chore: Bump the go-modules group across 1 directory with 43 updates

[dependabot]

Bumps the go-modules group with 31 updates in the / directory:

Package	From	To
github.com/Masterminds/semver/v3	3.4.0	3.5.0
github.com/aws/aws-sdk-go-v2	1.41.6	1.42.0
github.com/aws/aws-sdk-go-v2/config	1.32.16	1.32.27
github.com/aws/aws-sdk-go-v2/service/s3	1.99.1	1.104.1
github.com/cockroachdb/errors	1.12.0	1.14.0
github.com/getkin/kin-openapi	0.135.0	0.140.0
github.com/go-co-op/gocron/v2	2.21.1	2.21.2
github.com/jackc/pgx/v5	5.9.2	5.10.0
github.com/labstack/echo/v4	4.15.1	4.15.4
github.com/mattn/go-runewidth	0.0.23	0.0.24
github.com/oapi-codegen/runtime	1.4.0	1.4.2
github.com/posthog/posthog-go	1.12.1	1.17.2
github.com/pressly/goose/v3	3.27.1	3.27.2
github.com/testcontainers/testcontainers-go	0.42.0	0.43.0
github.com/testcontainers/testcontainers-go/modules/postgres	0.42.0	0.43.0
github.com/testcontainers/testcontainers-go/modules/rabbitmq	0.42.0	0.43.0
github.com/wneessen/go-mail	0.7.2	0.7.3
go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho	0.68.0	0.69.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	0.68.0	0.69.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc	1.43.0	1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace	1.43.0	1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	1.43.0	1.44.0
google.golang.org/api	0.276.0	0.287.0
k8s.io/apimachinery	0.35.4	0.36.2
k8s.io/client-go	0.35.4	0.36.2
github.com/exaring/otelpgx	0.10.0	0.11.1
github.com/fsnotify/fsnotify	1.9.0	1.10.1
github.com/go-playground/validator/v10	10.30.2	10.30.3
github.com/google/cel-go	0.28.0	0.28.1
github.com/rabbitmq/amqp091-go	1.10.0	1.12.0
github.com/slack-go/slack	0.23.1	0.27.0

Updates github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0

Release notes

Sourced from github.com/Masterminds/semver/v3's releases.

v3.5.0

What's Changed

• Adding more prerelease tests by @​mattfarina in Masterminds/semver#273
• Update constraint error messages by @​mattfarina in Masterminds/semver#278
• Fix edge cases by @​mattfarina in Masterminds/semver#279
• Adding some checks in by @​mattfarina in Masterminds/semver#280
• Updating deps by @​mattfarina in Masterminds/semver#281
• Bump github/codeql-action from 4.35.1 to 4.35.2 by @​dependabot[bot] in Masterminds/semver#282
• Bump actions/cache from 4.2.3 to 5.0.5 by @​dependabot[bot] in Masterminds/semver#283
• Bump golangci/golangci-lint-action from 7.0.1 to 9.2.0 by @​dependabot[bot] in Masterminds/semver#284
• Updating gitignore for devcontainers by @​mattfarina in Masterminds/semver#286
• Fixing some quality issues by @​mattfarina in Masterminds/semver#287

New Contributors

• @​dependabot[bot] made their first contribution in Masterminds/semver#282

Full Changelog: Masterminds/semver@v3.4.0...v3.5.0

Changelog

Sourced from github.com/Masterminds/semver/v3's changelog.

Changelog

Commits

• 8b89c86 Merge pull request #287 from mattfarina/fix-da-issues
• 29d51d0 Fixing some quality issues
• 87f651d Merge pull request #286 from mattfarina/update-devcontainer
• 158a685 Updating gitignore for devcontainers
• 7e83c08 Merge pull request #284 from Masterminds/dependabot/github_actions/golangci/g...
• 697e27f Merge pull request #283 from Masterminds/dependabot/github_actions/actions/ca...
• 1591f8e Merge pull request #282 from Masterminds/dependabot/github_actions/github/cod...
• 3f5ff17 Bump golangci/golangci-lint-action from 7.0.1 to 9.2.0
• 04baa33 Bump actions/cache from 4.2.3 to 5.0.5
• 45939fe Bump github/codeql-action from 4.35.1 to 4.35.2
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.41.6 to 1.42.0

Commits

• 9a3190f Release 2026-06-08
• b20dd5b Regenerated Clients
• 75a45ea Update API model
• e736f55 Add preview of changes for standard retry mode behind flag (#3400)
• ba08dc9 Release 2026-06-05.2
• 9a67e21 Revert schema serde (#3442)
• 51692f8 s3/transfermanager: avoid double-closing concurrentReader channel after read ...
• f696d5b Release 2026-06-05
• 7efb8fd Regenerated Clients
• 1a420c5 Update endpoints model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.16 to 1.32.27

Commits

• b4784c1 Release 2026-07-01
• 97c0201 Regenerated Clients
• 6687238 Update endpoints model
• 995297f Update API model
• c26cfc6 Fix bump smithy-go to cover multiple issues (#3461)
• fae66b8 Set transfer manager error as the first error seen, preventing race condition...
• cf0eabd Release 2026-06-30
• ad0c091 Regenerated Clients
• 196e961 Update endpoints model
• 1529ead Update API model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.99.1 to 1.104.1

Commits

• 26060c5 Release 2026-06-29
• 24e918a Regenerated Clients
• 334471f Update API model
• 96d81dc Deprecate iotevents, ioteventsdata, panorama and simspaceweaver (#3458)
• 30502cb feat: mark common plugins and fix per-op ordering for invokeOperation refacto...
• 8881653 Revert "feat: mark common plugins and fix per-op ordering for invokeOperation...
• eba2f01 feat: mark common plugins and fix per-op ordering for invokeOperation… (#3443)
• 2c5e1db Release 2026-06-23
• d09eeb5 Regenerated Clients
• 2f5f5f9 Update API model
• Additional commits viewable in compare view

Updates github.com/cockroachdb/errors from 1.12.0 to 1.14.0

Release notes

Sourced from github.com/cockroachdb/errors's releases.

v1.14.0

What's Changed

• Bump google.golang.org/grpc from 1.56.3 to 1.79.3 by @​dependabot[bot] in cockroachdb/errors#157
• errors: re-export ErrUnsupported from stdlib by @​dhartunian in cockroachdb/errors#161

Full Changelog: cockroachdb/errors@v1.13.0...v1.14.0

v1.13.0

What's Changed

• errorbase: optimize errors.Is by @​jeffswenson in cockroachdb/errors#153
• build: bump min Go version to 1.25, add 1.26 to CI by @​dhartunian in cockroachdb/errors#160
• report: migrate Event.Extra to Event.Contexts (sentry-go v0.46+ compat) by @​denniszag in cockroachdb/errors#159

New Contributors

• @​jeffswenson made their first contribution in cockroachdb/errors#153
• @​denniszag made their first contribution in cockroachdb/errors#159

Full Changelog: cockroachdb/errors@v1.12.0...v1.13.0

Commits

• 4fc17f8 Merge pull request #161 from cockroachdb/davidh/add-errunsupported
• 41eb805 Merge branch 'master' into davidh/add-errunsupported
• d643ae2 Merge pull request #157 from cockroachdb/dependabot/go_modules/google.golang....
• e013f71 Bump google.golang.org/grpc from 1.56.3 to 1.79.3
• 83ea25b Merge branch 'master' into davidh/add-errunsupported
• fc93249 Merge pull request #159 from denniszag/fix/sentry-go-v0.46-compat
• ad7454c report: migrate Event.Extra to Event.Contexts (sentry-go v0.46+ compat)
• 3533d59 errors: re-export ErrUnsupported from stdlib
• 3c36bbd Merge pull request #160 from cockroachdb/davidh/bump-go-1.25
• d948846 Merge branch 'master' into davidh/bump-go-1.25
• Additional commits viewable in compare view

Updates github.com/getkin/kin-openapi from 0.135.0 to 0.140.0

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.140.0

What's Changed

• openapi3: document that a custom ReadFromURIFunc bypasses IsExternalRefsAllowed by @​reuvenharrison in getkin/kin-openapi#1191
• openapi3: remove deepcopy dependency by @​alexandear in getkin/kin-openapi#1193
• openapi3: remove decimal128 dependency by @​alexandear in getkin/kin-openapi#1194
• refactor: apply modernize fixes by @​alexandear in getkin/kin-openapi#1195
• openapi2,openapi3: replace marshmallow with encoding/json by @​alexandear in getkin/kin-openapi#1196
• docs: update GoDoc links to Go Reference by @​alexandear in getkin/kin-openapi#1197
• chore: bump jsonpointer to v0.22.5 by @​alexandear in getkin/kin-openapi#1198

Full Changelog: getkin/kin-openapi@v0.139.0...v0.140.0

v0.139.0

What's Changed

• feat(openapi3): batch-convert long-tail RequiredFieldError sites by @​reuvenharrison in getkin/kin-openapi#1170
• feat(openapi3): typed validation error clusters (combined: feat(logging)!: add client & worker option to pass a custom logger #1171-#1179) by @​reuvenharrison in getkin/kin-openapi#1180
• openapi3gen: skip component export for anonymous types by @​0-don in getkin/kin-openapi#1163
• feat: migrate to oasdiff/yaml v0.1.0 single Unmarshal API + enable DisableTimestamps by @​reuvenharrison in getkin/kin-openapi#1181
• openapi3: typed context errors for Validate() wrapper chain by @​reuvenharrison in getkin/kin-openapi#1183
• openapi3: track Origin on the document root (T) by @​reuvenharrison in getkin/kin-openapi#1184
• openapi3: tests flakiness corrected by @​fenollp in getkin/kin-openapi#1159
• openapi3: aggregate independent validation errors via EnableMultiError by @​reuvenharrison in getkin/kin-openapi#1185
• openapi3: fix validation of duplicated path templates by @​reuvenharrison in getkin/kin-openapi#1189
• openapi3: type the remaining bare-error validation sites by @​reuvenharrison in getkin/kin-openapi#1187

Full Changelog: getkin/kin-openapi@v0.138.0...v0.139.0

v0.138.0

What's Changed

• openapi3gen: clear nullable on exported component bodies by @​0-don in getkin/kin-openapi#1164
• openapi3: add test for issue #927 (nullable not respected on $ref schemas) by @​fenollp in getkin/kin-openapi#1165
• test: move public-API tests to external _test packages by @​fenollp in getkin/kin-openapi#1168
• feat(openapi3): add per-type validation errors with cluster wrappers by @​reuvenharrison in getkin/kin-openapi#1166
• feat(openapi3conv): canonicalization pass for 3.0 -> 3.x by @​reuvenharrison in getkin/kin-openapi#1162
• openapi3conv: test Upgrade on many documents by @​fenollp in getkin/kin-openapi#1169

Full Changelog: getkin/kin-openapi@v0.137.0...v0.138.0

v0.137.0

What's Changed

• revert to go 1.25 and revert cc4f8d99 by @​fenollp in getkin/kin-openapi#1161

Full Changelog: getkin/kin-openapi@v0.136.0...v0.137.0

v0.136.0

What's Changed

... (truncated)

Commits

• 5124898 chore: bump jsonpointer to v0.22.5 (#1198)
• 5ece4a3 docs: update GoDoc links to Go Reference (#1197)
• b8600c5 openapi2,openapi3: remove marshmallow dependency (#1196)
• 3a5ddcd refactor: apply modernize fixes (#1195)
• 742704d openapi3: remove decimal128 dependency (#1194)
• 368327b openapi3: remove deepcopy dependency (#1193)
• 4dc207c openapi3: document that a custom ReadFromURIFunc bypasses IsExternalRefsAllow...
• 8381bfc openapi3: type the remaining bare-error validation sites (#1187)
• d29b5c0 openapi3: fix validation of duplicated path templates (#1189)
• e56c2c7 openapi3: aggregate independent validation errors via EnableMultiError (#1185)
• Additional commits viewable in compare view

Updates github.com/go-co-op/gocron/v2 from 2.21.1 to 2.21.2

Release notes

Sourced from github.com/go-co-op/gocron/v2's releases.

v2.21.2

What's Changed

• fix: defer WithLimitedRuns job removal until task completes (#925) by @​SAY-5 in go-co-op/gocron#926

New Contributors

• @​SAY-5 made their first contribution in go-co-op/gocron#926

Full Changelog: go-co-op/gocron@v2.21.1...v2.21.2

Commits

• 629cfc5 fix: defer WithLimitedRuns job removal until task completes (#925) (#926)
• See full diff in compare view

Updates github.com/jackc/pgx/v5 from 5.9.2 to 5.10.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.10.0 (June 3, 2026)

This release includes a significant amount of hardening against malicious or compromised PostgreSQL servers, contributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled message sizes, caps server-supplied SCRAM iteration counts, adds require_auth to restrict which authentication methods a server may use (mitigating downgrade attacks under sslmode=prefer), and ensures cancellation requests are sent over TLS when the original connection used TLS.

Features

• Add require_auth to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)
• Add ParseConfigOptions.ConnStringAllowedKeys to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)
• Add StructArgs and StrictStructArgs for @-named queries (Tubelight30)
• Add ErrConnClosed sentinel error and unwrap it from connLockError (Charlie Tonneslan)
• pgxpool: check if connection is expired before acquire (arthurdotwork)

Security Hardening

• Encrypt CancelRequest connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)
• Cap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)
• Default Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)
• Bound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)
• Bound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)
• Bound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)
• Bound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)
• Document secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)
• Fix panic on malformed geometric text; return an error instead (MaIII)

Fixes

• Fix scanning "char" (OID 18) into *string in binary format (luongs3)
• Fix handling of typed-nil driver.Valuer in array and composite codecs (Donncha Fahy)
• Fix CopyData.Data hex decoding in UnmarshalJSON (Charlie Tonneslan)
• Fix data race when context is cancelled during connect
• Fix parseKeywordValueSettings rejecting trailing whitespace (alliasgher)
• pgconn: preserve full error chain in normalizeTimeoutError (Charlie Tonneslan)
• pgconn: use a fresh context for the fallback connection in connectPreferred (Charlie Tonneslan)
• pgxpool: fix MaxLifetimeDestroyCount and ping order for acquire-time expiry check
• Add missing error check of rows.Err to load types (Jen Altavilla)

Commits

• 7293fb1 Update changelog for v5.10.0
• 1ade285 pgconn: document secure connection configuration
• b4d6d4d pgtype: bound range, multirange, and tsvector binary decoders
• 0639b37 pgconn: add ParseConfigOptions.ConnStringAllowedKeys
• b28e65b pgtype: bound array element count against remaining message bytes
• cd1f389 pgtype: bound array binary decode element length against remaining bytes
• ff27b5b pgtype: bound hstore binary decode against malicious server input
• a6002e1 pgproto3: default Frontend max message body length to ~1 GiB
• 44f6173 pgconn: cap server-supplied SCRAM iteration count
• 1a976f7 pgconn: add require_auth to restrict accepted server auth methods
• Additional commits viewable in compare view

Updates github.com/labstack/echo/v4 from 4.15.1 to 4.15.4

Release notes

Sourced from github.com/labstack/echo/v4's releases.

v4.15.4

Security

Fixes GHSA-vfp3-v2gw-7wfq: an encoded path separator (%2F or %5C) in a static file URL could bypass route-level middleware (e.g. authentication on a sibling route) and disclose static files. Both StaticDirectoryHandler (used by Static/StaticFS) and the Static middleware are affected. Backport of the v5 fix (#3016, released in v5.2.1). Thanks to @​a-tt-om and @​oran-gugu for reporting.

---

Make serving static file releated methods and middleware not unescape path by default - so how the way Router interprets paths and Static methods/middleware is consistent.

Given following situation:

// 0.
// given folder structure:
// private.txt
// public/
// public/index.html
// public/text.txt
// public/admin/private.txt
// 1. share public/ folder contents from the server root. This folder actually contains subfolder admin which
// contents we want to forbid from downloading
e.Static("/", "public")
// 2. naively assume that everything under /admin folder is now forbidden
e.GET("/admin/*", func(c *Context) error {
return ErrForbidden
})

Then requests to /admin%2fprivate.txt would not be matched to GET /admin/* route (routing does not look unescaped path) and static file serving will use unescaped path to serve the file.

Note: this way of "guarding" subfolders will never work for for paths like /assets/../admin%2fprivate.txt which will path.Clean("/assets/../admin%2fprivate.txt") to /admin/private.txt and are servable if static file serving is configured to unescape paths.

If you want to guard routes - use middlewares on Static* methods and before Static middleware.

Breaking change / migration: If you serve files whose names contain URL-encoded characters (e.g., /hello%20world.txt → hello world.txt), you must now opt in:

	e := echo.New()
	e.EnablePathUnescapingStaticFiles = true  // <-- enable old behavior
	e.Static("/", "public")

for static middleware

	e.Use(middleware.StaticWithConfig(middleware.StaticConfig{
		EnablePathUnescaping: true, // <-- enable old behavior
	}))

... (truncated)

Changelog

Sourced from github.com/labstack/echo/v4's changelog.

v4.15.4 - 2026-06-15

Security

Fixes GHSA-vfp3-v2gw-7wfq

Make serving static file releated methods and middleware not unescape path by default - so how the way Router interprets paths and Static methods/middleware is consistent.

Given following situation:

// 0.
// given folder structure:
// private.txt
// public/
// public/index.html
// public/text.txt
// public/admin/private.txt
// 1. share public/ folder contents from the server root. This folder actually contains subfolder admin which
// contents we want to forbid from downloading
e.Static("/", "public")
// 2. naively assume that everything under /admin folder is now forbidden
e.GET("/admin/*", func(c *Context) error {
return ErrForbidden
})

Then requests to /admin%2fprivate.txt would not be matched to GET /admin/* route (routing does not look unescaped path) and static file serving will use unescaped path to serve the file.

Note: this way of "guarding" subfolders will never work for for paths like /assets/../admin%2fprivate.txt which will path.Clean("/assets/../admin%2fprivate.txt") to /admin/private.txt and are servable if static file serving is configured to unescape paths.

If you want to guard routes - use middlewares on Static* methods and before Static middleware.

Breaking change / migration: If you serve files whose names contain URL-encoded characters (e.g., /hello%20world.txt → hello world.txt), you must now opt in:

	e := echo.New()
	e.EnablePathUnescapingStaticFiles = true  // <-- enable old behavior
	e.Static("/", "public")

for static middleware

	e.Use(middleware.StaticWithConfig(middleware.StaticConfig{
		EnablePathUnescaping: true, // <-- enable old behavior
	}))

v4.15.3 - 2026-06-14

... (truncated)

Commits

• ec79b58 Merge pull request #3020 from aldas/v4_v4-15-4_changelog
• 2714c07 Changelog for v4.15.4 - security fix
• 13f0ed1 Merge pull request #3019 from aldas/v4_backport_3016
• d16a4ec backport PR 3016 from v4
• 8f167b9 Merge pull request #3018 from aldas/v4_remove_v5_dep
• 9afa4ba remove dependency on labstack/echo v5 introduced in go.mod and go.sum
• 1e05f63 Merge pull request #3017 from aldas/v4_ci_updates
• 11a3cc4 Update dependencies and add ignore for linting
• 26bd016 Update CI action versions
• aa52f6a ci: run workflows on the v4 branch, not just master (#3013)
• Additional commits viewable in compare view

Updates github.com/mattn/go-runewidth from 0.0.23 to 0.0.24

Commits

• 0383c20 Merge pull request #96 from mattn/optimize-eastasian-width-table
• 37796e5 Optimize EastAsian RuneWidth with precomputed width table
• e8dc57a Revise security policy and supported versions
• See full diff in compare view

Updates github.com/oapi-codegen/runtime from 1.4.0 to 1.4.2

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

Bug fix for required parameters

This is a bug fix to address a regression introduced in oapi-codegen v2.7.0

🐛 Bug fixes

• Add missing required parameter detection (#135) @​mromaszewicz

Sponsors

We would like to thank our sponsors for their support during this release.

Bug fixes

This is a bug fix release.

Changes in v1.4.0, coupled with changes in v2.7.0 of oapi-codegen exposed some new problems. deepObject style marshaling behavior now supports encoding unicode. UTF-8 can't be directly included in parameters, so we need to % escape it.

Form binding now detects maps, which makes binding to a Nullable possible. We can't use generics around Nullable[T], so we handle maps generically, assuming they're a Nullable with its behavior assumptions.

🐛 Bug fixes

• Fix form binding of Nullables (#133) @​mromaszewicz
• Percent-encode deepObject parameter wire output (#132) @​mromaszewicz

📦 Dependency updates

• chore(deps): update oapi-codegen/actions action to v0.7.0 (#127) @renovate[bot]
• chore(deps): update github/codeql-action action to v4 (#107) @renovate[bot]
• fix(deps): update module github.com/kataras/iris/v12 to v12.2.11 (#11) @renovate[bot]
• chore(deps): update release-drafter/release-drafter action to v7.2.0 (#122) @renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.

... (truncated)

Commits

• 7afeea8 Add missing required parameter detection (#135)
• 2755f15 Fix form binding of Nullables (#133)
• 17de1dd Percent-encode deepObject parameter wire output (#132)
• d2b7c4c chore(deps): update oapi-codegen/actions action to v0.7.0
• 6fd6c25 chore(deps): update github/codeql-action action to v4
• 19040cc fix(deps): update module github.com/kataras/iris/v12 to v12.2.11
• e05282e chore(deps): update release-drafter/release-drafter action to v7.2.0 (#122)
• See full diff in compare view

Updates github.com/posthog/posthog-go from 1.12.1 to 1.17.2

Release notes

Sourced from github.com/posthog/posthog-go's releases.

1.17.2

Unreleased

1.17.1

Unreleased

1.17.0

Unreleased

1.16.2

Unreleased

1.16.1

Unreleased

1.16.0

Unreleased

1.15.1

Unreleased

1.15.0

Unreleased

1.14.0

Unreleased

1.13.2

Unreleased

1.13.1

Unreleased

1.13.0

Unreleased

1.12.6

Unreleased

1.12.5

Unreleased

1.12.4 - 2026-04-30

• Full Changelog

1.12.3 - 2026-04-21

• Full Changelog

... (truncated)

Changelog

Sourced from github.com/posthog/posthog-go's changelog.

1.17.2

Patch Changes

• d98ef79: Retry feature flag requests after transient network errors only. The feature flag request retry count defaults to 1 and can be set to 0 to disable retries.

1.17.1

Patch Changes

• 651b303: Preserve caller-provided system context values when building capture v1 event properties.
• e0eb8bd: Send capture batches uncompressed when request-body compression fails instead of failing the batch.
• 71f5c2e: Expose capture default properties to BeforeSend hooks before serialization.

1.17.0

Minor Changes

• ff0e74b: Enrich capture-v1 failure reporting with typed errors and verbose result logging. When CaptureMode is CaptureModeAnalyticsV1, Callback.Failure now receives either a *CaptureEventError (a single event the server dropped, or one still asking to retry once attempts are exhausted — exposing EventUUID, Result, Details, and Exhausted) or a *CaptureRequestError (a whole request that failed on a non-2xx status, transport error, or malformed body — exposing StatusCode, Code, Description, and unwrapping to the underlying error). Inspect them with errors.As. Additionally, with Verbose: true the SDK logs one debug line per 2xx response summarizing the per-event directive counts (ok/warning/drop/retry/other) so partial-submission outcomes are easy to debug. The legacy path and its callback errors are unchanged.
• ff0e74b: Add opt-in capture-v1 support via a new Config.CaptureMode option. It defaults to CaptureModeLegacy (the existing POST /batch/ endpoint), so upgrading is transparent and requires no code changes. Set CaptureMode: posthog.CaptureModeAnalyticsV1 to send events to POST /i/v1/analytics/events instead, which uses Bearer auth, per-event delivery results, and partial retry (only the events the server asks to retry are re-sent). For v1, the Callback interface is unchanged but outcomes become per-event: a drop result fails an individual event (and can fire Failure on an HTTP 200), warning counts as success, and a uuid missing from the results is silently dropped. All other configuration (host, API key, Callback, Logger, MaxRetries, Compression) is reused across both modes.
• ff0e74b: Add zstd, deflate, and brotli compression for the capture-v1 path, alongside the existing gzip. Select one via Config.Compression (CompressionZstd, CompressionDeflate, CompressionBrotli) and the SDK sets the matching Content-Encoding header (zstd, deflate, br). These three codecs require CaptureMode: posthog.CaptureModeAnalyticsV1 — the legacy POST /batch/ endpoint only understands gzip, so configuring them with CaptureModeLegacy returns a validation error. CompressionGzip and CompressionNone continue to work on both capture modes. All codecs use pure-Go libraries (stdlib compress/zlib, github.com/klauspost/compress/zstd, github.com/andybalholm/brotli), so CGO_ENABLED=0 builds are unaffected.

1.16.2

Patch Changes

• 76de226: Dedupe $feature_flag_called events by feature flag response value.

1.16.1

Patch Changes

• 922cfff: Validate user-supplied event UUIDs before sending and generate a fallback UUID when invalid.

1.16.0

Minor Changes

• 1068ec9: Add a BeforeSend hook for modifying or dropping messages before they are sent.

1.15.1

Patch Changes

• 52b7373: Stop sending ignored top-level capture fields and rely on canonical event properties.

1.15.0

Minor Changes

... (truncated)

Commits

• c2ee6b1 chore: release v1.17.2 [version bump] [skip ci]
• d98ef79 fix(flags): retry flag requests on transient network errors (#240)
• 63feb5e chore: release v1.17.1 [version bump] [skip ci]
• e0eb8bd fix: fall back to uncompressed on compression failure (#242)
• 651b303 fix: preserve v1 caller system context (#243)
• 71f5c2e fix: expose capture defaults to BeforeSend hooks (#244)
• 45e5e96 chore: release v1.17.0 [version bump] [skip ci]
• ff0e74b feat(capture): add v1 wire types and serialization (unwired) (#235)
• 2832a6e chore: use pnpm setup runtime action (#241)
• 89309b8 chore: release v1.16.2 [version bump] [skip ci]
• Additional commits viewable in compare view

Updates github.com/pressly/goose/v3 from 3.27.1 to 3.27.2

Release notes

Sourced from github.com/pressly/goose/v3's releases.

v3.27.2

Changed

• Upgrade golang.org/x/crypto and golang.org/x/net to address security advisories (CVE fixes)
• Various dependency upgrades

Changelog

Sourced from github.com/pressly/goose/v3's changelog.

[v3.27.2] - 2026-06-30

Changed

• Upgrade golang.org/x/crypto and golang.org/x/net to address security advisories (CVE fixes)
• Various dependency upgrades

Commits

• b0f7076 release: v3.27.2
• 6669df2 build(deps): bump github.com/opencontainers/runc from 1.3.3 to 1.3.6 in /inte...
• f61f5b9 build(deps): bump the gomod group across 1 directory with 4 updates (#1086)
• 90d5b3a build(deps): bump actions/checkout from 6 to 7 (#1081)
• cef6bb7 build(deps): bump golang crypto and net to FIX CVEs (#1083)
• f2c327a build(deps): bump the gomod group across 1 directory with 7 updates (#1079)
• d0bee40 Docs: mention MariaDB support (#1071)
• See full diff in compare view

Updates github.com/testcontainers/testcontainers-go from 0.42.0 to 0.43.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.43.0

What's Changed

⚠️ Breaking Changes

• chore(wait)!: change url callback in wait.ForSQL to accept network.Port (#3650) @​thaJeztah

Users of wait.ForSQL need to follow the new API contract, using Moby's network.Port instead of string when building the callback function to check the URL. Please see https://golang.testcontainers.org/features/wait/sql/

• feat!: add PullImageWithPlatform to DockerProvider (#3710) @​blueprismo

Users implementing their own testcontainers.ImageProvider need to implement the new PullImageWithPlatform method introduced by this PR.

🚀 Features

• feat(k3s): pull image opts (#3716) @​blueprismo
• feat(wait): implement AnyMultiStrategy: ForAny equivalent to ForAll. (#3719) @​jeanbza
• feat(eventhubs): add WithAzuriteContainer and functional-options config builder (#3722) @​mdelapenya
• feat!: add PullImageWithPlatform to DockerProvider (#3710) @​blueprismo
• feat(modules/dex): add Dex OIDC provider module (#3659) @​guilycst

🐛 Bug Fixes

• fix(security): remove debug code that leaks Docker credentials (#3721) @​mdelapenya
• fix(ollama): align local exec test with Ollama 0.30.6 log format (#3715) @​mdelapenya
• fix: close temp file handle before removal (#3672) @​acouvreur
• fix(compose): close docker clients to prevent goroutine leaks (#3661) @​mdelapenya
• fix: wait for log production goroutine to drain on stop (#3660) @​mdelapenya

📖 Documentation

• chore: update usage metrics (2026-06) (#3714) @github-actions[bot]

🧹 Housekeeping

• chore(wait)!: change url callback in wait.ForSQL to accept network.Port (#3650) @​thaJeztah
• chore: update usage metrics (2026-05) (#3670) @github-actions[bot]
• chore: remove cgroupnsMode setting from K3s container configuration (#3653) @...

  Description has been truncated

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
hatchet-docs	Ready	Preview, Comment	Jul 8, 2026 12:15pm

[github-actions]

⚠️ Optional test failure: The load-deadlock job failed on this PR (optimistic-scheduling=true). This check is non-mandatory and does not block merging, but may be worth investigating. View logs

[github-actions]

⚠️ Optional test failure: The load-deadlock job failed on this PR (optimistic-scheduling=true). This check is non-mandatory and does not block merging, but may be worth investigating. View logs