Skip to content

chore(deps): bump the go-deps group across 1 directory with 12 updates - #21

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-97433a1618
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-97433a1618

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-deps group with 12 updates in the / directory:

Package From To
github.com/coreos/go-oidc/v3 3.20.0 3.21.0
github.com/gin-contrib/gzip 1.2.6 1.2.8
github.com/prometheus/client_golang 1.24.1 1.25.0
github.com/prometheus/client_model 0.6.2 0.6.3
github.com/prometheus/common 0.70.1 0.72.0
golang.org/x/sync 0.22.0 0.23.0
gorm.io/driver/postgres 1.6.2 1.6.3
k8s.io/apimachinery 0.36.3 0.37.1
k8s.io/streaming 0.36.3 0.37.1
sigs.k8s.io/cluster-inventory-api 0.1.3 0.2.0
sigs.k8s.io/gateway-api 1.6.1 1.6.3
golang.org/x/oauth2 0.36.0 0.37.0

Updates github.com/coreos/go-oidc/v3 from 3.20.0 to 3.21.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.21.0

What's Changed

New Contributors

Full Changelog: coreos/go-oidc@v3.20.0...v3.21.0

Commits
  • c914bd3 oidc: ignore JWKs with unsupported key types rather than failing
  • See full diff in compare view

Updates github.com/gin-contrib/gzip from 1.2.6 to 1.2.8

Release notes

Sourced from github.com/gin-contrib/gzip's releases.

v1.2.8

Changelog

Others

  • 1ab890b69ae779306f9fc4b4c0ef4ab025669df4: chore(deps)!: fix Trivy security findings (#149) (@​appleboy)

v1.2.7

Changelog

Bug fixes

  • d8207e94576e31ec581ef6ae04c1aeb5499487d4: fix(lint): address golangci-lint v2.12 findings (@​appleboy)

Enhancements

  • 2f8b8fb6d9085f1f45c751f1183e5c0ba83099d2: chore(deps): upgrade quic-go to v0.59.1 (@​appleboy)
  • 806cace682ac4220ad22dbeaf2bf6a5e527b3062: chore(deps): upgrade golang.org/x/crypto and x/net (@​appleboy)
  • 2348539be2fbfc339c2d710cc36951b7a8e2ed6c: chore(deps): update dependencies and bump GitHub Actions (@​appleboy)
  • 2f50fec1a5c22020f9aaf875895df22d062583eb: chore(deps): upgrade golang.org/x/crypto to v0.55.0 (#145) (@​appleboy)

Build process updates

  • a1f042f4e3f120d6d40603e4aa5c253617b5b3c1: ci(actions): bump codecov/codecov-action from v5 to v6 (@​appleboy)
  • 8a6445f62f187acb52cd7c9a69e1b0ff4bca24b3: ci(workflow): pin trivy-action to v0.35.0 tag (@​appleboy)
  • 55c4f910369834e2e76a149da930acae78e9f968: ci(workflow): bump trivy-action from v0.35.0 to v0.36.0 (@​appleboy)
  • f5623f0d4f280112afa5bbddf005d6e8ff6a161a: ci(lint): bump golangci-lint to v2.12 (@​appleboy)
  • f597ceed4dcf0ebf9246ad76f3f7fe5d0b04585d: ci(actions): bump codecov/codecov-action from v6 to v7 (@​appleboy)
  • cdef9ec81f5d3b055edcea5094a7de99c333e41e: ci(actions): bump actions/checkout from v6 to v7 (@​appleboy)
  • ae5b21359aef62a01091f9e99ae062a5e49cca48: ci(actions): update Go test matrix (#144) (@​appleboy)

Documentation updates

  • b21477d8547dc68fa4a66d9891b79586970841a7: docs(readme): remove Go Report Card badge (@​appleboy)
  • 6da17507f2641a97677c93c7784cafd9ccbd5115: docs(readme): replace deprecated godoc.org links with pkg.go.dev (@​appleboy)

Others

  • bc0be0034fb166d3c7d2b15912687a741e33ca5e: test: update decompression content length assertions (#143) (@​appleboy)
  • c5c16498b556d4d789552d19c888a1c0dd214c64: test(static): make gzip size assertion robust on Go 1.27 (#146) (@​appleboy)
Commits
  • 1ab890b chore(deps)!: fix Trivy security findings (#149)
  • c5c1649 test(static): make gzip size assertion robust on Go 1.27 (#146)
  • 2f50fec chore(deps): upgrade golang.org/x/crypto to v0.55.0 (#145)
  • ae5b213 ci(actions): update Go test matrix (#144)
  • bc0be00 test: update decompression content length assertions (#143)
  • 6da1750 docs(readme): replace deprecated godoc.org links with pkg.go.dev
  • b21477d docs(readme): remove Go Report Card badge
  • 2348539 chore(deps): update dependencies and bump GitHub Actions
  • 806cace chore(deps): upgrade golang.org/x/crypto and x/net
  • cdef9ec ci(actions): bump actions/checkout from v6 to v7
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.24.1 to 1.25.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.25.0

⚠️ This release raises the minimum required Go version to 1.26 and includes breaking API changes in api/prometheus/v1 (see the [CHANGE] entries below). ⚠️

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139
  • [BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135

What's Changed

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139
  • [BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135
Commits

Updates github.com/prometheus/client_model from 0.6.2 to 0.6.3

Release notes

Sourced from github.com/prometheus/client_model's releases.

v0.6.3

What's Changed

New Contributors

Full Changelog: prometheus/client_model@v0.6.2...v0.6.3

What's Changed

... (truncated)

Commits

Updates github.com/prometheus/common from 0.70.1 to 0.72.0

Release notes

Sourced from github.com/prometheus/common's releases.

v0.72.0

NOTE:

  • This release bumps go.mod to 1.26 -- mostly due to /x Go packages requiring 1.26 as well.
  • This is the first release with the experimental support of OpenMetrics 2 encoding.

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.71.0...v0.72.0

v0.71.0

What's Changed

... (truncated)

Changelog

Sourced from github.com/prometheus/common's changelog.

v0.72.0 / 2026-09-28

Note

  • This release bumps go.mod to 1.26 -- mostly due to /x Go packages requiring 1.26 as well.
  • This is the first release with the experimental support of OpenMetrics 2 encoding.

What's Changed

  • feat: implement histogram and gauge histogram support for OpenMetrics 2.0 #964
  • expfmt: reject nameless samples after metric metadata #988
  • feat: implement summary support for OpenMetrics 2.0 #983
  • docs(expfmt): update OpenMetrics 2.0 supported metric types comments #989
  • optimize sample unmarshaling for json/v2 #991
  • expfmt: simplify format constants and provide default negotiation slices #992
  • expfmt: reject invalid UTF-8 and a trailing CR in OpenMetrics 2.0 metadata #998
  • expfmt: stop a test leaving the shared parser on legacy validation #996
  • Update supported Go versions #1004

Internal

  • chore: Update linting #1002
  • chore: Update gofumpt config and apply new formatting #987
  • Synchronize common files from prometheus/prometheus #1003
  • build(deps): bump the codeql group with 4 updates #980
  • build(deps): bump the golang-org-x group across 1 directory with 2 updates #1000
  • build(deps): bump github.com/prometheus/client_model from 0.6.2 to 0.6.3 in the prometheus group across 1 directory #1001

Full Changelog: prometheus/common@v0.71.0...v0.72.0

v0.71.0 / 2026-08-31

What's Changed

  • fix: use slog.DiscardHandler in promslog.NopLogger #960
  • feat: implement gauge and counter support for OpenMetrics 2.0 #894
  • fix: support exemplars with empty label sets in OpenMetrics 2.0 #965
  • model: sort label names without boxing them into sort.Interface #963
  • expfmt: fix wildcard content negotiation regression for Negotiate and NegotiateIncludingOpenMetrics #966
  • expfmt: precompute parsed goautoneg.Accept for well-known Format constants #967
  • expfmt: format OpenMetrics 2.0 float values and validate units #969
  • fix: drop invalid OpenMetrics 2.0 exemplars instead of failing exposition #970
  • model: add Duration unit constants and conversion methods #952
  • expfmt: prevent st@ leaking to Gauge and Untyped samples in OpenMetrics 2.0 #971
  • expfmt: fix OpenMetrics 2.0 decoder error, format docs, and encoder version dispatch #968

Internal

  • Synchronize common files from prometheus/prometheus #957 #958 #959 #961
  • build(deps): bump the codeql group across 1 directory with 4 updates #955

... (truncated)

Commits
  • ca4f6e1 build(deps): bump the golang-org-x group across 1 directory with 2 updates (#...
  • 3f29e55 Update supported Go versions (#1004)
  • acc069b Update common Prometheus files (#1003)
  • 04ca579 Update linting (#1002)
  • 818965d build(deps): bump github.com/prometheus/client_model (#1001)
  • eabff44 expfmt: stop a test leaving the shared parser on legacy validation (#996)
  • 8d1b388 expfmt: reject invalid UTF-8 and a trailing CR in OpenMetrics 2.0 metadata (#...
  • 4e79225 expfmt: simplify format constants and provide default negotiation slices (#992)
  • c57e58a optimize sample unmarshaling for json/v2 (#991)
  • 042f370 docs(expfmt): update OpenMetrics 2.0 supported metric types comments (#989)
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.22.0 to 0.23.0

Commits
  • f75267d semaphore: panic on negative capacity
  • 3ffd83c all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Updates gorm.io/driver/postgres from 1.6.2 to 1.6.3

Commits
  • 1a2d67b fix: only qualify DROP/ALTER INDEX with an explicit schema, never CURRENT_SCH...
  • 4e507a2 ci: switch tests Go matrix to oldstable/stable to match go.mod (#354)
  • See full diff in compare view

Updates k8s.io/apimachinery from 0.36.3 to 0.37.1

Commits
  • e3a4b17 Update dependencies to v0.37.1 tag
  • e55f9ba feat(api): Update node restriction admission to use new API
  • cb0680d Merge pull request #129125 from pohly/log-client-go-tools-apis
  • 97b2132 Merge pull request #140194 from gnufied/implement-volume-health-api
  • f21afab Add validation for camelcase in reason field
  • d7ad413 Merge pull request #140782 from dims/update-kube-openapi
  • e15ad7c Merge pull request #138808 from chenk008/cbor-streaminglist
  • 464b5d1 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
  • 0de14ec Merge pull request #140732 from thockin/dv-add-prefixed-label-key
  • 95258eb Merge pull request #134037 from ibihim/ibihim/2025-09-09_unsafe-delete-of-cor...
  • Additional commits viewable in compare view

Updates k8s.io/streaming from 0.36.3 to 0.37.1

Commits
  • cdd8da2 bump github.com/google/cadvisor/lib from v0.60.3 to v0.60.4
  • 68009e8 Merge pull request #140021 from dims/conntrack-cpuset
  • bed9c7d kube-proxy: detect host CPU count via cpuset.NumCPU instead of cadvisor
  • 0a84e25 Merge pull request #139420 from dims/update-x-net-deps
  • 9ef12fe Bump golang.org/x/net to HEAD for http2 go1.27 wrap fixes
  • f00c6a5 Merge pull request #139258 from dims/update-x-net-deps
  • a1f0619 Bump golang.org/x/net from v0.54.0 to v0.55.0
  • 2d09b61 Merge pull request #139248 from dims/bump-golang.org/x/crypto-to-v0.52.0
  • eb30797 Bump golang.org/x/crypto to v0.52.0
  • 99242c8 Merge pull request #138561 from dims/update-xnet-dep
  • Additional commits viewable in compare view

Updates sigs.k8s.io/cluster-inventory-api from 0.1.3 to 0.2.0

Release notes

Sourced from sigs.k8s.io/cluster-inventory-api's releases.

v0.2.0

Cluster Inventory API v0.2.0

Cluster Inventory API v0.2.0 adds multicluster.x-k8s.io/v1alpha2 for ClusterProfile and PlacementDecision.

v1alpha1 is still served and remains the storage version for both, so stored objects stay on v1alpha1. Both CRDs are also now in the multicluster category.

Highlights

ClusterProfile

  • status.credentialProviders is removed in v1alpha2. Use status.accessProviders instead. v1alpha1 keeps it, deprecated.
  • v1alpha2 validates spec.clusterManager.name and status.accessProviders[].cluster more strictly.
  • v1alpha2 adds kubectl get columns: display name, manager, version, healthy, age.
  • New LabelInventoryMemberIDKey constant for correlating ClusterProfiles that represent the same member cluster (kubernetes/enhancements#6237).

PlacementDecision

  • v1alpha2 validates decisions[].clusterProfileRef more strictly.
  • v1alpha2 adds kubectl get columns: scheduler, age.

Go packages

  • pkg/access applies tls-server-name, insecure-skip-tls-verify, and disable-compression from status.accessProviders[].cluster to the rest.Config.

Docs and release process

  • Added a

Bumps the go-deps group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.20.0` | `3.21.0` |
| [github.com/gin-contrib/gzip](https://github.com/gin-contrib/gzip) | `1.2.6` | `1.2.8` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.24.1` | `1.25.0` |
| [github.com/prometheus/client_model](https://github.com/prometheus/client_model) | `0.6.2` | `0.6.3` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.70.1` | `0.72.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.22.0` | `0.23.0` |
| [gorm.io/driver/postgres](https://github.com/go-gorm/postgres) | `1.6.2` | `1.6.3` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.36.3` | `0.37.1` |
| [k8s.io/streaming](https://github.com/kubernetes/streaming) | `0.36.3` | `0.37.1` |
| [sigs.k8s.io/cluster-inventory-api](https://github.com/kubernetes-sigs/cluster-inventory-api) | `0.1.3` | `0.2.0` |
| [sigs.k8s.io/gateway-api](https://github.com/kubernetes-sigs/gateway-api) | `1.6.1` | `1.6.3` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.36.0` | `0.37.0` |



Updates `github.com/coreos/go-oidc/v3` from 3.20.0 to 3.21.0
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](coreos/go-oidc@v3.20.0...v3.21.0)

Updates `github.com/gin-contrib/gzip` from 1.2.6 to 1.2.8
- [Release notes](https://github.com/gin-contrib/gzip/releases)
- [Commits](gin-contrib/gzip@v1.2.6...v1.2.8)

Updates `github.com/prometheus/client_golang` from 1.24.1 to 1.25.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.25.0/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.24.1...v1.25.0)

Updates `github.com/prometheus/client_model` from 0.6.2 to 0.6.3
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](prometheus/client_model@v0.6.2...v0.6.3)

Updates `github.com/prometheus/common` from 0.70.1 to 0.72.0
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.70.1...v0.72.0)

Updates `golang.org/x/sync` from 0.22.0 to 0.23.0
- [Commits](golang/sync@v0.22.0...v0.23.0)

Updates `gorm.io/driver/postgres` from 1.6.2 to 1.6.3
- [Commits](go-gorm/postgres@v1.6.2...v1.6.3)

Updates `k8s.io/apimachinery` from 0.36.3 to 0.37.1
- [Commits](kubernetes/apimachinery@v0.36.3...v0.37.1)

Updates `k8s.io/streaming` from 0.36.3 to 0.37.1
- [Commits](kubernetes/streaming@v0.36.3...v0.37.1)

Updates `sigs.k8s.io/cluster-inventory-api` from 0.1.3 to 0.2.0
- [Release notes](https://github.com/kubernetes-sigs/cluster-inventory-api/releases)
- [Changelog](https://github.com/kubernetes-sigs/cluster-inventory-api/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/cluster-inventory-api@v0.1.3...v0.2.0)

Updates `sigs.k8s.io/gateway-api` from 1.6.1 to 1.6.3
- [Release notes](https://github.com/kubernetes-sigs/gateway-api/releases)
- [Changelog](https://github.com/kubernetes-sigs/gateway-api/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/gateway-api@v1.6.1...v1.6.3)

Updates `golang.org/x/oauth2` from 0.36.0 to 0.37.0
- [Commits](golang/oauth2@v0.36.0...v0.37.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/gin-contrib/gzip
  dependency-version: 1.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/prometheus/common
  dependency-version: 0.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/sync
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: gorm.io/driver/postgres
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: k8s.io/streaming
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: sigs.k8s.io/cluster-inventory-api
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: sigs.k8s.io/gateway-api
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants