Bump the go-dependencies group with 11 updates #452

dependabot · 2025-10-13T02:16:04Z

Bumps the go-dependencies group with 11 updates:

Package	From	To
sigs.k8s.io/controller-runtime	`0.22.1`	`0.22.3`
github.com/prometheus/common	`0.66.1`	`0.67.1`
golang.org/x/mod	`0.28.0`	`0.29.0`
golang.org/x/net	`0.44.0`	`0.46.0`
golang.org/x/oauth2	`0.31.0`	`0.32.0`
golang.org/x/sys	`0.36.0`	`0.37.0`
golang.org/x/term	`0.35.0`	`0.36.0`
golang.org/x/text	`0.29.0`	`0.30.0`
golang.org/x/time	`0.13.0`	`0.14.0`
golang.org/x/tools	`0.37.0`	`0.38.0`
google.golang.org/grpc	`1.75.1`	`1.76.0`

Updates sigs.k8s.io/controller-runtime from 0.22.1 to 0.22.3

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.22.3

What's Changed

[release-0.22] 🐛 Allow SSA after normal resource creation by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3348

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.2...v0.22.3

v0.22.2

What's Changed

🐛 Panic when trying to build more than one instance of fake.ClientBuilder by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3315

🌱 Bump to k8s.io/* v0.34.1 by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3317

🐛 Don't block on Get when queue is shutdown (2nd try) by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3338

🐛 Fix a bug where the priorityqueue would sometimes not return high-priority items first by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3340

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.1...v0.22.2

Commits

3e8b259 [release-0.22] 🐛 Allow SSA after normal resource creation (#3348)
7fb34b5 [release-0.22] 🐛 Fix a bug where the priorityqueue would sometimes not return...
27d4b5e Merge pull request #3338 from k8s-infra-cherrypick-robot/cherry-pick-3337-to-...
6d368ce Rebase priorityqueue shutdown fix for release-0.22
d04f428 Don't block on Get when queue is shutdown (2nd try)
7f146f7 Merge pull request #3317 from k8s-infra-cherrypick-robot/cherry-pick-3316-to-...
f3b9e4f Bump to k8s.io/* v0.34.1
04c6a08 [release-0.22] 🐛Panic when trying to build more than one instance of fake.Cli...
See full diff in compare view

Updates github.com/prometheus/common from 0.66.1 to 0.67.1

Release notes

Sourced from github.com/prometheus/common's releases.

v0.67.1

What's Changed

Fix Go case-insensitive file name collision by @SuperQ in prometheus/common#853

Full Changelog: prometheus/common@v0.67.0...v0.67.1

v0.67.0 / 2025-10-07

What's Changed

Create CHANGELOG.md for easier communication of library changes, especially possible breaking changes. by @ywwg in prometheus/common#833

model: New test for validation with dots by @m1k1o in prometheus/common#759

expfmt: document NewTextParser as required by @burgerdev in prometheus/common#842

expfmt: Add support for float histograms and gauge histograms by @beorn7 in prometheus/common#843

Updated minimum Go version to 1.24.0, updated Go dependecies by @SuperQ in prometheus/common#849

New Contributors

@m1k1o made their first contribution in prometheus/common#759

@burgerdev made their first contribution in prometheus/common#842

Full Changelog: prometheus/common@v0.66.1...v0.67.0

Changelog

Sourced from github.com/prometheus/common's changelog.

v0.67.1 / 2025-10-07

What's Changed

Remove VERSION file to avoid Go conflict error in prometheus/common#853

Full Changelog: prometheus/common@v0.67.0...v0.67.1

v0.67.0 / 2025-10-07

What's Changed

Create CHANGELOG.md for easier communication of library changes, especially possible breaking changes. by @ywwg in prometheus/common#833

model: New test for validation with dots by @m1k1o in prometheus/common#759

expfmt: document NewTextParser as required by @burgerdev in prometheus/common#842

expfmt: Add support for float histograms and gauge histograms by @beorn7 in prometheus/common#843

Updated minimum Go version to 1.24.0, updated Go dependecies by @SuperQ in prometheus/common#849

New Contributors

@m1k1o made their first contribution in prometheus/common#759

@burgerdev made their first contribution in prometheus/common#842

Full Changelog: prometheus/common@v0.66.1...v0.67.0

Commits

c41fe14 Merge pull request #853 from prometheus/superq/version
f5de376 Fix Go case-insensitive file name collision
b63ce83 Merge pull request #848 from prometheus/beorn7/version
6035595 Cut v0.67.0
1a6ab58 Merge pull request #849 from prometheus/superq/go_1.25
a277468 Update Go
3219621 Merge pull request #846 from prometheus/dependabot/go_modules/google.golang.o...
797fd97 build(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.9
dd2fa0e Merge pull request #841 from prometheus/repo_sync
c36260a Merge pull request #844 from prometheus/dependabot/go_modules/go.yaml.in/yaml...
Additional commits viewable in compare view

Updates golang.org/x/mod from 0.28.0 to 0.29.0

Commits

bba3e06 go.mod: update golang.org/x dependencies
See full diff in compare view

Updates golang.org/x/net from 0.44.0 to 0.46.0

Commits

2002a06 go.mod: update golang.org/x dependencies
59706cd html: impose open element stack size limit
6ec8895 html: align in row insertion mode with spec
5393563 http2: fix RFC 9218 write scheduler not being idempotent
b2ab371 internal/httpsfv: implement parsing support for date and display string
edb764c internal/httpsfv: add parsing functionality for types defined in RFC 8941
fbba2c2 internal/httpsfv: add support for consuming Display String and Date type
47a241f http2: make the error channel pool per-Server
51f657b webdav/internal/xml: use the built-in min function
f2e909b internal/httpsfv: implement parsing support for Dictionary and List type.
Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.31.0 to 0.32.0

Commits

792c877 oauth2: use strings.Builder instead of bytes.Buffer
See full diff in compare view

Updates golang.org/x/sys from 0.36.0 to 0.37.0

Commits

1edeebe unix: mkall.sh: fail if docker build failed
ecada54 unix: use slices.{Equal,Sort} in tests
5e63aa5 windows: export O_FILE_FLAG_* to be used in os.OpenFile on windows
033906b unix: add (*CPUSet).Fill helper to enable all CPUs
6be6c58 windows: add FlushConsoleInputBuffer and GetNumberOfConsoleInputEvents
32e2038 unix: use Go 1.21+ clear built-in
137f2ed sys: add support for NetBSD getvfsstat
See full diff in compare view

Updates golang.org/x/term from 0.35.0 to 0.36.0

Commits

3a0828a go.mod: update golang.org/x dependencies
See full diff in compare view

Updates golang.org/x/text from 0.29.0 to 0.30.0

Commits

c6abd03 go.mod: update golang.org/x dependencies
42f038d x/text: fix nil dereference in gotext extract
a42f0e2 all: use built-in max/min to simplify the code
See full diff in compare view

Updates golang.org/x/time from 0.13.0 to 0.14.0

Commits

2b4e439 rate: use time.Time.Equal instead of ==
See full diff in compare view

Updates golang.org/x/tools from 0.37.0 to 0.38.0

Commits

a22b5e8 go.mod: update golang.org/x dependencies
4bbcc9f all: use reflect.TypeFor instead of reflect.TypeOf when we have known the type
122c93a internal/refactor: AddImport: remove unnecessary result
76aace8 internal/analysisinternal: rationalize
8cf2d63 gopls/internal/golang: add condition for enabling package move
1f054fd x/tools: downgrade token.FileSet parameters to token.File
44e71e5 go/analysis/passes/printf: check anonymous functions too
9095e9b internal/analysisinternal: extract DeleteVar
62a1b26 internal/analysisinternal: IsChildOf(Cursor, edge.Kind) bool
d32fb50 internal/analysisinternal: export EnclosingFile
Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.75.1 to 1.76.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.76.0

Dependencies

Minimum supported Go version is now 1.24 (#8509)

Special Thanks: @kevinGC

Bug Fixes

client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#8523)

client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#8518)

Special Thanks: @vinothkumarr227

pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#8615)

New Features

credentials: Add credentials/jwt package providing file-based JWT PerRPCCredentials (A97). (#8431)

Special Thanks: @dimpavloff

Performance Improvements

client: Improve HTTP/2 header size estimate to reduce re-allocations. (#8547)

encoding/proto: Avoid redundant message size calculation when marshaling. (#8569)

Special Thanks: @rs-unity

Commits

d96c2ef Change version to 1.76.0 (#8584)
79c553c Cherry pick #8610, #8615 to v1.76.x (#8621)
0513350 client: minor improvements to log messages (#8564)
ebaf486 credentials: implement file-based JWT Call Credentials (part 1 for A97) (#8431)
ca78c90 xds/resolver_test: fix flaky test ResolverBadServiceUpdate_NACKedWithoutCache...
83bead4 internal/buffer: set closed flag when closing channel in the Load method (#8575)
0f45079 encoding/proto: enable use cached size option (#8569)
8420f3f transport: avoid slice reallocation during header creation (#8547)
b36320e Revert "stats/opentelemetry: record retry attempts from clientStream (#8342)"...
c122250 stats/opentelemetry: record retry attempts from clientStream (#8342)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-dependencies group with 11 updates: | Package | From | To | | --- | --- | --- | | [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.22.1` | `0.22.3` | | [github.com/prometheus/common](https://github.com/prometheus/common) | `0.66.1` | `0.67.1` | | [golang.org/x/mod](https://github.com/golang/mod) | `0.28.0` | `0.29.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.44.0` | `0.46.0` | | [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.31.0` | `0.32.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.36.0` | `0.37.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.35.0` | `0.36.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.29.0` | `0.30.0` | | [golang.org/x/time](https://github.com/golang/time) | `0.13.0` | `0.14.0` | | [golang.org/x/tools](https://github.com/golang/tools) | `0.37.0` | `0.38.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.75.1` | `1.76.0` | Updates `sigs.k8s.io/controller-runtime` from 0.22.1 to 0.22.3 - [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md) - [Commits](kubernetes-sigs/controller-runtime@v0.22.1...v0.22.3) Updates `github.com/prometheus/common` from 0.66.1 to 0.67.1 - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md) - [Commits](prometheus/common@v0.66.1...v0.67.1) Updates `golang.org/x/mod` from 0.28.0 to 0.29.0 - [Commits](golang/mod@v0.28.0...v0.29.0) Updates `golang.org/x/net` from 0.44.0 to 0.46.0 - [Commits](golang/net@v0.44.0...v0.46.0) Updates `golang.org/x/oauth2` from 0.31.0 to 0.32.0 - [Commits](golang/oauth2@v0.31.0...v0.32.0) Updates `golang.org/x/sys` from 0.36.0 to 0.37.0 - [Commits](golang/sys@v0.36.0...v0.37.0) Updates `golang.org/x/term` from 0.35.0 to 0.36.0 - [Commits](golang/term@v0.35.0...v0.36.0) Updates `golang.org/x/text` from 0.29.0 to 0.30.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.29.0...v0.30.0) Updates `golang.org/x/time` from 0.13.0 to 0.14.0 - [Commits](golang/time@v0.13.0...v0.14.0) Updates `golang.org/x/tools` from 0.37.0 to 0.38.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.37.0...v0.38.0) Updates `google.golang.org/grpc` from 1.75.1 to 1.76.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.75.1...v1.76.0) --- updated-dependencies: - dependency-name: sigs.k8s.io/controller-runtime dependency-version: 0.22.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/prometheus/common dependency-version: 0.67.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/mod dependency-version: 0.29.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/net dependency-version: 0.46.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/oauth2 dependency-version: 0.32.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/sys dependency-version: 0.37.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/term dependency-version: 0.36.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/text dependency-version: 0.30.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/time dependency-version: 0.14.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/tools dependency-version: 0.38.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: google.golang.org/grpc dependency-version: 1.76.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 13, 2025

jstudler merged commit 6227e48 into main Oct 13, 2025
13 checks passed

jstudler deleted the dependabot/go_modules/go-dependencies-245e11da5a branch October 13, 2025 05:59

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Bump the go-dependencies group with 11 updates #452

Bump the go-dependencies group with 11 updates #452

Uh oh!

dependabot bot commented on behalf of github Oct 13, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Bump the go-dependencies group with 11 updates #452

Bump the go-dependencies group with 11 updates #452

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 13, 2025

v0.22.3

What's Changed

v0.22.2

What's Changed

v0.67.1

What's Changed

v0.67.0 / 2025-10-07

What's Changed

New Contributors

v0.67.1 / 2025-10-07

What's Changed

v0.67.0 / 2025-10-07

What's Changed

New Contributors

Release 1.76.0

Dependencies

Bug Fixes

New Features

Performance Improvements

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants