Update Go dependencies #31

renovate · 2025-06-25T08:48:15Z

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Change	Type	Update
github.com/aws/smithy-go	`v1.22.4` -> `v1.23.0`	indirect	minor
github.com/emicklei/go-restful/v3	`v3.12.2` -> `v3.13.0`	indirect	minor
github.com/fsnotify/fsnotify	`v1.8.0` -> `v1.9.0`	indirect	minor
github.com/fxamacker/cbor/v2	`v2.8.0` -> `v2.9.0`	indirect	minor
github.com/go-jose/go-jose/v4	`v4.1.0` -> `v4.1.2`	indirect	patch
github.com/go-openapi/jsonpointer	`v0.21.1` -> `v0.22.0`	indirect	minor
github.com/go-openapi/jsonreference	`v0.21.0` -> `v0.21.1`	indirect	patch
github.com/go-openapi/swag	`v0.23.1` -> `v0.24.1`	indirect	minor
github.com/google/gnostic-models	`v0.6.9` -> `v0.7.0`	indirect	minor
github.com/grpc-ecosystem/grpc-gateway/v2	`v2.27.1` -> `v2.27.2`	indirect	patch
github.com/mailru/easyjson	`v0.9.0` -> `v0.9.1`	indirect	patch
github.com/miekg/dns	`v1.1.66` -> `v1.1.68`	indirect	patch
github.com/stretchr/testify	`v1.10.0` -> `v1.11.1`	require	minor
go (source)	`1.24.5` -> `1.25.1`	toolchain	minor
go.opentelemetry.io/auto/sdk	`v1.1.0` -> `v1.2.1`	indirect	minor
go.opentelemetry.io/otel	`v1.36.0` -> `v1.38.0`	indirect	minor
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc	`v0.12.2` -> `v0.14.0`	indirect	minor
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp	`v0.12.2` -> `v0.14.0`	indirect	minor
go.opentelemetry.io/otel/exporters/otlp/otlptrace	`v1.36.0` -> `v1.38.0`	indirect	minor
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	`v1.36.0` -> `v1.38.0`	indirect	minor
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	`v1.36.0` -> `v1.38.0`	indirect	minor
go.opentelemetry.io/otel/log	`v0.12.2` -> `v0.14.0`	indirect	minor
go.opentelemetry.io/otel/metric	`v1.36.0` -> `v1.38.0`	indirect	minor
go.opentelemetry.io/otel/sdk	`v1.36.0` -> `v1.38.0`	indirect	minor
go.opentelemetry.io/otel/sdk/log	`v0.12.2` -> `v0.14.0`	indirect	minor
go.opentelemetry.io/otel/trace	`v1.36.0` -> `v1.38.0`	indirect	minor
go.opentelemetry.io/proto/otlp	`v1.7.0` -> `v1.8.0`	indirect	minor
golang.org/x/crypto	`v0.39.0` -> `v0.42.0`	indirect	minor
golang.org/x/mod	`v0.25.0` -> `v0.28.0`	indirect	minor
golang.org/x/net	`v0.41.0` -> `v0.44.0`	indirect	minor
golang.org/x/oauth2	`v0.30.0` -> `v0.31.0`	indirect	minor
golang.org/x/sync	`v0.15.0` -> `v0.17.0`	indirect	minor
golang.org/x/sys	`v0.33.0` -> `v0.36.0`	indirect	minor
golang.org/x/term	`v0.32.0` -> `v0.35.0`	indirect	minor
golang.org/x/text	`v0.26.0` -> `v0.29.0`	indirect	minor
golang.org/x/time	`v0.12.0` -> `v0.13.0`	indirect	minor
golang.org/x/tools	`v0.34.0` -> `v0.37.0`	indirect	minor
google.golang.org/genproto/googleapis/api	`513f239` -> `9702482`	indirect	digest
google.golang.org/genproto/googleapis/rpc	`513f239` -> `9702482`	indirect	digest
google.golang.org/grpc	`v1.73.0` -> `v1.75.1`	indirect	minor
google.golang.org/protobuf	`v1.36.6` -> `v1.36.9`	indirect	patch
gopkg.in/evanphx/json-patch.v4	`v4.12.0` -> `v4.13.0`	indirect	minor
k8s.io/api	`v0.33.2` -> `v0.34.1`	require	minor
k8s.io/apiextensions-apiserver	`v0.33.2` -> `v0.34.1`	require	minor
k8s.io/apimachinery	`v0.33.2` -> `v0.34.1`	require	minor
k8s.io/client-go	`v0.33.2` -> `v0.34.1`	require	minor
k8s.io/kube-openapi	`8b98d1e` -> `589584f`	indirect	digest
k8s.io/utils	`4c0f3b2` -> `0af2bda`	indirect	digest
sigs.k8s.io/json	`cfa47c3` -> `2d32026`	indirect	digest
sigs.k8s.io/structured-merge-diff/v4	`v4.6.0` -> `v4.7.0`	indirect	minor
sigs.k8s.io/yaml	`v1.4.0` -> `v1.6.0`	indirect	minor

Release Notes

aws/smithy-go (github.com/aws/smithy-go)

`v1.23.0`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.23.0
- Feature: Sort map keys in JSON Document types.

`v1.22.5`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.22.5
- Feature: Add HTTP interceptors.

emicklei/go-restful (github.com/emicklei/go-restful/v3)

`v3.13.0`

Compare Source

optimize performance of path matching in CurlyRouter ( thanks @wenhuang, Wen Huang)

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

`v1.9.0`

Compare Source

Changes and fixes

all: make BufferedWatcher buffered again (#657)
inotify: fix race when adding/removing watches while a watched path is being deleted (#678, #686)
inotify: don't send empty event if a watched path is unmounted (#655)
inotify: don't register duplicate watches when watching both a symlink and its target; previously that would get "half-added" and removing the second would panic (#679)
kqueue: fix watching relative symlinks (#681)
kqueue: correctly mark pre-existing entries when watching a link to a dir on kqueue (#682)
illumos: don't send error if changed file is deleted while processing the event (#678)

fxamacker/cbor (github.com/fxamacker/cbor/v2)

`v2.9.0`

Compare Source

v2.9.0 adds new features, refactors tests, and improves docs. New features improve interoperability/transcoding between CBOR & JSON.

v2.9.0 passed fuzz tests and is production quality. However, the new TextUnmarshaler feature will continue being fuzz tested a bit longer due to recent changes. The recent changes are limited and don't affect other parts of the codec that passed ~2 billion execs fuzzing.

What's Changed

Refactor to use Go standard library functions by @fxamacker in #663
Improve DupMapKeyError message by @fxamacker in #670
Add options to support TextMarshaler and TextUnmarshaler by @benluddy in #672
Add optional support for json.Marshaler and json.Unmarshaler via transcoding by @benluddy in #673
Refactor tests and update comments by @fxamacker in #678
Use TextUnmarshaler on byte strings with ByteStringToStringAllowed. by @benluddy in #682

Docs

README: Document struct field tag "-" by @fxamacker in #653
Fix IntDecConvertSignedOrBigInt doc comment by @theory in #655
Update docs for TimeMode, Tag, RawTag, and add example for Embedded JSON Tag for CBOR by @fxamacker in #659
Update README for Embedded JSON Tag for CBOR (tag 262) by @fxamacker in #662
Fix typos in some comments by @adeinega in #671
Update README for v2.9.0 and add Red Hat as a user by @fxamacker in #684

CI

🔎 Details

Bump github/codeql-action from 3.28.13 to 3.28.15 by @dependabot[bot] in #651
Bump github/codeql-action from 3.28.15 to 3.28.16 by @dependabot[bot] in #658
Bump github/codeql-action from 3.28.16 to 3.28.17 by @dependabot[bot] in #660
Bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot[bot] in #661
Bump github/codeql-action from 3.28.17 to 3.28.18 by @dependabot[bot] in #664
Bump github/codeql-action from 3.28.18 to 3.28.19 by @dependabot[bot] in #667
Bump github/codeql-action from 3.28.19 to 3.29.0 by @dependabot[bot] in #674
Bump github/codeql-action from 3.29.0 to 3.29.2 by @dependabot[bot] in #680

Special Thanks

Many thanks to @benluddy for adding these new features! 🎉

Add opt-in support for encoding.TextMarshaler and encoding.TextUnmarshaler to encode and decode from CBOR text string.
Add opt-in support for json.Marshaler and json.Unmarshaler via user-provided transcoding function.

New Contributors

@theory made their first contribution in #655
@adeinega made their first contribution in #671

Full Changelog: fxamacker/cbor@v2.8.0...v2.9.0

go-jose/go-jose (github.com/go-jose/go-jose/v4)

`v4.1.2`

Compare Source

What's Changed

go-jose v4.1.2 improves some documentation, errors, and removes the only 3rd-party dependency.

Update go-jose documentation by @mcpherrinm in #198
Remove dependency on testify by @wardviaene in #197
Improve error message for invalid private keys by @ProjectMutilation in #195
JWK unsupported error when unmarshalling by @fprojetto in #191
Add JSONWebKey type to makeJWERecipient by @alvarolivie in #200
testutils/assert: remove True, Nil, NotNil by @jsha in #202

New Contributors

@wardviaene made their first contribution in #197
@fprojetto made their first contribution in #191
@alvarolivie made their first contribution in #200

Full Changelog: go-jose/go-jose@v4.1.1...v4.1.2

`v4.1.1`

Compare Source

What's Changed

Drop go-cmp dependency by @mcpherrinm in #186
jws: improve performance and allocations for ParseSignedCompact by @drakkan in #188
Add missing quote to unknown curve message #170 by @sudhanvaghebbale in #189
Fix incorrect validation by @ProjectMutilation in #192
Restore Go 1.23 compatibility by @anuraaga in #193

New Contributors

@drakkan made their first contribution in #188
@sudhanvaghebbale made their first contribution in #189
@ProjectMutilation made their first contribution in #192
@anuraaga made their first contribution in #193

Full Changelog: go-jose/go-jose@v4.1.0...v4.1.1

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

`v0.22.0`

Compare Source

`v0.21.2`

Compare Source

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

`v0.21.1`

Compare Source

go-openapi/swag (github.com/go-openapi/swag)

`v0.24.1`

Compare Source

`v0.24.0`

Compare Source

google/gnostic-models (github.com/google/gnostic-models)

`v0.7.0`

Compare Source

grpc-ecosystem/grpc-gateway (github.com/grpc-ecosystem/grpc-gateway/v2)

`v2.27.2`

Compare Source

What's Changed

Fix nested schema definition for body parameter (#3058) by @ilyongcho-moloco in #5827
Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v3 by @MB175 in #5857

New Contributors

@ilyongcho-moloco made their first contribution in #5827
@MB175 made their first contribution in #5857

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.1...v2.27.2

mailru/easyjson (github.com/mailru/easyjson)

`v0.9.1`

Compare Source

What's Changed

Fix unmarshal null to existing value by @neal in #407
Fix unmarshal null values for non-pointer fields by @neal in #411
feat: Add version and commit information to easyjson generator by @stickpro in #424

New Contributors

@neal made their first contribution in #407
@stickpro made their first contribution in #424

Full Changelog: mailru/easyjson@v0.9.0...v0.9.1

miekg/dns (github.com/miekg/dns)

`v1.1.68`

Compare Source

`v1.1.67`

Compare Source

stretchr/testify (github.com/stretchr/testify)

`v1.11.1`

Compare Source

This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Backport #1786 to release/1.11: mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in #1788

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

`v1.11.0`

Compare Source

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Call stack perf change for CallerInfo by @mikeauclair in #1614
Lazily render mock diff output on successful match by @mikeauclair in #1615
assert: check early in Eventually, EventuallyWithT, and Never by @cszczepaniak in #1427
assert: add IsNotType by @bartventer in #1730
assert.JSONEq: shortcut if same strings by @dolmen in #1754
assert.YAMLEq: shortcut if same strings by @dolmen in #1755
assert: faster and simpler isEmpty using reflect.Value.IsZero by @dolmen in #1761
suite: faster methods filtering (internal refactor) by @dolmen in #1758

Fixes

assert.ErrorAs: log target type by @craig65535 in #1345
Fix failure message formatting for Positive and Negative asserts in #1062
Improve ErrorIs message when error is nil but an error was expected by @tsioftas in #1681
fix Subset/NotSubset when calling with mixed input types by @siliconbrain in #1729
Improve ErrorAs failure message when error is nil by @ccoVeille in #1734
mock.AssertNumberOfCalls: improve error msg by @3scalation in #1743

Documentation, Build & CI

docs: Fix typo in README by @alexandear in #1688
Replace deprecated io/ioutil with io and os by @alexandear in #1684
Document consequences of calling t.FailNow() by @greg0ire in #1710
chore: update docs for Unset #1621 by @techfg in #1709
README: apply gofmt to examples by @alexandear in #1687
refactor: use %q and %T to simplify fmt.Sprintf by @alexandear in #1674
Propose Christophe Colombier (ccoVeille) as approver by @brackendawson in #1716
Update documentation for the Error function in assert or require package by @architagr in #1675
assert: remove deprecated build constraints by @alexandear in #1671
assert: apply gofumpt to internal test suite by @ccoVeille in #1739
CI: fix shebang in .ci.*.sh scripts by @dolmen in #1746
assert,require: enable parallel testing on (almost) all top tests by @dolmen in #1747
suite.Passed: add one more status test report by @Ararsa-Derese in #1706
Add Helper() method in internal mocks and assert.CollectT by @dolmen in #1423
assert.Same/NotSame: improve usage of Sprintf by @ccoVeille in #1742
mock: enable parallel testing on internal testsuite by @dolmen in #1756
suite: cleanup use of 'testing' internals at runtime by @dolmen in #1751
assert: check test failure message for Empty and NotEmpty by @ccoVeille in #1745
deps: fix dependency cycle with objx (again) by @dolmen in #1567
assert.Empty: comprehensive doc of "Empty"-ness rules by @dolmen in #1753
doc: improve godoc of top level 'testify' package by @dolmen in #1760
assert.ErrorAs: simplify retrieving the type name by @ccoVeille in #1740
assert.EqualValues: improve test coverage to 100% by @dolmen in #1763
suite.Run: simplify running of Setup/TeardownSuite by @renzoarreaza in #1769
assert.CallerInfo: micro optimization by using LastIndexByte by @dolmen in #1767
assert.CallerInfo: micro cleanup by @dolmen in #1768
assert: refactor TestFileExists and TestDirExists tests to enable parallel testing by @dolmen in #1766
suite.Run: refactor handling of stats for improved readability by @dolmen in #1764
tests: improve captureTestingT helper by @ccoVeille in #1741
build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #1778

New Contributors

@greg0ire made their first contribution in #1710
@techfg made their first contribution in #1709
@mikeauclair made their first contribution in #1614
@cszczepaniak made their first contribution in #1427
@architagr made their first contribution in #1675
@tsioftas made their first contribution in #1681
@siliconbrain made their first contribution in #1729
@bartventer made their first contribution in #1730
@Ararsa-Derese made their first contribution in #1706
@renzoarreaza made their first contribution in #1769
@3scalation made their first contribution in #1743

Full Changelog: stretchr/testify@v1.10.0...v1.11.0

golang/go (go)

`v1.25.1`

`v1.25.0`

`v1.24.7`

`v1.24.6`

open-telemetry/opentelemetry-go-instrumentation (go.opentelemetry.io/auto/sdk)

`v1.2.1`

Fixed

Fix uint32 bounding on 32 bit architectures in the go.opentelemetry.io/auto/sdk module. (#2810)

`v1.2.0`

[!NOTE]
This is the last release version that will support building the auto-instrumentation CLI using Go 1.23.
The next release will require development to be done using Go >= 1.24.

Added

Cache offsets for golang.org/x/net 0.42.0. (#2503)
Cache offsets for google.golang.org/grpc 1.74.2. (#2546)
Cache offsets for google.golang.org/grpc 1.76.0-dev. (#2596)
Allow configuration of the resource using a resource.Detector. (#2598)
- The WithResourceDetector function is added to go.opentelemetry.io/auto/pipeline/otelsdk.
- The WithEnv function is updated to parse the OTEL_RESOURCE_DETECTOR environment variable.
  Values are expected to be a comma-separated list of resource detector IDs registered with the autodetect package.
Cache offsets for Go 1.23.12. (#2603)
Cache offsets for Go 1.24.6. (#2603)
Cache offsets for golang.org/x/net 0.43.0. (#2615)
Cache offsets for Go 1.25.0. (#2651)
Cache offsets for google.golang.org/grpc 1.75.0. (#2686)
Cache offsets for github.com/segmentio/kafka-go 0.4.49. (#2699)
Cache offsets for go.opentelemetry.io/otel v1.38.0. (#2726)
Cache offsets for Go 1.24.7. (#2747)
Cache offsets for Go 1.25.1. (#2747)
Cache offsets for golang.org/x/net 0.44.0. (#2773)
Cache offsets for google.golang.org/grpc 1.72.3. (#2787)
Cache offsets for google.golang.org/grpc 1.73.1. (#2787)
Cache offsets for google.golang.org/grpc 1.74.3. (#2787)
Cache offsets for google.golang.org/grpc 1.75.1. (#2787)

Changed

Upgrade go.opentelemetry.io/auto semconv to v1.37.0. ([#2763](https://redirect.github.com/open-telemetry/opentelemetry-go-instrumentat

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-08-27T23:15:49Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

1 additional dependency was updated

Details:

Package	Change
`github.com/modern-go/reflect2`	`v1.0.2` -> `v1.0.3-0.20250322232337-35a7c28c31ee`

renovate bot force-pushed the renovate/go-dependencies branch 5 times, most recently from 698ec27 to e4e9c29 Compare June 27, 2025 19:40

renovate bot force-pushed the renovate/go-dependencies branch 7 times, most recently from 4f6fbc0 to 1fe71cc Compare July 14, 2025 06:09

renovate bot force-pushed the renovate/go-dependencies branch 5 times, most recently from d5afdc5 to 349f9bb Compare July 23, 2025 00:22

renovate bot force-pushed the renovate/go-dependencies branch 10 times, most recently from 3762033 to 59f4ea1 Compare July 28, 2025 20:39

renovate bot force-pushed the renovate/go-dependencies branch 3 times, most recently from 65421d6 to 3b69ac1 Compare August 1, 2025 22:38

renovate bot force-pushed the renovate/go-dependencies branch 6 times, most recently from 2d26761 to 3c0154f Compare August 27, 2025 23:15

renovate bot force-pushed the renovate/go-dependencies branch 4 times, most recently from d902bbb to d3b498d Compare September 7, 2025 01:02

renovate bot force-pushed the renovate/go-dependencies branch 15 times, most recently from 7b19b7f to 0708c5a Compare September 13, 2025 09:00

renovate bot force-pushed the renovate/go-dependencies branch from 0708c5a to a09704c Compare September 15, 2025 19:56

Update Go dependencies

effcc8d

renovate bot force-pushed the renovate/go-dependencies branch from a09704c to effcc8d Compare September 16, 2025 01:45

abelfodil merged commit 297a797 into main Sep 16, 2025
3 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update Go dependencies #31

Update Go dependencies #31

Uh oh!

renovate bot commented Jun 25, 2025 •

edited

Loading

Uh oh!

renovate bot commented Aug 27, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Update Go dependencies #31

Update Go dependencies #31

Uh oh!

Conversation

renovate bot commented Jun 25, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

General Highlights

Module Highlights

General Highlights

Module Highlights

Changes and fixes

What's Changed

Docs

CI

Special Thanks

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

New Contributors

Fixed

Added

Changed

Configuration

Uh oh!

renovate bot commented Aug 27, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: go.mod

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Jun 25, 2025 •

edited

Loading

renovate bot commented Aug 27, 2025 •

edited

Loading