chore(deps): bump the go-minor group across 2 directories with 2 updates by dependabot[bot] · Pull Request #5923 · supabase/cli

dependabot · 2026-07-22T00:06:51Z

Bumps the go-minor group with 1 update in the /apps/cli-go directory: github.com/getsentry/sentry-go.
Bumps the go-minor group with 1 update in the /apps/cli-go/pkg directory: github.com/oapi-codegen/runtime.

Updates github.com/getsentry/sentry-go from 0.47.0 to 0.48.0

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.48.0

Breaking Changes 🛠

Remove issue creation from logging integrations by @giortzisg in #1340

New Features ✨
Add ClientOptions.DataCollection for granular control over data collected by automatic instrumentation, replacing the broad SendDefaultPII switch. DataCollection can independently configure automatic user.* population, cookies, request/response headers, HTTP bodies, and query parameters. When configured, it is the source of truth and SendDefaultPII is ignored. by @giortzisg in #1339

For backwards compatibility, clients that do not configure DataCollection keep a best-effort mapping of the previous SendDefaultPII behavior. To opt in to the new defaults, pass an empty DataCollection and then restrict individual categories as needed.
sentry.Init(sentry.ClientOptions{
    Dsn: "https://public@example.com/1",
// Opt in to the new data collection defaults. Omitted fields use their
// defaults: user info, cookies, headers, query params, and supported HTTP
// bodies are collected, with sensitive values filtered.
DataCollection: &amp;sentry.DataCollection{},

})
To opt in while disabling automatic user info and HTTP bodies, configure those fields explicitly:
sentry.Init(sentry.ClientOptions{
    Dsn: "https://public@example.com/1",
    DataCollection: &sentry.DataCollection{
        UserInfo:   sentry.Set(false),
        HTTPBodies: []sentry.BodyType{},
    },
})
PushScope shorthand now returns the new scope reference by @DoctorJohn in #1335
Bug Fixes 🐛

Fix fiber route name when using middlewares by @giortzisg in #1363

Omit empty event id for standalone client reports by @giortzisg in #1362

Preserve '%' literal in log messages by @giortzisg in #1358

Unaligned 64-bit atomic panic on 32-bit platforms in telemetry buffers by @Kirill-INQ in #1355

Isolate event processor across clones by @giortzisg in #1337

Internal Changes 🔧

Deps

Bump fiber/v2 to 2.52.14 by @giortzisg in #1359

Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot in #1349

Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot in #1346

Bump codecov/codecov-action from 6.0.0 to 7.0.0 by @dependabot in #1347

Bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot in #1343

Bump golang.org/x/crypto to 0.52.0 and golang/x/net to 0.55.0 by @giortzisg in #1341

Bump getsentry/github-workflows/validate-pr from c802283cd9075b7a2b7a32655019c21c21676e34 to 4013fc6e1aeb1be1f9d3b4d232624f0ec1afa613 by @dependabot in #1344

... (truncated)

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.48.0

Breaking Changes 🛠

Remove issue creation from logging integrations by @giortzisg in #1340

New Features ✨
Add ClientOptions.DataCollection for granular control over data collected by automatic instrumentation, replacing the broad SendDefaultPII switch. DataCollection can independently configure automatic user.* population, cookies, request/response headers, HTTP bodies, and query parameters. When configured, it is the source of truth and SendDefaultPII is ignored. by @giortzisg in #1339

For backwards compatibility, clients that do not configure DataCollection keep a best-effort mapping of the previous SendDefaultPII behavior. To opt in to the new defaults, pass an empty DataCollection and then restrict individual categories as needed.
sentry.Init(sentry.ClientOptions{
    Dsn: "https://public@example.com/1",
// Opt in to the new data collection defaults. Omitted fields use their
// defaults: user info, cookies, headers, query params, and supported HTTP
// bodies are collected, with sensitive values filtered.
DataCollection: &amp;sentry.DataCollection{},

})
To opt in while disabling automatic user info and HTTP bodies, configure those fields explicitly:
sentry.Init(sentry.ClientOptions{
    Dsn: "https://public@example.com/1",
    DataCollection: &sentry.DataCollection{
        UserInfo:   sentry.Set(false),
        HTTPBodies: []sentry.BodyType{},
    },
})
PushScope shorthand now returns the new scope reference by @DoctorJohn in #1335
Bug Fixes 🐛

Fix fiber route name when using middlewares by @giortzisg in #1363

Omit empty event id for standalone client reports by @giortzisg in #1362

Preserve '%' literal in log messages by @giortzisg in #1358

Unaligned 64-bit atomic panic on 32-bit platforms in telemetry buffers by @Kirill-INQ in #1355

Isolate event processor across clones by @giortzisg in #1337

Internal Changes 🔧

Deps

Bump fiber/v2 to 2.52.14 by @giortzisg in #1359

Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot in #1349

Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot in #1346

Bump codecov/codecov-action from 6.0.0 to 7.0.0 by @dependabot in #1347

Bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot in #1343

Bump golang.org/x/crypto to 0.52.0 and golang/x/net to 0.55.0 by @giortzisg in #1341

... (truncated)

Commits

d02f9ba release: 0.48.0
99c424f feat!: remove issue creation from logging integrations (#1340)
d1c1d3f feat: parse request body for outgoing http (#1339)
9b5cab2 fix: fix fiber route name when using middlewares (#1363)
07a7975 fix: omit empty event id for standalone client reports (#1362)
c255382 build(deps): bump fiber/v2 to 2.52.14 (#1359)
06c58dc ci: remove changelog-preview and codecov actions (#1357)
a99e044 fix: preserve '%' literal in log messages (#1358)
8aaf1d4 feat: apply sensitive data filters to grpc & sql (#1333)
4347773 feat: apply sensitive data filters to http (#1332)
Additional commits viewable in compare view

Updates github.com/oapi-codegen/runtime from 1.4.2 to 1.5.0

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

v1.5.0: RFC3339 durations, and bug fixes

This is mainly a bugfix release, but we're bumping the minor version since we also introduce a new type, Duration into our types/ package, which allows for parsing and emitting RFC3339 durations. Rather than trying to parse a duration string into a time.Duration, which requires assumptions that may not be right for everyone, we decided not to make those decisions and just store all possible fields as provided. Users can convert this to Go Duration as they see fit.

🚀 New features and improvements

Add types.Duration for the RFC 3339 duration format (#144) @mromaszewicz

🐛 Bug fixes

Let generated code declare whether styled parameter values are escaped (#143) @mromaszewicz

Prefer the form struct tag over json for form encoding (#140) @mromaszewicz

Support binding deepObject parameters into map[string]interface{} (#139) @mromaszewicz

📝 Documentation updates

Explain how to send nested objects when style serialization fails (#141) @mromaszewicz

📦 Dependency updates

fix(deps): update module github.com/labstack/echo/v5 to v5.3.0 (#142) @renovate[bot]

chore(deps): update golang/govulncheck-action action to v1.1.0 (#137) @renovate[bot]

chore(deps): update oapi-codegen/actions action to v0.8.0 (#130) @renovate[bot]

fix(deps): update module github.com/labstack/echo/v5 to v5.2.1 - autoclosed (#126) @renovate[bot]

chore(deps): update release-drafter/release-drafter action to v7.5.1 - autoclosed (#124) @renovate[bot]

chore(deps): update github/codeql-action action to v4.37.0 (#123) @renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.

Commits

540d34a fix(deps): update module github.com/labstack/echo/v5 to v5.3.0 (#142)
e89dbb8 Add types.Duration for the RFC 3339 duration format (#144)
324e57f Let generated code declare whether styled parameter values are escaped (#143)
95c13c0 Explain how to send nested objects when style serialization fails (#141)
7c889f3 Prefer the form struct tag over json for form encoding (#140)
d0d5c3a chore(deps): update golang/govulncheck-action action to v1.1.0 (#137)
67e86fd chore(deps): update oapi-codegen/actions action to v0.8.0 (#130)
df140cb fix(deps): update module github.com/labstack/echo/v5 to v5.2.1 (#126)
a90c79a chore(deps): update release-drafter/release-drafter action to v7.5.1 (#124)
a6d718f chore(deps): update github/codeql-action action to v4.37.0 (#123)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-minor group with 1 update in the /apps/cli-go directory: [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go). Bumps the go-minor group with 1 update in the /apps/cli-go/pkg directory: [github.com/oapi-codegen/runtime](https://github.com/oapi-codegen/runtime). Updates `github.com/getsentry/sentry-go` from 0.47.0 to 0.48.0 - [Release notes](https://github.com/getsentry/sentry-go/releases) - [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-go@v0.47.0...v0.48.0) Updates `github.com/oapi-codegen/runtime` from 1.4.2 to 1.5.0 - [Release notes](https://github.com/oapi-codegen/runtime/releases) - [Commits](oapi-codegen/runtime@v1.4.2...v1.5.0) --- updated-dependencies: - dependency-name: github.com/getsentry/sentry-go dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: github.com/oapi-codegen/runtime dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-22T00:13:43Z

Supabase CLI preview

npx --yes https://pkg.pr.new/supabase/cli/supabase@f1116180d1bbbb2a69fb16aeeee11ebf6d3ea653

Preview package for commit f111618.

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 22, 2026

supabase-cli-releaser Bot approved these changes Jul 22, 2026

View reviewed changes

supabase-cli-releaser Bot enabled auto-merge July 22, 2026 00:07

supabase-cli-releaser Bot added this pull request to the merge queue Jul 22, 2026

Merged via the queue into develop with commit 1d4175d Jul 22, 2026
34 checks passed

supabase-cli-releaser Bot deleted the dependabot/go_modules/apps/cli-go/go-minor-087ff71caa branch July 22, 2026 00:19

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the go-minor group across 2 directories with 2 updates#5923

chore(deps): bump the go-minor group across 2 directories with 2 updates#5923
supabase-cli-releaser[bot] merged 1 commit into
developfrom
dependabot/go_modules/apps/cli-go/go-minor-087ff71caa

dependabot Bot commented on behalf of github Jul 22, 2026

Uh oh!

github-actions Bot commented Jul 22, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 22, 2026

0.48.0

Breaking Changes 🛠

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Deps

0.48.0

Breaking Changes 🛠

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Deps

v1.5.0: RFC3339 durations, and bug fixes

🚀 New features and improvements

🐛 Bug fixes

📝 Documentation updates

📦 Dependency updates

Sponsors

Uh oh!

github-actions Bot commented Jul 22, 2026

Supabase CLI preview

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants