Skip to content

Bump the go-mod group across 1 directory with 15 updates#301

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-mod-1311fbf1b5
Open

Bump the go-mod group across 1 directory with 15 updates#301
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-mod-1311fbf1b5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-mod group with 12 updates in the / directory:

Package From To
github.com/99designs/gqlgen 0.17.89 0.17.91
github.com/ClickHouse/clickhouse-go/v2 2.40.1 2.46.0
github.com/DIMO-Network/attestation-api 0.1.2 0.1.17
github.com/DIMO-Network/cloudevent 0.2.7 1.0.4
github.com/DIMO-Network/fetch-api 0.0.16 0.1.14
github.com/auth0/go-jwt-middleware/v2 2.3.0 2.3.1
github.com/ethereum/go-ethereum 1.17.1 1.17.3
github.com/go-jose/go-jose/v4 4.1.3 4.1.4
github.com/modelcontextprotocol/go-sdk 1.4.1 1.6.1
github.com/rs/zerolog 1.34.0 1.35.1
github.com/uber/h3-go/v4 4.3.0 4.5.0
golang.org/x/sync 0.20.0 0.21.0

Updates github.com/99designs/gqlgen from 0.17.89 to 0.17.91

Release notes

Sourced from github.com/99designs/gqlgen's releases.

v0.17.91

What's Changed

... (truncated)

Commits
  • 822e228 release v0.17.91
  • 837d8a7 Update gqlparser to v2.5.34 (#4210)
  • 7ab1571 chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#4207)
  • 9de7aa7 chore(deps-dev): bump shell-quote (#4209)
  • bcddd87 chore(deps-dev): bump @​graphql-codegen/client-preset in /integration (#4208)
  • f06fcae chore(deps-dev): bump @​apollo/client from 4.2.0 to 4.2.2 in /integration (#4206)
  • 9f8f94f graphql: add runtime non-null field support via MarkNonNull (#4138)
  • c1fa635 chore: remove deprecated GraphQL handler implementation from handler.go, tran...
  • e9f372e chore(deps-dev): bump @​graphql-codegen/cli in /integration (#4201)
  • 8888c7c chore(deps-dev): bump graphql from 16.14.0 to 16.14.1 in /integration (#4198)
  • Additional commits viewable in compare view

Updates github.com/ClickHouse/clickhouse-go/v2 from 2.40.1 to 2.46.0

Release notes

Sourced from github.com/ClickHouse/clickhouse-go/v2's releases.

v2.46.0

What's Changed

Enhancements 🎉

Bug Fixes 🐛

Other Changes 🛠

New Contributors

Full Changelog: ClickHouse/clickhouse-go@v2.45.0...v2.46.0

v2.45.0

What's Changed

Bug Fixes 🐛

Other Changes 🛠

New Contributors

Full Changelog: ClickHouse/clickhouse-go@v2.44.0...v2.45.0

v2.44.0

What's Changed

Enhancements 🎉

... (truncated)

Changelog

Sourced from github.com/ClickHouse/clickhouse-go/v2's changelog.

v2.46.0, 2026-05-03

What's Changed

Enhancements 🎉

Bug Fixes 🐛

Other Changes 🛠

New Contributors

Full Changelog: ClickHouse/clickhouse-go@v2.45.0...v2.46.0

v2.45.0, 2026-04-13

What's Changed

Bug Fixes 🐛

Other Changes 🛠

New Contributors

Full Changelog: ClickHouse/clickhouse-go@v2.44.0...v2.45.0

v2.44.0, 2026-03-31

What's Changed

Enhancements 🎉

... (truncated)

Commits
  • 13b74cb Update release notes
  • 0cc2430 Merge pull request #1850 from ClickHouse/kavirajk/fix-nullable-json-string-bug
  • 1d36846 chore: comments and test protocol coverage
  • 48d0c93 chore: avoid double write on mix slice
  • 5ad2286 chore: make the toJSONString() version agnostic
  • 5edb3f2 chore: fix the correct untyped/untyped nil check
  • dc371a4 fix: add integrations tests on real server
  • e999170 fix: subtle case of []*string{nil} behavior
  • ec231cd Update lib/column/json.go
  • 9257940 Update lib/column/json_test.go
  • Additional commits viewable in compare view

Updates github.com/DIMO-Network/attestation-api from 0.1.2 to 0.1.17

Release notes

Sourced from github.com/DIMO-Network/attestation-api's releases.

v0.1.17

What's Changed

Full Changelog: DIMO-Network/attestation-api@v0.1.16...v0.1.17

v0.1.16

What's Changed

Full Changelog: DIMO-Network/attestation-api@v0.1.15...v0.1.16

v0.1.15

Full Changelog: DIMO-Network/attestation-api@v0.1.14...v0.1.15

v0.1.14

What's Changed

Full Changelog: DIMO-Network/attestation-api@v0.1.13...v0.1.14

v0.1.13

Release v0.1.13. See commit history for changes.

v0.1.11

Full Changelog: DIMO-Network/attestation-api@v0.1.10...v0.1.11

v0.1.10

Full Changelog: DIMO-Network/attestation-api@v0.1.9...v0.1.10

v0.1.9

What's Changed

Full Changelog: DIMO-Network/attestation-api@v0.1.8...v0.1.9

v0.1.8

What's Changed

New Contributors

... (truncated)

Commits
  • 76659c3 Update Image Version to 9c0ce8a
  • 9c0ce8a Adapt to currentLocationCoordinates (#123)
  • 6cab75a Update Image Version to 29438e0
  • 29438e0 Upgrade external-secrets apiVersion to v1
  • a3b1600 Update Image Version to 0.1.16
  • 95ec9ae Update Image Version to 4f8255d
  • 4f8255d Use developer license as attestation source (#119)
  • ba566e5 Update Image Version to 0.1.15
  • 0e59ef4 Update Image Version to e3041a4
  • e3041a4 chore: update model-garage to v0.8.16
  • Additional commits viewable in compare view

Updates github.com/DIMO-Network/cloudevent from 0.2.7 to 1.0.4

Release notes

Sourced from github.com/DIMO-Network/cloudevent's releases.

v0.2.11

Full Changelog: DIMO-Network/cloudevent@v0.2.10...v0.2.11

v0.2.10

Full Changelog: DIMO-Network/cloudevent@v0.2.9...v0.2.10

v0.2.9

What's Changed

Full Changelog: DIMO-Network/cloudevent@v0.2.8...v0.2.9

v0.2.8

What's Changed

Full Changelog: DIMO-Network/cloudevent@v0.2.7...v0.2.8

Commits

Updates github.com/DIMO-Network/fetch-api from 0.0.16 to 0.1.14

Release notes

Sourced from github.com/DIMO-Network/fetch-api's releases.

v0.1.14

What's Changed

Full Changelog: DIMO-Network/fetch-api@v0.1.13...v0.1.14

v0.1.13

What's Changed

Full Changelog: DIMO-Network/fetch-api@v0.1.12...v0.1.13

v0.1.12

chore: bump server-garage to v0.1.1

Fixes float64 is not an int errors on MCP shortcut tool calls with integer args.

v0.1.11

Add MCP server endpoint at /mcp with JWT auth (#75). Shared authChain middleware refactor. Condensed schema via server-garage/mcpgen v0.1.0.

v0.1.10

What's Changed

Full Changelog: DIMO-Network/fetch-api@v0.1.9...v0.1.10

v0.1.9

What's Changed

Full Changelog: DIMO-Network/fetch-api@v0.1.8...v0.1.9

v0.1.8

What's Changed

Full Changelog: DIMO-Network/fetch-api@v0.1.7...v0.1.8

v0.1.5

Full Changelog: DIMO-Network/fetch-api@v0.1.4...v0.1.5

v0.1.4

What's Changed

... (truncated)

Commits
  • e45abe8 Update Image Version to 77c9e56
  • 77c9e56 Respect tombstone messages (#81)
  • 22c9ed0 Update Image Version to 0.1.13
  • 631c7bc Update Image Version to fd0ae2a
  • fd0ae2a Presign externalized payloads via data_index_key (#79)
  • 69a9f6c Update Image Version to 0.1.12
  • b4b9f26 Update Image Version to 315f6b1
  • 315f6b1 chore: bump server-garage to v0.1.1 (#77)
  • e108e3d Update Image Version to 0.1.11
  • 0e216b2 Update Image Version to bf6c9a9
  • Additional commits viewable in compare view

Updates github.com/DIMO-Network/shared from 1.1.5 to 1.1.7

Commits
  • 74e2488 Suppress logging for NotFound gRPC responses entirely
  • c4a29ab Log client-error gRPC codes at warn instead of error
  • See full diff in compare view

Updates github.com/auth0/go-jwt-middleware/v2 from 2.3.0 to 2.3.1

Release notes

Sourced from github.com/auth0/go-jwt-middleware/v2's releases.

v2.3.1

Security

Changelog

Sourced from github.com/auth0/go-jwt-middleware/v2's changelog.

v2.3.1 (2025-11-20)

Full Changelog

Security

Commits

Updates github.com/ethereum/go-ethereum from 1.17.1 to 1.17.3

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Enzymatic Injector (v1.17.3)

This is a maintenance release with continued progress on the Amsterdam fork implementation. It also introduces ETH/70, which is now live on the network.

ethereum/execution-apis#762reexec has been removed from the tracing config:

  • memory: words are 0x-prefixed and padded to 32 bytes
  • storage: keys and values are 0x-prefixed
  • error: omitted when empty (previously serialized as "")

Geth

  • Add retry mechanism for checkpoint init in blsync (#33966)
  • Add subcommand for offline binary tree conversion (#33740)
  • Add code exporter for db export (#34696)

Core

  • Amsterdam fork updates:
  • Implement stack arena (#33960)
  • Implement EIP-7975: eth/70 partial block receipt lists (#33153)
  • Prerequisites of snap/2 protocol (#34083, #34649, #34654, #34874)
  • Implement history index pruner for path-mode archive nodes (#33999)
  • Add Prague chain segment pruning point for Hoodi (#34714)
  • Allow reorging head to parent within 32 blocks under ePBS (#34767)
  • Stop serving chain segment requests when data is unavailable (#34787)
  • Drop peers sending invalid bodies or receipts (#34745, #34870)
  • Add kzg4844 cell-related functions (#34766)
  • State database refactoring (#33102, #34700, #34763, #34724)
  • Binary trie improvements (#34055, #34110, #34670, #34676, #34680, #34690, #34754, #34758, #34777, #34794)
  • Merge EIP-4762 access events for all system calls (#34637)
  • Reject duplicate layers in the path database (#34642)
  • Omit empty slotNumber and fix block value collection in pre-Amsterdam engine API payloads (#34704)
  • Include the operand in EIP-8024 error messages (#34635)
  • Fix vmodule downgrades and propagate verbosity changes to derived loggers (#33111)
  • Fix incorrect fsync ordering for index file truncation (#34728)
  • Fix file descriptor leak in freezer error paths (#34735)
  • Fix size calculation in path database (#34828)
  • Fix gapped queue size cap in blobpool (#34831)
  • Improve txpool pending concurrency by using read-only locking (#32924)
  • Replace deprecated TypeMux with Feed (#32585)
  • Continue blob retrieval when individual cell proof extraction fails (#34891)
  • Use uint256 in core Message for faster gas calculations (#34934)

... (truncated)

Commits

Updates github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4

Release notes

Sourced from github.com/go-jose/go-jose/v4's releases.

v4.1.4

What's Changed

Fixes Panic in JWE decryption. See GHSA-78h2-9frx-2jm8

Full Changelog: go-jose/go-jose@v4.1.3...v4.1.4

Commits

Updates github.com/modelcontextprotocol/go-sdk from 1.4.1 to 1.6.1

Release notes

Sourced from github.com/modelcontextprotocol/go-sdk's releases.

v1.6.1

This release adds an MCPGODEBUG flag to opt out of the Content-Type check on POST requests.

Behavior Changes

Prior to v1.6.0 (v1.4.0...v1.5.0), the Content-Type check on POST requests was gated by the same disablecrossoriginprotection MCPGODEBUG flag as the cross-origin protection. In v1.6.0, the cross-origin protection was disabled by default (replaced by the opt-in enableoriginverification flag), but the Content-Type check was kept on unconditionally, leaving no way to disable it. This release restores an escape hatch for both the Streamable HTTP and SSE transports: setting MCPGODEBUG=disablecontenttypecheck=1 skips the Content-Type: application/json validation on POST requests. See #957.

What's Changed

Full Changelog: modelcontextprotocol/go-sdk@v1.6.0...v1.6.1

v1.6.0

This release is equivalent to v1.6.0-pre.1. Thank you to those who tested the pre-release.

In this release we introduce several smaller fixes and improvements, and we started working for release 2026-06-30. The main new feature is the introduction of ClientCredentialsHandler for OAuth client credentials grant.

Add ClientCredentialsHandler for OAuth client credentials grant

Added ClientCredentialsHandler implementing auth.OAuthHandler using the OAuth 2.0 Client Credentials grant (RFC 6749 Section 4.4) for service-to-service authentication with pre-registered credentials.

2026-06-30 Release related PRs

  • feat: add automatic application_type inference by @​guglielmo-san in modelcontextprotocol/go-sdk#904

    New application_type field is added to the ClientRegistrationMetadata for DynamicClientRegistration. If not specified, the application_type will be inferred from the RedirectURIs. This implements SEP-837.

  • feat: HTTP Header Standardization for method and name by @​guglielmo-san in modelcontextprotocol/go-sdk#907

    By mirroring key fields from the JSON-RPC payload into HTTP headers, network intermediaries such as load balancers, proxies, and observability tools can route and process MCP traffic without deep packet inspection, reducing latency and computational overhead. This partially implements SEP-2243.

Behavior Changes

SetError Behavior Change

Previously the SetError method on CallToolResult always overwrote the Content field with the error text. Now SetError preserves the existing value if it has already been populated. You can restore the previous behavior by setting the environment variable seterroroverwrite=1.

Cross-Origin Protection Default Change

Previously (v1.4.1-v1.5.0) default (zero-value) cross-origin protection was applied when CrossOriginProtection in StreamableHTTPOptions was nil. Now cross-origin protection is not enabled by default when CrossOriginProtection is nil. You can restore the previous behavior (enable by default) by setting enableoriginverification=1.

... (truncated)

Commits
  • d454bba mcp: add MCPGPDEBUG for opt-in Content-Type check (#972)
  • f5f2015 MCPGODEBUG update for 1.6.0 (#893)
  • e01639a feat: HTTP Header Standardization for method and name (#907)
  • 93a41b2 internal/jsonrpc2: remove unused code (#910)
  • 446beae mcp: Upgrade jsonschema-go (#912)
  • 2e21834 extauth: add ClientC...

    Description has been truncated

Bumps the go-mod group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/99designs/gqlgen](https://github.com/99designs/gqlgen) | `0.17.89` | `0.17.91` |
| [github.com/ClickHouse/clickhouse-go/v2](https://github.com/ClickHouse/clickhouse-go) | `2.40.1` | `2.46.0` |
| [github.com/DIMO-Network/attestation-api](https://github.com/DIMO-Network/attestation-api) | `0.1.2` | `0.1.17` |
| [github.com/DIMO-Network/cloudevent](https://github.com/DIMO-Network/cloudevent) | `0.2.7` | `1.0.4` |
| [github.com/DIMO-Network/fetch-api](https://github.com/DIMO-Network/fetch-api) | `0.0.16` | `0.1.14` |
| [github.com/auth0/go-jwt-middleware/v2](https://github.com/auth0/go-jwt-middleware) | `2.3.0` | `2.3.1` |
| [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) | `1.17.1` | `1.17.3` |
| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.3` | `4.1.4` |
| [github.com/modelcontextprotocol/go-sdk](https://github.com/modelcontextprotocol/go-sdk) | `1.4.1` | `1.6.1` |
| [github.com/rs/zerolog](https://github.com/rs/zerolog) | `1.34.0` | `1.35.1` |
| [github.com/uber/h3-go/v4](https://github.com/uber/h3-go) | `4.3.0` | `4.5.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.20.0` | `0.21.0` |



Updates `github.com/99designs/gqlgen` from 0.17.89 to 0.17.91
- [Release notes](https://github.com/99designs/gqlgen/releases)
- [Changelog](https://github.com/99designs/gqlgen/blob/master/CHANGELOG.md)
- [Commits](99designs/gqlgen@v0.17.89...v0.17.91)

Updates `github.com/ClickHouse/clickhouse-go/v2` from 2.40.1 to 2.46.0
- [Release notes](https://github.com/ClickHouse/clickhouse-go/releases)
- [Changelog](https://github.com/ClickHouse/clickhouse-go/blob/main/CHANGELOG.md)
- [Commits](ClickHouse/clickhouse-go@v2.40.1...v2.46.0)

Updates `github.com/DIMO-Network/attestation-api` from 0.1.2 to 0.1.17
- [Release notes](https://github.com/DIMO-Network/attestation-api/releases)
- [Commits](DIMO-Network/attestation-api@v0.1.2...v0.1.17)

Updates `github.com/DIMO-Network/cloudevent` from 0.2.7 to 1.0.4
- [Release notes](https://github.com/DIMO-Network/cloudevent/releases)
- [Commits](https://github.com/DIMO-Network/cloudevent/commits)

Updates `github.com/DIMO-Network/fetch-api` from 0.0.16 to 0.1.14
- [Release notes](https://github.com/DIMO-Network/fetch-api/releases)
- [Commits](DIMO-Network/fetch-api@v0.0.16...v0.1.14)

Updates `github.com/DIMO-Network/shared` from 1.1.5 to 1.1.7
- [Release notes](https://github.com/DIMO-Network/shared/releases)
- [Commits](DIMO-Network/shared@v1.1.5...v1.1.7)

Updates `github.com/auth0/go-jwt-middleware/v2` from 2.3.0 to 2.3.1
- [Release notes](https://github.com/auth0/go-jwt-middleware/releases)
- [Changelog](https://github.com/auth0/go-jwt-middleware/blob/master/CHANGELOG.md)
- [Commits](auth0/go-jwt-middleware@v2.3.0...v2.3.1)

Updates `github.com/ethereum/go-ethereum` from 1.17.1 to 1.17.3
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.1...v1.17.3)

Updates `github.com/go-jose/go-jose/v4` from 4.1.3 to 4.1.4
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](go-jose/go-jose@v4.1.3...v4.1.4)

Updates `github.com/modelcontextprotocol/go-sdk` from 1.4.1 to 1.6.1
- [Release notes](https://github.com/modelcontextprotocol/go-sdk/releases)
- [Commits](modelcontextprotocol/go-sdk@v1.4.1...v1.6.1)

Updates `github.com/rs/zerolog` from 1.34.0 to 1.35.1
- [Commits](rs/zerolog@v1.34.0...v1.35.1)

Updates `github.com/uber/h3-go/v4` from 4.3.0 to 4.5.0
- [Release notes](https://github.com/uber/h3-go/releases)
- [Changelog](https://github.com/uber/h3-go/blob/master/CHANGELOG.md)
- [Commits](uber/h3-go@v4.3.0...v4.5.0)

Updates `github.com/vektah/gqlparser/v2` from 2.5.32 to 2.5.34
- [Release notes](https://github.com/vektah/gqlparser/releases)
- [Commits](vektah/gqlparser@v2.5.32...v2.5.34)

Updates `golang.org/x/sync` from 0.20.0 to 0.21.0
- [Commits](golang/sync@v0.20.0...v0.21.0)

Updates `google.golang.org/grpc` from 1.79.1 to 1.79.3
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.1...v1.79.3)

---
updated-dependencies:
- dependency-name: github.com/99designs/gqlgen
  dependency-version: 0.17.91
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/ClickHouse/clickhouse-go/v2
  dependency-version: 2.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/DIMO-Network/attestation-api
  dependency-version: 0.1.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/DIMO-Network/cloudevent
  dependency-version: 1.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: go-mod
- dependency-name: github.com/DIMO-Network/fetch-api
  dependency-version: 0.1.14
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/DIMO-Network/shared
  dependency-version: 1.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/auth0/go-jwt-middleware/v2
  dependency-version: 2.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/modelcontextprotocol/go-sdk
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/rs/zerolog
  dependency-version: 1.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/uber/h3-go/v4
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/vektah/gqlparser/v2
  dependency-version: 2.5.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: golang.org/x/sync
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants