deps(tools): Bump the go-tools group across 3 directories with 3 updates by dependabot[bot] · Pull Request #951 · Felag-Engineering/relay

dependabot · 2026-10-08T23:06:16Z

Bumps the go-tools group with 1 update in the /tools/buf directory: github.com/bufbuild/buf.
Bumps the go-tools group with 1 update in the /tools/golangci-lint directory: github.com/golangci/golangci-lint/v2.
Bumps the go-tools group with 1 update in the /tools/govulncheck directory: golang.org/x/vuln.

Updates github.com/bufbuild/buf from 1.54.0 to 1.73.0

Release notes

Sourced from github.com/bufbuild/buf's releases.

v1.73.0

Fix buf format dropping comments next to commas or semicolons in message literals.

Fix compilation failing to resolve symbols re-exported through import public when the re-exporting file also reaches those symbols through a non-public import.

Fix LSP go to definition not resolving across files inside dependency and well-known-type files, and release workspaces when their last open file closes to free resources.

Fix LSP finding only a subset of references to symbols declared in dependencies, including well-known types.

Fix buf format non-idempotent trailing comment formatting.

Update built-in Well-Known Types to Protobuf v35.1.

Fix managed mode setting java_multiple_files on Edition 2024 files, which is not allowed and causes code generation to fail.

v1.72.0

Fix buf beta registry webhook create and buf beta registry webhook list to emit proto JSON output.

Fix HTTPS Basic authentication for remote inputs to use BUF_INPUT_HTTPS_USERNAME for the username.

Fix IMPORT_USED lint rule silently reporting no unused imports when google/protobuf/descriptor.proto is in the transitive dependency graph.

v1.71.0

Port new formatter and fix bugs for in-line block comment spacing.

Fix handling for an empty rpc input/output.

v1.70.0

Add LSP completion for buf.gen.yaml, buf.yaml, and buf.policy.yaml files.

Fix LSP textDocument/documentSymbol marking every symbol as deprecated.

Add error for when a dependency is added to buf.yaml and is missing from buf.lock.

Update the PROTOVALIDATE lint rule support checking NaN in const, in, not_in, gt, gte, lt and lte rules for float and double fields.

Update the PROTOVALIDATE lint rule support to check (buf.validate.message).oneof rules and make sure they are well-formed and valid.

v1.69.0

Increase check plugin WASM memory limits to 1GiB.

Fix LSP stale diagnostics persisting after a file is closed or deleted.

Fix handling of unprefixed newlines in block comments.

Add LSP code lenses for buf.gen.yaml files: "Run buf generate" and "Check for plugin updates".

Add LSP warnings for lint.ignore and breaking.ignore paths in buf.yaml that do not match any file in the workspace.

v1.68.4

Fix duplicated extension tags across imports from compiler.

v1.68.3

Fix buf format error handling for edition 2024.

v1.68.2

Fix build failures for modules with a vendored descriptor.proto.

Fix LSP incorrectly reporting "edition '2024' not yet fully supported" errors.

Fix CEL compilation error messages in buf lint to use the structured error API instead of parsing cel-go's text output.

Add --debug-address flag to buf lsp serve to provide debug and profile support.

v1.68.1

Revert the use of the new compiler report format and properly ungate Editions 2024 features.

... (truncated)

Changelog

Sourced from github.com/bufbuild/buf's changelog.

[v1.73.0] - 2026-09-11

Fix buf format dropping comments next to commas or semicolons in message literals.

Fix compilation failing to resolve symbols re-exported through import public when the re-exporting file also reaches those symbols through a non-public import.

Fix LSP go to definition not resolving across files inside dependency and well-known-type files, and release workspaces when their last open file closes to free resources.

Fix LSP finding only a subset of references to symbols declared in dependencies, including well-known types.

Fix buf format non-idempotent trailing comment formatting.

Update built-in Well-Known Types to Protobuf v35.1.

Fix managed mode setting java_multiple_files on Edition 2024 files, which is not allowed and causes code generation to fail.

[v1.72.0] - 2026-07-17

Fix buf beta registry webhook create and buf beta registry webhook list to emit proto JSON output.

Fix HTTPS Basic authentication for remote inputs to use BUF_INPUT_HTTPS_USERNAME for the username.

Fix IMPORT_USED lint rule silently reporting no unused imports when google/protobuf/descriptor.proto is in the transitive dependency graph.

[v1.71.0] - 2026-06-16

Port new formatter and fix bugs for in-line block comment spacing.

Fix handling for an empty rpc input/output.

[v1.70.0] - 2026-05-25

Add LSP completion for buf.gen.yaml, buf.yaml, and buf.policy.yaml files.

Fix LSP textDocument/documentSymbol marking every symbol as deprecated.

Add error for when a dependency is added to buf.yaml and is missing from buf.lock.

Update the PROTOVALIDATE lint rule support checking NaN in const, in, not_in, gt, gte, lt and lte rules for float and double fields.

Update the PROTOVALIDATE lint rule support to check (buf.validate.message).oneof rules and make sure they are well-formed and valid.

[v1.69.0] - 2026-04-29

Increase check plugin WASM memory limits to 1GiB.

Fix LSP stale diagnostics persisting after a file is closed or deleted.

Fix handling of unprefixed newlines in block comments.

Add LSP code lenses for buf.gen.yaml files: "Run buf generate" and "Check for plugin updates".

Add LSP warnings for lint.ignore and breaking.ignore paths in buf.yaml that do not match any file in the workspace.

[v1.68.4] - 2026-04-22

Fix duplicated extension tags across imports from compiler.

[v1.68.3] - 2026-04-20

... (truncated)

Commits

8b7368b Release v1.73.0 (#4673)
bc2b635 Bump protocompile (#4672)
5303e6b Update error message for canceled root context (#4671)
3639fc3 Add audit commit names (#4670)
37122b2 Make upgrade (#4668)
92aa508 Stop setting java_multiple_files for edition 2024 sources (#4664)
01ff315 Make upgrade (#4662)
3b50cde Update protovalidate-go and cel-go (#4663)
318a492 Export invalid filter type error returned by FilterImage (#4659)
704103b Bump protoc version to v35.1 (#4655)
Additional commits viewable in compare view

Updates github.com/golangci/golangci-lint/v2 from 2.12.2 to 2.14.0

Release notes

Sourced from github.com/golangci/golangci-lint/v2's releases.

v2.14.0

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

4e2a77e4453edb7d760a322651fc77787f320a0e build(deps): bump dev.gaijin.team/go/exhaustruct/v5 from 5.0.3 to 5.2.0 (#6786)

ccf56c68037681a023c1732694f8e271c54a9923 build(deps): bump docker/setup-qemu-action from 4.2.0 to 4.3.0 in the github-actions group (#6791)

793eccdc17dd5832cb23a0997273966fc4185c4f build(deps): bump github.com/4meepo/tagalign from 1.4.3 to 1.4.4 (#6776)

b02fd39dc083f8063786565314ce43f7f8d1262a build(deps): bump github.com/alecthomas/go-check-sumtype from 0.3.1 to ae6904d28606 (#6784)

7b04fee9bcddd7028f76864044d4d83288ca9500 build(deps): bump github.com/ghostiam/protogetter from 0.3.21 to 1.0.0 (#6770)

bd8288ff1f097b058191244541e264a9768617e0 build(deps): bump github.com/ghostiam/protogetter from 1.0.0 to 1.0.1 (#6793)

7c6c6c0df619b690e2cd3c9879ec595c7df27711 build(deps): bump github.com/go-critic/go-critic from 0.14.4 to 0.15.0 (#6783)

ee27419f6b561c4f216497bbcf9fc07871372217 build(deps): bump github.com/godoc-lint/godoc-lint from 0.11.2 to 0.11.3 (#6771)

5a80f044beb4eea52b1f81b823b69d1eecf25733 build(deps): bump github.com/godoc-lint/godoc-lint from 0.11.3 to 0.11.4 (#6774)

c265ef1e96e7451b83a56fe1f5b4a86876c182a7 build(deps): bump github.com/gofrs/flock from 0.13.0 to 0.13.1 (#6767)

30600b6801d6a172739e69b746ec602a55a6e396 build(deps): bump github.com/ldez/gomoddirectives from 0.9.0 to 0.10.0 (#6809)

f5e8fcd02d41b84f988801843900fbc9322cfdd1 build(deps): bump github.com/ldez/tagliatelle from 0.7.2 to 0.8.0 (#6808)

251df821e1c6af0e251d9bdd3107869bf3438315 build(deps): bump github.com/mgechev/revive from 1.15.0 to 1.16.0 (#6747)

260cab13e4f40a7966c26b03dd4a8cc0123ae314 build(deps): bump github.com/mgechev/revive from 1.16.0 to 1.17.0 (#6813)

665f99bcdf6738530fe942fe5721cdd6fbb8313f build(deps): bump github.com/nishanths/exhaustive from 0.12.0 to 0.13.0 (#6799)

48de4fb1722c665542eb9681cc24191dd7c61a13 build(deps): bump github.com/raeperd/recvcheck from 0.3.0 to 0.3.1 (#6772)

f0a15fd643bf2854e48e1130ac9cacdd34856019 build(deps): bump github.com/securego/gosec/v2 from 2.28.0 to 2.29.0 (#6768)

a391b19cb1c8a5e45eeebf4c9b2ee3bd80b940bd build(deps): bump github.com/shirou/gopsutil/v4 from 4.26.7 to 4.26.8 (#6785)

02551960c9578d585894a842aba41c60adfab2f8 build(deps): bump github.com/sirupsen/logrus from 1.10.1 to 1.10.2 (#6773)

5573d88ff78251eba05ca31a1d5f530f3b02eb89 build(deps): bump github.com/sourcegraph/go-diff from 0.8.0 to 0.9.0 (#6800)

6f2bcb088e7cbe6458fd034bdabe1b8308f4ecb3 build(deps): bump github.com/timakin/bodyclose from 73d1f95b84b4 to 857993a2939c (#6781)

98686bac279b986b57d2b7c1eabbbea2f22cd563 build(deps): bump github.com/timonwong/loggercheck from 0.11.0 to 0.12.0 (#6775)

e2891447d93a6be4afb168e7ffbfb752093250e4 build(deps): bump go.augendre.info/fatcontext from 0.10.0 to 0.10.1 (#6792)

afd1f8a18f1312d28c3fbf80e7db3bad7dcc6e3b build(deps): bump golang.org/x/mod from 0.40.0 to 0.41.0 (#6797)

94ebab9b2bb058bbb77fe9aa1442f4b16d2dcf35 build(deps): bump golang.org/x/oauth2 from 0.36.0 to 0.37.0 in /scripts/gen_github_action_config in the scripts group (#6790)

f184a9c82cad95ab0f92c3b5907f385d2bce4912 build(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0 (#6795)

52f8688434bdd4c8a43e3905936900f88d1fb65c build(deps): bump golang.org/x/sys from 0.47.0 to 0.48.0 (#6796)

219f1ff7574bcaac2c3c8ff65c997efd0b27061c build(deps): bump golang.org/x/tools from 0.49.0 to 0.50.0 (#6794)

3bdde57d654154a9680c02b71abcb21cacf51794 build(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1 in /pkg/golinters/protogetter/testdata in the linter-testdata group across 1 directory (#6777)

238321a824bd20040b6c05b6b852ca8ac1e89b04 build(deps): bump mvdan.cc/gofumpt from 0.11.1-0.20260823225713-28272d18f832 to 0.12.0 (#6788)

dcba16f47fe6c74e88c511298d93cb47c4cd97f9 build(deps): bump mvdan.cc/gofumpt from v0.11.1 to 28272d18f832 (#6766)

ed7a235d2d771152056fdc142a9855567c5796a9 build(deps): bump the github-actions group with 2 updates (#6779)

c0df92e1ae77dcba62f5138200d815fc74404ab1 build(deps): bump the github-actions group with 4 updates (#6789)

a1002350762bd9faf272101a4eb32aabfcba8ca2 build(deps): bump the github-actions group with 5 updates (#6812)

6ded9bc0794a1fae359c122568bec3571775916c build(deps): bump the linter-testdata group across 3 directories with 4 updates (#6787)

e298dfe97177d35aa7c21fe3544f45127646647f fix: cache of facts reloading (#6810)

67c0febb6216ea6915dc5e3758f94a4f6949528d fix: ignore TextEdits outside the analyzed file (#6816)

v2.13.2

golangci-lint is a free and open-source project built by volunteers.

... (truncated)

Changelog

Sourced from github.com/golangci/golangci-lint/v2's changelog.

v2.14.0

Released on 2026-09-24

Bug fixes

fix: cache of facts reloading

Linters new features or changes

bodyclose: from 73d1f95b84b4 to 857993a2939c (new directive handled)

exhaustive: from 0.12.0 to 0.13.0

exhaustruct_v5: from 5.0.3 to 5.2.0 (new option: allow-empty-blank-assignments)

go-check-sumtype: from 0.3.1 to ae6904d28606

gocritic: from 0.14.4 to 0.15.0

gofumpt: from 0.11.0 to 0.12.0

gomoddirectives: from 0.9.0 to 0.10.0

gosec: from 2.28.0 to 2.29.0 (re-enable G407)

govet-modernize: from 0.49.0 to 0.50.0

loggercheck: from 0.11.0 to 0.12.0

revive: from 1.15.0 to 1.17.0 (new rules: marshal-receiver, multiline-if-init, use-slices-concat)

tagliatelle: from 0.7.2 to 0.8.0

Linters bug fixes

fatcontext: from 0.10.0 to 0.10.1

flock: from 0.13.0 to 0.13.1

godoclint: from 0.11.2 to 0.11.4

protogetter: from 0.3.21 to 1.0.1

recvcheck: from 0.3.0 to 0.3.1

tagalign: from 1.4.3 to 1.4.4

v2.13.2

Released on 2026-08-28

Bug fixes

Decrease cache entropy

Linters bug fixes

iface: from 1.5.0 to 1.5.1

staticcheck: from 0.8.0 to 0.8.1

unparam: from 3f964bcb5673 to 2fa3d841b0c8

canonicalheader: from v1.1.2 to a temporary fork

v2.13.1

Released on 2026-08-20

Linters bug fixes

ginkgolinter: from 0.23.1 to 0.24.0

gofmt: from d62b90e6713d to e84e05053792

staticcheck: from 0.8.0-rc.1 to 0.8.0

wsl_v5: from 5.8.0 to 5.9.0

v2.13.0

... (truncated)

Commits

114493f chore: prepare release
6960701 docs: update mgechev/revive links with revive-lint/revive (#6817)
67c0feb fix: ignore TextEdits outside the analyzed file (#6816)
260cab1 build(deps): bump github.com/mgechev/revive from 1.16.0 to 1.17.0 (#6813)
6f2bcb0 build(deps): bump github.com/timakin/bodyclose from 73d1f95b84b4 to 857993a29...
665f99b build(deps): bump github.com/nishanths/exhaustive from 0.12.0 to 0.13.0 (#6799)
4e2a77e build(deps): bump dev.gaijin.team/go/exhaustruct/v5 from 5.0.3 to 5.2.0 (#6786)
b02fd39 build(deps): bump github.com/alecthomas/go-check-sumtype from 0.3.1 to ae6904...
7c6c6c0 build(deps): bump github.com/go-critic/go-critic from 0.14.4 to 0.15.0 (#6783)
98686ba build(deps): bump github.com/timonwong/loggercheck from 0.11.0 to 0.12.0 (#6775)
Additional commits viewable in compare view

Updates golang.org/x/vuln from 1.1.4 to 1.8.0

Commits

7090154 go.mod: update golang.org/x dependencies
8fcedea cmd/govulncheck/integration: bump image version
ff4f1c5 all: upgrade go directive to at least 1.26.0 [generated]
617f44b go.mod: update golang.org/x dependencies
19b0bb6 go.mod: update golang.org/x dependencies
3e6f44f go.mod: update golang.org/x dependencies
c3d51cb all: update to x/tools@0602b30930e3
15aacc2 cmd/govulncheck: fix exit code propagation for wrapped scan errors
cd9b8b7 go.mod: update golang.org/x dependencies
57fb27e go.mod: update golang.org/x dependencies
Additional commits viewable in compare view

Bumps the go-tools group with 1 update in the /tools/buf directory: [github.com/bufbuild/buf](https://github.com/bufbuild/buf). Bumps the go-tools group with 1 update in the /tools/golangci-lint directory: [github.com/golangci/golangci-lint/v2](https://github.com/golangci/golangci-lint). Bumps the go-tools group with 1 update in the /tools/govulncheck directory: [golang.org/x/vuln](https://github.com/golang/vuln). Updates `github.com/bufbuild/buf` from 1.54.0 to 1.73.0 - [Release notes](https://github.com/bufbuild/buf/releases) - [Changelog](https://github.com/bufbuild/buf/blob/main/CHANGELOG.md) - [Commits](bufbuild/buf@v1.54.0...v1.73.0) Updates `github.com/golangci/golangci-lint/v2` from 2.12.2 to 2.14.0 - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/main/CHANGELOG.md) - [Commits](golangci/golangci-lint@v2.12.2...v2.14.0) Updates `golang.org/x/vuln` from 1.1.4 to 1.8.0 - [Release notes](https://github.com/golang/vuln/releases) - [Commits](golang/vuln@v1.1.4...v1.8.0) --- updated-dependencies: - dependency-name: github.com/bufbuild/buf dependency-version: 1.73.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-tools - dependency-name: github.com/golangci/golangci-lint/v2 dependency-version: 2.14.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-tools - dependency-name: golang.org/x/vuln dependency-version: 1.8.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-tools ... Signed-off-by: dependabot[bot] <support@github.com>

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017phewNxcFMxpU3ntX2TKek

rapp992 · 2026-10-09T06:09:27Z

Fixed the red Docs & paths job by merging main, which carries the #956 rust-toolchain repin. Checked locally: make lint-ci is clean, the bumped buf v1.73.0 builds, and make proto-check shows no drift in the generated code.

Generated by Claude Code

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 8, 2026

dependabot Bot force-pushed the dependabot/go_modules/tools/buf/go-tools-fe8abde75c branch from b8d2d06 to 160f2c5 Compare October 9, 2026 02:15

Merge origin/main to pick up the dtolnay/rust-toolchain repin (#956)

9618e4b

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017phewNxcFMxpU3ntX2TKek

rapp992 merged commit 9afa24e into main Oct 9, 2026
7 checks passed

rapp992 deleted the dependabot/go_modules/tools/buf/go-tools-fe8abde75c branch October 9, 2026 19:43

Navigation Menu

Repository navigation

deps(tools): Bump the go-tools group across 3 directories with 3 updates - #951

deps(tools): Bump the go-tools group across 3 directories with 3 updates#951
rapp992 merged 2 commits into
mainfrom
dependabot/go_modules/tools/buf/go-tools-fe8abde75c

dependabot Bot commented on behalf of github Oct 8, 2026 •

edited

Loading

Uh oh!

rapp992 commented Oct 9, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Oct 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.73.0

v1.72.0

v1.71.0

v1.70.0

v1.69.0

v1.68.4

v1.68.3

v1.68.2

v1.68.1

[v1.73.0] - 2026-09-11

[v1.72.0] - 2026-07-17

[v1.71.0] - 2026-06-16

[v1.70.0] - 2026-05-25

[v1.69.0] - 2026-04-29

[v1.68.4] - 2026-04-22

[v1.68.3] - 2026-04-20

v2.14.0

Changelog

v2.13.2

v2.14.0

v2.13.2

v2.13.1

v2.13.0

Uh oh!

rapp992 commented Oct 9, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot Bot commented on behalf of github Oct 8, 2026 •

edited

Loading