Skip to content

Bump the go_modules group across 7 directories with 16 updates#747

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/clients/go/client/go_modules-309be08fe3
Open

Bump the go_modules group across 7 directories with 16 updates#747
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/clients/go/client/go_modules-309be08fe3

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 19, 2026

Bumps the go_modules group with 8 updates in the /clients/go/client directory:

Package From To
cosmossdk.io/math 1.0.0-rc.0 1.4.0
filippo.io/edwards25519 1.0.0 1.1.1
github.com/cosmos/ibc-go/v7 7.0.0-rc0 7.10.0
github.com/golang/glog 1.2.0 1.2.4
github.com/ulikunitz/xz 0.5.11 0.5.14
golang.org/x/crypto 0.24.0 0.45.0
golang.org/x/oauth2 0.18.0 0.27.0
google.golang.org/grpc 1.64.0 1.64.1

Bumps the go_modules group with 4 updates in the /starship/cmd/starship directory: golang.org/x/crypto, golang.org/x/oauth2, google.golang.org/grpc and helm.sh/helm/v3.
Bumps the go_modules group with 2 updates in the /starship/exposer directory: golang.org/x/net and google.golang.org/grpc.
Bumps the go_modules group with 2 updates in the /starship/faucet directory: golang.org/x/net and google.golang.org/grpc.
Bumps the go_modules group with 9 updates in the /starship/registry directory:

Package From To
cosmossdk.io/math 1.0.0-rc.0 1.4.0
filippo.io/edwards25519 1.0.0 1.1.1
github.com/cosmos/ibc-go/v7 7.0.0-rc0 7.10.0
github.com/golang/glog 1.2.0 1.2.4
github.com/ulikunitz/xz 0.5.11 0.5.14
golang.org/x/crypto 0.24.0 0.45.0
golang.org/x/oauth2 0.18.0 0.27.0
google.golang.org/grpc 1.64.0 1.64.1
github.com/opencontainers/runc 1.1.4 1.2.8

Bumps the go_modules group with 2 updates in the /starship/tests/e2e directory: golang.org/x/net and google.golang.org/grpc.
Bumps the go_modules group with 2 updates in the /starship/tools directory: golang.org/x/crypto and google.golang.org/grpc.

Updates cosmossdk.io/math from 1.0.0-rc.0 to 1.4.0

Release notes

Sourced from cosmossdk.io/math's releases.

Cosmovisor v1.3.0

Release Notes

  • Fix failure when installing cosmovisor via go install.

Changelog

For more details, please see the CHANGELOG.

Cosmovisor v1.2.0

Release Notes

New Features

With the cosmovisor init command, all the necessary folders for using cosmovisor are automatically created. You do not need to manually symlink the chain binary anymore.

We've added a new configuration option: DAEMON_RESTART_DELAY (as env variable). When set, Cosmovisor will wait that delay between the node halt and backup. See the README file for more details.

Bug Fixes

  • Fix Cosmovisor binary usage for pre-upgrade. Cosmovisor was using the wrong binary when running a pre-upgrade command.

Changelog

For more details, please see the CHANGELOG.

collections/v1.2.0

Improvements

  • #24081 Remove cosmossdk.io/core dependency.

schema/v1.1.0

Breaking Changes

cosmossdk.io/schema was previously tagged as v1.0.0, but several stubs were included in this release which were unimplemented. v1.1.0 removes any unimplemented stubs and retracts v1.0.0 so that the schema v1 API is actually reflective of the codebase.

Commits

Updates filippo.io/edwards25519 from 1.0.0 to 1.1.1

Commits
  • d1c650a extra: initialize receiver in MultiScalarMult
  • 325f520 all: update Go version
  • c0501e4 all: drop old +build lines
  • 23384ff all: use the indefinite article an in comments
  • 16197b4 crypto/internal/edwards25519: shorten quick.Check tests in short mode
  • 6387a56 all: fix misuses of "a" vs "an"
  • c901e5e crypto/internal/edwards25519: reduce Point size by reordering fields
  • daffb31 all: fix problematic comments
  • 5caf132 all: give nested modules fully-qualified names
  • 4bafd0b edwards25519: gofmt scalar_fiat.go
  • Additional commits viewable in compare view

Updates github.com/cosmos/ibc-go/v7 from 7.0.0-rc0 to 7.10.0

Release notes

Sourced from github.com/cosmos/ibc-go/v7's releases.

v7.10.0

This release contains a fix for ISA-2025-001.

This version addresses a security vulnerability in IBC-go's deserialisation of acknowledgements and we strongly encourage everyone in the affected versions to update their chain immediately. This patch is not state-breaking, so chains can upgrade in a rolling manner. This does not have to be a co-ordinated upgrade. However, validators should upgrade as soon as possible when the release is made available. If the vulnerability is exploited before 2/3 is patched, the chain will halt.

Full Changelog: cosmos/ibc-go@v7.9.2...v7.10.0

To learn more about ibc-go versioning, please read our RELEASES.md.

IMPORTANT: Please read the migration guides for any versions of ibc-go that you might be going through when upgrading to this version. For example: if you upgrade from the IBC module contained in the Cosmos SDK 0.42.0 to SDK v0.50.9 and ibc-go v8.5.1, please follow:

  1. The migration from SDK 0.41.x or 0.42.x to the IBC module in the ibc-go repository based on the SDK v0.44.x.
  2. The migration from ibc-go v1 to v2.
  3. The migration from ibc-go v2 to v3.
  4. The migration from ibc-go v3 to v4.
  5. The migration from ibc-go v4 to v5.
  6. The migration from ibc-go v5 to v6.
  7. The migration from ibc-go v6 to v7.
  8. The migration from ibc-go v7 to v7.1.
  9. The migration from ibc-go v7.2 to v7.3.

v7.9.2

This release contains a fix to ASA-2025-004

It is recommended to upgrade to this version as soon as possible.

Full Changelog: cosmos/ibc-go@v7.8.0...v7.9.2

To learn more about ibc-go versioning, please read our RELEASES.md.

IMPORTANT: Please read the migration guides for any versions of ibc-go that you might be going through when upgrading to this version. For example: if you upgrade from the IBC module contained in the Cosmos SDK 0.42.0 to SDK v0.50.9 and ibc-go v8.5.1, please follow:

  1. The migration from SDK 0.41.x or 0.42.x to the IBC module in the ibc-go repository based on the SDK v0.44.x.
  2. The migration from ibc-go v1 to v2.
  3. The migration from ibc-go v2 to v3.
  4. The migration from ibc-go v3 to v4.
  5. The migration from ibc-go v4 to v5.
  6. The migration from ibc-go v5 to v6.
  7. The migration from ibc-go v6 to v7.
  8. The migration from ibc-go v7 to v7.1.
  9. The migration from ibc-go v7.2 to v7.3.

v7.8.0

We present here a summary of the most relevant changes, please see the v7.8.0 changelog for more details. Please note that this release, as indicated in our release versioning policy, is state machine breaking and requires a coordinated upgrade.

core/03-connection

... (truncated)

Changelog

Sourced from github.com/cosmos/ibc-go/v7's changelog.

v7.10.0 - 2025-03-12

v7.9.1 - 2025-02-27

Bug Fixes

v7.8.0 - 2024-08-30

State Machine Breaking

  • (core/03-connection) #7128 Remove verification of self client and consensus state from connection handshake.

v7.7.0 - 2024-07-29

Dependencies

  • #6943 Update Cosmos SDK to v0.47.13.

Features

  • (apps/transfer) #6877 Added the possibility to transfer the entire user balance of a particular denomination by using UnboundedSpendLimit as the token amount.

v7.6.0 - 2024-06-20

State Machine Breaking

  • (apps/transfer, apps/27-interchain-accounts, app/29-fee) #4992 Set validation for length of string fields.

v7.5.1 - 2024-05-22

Improvements

  • (core/ante) #6302 Performance: Skip app callbacks during RecvPacket execution in checkTx within the redundant relay ante handler.
  • (core/ante) #6280 Performance: Skip redundant proof checking in RecvPacket execution in reCheckTx within the redundant relay ante handler.
  • (core/ante) #6306 Performance: Skip misbehaviour checks in UpdateClient flow and skip signature checks in reCheckTx mode.

v7.5.0 - 2024-05-14

Dependencies

  • #6254 Update Cosmos SDK to v0.47.11 and CometBFT to v0.37.5.

State Machine Breaking

  • (light-clients/07-tendermint) #6276 Fix: No-op to avoid panicking on UpdateState for invalid misbehaviour submissions.

... (truncated)

Commits

Updates github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0

Commits

Updates github.com/golang/glog from 1.2.0 to 1.2.4

Release notes

Sourced from github.com/golang/glog's releases.

v1.2.4

What's Changed

  • Fail if log file already exists by @​chressie in golang/glog#74:
    • glog: Don't try to create/rotate a given syncBuffer twice in the same second
    • glog: introduce createInDir function as in internal version
    • glog: have createInDir fail if the file already exists

Full Changelog: golang/glog@v1.2.3...v1.2.4

v1.2.3

What's Changed

Full Changelog: golang/glog@v1.2.2...v1.2.3

v1.2.2

What's Changed

Full Changelog: golang/glog@v1.2.1...v1.2.2

v1.2.1

What's Changed

Full Changelog: golang/glog@v1.2.0...v1.2.1

Commits
  • a0e3c40 glog: have createInDir fail if the file already exists
  • 7139da2 glog: introduce createInDir function as in internal version
  • dd58629 glog: Don't try to create/rotate a given syncBuffer twice in the same second
  • 04dbec0 glog: fix typo (#73)
  • 459cf3b glog: check that stderr is valid before using it by default (#72)
  • 9730314 glog: avoid calling user.Current() on windows (#69)
  • 861d094 glog: don't hold mutex when sync'ing (#68)
  • See full diff in compare view

Updates github.com/hashicorp/go-getter from 1.7.0 to 1.7.5

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.7.5

What's Changed

New Contributors

Full Changelog: hashicorp/go-getter@v1.7.4...v1.7.5

v1.7.4

What's Changed

Full Changelog: hashicorp/go-getter@v1.7.3...v1.7.4

v1.7.3

What's Changed

New Contributors

Full Changelog: hashicorp/go-getter@v1.7.2...v1.7.3

v1.7.2

What's Changed

Full Changelog: hashicorp/go-getter@v1.7.1...v1.7.2

v1.7.1

No release notes provided.

Commits
  • 5a63fd9 Merge pull request #497 from hashicorp/fix-git-update
  • 5b7ec5f fetch tags on update and fix tests
  • 9906874 recreate git config during update to prevent config alteration
  • 268c11c escape user provide string to git (#483)
  • 975961f Merge pull request #433 from adrian-bl/netrc-fix
  • 0298a22 Merge pull request #459 from hashicorp/jbardin/setup-git-env
  • c70d9c9 don't change GIT_SSH_COMMAND if there's no keyfile
  • 3d5770f Merge pull request #458 from hashicorp/tsccr-auto-pinning/trusted/2023-09-18
  • 0688979 Result of tsccr-helper -log-level=info -pin-all-workflows .
  • e66f244 Merge pull request #454 from hashicorp/tsccr-auto-pinning/trusted/2023-09-11
  • Additional commits viewable in compare view

Updates github.com/ulikunitz/xz from 0.5.11 to 0.5.14

Commits

Updates golang.org/x/crypto from 0.24.0 to 0.45.0

Commits
  • 4e0068c go.mod: update golang.org/x dependencies
  • e79546e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs
  • f91f7a7 ssh/agent: prevent panic on malformed constraint
  • 2df4153 acme/autocert: let automatic renewal work with short lifetime certs
  • bcf6a84 acme: pass context to request
  • b4f2b62 ssh: fix error message on unsupported cipher
  • 79ec3a5 ssh: allow to bind to a hostname in remote forwarding
  • 122a78f go.mod: update golang.org/x dependencies
  • c0531f9 all: eliminate vet diagnostics
  • 0997000 all: fix some comments
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.26.0 to 0.47.0

Commits
  • e1fcd82 html: properly handle trailing solidus in unquoted attribute value in foreign...
  • ebed060 internal/http3: fix build of tests with GOEXPERIMENT=nosynctest
  • 1f1fa29 publicsuffix: regenerate table
  • 1215081 http2: improve error when server sends HTTP/1
  • 312450e html: ensure <search> tag closes <p> and update tests
  • 09731f9 http2: improve handling of lost PING in Server
  • 55989e2 http2/h2c: use ResponseController for hijacking connections
  • 2914f46 websocket: re-recommend gorilla/websocket
  • 99b3ae0 go.mod: update golang.org/x dependencies
  • 85d1d54 go.mod: update golang.org/x dependencies
  • Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.18.0 to 0.27.0

Commits
  • 681b4d8 jws: split token into fixed number of parts
  • 3f78298 all: upgrade go directive to at least 1.23.0 [generated]
  • 109dabf endpoints: add links/provider for Discord
  • ac571fa oauth2: fix docs for Config.DeviceAuth
  • 314ee5b endpoints: add patreon endpoint
  • b9c813b google: add warning about externally-provided credentials
  • 49a531d all: make method and struct comments match the names
  • 22134a4 README: don't recommend go get
  • 3e64809 x/oauth2: add Token.ExpiresIn
  • 16a9973 jwt: rename example to avoid vet error
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.64.0 to 1.64.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.64.1

Dependencies

  • Update x/net/http2 to address CVE-2023-45288 (#7352)
  • metadata: remove String method from MD to make printing consistent (#7374)
Commits

Updates golang.org/x/crypto from 0.24.0 to 0.45.0

Commits
  • 4e0068c go.mod: update golang.org/x dependencies
  • e79546e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs
  • f91f7a7 ssh/agent: prevent panic on malformed constraint
  • 2df4153 acme/autocert: let automatic renewal work with short lifetime certs
  • bcf6a84 acme: pass context to request
  • b4f2b62 ssh: fix error message on unsupported cipher
  • 79ec3a5 ssh: allow to bind to a hostname in remote forwarding
  • 122a78f go.mod: update golang.org/x dependencies
  • c0531f9 all: eliminate vet diagnostics
  • 0997000 all: fix some comments
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.26.0 to 0.47.0

Commits
  • e1fcd82 html: properly handle trailing solidus in unquoted attribute value in foreign...
  • ebed060 internal/http3: fix build of tests with GOEXPERIMENT=nosynctest
  • 1f1fa29 publicsuffix: regenerate table
  • 1215081 http2: improve error when server sends HTTP/1
  • 312450e html: ensure <search> tag closes <p> and update tests
  • 09731f9 http2: improve handling of lost PING in Server
  • 55989e2 http2/h2c: use ResponseController for hijacking connections
  • 2914f46 websocket: re-recommend gorilla/websocket
  • 99b3ae0 go.mod: update golang.org/x dependencies
  • 85d1d54 go.mod: update golang.org/x dependencies
  • Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.18.0 to 0.27.0

Commits
  • 681b4d8 jws: split token into fixed number of parts
  • 3f78298 all: upgrade go directive to at least 1.23.0 [generated]
  • 109dabf endpoints: add links/provider for Discord
  • ac571fa oauth2: fix docs for Config.DeviceAuth
  • 314ee5b endpoints: add patreon endpoint
  • b9c813b google: add warning about externally-provided credentials
  • 49a531d all: make method and struct comments match the names
  • 22134a4 README: don't recommend go get
  • 3e64809 x/oauth2: add Token.ExpiresIn
  • 16a9973 jwt: rename example to avoid vet error
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.64.0 to 1.64.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.64.1

Dependencies

  • Update x/net/http2 to address CVE-2023-45288 (#7352)
  • metadata: remove String method from MD to make printing consistent (#7374)
Commits

Updates helm.sh/helm/v3 from 3.12.0 to 3.18.5

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.18.5 is a security release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Security Advisories

Installation and Upgrading

Download Helm v3.18.5. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.19.0 is the next minor release and will be on September 11, 2025

Changelog

  • fix Chart.yaml handling 7799b483f52ceb665264a4056da3d2569d60f910 (Matt Farina)
  • Handle messy index files dd8502f7b4fd5824a696c99909babd0fbed77e9e (Matt Farina)
  • json schema fix cb8595bc650e2ec7459427d2b0430599431a3dbe (Robert Sirchia)

Helm v3.18.4 is a security release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs

... (truncated)

Commits

Updates github.com/containerd/containerd from 1.7.0 to 1.7.27

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.27

Welcome to the v1.7.27 release of containerd!

The twenty-seventh patch release for containerd 1.7 contains various fixes and updates.

Highlights

  • Fix integer overflow in User ID handling (GHSA-265r-hfxg-fhmg)
  • Update image type checks to avoid unnecessary logs for attestations (#11538)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Jin Dong
  • Akhil Mohan
  • Derek McGowan
  • Maksym Pavlenko
  • Paweł Gronowski
  • Phil Estes
  • Akihiro Suda
  • Craig Ingram
  • Krisztian Litkey
  • Samuel Karp

Changes

  • 05044ec0a Merge commit from fork
  • 11504c3fc validate uid/gid
  • Prepare release notes for v1.7.27 (#11540)
    • 1be04be6c Prepare release notes for v1.7.27
  • Update image type checks to avoid unnecessary logs for attestations (#11538)
    • 82b5c43fe core/remotes: Handle attestations in MakeRefKey
    • 2c670e79b core/images: Ignore attestations when traversing children
  • update build to go1.23.7, test go1.24.1 (#11515)
    • a39863c9f update build to go1.23.7, test go1.24.1
  • Remove hashicorp/go-multierror dependency and fix CI (#11499)
    • 49537b3a7 e2e: use the shim bundled with containerd artifact
    • fe490b76f Bump up github.com/intel/goresctrl to 0.5.0
    • 13fc9d313 update containerd/project-checks to 1.2.1
    • 585699c94 Remove unnecessary joinError unwrap
    • 4b9df59be Remove hashicorp/go-multierror
  • go.{mod,sum}: bump CDI deps to v0.8.1. (#11422)
    • 5ba28f8dc go.{mod,sum}: bump CDI deps to v0.8.1, re-vendor.
  • CI: arm64-8core-32gb -> ubuntu-24.04-arm (#11437)
    • 85f10bd92 CI: arm64-8core-32gb -> ubuntu-24.04-arm

... (truncated)

Commits
  • 05044ec Merge commit from fork
  • 0b7f2a5 Merge pull request #11540 from dmcgowan/prepare-1.7.27
  • 574a304 Merge pull request #11538 from dmcgowan/backport-11327
  • 1be04be Prepare release notes for v1.7.27
  • 82b5c43 core/remotes: Handle attestations in MakeRefKey
  • 2c670e7 core/images: Ignore attestations when traversing children
  • 11504c3 validate uid/gid
  • 576178b Merge pull request #11515 from akhilerm/1.7-updatego1.24.1
  • a39863c update build to go1.23.7, test go1.24.1
  • 8946aa0 Merge pull request #11499 from djdongjin/1-7-remove-hashi-multierror
  • Additional commits viewable in compare view

Updates github.com/cyphar/filepath-securejoin from 0.2.3 to 0.4.1

Release notes

Sourced from github.com/cyphar/filepath-securejoin's releases.

v0.4.1

This release fixes a regression introduced in one of the hardening features added to filepath-securejoin 0.4.0.

  • The restrictions added for root paths passed to SecureJoin in 0.4.0 was found to be too strict and caused some regressions when folks tried to update, so this restriction has been relaxed to only return an error if the path contains a .. component. We still recommend users use filepath.Clean (and even filepath.EvalSymlinks) on the root path they are using, but at least you will no longer be punished for "trivial" unclean paths. (#46)

Signed-off-by: Aleksa Sarai cyphar@cyphar.com

v0.4.0

This release primarily includes a few minor breaking changes to make the MkdirAll and SecureJoin interfaces more robust against accidental misuse.

  • SecureJoin(VFS) will now return an error if the provided root is not a filepath.Clean'd path.

    While it is ultimately the responsibility of the caller to ensure the root is a safe path to use, passing a path like /symlink/.. as a root would result in the SecureJoin'd path being placed in / even though /symlink/.. might be a different directory, and so we should more strongly discourage such usage.

    All major users of securejoin.SecureJoin already ensure that the paths they provide are safe (and this is ultimately a question of user error), but removing this foot-gun is probably a good idea. Of course, this is necessarily a breaking API change (though we expect no real users to be affected by it).

    Thanks to Erik Sjölund, who initially reported this issue as a possible security issue.

  • MkdirAll and MkdirHandle now take an os.FileMode-style mode argument instead of a raw unix.S_*-style mode argument, which may cause compile-time type errors depending on how you use filepath-securejoin. For most users, there will be no change in behaviour aside from the type change (as the bottom 0o777 bits are the same in both formats, and most users are probably only using those bits).

    However, if you were using unix.S_ISVTX to set the sticky bit with MkdirAll(Handle) you will need to switch to os.ModeSticky otherwise you will get a runtime error with this update. In addition, the error message you will get from passing unix.S_ISUID and unix.S_ISGID will be different as they are treated as invalid bits now (note that previously passing s...

    Description has been truncated

@dependabot
Bump the go_modules group across 7 directories with 16 updates
f69ae54 
Bumps the go_modules group with 8 updates in the /clients/go/client directory:

| Package | From | To |
| --- | --- | --- |
| [cosmossdk.io/math](https://github.com/cosmos/cosmos-sdk) | `1.0.0-rc.0` | `1.4.0` |
| [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519) | `1.0.0` | `1.1.1` |
| [github.com/cosmos/ibc-go/v7](https://github.com/cosmos/ibc-go) | `7.0.0-rc0` | `7.10.0` |
| [github.com/golang/glog](https://github.com/golang/glog) | `1.2.0` | `1.2.4` |
| [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) | `0.5.11` | `0.5.14` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.24.0` | `0.45.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.18.0` | `0.27.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.64.0` | `1.64.1` |

Bumps the go_modules group with 4 updates in the /starship/cmd/starship directory: [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/oauth2](https://github.com/golang/oauth2), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [helm.sh/helm/v3](https://github.com/helm/helm).
Bumps the go_modules group with 2 updates in the /starship/exposer directory: [golang.org/x/net](https://github.com/golang/net) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Bumps the go_modules group with 2 updates in the /starship/faucet directory: [golang.org/x/net](https://github.com/golang/net) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Bumps the go_modules group with 9 updates in the /starship/registry directory:

| Package | From | To |
| --- | --- | --- |
| [cosmossdk.io/math](https://github.com/cosmos/cosmos-sdk) | `1.0.0-rc.0` | `1.4.0` |
| [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519) | `1.0.0` | `1.1.1` |
| [github.com/cosmos/ibc-go/v7](https://github.com/cosmos/ibc-go) | `7.0.0-rc0` | `7.10.0` |
| [github.com/golang/glog](https://github.com/golang/glog) | `1.2.0` | `1.2.4` |
| [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) | `0.5.11` | `0.5.14` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.24.0` | `0.45.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.18.0` | `0.27.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.64.0` | `1.64.1` |
| [github.com/opencontainers/runc](https://github.com/opencontainers/runc) | `1.1.4` | `1.2.8` |

Bumps the go_modules group with 2 updates in the /starship/tests/e2e directory: [golang.org/x/net](https://github.com/golang/net) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Bumps the go_modules group with 2 updates in the /starship/tools directory: [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `cosmossdk.io/math` from 1.0.0-rc.0 to 1.4.0
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@math/v1.0.0-rc.0...log/v1.4.0)

Updates `filippo.io/edwards25519` from 1.0.0 to 1.1.1
- [Commits](FiloSottile/edwards25519@v1.0.0...v1.1.1)

Updates `github.com/cosmos/ibc-go/v7` from 7.0.0-rc0 to 7.10.0
- [Release notes](https://github.com/cosmos/ibc-go/releases)
- [Changelog](https://github.com/cosmos/ibc-go/blob/v7.10.0/CHANGELOG.md)
- [Commits](cosmos/ibc-go@v7.0.0-rc0...v7.10.0)

Updates `github.com/dvsekhvalnov/jose2go` from 1.5.0 to 1.6.0
- [Commits](dvsekhvalnov/jose2go@v1.5...v1.6.0)

Updates `github.com/golang/glog` from 1.2.0 to 1.2.4
- [Release notes](https://github.com/golang/glog/releases)
- [Commits](golang/glog@v1.2.0...v1.2.4)

Updates `github.com/hashicorp/go-getter` from 1.7.0 to 1.7.5
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Commits](hashicorp/go-getter@v1.7.0...v1.7.5)

Updates `github.com/ulikunitz/xz` from 0.5.11 to 0.5.14
- [Commits](ulikunitz/xz@v0.5.11...v0.5.14)

Updates `golang.org/x/crypto` from 0.24.0 to 0.45.0
- [Commits](golang/crypto@v0.24.0...v0.45.0)

Updates `golang.org/x/net` from 0.26.0 to 0.47.0
- [Commits](golang/net@v0.26.0...v0.38.0)

Updates `golang.org/x/oauth2` from 0.18.0 to 0.27.0
- [Commits](golang/oauth2@v0.18.0...v0.27.0)

Updates `google.golang.org/grpc` from 1.64.0 to 1.64.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.64.0...v1.64.1)

Updates `golang.org/x/crypto` from 0.24.0 to 0.45.0
- [Commits](golang/crypto@v0.24.0...v0.45.0)

Updates `golang.org/x/net` from 0.26.0 to 0.47.0
- [Commits](golang/net@v0.26.0...v0.38.0)

Updates `golang.org/x/oauth2` from 0.18.0 to 0.27.0
- [Commits](golang/oauth2@v0.18.0...v0.27.0)

Updates `google.golang.org/grpc` from 1.64.0 to 1.64.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.64.0...v1.64.1)

Updates `helm.sh/helm/v3` from 3.12.0 to 3.18.5
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.12.0...v3.18.5)

Updates `github.com/containerd/containerd` from 1.7.0 to 1.7.27
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v1.7.0...v1.7.27)

Updates `github.com/cyphar/filepath-securejoin` from 0.2.3 to 0.4.1
- [Release notes](https://github.com/cyphar/filepath-securejoin/releases)
- [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md)
- [Commits](cyphar/filepath-securejoin@v0.2.3...v0.4.1)

Updates `github.com/sirupsen/logrus` from 1.9.0 to 1.9.3
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.0...v1.9.3)

Updates `golang.org/x/net` from 0.26.0 to 0.38.0
- [Commits](golang/net@v0.26.0...v0.38.0)

Updates `google.golang.org/grpc` from 1.64.0 to 1.64.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.64.0...v1.64.1)

Updates `golang.org/x/net` from 0.26.0 to 0.38.0
- [Commits](golang/net@v0.26.0...v0.38.0)

Updates `google.golang.org/grpc` from 1.64.0 to 1.64.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.64.0...v1.64.1)

Updates `cosmossdk.io/math` from 1.0.0-rc.0 to 1.4.0
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@math/v1.0.0-rc.0...log/v1.4.0)

Updates `filippo.io/edwards25519` from 1.0.0 to 1.1.1
- [Commits](FiloSottile/edwards25519@v1.0.0...v1.1.1)

Updates `github.com/cosmos/ibc-go/v7` from 7.0.0-rc0 to 7.10.0
- [Release notes](https://github.com/cosmos/ibc-go/releases)
- [Changelog](https://github.com/cosmos/ibc-go/blob/v7.10.0/CHANGELOG.md)
- [Commits](cosmos/ibc-go@v7.0.0-rc0...v7.10.0)

Updates `github.com/dvsekhvalnov/jose2go` from 1.5.0 to 1.6.0
- [Commits](dvsekhvalnov/jose2go@v1.5...v1.6.0)

Updates `github.com/golang/glog` from 1.2.0 to 1.2.4
- [Release notes](https://github.com/golang/glog/releases)
- [Commits](golang/glog@v1.2.0...v1.2.4)

Updates `github.com/hashicorp/go-getter` from 1.7.0 to 1.7.5
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Commits](hashicorp/go-getter@v1.7.0...v1.7.5)

Updates `github.com/ulikunitz/xz` from 0.5.11 to 0.5.14
- [Commits](ulikunitz/xz@v0.5.11...v0.5.14)

Updates `golang.org/x/crypto` from 0.24.0 to 0.45.0
- [Commits](golang/crypto@v0.24.0...v0.45.0)

Updates `golang.org/x/net` from 0.26.0 to 0.47.0
- [Commits](golang/net@v0.26.0...v0.38.0)

Updates `golang.org/x/oauth2` from 0.18.0 to 0.27.0
- [Commits](golang/oauth2@v0.18.0...v0.27.0)

Updates `google.golang.org/grpc` from 1.64.0 to 1.64.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.64.0...v1.64.1)

Updates `github.com/opencontainers/runc` from 1.1.4 to 1.2.8
- [Release notes](https://github.com/opencontainers/runc/releases)
- [Changelog](https://github.com/opencontainers/runc/blob/main/CHANGELOG.md)
- [Commits](opencontainers/runc@v1.1.4...v1.2.8)

Updates `golang.org/x/net` from 0.26.0 to 0.38.0
- [Commits](golang/net@v0.26.0...v0.38.0)

Updates `google.golang.org/grpc` from 1.64.0 to 1.64.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.64.0...v1.64.1)

Updates `golang.org/x/crypto` from 0.24.0 to 0.45.0
- [Commits](golang/crypto@v0.24.0...v0.45.0)

Updates `google.golang.org/grpc` from 1.64.0 to 1.64.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.64.0...v1.64.1)

---
updated-dependencies:
- dependency-name: cosmossdk.io/math
  dependency-version: 1.4.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: filippo.io/edwards25519
  dependency-version: 1.1.1
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/cosmos/ibc-go/v7
  dependency-version: 7.10.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/dvsekhvalnov/jose2go
  dependency-version: 1.6.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/golang/glog
  dependency-version: 1.2.4
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/hashicorp/go-getter
  dependency-version: 1.7.5
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/ulikunitz/xz
  dependency-version: 0.5.14
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.47.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.27.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.64.1
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.47.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.27.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.64.1
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.18.5
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/containerd/containerd
  dependency-version: 1.7.27
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/cyphar/filepath-securejoin
  dependency-version: 0.4.1
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.9.3
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.38.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.64.1
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.38.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.64.1
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: cosmossdk.io/math
  dependency-version: 1.4.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: filippo.io/edwards25519
  dependency-version: 1.1.1
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/cosmos/ibc-go/v7
  dependency-version: 7.10.0
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/dvsekhvalnov/jose2go
  dependency-version: 1.6.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/golang/glog
  dependency-version: 1.2.4
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/hashicorp/go-getter
  dependency-version: 1.7.5
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/ulikunitz/xz
  dependency-version: 0.5.14
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.47.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.27.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.64.1
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/opencontainers/runc
  dependency-version: 1.2.8
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.38.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.64.1
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.64.1
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Feb 19, 2026
@dependabot dependabot bot mentioned this pull request Feb 19, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants