Bump the go-modules group with 6 updates by dependabot[bot] · Pull Request #1152 · paketo-buildpacks/php-dist

dependabot · 2026-07-01T10:13:19Z

Bumps the go-modules group with 6 updates:

Package	From	To
github.com/klauspost/compress	`1.18.6`	`1.18.7`
github.com/klauspost/cpuid/v2	`2.3.0`	`2.4.0`
github.com/shirou/gopsutil/v4	`4.26.5`	`4.26.6`
google.golang.org/api	`0.286.0`	`0.287.0`
google.golang.org/genproto/googleapis/rpc	`0.0.0-20260615183401-62b3387ff324`	`0.0.0-20260622175928-b703f567277d`
google.golang.org/grpc	`1.81.1`	`1.82.0`

Updates github.com/klauspost/compress from 1.18.6 to 1.18.7

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.7

Fix s2.NewDict OOB read.

Security release without other changes.

Full Changelog: klauspost/compress@v1.18.6...v1.18.7

Commits

8668e35 Merge commit from fork
See full diff in compare view

Updates github.com/klauspost/cpuid/v2 from 2.3.0 to 2.4.0

Release notes

Sourced from github.com/klauspost/cpuid/v2's releases.

v2.4.0

What's Changed

Add riscv64 CPU feature detection by @mengzhuo in klauspost/cpuid#173

Add arm64 go feature id by @klauspost in klauspost/cpuid#175

Add AVX512BMM by @klauspost in klauspost/cpuid#170

Add FRED detection by @riptl in klauspost/cpuid#172

Upgrade CI to 1.26, fix arm64 noasm by @klauspost in klauspost/cpuid#174

Apply go fix by @klauspost in klauspost/cpuid#176

New Contributors

@riptl made their first contribution in klauspost/cpuid#172

@mengzhuo made their first contribution in klauspost/cpuid#173

Full Changelog: klauspost/cpuid@v2.3.0...v2.4.0

Commits

8590c16 Apply go fix (#176)
f26cd2e Add arm64 go feature id (#175)
caccf64 Add riscv64 CPU feature detection (#173)
504c492 Upgrade CI to 1.26, fix arm64 noasm (#174)
13f5f9c Add FRED detection (#172)
8f34153 Add AVX512BMM (#170)
See full diff in compare view

Updates github.com/shirou/gopsutil/v4 from 4.26.5 to 4.26.6

Release notes

Sourced from github.com/shirou/gopsutil/v4's releases.

v4.26.6

What's Changed

cpu

[cpu][linux]: Add support for CPU clusters in lscpu tests by @guillemj in shirou/gopsutil#2103

disk

[disk][linux]: fix missiing sub volume partitions on zfs and btrfs by @shirou in shirou/gopsutil#2101

mem

[mem]: fix OpenBSD virtual memory on -current by @atanas-vladimirov in shirou/gopsutil#2104

sensor

fix(sensors/darwin): parse sp78 temperatures instead of returning 0.0 by @drutsan in shirou/gopsutil#2084

New Contributors

@drutsan made their first contribution in shirou/gopsutil#2084

@guillemj made their first contribution in shirou/gopsutil#2103

@atanas-vladimirov made their first contribution in shirou/gopsutil#2104

Full Changelog: shirou/gopsutil@v4.26.5...v4.26.6

Commits

50a6b05 Merge pull request #2104 from atanas-vladimirov/openbsd
c0390a2 Merge pull request #2103 from guillemj/pu/lscpu-clusters
62c57ea Merge pull request #2101 from shirou/fix/2100-disk-zfs-btrfs-partitions
e093580 Merge pull request #2084 from drutsan/fix/darwin-temperature-sp78
1d3af56 [mem]: fix OpenBSD virtual memory on -current
7098e80 [cpu][linux]: Add support for CPU clusters in lscpu tests
0dff2e5 [disk][linux]: fix missiing sub volume partitions on zfs and btrfs
28add59 fix(sensors/darwin): parse sp78 temperatures instead of returning 0.0
See full diff in compare view

Updates google.golang.org/api from 0.286.0 to 0.287.0

Release notes

Sourced from google.golang.org/api's releases.

v0.287.0

0.287.0 (2026-06-30)

Features

all: Auto-regenerate discovery clients (#3635) (504873e)

all: Auto-regenerate discovery clients (#3637) (5c975be)

all: Auto-regenerate discovery clients (#3639) (9737c4b)

Changelog

Sourced from google.golang.org/api's changelog.

0.287.0 (2026-06-30)

Features

all: Auto-regenerate discovery clients (#3635) (504873e)

all: Auto-regenerate discovery clients (#3637) (5c975be)

all: Auto-regenerate discovery clients (#3639) (9737c4b)

Commits

1a444d6 chore(main): release 0.287.0 (#3636)
9737c4b feat(all): auto-regenerate discovery clients (#3639)
f0d27e8 chore(all): update all (#3638)
5c975be feat(all): auto-regenerate discovery clients (#3637)
504873e feat(all): auto-regenerate discovery clients (#3635)
8f8eab4 chore(all): update all to 87f3d3e (#3633)
See full diff in compare view

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20260615183401-62b3387ff324 to 0.0.0-20260622175928-b703f567277d

Commits

See full diff in compare view

Updates google.golang.org/grpc from 1.81.1 to 1.82.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.0

Behavior Changes

server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)

transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)

balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)

Special Thanks: @seth-epps

client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)

Special Thanks: @chengxilo

server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)

Special Thanks: @dfinkel

Bug Fixes

xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)

grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)

Special Thanks: @evilgensec

stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)

encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#9135)

channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#9109)

Commits

bd23985 Change version to 1.82.0 (#9170)
0f3086d Fix minor issues not covered by PR #9137 (#9147)
fef07fb internal: Split v3procservicepb import into pb and grpc for extproc (#9163)
91dd64f transport: surface subsequent data when receiving non-gRPC header (#8929)
adc97de test/kokoro: add config for regional-td test (#9158)
57c9ff1 xds: ensure full-string matching for RBAC Filter rules (#9148)
b58f32d server: Set a pprof label on new stream goroutines (#9082)
6c98be3 refactor(transport): extract shared stream state handling logic in `loopyWrit...
bcaa6f4 rls: only reset backoff on recovery from TRANSIENT_FAILURE (#9137)
429e6e0 balancer: expose endpoint weight and hostname as experimental APIs (#9074)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-modules group with 6 updates: | Package | From | To | | --- | --- | --- | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.6` | `1.18.7` | | [github.com/klauspost/cpuid/v2](https://github.com/klauspost/cpuid) | `2.3.0` | `2.4.0` | | [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) | `4.26.5` | `4.26.6` | | [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.286.0` | `0.287.0` | | [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20260615183401-62b3387ff324` | `0.0.0-20260622175928-b703f567277d` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.81.1` | `1.82.0` | Updates `github.com/klauspost/compress` from 1.18.6 to 1.18.7 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.18.6...v1.18.7) Updates `github.com/klauspost/cpuid/v2` from 2.3.0 to 2.4.0 - [Release notes](https://github.com/klauspost/cpuid/releases) - [Commits](klauspost/cpuid@v2.3.0...v2.4.0) Updates `github.com/shirou/gopsutil/v4` from 4.26.5 to 4.26.6 - [Release notes](https://github.com/shirou/gopsutil/releases) - [Commits](shirou/gopsutil@v4.26.5...v4.26.6) Updates `google.golang.org/api` from 0.286.0 to 0.287.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.286.0...v0.287.0) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260615183401-62b3387ff324 to 0.0.0-20260622175928-b703f567277d - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.81.1 to 1.82.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.81.1...v1.82.0) --- updated-dependencies: - dependency-name: github.com/klauspost/compress dependency-version: 1.18.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/klauspost/cpuid/v2 dependency-version: 2.4.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/shirou/gopsutil/v4 dependency-version: 4.26.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: google.golang.org/api dependency-version: 0.287.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20260622175928-b703f567277d dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: google.golang.org/grpc dependency-version: 1.82.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 1, 2026

dependabot Bot requested a review from a team as a code owner July 1, 2026 10:13

dependabot Bot added the go Pull requests that update Go code label Jul 1, 2026

dependabot Bot requested review from benjaminguttmann-avtq and paketo-bot-reviewer July 1, 2026 10:13

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 1, 2026

paketo-bot added the semver:patch A change requiring a patch version bump label Jul 1, 2026

paketo-bot-reviewer approved these changes Jul 1, 2026

View reviewed changes

paketo-bot merged commit 2cd30d7 into main Jul 1, 2026
10 of 11 checks passed

paketo-bot deleted the dependabot/go_modules/go-modules-aa264f9f2f branch July 1, 2026 10:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the go-modules group with 6 updates#1152

Bump the go-modules group with 6 updates#1152
paketo-bot merged 1 commit into
mainfrom
dependabot/go_modules/go-modules-aa264f9f2f

dependabot Bot commented on behalf of github Jul 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 1, 2026

v1.18.7

v2.4.0

What's Changed

New Contributors

v4.26.6

What's Changed

cpu

disk

mem

sensor

New Contributors

v0.287.0

0.287.0 (2026-06-30)

Features

0.287.0 (2026-06-30)

Features

Release 1.82.0

Behavior Changes

New Features

Bug Fixes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants