chore(deps): bump the go-dependencies group across 1 directory with 9 updates #644

dependabot · 2025-11-24T17:24:26Z

Bumps the go-dependencies group with 4 updates in the / directory: dario.cat/mergo, github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring, github.com/stretchr/testify and golang.org/x/net.

Updates dario.cat/mergo from 1.0.0 to 1.0.2

Release notes

Sourced from dario.cat/mergo's releases.

v1.0.2

What's Changed

Drops gopkg.in/yaml.v3, only used for loading fixtures. Thanks @trim21 for bringing to my attention (#262) that this library is no longer maintained.

Full Changelog: darccio/mergo@v1.0.1...v1.0.2

v1.0.1

What's Changed

fixes issue #187 by @vsemichev in darccio/mergo#253

fix: WithoutDereference should respect non-nil struct pointers by @joshkaplinsky in darccio/mergo#251

New Contributors

@vsemichev made their first contribution in darccio/mergo#253

@joshkaplinsky made their first contribution in darccio/mergo#251

Full Changelog: darccio/mergo@v1.0.0...v1.0.1

Commits

7b33b2b refactor: migrate from YAML to JSON for test data and update related functions
229a214 chore(.well-known): add funding manifest URLs file
6be20c6 chore(SECURITY.md): update supported versions to reflect current versioning
9007623 chore(README) : remove kubernetes from the list of users
2b1eb9c Update FUNDING.yml
2ceb994 Create FUNDING.json
59ea6a9 Merge pull request #251 from joshkaplinsky/joshkaplinsky/without-dereference-...
96f24af Merge pull request #253 from vsemichev/master
2f1a615 fixes issue #187. adds test to verify the fix.
4da170b fixes issue #187. attempt #3
Additional commits viewable in compare view

Updates github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.71.2 to 0.87.0

Release notes

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's releases.

0.87.0 / 2025-11-20

[FEATURE] Add status subresource for PrometheusRule custom resources (requires the StatusForConfigurationResources feature gate). #8069 #8086 #8024 #8005

[ENHANCEMENT] Avoid statefulset's rollout due to changes in the number of rule configmaps for Prometheus and ThanosRuler. #8010

[ENHANCEMENT] Support Azure system-assigned managed identities for remote-write configuration. #7815

[ENHANCEMENT] Add monospace field to to pushoverConfig receiver in AlertmanagerConfig CRD. #8018

[BUGFIX] Propagate Certificate Authority updates for HTTP configuration in Alertmanager's global configuration. #8089

0.86.2 / 2025-11-07

[CHANGE/BUGFIX] Fix operator's permissions to emit Kubernetes events. #8077

0.86.1 / 2025-10-13

[BUGFIX] Fix formatting of Kubernetes events. #8015

0.86.0 / 2025-10-07

[!NOTE] This release introduces the status subresource (behind the StatusForConfigurationResources feature gate) for ServiceMonitor, PodMonitor, Probe and Scrapeconfig custom resources. It is only supported for Prometheus resources.

[!IMPORTANT] This release enables automatic UTF-8 character support in label names, metric names and PrometheusRule expressions for Prometheus/PrometheusAgent resources running with version >= 3.0.0.

To preserve backward compatibility, the admission webhook service validates PrometheusRule resources against the legacy Prometheus scheme by default (but it can be changed with the --name-validation-scheme flag).

[CHANGE] Remove automatic addition of the metadata-wal-records feature flag for Prometheus versions >= 3.4. #7893

[CHANGE] Add miscellaneous validations to the ScrapeConfig CRD. #7856 #7823 #7835 #7838 #7838 ##7966

[CHANGE/FEATURE] Add support for UTF-8 characters to label names and metric names in PrometheusRule resources and relabel configurations. #7637 #7985

[FEATURE] Add the flag --name-validation-scheme to admission webhook to select between utf8 and legacy validations. #7985

[FEATURE] Add status subresource for ServiceMonitor custom resources (requires the StatusForConfigurationResources feature gate). #7767 #7836 #7827 #7795

[FEATURE] Add status subresource for PodMonitor custom resources (requires the StatusForConfigurationResources feature gate). #7929 #7914 #7936

[FEATURE] Add status subresource for ScrapeConfig custom resources (requires the StatusForConfigurationResources feature gate). #7958 #7964 #7969

[FEATURE] Add status subresource for Probe custom resources (requires the StatusForConfigurationResources feature gate). #7933 #7934 #7980

[FEATURE] Add serviceDiscoveryRole field to ServiceMonitor. #7982

[FEATURE] Add useFIPSSTSEndpoint field to Sigv4 config. #7987

[FEATURE] Add UnderscoreEscapingWithoutSuffixes to the translationStrategy field for the Prometheus and PrometheusAgent CRDs. #7947

[FEATURE] Add promoteScopeMetadata field to the Prometheus and PrometheusAgent CRDs. #7803

[FEATURE] Add enableHttp2 field to Alertmanager and AlertmanagerConfig CRDs. #7963

[ENHANCEMENT] Add the related object to the events emitted by the operator. #7867 #7953

[ENHANCEMENT] Add webhook validation for the MSTeams V2 receiver of AlertmanagerConfig CRD. #7906

[ENHANCEMENT] Add app.kubernetes.io/managed-by: prometheus-operator label to all managed resources. #7939

[BUGFIX] Prevent duplicate authentication settings in PodMonitor. #7975

[BUGFIX] Use distinct port name for the config-reloader init container to avoid duplicate port name warnings. #7904

[BUGFIX] Validate the PagerDuty URL in the Alertmanager's global configuration. #7945

0.85.0 / 2025-08-21

[CHANGE/BUGFIX] Add the --watch-referenced-objects-in-all-namespaces CLI argument. When enabled, the operator watches for secrets and configmaps in both workload and configuration resources. It ensures that reconciliation happens when a referenced secret/configmap is updated. #7615

[FEATURE] Add resendDelay field to the ThanosRuler CRD. #7753

[FEATURE] Add ruleGracePeriod field to the ThanosRuler CRD. #7750

[FEATURE] Add enableFeatures field to the ThanosRuler CRD for enabling feature flags. #7754

[FEATURE] Add params field to the Probe CRD. #7755

[FEATURE] Add hostUsers field to the Prometheus, PrometheusAgent, Alertmanager and ThanosRuler CRDs. #7768 #7769 #7771

[FEATURE] Add promoteAllResourceAttributes and ignoreResourceAttributes fields to Prometheus and PrometheusAgent CRDs. #7669

... (truncated)

Changelog

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's changelog.

0.87.0 / 2025-11-20

[FEATURE] Add status subresource for PrometheusRule custom resources (requires the StatusForConfigurationResources feature gate). #8069 #8086 #8024 #8005

[ENHANCEMENT] Avoid statefulset's rollout due to changes in the number of rule configmaps for Prometheus and ThanosRuler. #8010

[ENHANCEMENT] Support Azure system-assigned managed identities for remote-write configuration. #7815

[ENHANCEMENT] Add monospace field to to pushoverConfig receiver in AlertmanagerConfig CRD. #8018

[BUGFIX] Propagate Certificate Authority updates for HTTP configuration in Alertmanager's global configuration. #8089

0.86.2 / 2025-11-07

[CHANGE/BUGFIX] Fix operator's permissions to emit Kubernetes events. #8077

0.86.1 / 2025-10-13

[BUGFIX] Fix formatting of Kubernetes events. #8015

0.86.0 / 2025-10-07

[!NOTE] This release introduces the status subresource (behind the StatusForConfigurationResources feature gate) for ServiceMonitor, PodMonitor, Probe and Scrapeconfig custom resources. It is only supported for Prometheus resources.

[!IMPORTANT] This release enables automatic UTF-8 character support in label names, metric names and PrometheusRule expressions for Prometheus/PrometheusAgent resources running with version >= 3.0.0.

To preserve backward compatibility, the admission webhook service validates PrometheusRule resources against the legacy Prometheus scheme by default (but it can be changed with the --name-validation-scheme flag).

[CHANGE] Remove automatic addition of the metadata-wal-records feature flag for Prometheus versions >= 3.4. #7893

[CHANGE] Add miscellaneous validations to the ScrapeConfig CRD. #7856 #7823 #7835 #7838 #7838 #7966

[CHANGE/FEATURE] Add support for UTF-8 characters to label names and metric names in PrometheusRule resources and relabel configurations. #7637 #7985

[FEATURE] Add the flag --name-validation-scheme to admission webhook to select between utf8 and legacy validations. #7985

[FEATURE] Add status subresource for ServiceMonitor custom resources (requires the StatusForConfigurationResources feature gate). #7767 #7836 #7827 #7795

[FEATURE] Add status subresource for PodMonitor custom resources (requires the StatusForConfigurationResources feature gate). #7929 #7914 #7936

[FEATURE] Add status subresource for ScrapeConfig custom resources (requires the StatusForConfigurationResources feature gate). #7958 #7964 #7969

[FEATURE] Add status subresource for Probe custom resources (requires the StatusForConfigurationResources feature gate). #7933 #7934 #7980

[FEATURE] Add serviceDiscoveryRole field to ServiceMonitor. #7982

[FEATURE] Add useFIPSSTSEndpoint field to Sigv4 config. #7987

[FEATURE] Add UnderscoreEscapingWithoutSuffixes to the translationStrategy field for the Prometheus and PrometheusAgent CRDs. #7947

[FEATURE] Add promoteScopeMetadata field to the Prometheus and PrometheusAgent CRDs. #7803

[FEATURE] Add enableHttp2 field to Alertmanager and AlertmanagerConfig CRDs. #7963

[ENHANCEMENT] Add the related object to the events emitted by the operator. #7867 #7953

[ENHANCEMENT] Add webhook validation for the MSTeams V2 receiver of AlertmanagerConfig CRD. #7906

[ENHANCEMENT] Add app.kubernetes.io/managed-by: prometheus-operator label to all managed resources. #7939

[BUGFIX] Prevent duplicate authentication settings in PodMonitor. #7975

[BUGFIX] Use distinct port name for the config-reloader init container to avoid duplicate port name warnings. #7904

[BUGFIX] Validate the PagerDuty URL in the Alertmanager's global configuration. #7945

0.85.0 / 2025-08-21

[CHANGE/BUGFIX] Add the --watch-referenced-objects-in-all-namespaces CLI argument. When enabled, the operator watches for secrets and configmaps in both workload and configuration resources. It ensures that reconciliation happens when a referenced secret/configmap is updated. #7615

[FEATURE] Add resendDelay field to the ThanosRuler CRD. #7753

... (truncated)

Commits

0ff52b3 Cut 0.87.0 (#8109)
ddbbdf4 chore: cut v0.87.0
d4e674c Skip medium.com links in mdox configuration
d1ff82e feat: add support for monospace in pushoverConfig (#8018)
df692bf Feat: set Azure Manage Identity Client ID default to empty value (#7815)
3f31a1d Merge pull request #8105 from prometheus-operator/dependabot/go_modules/githu...
5be255a build(deps): bump github.com/prometheus/common from 0.67.2 to 0.67.3
b128cbb chore: bump k8s dependencies to v0.34.2 (#8096)
7300032 chore: bump k8s dependencies to v0.34.2
c8c9492 chore: update golangci-lint version to v2.6.1 (#8093)
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.10.0 to 1.11.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.11.1

This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Backport #1786 to release/1.11: mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in stretchr/testify#1788

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Call stack perf change for CallerInfo by @mikeauclair in stretchr/testify#1614

Lazily render mock diff output on successful match by @mikeauclair in stretchr/testify#1615

assert: check early in Eventually, EventuallyWithT, and Never by @cszczepaniak in stretchr/testify#1427

assert: add IsNotType by @bartventer in stretchr/testify#1730

assert.JSONEq: shortcut if same strings by @dolmen in stretchr/testify#1754

assert.YAMLEq: shortcut if same strings by @dolmen in stretchr/testify#1755

assert: faster and simpler isEmpty using reflect.Value.IsZero by @dolmen in stretchr/testify#1761

suite: faster methods filtering (internal refactor) by @dolmen in stretchr/testify#1758

Fixes

assert.ErrorAs: log target type by @craig65535 in stretchr/testify#1345

Fix failure message formatting for Positive and Negative asserts in stretchr/testify#1062

Improve ErrorIs message when error is nil but an error was expected by @tsioftas in stretchr/testify#1681

fix Subset/NotSubset when calling with mixed input types by @siliconbrain in stretchr/testify#1729

Improve ErrorAs failure message when error is nil by @ccoVeille in stretchr/testify#1734

mock.AssertNumberOfCalls: improve error msg by @3scalation in stretchr/testify#1743

Documentation, Build & CI

docs: Fix typo in README by @alexandear in stretchr/testify#1688

Replace deprecated io/ioutil with io and os by @alexandear in stretchr/testify#1684

Document consequences of calling t.FailNow() by @greg0ire in stretchr/testify#1710

chore: update docs for Unset #1621 by @techfg in stretchr/testify#1709

README: apply gofmt to examples by @alexandear in stretchr/testify#1687

refactor: use %q and %T to simplify fmt.Sprintf by @alexandear in stretchr/testify#1674

Propose Christophe Colombier (ccoVeille) as approver by @brackendawson in stretchr/testify#1716

Update documentation for the Error function in assert or require package by @architagr in stretchr/testify#1675

assert: remove deprecated build constraints by @alexandear in stretchr/testify#1671

assert: apply gofumpt to internal test suite by @ccoVeille in stretchr/testify#1739

CI: fix shebang in .ci.*.sh scripts by @dolmen in stretchr/testify#1746

assert,require: enable parallel testing on (almost) all top tests by @dolmen in stretchr/testify#1747

suite.Passed: add one more status test report by @Ararsa-Derese in stretchr/testify#1706

Add Helper() method in internal mocks and assert.CollectT by @dolmen in stretchr/testify#1423

assert.Same/NotSame: improve usage of Sprintf by @ccoVeille in stretchr/testify#1742

mock: enable parallel testing on internal testsuite by @dolmen in stretchr/testify#1756

suite: cleanup use of 'testing' internals at runtime by @dolmen in stretchr/testify#1751

assert: check test failure message for Empty and NotEmpty by @ccoVeille in stretchr/testify#1745

... (truncated)

Commits

2a57335 Merge pull request #1788 from brackendawson/1785-backport-1.11
af8c912 Backport #1786 to release/1.11
b7801fb Merge pull request #1778 from stretchr/dependabot/github_actions/actions/chec...
69831f3 build(deps): bump actions/checkout from 4 to 5
a53be35 Improve captureTestingT helper
aafb604 mock: improve formatting of error message
7218e03 improve error msg
929a212 Merge pull request #1758 from stretchr/dolmen/suite-faster-method-filtering
bc7459e suite: faster filtering of methods (-testify.m)
7d37b5c suite: refactor methodFilter
Additional commits viewable in compare view

Updates golang.org/x/net from 0.46.0 to 0.47.0

Commits

9a29643 go.mod: update golang.org/x dependencies
07cefd8 context: deprecate
5ac9dac publicsuffix: don't treat ip addresses as domain names
d1f64cc quic: use testing/synctest
fff0469 http2: document that RFC 7540 prioritization does not work with small payloads
f35e3a4 http2: fix weight overflow in RFC 7540 write scheduler
89adc90 http2: fix typo referring to RFC 9218 as RFC 9128 instead
8d76a2c quic: don't defer MAX_STREAMS frames indefinitely
027f8b7 quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONE
dec9fe7 dns/dnsmessage: update SVCB packing to prohibit name compression
Additional commits viewable in compare view

Updates k8s.io/api from 0.31.0 to 0.34.2

Commits

e28454b Update dependencies to v0.34.2 tag
133a39c Merge remote-tracking branch 'origin/master' into release-1.34
fd087be clarify that staging repos are automatically published
ff163ef add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
5ec86fc link to what a staging repository is
08c5dee docs: clarify that this is a staging repository and not for direct contributions
ba64d0b Update prerelease lifecycle to v1.34
25f849c Merge pull request #132522 from sunya-ch/KEP-5075-PR
baa1eb1 KEP-5075: generated codes from make update
740b2c9 KEP-5075: API updates
Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.31.0 to 0.34.2

Commits

b72d93d Merge remote-tracking branch 'origin/master' into release-1.34
cd8b91c clarify that staging repos are automatically published
8c59599 add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
ec3cea5 link to what a staging repository is
e4db694 docs: clarify that this is a staging repository and not for direct contributions
04507a3 Merge pull request #132942 from thockin/kyaml
50e39b1 Merge pull request #132935 from benluddy/cbor-bump-custom-marshalers
7d108e8 Re-vendor sigs.k8s.io/yaml @ v1.6.0
58c4eb0 Merge pull request #133130 from ylink-lfs/chore/residual_boolptr_removal
38a24e6 chore: residual boolptr and intptr removal
Additional commits viewable in compare view

Updates k8s.io/client-go from 0.31.0 to 0.34.2

Commits

54601aa Update dependencies to v0.34.2 tag
1bb1ad2 Merge pull request #134589liggitt/automated-cherry-pick-of-#134588
2505205 Remove invalid SAN certificate construction
7ffba0f Merge pull request #134004DerekFrank/automated-cherry-pick-of-#133573
145cb8f gofmt and review feedback
ddcdc12 fix: Update unit test to catch actual nil Labels case and fix functionality t...
97396af Merge remote-tracking branch 'origin/master' into release-1.34
5f737f3 clarify that staging repos are automatically published
0b8655b add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
c00384c link to what a staging repository is
Additional commits viewable in compare view

Updates k8s.io/utils from 0.0.0-20240711033017-18e509b52bc8 to 0.0.0-20251002143259-bc988d571ff4

Commits

See full diff in compare view

Updates sigs.k8s.io/controller-runtime from 0.19.0 to 0.22.3

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.22.3

What's Changed

[release-0.22] 🐛 Allow SSA after normal resource creation by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3348

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.2...v0.22.3

v0.22.2

What's Changed

🐛 Panic when trying to build more than one instance of fake.ClientBuilder by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3315

🌱 Bump to k8s.io/* v0.34.1 by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3317

🐛 Don't block on Get when queue is shutdown (2nd try) by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3338

🐛 Fix a bug where the priorityqueue would sometimes not return high-priority items first by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3340

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.1...v0.22.2

v0.22.1

What's Changed

🌱 Revert deprecation of client.Apply by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3308

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.0...v0.22.1

v0.22.0

🔆 Highlights

Client: Native support for Server-Side Apply (SSA) (#3253, #2981)

Update to k8s.io/* v1.34 dependencies (#3231, #3236, #3246, #3259, #3270, #3300)

Controller: Implement warmup support for controllers (#3192)

Priorityqueue: various improvements (#3289, #3290, #3243, #3250)

⚠️ Breaking changes

Update to k8s.io/* v1.34 dependencies by @alvaroaleman @troy0820 #3231, #3236, #3246, #3259, #3270, #3300

Client: Add native SSA support by @alvaroaleman in kubernetes-sigs/controller-runtime#3253

Client: Default selector to Nothing if it is nil for MatchingLabelsSelector and MatchingFieldsSelector by @acumino in kubernetes-sigs/controller-runtime#3279

Fakeclient: Add SSA support by @alvaroaleman in kubernetes-sigs/controller-runtime#2981

Fakeclient: Remove support for objects with pointer ObjectMeta by @alvaroaleman in kubernetes-sigs/controller-runtime#3228

Fakeclient: Clear TypeMeta for structured objects by @alvaroaleman in kubernetes-sigs/controller-runtime#3229

Priorityqueue: Make Priority option a pointer by @alvaroaleman in kubernetes-sigs/controller-runtime#3289

✨ Features

Client: Add UnsafeDisableDeepCopy to GetOptions by @jonathan-innis in kubernetes-sigs/controller-runtime#3227

Controller: Add a ReconciliationTimeout option by @alvaroaleman in kubernetes-sigs/controller-runtime#3296

Controller: Implement warmup support for controllers by @godwinpang in kubernetes-sigs/controller-runtime#3192

Envtest: Allow selection of binaries version by release series by @cbandy in kubernetes-sigs/controller-runtime#3280

Manager: Add support for custom labels on leader election leases by @DerekFrank in kubernetes-sigs/controller-runtime#3237

Priorityqueue: WithLowPriorityWhenUnchanged: Set Priority for all add methods by @alvaroaleman in kubernetes-sigs/controller-runtime#3290

... (truncated)

Commits

3e8b259 [release-0.22] 🐛 Allow SSA after normal resource creation (#3348)
7fb34b5 [release-0.22] 🐛 Fix a bug where the priorityqueue would sometimes not return...
27d4b5e Merge pull request #3338 from k8s-infra-cherrypick-robot/cherry-pick-3337-to-...
6d368ce Rebase priorityqueue shutdown fix for release-0.22
d04f428 Don't block on Get when queue is shutdown (2nd try)
7f146f7 Merge pull request #3317 from k8s-infra-cherrypick-robot/cherry-pick-3316-to-...
f3b9e4f Bump to k8s.io/* v0.34.1
04c6a08 [release-0.22] 🐛Panic when trying to build more than one instance of fake.Cli...
6422ed0 Merge pull request #3308 from k8s-infra-cherrypick-robot/cherry-pick-3307-to-...
09a2e89 Revert deprecation of client.Apply
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates Bumps the go-dependencies group with 4 updates in the / directory: [dario.cat/mergo](https://github.com/imdario/mergo), [github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring](https://github.com/prometheus-operator/prometheus-operator), [github.com/stretchr/testify](https://github.com/stretchr/testify) and [golang.org/x/net](https://github.com/golang/net). Updates `dario.cat/mergo` from 1.0.0 to 1.0.2 - [Release notes](https://github.com/imdario/mergo/releases) - [Commits](darccio/mergo@v1.0.0...v1.0.2) Updates `github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring` from 0.71.2 to 0.87.0 - [Release notes](https://github.com/prometheus-operator/prometheus-operator/releases) - [Changelog](https://github.com/prometheus-operator/prometheus-operator/blob/main/CHANGELOG.md) - [Commits](prometheus-operator/prometheus-operator@v0.71.2...v0.87.0) Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.10.0...v1.11.1) Updates `golang.org/x/net` from 0.46.0 to 0.47.0 - [Commits](golang/net@v0.46.0...v0.47.0) Updates `k8s.io/api` from 0.31.0 to 0.34.2 - [Commits](kubernetes/api@v0.31.0...v0.34.2) Updates `k8s.io/apimachinery` from 0.31.0 to 0.34.2 - [Commits](kubernetes/apimachinery@v0.31.0...v0.34.2) Updates `k8s.io/client-go` from 0.31.0 to 0.34.2 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.31.0...v0.34.2) Updates `k8s.io/utils` from 0.0.0-20240711033017-18e509b52bc8 to 0.0.0-20251002143259-bc988d571ff4 - [Commits](https://github.com/kubernetes/utils/commits) Updates `sigs.k8s.io/controller-runtime` from 0.19.0 to 0.22.3 - [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md) - [Commits](kubernetes-sigs/controller-runtime@v0.19.0...v0.22.3) --- updated-dependencies: - dependency-name: dario.cat/mergo dependency-version: 1.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring dependency-version: 0.87.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/stretchr/testify dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/net dependency-version: 0.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/api dependency-version: 0.34.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/apimachinery dependency-version: 0.34.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/client-go dependency-version: 0.34.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/utils dependency-version: 0.0.0-20251002143259-bc988d571ff4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: sigs.k8s.io/controller-runtime dependency-version: 0.22.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Nov 24, 2025

github-actions bot added the chore Routine tasks or maintenance label Nov 24, 2025

dependabot bot force-pushed the dependabot/go_modules/go-dependencies-c13fb706ae branch from 107c6ce to 197d6b4 Compare November 25, 2025 06:26

dependabot bot force-pushed the dependabot/go_modules/go-dependencies-c13fb706ae branch from 197d6b4 to f6a6fe0 Compare December 1, 2025 19:35

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the go-dependencies group across 1 directory with 9 updates #644

chore(deps): bump the go-dependencies group across 1 directory with 9 updates #644

dependabot bot commented on behalf of github Nov 24, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): bump the go-dependencies group across 1 directory with 9 updates #644

Are you sure you want to change the base?

chore(deps): bump the go-dependencies group across 1 directory with 9 updates #644

Conversation

dependabot bot commented on behalf of github Nov 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.0.2

What's Changed

v1.0.1

What's Changed

New Contributors

0.87.0 / 2025-11-20

0.86.2 / 2025-11-07

0.86.1 / 2025-10-13

0.86.0 / 2025-10-07

0.85.0 / 2025-08-21

0.87.0 / 2025-11-20

0.86.2 / 2025-11-07

0.86.1 / 2025-10-13

0.86.0 / 2025-10-07

0.85.0 / 2025-08-21

v1.11.1

What's Changed

v1.11.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

v0.22.3

What's Changed

v0.22.2

What's Changed

v0.22.1

What's Changed

v0.22.0

🔆 Highlights

⚠️ Breaking changes

✨ Features

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Nov 24, 2025 •

edited

Loading