Chore(deps): Bump the minor-and-patch group with 7 updates #977

dependabot · 2025-12-07T02:12:19Z

Bumps the minor-and-patch group with 7 updates:

Package	From	To
github.com/aws/aws-sdk-go-v2	`1.40.0`	`1.40.1`
github.com/aws/aws-sdk-go-v2/config	`1.32.2`	`1.32.3`
github.com/aws/aws-sdk-go-v2/credentials	`1.19.2`	`1.19.3`
github.com/aws/aws-sdk-go-v2/service/ses	`1.34.14`	`1.34.15`
github.com/aws/aws-sdk-go-v2/service/sns	`1.39.7`	`1.39.8`
github.com/spf13/cobra	`1.10.1`	`1.10.2`
github.com/twilio/twilio-go	`1.28.7`	`1.28.8`

Updates github.com/aws/aws-sdk-go-v2 from 1.40.0 to 1.40.1

Commits

09a5817 Release 2025-12-02
58d1759 Regenerated Clients
16ba34e Update endpoints model
7873bf4 Update API model
9b55b02 bump smithy-go to v1.24.0 (#3242)
d8b0179 Release 2025-12-01
e4405f0 Regenerated Clients
65d08b0 Update API model
f6cc036 Release 2025-11-26
deb353f Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.2 to 1.32.3

Commits

6b53348 Release 2024-10-28
784d2d3 Regenerated Clients
7258bd2 Update endpoints model
f322198 Update API model
b65b80a Merge pull request #2852 from RanVaknin/signature-header-parsing-fix
803614d Fixing changelog description and implementation to use TrimSpace
b12c8cf adding changelog
f0caa97 patching GetSignedRequestSignature to cover edge cases with the signature
e058903 drop service/nimble (#2851)
896793a Release 2024-10-25
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.2 to 1.19.3

Commits

4599f78 Release 2023-08-21
2a439ce Regenerated Clients
46f31d7 Update endpoints model
525486a Update API model
b4e3176 Merge pull request #2189 from aws/feat-presign-polly
30fe9b8 Modify and Merge polly mod import
f6c1d48 sync polly presigner from main
396f97a Release 2023-08-18
08ab454 Regenerated Clients
b50999b Update SDK's smithy-go dependency to v1.14.2
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ses from 1.34.14 to 1.34.15

Commits

34ec0a4 Release 2025-11-25
540441a Regenerated Clients
9869a2b Update endpoints model
a6b38c1 Update API model
3953a0d add explicit message deser to all s3 errors (#3237)
e7eec69 Fix panic during auth scheme resolution due to region validation (#3235)
d68b3a0 Release 2025-11-24
292a198 Regenerated Clients
dfeabc6 Update API model
a7a1be5 Release 2025-11-21
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sns from 1.39.7 to 1.39.8

Commits

728f21f Release 2024-05-16
3dbd5ca Regenerated Clients
c87adfd Update endpoints model
e209d02 Update API model
ef4a9a0 internal: capture user-agent in metrics (#2644)
See full diff in compare view

Updates github.com/spf13/cobra from 1.10.1 to 1.10.2

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.2

🔧 Dependencies

chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @dims in spf13/cobra#2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

Fix linter and allow CI to pass by @marckhouzam in spf13/cobra#2327

fix: actions/setup-go v6 by @jpmcb in spf13/cobra#2337

🔥✍🏼 Docs

Add documentation for repeated flags functionality by @rvergis in spf13/cobra#2316

🍂 Refactors

refactor: replace several vars with consts by @htoyoda18 in spf13/cobra#2328

refactor: change minUsagePadding from var to const by @ssam18 in spf13/cobra#2325

🤗 New Contributors

@rvergis made their first contribution in spf13/cobra#2316

@htoyoda18 made their first contribution in spf13/cobra#2328

@ssam18 made their first contribution in spf13/cobra#2325

@dims made their first contribution in spf13/cobra#2336

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

Commits

88b30ab chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#2336)
346d408 fix: actions/setup-go v6 (#2337)
fc81d20 refactor: change minUsagePadding from var to const (#2325)
117698a refactor: replace several vars with consts (#2328)
e2dd29d Add documentation for repeated flags functionality (#2316)
0629892 Fix linter (#2327)
See full diff in compare view

Updates github.com/twilio/twilio-go from 1.28.7 to 1.28.8

Release notes

Sourced from github.com/twilio/twilio-go's releases.

v1.28.8

Release Notes

Library - Chore

[PR #308](twilio/twilio-go#308): region API domain processing. Thanks to @manisha1997!

Api

Add twiml_session resource for calls

Add twiml_session resource for calls

Monitor

Update default output properties

Trusthub

Added customer_profile_sid in toll-free initialize api payload.

Docs

Changelog

Sourced from github.com/twilio/twilio-go's changelog.

[2025-12-03] Version 1.28.8

Library - Chore

[PR #308](twilio/twilio-go#308): region API domain processing. Thanks to @manisha1997!

Api

Add twiml_session resource for calls

Add twiml_session resource for calls

Monitor

Update default output properties

Trusthub

Added customer_profile_sid in toll-free initialize api payload.

Commits

e6417ea Release v1.28.8
85f0b5c [Librarian] Regenerated @ 86e712bb98e901aebd01edb01085d4f2becccd4c 8aaa875542...
292e4f2 chore: region API domain processing (#308)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 7 updates: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.40.0` | `1.40.1` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.2` | `1.32.3` | | [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.19.2` | `1.19.3` | | [github.com/aws/aws-sdk-go-v2/service/ses](https://github.com/aws/aws-sdk-go-v2) | `1.34.14` | `1.34.15` | | [github.com/aws/aws-sdk-go-v2/service/sns](https://github.com/aws/aws-sdk-go-v2) | `1.39.7` | `1.39.8` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.10.1` | `1.10.2` | | [github.com/twilio/twilio-go](https://github.com/twilio/twilio-go) | `1.28.7` | `1.28.8` | Updates `github.com/aws/aws-sdk-go-v2` from 1.40.0 to 1.40.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@v1.40.0...v1.40.1) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.2 to 1.32.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@v1.32.2...v1.32.3) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.2 to 1.19.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/m2/v1.19.2...service/pi/v1.19.3) Updates `github.com/aws/aws-sdk-go-v2/service/ses` from 1.34.14 to 1.34.15 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/ram/v1.34.14...service/ram/v1.34.15) Updates `github.com/aws/aws-sdk-go-v2/service/sns` from 1.39.7 to 1.39.8 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/emr/v1.39.7...service/emr/v1.39.8) Updates `github.com/spf13/cobra` from 1.10.1 to 1.10.2 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.10.1...v1.10.2) Updates `github.com/twilio/twilio-go` from 1.28.7 to 1.28.8 - [Release notes](https://github.com/twilio/twilio-go/releases) - [Changelog](https://github.com/twilio/twilio-go/blob/main/CHANGES.md) - [Commits](twilio/twilio-go@v1.28.7...v1.28.8) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.40.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.19.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: github.com/aws/aws-sdk-go-v2/service/ses dependency-version: 1.34.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: github.com/aws/aws-sdk-go-v2/service/sns dependency-version: 1.39.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: github.com/spf13/cobra dependency-version: 1.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: github.com/twilio/twilio-go dependency-version: 1.28.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <[email protected]>

socket-security · 2025-12-07T02:12:39Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/github.com/aws/aws-sdk-go-v2@v1.40.0 ⏵ v1.40.1
	golang/github.com/twilio/twilio-go@v1.28.7 ⏵ v1.28.8	⁺¹
	golang/github.com/aws/aws-sdk-go-v2/config@v1.32.2 ⏵ v1.32.3
	golang/github.com/spf13/cobra@v1.10.1 ⏵ v1.10.2
	golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.2 ⏵ v1.19.3
	golang/github.com/aws/aws-sdk-go-v2/service/sns@v1.39.7 ⏵ v1.39.8
	golang/github.com/aws/aws-sdk-go-v2/service/ses@v1.34.14 ⏵ v1.34.15

View full report

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 7, 2025

dependabot bot temporarily deployed to Receiver Registration - E2E Integration Tests (Stellar) December 7, 2025 02:12 Inactive

dependabot bot temporarily deployed to Internal SEP Tests December 7, 2025 02:12 Inactive

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Chore(deps): Bump the minor-and-patch group with 7 updates #977

Chore(deps): Bump the minor-and-patch group with 7 updates #977

Uh oh!

dependabot bot commented on behalf of github Dec 7, 2025

Uh oh!

socket-security bot commented Dec 7, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Chore(deps): Bump the minor-and-patch group with 7 updates #977

Are you sure you want to change the base?

Chore(deps): Bump the minor-and-patch group with 7 updates #977

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 7, 2025

v1.10.2

🔧 Dependencies

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

v1.28.8

Release Notes

[2025-12-03] Version 1.28.8

Uh oh!

socket-security bot commented Dec 7, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant