chore(deps): Update go minor and patch

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
github.com/aws/aws-sdk-go-v2/config	v1.30.3 -> v1.31.0			require	minor	v1.31.2 (+1)
github.com/aws/aws-sdk-go-v2/service/s3	v1.86.0 -> v1.87.0			require	minor	v1.87.1
github.com/aws/aws-sdk-go-v2/service/sts	v1.36.0 -> v1.37.0			require	minor	v1.38.0 (+1)
github.com/getsentry/sentry-go	v0.35.0 -> v0.35.1			require	patch
github.com/neo4j/neo4j-go-driver/v5	v5.28.1 -> v5.28.2			require	patch
github.com/wundergraph/graphql-go-tools/v2	v2.0.0-rc.219 -> v2.0.0-rc.220			require	patch	v2.0.0-rc.221
go (source)	1.24.6 -> 1.25.0			toolchain	minor
golang.org/x/exp	645b1fa -> 8b4c13b			require	digest
google.golang.org/grpc	v1.74.2 -> v1.75.0			require	minor
k8s.io/api	v0.33.3 -> v0.33.4			require	patch
k8s.io/client-go	v0.33.3 -> v0.33.4			require	patch

---

Release Notes

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2/config)

v1.31.0

Module Highlights

• github.com/aws/aws-sdk-go-v2/service/appstream: v1.47.1
  • Documentation: Added support for G6 instances
• github.com/aws/aws-sdk-go-v2/service/budgets: v1.35.0
  • Feature: Adds support for billing views. Billing views let you control access to cost and usage data through an AWS resource, streamlining the process of sharing cost and usage data across account boundaries. With this release, you can now create and view budgets based on billing views.
• github.com/aws/aws-sdk-go-v2/service/ec2: v1.241.0
  • Feature: Mark Elastic Inference Accelerators and Elastic Graphics Processor parameters as deprecated on the RunInstances and LaunchTemplate APIs.
• github.com/aws/aws-sdk-go-v2/service/networkmanager: v1.37.1
  • Bug Fix: BREAKING CHANGE: The fields on VpcOptions have been changed from bool to *bool. Before this change, the fields were incorrectly marked as having default values of false by the service, which made it functionally impossible for users to set them false in an API call.
• github.com/aws/aws-sdk-go-v2/service/opensearchserverless: v1.23.0
  • Feature: Features: add Index APIs in OpenSearchServerless to support managed semantic enrichment
• github.com/aws/aws-sdk-go-v2/service/qbusiness: v1.31.0
  • Feature: Amazon Q Business now supports the GetDocumentContent() API that enables customers to securely access the source documents through clickable citation links at query time

getsentry/sentry-go (github.com/getsentry/sentry-go)

v0.35.1: 0.35.1

Compare Source

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.35.1.

Bug Fixes

• Fix race conditions when accessing the scope during logging operations (#​1050)
• Fix nil pointer dereference with malformed URLs when tracing is enabled in fasthttp and fiber integrations (#​1055)

Misc

• Bump github.com/gofiber/fiber/v2 from 2.52.5 to 2.52.9 in /fiber (#​1067)

neo4j/neo4j-go-driver (github.com/neo4j/neo4j-go-driver/v5)

v5.28.2

Compare Source

See https://github.com/neo4j/neo4j-go-driver/wiki/5.x-changelog for more information.

wundergraph/graphql-go-tools (github.com/wundergraph/graphql-go-tools/v2)

v2.0.0-rc.220

Compare Source

Features

• rewrite abstract fragments for grpc (#​1268) (ebe1e53)

golang/go (go)

v1.25.0

grpc/grpc-go (google.golang.org/grpc)

v1.75.0: Release 1.75.0

Compare Source

Behavior Changes

• xds: Remove support for GRPC_EXPERIMENTAL_XDS_FALLBACK environment variable. Fallback support can no longer be disabled. (#​8482)
• stats: Introduce DelayedPickComplete event, a type alias of PickerUpdated. (#​8465)
  • This (combined) event will now be emitted only once per call, when a transport is successfully selected for the attempt.
  • OpenTelemetry metrics will no longer have multiple "Delayed LB pick complete" events in Go, matching other gRPC languages.
  • A future release will delete the PickerUpdated symbol.
• credentials: Properly apply grpc.WithAuthority as the highest-priority option for setting authority, above the setting in the credentials themselves. (#​8488)
  • Now that this WithAuthority is available, the credentials should not be used to override the authority.
• round_robin: Randomize the order in which addresses are connected to in order to spread out initial RPC load between clients. (#​8438)
• server: Return status code INTERNAL when a client sends more than one request in unary and server streaming RPC. (#​8385)
  • This is a behavior change but also a bug fix to bring gRPC-Go in line with the gRPC spec.

New Features

• dns: Add an environment variable (GRPC_ENABLE_TXT_SERVICE_CONFIG) to provide a way to disable TXT lookups in the DNS resolver (by setting it to false). By default, TXT lookups are enabled, as they were previously. (#​8377)

Bug Fixes

• xds: Fix regression preventing empty node IDs in xDS bootstrap configuration. (#​8476)
  • Special Thanks: @​davinci26
• xds: Fix possible panic when certain invalid resources are encountered. (#​8412)
  • Special Thanks: @​wooffie
• xdsclient: Fix a rare panic caused by processing a response from a closed server. (#​8389)
• stats: Fix metric unit formatting by enclosing non-standard units like call and endpoint in curly braces to comply with UCUM and gRPC OpenTelemetry guidelines. (#​8481)
• xds: Fix possible panic when clusters are removed from the xds configuration. (#​8428)
• xdsclient: Fix a race causing "resource doesn not exist" when rapidly subscribing and unsubscribing to the same resource. (#​8369)
• client: When determining the authority, properly percent-encode (if needed, which is unlikely) when the target string omits the hostname and only specifies a port (grpc.NewClient(":<port-number-or-name>")). (#​8488)

kubernetes/api (k8s.io/api)

v0.33.4

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.33.4

Compare Source

---

Configuration

📅 Schedule: Branch creation - "on Wednesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: runtime/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 13 additional dependencies were updated

Details:

Package	Change
github.com/aws/aws-sdk-go-v2	v1.37.2 -> v1.38.0
github.com/aws/aws-sdk-go-v2/credentials	v1.18.3 -> v1.18.4
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	v1.18.2 -> v1.18.3
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.4.2 -> v1.4.3
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.7.2 -> v2.7.3
github.com/aws/aws-sdk-go-v2/internal/v4a	v1.4.2 -> v1.4.3
github.com/aws/aws-sdk-go-v2/service/internal/checksum	v1.8.2 -> v1.8.3
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.13.2 -> v1.13.3
github.com/aws/aws-sdk-go-v2/service/internal/s3shared	v1.19.2 -> v1.19.3
github.com/aws/aws-sdk-go-v2/service/sso	v1.27.0 -> v1.28.0
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.32.0 -> v1.33.0
github.com/go-jose/go-jose/v4	v4.0.5 -> v4.1.1
google.golang.org/genproto/googleapis/rpc	v0.0.0-20250528174236-200df99c418a -> v0.0.0-20250707201910-8d1bb00bc6a7

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.