Bump the gomod group with 12 updates #407

dependabot · 2025-11-03T17:22:26Z

Bumps the gomod group with 12 updates:

Package	From	To
github.com/onsi/ginkgo/v2	`2.27.1`	`2.27.2`
open-cluster-management.io/addon-framework	`1.1.0`	`1.1.1`
cel.dev/expr	`0.24.0`	`0.25.0`
github.com/prometheus/common	`0.67.1`	`0.67.2`
github.com/prometheus/procfs	`0.19.1`	`0.19.2`
go.opentelemetry.io/proto/otlp	`1.7.1`	`1.9.0`
golang.org/x/crypto	`0.42.0`	`0.43.0`
golang.org/x/net	`0.44.0`	`0.46.0`
golang.org/x/term	`0.35.0`	`0.36.0`
golang.org/x/text	`0.29.0`	`0.30.0`
golang.org/x/tools	`0.37.0`	`0.38.0`
google.golang.org/grpc	`1.75.1`	`1.76.0`

Updates github.com/onsi/ginkgo/v2 from 2.27.1 to 2.27.2

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.27.2

2.27.2

Fixes

inline automaxprocs to simplify dependencies; this will be removed when Go 1.26 comes out [a69113a]

Maintenance

Fix syntax errors and typo [a99c6e0]

Fix paragraph position error [f993df5]

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.27.2

Fixes

inline automaxprocs to simplify dependencies; this will be removed when Go 1.26 comes out [a69113a]

Maintenance

Fix syntax errors and typo [a99c6e0]

Fix paragraph position error [f993df5]

Commits

9a84c21 v2.27.2
a69113a inline automaxprocs to simplify dependencies; this will be removed when Go 1....
a99c6e0 Fix syntax errors and typo
f993df5 Fix paragraph position error
See full diff in compare view

Updates open-cluster-management.io/addon-framework from 1.1.0 to 1.1.1

Release notes

Sourced from open-cluster-management.io/addon-framework's releases.

v1.1.1

Addon Framework v1.1.1

What's Changed

[release-1.1] 🐛 Fix health check to support partial probe results with multi-probe configuration by @openshift-cherrypick-robot in open-cluster-management-io/addon-framework#343

Full Changelog: open-cluster-management-io/addon-framework@v1.1.0...v1.1.1

Commits

5ff7dcd [release-1.1] 🐛 Fix health check to support partial probe results with multi-...
See full diff in compare view

Updates cel.dev/expr from 0.24.0 to 0.25.0

Release notes

Sourced from cel.dev/expr's releases.

Release v0.25.0

What's Changed

Initial version of the policy specification by @jcking in google/cel-spec#477

Remove orphaned ToC entry for enums as ints from the specification by @timostamm in google/cel-spec#476

Tests for selector, function, and field names formerly defined as reserved by @hudlow in google/cel-spec#480

Add a test case for lastIndexOf in string_ext against an empty string by @l46kok in google/cel-spec#468

Remove TOC from language definition by @hudlow in google/cel-spec#482

Remove int(enum) -> int signature by @hudlow in google/cel-spec#483

Clarify formatting decimals, add %f formatting test cases around rounding by @l46kok in google/cel-spec#485

Remove remaining google.rpc.Status deps from cel-spec by @TristonianJones in google/cel-spec#486

New Contributors

@timostamm made their first contribution in google/cel-spec#476

Full Changelog: google/cel-spec@v0.24.0...v0.25.0

Commits

3c96c71 Remove remaining google.rpc.Status deps from cel-spec (#486)
750024a Clarify formatting decimals, add %f formatting test cases around rounding (#485)
9dd5f5c Remove int(enum) -> int signature (#483)
808c918 Remove TOC from language definition (#482)
bad3928 Add a test case for lastIndexOf in string_ext against an empty string (#468)
14cdd3f Tests for selector, function, and field names formerly defined as reserved (#...
8a33394 Remove orphaned ToC entry for enums as ints from the specification (#476)
a8f582a Initial version of the policy specification (#477)
See full diff in compare view

Updates github.com/prometheus/common from 0.67.1 to 0.67.2

Release notes

Sourced from github.com/prometheus/common's releases.

v0.67.2 / 2025-10-28

What's Changed

config: Fix panic in tlsRoundTripper when CA file is absent by @ndk in prometheus/common#792

Cleanup linting issues by @SuperQ in prometheus/common#860

New Contributors

@ndk made their first contribution in prometheus/common#792

Full Changelog: prometheus/common@v0.67.1...v0.67.2

Changelog

Sourced from github.com/prometheus/common's changelog.

v0.67.2 / 2025-10-28

What's Changed

config: Fix panic in tlsRoundTripper when CA file is absent by @ndk in prometheus/common#792

Cleanup linting issues by @SuperQ in prometheus/common#860

New Contributors

@ndk made their first contribution in prometheus/common#792

Full Changelog: prometheus/common@v0.67.1...v0.67.2

Commits

594f4d4 Merge pull request #861 from prometheus/beorn7/version
440c1a3 Cut v0.67.2
acb1873 Merge pull request #860 from prometheus/superq/linting
1e32339 Cleanup linting issues
93d16be Update common Prometheus files (#859)
8230d3b Merge pull request #792 from ndk/main
633281f build(deps): bump golang.org/x/net from 0.44.0 to 0.46.0 (#856)
aca279f build(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 (#857)
77db9c2 Update common Prometheus files (#854)
See full diff in compare view

Updates github.com/prometheus/procfs from 0.19.1 to 0.19.2

Release notes

Sourced from github.com/prometheus/procfs's releases.

v0.19.2

What's Changed

chore: Migrate tests to cmp package by @SuperQ in prometheus/procfs#760

Fix: Use base16 to convert pci sriov_vf_device by @jj-asama in prometheus/procfs#762

Full Changelog: prometheus/procfs@v0.19.1...v0.19.2

Commits

9b0219b Fix: Use base16 to convert pci sriov_vf_device (#762)
b8b5106 chore: Migrate tests to cmp package (#760)
See full diff in compare view

Updates go.opentelemetry.io/proto/otlp from 1.7.1 to 1.9.0

Commits

88af9ba Release v1.9.0 (#462)
80a8eec chore(deps): update module github.com/cyphar/filepath-securejoin to v0.6.0 (#...
b727281 chore(deps): update module github.com/cyphar/filepath-securejoin to v0.5.1 (#...
8faf5f6 chore(deps): update github/codeql-action action to v4.31.2 (#461)
f634804 chore(deps): update actions/upload-artifact action to v5 (#459)
9e2ba7e chore(deps): update github/codeql-action action to v4.31.0 (#458)
6568f81 chore(deps): update github/codeql-action action to v4.30.9 (#455)
848d585 chore(deps): update github/codeql-action action to v4.30.8 (#453)
dbaa58d chore(deps): update github/codeql-action action to v4 (#452)
cbb6ab2 chore(deps): update module github.com/go-git/go-git/v5 to v5.16.3 (#444)
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.42.0 to 0.43.0

Commits

627cb89 go.mod: update golang.org/x dependencies
dca4914 acme: fix autocert TestHTTPHandlerDefaultFallback
1336e21 x509roots/fallback: update bundle
2beaa59 ssh: add VerifiedPublicKeyCallback
66c3d8c ssh: add support for FIPS mode
ddb4e80 ssh: remove custom contains, use slices.Contains
f4d47b0 ssh: return clearer error when signature algorithm is used as key format
96dc232 x509roots/fallback/bundle: add bundle package to export root certs
8c9ba31 all: freeze and deprecate more packages
559e062 ssh/agent: return an error for unexpected message types
See full diff in compare view

Updates golang.org/x/net from 0.44.0 to 0.46.0

Commits

2002a06 go.mod: update golang.org/x dependencies
59706cd html: impose open element stack size limit
6ec8895 html: align in row insertion mode with spec
5393563 http2: fix RFC 9218 write scheduler not being idempotent
b2ab371 internal/httpsfv: implement parsing support for date and display string
edb764c internal/httpsfv: add parsing functionality for types defined in RFC 8941
fbba2c2 internal/httpsfv: add support for consuming Display String and Date type
47a241f http2: make the error channel pool per-Server
51f657b webdav/internal/xml: use the built-in min function
f2e909b internal/httpsfv: implement parsing support for Dictionary and List type.
Additional commits viewable in compare view

Updates golang.org/x/term from 0.35.0 to 0.36.0

Commits

3a0828a go.mod: update golang.org/x dependencies
See full diff in compare view

Updates golang.org/x/text from 0.29.0 to 0.30.0

Commits

c6abd03 go.mod: update golang.org/x dependencies
42f038d x/text: fix nil dereference in gotext extract
a42f0e2 all: use built-in max/min to simplify the code
See full diff in compare view

Updates golang.org/x/tools from 0.37.0 to 0.38.0

Commits

a22b5e8 go.mod: update golang.org/x dependencies
4bbcc9f all: use reflect.TypeFor instead of reflect.TypeOf when we have known the type
122c93a internal/refactor: AddImport: remove unnecessary result
76aace8 internal/analysisinternal: rationalize
8cf2d63 gopls/internal/golang: add condition for enabling package move
1f054fd x/tools: downgrade token.FileSet parameters to token.File
44e71e5 go/analysis/passes/printf: check anonymous functions too
9095e9b internal/analysisinternal: extract DeleteVar
62a1b26 internal/analysisinternal: IsChildOf(Cursor, edge.Kind) bool
d32fb50 internal/analysisinternal: export EnclosingFile
Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.75.1 to 1.76.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.76.0

Dependencies

Minimum supported Go version is now 1.24 (#8509)

Special Thanks: @kevinGC

Bug Fixes

client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#8523)

client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#8518)

Special Thanks: @vinothkumarr227

pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#8615)

New Features

credentials: Add credentials/jwt package providing file-based JWT PerRPCCredentials (A97). (#8431)

Special Thanks: @dimpavloff

Performance Improvements

client: Improve HTTP/2 header size estimate to reduce re-allocations. (#8547)

encoding/proto: Avoid redundant message size calculation when marshaling. (#8569)

Special Thanks: @rs-unity

Commits

d96c2ef Change version to 1.76.0 (#8584)
79c553c Cherry pick #8610, #8615 to v1.76.x (#8621)
0513350 client: minor improvements to log messages (#8564)
ebaf486 credentials: implement file-based JWT Call Credentials (part 1 for A97) (#8431)
ca78c90 xds/resolver_test: fix flaky test ResolverBadServiceUpdate_NACKedWithoutCache...
83bead4 internal/buffer: set closed flag when closing channel in the Load method (#8575)
0f45079 encoding/proto: enable use cached size option (#8569)
8420f3f transport: avoid slice reallocation during header creation (#8547)
b36320e Revert "stats/opentelemetry: record retry attempts from clientStream (#8342)"...
c122250 stats/opentelemetry: record retry attempts from clientStream (#8342)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gomod group with 12 updates: | Package | From | To | | --- | --- | --- | | [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.27.1` | `2.27.2` | | [open-cluster-management.io/addon-framework](https://github.com/open-cluster-management-io/addon-framework) | `1.1.0` | `1.1.1` | | [cel.dev/expr](https://github.com/google/cel-spec) | `0.24.0` | `0.25.0` | | [github.com/prometheus/common](https://github.com/prometheus/common) | `0.67.1` | `0.67.2` | | [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.19.1` | `0.19.2` | | [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go) | `1.7.1` | `1.9.0` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.42.0` | `0.43.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.44.0` | `0.46.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.35.0` | `0.36.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.29.0` | `0.30.0` | | [golang.org/x/tools](https://github.com/golang/tools) | `0.37.0` | `0.38.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.75.1` | `1.76.0` | Updates `github.com/onsi/ginkgo/v2` from 2.27.1 to 2.27.2 - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](onsi/ginkgo@v2.27.1...v2.27.2) Updates `open-cluster-management.io/addon-framework` from 1.1.0 to 1.1.1 - [Release notes](https://github.com/open-cluster-management-io/addon-framework/releases) - [Commits](open-cluster-management-io/addon-framework@v1.1.0...v1.1.1) Updates `cel.dev/expr` from 0.24.0 to 0.25.0 - [Release notes](https://github.com/google/cel-spec/releases) - [Commits](google/cel-spec@v0.24.0...v0.25.0) Updates `github.com/prometheus/common` from 0.67.1 to 0.67.2 - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md) - [Commits](prometheus/common@v0.67.1...v0.67.2) Updates `github.com/prometheus/procfs` from 0.19.1 to 0.19.2 - [Release notes](https://github.com/prometheus/procfs/releases) - [Commits](prometheus/procfs@v0.19.1...v0.19.2) Updates `go.opentelemetry.io/proto/otlp` from 1.7.1 to 1.9.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases) - [Commits](open-telemetry/opentelemetry-proto-go@v1.7.1...v1.9.0) Updates `golang.org/x/crypto` from 0.42.0 to 0.43.0 - [Commits](golang/crypto@v0.42.0...v0.43.0) Updates `golang.org/x/net` from 0.44.0 to 0.46.0 - [Commits](golang/net@v0.44.0...v0.46.0) Updates `golang.org/x/term` from 0.35.0 to 0.36.0 - [Commits](golang/term@v0.35.0...v0.36.0) Updates `golang.org/x/text` from 0.29.0 to 0.30.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.29.0...v0.30.0) Updates `golang.org/x/tools` from 0.37.0 to 0.38.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.37.0...v0.38.0) Updates `google.golang.org/grpc` from 1.75.1 to 1.76.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.75.1...v1.76.0) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-version: 2.27.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: open-cluster-management.io/addon-framework dependency-version: 1.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: cel.dev/expr dependency-version: 0.25.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/prometheus/common dependency-version: 0.67.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/prometheus/procfs dependency-version: 0.19.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: gomod - dependency-name: go.opentelemetry.io/proto/otlp dependency-version: 1.9.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/crypto dependency-version: 0.43.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/net dependency-version: 0.46.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/term dependency-version: 0.36.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/text dependency-version: 0.30.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/tools dependency-version: 0.38.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gomod - dependency-name: google.golang.org/grpc dependency-version: 1.76.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gomod ... Signed-off-by: dependabot[bot] <[email protected]>

openshift-ci · 2025-11-03T17:26:19Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dependabot[bot], dhaiducek

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

~~OWNERS~~ [dhaiducek]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Nov 3, 2025

openshift-ci bot added the dco-signoff: yes label Nov 3, 2025

openshift-ci bot requested review from JustinKuli and dhaiducek November 3, 2025 17:22

dhaiducek approved these changes Nov 3, 2025

View reviewed changes

openshift-ci bot assigned dhaiducek Nov 3, 2025

openshift-ci bot added the lgtm label Nov 3, 2025

openshift-ci bot added the approved label Nov 3, 2025

openshift-merge-bot bot merged commit 5c83c5b into main Nov 3, 2025
15 checks passed

openshift-merge-bot bot deleted the dependabot/go_modules/gomod-7c1585fa28 branch November 3, 2025 18:07

magic-mirror-bot bot mentioned this pull request Nov 3, 2025

😿 Failed to sync the upstream PRs: #407 stolostron/config-policy-controller#1551

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the gomod group with 12 updates #407

Bump the gomod group with 12 updates #407

Uh oh!

dependabot bot commented on behalf of github Nov 3, 2025

Uh oh!

openshift-ci bot commented Nov 3, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump the gomod group with 12 updates #407

Bump the gomod group with 12 updates #407

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 3, 2025

v2.27.2

2.27.2

Fixes

Maintenance

2.27.2

Fixes

Maintenance

v1.1.1

Addon Framework v1.1.1

What's Changed

Release v0.25.0

What's Changed

New Contributors

v0.67.2 / 2025-10-28

What's Changed

New Contributors

v0.67.2 / 2025-10-28

What's Changed

New Contributors

v0.19.2

What's Changed

Release 1.76.0

Dependencies

Bug Fixes

New Features

Performance Improvements

Uh oh!

openshift-ci bot commented Nov 3, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants