fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
cloud.google.com/go/storage	v1.65.0 → v1.67.0			require	minor	v1.67.1
github.com/golangci/golangci-lint/v2/cmd/golangci-lint	v2.13.1 → v2.13.2				patch
github.com/klauspost/compress	v1.19.2 → v1.20.0			require	minor
github.com/securego/gosec/v2/cmd/gosec	v2.28.0 → v2.29.0				minor
google.golang.org/api	v0.293.0 → v0.297.0			require	minor
securego/gosec	v2.28.0 → v2.29.0			action	minor

---

Release Notes

googleapis/google-cloud-go (cloud.google.com/go/storage)

v1.67.0: bigquery: v1.67.0

Features

• bigquery/reservation: Add a new field enable_gemini_in_bigquery to .google.cloud.bigquery.reservation.v1.Assignment that indicates if "Gemini in Bigquery"(https (601e742)
• bigquery/reservation: Add a new field replication_status to .google.cloud.bigquery.reservation.v1.Reservation to provide visibility into errors that could arise during Disaster Recovery(DR) replication (#​11666) (601e742)
• bigquery/reservation: Add the CONTINUOUS Job type to .google.cloud.bigquery.reservation.v1.Assignment.JobType for continuous SQL jobs (601e742)
• bigquery: Support MetadataCacheMode for ExternalDataConfig (#​11803) (af5174d), refs #​11802

Bug Fixes

• bigquery: Increase timeout for storage api test and remove usage of deprecated pkg (#​11810) (f47e038), refs #​11801
• bigquery: Update golang.org/x/net to 0.37.0 (1144978)

Documentation

• bigquery/reservation: Remove the section about EDITION_UNSPECIFIED in the comment for slot_capacity in .google.cloud.bigquery.reservation.v1.Reservation to clarify that (601e742)
• bigquery/reservation: Update the google.api.field_behavior for the .google.cloud.bigquery.reservation.v1.Reservation.primary_location and .google.cloud.bigquery.reservation.v1.Reservation.original_primary_location fields to clarify that they are OUTPUT_ONLY (601e742)

v1.66.0: storage: v1.66.0

Features

• Update API sources and regenerate (#​20427) (eb07af9)

v1.65.1: storage: v1.65.1

Bug Fixes

• storage: Enforce gRPC writer chunk retry deadlines by tying timers to server acks (#​20059) (dbb5f6f)

golangci/golangci-lint (github.com/golangci/golangci-lint/v2/cmd/golangci-lint)

v2.13.2

Compare Source

Released on 2026-08-28

1. Bug fixes
   • Decrease cache entropy
2. Linters bug fixes
   • iface: from 1.5.0 to 1.5.1
   • staticcheck: from 0.8.0 to 0.8.1
   • unparam: from 3f964bc to 2fa3d84
   • canonicalheader: from v1.1.2 to a temporary fork

klauspost/compress (github.com/klauspost/compress)

v1.20.0

Compare Source

What's Changed

• Add lzw reader/writer by @​klauspost in #​1189
• xpress: add Microsoft XPRESS (MS-XCA) decompression by @​MP-GOWTHAM in #​1195
• s2: arm64 assembly encoders, lowered from the amd64 avo program by @​lizthegrey in #​1187
• zstd, huff0: improved arm64 lowering, and narrow two table loads to MOVWQZX by @​lizthegrey in #​1175
• gzhttp: limit jitter hash to jitterBuffer bytes by @​VedantMadane in #​1192
• s2: clamp the Go EncodeBetter skip to match the assembly by @​lizthegrey in #​1190
• xxhash: bound input of non-preemptive assembly by @​AskAlexSharov in #​1196
• zstd/huff0: fold two ISA-gap x86 idioms in the avo arm64 lowering by @​lizthegrey in #​1199
• ci: test against go1.27.x, drop go1.24.x by @​lizthegrey in #​1198
• zstd/huff0: break false partial-register dependencies in seqdec/4X decoders by @​lizthegrey in #​1197
• flate: Writer L7-9 with dictionary can emit the dictionary to stream by @​klauspost in #​1201

New Contributors

• @​VedantMadane made their first contribution in #​1192
• @​AskAlexSharov made their first contribution in #​1196
• @​MP-GOWTHAM made their first contribution in #​1195

Full Changelog: klauspost/compress@v1.19.2...v1.20.0

securego/gosec (github.com/securego/gosec/v2/cmd/gosec)

v2.29.0

Compare Source

Changelog

• deb5446 analyzers/G703: stop treating Clean/Abs/PathEscape as path-traversal sanitizers (#​1723)
• 2e13f16 fix(junit): properly escape XML in failure text (#​1718)
• 3833037 fix(csv): capture and report write errors on flush (#​1716)
• f6d07d7 fix(report): root path matching in formatters (#​1719)
• 17d3916 fix(config): handle nosec tags with leading hash (#​1717)
• 3958f0e Update all dependencies (#​1720)
• 9c38a86 Add support for go version 1.27.0 and update to version 1.25.14 and 1… (#​1726)
• 2eb4727 Update all dependencies (#​1713)
• 5e72efc Update all dependencies (#​1710)
• 45b083a fix(G202): don't flag strings.Builder built from constants (#​1707)
• 82da19c ci: allow fork PR checkout in barry-ai-security-review job (#​1708)
• 9f7cd13 Update all dependencies (#​1709)
• 1769a22 Downgrade min Go version (#​1706)
• 5bb2909 Udpate action to use gosec v2.28.0 (#​1705)

googleapis/google-api-go-client (google.golang.org/api)

v0.297.0

Compare Source

Features

• Move to go1.26.0 as the lowest supported go version (#​3724) (7770e01)

v0.296.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3718) (6d6e873)
• all: Auto-regenerate discovery clients (#​3720) (3264fb2)
• all: Auto-regenerate discovery clients (#​3722) (bfa0bef)

v0.295.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3715) (ddc3759)
• all: Auto-regenerate discovery clients (#​3717) (9e79798)

v0.294.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3698) (9fb32c5)
• all: Auto-regenerate discovery clients (#​3700) (dafe95e)
• all: Auto-regenerate discovery clients (#​3701) (e4ac6fd)
• all: Auto-regenerate discovery clients (#​3702) (9e504ef)
• all: Auto-regenerate discovery clients (#​3703) (8da327e)
• all: Auto-regenerate discovery clients (#​3705) (dd3cd17)
• all: Auto-regenerate discovery clients (#​3706) (da5c878)
• all: Auto-regenerate discovery clients (#​3707) (9669a32)
• all: Auto-regenerate discovery clients (#​3708) (0869dfb)
• all: Auto-regenerate discovery clients (#​3709) (793ae6a)
• all: Auto-regenerate discovery clients (#​3710) (0084468)
• all: Auto-regenerate discovery clients (#​3711) (e6b9fe3)
• all: Auto-regenerate discovery clients (#​3712) (d1bcd4b)
• all: Auto-regenerate discovery clients (#​3713) (0e513f7)
• all: Auto-regenerate discovery clients (#​3714) (8bd6313)

---

Configuration

📅 Schedule: (in timezone Europe/Paris)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 5 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package	Change
cloud.google.com/go/auth	v0.23.1 -> v0.23.2
github.com/googleapis/gax-go/v2	v2.23.0 -> v2.24.0
google.golang.org/genproto	v0.0.0-20260519071638-aa98bba5eb94 -> v0.0.0-20260715232425-e75dac1f907d
google.golang.org/genproto/googleapis/api	v0.0.0-20260630182238-925bb5da69e7 -> v0.0.0-20260715232425-e75dac1f907d
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260807164820-c8921c73eeea -> v0.0.0-20260819154853-08b0e4226688