Skip to content

Bump the minor-patch-updates group across 1 directory with 4 updates - #15

Merged
Januznl merged 1 commit into
mainfrom
dependabot/go_modules/minor-patch-updates-8cf6c0b2fb
Aug 21, 2026
Merged

Bump the minor-patch-updates group across 1 directory with 4 updates#15
Januznl merged 1 commit into
mainfrom
dependabot/go_modules/minor-patch-updates-8cf6c0b2fb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-patch-updates group with 4 updates in the / directory: github.com/YourSurpriseCom/go-datadog-apm/v2, github.com/oapi-codegen/runtime, github.com/stretchr/testify and google.golang.org/api.

Updates github.com/YourSurpriseCom/go-datadog-apm/v2 from 2.4.5 to 2.4.8

Release notes

Sourced from github.com/YourSurpriseCom/go-datadog-apm/v2's releases.

v2.4.8

What's Changed

Full Changelog: YourSurpriseCom/go-datadog-apm@v2.4.7...v2.4.8

v2.4.7

What's Changed

Full Changelog: YourSurpriseCom/go-datadog-apm@v2.4.6...v2.4.7

v2.4.6

What's Changed

Full Changelog: YourSurpriseCom/go-datadog-apm@v2.4.5...v2.4.6

Commits
  • 9e39bd8 Security fixes (#65)
  • 8e65d58 Bump github.com/go-chi/chi/v5 in the minor-patch-updates group (#63)
  • 46b6517 Bump actions/setup-go from 6 to 7 in the actions group (#64)
  • c153bf5 Bump the minor-patch-updates group with 8 updates (#62)
  • See full diff in compare view

Updates github.com/oapi-codegen/runtime from 1.4.2 to 1.7.0

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

v1.7.0: Extensions for OpenAPI 3.1 parameter binding

This release teaches the parameter binders about OpenAPI 3.1 multi-type unions, and fixes a long-standing panic on the request binding path. As with v1.6.0, new behavior is controlled by explicit settings rather than assumptions: binding stays exactly as it was unless the new options are used.

Notable Changes

Binding OpenAPI 3.1 multi-type union parameters

OpenAPI 3.1 allows a parameter's type to be a list, such as type: [string, integer]. Go has no type meaning "one of these", so generated code maps such parameters to any — which the binders previously rejected outright with can not bind to destination of type: interface, making these parameters unusable.

The binder options structs (BindStyledParameterOptions, BindQueryParameterOptions, BindStringToObjectOptions) gain a Types []string field carrying the union's member list. It is only consulted when the destination is an any; binding into every concrete Go type is completely unchanged. The value binds to the first member that parses, trying boolean, integer, number, then string — most restrictive first, since a string always parses. Member detection follows the JSON number grammar (RFC 8259), so values like 007 or +1 bind as strings rather than being silently reinterpreted as numbers.

The bound value's dynamic type is always one of bool, int64, float64, string, or (with format: byte) []byte, so a handler's type switch is stable regardless of what the spec's format says. Applications that want format: int32 / format: float to narrow the produced types to int32 / float32 can opt in via a new package-level setting, following the same pattern as DefaultQueryEncoder from v1.6.0:

func init() {
    runtime.NarrowUnionNumericFormats = true
}

Generator support for emitting Types is landing in oapi-codegen separately; the runtime side ships first so generated code can rely on it. Arrays of unions and deepObject-style parameters are not covered yet — see the Types field documentation for the exact scope.

Fix for a panic when binding numeric values into slice destinations

Since v1.2.0, binding a string that happens to parse as an integer into a non-[]byte slice destination panicked with reflect: call of reflect.Value.OverflowInt on slice Value, instead of returning an error. This was reachable from generated code on the request path: a nullable.Nullable[[]string] query parameter using the default form/explode serialization would panic on ?p=123 while returning a normal binding error on ?p=abc. These cases now return a clean can not bind to destination of type: slice error.

🚀 New features and improvements

🐛 Bug fixes

✍ Other changes

📦 Dependency updates

... (truncated)

Commits
  • 25e2d35 Fix panic binding numeric values into non-byte slice destinations (#156)
  • f2e468c Bind OpenAPI 3.1 multi-type union parameters into any destinations (#154)
  • 611503e chore(deps): update github/codeql-action action to v4.37.7 (#152)
  • d8c6443 chore(deps): update release-drafter/release-drafter action to v7.7.0 (#151)
  • 0caa035 chore(deps): update github/codeql-action action to v4.37.5 (#150)
  • 95ed734 fix(deps): update module github.com/labstack/echo/v5 to v5.3.1 (#149)
  • 2f68f55 chore: use go mod tidy instead of tidied (#148)
  • 03f0d06 chore(deps): update release-drafter/release-drafter action to v7.6.0 (#147)
  • 99e61d7 chore(deps): update github/codeql-action action to v4.37.2 (#146)
  • 01be2fa chore(deps): update module github.com/golangci/golangci-lint to v2.12.2 (#112)
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • 959dbda Merge pull request #1935 from harryzcy/yaml-update
  • 9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.286.0 to 0.293.0

Release notes

Sourced from google.golang.org/api's releases.

v0.293.0

0.293.0 (2026-08-11)

Features

v0.292.0

0.292.0 (2026-08-04)

Features

v0.291.0

0.291.0 (2026-07-28)

Features

Bug Fixes

  • transport: Use ds.GetUniverseDomain() instead of raw ds.UniverseDomain field (#3660) (6bad358)

v0.290.0

0.290.0 (2026-07-20)

Features

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.293.0 (2026-08-11)

Features

0.292.0 (2026-08-04)

Features

0.291.0 (2026-07-28)

Features

Bug Fixes

  • transport: Use ds.GetUniverseDomain() instead of raw ds.UniverseDomain field (#3660) (6bad358)

0.290.0 (2026-07-20)

Features

0.289.0 (2026-07-16)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the minor-patch-updates group across 1 directory with 4 updates
5ee8fd1 
Bumps the minor-patch-updates group with 4 updates in the / directory: [github.com/YourSurpriseCom/go-datadog-apm/v2](https://github.com/YourSurpriseCom/go-datadog-apm), [github.com/oapi-codegen/runtime](https://github.com/oapi-codegen/runtime), [github.com/stretchr/testify](https://github.com/stretchr/testify) and [google.golang.org/api](https://github.com/googleapis/google-api-go-client).


Updates `github.com/YourSurpriseCom/go-datadog-apm/v2` from 2.4.5 to 2.4.8
- [Release notes](https://github.com/YourSurpriseCom/go-datadog-apm/releases)
- [Commits](YourSurpriseCom/go-datadog-apm@v2.4.5...v2.4.8)

Updates `github.com/oapi-codegen/runtime` from 1.4.2 to 1.7.0
- [Release notes](https://github.com/oapi-codegen/runtime/releases)
- [Commits](oapi-codegen/runtime@v1.4.2...v1.7.0)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

Updates `google.golang.org/api` from 0.286.0 to 0.293.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.286.0...v0.293.0)

---
updated-dependencies:
- dependency-name: github.com/YourSurpriseCom/go-datadog-apm/v2
  dependency-version: 2.4.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-updates
- dependency-name: github.com/oapi-codegen/runtime
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: google.golang.org/api
  dependency-version: 0.293.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 21, 2026
@Januznl
Januznl merged commit 687b0e7 into main Aug 21, 2026
3 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/minor-patch-updates-8cf6c0b2fb branch August 21, 2026 07:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Januznl Januznl Januznl approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Januznl