Skip to content

build(deps): bump the gomod group across 1 directory with 5 updates#3321

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/gomod-280baa9248
Open

build(deps): bump the gomod group across 1 directory with 5 updates#3321
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/gomod-280baa9248

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 6, 2026

Bumps the gomod group with 5 updates in the / directory:

Package From To
github.com/go-jose/go-jose/v3 3.0.4 3.0.5
github.com/hashicorp/terraform-plugin-sdk/v2 2.38.2 2.40.0
github.com/hashicorp/terraform-plugin-testing 1.14.0 1.15.0
golang.org/x/crypto 0.48.0 0.49.0
golang.org/x/oauth2 0.35.0 0.36.0

Updates github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5

Release notes

Sourced from github.com/go-jose/go-jose/v3's releases.

v3.0.5

What's Changed

Fixes GHSA-78h2-9frx-2jm8

We recommend migrating from v3 to v4, and we will stop support v3 in the near future.

Full Changelog: go-jose/go-jose@v3.0.4...v3.0.5

Commits

Updates github.com/hashicorp/terraform-plugin-sdk/v2 from 2.38.2 to 2.40.0

Release notes

Sourced from github.com/hashicorp/terraform-plugin-sdk/v2's releases.

v2.40.0

NOTES:

  • This release moves the resource configuration generation logic for the -generate-config-out flag from Terraform Core to the SDKv2 for Terraform v1.14.0 and above. There should be no functionality changes for resource configuration generation in this release. (#1559)
  • This Go module has been updated to Go 1.25 per the Go support policy. Any consumers building on earlier Go versions may experience errors. (#1564)

v2.39.0

ENHANCEMENTS:

  • helper/schema: Added support for deprecation messages on attributes and blocks, which are now populated from the Schema's Deprecated field and passed through to the protocol layer (#1553)
Changelog

Sourced from github.com/hashicorp/terraform-plugin-sdk/v2's changelog.

2.40.0 (March 10, 2026)

NOTES:

  • This release moves the resource configuration generation logic for the -generate-config-out flag from Terraform Core to the SDKv2 for Terraform v1.14.0 and above. There should be no functionality changes for resource configuration generation in this release. (#1559)
  • This Go module has been updated to Go 1.25 per the Go support policy. Any consumers building on earlier Go versions may experience errors. (#1564)

2.39.0 (February 27, 2026)

ENHANCEMENTS:

  • helper/schema: Added support for deprecation messages on attributes and blocks, which are now populated from the Schema's Deprecated field and passed through to the protocol layer (#1553)
Commits
  • dde4384 Update changelog
  • 9136f3a Update meta package SDKVersion
  • 86877a0 Implement GenerateResourceConfig RPC and existing Terraform default logic (#...
  • 3643171 [Chore] Upgrade Go version to 1.25 (#1564)
  • 9c60d2f build(deps): bump github.com/hashicorp/copywrite in /tools (#1563)
  • 328ad99 build(deps): bump github.com/cloudflare/circl in /tools (#1561)
  • ff0698e build(deps): bump the github-actions group across 1 directory with 4 updates ...
  • f661d42 Update changelog
  • 19ef5a4 Update meta package SDKVersion
  • 9a14d44 feat: add deprecation messages for attributes and blocks in configschema (#1553)
  • Additional commits viewable in compare view

Updates github.com/hashicorp/terraform-plugin-testing from 1.14.0 to 1.15.0

Release notes

Sourced from github.com/hashicorp/terraform-plugin-testing's releases.

v1.15.0

NOTES:

  • This Go module has been updated to Go 1.25 per the Go support policy. Any consumers building on earlier Go versions may experience errors. (#629)

FEATURES:

  • helper/resource: Added new StateStore testing mode to TestStep, which can be used to smoke test Terraform state storage. (#591)

BUG FIXES:

  • helper/resource: Test steps in Config mode using Destroy: true and Check functions will now create an additional destroy plan prior to running terraform apply to avoid a potential "Saved Plan is Stale" error from Terraform. (#602)
  • helper/resource: Test steps in Config mode using the TF_ACC_REFRESH_AFTER_APPLY compatibility flag will not refresh if ExpectNonEmptyPlan is true. (#602)

v1.14.1

BUG FIXES:

  • Backport: Remove the redundant post-apply refresh triggered by resource/refreshAfterApply so acceptance tests avoid an extra refresh cycle. (#641)
Changelog

Sourced from github.com/hashicorp/terraform-plugin-testing's changelog.

1.15.0 (March 10, 2026)

NOTES:

  • This Go module has been updated to Go 1.25 per the Go support policy. Any consumers building on earlier Go versions may experience errors. (#629)

FEATURES:

  • helper/resource: Added new StateStore testing mode to TestStep, which can be used to smoke test Terraform state storage. (#591)

BUG FIXES:

  • helper/resource: Test steps in Config mode using Destroy: true and Check functions will now create an additional destroy plan prior to running terraform apply to avoid a potential "Saved Plan is Stale" error from Terraform. (#602)
  • helper/resource: Test steps in Config mode using the TF_ACC_REFRESH_AFTER_APPLY compatibility flag will not refresh if ExpectNonEmptyPlan is true. (#602)
Commits
  • 7d4f9d9 Update changelog
  • d112e30 Update downstream dependencies and implement GenerateResourceConfig RPC (#630)
  • 72ec2ae [Chore] Upgrade Go version to 1.25 (#629)
  • 8d3e875 build(deps): Bump github.com/hashicorp/copywrite in /tools (#627)
  • 3bd8a60 resource/refreshAfterApply: remove extra refresh (#628)
  • 6fe50f0 build(deps): Bump github.com/cloudflare/circl in /tools (#624)
  • b7ba5b7 build(deps): Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 (#623)
  • 09e67ab querycheck.ExpectResourceKnownValues: Improve readability when there are mu...
  • c528540 build(deps): Bump the github-actions group across 1 directory with 4 updates ...
  • aaf54da build(deps): Bump github.com/hashicorp/terraform-plugin-sdk/v2 (#625)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.48.0 to 0.49.0

Commits
  • 982eaa6 go.mod: update golang.org/x dependencies
  • 159944f ssh,acme: clean up tautological/impossible nil conditions
  • a408498 acme: only require prompt if server has terms of service
  • cab0f71 all: upgrade go directive to at least 1.25.0 [generated]
  • 2f26647 x509roots/fallback: update bundle
  • See full diff in compare view

Updates golang.org/x/oauth2 from 0.35.0 to 0.36.0

Commits
  • 4d954e6 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 6, 2026
Bumps the gomod group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) | `3.0.4` | `3.0.5` |
| [github.com/hashicorp/terraform-plugin-sdk/v2](https://github.com/hashicorp/terraform-plugin-sdk) | `2.38.2` | `2.40.0` |
| [github.com/hashicorp/terraform-plugin-testing](https://github.com/hashicorp/terraform-plugin-testing) | `1.14.0` | `1.15.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.48.0` | `0.49.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.35.0` | `0.36.0` |



Updates `github.com/go-jose/go-jose/v3` from 3.0.4 to 3.0.5
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](go-jose/go-jose@v3.0.4...v3.0.5)

Updates `github.com/hashicorp/terraform-plugin-sdk/v2` from 2.38.2 to 2.40.0
- [Release notes](https://github.com/hashicorp/terraform-plugin-sdk/releases)
- [Changelog](https://github.com/hashicorp/terraform-plugin-sdk/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-plugin-sdk@v2.38.2...v2.40.0)

Updates `github.com/hashicorp/terraform-plugin-testing` from 1.14.0 to 1.15.0
- [Release notes](https://github.com/hashicorp/terraform-plugin-testing/releases)
- [Changelog](https://github.com/hashicorp/terraform-plugin-testing/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-plugin-testing@v1.14.0...v1.15.0)

Updates `golang.org/x/crypto` from 0.48.0 to 0.49.0
- [Commits](golang/crypto@v0.48.0...v0.49.0)

Updates `golang.org/x/oauth2` from 0.35.0 to 0.36.0
- [Commits](golang/oauth2@v0.35.0...v0.36.0)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v3
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/hashicorp/terraform-plugin-sdk/v2
  dependency-version: 2.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/hashicorp/terraform-plugin-testing
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/crypto
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/gomod-280baa9248 branch from ef50b32 to 53edd54 Compare April 9, 2026 14:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants