Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 19, 2025

Bumps the gomod group with 6 updates in the / directory:

Package From To
github.com/prometheus/client_golang 1.21.1 1.22.0
github.com/yannh/kubeconform 0.6.7 0.7.0
github.com/prometheus/client_model 0.6.1 0.6.2
github.com/prometheus/common 0.62.0 0.64.0
github.com/prometheus/procfs 0.15.1 0.16.1
golang.org/x/crypto 0.36.0 0.38.0

Updates github.com/prometheus/client_golang from 1.21.1 to 1.22.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.22.0 - 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:

import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
  • [FEATURE] prometheus: Add new CollectorFunc utility #1724
  • [CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738
  • [FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743
  • [CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.22.0 / 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:

import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
  • [FEATURE] prometheus: Add new CollectorFunc utility #1724
  • [CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738
  • [FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743
  • [CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765
Commits
  • d50be25 Cut 1.22.0 (#1793)
  • 1043db7 Cut 1.22.0-rc.0 (#1768)
  • e575c9c promhttp: Isolate zstd support and klauspost/compress library use to promhttp...
  • f2276aa Merge pull request #1764 from prometheus/dependabot/github_actions/github-act...
  • 9df772c build(deps): bump peter-evans/create-pull-request
  • a3548c5 Merge pull request #1754 from saswatamcode/exp-eh
  • 60fd2b0 Remove go.work file for now
  • 8f9d0de exp: Add dependabot config
  • c5cf981 Merge pull request #1762 from prometheus/release-1.21
  • e84c305 exp: Reset snappy buf (#1756)
  • Additional commits viewable in compare view

Updates github.com/yannh/kubeconform from 0.6.7 to 0.7.0

Release notes

Sourced from github.com/yannh/kubeconform's releases.

v0.7.0

Changelog

  • 3134f4477efb1537ad84de4fdedfbdcc5b18df1e Add acceptance tests for caching of references (#326)
  • e65429b1e5990dd019ebb7b5642dcd22a3e9cd13 Add support for duration (#328)
  • 9f04fec26834ed443f9542419481bd84446523b7 Add tests for the HTTP loader (#325)
  • a23275d5ca0531b7af5489ef6fd3dc321dd322c5 Invalid JSON should not be considered an error - see yannh/kubeconform#67 (#327)
  • df26febc544173f0816a206ab05c663a1bbd90d5 Update go/goreleaser (#322)
  • 31e9679c96ae0d4051bcc1a3ae4a20fa46308b2b Update jsonschema library to v6 (#324)
Commits

Updates github.com/prometheus/client_model from 0.6.1 to 0.6.2

Release notes

Sourced from github.com/prometheus/client_model's releases.

v0.6.2

What's Changed

Full Changelog: prometheus/client_model@v0.6.1...v0.6.2

Commits
  • eb136e5 Merge pull request #119 from prometheus/superq/google.golang.org/protobuf
  • bf7f2ca Update golanci-lint to v2.
  • 7e9b56c Bump google.golang.org/protobuf from 1.36.5 to 1.36.6
  • ef699ce Merge pull request #116 from prometheus/repo_sync
  • bf8b12e Update common Prometheus files
  • 5b93968 Merge pull request #115 from prometheus/repo_sync
  • ae83ddc Update common Prometheus files
  • afe0b21 Merge pull request #114 from prometheus/repo_sync
  • 75e1daf Update common Prometheus files
  • 73608e2 Merge pull request #113 from prometheus/dependabot/go_modules/google.golang.o...
  • Additional commits viewable in compare view

Updates github.com/prometheus/common from 0.62.0 to 0.64.0

Release notes

Sourced from github.com/prometheus/common's releases.

v0.64.0

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.63.0...v0.64.0

v0.63.0

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.62.0...v0.63.0

Commits
  • 6a35e02 build(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 (#788)
  • 487c180 refactor(promslog): make NewNopLogger() wrapper around New() (#783)
  • b8eddd7 build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 (#786)
  • 8048031 build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 (#785)
  • 4ca345a build(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 (#784)
  • 633961f Merge pull request #787 from prometheus/repo_sync
  • 8c1fb2e Update common Prometheus files
  • 8de85c2 Merge pull request #739 from prometheus/beorn7/log
  • 31ee791 promslog: Use the default timezone (again)
  • 318ef65 build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 (#776)
  • Additional commits viewable in compare view

Updates github.com/prometheus/procfs from 0.15.1 to 0.16.1

Release notes

Sourced from github.com/prometheus/procfs's releases.

v0.16.1

What's Changed

New Contributors

Full Changelog: prometheus/procfs@v0.16.0...v0.16.1

v0.16.0

What's Changed

... (truncated)

Commits

Updates golang.org/x/crypto from 0.36.0 to 0.38.0

Commits
  • aae6e61 go.mod: update golang.org/x dependencies
  • 9c1aa6a ssh/test: reset the random source before capturing a recording
  • 8819902 ssh/test: enable Diffie-Hellman key exchange algorithms
  • 3f311e4 acme: return error from pre-authorization when unsupported
  • 1f7c62c ssh/test: skip unsupported tests on js/wasm
  • a5f8048 acme/autocert: use standard functions to pick the cache directory
  • 958cde8 Revert "chacha20: add loong64 SIMD implementation"
  • 51f005c Revert "salsa20: add loong64 SIMD implementation"
  • 7c35866 Revert "argon2: add loong64 SIMD implementation"
  • 0091fc8 Revert "blake2s: add loong64 SIMD implementation"
  • Additional commits viewable in compare view

Updates golang.org/x/sys from 0.31.0 to 0.33.0

Commits
  • 3d9a6b8 windows: add WSADuplicateSocket
  • c0a9559 cpu: add crypto extensions detection for riscv64
  • 8e9e046 windows: add virtual key codes and console input consts
  • 7138967 windows: fix slicing of NTUnicodeString values
  • 6a85559 windows: fix dangling pointers in (*SECURITY_DESCRIPTOR).ToAbsolute
  • 01aaa83 all: simplify code by using modern Go constructs
  • 1b2bd6b windows: replace all StringToUTF16 calls with UTF16FromString
  • 1c3b72f unix: update Linux kernel to 6.14
  • c175b6b windows: add cmsghdr and pktinfo structures
  • 3330b5e unix: support Readv, Preadv, Writev and Pwritev for darwin
  • Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.36.5 to 1.36.6

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps the gomod group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.21.1` | `1.22.0` |
| [github.com/yannh/kubeconform](https://github.com/yannh/kubeconform) | `0.6.7` | `0.7.0` |
| [github.com/prometheus/client_model](https://github.com/prometheus/client_model) | `0.6.1` | `0.6.2` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.62.0` | `0.64.0` |
| [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.15.1` | `0.16.1` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.36.0` | `0.38.0` |



Updates `github.com/prometheus/client_golang` from 1.21.1 to 1.22.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.21.1...v1.22.0)

Updates `github.com/yannh/kubeconform` from 0.6.7 to 0.7.0
- [Release notes](https://github.com/yannh/kubeconform/releases)
- [Changelog](https://github.com/yannh/kubeconform/blob/master/.goreleaser.yml)
- [Commits](yannh/kubeconform@v0.6.7...v0.7.0)

Updates `github.com/prometheus/client_model` from 0.6.1 to 0.6.2
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](prometheus/client_model@v0.6.1...v0.6.2)

Updates `github.com/prometheus/common` from 0.62.0 to 0.64.0
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md)
- [Commits](prometheus/common@v0.62.0...v0.64.0)

Updates `github.com/prometheus/procfs` from 0.15.1 to 0.16.1
- [Release notes](https://github.com/prometheus/procfs/releases)
- [Commits](prometheus/procfs@v0.15.1...v0.16.1)

Updates `golang.org/x/crypto` from 0.36.0 to 0.38.0
- [Commits](golang/crypto@v0.36.0...v0.38.0)

Updates `golang.org/x/sys` from 0.31.0 to 0.33.0
- [Commits](golang/sys@v0.31.0...v0.33.0)

Updates `google.golang.org/protobuf` from 1.36.5 to 1.36.6

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/yannh/kubeconform
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/prometheus/common
  dependency-version: 0.64.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/prometheus/procfs
  dependency-version: 0.16.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/crypto
  dependency-version: 0.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/sys
  dependency-version: 0.33.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 19, 2025
@06kellyjac 06kellyjac merged commit 8892fd6 into master Jun 20, 2025
14 checks passed
@06kellyjac 06kellyjac deleted the dependabot/go_modules/gomod-e55ce49bc4 branch June 20, 2025 08:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant