Skip to content

Bump the github-dependencies group with 47 updates #1348

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Bump the github-dependencies group with 47 updates #1348

wants to merge 1 commit into from
+42,504 −45,073

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 24, 2025

Bumps the github-dependencies group with 47 updates:

Package From To
github.com/evanphx/json-patch 5.9.0+incompatible 5.9.11+incompatible
github.com/prometheus/client_golang 1.22.0 1.23.2
github.com/prometheus/client_model 0.6.1 0.6.2
github.com/prometheus/common 0.62.0 0.66.1
google.golang.org/grpc 1.72.1 1.77.0
google.golang.org/protobuf 1.36.5 1.36.10
cel.dev/expr 0.24.0 0.25.1
github.com/antlr4-go/antlr/v4 4.13.0 4.13.1
github.com/coreos/go-systemd/v22 22.5.0 22.6.0
github.com/emicklei/go-restful/v3 3.12.2 3.13.0
github.com/go-logr/logr 1.4.2 1.4.3
github.com/go-openapi/jsonpointer 0.21.0 0.22.3
github.com/go-openapi/jsonreference 0.21.0 0.21.3
github.com/go-openapi/swag 0.23.0 0.25.3
github.com/google/cel-go 0.26.0 0.26.1
github.com/google/gnostic-models 0.7.0 0.7.1
github.com/grpc-ecosystem/grpc-gateway/v2 2.26.3 2.27.3
github.com/prometheus/procfs 0.15.1 0.16.1
github.com/spf13/cobra 1.9.1 1.10.1
github.com/spf13/pflag 1.0.6 1.0.9
github.com/stoewer/go-strcase 1.3.0 1.3.1
go.etcd.io/etcd/api/v3 3.6.4 3.6.6
go.etcd.io/etcd/client/pkg/v3 3.6.4 3.6.6
go.etcd.io/etcd/client/v3 3.6.4 3.6.6
go.opentelemetry.io/auto/sdk 1.1.0 1.2.1
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.60.0 0.63.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.58.0 0.63.0
go.opentelemetry.io/otel 1.35.0 1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace 1.34.0 1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 1.34.0 1.38.0
go.opentelemetry.io/otel/metric 1.35.0 1.38.0
go.opentelemetry.io/otel/sdk 1.34.0 1.38.0
go.opentelemetry.io/otel/trace 1.35.0 1.38.0
go.opentelemetry.io/proto/otlp 1.5.0 1.7.1
go.uber.org/zap 1.27.0 1.27.1
go.yaml.in/yaml/v2 2.4.2 2.4.3
golang.org/x/crypto 0.37.0 0.43.0
golang.org/x/net 0.39.0 0.46.1-0.20251013234738-63d1a5100f82
golang.org/x/oauth2 0.27.0 0.32.0
golang.org/x/sync 0.13.0 0.17.0
golang.org/x/sys 0.32.0 0.37.0
golang.org/x/term 0.31.0 0.36.0
golang.org/x/text 0.24.0 0.30.0
golang.org/x/time 0.9.0 0.14.0
google.golang.org/genproto/googleapis/api 0.0.0-20250303144028-a0af3efb3deb 0.0.0-20251022142026-3a174f9686a8
google.golang.org/genproto/googleapis/rpc 0.0.0-20250303144028-a0af3efb3deb 0.0.0-20251022142026-3a174f9686a8
gopkg.in/evanphx/json-patch.v4 4.12.0 4.13.0

Updates github.com/evanphx/json-patch from 5.9.0+incompatible to 5.9.11+incompatible

Release notes

Sourced from github.com/evanphx/json-patch's releases.

v5.9.11

What's Changed

Full Changelog: evanphx/json-patch@v5.9.10...v5.9.11

v5.9.10

What's Changed

New Contributors

Full Changelog: evanphx/json-patch@v5.9.0...v5.9.10

Commits
  • 84a4bb1 Merge pull request #209 from skitt/export-errs-v5
  • 7a7a88a Export errBadJSONDoc and errBadJSONPatch errors
  • bd18525 Upgrade go-flags
  • 42f26cb Fix spacing
  • 0a3482b Merge pull request #206 from koba1t/remove_unmaintained_error_pkg
  • 106306d remove unmaintained errors pkg
  • e7cfbbb Merge pull request #203 from skitt/drop-gopkgin-v5
  • 61e1ad7 Drop the reference to gopkg.in for v5
  • See full diff in compare view

Updates github.com/prometheus/client_golang from 1.22.0 to 1.23.2

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.2 - 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1 - 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

v1.23.0 - 2025-07-30

  • [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812
  • [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766
  • [FEATURE] Add exemplars for native histograms #1686
  • [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823
  • [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833
  • [BUGFIX] exp/api: client prompt return on context cancellation #1729

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

1.23.0 / 2025-07-30

  • [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812
  • [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766
  • [FEATURE] Add exemplars for native histograms #1686
  • [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823
  • [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833
  • [BUGFIX] exp/api: client prompt return on context cancellation #1729
Commits

Updates github.com/prometheus/client_model from 0.6.1 to 0.6.2

Release notes

Sourced from github.com/prometheus/client_model's releases.

v0.6.2

What's Changed

Full Changelog: prometheus/client_model@v0.6.1...v0.6.2

Commits
  • eb136e5 Merge pull request #119 from prometheus/superq/google.golang.org/protobuf
  • bf7f2ca Update golanci-lint to v2.
  • 7e9b56c Bump google.golang.org/protobuf from 1.36.5 to 1.36.6
  • ef699ce Merge pull request #116 from prometheus/repo_sync
  • bf8b12e Update common Prometheus files
  • 5b93968 Merge pull request #115 from prometheus/repo_sync
  • ae83ddc Update common Prometheus files
  • afe0b21 Merge pull request #114 from prometheus/repo_sync
  • 75e1daf Update common Prometheus files
  • 73608e2 Merge pull request #113 from prometheus/dependabot/go_modules/google.golang.o...
  • Additional commits viewable in compare view

Updates github.com/prometheus/common from 0.62.0 to 0.66.1

Release notes

Sourced from github.com/prometheus/common's releases.

v0.66.1

This release has no functional changes, it just drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).

What's Changed

Full Changelog: prometheus/common@v1.20.99...v0.66.1

v0.66.0

⚠️ Breaking Changes ⚠️

  • A default-constructed TextParser will be invalid. It must have a valid scheme set, so users should use the NewTextParser function to create a valid TextParser. Otherwise parsing will panic with "Invalid name validation scheme requested: unset".

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from github.com/prometheus/common's changelog.

v0.66.1 / 2025-09-05

This release has no functional changes, it just drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).

What's Changed

Full Changelog: prometheus/common@v1.20.99...v0.66.1

v0.66.0 / 2025-09-02

⚠️ Breaking Changes ⚠️

  • A default-constructed TextParser will be invalid. It must have a valid scheme set, so users should use the NewTextParser function to create a valid TextParser. Otherwise parsing will panic with "Invalid name validation scheme requested: unset".

What's Changed

New Contributors

... (truncated)

Commits
  • 8975dde Revert "Use go.uber.org/atomic instead of sync/atomic (#825)" (#838)
  • 08d7f66 Move to supported version of yaml parser (#834)
  • 80e275e Revert "Use github.com/grafana/regexp instead of regexp" (#835)
  • 4c2f9e7 Merge pull request #832 from roidelapluie/retract
  • e120453 Retract v1.20.3
  • 2b1487c Merge pull request #827 from prometheus/dependabot/go_modules/github.com/stre...
  • db38951 Merge pull request #829 from prometheus/dependabot/go_modules/golang.org/x/ne...
  • 9e19a90 build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1
  • a1ba2a7 build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0
  • c7a031c Merge pull request #830 from prometheus/dependabot/go_modules/google.golang.o...
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.72.1 to 1.77.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.77.0

API Changes

  • mem: Replace the Reader interface with a struct for better performance and maintainability. (#8669)

Behavior Changes

  • balancer/pickfirst: Remove support for the old pick_first LB policy via the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false. The new pick_first has been the default since v1.71.0. (#8672)

Bug Fixes

  • xdsclient: Fix a race condition in the ADS stream implementation that could result in resource-not-found errors, causing the gRPC client channel to move to TransientFailure. (#8605)
  • client: Ignore HTTP status header for gRPC streams. (#8548)
  • client: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (#8534)
  • client: Fix a bug where default port 443 was not automatically added to addresses without a specified port when sent to a proxy.
    • Setting environment variable GRPC_EXPERIMENTAL_ENABLE_DEFAULT_PORT_FOR_PROXY_TARGET=false disables this change; please file a bug if any problems are encountered as we will remove this option soon. (#8613)
  • balancer/pickfirst: Fix a bug where duplicate addresses were not being ignored as intended. (#8611)
  • server: Fix a bug that caused overcounting of channelz metrics for successful and failed streams. (#8573)
  • balancer/pickfirst: When configured, shuffle addresses in resolver updates that lack endpoints. Since gRPC automatically adds endpoints to resolver updates, this bug only affects custom LB policies that delegate to pick_first but don't set endpoints. (#8610)
  • mem: Clear large buffers before re-using. (#8670)

Performance Improvements

  • transport: Reduce heap allocations to reduce time spent in garbage collection. (#8624, #8630, #8639, #8668)
  • transport: Avoid copies when reading and writing Data frames. (#8657, #8667)
  • mem: Avoid clearing newly allocated buffers. (#8670)

New Features

  • outlierdetection: Add metrics specified in gRFC A91. (#8644)
  • stats/opentelemetry: Add support for optional label grpc.lb.backend_service in per-call metrics (#8637)
  • xds: Add support for JWT Call Credentials as specified in gRFC A97. Set environment variable GRPC_EXPERIMENTAL_XDS_BOOTSTRAP_CALL_CREDS=true to enable this feature. (#8536)
  • experimental/stats: Add support for up/down counters. (#8581)

Release 1.76.0

Dependencies

Bug Fixes

  • client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#8523)
  • client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#8518)
  • pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#8615)

... (truncated)

Commits

Updates google.golang.org/protobuf from 1.36.5 to 1.36.10

Updates cel.dev/expr from 0.24.0 to 0.25.1

Release notes

Sourced from cel.dev/expr's releases.

Release v0.25.1

Minor additions to the v0.25.0 release

What's Changed

Full Changelog: google/cel-spec@v0.25.0...v0.25.1

Release v0.25.0

What's Changed

New Contributors

Full Changelog: google/cel-spec@v0.24.0...v0.25.0

Commits
  • 7f3c4c5 Add parsing tests for string and bytes literals (#489)
  • d3430a8 Remove test/v1 directory and its protos (#487)
  • 3c96c71 Remove remaining google.rpc.Status deps from cel-spec (#486)
  • 750024a Clarify formatting decimals, add %f formatting test cases around rounding (#485)
  • 9dd5f5c Remove int(enum) -> int signature (#483)
  • 808c918 Remove TOC from language definition (#482)
  • bad3928 Add a test case for lastIndexOf in string_ext against an empty string (#468)
  • 14cdd3f Tests for selector, function, and field names formerly defined as reserved (#...
  • 8a33394 Remove orphaned ToC entry for enums as ints from the specification (#476)
  • a8f582a Initial version of the policy specification (#477)
  • See full diff in compare view

Updates github.com/antlr4-go/antlr/v4 from 4.13.0 to 4.13.1

Release notes

Sourced from github.com/antlr4-go/antlr/v4's releases.

Release 4.13.1

The 4.13.1 release has:

  • Some minor performance improvements
  • An optional build tag -tags antlr.nomutex which allows a build without using mutexes, when the user knows they will not use it with multiple go routines. (Note, somewhat experimental)

Note that I did not remove the sort.Slices calls. They will not be experimental for long and are implemented efficently. Please make a fork if you must use it without this dependency. Maybe review whether you need to do so for the sake of one call.

Commits

Updates github.com/coreos/go-systemd/v22 from 22.5.0 to 22.6.0

Release notes

Sourced from github.com/coreos/go-systemd/v22's releases.

v22.6.0

This release bumps Go requirement to 1.23, modernizes code, improves CI and documentation, fixes a few bugs, and adds a new dbus method.

What's Changed

@dependabot
Bump the github-dependencies group with 47 updates
44271b2 
Bumps the github-dependencies group with 47 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/evanphx/json-patch](https://github.com/evanphx/json-patch) | `5.9.0+incompatible` | `5.9.11+incompatible` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.22.0` | `1.23.2` |
| [github.com/prometheus/client_model](https://github.com/prometheus/client_model) | `0.6.1` | `0.6.2` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.62.0` | `0.66.1` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.72.1` | `1.77.0` |
| google.golang.org/protobuf | `1.36.5` | `1.36.10` |
| [cel.dev/expr](https://github.com/google/cel-spec) | `0.24.0` | `0.25.1` |
| [github.com/antlr4-go/antlr/v4](https://github.com/antlr4-go/antlr) | `4.13.0` | `4.13.1` |
| [github.com/coreos/go-systemd/v22](https://github.com/coreos/go-systemd) | `22.5.0` | `22.6.0` |
| [github.com/emicklei/go-restful/v3](https://github.com/emicklei/go-restful) | `3.12.2` | `3.13.0` |
| [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.2` | `1.4.3` |
| [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) | `0.21.0` | `0.22.3` |
| [github.com/go-openapi/jsonreference](https://github.com/go-openapi/jsonreference) | `0.21.0` | `0.21.3` |
| [github.com/go-openapi/swag](https://github.com/go-openapi/swag) | `0.23.0` | `0.25.3` |
| [github.com/google/cel-go](https://github.com/google/cel-go) | `0.26.0` | `0.26.1` |
| [github.com/google/gnostic-models](https://github.com/google/gnostic-models) | `0.7.0` | `0.7.1` |
| [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.26.3` | `2.27.3` |
| [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.15.1` | `0.16.1` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.9.1` | `1.10.1` |
| [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.6` | `1.0.9` |
| [github.com/stoewer/go-strcase](https://github.com/stoewer/go-strcase) | `1.3.0` | `1.3.1` |
| [go.etcd.io/etcd/api/v3](https://github.com/etcd-io/etcd) | `3.6.4` | `3.6.6` |
| [go.etcd.io/etcd/client/pkg/v3](https://github.com/etcd-io/etcd) | `3.6.4` | `3.6.6` |
| [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) | `3.6.4` | `3.6.6` |
| [go.opentelemetry.io/auto/sdk](https://github.com/open-telemetry/opentelemetry-go-instrumentation) | `1.1.0` | `1.2.1` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.60.0` | `0.63.0` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.58.0` | `0.63.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.35.0` | `1.38.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.34.0` | `1.38.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.34.0` | `1.38.0` |
| [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.35.0` | `1.38.0` |
| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.34.0` | `1.38.0` |
| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.35.0` | `1.38.0` |
| [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go) | `1.5.0` | `1.7.1` |
| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.0` | `1.27.1` |
| [go.yaml.in/yaml/v2](https://github.com/yaml/go-yaml) | `2.4.2` | `2.4.3` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.37.0` | `0.43.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.39.0` | `0.46.1-0.20251013234738-63d1a5100f82` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.27.0` | `0.32.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.13.0` | `0.17.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.32.0` | `0.37.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.31.0` | `0.36.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.24.0` | `0.30.0` |
| [golang.org/x/time](https://github.com/golang/time) | `0.9.0` | `0.14.0` |
| [google.golang.org/genproto/googleapis/api](https://github.com/googleapis/go-genproto) | `0.0.0-20250303144028-a0af3efb3deb` | `0.0.0-20251022142026-3a174f9686a8` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20250303144028-a0af3efb3deb` | `0.0.0-20251022142026-3a174f9686a8` |
| gopkg.in/evanphx/json-patch.v4 | `4.12.0` | `4.13.0` |


Updates `github.com/evanphx/json-patch` from 5.9.0+incompatible to 5.9.11+incompatible
- [Release notes](https://github.com/evanphx/json-patch/releases)
- [Commits](evanphx/json-patch@v5.9.0...v5.9.11)

Updates `github.com/prometheus/client_golang` from 1.22.0 to 1.23.2
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.22.0...v1.23.2)

Updates `github.com/prometheus/client_model` from 0.6.1 to 0.6.2
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](prometheus/client_model@v0.6.1...v0.6.2)

Updates `github.com/prometheus/common` from 0.62.0 to 0.66.1
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.62.0...v0.66.1)

Updates `google.golang.org/grpc` from 1.72.1 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.72.1...v1.77.0)

Updates `google.golang.org/protobuf` from 1.36.5 to 1.36.10

Updates `cel.dev/expr` from 0.24.0 to 0.25.1
- [Release notes](https://github.com/google/cel-spec/releases)
- [Commits](google/cel-spec@v0.24.0...v0.25.1)

Updates `github.com/antlr4-go/antlr/v4` from 4.13.0 to 4.13.1
- [Release notes](https://github.com/antlr4-go/antlr/releases)
- [Commits](antlr4-go/antlr@v4.13.0...v4.13.1)

Updates `github.com/coreos/go-systemd/v22` from 22.5.0 to 22.6.0
- [Release notes](https://github.com/coreos/go-systemd/releases)
- [Commits](coreos/go-systemd@v22.5.0...v22.6.0)

Updates `github.com/emicklei/go-restful/v3` from 3.12.2 to 3.13.0
- [Release notes](https://github.com/emicklei/go-restful/releases)
- [Changelog](https://github.com/emicklei/go-restful/blob/v3/CHANGES.md)
- [Commits](emicklei/go-restful@v3.12.2...v3.13.0)

Updates `github.com/go-logr/logr` from 1.4.2 to 1.4.3
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](go-logr/logr@v1.4.2...v1.4.3)

Updates `github.com/go-openapi/jsonpointer` from 0.21.0 to 0.22.3
- [Release notes](https://github.com/go-openapi/jsonpointer/releases)
- [Commits](go-openapi/jsonpointer@v0.21.0...v0.22.3)

Updates `github.com/go-openapi/jsonreference` from 0.21.0 to 0.21.3
- [Commits](go-openapi/jsonreference@v0.21.0...v0.21.3)

Updates `github.com/go-openapi/swag` from 0.23.0 to 0.25.3
- [Commits](go-openapi/swag@v0.23.0...v0.25.3)

Updates `github.com/google/cel-go` from 0.26.0 to 0.26.1
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.26.0...v0.26.1)

Updates `github.com/google/gnostic-models` from 0.7.0 to 0.7.1
- [Commits](google/gnostic-models@v0.7.0...v0.7.1)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.26.3 to 2.27.3
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/main/.goreleaser.yml)
- [Commits](grpc-ecosystem/grpc-gateway@v2.26.3...v2.27.3)

Updates `github.com/prometheus/procfs` from 0.15.1 to 0.16.1
- [Release notes](https://github.com/prometheus/procfs/releases)
- [Commits](prometheus/procfs@v0.15.1...v0.16.1)

Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.1
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.9.1...v1.10.1)

Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.9
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.6...v1.0.9)

Updates `github.com/stoewer/go-strcase` from 1.3.0 to 1.3.1
- [Release notes](https://github.com/stoewer/go-strcase/releases)
- [Commits](stoewer/go-strcase@v1.3.0...v1.3.1)

Updates `go.etcd.io/etcd/api/v3` from 3.6.4 to 3.6.6
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.6.4...v3.6.6)

Updates `go.etcd.io/etcd/client/pkg/v3` from 3.6.4 to 3.6.6
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.6.4...v3.6.6)

Updates `go.etcd.io/etcd/client/v3` from 3.6.4 to 3.6.6
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.6.4...v3.6.6)

Updates `go.opentelemetry.io/auto/sdk` from 1.1.0 to 1.2.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-instrumentation/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-instrumentation@sdk/v1.1.0...sdk/v1.2.1)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.60.0 to 0.63.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.60.0...zpages/v0.63.0)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.58.0 to 0.63.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.58.0...zpages/v0.63.0)

Updates `go.opentelemetry.io/otel` from 1.35.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.38.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.34.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.34.0...v1.38.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.34.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.34.0...v1.38.0)

Updates `go.opentelemetry.io/otel/metric` from 1.35.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.38.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.34.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.34.0...v1.38.0)

Updates `go.opentelemetry.io/otel/trace` from 1.35.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.38.0)

Updates `go.opentelemetry.io/proto/otlp` from 1.5.0 to 1.7.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases)
- [Commits](open-telemetry/opentelemetry-proto-go@v1.5.0...v1.7.1)

Updates `go.uber.org/zap` from 1.27.0 to 1.27.1
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.27.0...v1.27.1)

Updates `go.yaml.in/yaml/v2` from 2.4.2 to 2.4.3
- [Commits](yaml/go-yaml@v2.4.2...v2.4.3)

Updates `golang.org/x/crypto` from 0.37.0 to 0.43.0
- [Commits](golang/crypto@v0.37.0...v0.43.0)

Updates `golang.org/x/net` from 0.39.0 to 0.46.1-0.20251013234738-63d1a5100f82
- [Commits](https://github.com/golang/net/commits)

Updates `golang.org/x/oauth2` from 0.27.0 to 0.32.0
- [Commits](golang/oauth2@v0.27.0...v0.32.0)

Updates `golang.org/x/sync` from 0.13.0 to 0.17.0
- [Commits](golang/sync@v0.13.0...v0.17.0)

Updates `golang.org/x/sys` from 0.32.0 to 0.37.0
- [Commits](golang/sys@v0.32.0...v0.37.0)

Updates `golang.org/x/term` from 0.31.0 to 0.36.0
- [Commits](golang/term@v0.31.0...v0.36.0)

Updates `golang.org/x/text` from 0.24.0 to 0.30.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.24.0...v0.30.0)

Updates `golang.org/x/time` from 0.9.0 to 0.14.0
- [Commits](golang/time@v0.9.0...v0.14.0)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250303144028-a0af3efb3deb to 0.0.0-20251022142026-3a174f9686a8
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250303144028-a0af3efb3deb to 0.0.0-20251022142026-3a174f9686a8
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `gopkg.in/evanphx/json-patch.v4` from 4.12.0 to 4.13.0

---
updated-dependencies:
- dependency-name: github.com/evanphx/json-patch
  dependency-version: 5.9.11+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.23.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/prometheus/common
  dependency-version: 0.66.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.77.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: cel.dev/expr
  dependency-version: 0.25.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/antlr4-go/antlr/v4
  dependency-version: 4.13.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/coreos/go-systemd/v22
  dependency-version: 22.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/emicklei/go-restful/v3
  dependency-version: 3.13.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/go-logr/logr
  dependency-version: 1.4.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/jsonpointer
  dependency-version: 0.22.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/jsonreference
  dependency-version: 0.21.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/swag
  dependency-version: 0.25.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/google/cel-go
  dependency-version: 0.26.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/google/gnostic-models
  dependency-version: 0.7.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.27.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/prometheus/procfs
  dependency-version: 0.16.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/stoewer/go-strcase
  dependency-version: 1.3.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: go.etcd.io/etcd/api/v3
  dependency-version: 3.6.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: go.etcd.io/etcd/client/pkg/v3
  dependency-version: 3.6.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: go.etcd.io/etcd/client/v3
  dependency-version: 3.6.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/auto/sdk
  dependency-version: 1.2.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.63.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-version: 0.63.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
  dependency-version: 1.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-version: 1.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/proto/otlp
  dependency-version: 1.7.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.uber.org/zap
  dependency-version: 1.27.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: go.yaml.in/yaml/v2
  dependency-version: 2.4.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: golang.org/x/crypto
  dependency-version: 0.43.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.46.1-0.20251013234738-63d1a5100f82
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.32.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.17.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.37.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/term
  dependency-version: 0.36.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.30.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/time
  dependency-version: 0.14.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20251022142026-3a174f9686a8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20251022142026-3a174f9686a8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: gopkg.in/evanphx/json-patch.v4
  dependency-version: 4.13.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added area/dependency Issues or PRs related to dependency changes ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. labels Nov 24, 2025
@k8s-ci-robot
Copy link
Contributor

k8s-ci-robot commented Nov 24, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign jsafrane for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot
Copy link
Contributor

k8s-ci-robot commented Nov 24, 2025

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a github.com member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@k8s-ci-robot k8s-ci-robot added size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. labels Nov 24, 2025
@k8s-ci-robot
Copy link
Contributor

k8s-ci-robot commented Nov 24, 2025

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
pull-kubernetes-csi-external-snapshotter-1-33-on-kubernetes-1-33 44271b2 link true /test pull-kubernetes-csi-external-snapshotter-1-33-on-kubernetes-1-33
pull-kubernetes-csi-external-snapshotter-1-32-on-kubernetes-1-32 44271b2 link true /test pull-kubernetes-csi-external-snapshotter-1-32-on-kubernetes-1-32

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@andyzhangx andyzhangx Awaiting requested review from andyzhangx

@gnufied gnufied Awaiting requested review from gnufied

Assignees

No one assigned

Labels

area/dependency Issues or PRs related to dependency changes cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@k8s-ci-robot