fix(go.mod/go.sum): update minor dependencies (golang)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
github.com/onsi/ginkgo/v2	v2.27.5 → v2.28.1			require	minor
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring	v0.88.0 → v0.89.0			require	minor
github.com/redis/go-redis/v9	v9.17.3 → v9.18.0			require	minor
go (source)	1.25.6 → 1.26.0			golang	minor
golang.org/x/mod	v0.32.0 → v0.33.0			require	minor

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

onsi/ginkgo (github.com/onsi/ginkgo/v2)

v2.28.1

Compare Source

2.28.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

v2.28.0

Compare Source

2.28.0

Ginkgo's SemVer filter now supports filtering multiple components by SemVer version:

It("should work in a specific version range (1.0.0, 2.0.0) and third-party dependency redis in [8.0.0, ~)", SemVerConstraint(">= 3.2.0"), ComponentSemVerConstraint("redis", ">= 8.0.0") func() {
    // This test will only run when version is between 1.0.0 (exclusive) and 2.0.0 (exclusive) and redis version is >= 8.0.0
})

can be filtered in or out with an invocation like:

ginkgo --sem-ver-filter="2.1.1, redis=8.2.0"

Huge thanks to @​Icarus9913 for working on this!

prometheus-operator/prometheus-operator (github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring)

v0.89.0: 0.89.0 / 2026-02-05

Compare Source

• [ENHANCEMENT] Add hostNetwork field to the Alertmanager CRD. #​8281
• [ENHANCEMENT] Add the crds and full-crds commands to the operator's binary. #​8251
• [ENHANCEMENT] Report deprecated field usage in the Reconciled condition type. #​8236
• [ENHANCEMENT] Avoid unnecessary reconciliation upon creation of the ThanosRuler StatefulSet. #​8347
• [ENHANCEMENT] Add bodySizeLimit to the ScrapeConfig CRD. #​8348
• [ENHANCEMENT] Support http_headers field in the Alertmanager Secret. #​8357
• [ENHANCEMENT] Add the -kubelet-http-metrics flag to enable/disable the HTTP metrics port in the Kubelet endpoint (default=enabled). #​8350
• [ENHANCEMENT] Include operator.prometheus.io/version annotation in the full version of CRDs. #​8279
• [BUGFIX] Validate VictorOps global configuration in the Alertmanager CRD. #​8020
• [BUGFIX] Validate Jira global configuration in the Alertmanager CRD. #​8265
• [BUGFIX] Validate VictorOps receiver's URL in the AlertmanagerConfig CRD. #​8258
• [BUGFIX] Validate Webex receiver's URL in the AlertmanagerConfig CRD. #​8255
• [BUGFIX] Validate Jira receiver's URL configuration in the AlertmanagerConfig CRD. #​8230
• [BUGFIX] Validate OpsGenie receiver configuration in the AlertmanagerConfig CRD. #​8267
• [BUGFIX] Validate WeChat receiver configuration in the AlertmanagerConfig CRD. #​8271
• [BUGFIX] Validate SNS receiver configuration in the AlertmanagerConfig CRD. #​8217
• [BUGFIX] Validate Webex global configuration in the Alertmanager CRD. #​7979
• [BUGFIX] Validate Telegram global configuration in the Alertmanager CRD. #​8268
• [BUGFIX] Restore statefulset's labels if the creation fails with AlreadyExists. #​8343
• [BUGFIX] Fix potential panic due to informer cache races. #​8310
• [BUGFIX] Support probers defined with IPv6 addresses in the Probe CRD. #​8354
• [BUGFIX] Prevent group and repeat intervals with zero duration from breaking Alertmanager. #​8126
• [BUGFIX] Propagate all supported RocketChat attributes for AlertmanagerConfig CRD. #​8016
• [BUGFIX] Add URL validation for WeChat receiver. #​8256
• [BUGFIX] Add URL validation for SNS receiver. #​8259
• [BUGFIX] Fix GCE service discovery for the ScrapeConfig CRD. #​8284
• [BUGFIX] Avoid stale conditions in Alertmanager, ThanosRuler, Prometheus and PrometheusAgent resources. #​8304
• [BUGFIX] Fix race condition when updating rule ConfigMaps. #​8290
• [BUGFIX] Fix race condition when patching finalizers. #​8323
• [BUGFIX] Reconcile ScrapeConfig resources when namespace selection changes. #​8334

v0.88.1: 0.88.1 / 2026-01-27

Compare Source

• [BUGFIX] Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD. #​8294
• [BUGFIX] Revert maximum version check for EC2/Lightsail SD in ScrapeConfig CRD. #​8308
• [BUGFIX] Relax URL validation in Slack receiver in AlertmanagerConfig CRD to support Go templates. #​8299 #​8331
• [BUGFIX] Relax URL validation in PagerDuty in AlertmanagerConfig CRD to support Go templates. #​8319
• [BUGFIX] Relax URL validation in WebhookConfig in AlertmanagerConfig CRD to support Go templates. #​8307 #​8317
• [BUGFIX] Relax URL validation in RocketChat receiver in AlertmanagerConfig CRD to support Go templates. #​8318
• [BUGFIX] Relax URL validation in Pushover receiver in AlertmanagerConfig CRD to support Go templates. #​8307 #​8316

redis/go-redis (github.com/redis/go-redis/v9)

v9.18.0: 9.18.0

Compare Source

Redis 8.6 Support

Added support for Redis 8.6, including new commands and features for streams idempotent production and HOTKEYS.

Smart Client Handoff (Maintenance Notifications) for Cluster

note: Pending RS version release

This release introduces comprehensive support for Redis Enterprise Cluster maintenance notifications via SMIGRATING/SMIGRATED push notifications. The client now automatically handles slot migrations by:

• Relaxing timeouts during migration (SMIGRATING) to prevent false failures
• Triggering lazy cluster state reloads upon completion (SMIGRATED)
• Enabling seamless operations during Redis Enterprise maintenance windows

(#​3643) by @​ndyakov

OpenTelemetry Native Metrics Support

Added comprehensive OpenTelemetry metrics support following the OpenTelemetry Database Client Semantic Conventions. The implementation uses a Bridge Pattern to keep the core library dependency-free while providing optional metrics instrumentation through the new extra/redisotel-native package.

Metric groups include:

• Command metrics: Operation duration with retry tracking
• Connection basic: Connection count and creation time
• Resiliency: Errors, handoffs, timeout relaxation
• Connection advanced: Wait time and use time
• Pubsub metrics: Published and received messages
• Stream metrics: Processing duration and maintenance notifications

(#​3637) by @​ofekshenawa

✨ New Features

• HOTKEYS Commands: Added support for Redis HOTKEYS feature for identifying hot keys based on CPU consumption and network utilization (#​3695) by @​ofekshenawa
• Streams Idempotent Production: Added support for Redis 8.6+ Streams Idempotent Production with ProducerID, IdempotentID, IdempotentAuto in XAddArgs and new XCFGSET command (#​3693) by @​ofekshenawa
• NaN Values for TimeSeries: Added support for NaN (Not a Number) values in Redis time series commands (#​3687) by @​ofekshenawa
• DialerRetries Options: Added DialerRetries and DialerRetryTimeout to ClusterOptions, RingOptions, and FailoverOptions (#​3686) by @​naveenchander30
• ConnMaxLifetimeJitter: Added jitter configuration to distribute connection expiration times and prevent thundering herd (#​3666) by @​cyningsun
• Digest Helper Functions: Added DigestString and DigestBytes helper functions for client-side xxh3 hashing compatible with Redis DIGEST command (#​3679) by @​ofekshenawa
• SMIGRATED New Format: Updated SMIGRATED parser to support new format and remember original host:port (#​3697) by @​ndyakov
• Cluster State Reload Interval: Added cluster state reload interval option for maintenance notifications (#​3663) by @​ndyakov

🐛 Bug Fixes

• PubSub nil pointer dereference: Fixed nil pointer dereference in PubSub after WithTimeout() - pubSubPool is now properly cloned (#​3710) by @​Copilot
• MaintNotificationsConfig nil check: Guard against nil MaintNotificationsConfig in initConn (#​3707) by @​veeceey
• wantConnQueue zombie elements: Fixed zombie wantConn elements accumulation in wantConnQueue (#​3680) by @​cyningsun
• XADD/XTRIM approx flag: Fixed XADD and XTRIM to use = when approx is false (#​3684) by @​ndyakov
• Sentinel timeout retry: When connection to a sentinel times out, attempt to connect to other sentinels (#​3654) by @​cxljs

⚡ Performance

• Fuzz test optimization: Eliminated repeated string conversions, used functional approach for cleaner operation selection (#​3692) by @​feiguoL
• Pre-allocate capacity: Pre-allocate slice capacity to prevent multiple capacity expansions (#​3689) by @​feelshu

🧪 Testing

• Comprehensive TLS tests: Added comprehensive TLS tests and example for standalone, cluster, and certificate authentication (#​3681) by @​ndyakov
• Redis 8.6: Updated CI to use Redis 8.6-pre (#​3685) by @​ndyakov

🧰 Maintenance

• Deprecation warnings: Added deprecation warnings for commands based on Redis documentation (#​3673) by @​ndyakov
• Use errors.Join(): Replaced custom error join function with standard library errors.Join() (#​3653) by @​cxljs
• Use Go 1.21 min/max: Use Go 1.21's built-in min/max functions (#​3656) by @​cxljs
• Proper formatting: Code formatting improvements (#​3670) by @​12ya
• Set commands documentation: Added comprehensive documentation to all set command methods (#​3642) by @​iamamirsalehi
• MaxActiveConns docs: Added default value documentation for MaxActiveConns (#​3674) by @​codykaup
• README example update: Updated README example (#​3657) by @​cxljs
• Cluster maintnotif example: Added example application for cluster maintenance notifications (#​3651) by @​ndyakov

👥 Contributors

We'd like to thank all the contributors who worked on this release!

@​12ya, @​Copilot, @​codykaup, @​cxljs, @​cyningsun, @​feelshu, @​feiguoL, @​iamamirsalehi, @​naveenchander30, @​ndyakov, @​ofekshenawa, @​veeceey

golang/go (go)

v1.26.0

v1.25.7

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 7 additional dependencies were updated

Details:

Package	Change
github.com/google/pprof	v0.0.0-20250820193118-f64d9cf942d6 -> v0.0.0-20260115054156-294ebfa9ad83
golang.org/x/crypto	v0.46.0 -> v0.47.0
golang.org/x/net	v0.48.0 -> v0.49.0
golang.org/x/sys	v0.39.0 -> v0.40.0
golang.org/x/term	v0.38.0 -> v0.39.0
golang.org/x/text	v0.32.0 -> v0.33.0
golang.org/x/tools	v0.40.0 -> v0.41.0