Skip to content

build(deps): bump the go-dependencies group across 1 directory with 11 updates #2024

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

build(deps): bump the go-dependencies group across 1 directory with 11 updates #2024

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 21, 2025 •
edited
Loading

Bumps the go-dependencies group with 7 updates in the / directory:

Package From To
github.com/beevik/etree 1.4.1 1.5.1
github.com/cilium/ebpf 0.16.0 0.18.0
github.com/jaypipes/ghw 0.13.0 0.16.0
github.com/klauspost/cpuid/v2 2.2.8 2.2.10
github.com/prometheus/client_golang 1.20.5 1.22.0
github.com/prometheus/prometheus 0.54.1 0.303.0
golang.org/x/sys 0.30.0 0.32.0

Updates github.com/beevik/etree from 1.4.1 to 1.5.1

Release notes

Sourced from github.com/beevik/etree's releases.

Release v1.5.1

Fixes

  • Fixed a bug in InsertChildAt.

Release v1.5.0

Changes

  • Added Element function CreateChild, which calls a continuation function after creating and adding a child element.

Fixes

  • Removed a potential conflict between two ReadSettings values. When AttrSingleQuote is true, CanonicalAttrVal is forced to be false.
Changelog

Sourced from github.com/beevik/etree's changelog.

Release 1.5.1

Fixes

  • Fixed a bug in InsertChildAt.

Release 1.5.0

Changes

  • Added Element function CreateChild, which calls a continuation function after creating and adding a child element.

Fixes

  • Removed a potential conflict between two ReadSettings values. When AttrSingleQuote is true, CanonicalAttrVal is forced to be false.
Commits
  • b602ec3 Release v1.5.1
  • d7975c4 bug fix: InsertChildAt wrong index handling
  • 992bf5d Release v1.5.0
  • 7cf4882 Add CreateChild to create elements with continuations
  • 8965a48 Remove conflict between ReadSettings values
  • See full diff in compare view

Updates github.com/cilium/ebpf from 0.16.0 to 0.18.0

Release notes

Sourced from github.com/cilium/ebpf's releases.

v0.18.0

Initial Windows Support

This release adds support for eBPF on Windows through the eBPF for Windows runtime. Users must run a recent build of the main branch of eBPF for Windows, version 0.20.0 is not supported.

See the documentation and how to contribute to the Windows port.

Supported:

  • Basic map and program operations
  • Support for program loading, including native images (.sys files)
  • Pin operations use Windows-specific global object table instead of bpffs
  • Support for retrieving program/attach type from GUID

Not supported:

  • Feature tests
  • BTF
  • bpf2go
  • perf
  • ringbuf
  • rlimit
  • pin
  • Reading Windows ELFs

The Windows port is still very new and won't be as performant or stable as the Linux part of the code base. There is also no guarantee of stability at the moment.

Build System Improvements

  • Mounting GOCACHE and GOMODCACHE into containers for faster rebuilds with Podman
  • Added -verbose flag to bpf2go and gentypes tools
  • Verbosity defaults to Make's V= environment variable

Documentation

  • Added Windows user-facing documentation
  • Added instructions for working on the Windows port

Bugfixes

  • prog: Fixed program loading loop that would run forever if log size was over kernel maximum
  • prog: Added limits to program load retry attempts
  • collection: Fixed missing Map.Close in collectionLoader.loadMap
  • memory: Fixed off-by-one error in bounds check that prevented accessing the last byte of memory segments
  • map, program: Names passed to kernel are now automatically sanitized

Breaking Changes

ebpf:

  • Unexported SanitizeName function. Map and program names are now automatically sanitized.
  • The ELF reader now always allows dots in names but will strip them if necessary when making syscalls. This will break users with pinned objects that have dots in their names on kernels which don't support dots.

... (truncated)

Commits
  • e3234a1 golangci-lint: ignore QF1010 (convert byte slices to strings before printing)
  • 4d8e31a link: lowercase error strings to satisfy staticcheck
  • e2c5471 link: kprobe_test: satisfy staticcheck QF1001 (not A and not B)
  • 9f64b89 kallsyms: return from parseSymbol() after third field
  • e031491 *: remove references to embedded fields
  • 279fdf9 docs: replace main() with init() in rlimit example
  • d41cdc2 build(deps): bump golangci/golangci-lint-action from 6.5.0 to 7.0.0
  • 2e72b41 golangci-lint: convert configuration to v2
  • f6a5ebd map, program: always sanitize names passed to the kernel
  • 7b8cc32 cmd/bpf2go: add -verbose flag, hide output by default
  • Additional commits viewable in compare view

Updates github.com/jaypipes/ghw from 0.13.0 to 0.16.0

Release notes

Sourced from github.com/jaypipes/ghw's releases.

v0.16.0

What's Changed

New Contributors

Full Changelog: jaypipes/ghw@v0.15.0...v0.16.0

v0.15.0

What's Changed

Full Changelog: jaypipes/ghw@v0.0.14...v0.15.0

v0.14.0

What's Changed

New Contributors

Full Changelog: jaypipes/ghw@v0.13.0...v0.14.0

Commits
  • b2e06de Merge pull request #410 from infastin/model
  • 8bfbc92 feat: more cpu model extractors
  • 9e879f1 Merge pull request #409 from zaneb/multipath-wwn
  • f0ccc08 Get WWN for multipath block devices
  • 3773bc3 Merge pull request #408 from jaypipes/issue407
  • b36d6a3 fix PCI address in filepath for graphics cards
  • 8018747 Merge pull request #406 from jaypipes/use-slices-contais
  • bba8dfb deps: accelerator: remove deps
  • 8f0a31c Merge pull request #404 from karman-docker/fix_index_out_of_range
  • fa9ef4c fixed an out of range index access
  • Additional commits viewable in compare view

Updates github.com/klauspost/cpuid/v2 from 2.2.8 to 2.2.10

Release notes

Sourced from github.com/klauspost/cpuid/v2's releases.

v2.2.10

What's Changed

New Contributors

Full Changelog: klauspost/cpuid@v2.2.9...v2.2.10

v2.2.9

What's Changed

New Contributors

Full Changelog: klauspost/cpuid@v2.2.8...v2.2.9

Commits

Updates github.com/prometheus/client_golang from 1.20.5 to 1.22.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.22.0 - 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:

import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
  • [FEATURE] prometheus: Add new CollectorFunc utility #1724
  • [CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738
  • [FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743
  • [CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.22.0 / 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:

import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
  • [FEATURE] prometheus: Add new CollectorFunc utility #1724
  • [CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738
  • [FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743
  • [CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

1.21.1 / 2025-03-04

  • [BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low contention cases.
  • [BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags.

1.21.0 / 2025-02-17

⚠️ This release contains potential breaking change if you upgrade github.com/prometheus/common to 0.62+ together with client_golang. ⚠️

New common version changes model.NameValidationScheme global variable, which relaxes the validation of label names and metric name, allowing all UTF-8 characters. Typically, this should not break any user, unless your test or usage expects strict certain names to panic/fail on client_golang metric registration, gathering or scrape. In case of problems change model.NameValidationScheme to old model.LegacyValidation value in your project init function.

  • [BUGFIX] gocollector: Fix help message for runtime/metric metrics. #1583
  • [BUGFIX] prometheus: Fix Desc.String() method for no labels case. #1687
  • [ENHANCEMENT] prometheus: Optimize popular prometheus.BuildFQName function; now up to 30% faster. #1665
  • [ENHANCEMENT] prometheus: Optimize Inc, Add and Observe cumulative metrics; now up to 50% faster under high concurrent contention. #1661
  • [CHANGE] Upgrade prometheus/common to 0.62.0 which changes model.NameValidationScheme global variable. #1712
  • [CHANGE] Add support for Go 1.23. #1602
  • [FEATURE] process_collector: Add support for Darwin systems. #1600 #1616 #1625 #1675 #1715
  • [FEATURE] api: Add ability to invoke CloseIdleConnections on api.Client using api.Client.(CloseIdler).CloseIdleConnections() casting. #1513
  • [FEATURE] promhttp: Add promhttp.HandlerOpts.EnableOpenMetricsTextCreatedSamples option to create OpenMetrics _created lines. Not recommended unless you want to use opt-in Created Timestamp feature. Community works on OpenMetrics 2.0 format that should make those lines obsolete (they increase cardinality significantly). #1408
  • [FEATURE] prometheus: Add NewConstNativeHistogram function. #1654
Commits
  • d50be25 Cut 1.22.0 (#1793)
  • 1043db7 Cut 1.22.0-rc.0 (#1768)
  • e575c9c promhttp: Isolate zstd support and klauspost/compress library use to promhttp...
  • f2276aa Merge pull request #1764 from prometheus/dependabot/github_actions/github-act...
  • 9df772c build(deps): bump peter-evans/create-pull-request
  • a3548c5 Merge pull request #1754 from saswatamcode/exp-eh
  • 60fd2b0 Remove go.work file for now
  • 8f9d0de exp: Add dependabot config
  • c5cf981 Merge pull request #1762 from prometheus/release-1.21
  • 8a42da3 Fix ios build. (#1758)
  • Additional commits viewable in compare view

Updates github.com/prometheus/prometheus from 0.54.1 to 0.303.0

Commits
  • 3c49e69 Prepare release 3.3.0 (#16431)
  • 46883e0 Prepare release 3.3.0
  • 293f0c9 Merge pull request #16327 from machine424/3.3rc1
  • 0ffad22 Prepare release 3.3.0-rc.1
  • fb88008 golangci: Disable nolintlint due to known issues. (#16204)
  • a82bb77 [PERF] Remote-write: re-use memory to read WAL data (#16197)
  • a2aeb81 promql: return NaN from irate() if second-last sample is NaN (#16199)
  • b7fc01d Fix rules UI to display correct value for 'keepFiringFor'
  • f71ec8d fix(scrape): skip native histogram series if ingestion is disabled
  • 12d37a8 Prepare release 3.3.0-rc.0
  • Additional commits viewable in compare view

Updates golang.org/x/exp from 0.0.0-20240719175910-8a7402abbf56 to 0.0.0-20250106191152-7588d65b2ba8

Commits

Updates golang.org/x/sys from 0.30.0 to 0.32.0

Commits
  • 01aaa83 all: simplify code by using modern Go constructs
  • 1b2bd6b windows: replace all StringToUTF16 calls with UTF16FromString
  • 1c3b72f unix: update Linux kernel to 6.14
  • c175b6b windows: add cmsghdr and pktinfo structures
  • 3330b5e unix: support Readv, Preadv, Writev and Pwritev for darwin
  • 7401cce cpu: replace specific instructions with WORD in the function get_cpucfg on lo...
  • b8f7da6 cpu: add support for detecting cpu features on loong64
  • f2ce62c windows: add constants for PMTUD socket options
  • 74cfc93 all: upgrade go directive to at least 1.23.0 [generated]
  • See full diff in compare view

Updates k8s.io/api from 0.29.9 to 0.32.2

Commits
  • 78094a6 Update dependencies to v0.32.2 tag
  • 25d8df3 Merge pull request #129544pohly/automated-cherry-pick-of-#129543
  • 5b9e013 DRA API: bump maximum size of ReservedFor to 256
  • b0543a3 Merge remote-tracking branch 'origin/master' into release-1.32
  • f6bae9a Drop use of winreadlinkvolume godebug option
  • ea815d5 Merge remote-tracking branch 'origin/master' into release-1.32
  • c331a79 Revert to go1.22 windows filesystem stdlib behavior
  • f8e5e36 Merge pull request #128407 from ndixita/pod-level-resources
  • 84e0db8 Merge pull request #127857 from Jefftree/cle-v1alpha2
  • cbaf5a0 Merge pull request #128686 from thockin/take_over_pr-125233
  • Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.29.9 to 0.32.2

Commits
  • 59e9003 Merge remote-tracking branch 'origin/master' into release-1.32
  • 639247c Drop use of winreadlinkvolume godebug option
  • 220d7c3 Merge remote-tracking branch 'origin/master' into release-1.32
  • c199d3b Revert to go1.22 windows filesystem stdlib behavior
  • 16af2ff implement unsafe deletion, and wire it
  • 6ff8305 api: run codegen
  • ca9b8b2 api: add a new field to meta/v1 DeleteOptions
  • d941d9f Merge pull request #128503 from benluddy/cbor-codecs-featuregate
  • 3b4250f Wire serving codecs to CBOR feature gate.
  • daaad09 Merge pull request #128501 from benluddy/watch-cbor-seq
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.29.9 to 0.32.2

Commits
  • 86ff7a1 Update dependencies to v0.32.2 tag
  • 4765ade Merge remote-tracking branch 'origin/master' into release-1.32
  • 692a511 Drop use of winreadlinkvolume godebug option
  • 9df5099 Merge remote-tracking branch 'origin/master' into release-1.32
  • 120beb2 Revert to go1.22 windows filesystem stdlib behavior
  • 55d23e2 Align fake client-go clients with the main interface
  • 646e79b Run codegen
  • c475fe0 Generify fake clientsets
  • 955401c Merge pull request #128407 from ndixita/pod-level-resources
  • eddb107 Merge pull request #127857 from Jefftree/cle-v1alpha2
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 21, 2025
@dependabot
build(deps): bump the go-dependencies group across 1 directory with 1…
c2036d3 
…1 updates

Bumps the go-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/beevik/etree](https://github.com/beevik/etree) | `1.4.1` | `1.5.1` |
| [github.com/cilium/ebpf](https://github.com/cilium/ebpf) | `0.16.0` | `0.18.0` |
| [github.com/jaypipes/ghw](https://github.com/jaypipes/ghw) | `0.13.0` | `0.16.0` |
| [github.com/klauspost/cpuid/v2](https://github.com/klauspost/cpuid) | `2.2.8` | `2.2.10` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.20.5` | `1.22.0` |
| [github.com/prometheus/prometheus](https://github.com/prometheus/prometheus) | `0.54.1` | `0.303.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.30.0` | `0.32.0` |



Updates `github.com/beevik/etree` from 1.4.1 to 1.5.1
- [Release notes](https://github.com/beevik/etree/releases)
- [Changelog](https://github.com/beevik/etree/blob/main/RELEASE_NOTES.md)
- [Commits](beevik/etree@v1.4.1...v1.5.1)

Updates `github.com/cilium/ebpf` from 0.16.0 to 0.18.0
- [Release notes](https://github.com/cilium/ebpf/releases)
- [Commits](cilium/ebpf@v0.16.0...v0.18.0)

Updates `github.com/jaypipes/ghw` from 0.13.0 to 0.16.0
- [Release notes](https://github.com/jaypipes/ghw/releases)
- [Commits](jaypipes/ghw@v0.13.0...v0.16.0)

Updates `github.com/klauspost/cpuid/v2` from 2.2.8 to 2.2.10
- [Release notes](https://github.com/klauspost/cpuid/releases)
- [Changelog](https://github.com/klauspost/cpuid/blob/master/.goreleaser.yml)
- [Commits](klauspost/cpuid@v2.2.8...v2.2.10)

Updates `github.com/prometheus/client_golang` from 1.20.5 to 1.22.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.20.5...v1.22.0)

Updates `github.com/prometheus/prometheus` from 0.54.1 to 0.303.0
- [Release notes](https://github.com/prometheus/prometheus/releases)
- [Changelog](https://github.com/prometheus/prometheus/blob/main/CHANGELOG.md)
- [Commits](prometheus/prometheus@v0.54.1...v0.303.0)

Updates `golang.org/x/exp` from 0.0.0-20240719175910-8a7402abbf56 to 0.0.0-20250106191152-7588d65b2ba8
- [Commits](https://github.com/golang/exp/commits)

Updates `golang.org/x/sys` from 0.30.0 to 0.32.0
- [Commits](golang/sys@v0.30.0...v0.32.0)

Updates `k8s.io/api` from 0.29.9 to 0.32.2
- [Commits](kubernetes/api@v0.29.9...v0.32.2)

Updates `k8s.io/apimachinery` from 0.29.9 to 0.32.2
- [Commits](kubernetes/apimachinery@v0.29.9...v0.32.2)

Updates `k8s.io/client-go` from 0.29.9 to 0.32.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.29.9...v0.32.2)

---
updated-dependencies:
- dependency-name: github.com/beevik/etree
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/cilium/ebpf
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/jaypipes/ghw
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/klauspost/cpuid/v2
  dependency-version: 2.2.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/prometheus/prometheus
  dependency-version: 0.303.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/exp
  dependency-version: 0.0.0-20250106191152-7588d65b2ba8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: k8s.io/api
  dependency-version: 0.32.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.32.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.32.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/go-dependencies-f2787f16b0 branch from 7fce5de to c2036d3 Compare April 28, 2025 18:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants