Skip to content

Conversation

red-hat-konflux[bot]
Copy link
Contributor

@red-hat-konflux red-hat-konflux bot commented Aug 3, 2025

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/emicklei/go-restful/v3 v3.12.1 -> v3.13.0 age confidence indirect minor
github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.0 age confidence indirect minor
github.com/go-logr/logr v1.4.2 -> v1.4.3 age confidence indirect patch
github.com/go-openapi/jsonpointer v0.21.1 -> v0.21.2 age confidence indirect patch
github.com/google/gnostic-models v0.6.9 -> v0.7.0 age confidence indirect minor
github.com/google/pprof 6e76a2b -> f64d9cf age confidence indirect digest
github.com/klauspost/compress v1.17.11 -> v1.18.0 age confidence indirect minor
github.com/onsi/ginkgo/v2 v2.23.4 -> v2.25.2 age confidence require minor
github.com/onsi/gomega v1.37.0 -> v1.38.2 age confidence require minor
github.com/prometheus/client_golang v1.20.5 -> v1.23.0 age confidence require minor
github.com/prometheus/client_model v0.6.1 -> v0.6.2 age confidence indirect patch
github.com/prometheus/common v0.61.0 -> v0.65.0 age confidence indirect minor
github.com/prometheus/procfs v0.15.1 -> v0.17.0 age confidence indirect minor
github.com/spf13/pflag v1.0.5 -> v1.0.7 age confidence indirect patch
golang.org/x/net v0.38.0 -> v0.43.0 age confidence indirect minor
golang.org/x/oauth2 v0.28.0 -> v0.30.0 age confidence indirect minor
golang.org/x/sys v0.33.0 -> v0.35.0 age confidence indirect minor
golang.org/x/term v0.32.0 -> v0.34.0 age confidence indirect minor
golang.org/x/text v0.25.0 -> v0.28.0 age confidence indirect minor
golang.org/x/time v0.9.0 -> v0.12.0 age confidence indirect minor
golang.org/x/tools v0.31.0 -> v0.36.0 age confidence indirect minor
google.golang.org/protobuf v1.36.5 -> v1.36.8 age confidence indirect patch
gopkg.in/evanphx/json-patch.v4 v4.12.0 -> v4.13.0 age confidence indirect minor
k8s.io/api v0.33.2 -> v0.34.0 age confidence require minor
k8s.io/apiextensions-apiserver v0.32.0 -> v0.34.0 age confidence indirect minor
k8s.io/apimachinery v0.33.2 -> v0.34.0 age confidence require minor
k8s.io/client-go v0.33.2 -> v0.34.0 age confidence require minor
k8s.io/kube-openapi c8a335a -> d7b6acb age confidence indirect digest
k8s.io/utils 4c0f3b2 -> 0af2bda age confidence indirect digest
sigs.k8s.io/gateway-api v1.1.0 -> v1.3.0 age confidence indirect minor
sigs.k8s.io/json cfa47c3 -> 2d32026 age confidence indirect digest
sigs.k8s.io/structured-merge-diff/v4 v4.6.0 -> v4.7.0 age confidence indirect minor
sigs.k8s.io/yaml v1.4.0 -> v1.6.0 age confidence indirect minor

Release Notes

emicklei/go-restful (github.com/emicklei/go-restful/v3)

v3.13.0

Compare Source

  • optimize performance of path matching in CurlyRouter ( thanks @​wenhuang, Wen Huang)

v3.12.2

Compare Source

  • allow empty payloads in post,put,patch, issue #​580 ( thanks @​liggitt, Jordan Liggitt)
fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.0

Compare Source

v2.9.0 adds new features, refactors tests, and improves docs. New features improve interoperability/transcoding between CBOR & JSON.

v2.9.0 passed fuzz tests and is production quality. However, the new TextUnmarshaler feature will continue being fuzz tested a bit longer due to recent changes. The recent changes are limited and don't affect other parts of the codec that passed ~2 billion execs fuzzing.

What's Changed

Docs

CI

🔎 Details

Special Thanks

Many thanks to @​benluddy for adding these new features! 🎉

  • Add opt-in support for encoding.TextMarshaler and encoding.TextUnmarshaler to encode and decode from CBOR text string.
  • Add opt-in support for json.Marshaler and json.Unmarshaler via user-provided transcoding function.

New Contributors

Full Changelog: fxamacker/cbor@v2.8.0...v2.9.0

v2.8.0

Compare Source

v2.8.0 adds omitzero struct tag option, fixes and deprecates 3 functions, and bumps requirements to go 1.20+.

Many thanks to @​liggitt for contributing the omitzero support!

The "omitzero" option omits zero values from encoding, matching stdlib encoding/json behavior.
When specified in the cbor tag, the option is always honored.
When specified in the json tag, the option is honored when building with Go 1.24+.

This release fixes 3 functions (when called directly by user apps) to use same error handling on bad input as cbor.Unmarshal():

  • RawTag.UnmarshalCBOR() (thanks @​thomas-fossati for reporting this!)
  • ByteString.UnmarshalCBOR()
  • SimpleValue.UnmarshalCBOR()

This release also deprecates those 3 functions because they were initially created for internal use. Please use Unmarshal() or UnmarshalFirst() instead.

To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.

What's Changed

Other Changes
🔍 Details

New Contributors

Full Changelog: fxamacker/cbor@v2.7.0...v2.8.0

v2.7.1

Compare Source

v2.7.1 fixes 3 functions (when called directly by user apps) to use same error handling on bad inputs as cbor.Unmarshal():

  • ByteString.UnmarshalCBOR()
  • RawTag.UnmarshalCBOR()
  • SimpleValue.UnmarshalCBOR()

The above 3 fixed functions are deprecated because they were initially created for internal use. Please use Unmarshal() or UnmarshalFirst() instead.

To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.

Before Upgrading to v2.7.1

v2.8.0 is being fuzz tested and will be released later today. It adds support for omitzero struct tag option.

v2.7.1 is the last version to support go 1.17-1.19. v2.8.0 and newer releases will require go 1.20+.

What's Changed

Special Thanks

Thanks @​thomas-fossati for reporting the bug in RawTag.UnmarshalCBOR() when it is called directly by user apps providing bad input data!

Full Changelog: fxamacker/cbor@v2.7.0...v2.7.1

go-logr/logr (github.com/go-logr/logr)

v1.4.3

Compare Source

Minor release.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.21.2

Compare Source

google/gnostic-models (github.com/google/gnostic-models)

v0.7.0

Compare Source

klauspost/compress (github.com/klauspost/compress)

v1.18.0

Compare Source

What's Changed
New Contributors

Full Changelog: klauspost/compress@v1.17.11...v1.18.0

onsi/ginkgo (github.com/onsi/ginkgo/v2)

v2.25.2

Compare Source

2.25.2

Fixes

Add github output group for progress report content

Maintenance

Bump Gomega

v2.25.1

Compare Source

2.25.1

Fixes
  • fix(types): ignore nameless nodes on FullText() [10866d3]
  • chore: fix some CodeQL warnings [2e42cff]

v2.25.0

Compare Source

2.25.0

AroundNode

This release introduces a new decorator to support more complex spec setup usecases.

AroundNode registers a function that runs before each individual node. This is considered a more advanced decorator.

Please read the docs for more information and some examples.

Allowed signatures:

  • AroundNode(func()) - func will be called before the node is run.
  • AroundNode(func(ctx context.Context) context.Context) - func can wrap the passed in context and return a new one which will be passed on to the node.
  • AroundNode(func(ctx context.Context, body func(ctx context.Context))) - ctx is the context for the node and body is a function that must be called to run the node. This gives you complete control over what runs before and after the node.

Multiple AroundNode decorators can be applied to a single node and they will run in the order they are applied.

Unlike setup nodes like BeforeEach and DeferCleanup, AroundNode is guaranteed to run in the same goroutine as the decorated node. This is necessary when working with lower-level libraries that must run on a single thread (you can call runtime.LockOSThread() in the AroundNode to ensure that the node runs on a single thread).

Since AroundNode allows you to modify the context you can also use AroundNode to implement shared setup that attaches values to the context.

If applied to a container, AroundNode will run before every node in the container. Including setup nodes like BeforeEach and DeferCleanup.

AroundNode can also be applied to RunSpecs to run before every node in the suite. This opens up new mechanisms for instrumenting individual nodes across an entire suite.

v2.24.0

Compare Source

2.24.0

Features

Specs can now be decorated with (e.g.) SemVerConstraint("2.1.0") and ginkgo --sem-ver-filter="2.1.1" will only run constrained specs that match the requested version. Learn more in the docs here! Thanks to @​Icarus9913 for the PR.

Fixes
Maintenance

Numerous dependency bumps and documentation fixes

onsi/gomega (github.com/onsi/gomega)

v1.38.2

Compare Source

1.38.2

v1.38.1

Compare Source

1.38.1

Fixes

Numerous minor fixes and dependency bumps

v1.38.0

Compare Source

1.38.0

Features
  • gstruct handles extra unexported fields [4ee7ed0]
Fixes
  • support [] in IgnoringTopFunction function signatures (#​851) [36bbf72]
Maintenance
prometheus/client_golang (github.com/prometheus/client_golang)

v1.23.0: - 2025-07-30

Compare Source

  • [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #​1812
  • [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #​1766
  • [FEATURE] Add exemplars for native histograms #​1686
  • [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #​1823
  • [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #​1833
  • [BUGFIX] exp/api: client prompt return on context cancellation #​1729
All Changes * Update example test by @​SuperQ in https://github.com/prometheus/client_golang/pull/1770 * build(deps): bump golang.org/x/net from 0.34.0 to 0.36.0 in /tutorials/whatsup by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1776 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1771 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1778 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1779 * build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 in /exp by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1782 * build(deps): bump github.com/prometheus/common from 0.62.0 to 0.63.0 in /exp by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1781 * build(deps): bump github.com/prometheus/common from 0.62.0 to 0.63.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1783 * build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1784 * build(deps): bump github.com/prometheus/procfs from 0.15.1 to 0.16.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1786 * chore: Upgrade golangci-lint to v2 by @​kakkoyun in https://github.com/prometheus/client_golang/pull/1789 * build(deps): bump the github-actions group across 1 directory with 3 updates by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1790 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1791 * Add `WrapCollectorWith` and `WrapCollectorWithPrefix` by @​colega in https://github.com/prometheus/client_golang/pull/1766 * feat(github-actions): add Go file change detection to golangci-lint workflow by @​kakkoyun in https://github.com/prometheus/client_golang/pull/1794 * chore(ci): Fix flaky tests by @​kakkoyun in https://github.com/prometheus/client_golang/pull/1795 * build(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 in /tutorials/whatsup by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1799 * test(registry): Add goleak-based goroutine leak detection by @​surinkim in https://github.com/prometheus/client_golang/pull/1797 * build(deps): bump go.uber.org/goleak from 1.2.0 to 1.3.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1806 * build(deps): bump the github-actions group with 2 updates by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1804 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1809 * Add exemplars for native histograms by @​shivanthzen in https://github.com/prometheus/client_golang/pull/1686 * build(deps): bump golang.org/x/sys from 0.30.0 to 0.32.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1807 * build(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1805 * build(deps): bump github.com/prometheus/procfs from 0.16.0 to 0.16.1 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1808 * build(deps): bump golang.org/x/net from 0.35.0 to 0.38.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1800 * Update supported Go versions by @​SuperQ in https://github.com/prometheus/client_golang/pull/1812 * Cleaup Go modules by @​SuperQ in https://github.com/prometheus/client_golang/pull/1813 * fix: client prompt return on context cancellation by @​umegbewe in https://github.com/prometheus/client_golang/pull/1729 * Simplify buf binary install by @​SuperQ in https://github.com/prometheus/client_golang/pull/1814 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1815 * build(deps): bump the github-actions group with 5 updates by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1817 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1821 * exp/api: Bubble up status code from writeResponse by @​saswatamcode in https://github.com/prometheus/client_golang/pull/1823 * build(deps): bump github.com/prometheus/common from 0.64.0 to 0.65.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1827 * build(deps): bump github.com/prometheus/common from 0.64.0 to 0.65.0 in /exp by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1828 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1831 * Update runtime metrics for Go v1.23 and v1.24 by @​aknuds1 in https://github.com/prometheus/client_golang/pull/1833 * Fix `errNotImplemented` reference by @​aknuds1 in https://github.com/prometheus/client_golang/pull/1835 * build(deps): bump the github-actions group with 3 updates by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1826 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1832 * Cut v1.23.0-rc.0 by @​vesari in https://github.com/prometheus/client_golang/pull/1837 * cut v1.23.0-rc.1 by @​vesari in https://github.com/prometheus/client_golang/pull/1842

New Contributors

Full Changelog: https://github.com/prometheus/client\_golang/compare/v1.22.0...v1.23.0

v1.22.0: - 2025-04-07

Compare Source

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #​1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header.
It was enabled by default since version 1.20, but now you need to add a blank import to enable it.
The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon,
https://github.com/golang/go/issues/62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:

import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
  • [FEATURE] prometheus: Add new CollectorFunc utility #​1724
  • [CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #​1738
  • [FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #​1743
  • [CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #​1765
All Changes

Configuration

📅 Schedule: Branch creation - "after 5am on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

@red-hat-konflux red-hat-konflux bot requested a review from a team as a code owner August 3, 2025 08:06
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-dependencies branch 5 times, most recently from 50ff1b2 to bf6a95d Compare August 13, 2025 16:14
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-dependencies branch 2 times, most recently from c5718a7 to 5ec2543 Compare August 17, 2025 12:17
@yftacherzog yftacherzog force-pushed the konflux/mintmaker/main/go-dependencies branch from 5ec2543 to 983b2d4 Compare August 19, 2025 12:25
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-dependencies branch 2 times, most recently from 7fe16a0 to 7f0005b Compare August 24, 2025 16:23
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-dependencies branch from 7f0005b to 4059d15 Compare August 29, 2025 16:20
Copy link
Contributor Author

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
github.com/modern-go/reflect2 v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee

@amisstea amisstea added this pull request to the merge queue Aug 29, 2025
Merged via the queue into main with commit 2474e6f Aug 29, 2025
7 checks passed
@amisstea amisstea deleted the konflux/mintmaker/main/go-dependencies branch August 29, 2025 17:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant