chore(deps): update go dependencies (backplane-2.10) #473
+31,508
−21,369
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v0.4.1->v0.6.0v3.12.2->v3.13.0v1.4.2->v1.4.3v0.21.0->v0.22.1v0.20.2->v0.21.2v0.23.0->v0.25.1d1b30fe->5df77e3v0.7.7->v0.9.1v1.22.0->v1.23.2v0.6.1->v0.6.2v0.62.0->v0.67.2v0.15.1->v0.19.2v1.7.0->v1.10.0v1.0.9->v1.0.10v1.35.0->v1.38.0v1.35.0->v1.38.0v2.4.2->v2.4.3v0.30.0->v0.33.0v0.17.0->v0.18.0v0.37.0->v0.38.0v0.12.0->v0.14.0v0.37.0->v0.38.0v2.4.0->v2.5.0a0af3ef->f26f940v1.36.5->v1.36.10v4.12.0->v4.13.0f3f2b99->589584fcfa47c3->2d32026Warning
Some dependencies could not be looked up. Check the warning logs for more information.
Release Notes
cyphar/filepath-securejoin (github.com/cyphar/filepath-securejoin)
v0.6.0Compare Source
This is our first release of
github.com/cyphar/filepath-securejoin,containing a full implementation with a coverage of 93.5% (the only missing
cases are the error cases, which are hard to mocktest at the moment).
v0.5.1: -- "Spooky scary skeletons send shivers down your spine!"Compare Source
Changed
openat2can return-EAGAINif it detects a possible attack in certainscenarios (namely if there was a rename or mount while walking a path with a
..component). While this is necessary to avoid a denial-of-service in thekernel, it does require retry loops in userspace.
In previous versions,
pathrs-litewould retryopenat232 times beforereturning an error, but we've received user reports that this limit can be
hit on systems with very heavy load. In some synthetic benchmarks (testing
the worst-case of an attacker doing renames in a tight loop on every core of
a 16-core machine) we managed to get a ~3% failure rate in runc. We have
improved this situation in two ways:
We have now increased this limit to 128, which should be good enough for
most use-cases without becoming a denial-of-service vector (the number of
syscalls called by the
O_PATHresolver in a typical case is within thesame ballpark). The same benchmarks show a failure rate of ~0.12% which
(while not zero) is probably sufficient for most users.
In addition, we now return a
unix.EAGAINerror that is bubbled up and canbe detected by callers. This means that callers with stricter requirements
to avoid spurious errors can choose to do their own infinite
EAGAINretryloop (though we would strongly recommend users use time-based deadlines in
such retry loops to avoid potentially unbounded denials-of-service).
v0.5.0Compare Source
This is our first release of
github.com/cyphar/filepath-securejoin,containing a full implementation with a coverage of 93.5% (the only missing
cases are the error cases, which are hard to mocktest at the moment).
emicklei/go-restful (github.com/emicklei/go-restful/v3)
v3.13.0Compare Source
go-logr/logr (github.com/go-logr/logr)
v1.4.3Compare Source
Minor release.
What's Changed
New Contributors
Full Changelog: go-logr/logr@v1.4.2...v1.4.3
go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)
v0.22.1Compare Source
v0.22.0Compare Source
v0.21.2Compare Source
v0.21.1Compare Source
go-openapi/jsonreference (github.com/go-openapi/jsonreference)
v0.21.2Compare Source
v0.21.1Compare Source
v0.21.0Compare Source
v0.20.5Compare Source
v0.20.4Compare Source
v0.20.3Compare Source
mailru/easyjson (github.com/mailru/easyjson)
v0.9.1Compare Source
What's Changed
New Contributors
Full Changelog: mailru/easyjson@v0.9.0...v0.9.1
v0.9.0Compare Source
up go version and bugfixes
v0.8.0Compare Source
stable version before go version bump
prometheus/client_golang (github.com/prometheus/client_golang)
v1.23.2: - 2025-09-05Compare Source
This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.
All Changes
Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2
v1.23.1: - 2025-09-04Compare Source
This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.
All Changes
Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1
v1.23.0: - 2025-07-30Compare Source
All Changes
* Update example test by @SuperQ in https://github.com/prometheus/client_golang/pull/1770 * build(deps): bump golang.org/x/net from 0.34.0 to 0.36.0 in /tutorials/whatsup by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1776 * Synchronize common files from prometheus/prometheus by @prombot in https://github.com/prometheus/client_golang/pull/1771 * Synchronize common files from prometheus/prometheus by @prombot in https://github.com/prometheus/client_golang/pull/1778 * Synchronize common files from prometheus/prometheus by @prombot in https://github.com/prometheus/client_golang/pull/1779 * build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 in /exp by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1782 * build(deps): bump github.com/prometheus/common from 0.62.0 to 0.63.0 in /exp by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1781 * build(deps): bump github.com/prometheus/common from 0.62.0 to 0.63.0 by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1783 * build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1784 * build(deps): bump github.com/prometheus/procfs from 0.15.1 to 0.16.0 by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1786 * chore: Upgrade golangci-lint to v2 by @kakkoyun in https://github.com/prometheus/client_golang/pull/1789 * build(deps): bump the github-actions group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1790 * Synchronize common files from prometheus/prometheus by @prombot in https://github.com/prometheus/client_golang/pull/1791 * Add `WrapCollectorWith` and `WrapCollectorWithPrefix` by @colega in https://github.com/prometheus/client_golang/pull/1766 * feat(github-actions): add Go file change detection to golangci-lint workflow by @kakkoyun in https://github.com/prometheus/client_golang/pull/1794 * chore(ci): Fix flaky tests by @kakkoyun in https://github.com/prometheus/client_golang/pull/1795 * build(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 in /tutorials/whatsup by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1799 * test(registry): Add goleak-based goroutine leak detection by @surinkim in https://github.com/prometheus/client_golang/pull/1797 * build(deps): bump go.uber.org/goleak from 1.2.0 to 1.3.0 by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1806 * build(deps): bump the github-actions group with 2 updates by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1804 * Synchronize common files from prometheus/prometheus by @prombot in https://github.com/prometheus/client_golang/pull/1809 * Add exemplars for native histograms by @shivanthzen in https://github.com/prometheus/client_golang/pull/1686 * build(deps): bump golang.org/x/sys from 0.30.0 to 0.32.0 by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1807 * build(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1805 * build(deps): bump github.com/prometheus/procfs from 0.16.0 to 0.16.1 by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1808 * build(deps): bump golang.org/x/net from 0.35.0 to 0.38.0 by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1800 * Update supported Go versions by @SuperQ in https://github.com/prometheus/client_golang/pull/1812 * Cleaup Go modules by @SuperQ in https://github.com/prometheus/client_golang/pull/1813 * fix: client prompt return on context cancellation by @umegbewe in https://github.com/prometheus/client_golang/pull/1729 * Simplify buf binary install by @SuperQ in https://github.com/prometheus/client_golang/pull/1814 * Synchronize common files from prometheus/prometheus by @prombot in https://github.com/prometheus/client_golang/pull/1815 * build(deps): bump the github-actions group with 5 updates by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1817 * Synchronize common files from prometheus/prometheus by @prombot in https://github.com/prometheus/client_golang/pull/1821 * exp/api: Bubble up status code from writeResponse by @saswatamcode in https://github.com/prometheus/client_golang/pull/1823 * build(deps): bump github.com/prometheus/common from 0.64.0 to 0.65.0 by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1827 * build(deps): bump github.com/prometheus/common from 0.64.0 to 0.65.0 in /exp by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1828 * Synchronize common files from prometheus/prometheus by @prombot in https://github.com/prometheus/client_golang/pull/1831 * Update runtime metrics for Go v1.23 and v1.24 by @aknuds1 in https://github.com/prometheus/client_golang/pull/1833 * Fix `errNotImplemented` reference by @aknuds1 in https://github.com/prometheus/client_golang/pull/1835 * build(deps): bump the github-actions group with 3 updates by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1826 * Synchronize common files from prometheus/prometheus by @prombot in https://github.com/prometheus/client_golang/pull/1832 * Cut v1.23.0-rc.0 by @vesari in https://github.com/prometheus/client_golang/pull/1837 * cut v1.23.0-rc.1 by @vesari in https://github.com/prometheus/client_golang/pull/1842New Contributors
Full Changelog: prometheus/client_golang@v1.22.0...v1.23.0
prometheus/common (github.com/prometheus/common)
v0.67.2Compare Source
v0.67.1Compare Source
v0.67.0Compare Source
v0.66.1Compare Source
This release has no functional changes, it just drops the dependencies
github.com/grafana/regexpandgo.uber.org/atomicand replacesgopkg.in/yaml.v2withgo.yaml.in/yaml/v2(a drop-in replacement).What's Changed
Full Changelog: prometheus/common@v1.20.99...v0.66.1
v0.66.0Compare Source
schemeset, so users should use the NewTextParser function to create a valid TextParser. Otherwise parsing will panic with "Invalid name validation scheme requested: unset".What's Changed
model: add constants for type and unit labels. by @bwplotka in #801
model.ValidationScheme: Support encoding as YAML by @aknuds1 in #799
fix(promslog): always print time.Duration values as go duration strings by @tjhop in #798
Add
ValidationSchememethodsIsValidMetricNameandIsValidLabelNameby @aknuds1 in #806Fix delimited proto not escaped correctly by @thampiotr in #809
Decoder: Remove use of global name validation and add validation by @ywwg in #808
ValidationScheme implements pflag.Value and json.Marshaler/Unmarshaler interfaces by @juliusmh in #807
expfmt: Add NewTextParser function by @aknuds1 in #816
Enable the godot linter by @aknuds1 in #821
Enable usestdlibvars linter by @aknuds1 in #820
Enable unconvert linter by @aknuds1 in #819
Enable the fatcontext linter by @aknuds1 in #822
Enable gocritic linter by @aknuds1 in #818
Use go.uber.org/atomic instead of sync/atomic by @aknuds1 in #825
Enable revive rule unused-parameter by @aknuds1 in #824
Enable revive rules by @aknuds1 in #823
Synchronize common files from prometheus/prometheus by @prombot in #802
Synchronize common files from prometheus/prometheus by @prombot in #803
Sync .golangci.yml with prometheus/prometheus by @aknuds1 in #817
ci: update upload-actions by @ywwg in #814
docs: fix typo in expfmt.Negotiate by @wmcram in #813
build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @dependabot[bot] in #800
build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 by @dependabot[bot] in #810
build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 in /assets by @dependabot[bot] in #826
build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.8 by @dependabot[bot] in #830
build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 by @dependabot[bot] in #829
build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @dependabot[bot] in #827
New Contributors
v0.65.0Compare Source
What's Changed
New Contributors
Full Changelog: prometheus/common@v0.64.0...v0.65.0
v0.64.0Compare Source
What's Changed
NewNopLogger()wrapper aroundNew()by @tjhop in #783New Contributors
Full Changelog: prometheus/common@v0.63.0...v0.64.0
v0.63.0Compare Source
What's Changed
New Contributors
Full Changelog: prometheus/common@v0.62.0...v0.63.0
prometheus/procfs (github.com/prometheus/procfs)
v0.19.2Compare Source
What's Changed
Full Changelog: prometheus/procfs@v0.19.1...v0.19.2
v0.19.1Compare Source
What's Changed
Full Changelog: prometheus/procfs@v0.19.0...v0.19.1
v0.19.0Compare Source
What's Changed
New Contributors
Full Changelog: prometheus/procfs@v0.18.0...v0.19.0
v0.18.0Compare Source
What's Changed
New Contributors
Full Changelog: prometheus/procfs@v0.17.0...v0.18.0
v0.17.0Compare Source
What's Changed
Configuration
📅 Schedule: Branch creation - "on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.