Skip to content

deps: bump the all-go-minor-and-patch group across 1 directory with 13 updates #4133

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: release/v1.5
Choose a base branch
from
Open

deps: bump the all-go-minor-and-patch group across 1 directory with 13 updates #4133

wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 20, 2025 •
edited
Loading

Bumps the all-go-minor-and-patch group with 9 updates in the / directory:

Package From To
github.com/Azure/azure-sdk-for-go/sdk/azcore 1.19.0 1.20.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity 1.11.0 1.13.1
github.com/Microsoft/hcsshim 0.12.0 0.13.0
github.com/avast/retry-go/v4 4.6.1 4.7.0
github.com/prometheus/client_golang 1.23.0 1.23.2
go.uber.org/zap 1.27.0 1.27.1
golang.org/x/sys 0.35.0 0.38.0
google.golang.org/grpc 1.75.0 1.77.0
golang.org/x/time 0.12.0 0.14.0

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.19.0 to 1.20.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.20.0

1.20.0 (2025-11-06)

Features Added

  • Added runtime.FetcherForNextLinkOptions.HTTPVerb to specify the HTTP verb when fetching the next page via next link. Defaults to http.MethodGet.

Bugs Fixed

  • Fixed potential panic when decoding base64 strings.
  • Fixed an issue in resource identifier parsing which prevented it from returning an error for malformed resource IDs.

sdk/azcore/v1.19.1

1.19.1 (2025-09-11)

Bugs Fixed

  • Fixed resource identifier parsing for provider-specific resource hierarchies containing "resourceGroups" segments.

Other Changes

  • Improved error fall-back for improperly authored long-running operations.
  • Upgraded dependencies.
Commits
  • 466795e Prep [email protected] (#25563)
  • 6fce238 [azsystemevents] Remove gopls (#25555)
  • c0ac8ea Sync eng/common directory with azure-sdk-tools for PR 12476 (#25549)
  • 047fb66 [Release] sdk/resourcemanager/containerregistry/armcontainerregistry/2.0.0 (#...
  • 908cfea [azsystemevents] Fixing build.go to work properly with tsp-client as the orch...
  • c30fd4c cosmos: Allow the Query Pipeline to return an alternative query to execute in...
  • 1b44564 fixed resource type validation in ParseResourceType and correlated tests (#25...
  • e566eec Sync eng/common directory with azure-sdk-tools for PR 12531 (#25545)
  • 053de1a Increment package version after release of data/azcosmos (#25544)
  • 8e673bb release pr (#25543)
  • Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.11.0 to 1.13.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.13.1

1.13.1 (2025-11-10)

Bugs Fixed

  • AzureCLICredential quoted arguments incorrectly on Windows

sdk/azidentity/v1.13.0

1.13.0 (2025-10-07)

Features Added

  • Added AzurePowerShellCredential, which authenticates as the identity logged in to Azure PowerShell (thanks ArmaanMcleod)
  • When AZURE_TOKEN_CREDENTIALS is set to ManagedIdentityCredential, DefaultAzureCredential behaves the same as does ManagedIdentityCredential when used directly. It doesn't apply special retry configuration or attempt to determine whether IMDS is available. (#25265)

Breaking Changes

  • Removed the WorkloadIdentityCredential support for identity binding mode added in v1.13.0-beta.1. It will return in v1.14.0-beta.1

sdk/azidentity/v1.13.0-beta.1

1.13.0-beta.1 (2025-09-17)

Features Added

  • Added AzurePowerShellCredential, which authenticates as the identity logged in to Azure PowerShell (thanks ArmaanMcleod)
  • WorkloadIdentityCredential supports identity binding mode (#25056)

sdk/azidentity/v1.12.0

1.12.0 (2025-09-16)

Features Added

  • Added DefaultAzureCredentialOptions.RequireAzureTokenCredentials. NewDefaultAzureCredential returns an error when this option is true and the environment variable AZURE_TOKEN_CREDENTIALS has no value.

Other Changes

  • AzureDeveloperCLICredential no longer hangs when AZD_DEBUG is set
  • GetToken methods of AzureCLICredential and AzureDeveloperCLICredential return an error when TokenRequestOptions.Claims has a value because these credentials can't acquire a token in that case. The error messages describe the action required to get a token.

sdk/internal/v1.11.2

1.11.2 (2025-07-30)

Other Changes

... (truncated)

Commits
  • 6bb9b03 azidentity v1.13.1 (#25574)
  • e18dbd7 Increment package version after release of azidentity (#25367)
  • 4f0facc Prepare azidentity v1.13.0 for release (#25352)
  • 2d8c98b Selecting ManagedIdentityCredential disables DefaultAzureCredential's IMDS pr...
  • 67dd4fc Increment package version after release of azidentity (#25263)
  • 1a74bc8 Prepare azidentity v1.12.0 for release (#25231)
  • 839a355 Test IMDS managed identity with a remote VM (#25237)
  • c352be3 Sync eng/common directory with azure-sdk-tools for PR 11931 (#25243)
  • c994eca gofmt (#25234)
  • 9c95d95 [Release] sdk/resourcemanager/computefleet/armcomputefleet/2.0.0-beta.1 gener...
  • Additional commits viewable in compare view

Updates github.com/Microsoft/hcsshim from 0.12.0 to 0.13.0

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.13.0

What's Changed

New Contributors

Full Changelog: microsoft/hcsshim@v0.13.0-rc.3...v0.13.0

v0.13.0-rc.3

What's Changed

Full Changelog: microsoft/hcsshim@v0.13.0-rc.2...v0.13.0-rc.3

v0.12.9

What's Changed

Full Changelog: microsoft/hcsshim@v0.12.8...v0.12.9

v0.12.8

What's Changed

... (truncated)

Commits
  • 7084bd2 rego policy enforcer should use the same user parsing logic as GCS (#2405)
  • a5c5b4c Deps/crypto vulnFix golang.org/x/crypto vulnerability (#2416)
  • a00144a Add support for running confidential WCOW UVMs
  • 5def1d7 Allow different types of boot configurations for WCOW UVM
  • b4e0744 Merge pull request #2406 from anmaxvl/privileged-pause
  • e5f8fd8 tooling: allow pause container to be run in privileged mode
  • d7e3842 feature: cross-container named pipes (#2358)
  • 62ddb12 HvSocket support for containers (#2353)
  • fa9d402 ci: fix golangci-lint config (#2387)
  • a3c0edf github-actions: update lint action (#2379)
  • Additional commits viewable in compare view

Updates github.com/avast/retry-go/v4 from 4.6.1 to 4.7.0

Release notes

Sourced from github.com/avast/retry-go/v4's releases.

v4.7.0

What's Changed

New Contributors

Full Changelog: avast/retry-go@4.6.1...v4.7.0

Commits
  • 375037b bump version
  • 306fcee Merge pull request #142 from avast/go_1_25_test_environment
  • 0bdef9c ci(workflow): add Go version 1.25 to test matrix for expanded compatibility t...
  • 66013da Merge pull request #130 from StounhandJ/back_off_delay
  • 9e5d0d6 Merge pull request #129 from StounhandJ/master
  • 5068e50 Merge pull request #128 from amirrezafahimi/master
  • 22920c3 Merge pull request #136 from avast/dependabot/go_modules/github.com/stretchr/...
  • 459fade Bump github.com/stretchr/testify from 1.10.0 to 1.11.1
  • 6c62c20 BackOffDelay multiplies attempts from zero
  • e330bce no delay after final retry on max attempts
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.23.0 to 1.23.2

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.2 - 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1 - 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

Commits

Updates go.uber.org/zap from 1.27.0 to 1.27.1

Release notes

Sourced from go.uber.org/zap's releases.

v1.27.1

Enhancements:

  • #1501[]: prevent Object from panicking on nils
  • #1511[]: Fix a race condition in WithLazy.

Thanks to @​rabbbit, @​alshopov, @​jquirke, @​arukiidou for their contributions to this release.

#1501: uber-go/zap#1501 #1511: uber-go/zap#1511

Changelog

Sourced from go.uber.org/zap's changelog.

1.27.1 (19 Nov 2025)

Enhancements:

  • #1501[]: prevent Object from panicking on nils
  • #1511[]: Fix a race condition in WithLazy.

Thanks to @​rabbbit, @​alshopov, @​jquirke, @​arukiidou for their contributions to this release.

#1501: uber-go/zap#1501 #1511: uber-go/zap#1511

Commits

Updates golang.org/x/sys from 0.35.0 to 0.38.0

Commits
  • 15129aa cpu: also use MRS instruction in getmmfr1
  • ed38ca2 unix: add SizeofNhmsg and SizeofNexthopGrp
  • 3675c4c cpu: use MRS instruction to read arm64 system registers
  • 2a15272 unix: add consts for ELF handling
  • 6239615 cpu: add HPDS, LOR, PAN detection for arm64
  • ea436ef windows: add iphlpapi routing functions
  • 28c5bda unix: add SetMemPolicy and its mode/flag values
  • b731f78 unix/linux: switch to ubuntu 25.04, Go 1.25.1
  • 1edeebe unix: mkall.sh: fail if docker build failed
  • ecada54 unix: use slices.{Equal,Sort} in tests
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.75.0 to 1.77.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.77.0

API Changes

  • mem: Replace the Reader interface with a struct for better performance and maintainability. (#8669)

Behavior Changes

  • balancer/pickfirst: Remove support for the old pick_first LB policy via the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false. The new pick_first has been the default since v1.71.0. (#8672)

Bug Fixes

  • xdsclient: Fix a race condition in the ADS stream implementation that could result in resource-not-found errors, causing the gRPC client channel to move to TransientFailure. (#8605)
  • client: Ignore HTTP status header for gRPC streams. (#8548)
  • client: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (#8534)
  • client: Fix a bug where default port 443 was not automatically added to addresses without a specified port when sent to a proxy.
    • Setting environment variable GRPC_EXPERIMENTAL_ENABLE_DEFAULT_PORT_FOR_PROXY_TARGET=false disables this change; please file a bug if any problems are encountered as we will remove this option soon. (#8613)
  • balancer/pickfirst: Fix a bug where duplicate addresses were not being ignored as intended. (#8611)
  • server: Fix a bug that caused overcounting of channelz metrics for successful and failed streams. (#8573)
  • balancer/pickfirst: When configured, shuffle addresses in resolver updates that lack endpoints. Since gRPC automatically adds endpoints to resolver updates, this bug only affects custom LB policies that delegate to pick_first but don't set endpoints. (#8610)
  • mem: Clear large buffers before re-using. (#8670)

Performance Improvements

  • transport: Reduce heap allocations to reduce time spent in garbage collection. (#8624, #8630, #8639, #8668)
  • transport: Avoid copies when reading and writing Data frames. (#8657, #8667)
  • mem: Avoid clearing newly allocated buffers. (#8670)

New Features

  • outlierdetection: Add metrics specified in gRFC A91. (#8644)
  • stats/opentelemetry: Add support for optional label grpc.lb.backend_service in per-call metrics (#8637)
  • xds: Add support for JWT Call Credentials as specified in gRFC A97. Set environment variable GRPC_EXPERIMENTAL_XDS_BOOTSTRAP_CALL_CREDS=true to enable this feature. (#8536)
  • experimental/stats: Add support for up/down counters. (#8581)

Release 1.76.0

Dependencies

Bug Fixes

  • client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#8523)
  • client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#8518)
  • pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#8615)

... (truncated)

Commits

Updates google.golang.org/protobuf from 1.36.8 to 1.36.10

Updates github.com/prometheus/common from 0.65.0 to 0.66.1

Release notes

Sourced from github.com/prometheus/common's releases.

v0.66.1

This release has no functional changes, it just drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).

What's Changed

Full Changelog: prometheus/common@v1.20.99...v0.66.1

v0.66.0

⚠️ Breaking Changes ⚠️

  • A default-constructed TextParser will be invalid. It must have a valid scheme set, so users should use the NewTextParser function to create a valid TextParser. Otherwise parsing will panic with "Invalid name validation scheme requested: unset".

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from github.com/prometheus/common's changelog.

v0.66.1 / 2025-09-05

This release has no functional changes, it just drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).

What's Changed

Full Changelog: prometheus/common@v1.20.99...v0.66.1

v0.66.0 / 2025-09-02

⚠️ Breaking Changes ⚠️

  • A default-constructed TextParser will be invalid. It must have a valid scheme set, so users should use the NewTextParser function to create a valid TextParser. Otherwise parsing will panic with "Invalid name validation scheme requested: unset".

What's Changed

New Contributors

... (truncated)

Commits
  • 8975dde Revert "Use go.uber.org/atomic instead of sync/atomic (#825)" (#838)
  • 08d7f66 Move to supported version of yaml parser (#834)
  • 80e275e Revert "Use github.com/grafana/regexp instead of regexp" (#835)
  • 4c2f9e7 Merge pull request #832 from roidelapluie/retract
  • e120453 Retract v1.20.3
  • 2b1487c Merge pull request #827 from prometheus/dependabot/go_modules/github.com/stre...
  • db38951 Merge pull request #829 from prometheus/dependabot/go_modules/golang.org/x/ne...
  • 9e19a90 build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1
  • a1ba2a7 build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0
  • c7a031c Merge pull request #830 from prometheus/dependabot/go_modules/google.golang.o...
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.41.0 to 0.43.0

Commits

@dependabot
deps: bump the all-go-minor-and-patch group across 1 directory with 1…
5fce313 
…3 updates

Bumps the all-go-minor-and-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.19.0` | `1.20.0` |
| [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.11.0` | `1.13.1` |
| [github.com/Microsoft/hcsshim](https://github.com/Microsoft/hcsshim) | `0.12.0` | `0.13.0` |
| [github.com/avast/retry-go/v4](https://github.com/avast/retry-go) | `4.6.1` | `4.7.0` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.23.0` | `1.23.2` |
| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.0` | `1.27.1` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.35.0` | `0.38.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.75.0` | `1.77.0` |
| [golang.org/x/time](https://github.com/golang/time) | `0.12.0` | `0.14.0` |



Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.19.0 to 1.20.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.19.0...sdk/azcore/v1.20.0)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.11.0 to 1.13.1
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.11.0...sdk/azidentity/v1.13.1)

Updates `github.com/Microsoft/hcsshim` from 0.12.0 to 0.13.0
- [Release notes](https://github.com/Microsoft/hcsshim/releases)
- [Commits](microsoft/hcsshim@v0.12.0...v0.13.0)

Updates `github.com/avast/retry-go/v4` from 4.6.1 to 4.7.0
- [Release notes](https://github.com/avast/retry-go/releases)
- [Commits](avast/retry-go@4.6.1...4.7.0)

Updates `github.com/prometheus/client_golang` from 1.23.0 to 1.23.2
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.23.0...v1.23.2)

Updates `go.uber.org/zap` from 1.27.0 to 1.27.1
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.27.0...v1.27.1)

Updates `golang.org/x/sys` from 0.35.0 to 0.38.0
- [Commits](golang/sys@v0.35.0...v0.38.0)

Updates `google.golang.org/grpc` from 1.75.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.75.0...v1.77.0)

Updates `google.golang.org/protobuf` from 1.36.8 to 1.36.10

Updates `github.com/prometheus/common` from 0.65.0 to 0.66.1
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.65.0...v0.66.1)

Updates `golang.org/x/crypto` from 0.41.0 to 0.43.0
- [Commits](golang/crypto@v0.41.0...v0.43.0)

Updates `golang.org/x/time` from 0.12.0 to 0.14.0
- [Commits](golang/time@v0.12.0...v0.14.0)

Updates `golang.org/x/sync` from 0.16.0 to 0.17.0
- [Commits](golang/sync@v0.16.0...v0.17.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-minor-and-patch
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-minor-and-patch
- dependency-name: github.com/Microsoft/hcsshim
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-minor-and-patch
- dependency-name: github.com/avast/retry-go/v4
  dependency-version: 4.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-minor-and-patch
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.23.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-minor-and-patch
- dependency-name: go.uber.org/zap
  dependency-version: 1.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-minor-and-patch
- dependency-name: golang.org/x/sys
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-minor-and-patch
- dependency-name: google.golang.org/grpc
  dependency-version: 1.77.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-minor-and-patch
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-minor-and-patch
- dependency-name: github.com/prometheus/common
  dependency-version: 0.66.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-minor-and-patch
- dependency-name: golang.org/x/crypto
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-minor-and-patch
- dependency-name: golang.org/x/time
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-minor-and-patch
- dependency-name: golang.org/x/sync
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Dependencies only. release/1.5 Change affects v1.5 release train labels Nov 20, 2025
@dependabot dependabot bot requested a review from a team as a code owner November 20, 2025 09:17
@dependabot dependabot bot requested a review from ashvindeodhar November 20, 2025 09:17
@dependabot dependabot bot added dependencies Dependencies only. release/1.5 Change affects v1.5 release train labels Nov 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ashvindeodhar ashvindeodhar Awaiting requested review from ashvindeodhar ashvindeodhar is a code owner automatically assigned from Azure/azure-sdn-members

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Dependencies only. release/1.5 Change affects v1.5 release train

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant