fix(deps): bump the external group across 1 directory with 4 updates

[dependabot]

Bumps the external group with 4 updates in the /sdk directory: github.com/Masterminds/semver/v3, github.com/testcontainers/testcontainers-go, golang.org/x/tools and google.golang.org/grpc.

Updates github.com/Masterminds/semver/v3 from 3.3.1 to 3.4.0

Release notes

Sourced from github.com/Masterminds/semver/v3's releases.

v3.4.0

There are a few changes in this release to highlight:

1. Constraints now has a property IncludePrerelease. When set to true the Check and Validate methods will include prereleases.
2. When an AND group has one constraint with a prerelease but more than one constraint then prereleases will be included. For example, >1.0.0-beta.1 < 2. In the past this would not have included prereleases because each constraint needed to have a prerelease. Now, only one constraint needs to have a prerelease. This is considered a long standing bug fix. Note, this does not carry across OR groups. For example, >1.0.0-beta.1 < 2 || > 3. In this case, prereleases will not be included when evaluating against >3.
3. NewVersion coercion with leading "0"'s is restored. This can be disabled by setting the package level property CoerceNewVersion to false.

What's Changed

• fix the CodeQL link by @​dmitris in Masterminds/semver#257
• Restore detailed errors when failed to parse with NewVersion by @​mattfarina in Masterminds/semver#262
• updating go version tested with by @​mattfarina in Masterminds/semver#263
• Restore the ability to have leading 0's with NewVersion by @​mattfarina in Masterminds/semver#266
• Handle pre-releases on all in an and group by @​mattfarina in Masterminds/semver#267
• Add property to include prereleases by @​mattfarina in Masterminds/semver#268
• Updating the error message handling by @​mattfarina in Masterminds/semver#269
• Update the release notes and readme for new version by @​mattfarina in Masterminds/semver#270

New Contributors

• @​dmitris made their first contribution in Masterminds/semver#257

Full Changelog: Masterminds/semver@v3.3.1...v3.4.0

Changelog

Sourced from github.com/Masterminds/semver/v3's changelog.

3.4.0 (2025-06-27)

Added

• #268: Added property to Constraints to include prereleases for Check and Validate

Changed

• #263: Updated Go testing for 1.24, 1.23, and 1.22
• #269: Updated the error message handling for message case and wrapping errors
• #266: Restore the ability to have leading 0's when parsing with NewVersion. Opt-out of this by setting CoerceNewVersion to false.

Fixed

• #257: Fixed the CodeQL link (thanks @​dmitris)
• #262: Restored detailed errors when failed to parse with NewVersion. Opt-out of this by setting DetailedNewVersionErrors to false for faster performance.
• #267: Handle pre-releases for an "and" group if one constraint includes them

Commits

• 61fc460 Merge pull request #270 from mattfarina/relnotes-3.4.0
• 69a63e7 Update the release notes and readme for new version
• dc05094 Merge pull request #269 from mattfarina/lowercase-error-strings
• a2cd9c2 Updating the error message handling
• 9760c47 Merge pull request #268 from mattfarina/include-prerelease
• c374751 Add property to include prereleases
• 057c901 Merge pull request #267 from mattfarina/fix-259
• abab1c2 Handle pre-releases on all in an and group
• ebda872 Merge pull request #266 from mattfarina/restore-calver
• 4ed619e Restore the ability to have leading 0's with NewVersion
• Additional commits viewable in compare view

Updates github.com/testcontainers/testcontainers-go from 0.37.0 to 0.38.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.38.0

What's Changed

⚠️ Breaking Changes

• chore!: do not wait for all the exposed ports to be ready (#3199) @​mdelapenya

The breaking change comes as a behaviour that has been removed: the readiness check for the exposed ports. It led to flakiness and for that reason we removed it.

• feat!: add options when creating RawCommand (#3168) @​benja-M-1

Only for users of the testcontainers.NewRawCommand function to create executables in containers, that are assigning the function to a variable. We added a variadic argument to the signature, so the rest of the users won't be affected by this breaking change.

• chore(deps)!: bump github.com/docker/docker from 28.1.1+incompatible to 28.2.2+incompatible (#3194) @​mdelapenya

Implementers of the testcontainers.ImageBuildInfo interface, would see that testcontainers.BuildOptions has changed its signature to use non-deprecated types from docker/docker:

type ImageBuildInfo interface {
- 	 BuildOptions() (types.ImageBuildOptions, error) // converts the ImageBuildInfo to a types.ImageBuildOptions
+        BuildOptions() (build.ImageBuildOptions, error) // converts the ImageBuildInfo to a build.ImageBuildOptions

Also users of the testcontainers.FromDockerfile struct will receive this breaking change, as the BuildOptionsModifier fields has changed:

- BuildOptionsModifier func(*types.ImageBuildOptions)
+ BuildOptionsModifier func(*build.ImageBuildOptions)

🔒 Security

• deps: update testcontainers/sshd image to 1.3.0 (#3220) @​mdelapenya

🚀 Features

• feat(couchbase): adding auth to couchbase initCluster functions to support container reuse (#3048) @​waroir20
• feat: support adding wait strategies as functional option (#3161) @​mdelapenya
• feat: add more functional options for customising containers (#3156) @​mdelapenya
• feat(memcached): add memcached module (#3132) @​mdelapenya
• feat(valkey): add TLS support for Valkey (#3131) @​mdelapenya

🐛 Bug Fixes

• fix: strip headers from logs using log stream specification (#3226) @​LaurentGoderre
• fix: use PortEndpoint() in a few more modules (#3209) @​ash2k
• fix: docker container log consumer race (#3210) @​stevenh
• fix: use PortEndpoint() in a few more modules (#3207) @​ash2k
• fix: use PortEndpoint() in a few more modules (#3206) @​ash2k
• fix: use PortEndpoint() in a few more modules (#3203) @​ash2k
• fix: try to fix more IPv6 handling issues (#3198) @​ash2k
• fix: workaround for moby/moby#50133 when reusing container (#3197) @​mabrarov
• feat(kafka,redpanda): support for waiting for mapped ports without external checks (#3165) @​mabrarov
• fix(etcd): expose ports for the etcd nodes (#3162) @​mdelapenya

... (truncated)

Commits

• 41bd601 chore: use new version (v0.38.0) in modules and examples
• a771fee Update go.mod in azure module (#3231)
• 7f916ae fix: strip headers from logs using log stream specification (#3226)
• 295ba91 chore: clarify image auth warning message for public images (#3228)
• ea392e9 chore(deps): bump github.com/go-viper/mapstructure/v2 (#3219)
• 122a4e5 chore(deps): bump github/codeql-action from 3.28.16 to 3.29.2 (#3222)
• 930caf5 chore(deps): bump mkdocs-include-markdown-plugin from 7.1.5 to 7.1.6 (#3225)
• 8a7416a deps: update testcontainers/sshd image to 1.3.0 (#3220)
• c6cd357 chore(deps): bump urllib3 from 2.2.2 to 2.5.0 (#3214)
• 4aa742c deps: gopsutil and purego update (#3217)
• Additional commits viewable in compare view

Updates golang.org/x/tools from 0.34.0 to 0.35.0

Commits

• 50ec2f1 go.mod: update golang.org/x dependencies
• 197c6c1 gopls/internal/mcp: more tuning of tools and prompts
• 9563af6 gopls/internal/mcp: include module paths in workspace summaries
• 88a4eb3 gopls/internal/cmd: wait for startup log in TestMCPCommandHTTP
• 4738c7c gopls/internal/cmd: avoid the use of channels in the sessions API
• ae18417 gopls/internal/filewatcher: skip test for unsupported OS
• 8391b17 gopls/doc: document Zed editor
• 778fe21 gopls/internal/util/tokeninternal: move from internal/tokeninternal
• 0343b70 internal/jsonrpc2/stack: move from internal/stack
• 8c9f4cc gopls/internal/filewatcher: refactor filewatcher to pass in handler func
• Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.73.0 to 1.74.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.74.0 was accidentally tagged on the wrong commit and should not be used. Version 1.73.0 should be used until 1.74.1 is released.

Commits

• 406c2bf transport: release mutex before returning on expired deadlines in server stre...
• 20ef77a xds: give up pool lock before closing xdsclient channel (#8445)
• 2f9bb38 xdsclient: relay marshalled bytes of complete resource proto to decoders (#8422)
• fa3ec85 xds: Avoid error logs when setting fallback bootstrap config (#8419)
• d307d75 xdsclient: preserve original bytes for decoding when the resource is wrapped ...
• b34f845 server: allow 0s grpc-timeout header values, as java is known to be able to s...
• 1787f94 xdsclient: export genericResourceTypeDecoder (#8406)
• 15299cc xdsclient: make a function to return the supported resource type implementati...
• 20bd1e7 grpc: revert #8278: Fix cardinality violations in non-server streaming RPCs (...
• bdbe6a2 examples/opentelemetry: demonstrate enabling experimental metrics (#8388)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	193.017452ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	102.616694ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	354.036014ms
Throughput	282.46 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	38.527262457s
Average Latency	383.726871ms
Throughput	129.78 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	26.479040853s
Average Latency	264.048447ms
Throughput	188.83 requests/second