Skip to content

Bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.7.0 to 1.8.1 in /tests/end-to-end-tests - #225

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/tests/end-to-end-tests/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob-1.8.1
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/tests/end-to-end-tests/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob-1.8.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.7.0 to 1.8.1.

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/storage/azblob's releases.

sdk/storage/azblob/v1.8.1

1.8.1 (2026-09-09)

Breaking Changes

  • DownloadBuffer and DownloadFile now use ETag locking to ensure consistency across parallel chunk requests when the blob size is not specified upfront (i.e., Range.Count is zero). If a blob is modified during a multi-chunk download, subsequent requests will fail with ConditionNotMet instead of silently returning data from mixed blob versions.

Bugs Fixed

  • Fixed CRLF injection vulnerability in Blob Batch subrequest serialization. Header values containing CR or LF characters are now rejected before serialization, preventing header injection in batch requests.
  • Fixed WASM compilation by using heap-allocated buffers on JS targets.
  • Fixed Structured Message CRC64 download validation being skipped when the final payload byte exactly fills the caller's read buffer; the trailing segment footer and message trailer CRC64 are now drained and validated in the same Read.
  • Fixed transient net.Error/io.ErrUnexpectedEOF failures during a Structured Message download not being retried: the decoder now preserves the error chain with %w and the retry reader classifies retryable errors with errors.Is/errors.As.
  • Structured Message download now rejects a response missing the negotiated CRC64 flag instead of silently skipping validation.
  • Fixed the Structured Message encoder emitting a valid, complete message when the source returned a non-EOF error exactly on a segment boundary; such errors are now propagated.
  • Structured Message decoding now rejects a payload that declares fewer segments and appends unvalidated trailing bytes (SMDecode requires the parsed message to consume the entire input, and the streaming decoder validates the consumed byte count against the declared message length).
  • Fixed the Structured Message encoder returning io.EOF when the source ends before the declared content length; a premature EOF is now surfaced as io.ErrUnexpectedEOF so callers do not accept a truncated message.
  • Fixed Structured Message decoder discarding errors (including net.Error and io.EOF) when the returned bytes exactly complete a segment; such errors are now propagated so RetryReader can retry transient failures at segment boundaries.
  • Premature EOF during Structured Message framing reads (header, segment footer, or message trailer) now wraps io.ErrUnexpectedEOF so RetryReader classifies truncated framing as retryable.

Other Changes

  • Optimized DownloadBuffer and DownloadFile to use an initial GET request instead of a HEAD (GetProperties) call for blob size discovery. For small blobs (<=4MB), the entire content is returned in a single request, reducing download latency by ~50%.
  • Updated azcore to v1.23.1.

sdk/storage/azblob/v1.8.1-beta.1

1.8.1-beta.1 (2026-07-24)

Features Added

  • Added support for Structured Message CRC64 content validation on upload and download operations using TransferValidationTypeComputeStructuredMessageCRC64.
  • Added StorageResponseFormat enum (Auto, XML, Arrow) for list blobs operations. Set ResponseFormat on ListBlobsFlatOptions/ListBlobsHierarchyOptions to opt into Apache Arrow format for improved performance. Auto defaults to XML for this release.
  • Added AccessTier, AccessTierInferred, AccessTierChangeTime, and SmartAccessTier fields to blob download response.
  • Blob put operations now return both ContentMD5 and ContentCRC64 in the response when a Content-MD5 header is provided (service version 2026-10-06+).

Bugs Fixed

  • Fixed UploadFile/UploadBuffer responses not including ContentCRC64 when returned by the service.

Other Changes

  • Updated code generator to @autorest/go@4.0.0-preview.80.
  • Default upload/download concurrency is now based on CPU core count (clamped between 8 and 96) instead of the fixed value of 5. Set AZURE_STORAGE_USE_LEGACY_DEFAULT_CONCURRENCY=true to revert to previous defaults.
  • Updated azidentity version to 1.14.0

sdk/storage/azfile/v1.7.1-beta.1

1.7.1-beta.1 (2026-07-24)

Features Added

  • Added NewListRangesPager method on file Client for paginated range listing with continuation token and MaxResults support.

Other Changes

  • Default upload/download concurrency is now based on CPU core count (clamped between 8 and 96) instead of the fixed value of 5. Set AZURE_STORAGE_USE_LEGACY_DEFAULT_CONCURRENCY=true to revert to previous defaults.
  • Updated azidentity version to 1.14.0
Commits
  • d5e09ea Prepare azidentity v1.8.1 for release (#23954)
  • af8249d Increment package version after release of storage/azblob (#23940)
  • 8b21042 Increment package version after release of storage/azdatalake (#23958)
  • a44e152 Release storage stg96 azdatalake preview (#23957)
  • b11c1a5 Relax tenant verification for credentials having optional tenant IDs (#23951)
  • e557039 remove erroneous package inclusion during package-properties evaluation (#23948)
  • 0fb4336 Increment package version after release of messaging/azservicebus (#23950)
  • b1480a2 Updating docs.microsoft.com to learn.microsoft.com (#23934)
  • 786b0be Credential chains continue iterating after unexpected IMDS responses (#23894)
  • 7d4721b add liftr base package dep to emitter dep list (#23938)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/Azure/azure-sdk-for-go/sdk/storage/azblob](https://github.com/Azure/azure-sdk-for-go) from 1.7.0 to 1.8.1.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.7.0...sdk/azidentity/v1.8.1)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/storage/azblob
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants