Skip to content

fix(deps): bump the deps group across 1 directory with 10 updates #1783

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): bump the deps group across 1 directory with 10 updates #1783

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 13, 2025

Bumps the deps group with 8 updates in the / directory:

Package From To
cloud.google.com/go/compute/metadata 0.8.0 0.9.0
cloud.google.com/go/monitoring 1.24.2 1.24.3
github.com/prometheus/client_golang 1.23.0 1.23.2
github.com/stretchr/testify 1.11.0 1.11.1
github.com/thanos-io/thanos 0.36.1 0.39.2
golang.org/x/mod 0.27.0 0.29.0
golang.org/x/oauth2 0.30.0 0.32.0
google.golang.org/api 0.248.0 0.252.0

Updates cloud.google.com/go/compute/metadata from 0.8.0 to 0.9.0

Release notes

Sourced from cloud.google.com/go/compute/metadata's releases.

compute/metadata: v0.9.0

0.9.0 (2025-09-24)

Features

Changelog

Sourced from cloud.google.com/go/compute/metadata's changelog.

Code changes required from v0.9.0

  • pubsub: Replace

    sub.ModifyPushConfig(ctx, pubsub.PushConfig{Endpoint: "https://example.com/push"})

    with

    sub.Update(ctx, pubsub.SubscriptionConfigToUpdate{
    PushConfig: &pubsub.PushConfig{Endpoint: "https://example.com/push"},
})

  • trace: traceGRPCServerInterceptor will be provided from *trace.Client. Given an initialized *trace.Client named tc, instead of

    s := grpc.NewServer(grpc.UnaryInterceptor(trace.GRPCServerInterceptor(tc)))

    write

    s := grpc.NewServer(grpc.UnaryInterceptor(tc.GRPCServerInterceptor()))

  • trace trace.GRPCClientInterceptor will also provided from *trace.Client. Instead of

    conn, err := grpc.Dial(srv.Addr, grpc.WithUnaryInterceptor(trace.GRPCClientInterceptor()))

    write

    conn, err := grpc.Dial(srv.Addr, grpc.WithUnaryInterceptor(tc.GRPCClientInterceptor()))

  • trace: We removed the deprecated trace.EnableGRPCTracing. Use the gRPC interceptor as a dial option as shown below when initializing Cloud package clients:

    c, err := pubsub.NewClient(ctx, "project-id", option.WithGRPCDialOption(grpc.WithUnaryInterceptor(tc.GRPCClientInterceptor())))
if err != nil {
    ...

... (truncated)

Commits
  • d4f8670 BREAKING: all: regenerate toolkit client
  • 23179f2 readme: document Trace and Error Reporting clients
  • c2e00bb trace: switch to grpc-trace-bin for gRPC calls
  • 1de0ed4 rpcreplay: Fprintf functions
  • 8878988 bigtable/bttest: Return proper error code when entity already exists
  • e432073 bigtable: Don't retry on INTERNAL errors.
  • 84bf648 rpcreplay: responses to code review comments from previous CL
  • e687f27 rpcreplay: replay of unary RPCs
  • 9da216d spanner: more integration tests
  • a089e75 logging: document that Close flushes the loggers
  • Additional commits viewable in compare view

Updates cloud.google.com/go/monitoring from 1.24.2 to 1.24.3

Release notes

Sourced from cloud.google.com/go/monitoring's releases.

monitoring: v1.24.3

1.24.3 (2025-10-08)

Bug Fixes

  • monitoring: Upgrade gRPC service registration func (9dd3adf)
Commits

Updates github.com/prometheus/client_golang from 1.23.0 to 1.23.2

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.2 - 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1 - 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

Commits

Updates github.com/stretchr/testify from 1.11.0 to 1.11.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.11.1

This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

Commits

Updates github.com/thanos-io/thanos from 0.36.1 to 0.39.2

Release notes

Sourced from github.com/thanos-io/thanos's releases.

v0.39.2

Fixes two issues with the distributed query engine.

Fixed

  • #8374 Query: fix panic when concurrently accessing annotations map
  • #8375 Query: fix native histogram buckets in distributed queries

Full Changelog: thanos-io/thanos@v0.39.1...v0.39.2

v0.39.1

Fixes a memory leak issue on query-frontend. The bug only affects v0.39.0.

Fixed

  • #8349 Query-Frontend: properly clean up resources
  • #8338 Query-Frontend: use original roundtripper + close immediately

Full Changelog: thanos-io/thanos@v0.39.0...v0.39.1

v0.39.0

In short: there are a bunch of fixes and small improvements. The shining items in this release are memory usage improvements in Thanos Query and shuffle sharding support in Thanos Receiver. Information about shuffle sharding support is available in the documentation. Thank you to all contributors!

Added

  • #8308 Receive: Prometheus counters for pending write requests and series requests
  • #8225 tools: Extend bucket ls options.
  • #8238 Receive: add shuffle sharding support
  • #8284 Store: Add --disable-admin-operations Flag to Store Gateway
  • #8245 Querier/Query-Frontend/Ruler: Add --enable-feature=promql-experimental-functions flag option to enable using promQL experimental functions in respective Thanos components
  • #8259 Shipper: Add --shipper.skip-corrupted-blocks flag to allow Sync() to continue upload when finding a corrupted block

Changed

  • #8282 Force sync writes to meta.json in case of host crash
  • #8192 Sidecar: fix default get config timeout
  • #8202 Receive: Unhide --tsdb.enable-native-histograms flag
  • #8315 Query-Frontend: only ready if downstream is ready

Removed

  • #8289 Receive: breaking ⚠️ Removed migration of legacy-TSDB to multi-TSDB. Ensure you are running version >0.13

Fixed

  • #8199 Query: handle panics or nil pointer dereference in querier gracefully when query analyze returns nil
  • #8211 Query: fix panic on nested partial response in distributed instant query
  • #8216 Query/Receive: fix iter race between next() and stop() introduced in thanos-io/thanos#7821.
  • #8212 Receive: Ensure forward/replication metrics are incremented in err cases
  • #8296 Query: limit LazyRetrieval memory buffer size

New Contributors

... (truncated)

Changelog

Sourced from github.com/thanos-io/thanos's changelog.

v0.39.2 - 2025 07 17

Fixed

  • #8374 Query: fix panic when concurrently accessing annotations map
  • #8375 Query: fix native histogram buckets in distributed queries

v0.39.1 - 2025 07 01

Fixes a memory leak issue on query-frontend. The bug only affects v0.39.0.

Fixed

  • #8349 Query-Frontend: properly clean up resources
  • #8338 Query-Frontend: use original roundtripper + close immediately

v0.39.0 - 2025 06 25

In short: there are a bunch of fixes and small improvements. The shining items in this release are memory usage improvements in Thanos Query and shuffle sharding support in Thanos Receiver. Information about shuffle sharding support is available in the documentation. Thank you to all contributors!

Added

  • #8308 Receive: Prometheus counters for pending write requests and series requests
  • #8225 tools: Extend bucket ls options.
  • #8238 Receive: add shuffle sharding support
  • #8284 Store: Add --disable-admin-operations Flag to Store Gateway
  • #8245 Querier/Query-Frontend/Ruler: Add --enable-feature=promql-experimental-functions flag option to enable using promQL experimental functions in respective Thanos components
  • #8259 Shipper: Add --shipper.skip-corrupted-blocks flag to allow Sync() to continue upload when finding a corrupted block

Changed

  • #8282 Force sync writes to meta.json in case of host crash
  • #8192 Sidecar: fix default get config timeout
  • #8202 Receive: Unhide --tsdb.enable-native-histograms flag
  • #8315 Query-Frontend: only ready if downstream is ready

Removed

  • #8289 Receive: breaking ⚠️ Removed migration of legacy-TSDB to multi-TSDB. Ensure you are running version >0.13

Fixed

  • #8199 Query: handle panics or nil pointer dereference in querier gracefully when query analyze returns nil
  • #8211 Query: fix panic on nested partial response in distributed instant query
  • #8216 Query/Receive: fix iter race between next() and stop() introduced in thanos-io/thanos#7821.
  • #8212 Receive: Ensure forward/replication metrics are incremented in err cases
  • #8296 Query: limit LazyRetrieval memory buffer size

v0.38.0 - 03.04.2025

Fixed

  • #8091 *: Add POST into allowed CORS methods header

... (truncated)

Commits

Updates golang.org/x/mod from 0.27.0 to 0.29.0

Commits
  • bba3e06 go.mod: update golang.org/x dependencies
  • 1759e96 go.mod: update golang.org/x dependencies
  • f060e16 all: upgrade go directive to at least 1.24.0 [generated]
  • See full diff in compare view

Updates golang.org/x/oauth2 from 0.30.0 to 0.32.0

Commits
  • 792c877 oauth2: use strings.Builder instead of bytes.Buffer
  • 014cf77 all: upgrade go directive to at least 1.24.0 [generated]
  • 3c76ce5 endpoints: correct Naver OAuth2 endpoint URLs
  • See full diff in compare view

Updates google.golang.org/api from 0.248.0 to 0.252.0

Release notes

Sourced from google.golang.org/api's releases.

v0.252.0

0.252.0 (2025-10-07)

Features

v0.251.0

0.251.0 (2025-09-30)

Features

v0.250.0

0.250.0 (2025-09-25)

Features

v0.249.0

0.249.0 (2025-09-08)

Features

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.252.0 (2025-10-07)

Features

0.251.0 (2025-09-30)

Features

0.250.0 (2025-09-25)

Features

0.249.0 (2025-09-08)

Features

... (truncated)

Commits

Updates google.golang.org/grpc from 1.75.0 to 1.75.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.75.1

Bug Fixes

  • transport: Fix a data race while copying headers for stats handlers in the std lib http2 server transport. (#8519)
  • xdsclient:
    • Fix a data race caused while reporting load to LRS. (#8483)
    • Fix regression preventing empty node IDs when creating an LRS client. (#8483)
  • server: Fix a regression preventing streams from being cancelled or timed out when blocked on flow control. (#8528)
Commits

Updates google.golang.org/protobuf from 1.36.8 to 1.36.10

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
fix(deps): bump the deps group across 1 directory with 10 updates
712585a 
Bumps the deps group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/compute/metadata](https://github.com/googleapis/google-cloud-go) | `0.8.0` | `0.9.0` |
| [cloud.google.com/go/monitoring](https://github.com/googleapis/google-cloud-go) | `1.24.2` | `1.24.3` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.23.0` | `1.23.2` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.0` | `1.11.1` |
| [github.com/thanos-io/thanos](https://github.com/thanos-io/thanos) | `0.36.1` | `0.39.2` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.27.0` | `0.29.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.30.0` | `0.32.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.248.0` | `0.252.0` |



Updates `cloud.google.com/go/compute/metadata` from 0.8.0 to 0.9.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@v0.8.0...v0.9.0)

Updates `cloud.google.com/go/monitoring` from 1.24.2 to 1.24.3
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@monitoring/v1.24.2...monitoring/v1.24.3)

Updates `github.com/prometheus/client_golang` from 1.23.0 to 1.23.2
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.23.0...v1.23.2)

Updates `github.com/stretchr/testify` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.0...v1.11.1)

Updates `github.com/thanos-io/thanos` from 0.36.1 to 0.39.2
- [Release notes](https://github.com/thanos-io/thanos/releases)
- [Changelog](https://github.com/thanos-io/thanos/blob/main/CHANGELOG.md)
- [Commits](thanos-io/thanos@v0.36.1...v0.39.2)

Updates `golang.org/x/mod` from 0.27.0 to 0.29.0
- [Commits](golang/mod@v0.27.0...v0.29.0)

Updates `golang.org/x/oauth2` from 0.30.0 to 0.32.0
- [Commits](golang/oauth2@v0.30.0...v0.32.0)

Updates `google.golang.org/api` from 0.248.0 to 0.252.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.248.0...v0.252.0)

Updates `google.golang.org/grpc` from 1.75.0 to 1.75.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.75.0...v1.75.1)

Updates `google.golang.org/protobuf` from 1.36.8 to 1.36.10

---
updated-dependencies:
- dependency-name: cloud.google.com/go/compute/metadata
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: cloud.google.com/go/monitoring
  dependency-version: 1.24.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.23.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: github.com/thanos-io/thanos
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: golang.org/x/mod
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: google.golang.org/api
  dependency-version: 0.252.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: google.golang.org/grpc
  dependency-version: 1.75.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants