Bump the go-dependencies group with 11 updates #378

dependabot · 2025-05-01T05:24:25Z

Bumps the go-dependencies group with 11 updates:

Package	From	To
github.com/prometheus/client_golang	`1.21.1`	`1.22.0`
k8s.io/api	`0.32.3`	`0.33.0`
k8s.io/apimachinery	`0.32.3`	`0.33.0`
k8s.io/cli-runtime	`0.32.3`	`0.33.0`
k8s.io/client-go	`0.32.3`	`0.33.0`
k8s.io/component-base	`0.32.3`	`0.33.0`
github.com/MicahParks/keyfunc/v3	`3.3.10`	`3.3.11`
github.com/aws/aws-sdk-go-v2/config	`1.29.12`	`1.29.14`
github.com/aws/aws-sdk-go-v2/credentials	`1.17.65`	`1.17.67`
github.com/aws/aws-sdk-go-v2/service/ecr	`1.43.0`	`1.44.0`
github.com/jarcoal/httpmock	`1.3.1`	`1.4.0`

Updates github.com/prometheus/client_golang from 1.21.1 to 1.22.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.22.0 - 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:
import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
[FEATURE] prometheus: Add new CollectorFunc utility #1724

[CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738

[FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743

[CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

build(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0 by @dependabot in prometheus/client_golang#1720

build(deps): bump google.golang.org/protobuf from 1.36.1 to 1.36.3 by @dependabot in prometheus/client_golang#1719

Update RELEASE.md by @bwplotka in prometheus/client_golang#1721

chore(docs): Add links for the upstream PRs by @kakkoyun in prometheus/client_golang#1722

Added tips on releasing client and checking with k8s. by @bwplotka in prometheus/client_golang#1723

feat: Add new CollectorFunc utility by @Saumya40-codes in prometheus/client_golang#1724

build(deps): bump google.golang.org/protobuf from 1.36.3 to 1.36.4 by @dependabot in prometheus/client_golang#1725

build(deps): bump the github-actions group with 5 updates by @dependabot in prometheus/client_golang#1726

Synchronize common files from prometheus/prometheus by @prombot in prometheus/client_golang#1727

Synchronize common files from prometheus/prometheus by @prombot in prometheus/client_golang#1731

build(deps): bump golang.org/x/sys from 0.29.0 to 0.30.0 by @dependabot in prometheus/client_golang#1739

build(deps): bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @dependabot in prometheus/client_golang#1740

Cleanup dependabot config by @SuperQ in prometheus/client_golang#1741

Upgrade Golang version v1.24 by @dongjiang1989 in prometheus/client_golang#1738

build(deps): bump the github-actions group with 2 updates by @dependabot in prometheus/client_golang#1742

Merging 1.21 release back to main. by @bwplotka in prometheus/client_golang#1744

Synchronize common files from prometheus/prometheus by @prombot in prometheus/client_golang#1745

Add support for undocumented query options for API by @mahendrapaipuri in prometheus/client_golang#1743

exp/api: Add experimental exp module; Add remote API with write client and handler. by @bwplotka in prometheus/client_golang#1658

exp/api: Add accepted msg type validation to handler by @saswatamcode in prometheus/client_golang#1750

build(deps): bump the github-actions group with 5 updates by @dependabot in prometheus/client_golang#1751

build(deps): bump github.com/klauspost/compress from 1.17.11 to 1.18.0 by @dependabot in prometheus/client_golang#1752

build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @dependabot in prometheus/client_golang#1753

exp: Reset snappy buf by @saswatamcode in prometheus/client_golang#1756

Merge release 1.21.1 to main. by @bwplotka in prometheus/client_golang#1762

exp: Add dependabot config by @saswatamcode in prometheus/client_golang#1754

build(deps): bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 in the github-actions group by @dependabot in prometheus/client_golang#1764

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.22.0 / 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:
import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
[FEATURE] prometheus: Add new CollectorFunc utility #1724

[CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738

[FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743

[CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

Commits

d50be25 Cut 1.22.0 (#1793)
1043db7 Cut 1.22.0-rc.0 (#1768)
e575c9c promhttp: Isolate zstd support and klauspost/compress library use to promhttp...
f2276aa Merge pull request #1764 from prometheus/dependabot/github_actions/github-act...
9df772c build(deps): bump peter-evans/create-pull-request
a3548c5 Merge pull request #1754 from saswatamcode/exp-eh
60fd2b0 Remove go.work file for now
8f9d0de exp: Add dependabot config
c5cf981 Merge pull request #1762 from prometheus/release-1.21
e84c305 exp: Reset snappy buf (#1756)
Additional commits viewable in compare view

Updates k8s.io/api from 0.32.3 to 0.33.0

Commits

82c0029 Update dependencies to v0.33.0 tag
16cedc7 Merge pull request #131088 from atiratree/rename-terminating-replicas-fg
dc88679 Merge pull request #131103 from ahrtr/etcd_sdk_20250328
4a456a2 bump etcd 3.5.21 sdk
96e38c9 rename DeploymentPodReplacementPolicy FG to DeploymentReplicaSetTerminatingRe...
c21a017 Merge pull request #129970 from mortent/AddResourceV1beta2API
d0673db Run make update
118546d Merge pull request #130556 from sreeram-venkitesh/kep-4960-container-stop-sig...
f9401a3 Merge pull request #130797 from jm-franc/configurable-tolerance
9b3e544 Generated UPDATE_COMPATIBILITY_FIXTURE_DATA
Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.32.3 to 0.33.0

Commits

955939f bump etcd 3.5.21 sdk
e8a77bd Merge pull request #130910 from googs1025/fix/datarace
7e8c77e Merge pull request #130906 from serathius/streaming-validation
27fd396 flake: fix data race for func TestBackoff_Step
8bcc6f1 Update kube-openapi and integrate streaming tags validation
6ce776c Merge pull request #130857 from thockin/kk_small_vg_diffs
f2c94d6 Comment on origin and JSON schema
b63ba07 Use origin in validateFalse's own test
beddba4 Use test.Helper in helper funcs
eaf4038 Merge pull request #130354 from siyuanfoundation/forward-api
Additional commits viewable in compare view

Updates k8s.io/cli-runtime from 0.32.3 to 0.33.0

Commits

46ca2a9 Update dependencies to v0.33.0 tag
2811321 bump etcd 3.5.21 sdk
b44307f Merge pull request #129872 from seans3/websocket-https-proxy
f7c023c Websocket HTTPS proxy support
178adec Merge pull request #130906 from serathius/streaming-validation
1e2dc5c Update kube-openapi and integrate streaming tags validation
7d637a3 Merge pull request #130555 from thockin/k_k_randfill
67be32d Vendor randfill
2dc7b80 Merge pull request #130569 from dims/update-to-latest-cadvisor-v0.52.0
a4e93f9 update to v1.22.0-rc.0
Additional commits viewable in compare view

Updates k8s.io/client-go from 0.32.3 to 0.33.0

Commits

3aa3c77 Update dependencies to v0.33.0 tag
ecbbb06 bump etcd 3.5.21 sdk
2086688 Merge pull request #129970 from mortent/AddResourceV1beta2API
dba34c7 Run make update
e359642 Merge pull request #130556 from sreeram-venkitesh/kep-4960-container-stop-sig...
3bf0a05 Merge pull request #130797 from jm-franc/configurable-tolerance
7a03a3b Generated files
1676beb Refresh autogenerated files following the configurable tolerance updates.
387edb8 Merge pull request #130967 from aojea/listers
21dc3b4 benchmark to show inefficient linear search lookup
Additional commits viewable in compare view

Updates k8s.io/component-base from 0.32.3 to 0.33.0

Commits

07e241d Update dependencies to v0.33.0 tag
8e0b9e8 Merge remote-tracking branch 'origin/master' into release-1.33
21643b0 Move to released version of prometheus/client_golang v1.22.0 from rc.0
316f3e2 bump etcd 3.5.21 sdk
f52df19 Merge pull request #129872 from seans3/websocket-https-proxy
cc34cc0 Merge pull request #130916 from richabanker/oidc-flags-v3
4906cf7 Merge pull request #130930 from siyuanfoundation/help
fdef30f Merge pull request #130447 from pohly/dra-device-taints
8618ec8 Merge pull request #130079 from yongruilin/compatibility-remove-reset
1565ae1 chore: update emulation version help msg.
Additional commits viewable in compare view

Updates github.com/MicahParks/keyfunc/v3 from 3.3.10 to 3.3.11

Commits

2779bdc fix: Update golang-jwt/jwt/v5 dependency to close the CVE-2025-30204 (#136)
76d9482 Remove JCP from README.md (#135)
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.29.12 to 1.29.14

Commits

2a0c73e Release 2025-04-10
b7b05ea Regenerated Clients
2a62cee Update partitions file
6af3313 Update endpoints model
915cbf3 Update API model
ac82667 Release 2025-04-09
7db3afa Regenerated Clients
f56d4c1 Update endpoints model
bf17208 Update API model
f529add Release 2025-04-08
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.65 to 1.17.67

Commits

2a0c73e Release 2025-04-10
b7b05ea Regenerated Clients
2a62cee Update partitions file
6af3313 Update endpoints model
915cbf3 Update API model
ac82667 Release 2025-04-09
7db3afa Regenerated Clients
f56d4c1 Update endpoints model
bf17208 Update API model
f529add Release 2025-04-08
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.43.0 to 1.44.0

Commits

fa3ee1a Release 2023-11-21
6e0c553 Regenerated Clients
32fa00b Update endpoints model
72eae5c Update API model
1c69d08 fix: don't expect response to be json in endpointcreds provider (#2381)
3bd97c0 fix: don't send 0 max items for object version and multipart upload paginator...
b3e07aa Release 2023-11-20
2fc1c0d Regenerated Clients
1a6bd02 Update endpoints model
ac2c871 Update API model
Additional commits viewable in compare view

Updates github.com/jarcoal/httpmock from 1.3.1 to 1.4.0

Release notes

Sourced from github.com/jarcoal/httpmock's releases.

v1.4.0

What's Changed

style: // nolint: → //nolint: by @maxatome in jarcoal/httpmock#152

feat: add NewJsonResponseOrPanic function to simplify calls with ResponderFromMultipleResponses by @kilianpaquier in jarcoal/httpmock#151

Update transport.go by @battlecook in jarcoal/httpmock#155

Replaced defer statements with t.Cleanup in docs by @alvii147 in jarcoal/httpmock#157

Make http.Response.Status respect RFC 2616, like in Go stdlib. by @constantoine in jarcoal/httpmock#159

docs: update resty example by @tymcgee in jarcoal/httpmock#160

feat: enhance Activate and add DeactivateNonDefault functions by @maxatome in jarcoal/httpmock#161

test: use golangci-lint v2.0.2 & go1.24 by @maxatome in jarcoal/httpmock#163

docs: README typo by @maxatome

docs: clarify ConnectionFailure doc by @maxatome

New Contributors

@kilianpaquier made their first contribution in jarcoal/httpmock#151

@battlecook made their first contribution in jarcoal/httpmock#155

@alvii147 made their first contribution in jarcoal/httpmock#157

@constantoine made their first contribution in jarcoal/httpmock#159

@tymcgee made their first contribution in jarcoal/httpmock#160

Full Changelog: jarcoal/httpmock@v1.3.1...v1.4.0

Commits

7d2a02f docs: clarify ConnectionFailure doc
fad35ec docs: README typo
dc21346 test: use golangci-lint v2.0.2
8cdfbf1 docs: fix README build status badge
2225990 feat: enhance Activate and add DeactivateNonDefault functions (#161)
ee13561 docs: update resty example (#160)
1ebd59a Make http.Response.Status respect RFC 2616, like in Go stdlib.
8705bb3 replace defer with t.Cleanup
6eb813e chore: fix CI tip build + switch to golangci-lint 1.61.0
7b7821f chore: switch CI to go 1.23 & golangci-lint 1.60.1
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-dependencies group with 11 updates: | Package | From | To | | --- | --- | --- | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.21.1` | `1.22.0` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.32.3` | `0.33.0` | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.32.3` | `0.33.0` | | [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.32.3` | `0.33.0` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.32.3` | `0.33.0` | | [k8s.io/component-base](https://github.com/kubernetes/component-base) | `0.32.3` | `0.33.0` | | [github.com/MicahParks/keyfunc/v3](https://github.com/MicahParks/keyfunc) | `3.3.10` | `3.3.11` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.29.12` | `1.29.14` | | [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.17.65` | `1.17.67` | | [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.43.0` | `1.44.0` | | [github.com/jarcoal/httpmock](https://github.com/jarcoal/httpmock) | `1.3.1` | `1.4.0` | Updates `github.com/prometheus/client_golang` from 1.21.1 to 1.22.0 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.21.1...v1.22.0) Updates `k8s.io/api` from 0.32.3 to 0.33.0 - [Commits](kubernetes/api@v0.32.3...v0.33.0) Updates `k8s.io/apimachinery` from 0.32.3 to 0.33.0 - [Commits](kubernetes/apimachinery@v0.32.3...v0.33.0) Updates `k8s.io/cli-runtime` from 0.32.3 to 0.33.0 - [Commits](kubernetes/cli-runtime@v0.32.3...v0.33.0) Updates `k8s.io/client-go` from 0.32.3 to 0.33.0 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.32.3...v0.33.0) Updates `k8s.io/component-base` from 0.32.3 to 0.33.0 - [Commits](kubernetes/component-base@v0.32.3...v0.33.0) Updates `github.com/MicahParks/keyfunc/v3` from 3.3.10 to 3.3.11 - [Release notes](https://github.com/MicahParks/keyfunc/releases) - [Commits](MicahParks/keyfunc@v3.3.10...v3.3.11) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.29.12 to 1.29.14 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@config/v1.29.12...config/v1.29.14) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.65 to 1.17.67 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@credentials/v1.17.65...credentials/v1.17.67) Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.43.0 to 1.44.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.43.0...service/s3/v1.44.0) Updates `github.com/jarcoal/httpmock` from 1.3.1 to 1.4.0 - [Release notes](https://github.com/jarcoal/httpmock/releases) - [Commits](jarcoal/httpmock@v1.3.1...v1.4.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-version: 1.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/api dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/apimachinery dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/cli-runtime dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/client-go dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/component-base dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/MicahParks/keyfunc/v3 dependency-version: 3.3.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.29.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.17.67 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/jarcoal/httpmock dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 1, 2025

dependabot bot requested a review from davidcollom as a code owner May 1, 2025 05:24

davidcollom force-pushed the dependabot/go_modules/go-dependencies-bc7e019b0f branch from 2dcbfda to 52e829b Compare May 1, 2025 08:24

davidcollom merged commit 27598f9 into main May 1, 2025
4 checks passed

davidcollom deleted the dependabot/go_modules/go-dependencies-bc7e019b0f branch May 1, 2025 08:24

davidcollom pushed a commit that referenced this pull request May 1, 2025

Bump the go-dependencies group with 11 updates (#378)

bb85e78

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

github-actions bot mentioned this pull request Jun 3, 2025

Release v0.9.3 #386

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the go-dependencies group with 11 updates #378

Bump the go-dependencies group with 11 updates #378

dependabot bot commented on behalf of github May 1, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump the go-dependencies group with 11 updates #378

Bump the go-dependencies group with 11 updates #378

Conversation

dependabot bot commented on behalf of github May 1, 2025

v1.22.0 - 2025-04-07

1.22.0 / 2025-04-07

v1.4.0

What's Changed

New Contributors

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants