The Go Driver supports the last 2 Go minor versions.

New ext/awsauth module

The new ext/awsauth module adds support for all AWS authentication methods via the official AWS SDK for Go. Applications running on AWS can now use an awsauth.CredentialsProvider in ClientOptions, ClientEncryptionOptions, and AutoEncryptionOptions.

For example, to configure a mongo.Client with the new ext/awsauth module:

import (
</tr></table> 

... (truncated)

Commits
  • 5d8c3a2 BUMP v2.9.1
  • ba2ddbf Merge commit from fork
  • 9a88e59 Merge branch 'release/2.9' into godriver4081-gridFsId
  • 099a81f BUMP v2.9.0
  • 3c87f21 GODRIVER-4101 Add tlsDisableCertificateRevocationCheck option. (#2571)
  • 5e5fba9 Bump testdata/specifications from d9d69f5 to 70a628b (#2576)
  • ac30cac GODRIVER-4109: Exclude OCSP errors from backpressure label (#2584)
  • 15ca7a0 GODRIVER-4096 Fix panic in Collection.insert on out-of-order write errors (#2...
  • 325f1ac Bump github/codeql-action from 4.37.8 to 4.37.9 in the actions group (#2583)
  • 4fe3377 GODRIVER-4062 Remove the ServerOverloadedError retry example. (#2568)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.55.0 to 0.57.0

Commits
  • 3f62bf1 go.mod: update golang.org/x dependencies
  • 86efde5 ssh: reject unexpected message types on established channels
  • a6cdac6 ssh: drop traffic on undecided channels
  • 39dc44e ssh: don't skip the source-address critical option in CheckCert
  • afebf4c x509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+
  • 89f4e9b x509roots/fallback: update bundle
  • 71488c4 ssh/knownhosts: compare only public key portions for revocation
  • 82adefa ssh: synchronize unexpected response test
  • c757c98 all: upgrade go directive to at least 1.26.0 [generated]
  • 593c81a ssh: correctly ignore pre-banner lines
  • Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.36.0 to 0.37.0

Commits
  • c624b89 google: change the snake case endpoint to kebab-case
  • 09a82f6 all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Updates github.com/xraph/dispatch from 1.6.2 to 1.6.7

Release notes

Sourced from github.com/xraph/dispatch's releases.

v1.6.7

Changes

  • Merge pull request #32 from xraph/feat/redis-key-prefix (795bc0e)
  • feat(store/redis): namespace keys per tenant with WithKeyPrefix (b17fb95)

Installation

go get github.com/xraph/dispatch@v1.6.7

What's Changed

Full Changelog: xraph/dispatch@v1.6.5...v1.6.7

v1.6.6

Changes

  • feat(store/redis): namespace keys per tenant with WithKeyPrefix (b17fb95)

Installation

go get github.com/xraph/dispatch@v1.6.6

Full Changelog: xraph/dispatch@v1.6.5...v1.6.6

v1.6.5

Changes

  • Merge pull request #31 from xraph/fix/client-expired-context (a188970)
  • chore: bumped forge version (3defc4c)

Installation

go get github.com/xraph/dispatch@v1.6.5

... (truncated)

Commits
  • 795bc0e Merge pull request #32 from xraph/feat/redis-key-prefix
  • b17fb95 feat(store/redis): namespace keys per tenant with WithKeyPrefix
  • a188970 Merge pull request #31 from xraph/fix/client-expired-context
  • 3defc4c chore: bumped forge version
  • 79ea9be Merge pull request #30 from xraph/fix/client-expired-context
  • fdfc5ab fix(client): honour an already-cancelled context before sending
  • b529178 Merge pull request #29 from xraph/fix/shim-sigterm-exit-window
  • c1f25c5 fix(exec/subprocess): wait out the reap before probing the grandchild
  • 634bf87 chore(exec/shim): annotate the gosec findings that are false positives
  • 1ec1ed6 fix(exec/shim): stop a late SIGTERM killing a clean shutdown
  • Additional commits viewable in compare view

Updates github.com/xraph/ledger from 1.6.1 to 1.6.4

Release notes

Sourced from github.com/xraph/ledger's releases.

v1.6.4

Changes

  • chore: updated forge deps (7fe72a3)

Installation

go get github.com/xraph/ledger@v1.6.4

Full Changelog: xraph/ledger@v1.6.3...v1.6.4

v1.6.3

Changes

  • chore: go update the forge deps (867a57a)

Installation

go get github.com/xraph/ledger@v1.6.3

Full Changelog: xraph/ledger@v1.6.2...v1.6.3

v1.6.2

Changes

  • chore: bumoed version of forge deps (38f2381)

Installation

go get github.com/xraph/ledger@v1.6.2

Full Changelog: xraph/ledger@v1.6.1...v1.6.2

Commits

Updates github.com/xraph/vault from 1.6.1 to 1.6.4

Release notes

Sourced from github.com/xraph/vault's releases.

v1.6.4

Changes

  • Merge pull request #20 from xraph/wisdom/kin-169-fix-vault-postgres-setsecret-scalar-scan-breaks-all (b5f5d25)
  • fix(store): scan whole rows for version lookups so SetSecret works at all (c6a398b)

Installation

go get github.com/xraph/vault@v1.6.4

What's Changed

New Contributors

Full Changelog: xraph/vault@v1.6.3...v1.6.4

v1.6.3

Changes

  • ci: ran go mod tidy (2fa28e9)
  • ci: ran go mod tidy (61d85d6)

Installation

go get github.com/xraph/vault@v1.6.3

Full Changelog: xraph/vault@v1.6.2...v1.6.3

v1.6.2

Changes

  • chore: go update the forge deps (2c13355)

Installation

</tr></table> 

... (truncated)

Commits
  • b5f5d25 Merge pull request #20 from xraph/wisdom/kin-169-fix-vault-postgres-setsecret...
  • 2fa28e9 ci: ran go mod tidy
  • 61d85d6 ci: ran go mod tidy
  • c6a398b fix(store): scan whole rows for version lookups so SetSecret works at all
  • 2c13355 chore: go update the forge deps
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…4 updates

Bumps the minor-and-patch group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-webauthn/webauthn](https://github.com/go-webauthn/webauthn) | `0.17.4` | `0.18.1` |
| [github.com/xraph/chronicle](https://github.com/xraph/chronicle) | `1.6.2` | `1.6.4` |
| [github.com/xraph/forge](https://github.com/xraph/forge) | `1.11.0` | `1.11.1` |
| [github.com/xraph/forge/extensions/auth](https://github.com/xraph/forge) | `1.11.0` | `1.11.1` |
| [github.com/xraph/herald](https://github.com/xraph/herald) | `1.6.1` | `1.6.2` |
| [github.com/xraph/keysmith](https://github.com/xraph/keysmith) | `1.6.2` | `1.6.3` |
| [github.com/xraph/relay](https://github.com/xraph/relay) | `1.6.2` | `1.6.3` |
| [github.com/xraph/warden](https://github.com/xraph/warden) | `1.6.2` | `1.6.4` |
| [go.mongodb.org/mongo-driver/v2](https://github.com/mongodb/mongo-go-driver) | `2.8.0` | `2.9.1` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.55.0` | `0.57.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.36.0` | `0.37.0` |
| [github.com/xraph/dispatch](https://github.com/xraph/dispatch) | `1.6.2` | `1.6.7` |
| [github.com/xraph/ledger](https://github.com/xraph/ledger) | `1.6.1` | `1.6.4` |
| [github.com/xraph/vault](https://github.com/xraph/vault) | `1.6.1` | `1.6.4` |



Updates `github.com/go-webauthn/webauthn` from 0.17.4 to 0.18.1
- [Release notes](https://github.com/go-webauthn/webauthn/releases)
- [Changelog](https://github.com/go-webauthn/webauthn/blob/master/CHANGELOG.md)
- [Commits](go-webauthn/webauthn@v0.17.4...v0.18.1)

Updates `github.com/xraph/chronicle` from 1.6.2 to 1.6.4
- [Release notes](https://github.com/xraph/chronicle/releases)
- [Commits](xraph/chronicle@v1.6.2...v1.6.4)

Updates `github.com/xraph/forge` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/xraph/forge/releases)
- [Changelog](https://github.com/xraph/forge/blob/main/CHANGELOG.md)
- [Commits](xraph/forge@v1.11.0...v1.11.1)

Updates `github.com/xraph/forge/extensions/auth` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/xraph/forge/releases)
- [Changelog](https://github.com/xraph/forge/blob/main/CHANGELOG.md)
- [Commits](xraph/forge@v1.11.0...v1.11.1)

Updates `github.com/xraph/herald` from 1.6.1 to 1.6.2
- [Release notes](https://github.com/xraph/herald/releases)
- [Commits](xraph/herald@v1.6.1...v1.6.2)

Updates `github.com/xraph/keysmith` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/xraph/keysmith/releases)
- [Commits](xraph/keysmith@v1.6.2...v1.6.3)

Updates `github.com/xraph/relay` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/xraph/relay/releases)
- [Commits](xraph/relay@v1.6.2...v1.6.3)

Updates `github.com/xraph/warden` from 1.6.2 to 1.6.4
- [Release notes](https://github.com/xraph/warden/releases)
- [Commits](xraph/warden@v1.6.2...v1.6.4)

Updates `go.mongodb.org/mongo-driver/v2` from 2.8.0 to 2.9.1
- [Release notes](https://github.com/mongodb/mongo-go-driver/releases)
- [Commits](mongodb/mongo-go-driver@v2.8.0...v2.9.1)

Updates `golang.org/x/crypto` from 0.55.0 to 0.57.0
- [Commits](golang/crypto@v0.55.0...v0.57.0)

Updates `golang.org/x/oauth2` from 0.36.0 to 0.37.0
- [Commits](golang/oauth2@v0.36.0...v0.37.0)

Updates `github.com/xraph/dispatch` from 1.6.2 to 1.6.7
- [Release notes](https://github.com/xraph/dispatch/releases)
- [Commits](xraph/dispatch@v1.6.2...v1.6.7)

Updates `github.com/xraph/ledger` from 1.6.1 to 1.6.4
- [Release notes](https://github.com/xraph/ledger/releases)
- [Commits](xraph/ledger@v1.6.1...v1.6.4)

Updates `github.com/xraph/vault` from 1.6.1 to 1.6.4
- [Release notes](https://github.com/xraph/vault/releases)
- [Commits](xraph/vault@v1.6.1...v1.6.4)

---
updated-dependencies:
- dependency-name: github.com/go-webauthn/webauthn
  dependency-version: 0.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/chronicle
  dependency-version: 1.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/forge
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/forge/extensions/auth
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/herald
  dependency-version: 1.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/keysmith
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/relay
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/warden
  dependency-version: 1.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: go.mongodb.org/mongo-driver/v2
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/crypto
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/dispatch
  dependency-version: 1.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/ledger
  dependency-version: 1.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/vault
  dependency-version: 1.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants