fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/apache/beam/sdks/v2	v2.68.0 → v2.72.0
github.com/arquivei/go-app	v1.5.0 → v1.6.0
github.com/rs/zerolog	v1.34.0 → v1.35.0
golang.org/x/text	v0.29.0 → v0.35.0

---

Release Notes

apache/beam (github.com/apache/beam/sdks/v2)

v2.72.0: Beam 2.72.0 release

Compare Source

We are happy to present the new 2.72.0 release of Beam.
This release includes both improvements and new functionality.
See the download page for this release.

For more information on changes in 2.72.0, check out the detailed release notes.

Highlights

• Flink 2.0 support (#​36947).

I/Os

• Add Datadog IO support (Java) (#​37318).
• Remove Pubsublite IO support, since service will be deprecated in March 2026. (#​37375).
• (Java) ClickHouse - migrating from the legacy JDBC driver (v0.6.3) to ClickHouse Java Client v2 (v0.9.6). See the class documentation for migration guide (#​37610).
• (Java) Upgraded GoogleAdsIO to use GoogleAdsIO API v23 (#​37620).

New Features / Improvements

• (Python) Added exception chaining to preserve error context in CloudSQLEnrichmentHandler, processes utilities, and core transforms (#​37422).
• (Python) Added a pipeline option --experiments=pip_no_build_isolation to disable build isolation when installing dependencies in the runtime environment (#​37331).

Deprecations

• (Python) Removed previously deprecated list_prefix method for filesystem interfaces (#​37587).

Bugfixes

• Fixed (Yaml) issue with validate compatible method (#​37588).
• Fixed (Yaml) issue with Create transform dealing with different type elements (#​37585).

Security Fixes

• Fixed CVE-2024-28397 by switching from js2py to pythonmonkey (Yaml) (#​37560).

List of Contributors

According to git shortlog, the following people contributed to the 2.72.0 release. Thank you to all contributors!

Abdelrahman Ibrahim, Ahmed Abualsaud, Andrew Crites, Arun Pandian, Ben Feinstein, Bentsi Leviav, Celeste Zeng, Danny McCormick, Danny Mccormick, Derrick Williams, Elia LIU, Ganesh, Jack McCluskey, Kenneth Knowles, Labesse Kévin, M Junaid Shaukat, Mansi Singh, Mattie Fu, Nayan Mathur, Pablo Estrada, Pirzada Ahmad Faraz, Radek Stankiewicz, Radosław Stankiewicz, Robert Bradshaw, Rohan Sah, RuiLong J., Sakthivel Subramanian, Sam Whittle, Shaheer Amjad, Shunping Huang, Steven van Rossum, Tarun Annapareddy, Tobias Kaymak, Valentyn Tymofieiev, Vitaly Terentyev, Yi Hu, XQ Hu, ZIHAN DAI, apanich, chenxuesdu, claudevdm, franzonia137

v2.71.0: Beam 2.71.0 release

Compare Source

We are happy to present the new 2.71.0 release of Beam.
This release includes both improvements and new functionality.

For more information on changes in 2.71.0, check out the detailed release notes.

I/Os

• (Java) Elasticsearch 9 Support (#​36491).
• (Java) Upgraded HCatalogIO to Hive 4.0.1 (#​32189).

New Features / Improvements

• Support configuring Firestore database on ReadFn transforms (Java) (#​36904).
• (Python) Inference args are now allowed in most model handlers, except where they are explicitly/intentionally disallowed (#​37093).

Bugfixes

• Fixed FirestoreV1 Beam connectors allow configuring inconsistent project/database IDs between RPC requests and routing headers #​36895 (Java) (#​36895).
• Logical type and coder registry are saved for pipelines in the case of default pickler. This fixes a side effect of switching to cloudpickle as default pickler in Beam 2.65.0 (Python) (#​35738).

Known Issues

For the most up to date list of known issues, see https://github.com/apache/beam/blob/master/CHANGES.md

List of Contributors

According to git shortlog, the following people contributed to the 2.71.0 release. Thank you to all contributors!

Abacn, Ahmed Abualsaud, Amar3tto, Andrew Crites, apanich, Arun, Arun Pandian, assaf127, Chamikara Jayalath, CherisPatelInfocusp, Cheskel Twersky, Claire McGinty, Claude, Danny Mccormick, dependabot[bot], Derrick Williams, Egbert van der Wal, Evan Galpin, Ganesh, github-actions[bot], hekk-kaori-maeda, Jack Dingilian, Jack McCluskey, JayajP, Jiang Zhu, Kenneth Knowles, liferoad, M Junaid Shaukat, Nayan Mathur, Noah Stapp, Paco Avila, Radek Stankiewicz, Radosław Stankiewicz, Robert Stupp, Sam Whittle, Shunping Huang, Steven van Rossum, Suvrat Acharya, Tarun Annapareddy, tvalentyn, Utkarsh Parekh, Vitaly Terentyev, Xiaochu Liu, Yala Huang Feng, Yi Hu, Yu Watanabe, zhan7236

v2.70.0: Beam 2.70.0 release

Compare Source

We are happy to present the new 2.70.0 release of Beam.
This release includes both improvements and new functionality.
See the download page for this release.

For more information on changes in 2.70.0, check out the detailed release notes.

Highlights

• Flink 1.20 support added (#​32647).

New Features / Improvements

• Python examples added for Milvus search enrichment handler on Beam Website
  including jupyter notebook example (Python) (#​36176).
• Milvus sink I/O connector added (Python) (#​36702).
  Now Beam has full support for Milvus integration including Milvus enrichment and sink operations.

Breaking Changes

• (Python) Some Python dependencies have been split out into extras. To ensure all previously installed dependencies are installed, when installing Beam you can pip install apache-beam[gcp,interactive,yaml,redis,hadoop,tfrecord], though most users will not need all of these extras (#​34554).

Deprecations

• (Python) Python 3.9 reached EOL in October 2025 and support for the language version has been removed. (#​36665).

List of Contributors

According to git shortlog, the following people contributed to the 2.70.0 release. Thank you to all contributors!

Abdelrahman Ibrahim, Ahmed Abualsaud, Alex Chermenin, Andrew Crites, Arun Pandian, Celeste Zeng, Chamikara Jayalath, Chenzo, Claire McGinty, Danny McCormick, Derrick Williams, Dustin Rhodes, Enrique Calderon, Ian Liao, Jack McCluskey, Jessica Hsiao, Joey Tran, Karthik Talluri, Kenneth Knowles, Maciej Szwaja, Mehdi.D, Mohamed Awnallah, Praneet Nadella, Radek Stankiewicz, Radosław Stankiewicz, Reuven Lax, RuiLong J., S. Veyrié, Sam Whittle, Shunping Huang, Stephan Hoyer, Steven van Rossum, Tanu Sharma, Tarun Annapareddy, Tom Stepp, Valentyn Tymofieiev, Vitaly Terentyev, XQ Hu, Yi Hu, changliiu, claudevdm, fozzie15, kristynsmith, wolfchris-google

v2.69.0: Beam 2.69.0 release

Compare Source

We are happy to present the new 2.69.0 release of Beam.
This release includes both improvements and new functionality.
See the download page for this release.

For more information on changes in 2.69.0, check out the detailed release notes.

Highlights

• (Python) Add YAML Editor and Visualization Panel (#​35772).
• (Java) Java 25 Support (#​35772).

I/Os

• Upgraded Iceberg dependency to 1.10.0 (#​36123).

New Features / Improvements

• Enhance JAXBCoder with XMLInputFactory support (Java) (#​36446).
• Python examples added for CloudSQL enrichment handler on Beam website (Python) (#​35473).
• Support for batch mode execution in WriteToPubSub transform added (Python) (#​35990).
• Added official support for Python 3.13 (#​34869).
• Added an optional output_schema verification to all YAML transforms (#​35952).
• Support for encryption when using GroupByKey added, along with --gbek pipeline option to automatically replace all GroupByKey transforms (Java/Python) (#​36214).

Breaking Changes

• (Python) dill is no longer a required, default dependency for Apache Beam (#​21298).
  • This change only affects pipelines that explicitly use the pickle_library=dill pipeline option.
  • While dill==0.3.1.1 is still pre-installed on the official Beam SDK base images, it is no longer a direct dependency of the apache-beam Python package. This means it can be overridden by other dependencies in your environment.
  • If your pipeline uses pickle_library=dill, you must manually ensure dill==0.3.1.1 is installed in both your submission and runtime environments.
    • Submission environment: Install the dill extra in your local environment pip install apache-beam[gcpdill].
    • Runtime (worker) environment: Your action depends on how you manage your worker's environment.
      • If using default containers or custom containers with the official Beam base image e.g. FROM apache/beam_python3.10_sdk:2.69.0
        • Add dill==0.3.1.1 to your worker's requirements file (e.g., requirements.txt)
        • Pass this file to your pipeline using the --requirements_file requirements.txt pipeline option (For more details see managing Dataflow dependencies).
      • If custom containers with a non-Beam base image e.g. FROM python:3.9-slim
        • Install apache-beam with the dill extra in your docker file e.g. RUN pip install --no-cache-dir apache-beam[gcp,dill]
  • If there is a dill version mismatch between submission and runtime environments you might encounter unpickling errors like Can't get attribute '_create_code' on <module 'dill._dill' from....
  • If dill is not installed in the runtime environment you will see the error ImportError: Pipeline option pickle_library=dill is set, but dill is not installed...
  • Report any issues you encounter when using pickle_library=dill to the GitHub issue (#​21298)
• (Python) Added a pickle_library=dill_unsafe pipeline option. This allows overriding dill==0.3.1.1 using dill as the pickle_library. Use with extreme caution. Other versions of dill has not been tested with Apache Beam (#​21298).
• (Python) The deterministic fallback coder for complex types like NamedTuple, Enum, and dataclasses now normalizes filepaths for better determinism guarantees. This affects streaming pipelines updating from 2.68 to 2.69 that utilize this fallback coder. If your pipeline is affected, you may see a warning like: "Using fallback deterministic coder for type X...". To update safely sepcify the pipeline option --update_compatibility_version=2.68.0 (#​36345).
• (Python) Fixed transform naming conflict when executing DataTransform on a dictionary of PColls (#​30445).
  This may break update compatibility if you don't provide a --transform_name_mapping.
• Removed deprecated Hadoop versions (2.10.2 and 3.2.4) that are no longer supported for Iceberg from IcebergIO (#​36282).
• (Go) Coder construction on SDK side is more faithful to the specs from runners without stripping length-prefix. This may break streaming pipeline update as the underlying coder could be changed (#​36387).
• Minimum Go version for Beam Go updated to 1.25.2 (#​36461).
• (Java) DoFn OutputReceiver now requires implementing a builder method as part of extended metadata support for elements (#​34902).
• (Java) Removed ProcessContext outputWindowedValue introduced in 2.68 that allowed setting offset and record Id. Use OutputReceiver's builder to set those field ([#​36523]#​36523).

Bugfixes

• Fixed passing of pipeline options to x-lang transforms when called from the Java SDK (Java) (#​36443).
• PulsarIO has now changed support status from incomplete to experimental. Both read and writes should now minimally
  function (un-partitioned topics, without schema support, timestamp ordered messages for read) (Java)
  (#​36141).
• Fixed Spanner Change Stream reading stuck issue due to watermark of partition moving backwards (#​36470).

List of Contributors

According to git shortlog, the following people contributed to the 2.69.0 release. Thank you to all contributors!

Abdelrahman Ibrahim, Ahmed Abualsaud, Andrew Crites, Arun Pandian, Bryan Dang, Chamikara Jayalath, Charles Nguyen, Chenzo, Clay Johnson, Danny McCormick, David A, Derrick Williams, Enrique Calderon, Hai Joey Tran, Ian Liao, Ian Mburu, Jack McCluskey, Jiang Zhu, Joey Tran, Kenneth Knowles, Kyle Stanley, Maciej Szwaja, Minbo Bae, Mohamed Awnallah, Radek Stankiewicz, Radosław Stankiewicz, Razvan Culea, Reuven Lax, Sagnik Ghosh, Sam Whittle, Shunping Huang, Steven van Rossum, Talat UYARER, Tanu Sharma, Tarun Annapareddy, Tom Stepp, Valentyn Tymofieiev, Vitaly Terentyev, XQ Hu, Yi Hu, Yilei, claudevdm, flpablo, fozzie15, johnjcasey, lim1t, parveensania, yashu

arquivei/go-app (github.com/arquivei/go-app)

v1.6.0

Compare Source

What's Changed

• chore(config): migrate Renovate config by @​renovate[bot] in #​49
• Fix linter issues by @​rjfonseca in #​50
• fix: return exit 1 on error by @​rjfonseca in #​52

Full Changelog: arquivei/go-app@v1.5.2...v1.6.0

v1.5.2

Compare Source

What's Changed

• fix(deps): update all non-major dependencies by @​renovate[bot] in #​48

Full Changelog: arquivei/go-app@v1.5.1...v1.5.2

v1.5.1

Compare Source

What's Changed

• chore(deps): update actions/checkout action to v6 by @​renovate[bot] in #​47
• chore(deps): update golangci/golangci-lint-action action to v9 by @​renovate[bot] in #​46
• fix(deps): update module golang.org/x/text to v0.33.0 by @​renovate[bot] in #​45

Full Changelog: arquivei/go-app@v1.5.0...v1.5.1

rs/zerolog (github.com/rs/zerolog)

v1.35.0

Compare Source

---

Configuration

📅 Schedule: Branch creation - "before 8am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 11 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25 -> 1.25.0
cloud.google.com/go/auth	v0.16.5 -> v0.17.0
github.com/docker/docker	v28.4.0+incompatible -> v28.5.1+incompatible
golang.org/x/crypto	v0.42.0 -> v0.43.0
golang.org/x/net	v0.44.0 -> v0.46.0
golang.org/x/oauth2	v0.31.0 -> v0.32.0
golang.org/x/sync	v0.17.0 -> v0.19.0
golang.org/x/sys	v0.36.0 -> v0.37.0
google.golang.org/api	v0.251.0 -> v0.252.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20250929231259-57b25ae835d4 -> v0.0.0-20251002232023-7c0ddcbb5797
google.golang.org/grpc	v1.75.1 -> v1.76.0
google.golang.org/protobuf	v1.36.9 -> v1.36.10

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 28 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25 -> 1.25.0
cloud.google.com/go/auth	v0.16.5 -> v0.17.0
cloud.google.com/go/iam	v1.5.2 -> v1.5.3
cloud.google.com/go/monitoring	v1.24.2 -> v1.24.3
cloud.google.com/go/storage	v1.57.0 -> v1.59.2
github.com/avast/retry-go/v4	v4.6.1 -> v4.7.0
github.com/cncf/xds/go	v0.0.0-20250501225837-2ac532fd4443 -> v0.0.0-20251022180443-0feb69152e9f
github.com/docker/docker	v28.4.0+incompatible -> v28.5.2+incompatible
github.com/go-jose/go-jose/v4	v4.1.2 -> v4.1.3
github.com/googleapis/enterprise-certificate-proxy	v0.3.6 -> v0.3.7
github.com/prometheus/common	v0.66.1 -> v0.67.5
github.com/prometheus/procfs	v0.17.0 -> v0.20.1
go.opentelemetry.io/otel	v1.38.0 -> v1.40.0
go.opentelemetry.io/otel/metric	v1.38.0 -> v1.40.0
go.opentelemetry.io/otel/sdk	v1.38.0 -> v1.40.0
go.opentelemetry.io/otel/sdk/metric	v1.38.0 -> v1.40.0
go.opentelemetry.io/otel/trace	v1.38.0 -> v1.40.0
go.yaml.in/yaml/v2	v2.4.3 -> v2.4.4
golang.org/x/crypto	v0.42.0 -> v0.47.0
golang.org/x/net	v0.44.0 -> v0.49.0
golang.org/x/oauth2	v0.31.0 -> v0.35.0
golang.org/x/sync	v0.17.0 -> v0.20.0
golang.org/x/sys	v0.36.0 -> v0.42.0
golang.org/x/time	v0.13.0 -> v0.14.0
google.golang.org/api	v0.251.0 -> v0.257.0
google.golang.org/genproto/googleapis/api	v0.0.0-20250929231259-57b25ae835d4 -> v0.0.0-20251111163417-95abcf5c77ba
google.golang.org/genproto/googleapis/rpc	v0.0.0-20250929231259-57b25ae835d4 -> v0.0.0-20251124214823-79d6a2a48846
google.golang.org/grpc	v1.75.1 -> v1.78.0
google.golang.org/protobuf	v1.36.9 -> v1.36.11

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud