build(deps): bump the github-dependencies group with 40 updates #1410

dependabot · 2025-08-25T09:55:52Z

Bumps the github-dependencies group with 40 updates:

Package	From	To
github.com/miekg/dns	`1.1.66`	`1.1.68`
github.com/spf13/pflag	`1.0.6`	`1.0.7`
github.com/stretchr/testify	`1.10.0`	`1.11.0`
google.golang.org/grpc	`1.72.1`	`1.75.0`
google.golang.org/protobuf	`1.36.6`	`1.36.8`
github.com/onsi/ginkgo/v2	`2.23.4`	`2.25.1`
github.com/onsi/gomega	`1.37.0`	`1.38.1`
github.com/coreos/go-systemd/v22	`22.5.0`	`22.6.0`
github.com/emicklei/go-restful/v3	`3.12.2`	`3.13.0`
github.com/fxamacker/cbor/v2	`2.8.0`	`2.9.0`
github.com/go-openapi/jsonpointer	`0.21.1`	`0.21.2`
github.com/google/cadvisor	`0.52.1`	`0.53.0`
github.com/google/gnostic-models	`0.6.9`	`0.7.0`
github.com/google/pprof	`0.0.0-20250403155104-27863c87afa6`	`0.0.0-20250820193118-f64d9cf942d6`
github.com/grpc-ecosystem/grpc-gateway/v2	`2.26.3`	`2.27.2`
github.com/opencontainers/cgroups	`0.0.2`	`0.0.4`
github.com/prometheus/common	`0.64.0`	`0.65.0`
github.com/prometheus/procfs	`0.16.1`	`0.17.0`
github.com/stoewer/go-strcase	`1.3.0`	`1.3.1`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	`0.60.0`	`0.62.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	`0.60.0`	`0.61.0`
go.opentelemetry.io/otel	`1.35.0`	`1.37.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace	`1.35.0`	`1.37.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	`1.35.0`	`1.37.0`
go.opentelemetry.io/otel/metric	`1.35.0`	`1.37.0`
go.opentelemetry.io/otel/sdk	`1.35.0`	`1.37.0`
go.opentelemetry.io/otel/trace	`1.35.0`	`1.37.0`
go.opentelemetry.io/proto/otlp	`1.6.0`	`1.7.0`
golang.org/x/crypto	`0.38.0`	`0.41.0`
golang.org/x/mod	`0.24.0`	`0.27.0`
golang.org/x/net	`0.40.0`	`0.43.0`
golang.org/x/sync	`0.14.0`	`0.16.0`
golang.org/x/sys	`0.33.0`	`0.35.0`
golang.org/x/term	`0.32.0`	`0.34.0`
golang.org/x/text	`0.25.0`	`0.28.0`
golang.org/x/time	`0.11.0`	`0.12.0`
golang.org/x/tools	`0.33.0`	`0.36.0`
google.golang.org/genproto/googleapis/api	`0.0.0-20250428153025-10db94c68c34`	`0.0.0-20250818200422-3122310a409c`
google.golang.org/genproto/googleapis/rpc	`0.0.0-20250428153025-10db94c68c34`	`0.0.0-20250818200422-3122310a409c`
gopkg.in/evanphx/json-patch.v4	`4.12.0`	`4.13.0`

Updates github.com/miekg/dns from 1.1.66 to 1.1.68

Commits

54c180d Release 1.1.68
b52b836 Revert "Add ResponseWriter.Net function (#1651)" (#1665)
330db33 Release 1.1.67
09e0436 Error: change a whole bunch error messages' prefix (#1657)
186ccfb Annotate unpack* function errors with where the error happened. (#1590)
4669827 Bump the all group with 4 updates (#1653)
96a6b9c Add ResponseWriter.Net function (#1651)
See full diff in compare view

Updates github.com/spf13/pflag from 1.0.6 to 1.0.7

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.7

What's Changed

Fix defaultIsZeroValue check for generic Value types by @MidnightRocket in spf13/pflag#422

feat: Use structs for errors returned by pflag. by @eth-p in spf13/pflag#425

Fix typos by @co63oc in spf13/pflag#428

fix #423 : Add helper function and some documentation to parse shorthand go test flags. by @valdar in spf13/pflag#424

add support equivalent to golang flag.TextVar(), also fixes the test failure as described in #368 by @hujun-open in spf13/pflag#418

add support for Func() and BoolFunc() #426 by @LeGEC in spf13/pflag#429

fix: correct argument length check in FlagSet.Parse by @ShawnJeffersonWang in spf13/pflag#409

fix usage message for func flags, fix arguments order by @LeGEC in spf13/pflag#431

Add support for time.Time flags by @max-frank in spf13/pflag#348

New Contributors

@MidnightRocket made their first contribution in spf13/pflag#422

@eth-p made their first contribution in spf13/pflag#425

@co63oc made their first contribution in spf13/pflag#428

@valdar made their first contribution in spf13/pflag#424

@hujun-open made their first contribution in spf13/pflag#418

@LeGEC made their first contribution in spf13/pflag#429

@ShawnJeffersonWang made their first contribution in spf13/pflag#409

@max-frank made their first contribution in spf13/pflag#348

Full Changelog: spf13/pflag@v1.0.6...v1.0.7

Commits

f9cbdd9 Merge pull request #348 from max-frank/add-time-flag-support
e3be2eb Reduce duplication by forwarding to sibling functions
7cc25e3 Don't export TimeValue (yet)
d15848d Remove unnecessary time test stderr dev null redirect
c5ce22e Use time.Time for expectations in time flag tests
1992c5a Add support for time.Time flags
1c62fb2 Merge pull request #431 from LeGEC/430-fix-usage-message-for-func-flags
1a4b5b2 fix discrepancy in order of arguments for Func() and BoolFunc() #433
4730aa0 fix help message for Func and BoolFunc flags #430
f4c97c2 minor: fix typos in comments
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.10.0 to 1.11.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.11.0

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Call stack perf change for CallerInfo by @mikeauclair in stretchr/testify#1614

Lazily render mock diff output on successful match by @mikeauclair in stretchr/testify#1615

assert: check early in Eventually, EventuallyWithT, and Never by @cszczepaniak in stretchr/testify#1427

assert: add IsNotType by @bartventer in stretchr/testify#1730

assert.JSONEq: shortcut if same strings by @dolmen in stretchr/testify#1754

assert.YAMLEq: shortcut if same strings by @dolmen in stretchr/testify#1755

assert: faster and simpler isEmpty using reflect.Value.IsZero by @dolmen in stretchr/testify#1761

suite: faster methods filtering (internal refactor) by @dolmen in stretchr/testify#1758

Fixes

assert.ErrorAs: log target type by @craig65535 in stretchr/testify#1345

Fix failure message formatting for Positive and Negative asserts in stretchr/testify#1062

Improve ErrorIs message when error is nil but an error was expected by @tsioftas in stretchr/testify#1681

fix Subset/NotSubset when calling with mixed input types by @siliconbrain in stretchr/testify#1729

Improve ErrorAs failure message when error is nil by @ccoVeille in stretchr/testify#1734

mock.AssertNumberOfCalls: improve error msg by @3scalation in stretchr/testify#1743

Documentation, Build & CI

docs: Fix typo in README by @alexandear in stretchr/testify#1688

Replace deprecated io/ioutil with io and os by @alexandear in stretchr/testify#1684

Document consequences of calling t.FailNow() by @greg0ire in stretchr/testify#1710

chore: update docs for Unset #1621 by @techfg in stretchr/testify#1709

README: apply gofmt to examples by @alexandear in stretchr/testify#1687

refactor: use %q and %T to simplify fmt.Sprintf by @alexandear in stretchr/testify#1674

Propose Christophe Colombier (ccoVeille) as approver by @brackendawson in stretchr/testify#1716

Update documentation for the Error function in assert or require package by @architagr in stretchr/testify#1675

assert: remove deprecated build constraints by @alexandear in stretchr/testify#1671

assert: apply gofumpt to internal test suite by @ccoVeille in stretchr/testify#1739

CI: fix shebang in .ci.*.sh scripts by @dolmen in stretchr/testify#1746

assert,require: enable parallel testing on (almost) all top tests by @dolmen in stretchr/testify#1747

suite.Passed: add one more status test report by @Ararsa-Derese in stretchr/testify#1706

Add Helper() method in internal mocks and assert.CollectT by @dolmen in stretchr/testify#1423

assert.Same/NotSame: improve usage of Sprintf by @ccoVeille in stretchr/testify#1742

mock: enable parallel testing on internal testsuite by @dolmen in stretchr/testify#1756

suite: cleanup use of 'testing' internals at runtime by @dolmen in stretchr/testify#1751

assert: check test failure message for Empty and NotEmpty by @ccoVeille in stretchr/testify#1745

deps: fix dependency cycle with objx (again) by @dolmen in stretchr/testify#1567

assert.Empty: comprehensive doc of "Empty"-ness rules by @dolmen in stretchr/testify#1753

doc: improve godoc of top level 'testify' package by @dolmen in stretchr/testify#1760

assert.ErrorAs: simplify retrieving the type name by @ccoVeille in stretchr/testify#1740

assert.EqualValues: improve test coverage to 100% by @dolmen in stretchr/testify#1763

suite.Run: simplify running of Setup/TeardownSuite by @renzoarreaza in stretchr/testify#1769

assert.CallerInfo: micro optimization by using LastIndexByte by @dolmen in stretchr/testify#1767

assert.CallerInfo: micro cleanup by @dolmen in stretchr/testify#1768

assert: refactor TestFileExists and TestDirExists tests to enable parallel testing by @dolmen in stretchr/testify#1766

... (truncated)

Commits

b7801fb Merge pull request #1778 from stretchr/dependabot/github_actions/actions/chec...
69831f3 build(deps): bump actions/checkout from 4 to 5
a53be35 Improve captureTestingT helper
aafb604 mock: improve formatting of error message
7218e03 improve error msg
929a212 Merge pull request #1758 from stretchr/dolmen/suite-faster-method-filtering
bc7459e suite: faster filtering of methods (-testify.m)
7d37b5c suite: refactor methodFilter
c58bc90 Merge pull request #1764 from stretchr/dolmen/suite-refactor-stats-for-readab...
87101a6 suite.Run: refactor handling of stats
Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.72.1 to 1.75.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.75.0

Behavior Changes

xds: Remove support for GRPC_EXPERIMENTAL_XDS_FALLBACK environment variable. Fallback support can no longer be disabled. (#8482)

stats: Introduce DelayedPickComplete event, a type alias of PickerUpdated. (#8465)

This (combined) event will now be emitted only once per call, when a transport is successfully selected for the attempt.

OpenTelemetry metrics will no longer have multiple "Delayed LB pick complete" events in Go, matching other gRPC languages.

A future release will delete the PickerUpdated symbol.

credentials: Properly apply grpc.WithAuthority as the highest-priority option for setting authority, above the setting in the credentials themselves. (#8488)

Now that this WithAuthority is available, the credentials should not be used to override the authority.

round_robin: Randomize the order in which addresses are connected to in order to spread out initial RPC load between clients. (#8438)

server: Return status code INTERNAL when a client sends more than one request in unary and server streaming RPC. (#8385)

This is a behavior change but also a bug fix to bring gRPC-Go in line with the gRPC spec.

New Features

dns: Add an environment variable (GRPC_ENABLE_TXT_SERVICE_CONFIG) to provide a way to disable TXT lookups in the DNS resolver (by setting it to false). By default, TXT lookups are enabled, as they were previously. (#8377)

Bug Fixes

xds: Fix regression preventing empty node IDs in xDS bootstrap configuration. (#8476)

Special Thanks: @davinci26

xds: Fix possible panic when certain invalid resources are encountered. (#8412)

Special Thanks: @wooffie

xdsclient: Fix a rare panic caused by processing a response from a closed server. (#8389)

stats: Fix metric unit formatting by enclosing non-standard units like call and endpoint in curly braces to comply with UCUM and gRPC OpenTelemetry guidelines. (#8481)

xds: Fix possible panic when clusters are removed from the xds configuration. (#8428)

xdsclient: Fix a race causing "resource doesn not exist" when rapidly subscribing and unsubscribing to the same resource. (#8369)

client: When determining the authority, properly percent-encode (if needed, which is unlikely) when the target string omits the hostname and only specifies a port (grpc.NewClient(":<port-number-or-name>")). (#8488)

Release 1.74.2

New Features

grpc: introduce new DialOptions and ServerOptions (WithStaticStreamWindowSize, WithStaticConnWindowSize, StaticStreamWindowSize, StaticConnWindowSize) that force fixed window sizes for all HTTP/2 connections. By default, gRPC uses dynamic sizing of these windows based upon a BDP estimation algorithm. The existing options (WithInitialWindowSize, etc) also disable BDP estimation, but this behavior will be changed in a following release. (#8283)

API Changes

balancer: add ExitIdle method to Balancer interface. Earlier, implementing this method was optional. (#8367)

Behavior Changes

xds: Remove the GRPC_EXPERIMENTAL_ENABLE_LEAST_REQUEST environment variable that allows disabling the least request balancer with xDS. Least request was made available by default with xDS in v1.72.0. (#8248)

Special Thanks: @atollena

server: allow 0s grpc-timeout header values, which older gRPC-Java versions could send. This restores the behavior of grpc-go before v1.73.0. (#8439)

Bug Fixes

googledirectpath: avoid logging the error message Attempt to set a bootstrap configuration... when creating multiple directpath channels. (#8419)

Performance Improvements

... (truncated)

Commits

b9788ef Change version to 1.75.0 (#8493)
2bd74b2 credentials: fix behavior of grpc.WithAuthority and credential handshake prec...
9fa3267 xds: remove xds client fallback environment variable (#8482)
62ec29f grpc: Fix cardinality violations in non-client streaming RPCs. (#8385)
85240a5 stats: change non-standard units to annotations (#8481)
ac13172 update deps (#8478)
0a895bc examples/opentelemetry: use experimental metrics in example (#8441)
8b61e8f xdsclient: do not process updates from closed server channels (#8389)
7238ab1 Allow empty nodeID (#8476)
9186ebd cleanup: use slices.Equal to simplify code (#8472)
Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.36.6 to 1.36.8

Updates github.com/onsi/ginkgo/v2 from 2.23.4 to 2.25.1

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.25.1

2.25.1

Fixes

fix(types): ignore nameless nodes on FullText() [10866d3]

chore: fix some CodeQL warnings [2e42cff]

v2.25.0

2.25.0

AroundNode

This release introduces a new decorator to support more complex spec setup usecases.

AroundNode registers a function that runs before each individual node. This is considered a more advanced decorator.

Please read the docs for more information and some examples.

Allowed signatures:

AroundNode(func()) - func will be called before the node is run.

AroundNode(func(ctx context.Context) context.Context) - func can wrap the passed in context and return a new one which will be passed on to the node.

AroundNode(func(ctx context.Context, body func(ctx context.Context))) - ctx is the context for the node and body is a function that must be called to run the node. This gives you complete control over what runs before and after the node.

Multiple AroundNode decorators can be applied to a single node and they will run in the order they are applied.

Unlike setup nodes like BeforeEach and DeferCleanup, AroundNode is guaranteed to run in the same goroutine as the decorated node. This is necessary when working with lower-level libraries that must run on a single thread (you can call runtime.LockOSThread() in the AroundNode to ensure that the node runs on a single thread).

Since AroundNode allows you to modify the context you can also use AroundNode to implement shared setup that attaches values to the context.

If applied to a container, AroundNode will run before every node in the container. Including setup nodes like BeforeEach and DeferCleanup.

AroundNode can also be applied to RunSpecs to run before every node in the suite. This opens up new mechanisms for instrumenting individual nodes across an entire suite.

v2.24.0

2.24.0

Features

Specs can now be decorated with (e.g.) SemVerConstraint("2.1.0") and ginkgo --sem-ver-filter="2.1.1" will only run constrained specs that match the requested version. Learn more in the docs here! Thanks to @Icarus9913 for the PR.

Fixes

remove -o from run command [3f5d379]. fixes #1582

Maintenance

Numerous dependency bumps and documentation fixes

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.25.1

Fixes

fix(types): ignore nameless nodes on FullText() [10866d3]

chore: fix some CodeQL warnings [2e42cff]

2.25.0

AroundNode

This release introduces a new decorator to support more complex spec setup usecases.

AroundNode registers a function that runs before each individual node. This is considered a more advanced decorator.

Please read the docs for more information and some examples.

Allowed signatures:

AroundNode(func()) - func will be called before the node is run.

AroundNode(func(ctx context.Context) context.Context) - func can wrap the passed in context and return a new one which will be passed on to the node.

AroundNode(func(ctx context.Context, body func(ctx context.Context))) - ctx is the context for the node and body is a function that must be called to run the node. This gives you complete control over what runs before and after the node.

Multiple AroundNode decorators can be applied to a single node and they will run in the order they are applied.

Unlike setup nodes like BeforeEach and DeferCleanup, AroundNode is guaranteed to run in the same goroutine as the decorated node. This is necessary when working with lower-level libraries that must run on a single thread (you can call runtime.LockOSThread() in the AroundNode to ensure that the node runs on a single thread).

Since AroundNode allows you to modify the context you can also use AroundNode to implement shared setup that attaches values to the context.

If applied to a container, AroundNode will run before every node in the container. Including setup nodes like BeforeEach and DeferCleanup.

AroundNode can also be applied to RunSpecs to run before every node in the suite. This opens up new mechanisms for instrumenting individual nodes across an entire suite.

2.24.0

Features

Specs can now be decorated with (e.g.) SemVerConstraint("2.1.0") and ginkgo --sem-ver-filter="2.1.1" will only run constrained specs that match the requested version. Learn more in the docs here! Thanks to @Icarus9913 for the PR.

Fixes

remove -o from run command [3f5d379]. fixes #1582

Maintenance

Numerous dependency bumps and documentation fixes

Commits

1ec9114 v2.25.1
2e42cff chore: fix some CodeQL warnings
10866d3 fix(types): ignore nameless nodes on FullText()
fcc0e74 v2.25.0
79e35c9 tidy up docs
6fef07c Document AroundNode
665e7ba AroundNode supports simpler signatures too
d41f01e AroundNode - preview
3d9dae2 v2.24.0
3f5d379 remove -o from run command
Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.37.0 to 1.38.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.38.1

1.38.1

Fixes

Numerous minor fixes and dependency bumps

v1.38.0

1.38.0

Features

gstruct handles extra unexported fields [4ee7ed0]

Fixes

support [] in IgnoringTopFunction function signatures (#851) [36bbf72]

Maintenance

Bump golang.org/x/net from 0.40.0 to 0.41.0 (#846) [529d408]

Fix typo [acd1f55]

Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 (#835) [bae65a0]

Bump nokogiri from 1.18.4 to 1.18.8 in /docs (#842) [8dda91f]

Bump golang.org/x/net from 0.39.0 to 0.40.0 (#843) [212d812]

Bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 (#839) [59bd7f9]

Bump nokogiri from 1.18.1 to 1.18.4 in /docs (#834) [328c729]

Bump uri from 1.0.2 to 1.0.3 in /docs (#826) [9a798a1]

Bump golang.org/x/net from 0.37.0 to 0.39.0 (#841) [04a72c6]

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.38.1

Fixes

Numerous minor fixes and dependency bumps

1.38.0

Features

gstruct handles extra unexported fields [4ee7ed0]

Fixes

support [] in IgnoringTopFunction function signatures (#851) [36bbf72]

Maintenance

Bump golang.org/x/net from 0.40.0 to 0.41.0 (#846) [529d408]

Fix typo [acd1f55]

Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 (#835) [bae65a0]

Bump nokogiri from 1.18.4 to 1.18.8 in /docs (#842) [8dda91f]

Bump golang.org/x/net from 0.39.0 to 0.40.0 (#843) [212d812]

Bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 (#839) [59bd7f9]

Bump nokogiri from 1.18.1 to 1.18.4 in /docs (#834) [328c729]

Bump uri from 1.0.2 to 1.0.3 in /docs (#826) [9a798a1]

Bump golang.org/x/net from 0.37.0 to 0.39.0 (#841) [04a72c6]

Commits

c36e89a v1.38.1
92eaa57 go mod tidy
b9ed3cd deprecate CompileTest*
2a5bf77 fix invalid fmt.Errorf
3e9e385 bump ginkgo
7f37abe Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v3
69e4761 fix(async_assertion): use correct error in errors.As
95737c0 Bump golang.org/x/net from 0.41.0 to 0.43.0 (#856)
91b20ea chore: fix Go vet issue with Go 1.15
6823587 Bump nokogiri from 1.18.8 to 1.18.9 in /docs (#854)
Additional commits viewable in compare view

Updates github.com/coreos/go-systemd/v22 from 22.5.0 to 22.6.0

Release notes

Sourced from github.com/coreos/go-systemd/v22's releases.

v22.6.0

This release bumps Go requirement to 1.23, modernizes code, improves CI and documentation, fixes a few bugs, and adds a new dbus method.

What's Changed

workflows: update Linux distro versions; update actions; add Go 1.20 by @bgilbert in coreos/go-systemd#418

Sync repo templates ⚙ by @coreosbot-releng in coreos/go-systemd#422

build(deps): bump github.com/godbus/dbus/v5 from 5.0.4 to 5.1.0 by @dependabot[bot] in coreos/go-systemd#423

journal: fix return types inside C wrapper functions by @darxriggs in coreos/go-systemd#419

dlopen: make error handling thread safe by @Luap99 in coreos/go-systemd#431

Sync repo templates ⚙ by @coreosbot-releng in coreos/go-systemd#450

Modernize and fix CI by @kolyshkin in coreos/go-systemd#459

dbus: add AttachProcessesToUnit by @kolyshkin in coreos/go-systemd#458

dbus: Add a comment about result channel behaviour by @NotSoFancyName in coreos/go-systemd#463

Bump go to 1.23, fix tests, add more images by @kolyshkin in coreos/go-systemd#464

Modernize sources, add golangci-lint by @kolyshkin in coreos/go-systemd#466

build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in coreos/go-systemd#467

ci: test go 1.25 by @Luap99 in coreos/go-systemd#468

README: bump minimal Go version by @kolyshkin in coreos/go-systemd#470

import1: test fixes by @kolyshkin in coreos/go-systemd#469

New Contributors

@coreosbot-releng made their first contribution in coreos/go-systemd#422

@dependabot[bot] made their first contribution in coreos/go-systemd#423

@darxriggs made their first contribution in coreos/go-systemd#419

@Luap99 made their first contribution in coreos/go-systemd#431

@NotSoFancyName made their first contribution in coreos/go-systemd#463

Full Changelog: coreos/go-systemd@v22.5.0...v22.6.0

Commits

8214e15 Merge pull request #469 from kolyshkin/nits
3c6acce import1: fix TestImport* cleanup
9f51dd8 import1: use t.TempDir
c063bef Merge pull request #470 from kolyshkin/fix-readme
f9135e7 README: bump minimal Go version
45cbc16 Merge pull request #468 from Luap99/go-1.25
485b30b ci: test go 1.25
b4e6d71 Merge pull request #467 from coreos/dependabot/github_actions/actions/checkout-5
227924f build(deps): bump actions/checkout from 4 to 5
446c54a Merge pull request #466 from kolyshkin/modernize
Additional commits viewable in compare view

Updates github.com/emicklei/go-restful/v3 from 3.12.2 to 3.13.0

Changelog

Sourced from github.com/emicklei/go-restful/v3's changelog.

[v3.13.0] - 2025-08-14

optimize performance of path matching in CurlyRouter ( thanks @wenhuang, Wen Huang)

Commits

3fae6e4 update deps of jwtauth example
9de612a update changes, document new feature
4c1b61e Merge pull request #588 from wenhug/regexcache
54fe5bb Refactor regex caching logic in CurlyRouter and custom verbs for improved rea...
6a74e9b Merge pull request #589 from emicklei/dependabot/github_actions/v3/github-act...
043cc22 Bump the github-actions group across 1 directory with 4 updates
93fbb2f Add enable/disable functionality for regex caching in CurlyRouter and custom ...
c282bfe Implement regex caching for CurlyRouter and custom verbs
1959514 Merge pull request #583 from emicklei/dependabot/github_actions/v3/github-act...
246fc52 Bump codecov/codecov-action in the github-actions group
See full diff in compare view

Updates github.com/fxamacker/cbor/v2 from 2.8.0 to 2.9.0

Release notes

Sourced from github.com/fxamacker/cbor/v2's releases.

v2.9.0 adds new features, refactors tests, and improves docs. New features improve interoperability/transcoding between CBOR & JSON.

v2.9.0 passed fuzz tests and is production quality. However, the new TextUnmarshaler feature will continue being fuzz tested a bit longer due to recent changes. The recent changes are limited and don't affect other parts of the codec that passed ~2 billion execs fuzzing.

What's Changed

Refactor to use Go standard library functions by @fxamacker in fxamacker/cbor#663

Improve DupMapKeyError message by @fxamacker in fxamacker/cbor#670

Add options to support TextMarshaler and TextUnmarshaler by @benluddy in fxamacker/cbor#672

Add optional support for json.Marshaler and json.Unmarshaler via transcoding by @benluddy in fxamacker/cbor#673

Refactor tests and update comments by @fxamacker in fxamacker/cbor#678

Use TextUnmarshaler on byte strings with ByteStringToStringAllowed. by @benluddy in fxamacker/cbor#682

Docs

README: Document struct field tag "-" by @fxamacker in fxamacker/cbor#653

Fix IntDecConvertSignedOrBigInt doc comment by @theory in fxamacker/cbor#655

Update docs for TimeMode, Tag, RawTag, and add example for Embedded JSON Tag for CBOR by @fxamacker in fxamacker/cbor#659

Update README for Embedded JSON Tag for CBOR (tag 262) by @fxamacker in fxamacker/cbor#662

Fix typos in some comments by @adeinega in fxamacker/cbor#671

Update README for v2.9.0 and add Red Hat as a user by @fxamacker in fxamacker/cbor#684

CI

Bump github/codeql-action from 3.28.13 to 3.28.15 by @dependabot[bot] in fxamacker/cbor#651

Bump github/codeql-action from 3.28.15 to 3.28.16 by @dependabot[bot] in fxamacker/cbor#658

Bump github/codeql-action from 3.28.16 to 3.28.17 by @dependabot[bot] in fxamacker/cbor#660

Bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot[bot] in fxamacker/cbor#661

Bump github/codeql-action from 3.28.17 to 3.28.18 by @dependabot[bot] in fxamacker/cbor#664

Bump github/codeql-action from 3.28.18 to 3.28.19 by @dependabot[bot] in fxamacker/cbor#667

Bump github/codeql-action from 3.28.19 to 3.29.0 by @dependabot[bot] in fxamacker/cbor#674

Bump github/codeql-action from 3.29.0 to 3.29.2 by @dependabot[bot] in fxamacker/cbor#680

Special Thanks

Many thanks to @benluddy for adding these new features! 🎉

Add opt-in support for encoding.TextMarshaler and encoding.TextUnmarshaler to encode and decode from CBOR text string.

Add opt-in support for json.Marshaler and json.Unmarshaler via user-provided transcoding function.

New Contributors

@theory made their first contribution in fxamacker/cbor#655

@adeinega made their first contribution in fxamacker/cbor#671

Full Changelog: fxamacker/cbor@v2.8.0...v2.9.0

Commits

d29ad73 Merge pull request #684 from fxamacker/fxamacker/update-readme-for-v2.9.0
6a631fa Update README for v2.9.0 and add Red Hat as a user
8c8d4c3 Merge pull request #682 from benluddy/textunmarshaler-bytestringtostring
9bdebd2 Use TextUnmarshaler on byte strings with ByteStringToStringAllowed.
a89c3ce Merge pull request #680 from fxamacker/dependabot/github_actions/github/codeq...
7ef1742 Bump github/codeql-action from 3.29.0 to 3.29.2
2d79f19 Merge pull request #678 from fxamacker/fxamacker/refactor-tests-and-fix-spell...
0b94ce7 Fix comments to use one "l" in marshal*
508be91 Rename two test funcs that can panic
9251397 Refactor test to use fmt.Appendf
Additional commits viewable in compare view

Updates github.com/go-openapi/jsonpointer from 0.21.1 to 0.21.2

Commits

2247499 fix: prevent panic on nil intermediate values during Set operations
f485c21 Bump golangci/golangci-lint-action in the development-dependencies group
76476c2 ci: updated config for golangci-lint v2

Bumps the github-dependencies group with 40 updates: | Package | From | To | | --- | --- | --- | | [github.com/miekg/dns](https://github.com/miekg/dns) | `1.1.66` | `1.1.68` | | [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.6` | `1.0.7` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.10.0` | `1.11.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.72.1` | `1.75.0` | | google.golang.org/protobuf | `1.36.6` | `1.36.8` | | [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.23.4` | `2.25.1` | | [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.37.0` | `1.38.1` | | [github.com/coreos/go-systemd/v22](https://github.com/coreos/go-systemd) | `22.5.0` | `22.6.0` | | [github.com/emicklei/go-restful/v3](https://github.com/emicklei/go-restful) | `3.12.2` | `3.13.0` | | [github.com/fxamacker/cbor/v2](https://github.com/fxamacker/cbor) | `2.8.0` | `2.9.0` | | [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) | `0.21.1` | `0.21.2` | | [github.com/google/cadvisor](https://github.com/google/cadvisor) | `0.52.1` | `0.53.0` | | [github.com/google/gnostic-models](https://github.com/google/gnostic-models) | `0.6.9` | `0.7.0` | | [github.com/google/pprof](https://github.com/google/pprof) | `0.0.0-20250403155104-27863c87afa6` | `0.0.0-20250820193118-f64d9cf942d6` | | [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.26.3` | `2.27.2` | | [github.com/opencontainers/cgroups](https://github.com/opencontainers/cgroups) | `0.0.2` | `0.0.4` | | [github.com/prometheus/common](https://github.com/prometheus/common) | `0.64.0` | `0.65.0` | | [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.16.1` | `0.17.0` | | [github.com/stoewer/go-strcase](https://github.com/stoewer/go-strcase) | `1.3.0` | `1.3.1` | | [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.60.0` | `0.62.0` | | [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.60.0` | `0.61.0` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.35.0` | `1.37.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.35.0` | `1.37.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.35.0` | `1.37.0` | | [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.35.0` | `1.37.0` | | [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.35.0` | `1.37.0` | | [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.35.0` | `1.37.0` | | [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go) | `1.6.0` | `1.7.0` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.38.0` | `0.41.0` | | [golang.org/x/mod](https://github.com/golang/mod) | `0.24.0` | `0.27.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.40.0` | `0.43.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.14.0` | `0.16.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.33.0` | `0.35.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.32.0` | `0.34.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.25.0` | `0.28.0` | | [golang.org/x/time](https://github.com/golang/time) | `0.11.0` | `0.12.0` | | [golang.org/x/tools](https://github.com/golang/tools) | `0.33.0` | `0.36.0` | | [google.golang.org/genproto/googleapis/api](https://github.com/googleapis/go-genproto) | `0.0.0-20250428153025-10db94c68c34` | `0.0.0-20250818200422-3122310a409c` | | [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20250428153025-10db94c68c34` | `0.0.0-20250818200422-3122310a409c` | | gopkg.in/evanphx/json-patch.v4 | `4.12.0` | `4.13.0` | Updates `github.com/miekg/dns` from 1.1.66 to 1.1.68 - [Changelog](https://github.com/miekg/dns/blob/master/Makefile.release) - [Commits](miekg/dns@v1.1.66...v1.1.68) Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.7 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.6...v1.0.7) Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.0 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.10.0...v1.11.0) Updates `google.golang.org/grpc` from 1.72.1 to 1.75.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.72.1...v1.75.0) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.8 Updates `github.com/onsi/ginkgo/v2` from 2.23.4 to 2.25.1 - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](onsi/ginkgo@v2.23.4...v2.25.1) Updates `github.com/onsi/gomega` from 1.37.0 to 1.38.1 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.37.0...v1.38.1) Updates `github.com/coreos/go-systemd/v22` from 22.5.0 to 22.6.0 - [Release notes](https://github.com/coreos/go-systemd/releases) - [Commits](coreos/go-systemd@v22.5.0...v22.6.0) Updates `github.com/emicklei/go-restful/v3` from 3.12.2 to 3.13.0 - [Release notes](https://github.com/emicklei/go-restful/releases) - [Changelog](https://github.com/emicklei/go-restful/blob/v3/CHANGES.md) - [Commits](emicklei/go-restful@v3.12.2...v3.13.0) Updates `github.com/fxamacker/cbor/v2` from 2.8.0 to 2.9.0 - [Release notes](https://github.com/fxamacker/cbor/releases) - [Commits](fxamacker/cbor@v2.8.0...v2.9.0) Updates `github.com/go-openapi/jsonpointer` from 0.21.1 to 0.21.2 - [Commits](go-openapi/jsonpointer@v0.21.1...v0.21.2) Updates `github.com/google/cadvisor` from 0.52.1 to 0.53.0 - [Release notes](https://github.com/google/cadvisor/releases) - [Changelog](https://github.com/google/cadvisor/blob/master/CHANGELOG.md) - [Commits](google/cadvisor@v0.52.1...v0.53.0) Updates `github.com/google/gnostic-models` from 0.6.9 to 0.7.0 - [Commits](google/gnostic-models@v0.6.9...v0.7.0) Updates `github.com/google/pprof` from 0.0.0-20250403155104-27863c87afa6 to 0.0.0-20250820193118-f64d9cf942d6 - [Commits](https://github.com/google/pprof/commits) Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.26.3 to 2.27.2 - [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases) - [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/main/.goreleaser.yml) - [Commits](grpc-ecosystem/grpc-gateway@v2.26.3...v2.27.2) Updates `github.com/opencontainers/cgroups` from 0.0.2 to 0.0.4 - [Release notes](https://github.com/opencontainers/cgroups/releases) - [Changelog](https://github.com/opencontainers/cgroups/blob/main/RELEASES.md) - [Commits](opencontainers/cgroups@v0.0.2...v0.0.4) Updates `github.com/prometheus/common` from 0.64.0 to 0.65.0 - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md) - [Commits](prometheus/common@v0.64.0...v0.65.0) Updates `github.com/prometheus/procfs` from 0.16.1 to 0.17.0 - [Release notes](https://github.com/prometheus/procfs/releases) - [Commits](prometheus/procfs@v0.16.1...v0.17.0) Updates `github.com/stoewer/go-strcase` from 1.3.0 to 1.3.1 - [Release notes](https://github.com/stoewer/go-strcase/releases) - [Commits](stoewer/go-strcase@v1.3.0...v1.3.1) Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.60.0 to 0.62.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.60.0...zpages/v0.62.0) Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.60.0 to 0.61.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.60.0...zpages/v0.61.0) Updates `go.opentelemetry.io/otel` from 1.35.0 to 1.37.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.37.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.35.0 to 1.37.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.37.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.35.0 to 1.37.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.37.0) Updates `go.opentelemetry.io/otel/metric` from 1.35.0 to 1.37.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.37.0) Updates `go.opentelemetry.io/otel/sdk` from 1.35.0 to 1.37.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.37.0) Updates `go.opentelemetry.io/otel/trace` from 1.35.0 to 1.37.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.37.0) Updates `go.opentelemetry.io/proto/otlp` from 1.6.0 to 1.7.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases) - [Commits](open-telemetry/opentelemetry-proto-go@v1.6.0...v1.7.0) Updates `golang.org/x/crypto` from 0.38.0 to 0.41.0 - [Commits](golang/crypto@v0.38.0...v0.41.0) Updates `golang.org/x/mod` from 0.24.0 to 0.27.0 - [Commits](golang/mod@v0.24.0...v0.27.0) Updates `golang.org/x/net` from 0.40.0 to 0.43.0 - [Commits](golang/net@v0.40.0...v0.43.0) Updates `golang.org/x/sync` from 0.14.0 to 0.16.0 - [Commits](golang/sync@v0.14.0...v0.16.0) Updates `golang.org/x/sys` from 0.33.0 to 0.35.0 - [Commits](golang/sys@v0.33.0...v0.35.0) Updates `golang.org/x/term` from 0.32.0 to 0.34.0 - [Commits](golang/term@v0.32.0...v0.34.0) Updates `golang.org/x/text` from 0.25.0 to 0.28.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.25.0...v0.28.0) Updates `golang.org/x/time` from 0.11.0 to 0.12.0 - [Commits](golang/time@v0.11.0...v0.12.0) Updates `golang.org/x/tools` from 0.33.0 to 0.36.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.33.0...v0.36.0) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250428153025-10db94c68c34 to 0.0.0-20250818200422-3122310a409c - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250428153025-10db94c68c34 to 0.0.0-20250818200422-3122310a409c - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `gopkg.in/evanphx/json-patch.v4` from 4.12.0 to 4.13.0 --- updated-dependencies: - dependency-name: github.com/miekg/dns dependency-version: 1.1.68 dependency-type: indirect update-type: version-update:semver-patch dependency-group: github-dependencies - dependency-name: github.com/spf13/pflag dependency-version: 1.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-dependencies - dependency-name: github.com/stretchr/testify dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: google.golang.org/grpc dependency-version: 1.75.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: google.golang.org/protobuf dependency-version: 1.36.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-dependencies - dependency-name: github.com/onsi/ginkgo/v2 dependency-version: 2.25.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: github.com/onsi/gomega dependency-version: 1.38.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: github.com/coreos/go-systemd/v22 dependency-version: 22.6.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: github.com/emicklei/go-restful/v3 dependency-version: 3.13.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: github.com/fxamacker/cbor/v2 dependency-version: 2.9.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: github.com/go-openapi/jsonpointer dependency-version: 0.21.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: github-dependencies - dependency-name: github.com/google/cadvisor dependency-version: 0.53.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: github.com/google/gnostic-models dependency-version: 0.7.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: github.com/google/pprof dependency-version: 0.0.0-20250820193118-f64d9cf942d6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: github-dependencies - dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2 dependency-version: 2.27.2 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: github.com/opencontainers/cgroups dependency-version: 0.0.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: github-dependencies - dependency-name: github.com/prometheus/common dependency-version: 0.65.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: github.com/prometheus/procfs dependency-version: 0.17.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: github.com/stoewer/go-strcase dependency-version: 1.3.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: github-dependencies - dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc dependency-version: 0.62.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp dependency-version: 0.61.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: go.opentelemetry.io/otel dependency-version: 1.37.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace dependency-version: 1.37.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc dependency-version: 1.37.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: go.opentelemetry.io/otel/metric dependency-version: 1.37.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.37.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.37.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: go.opentelemetry.io/proto/otlp dependency-version: 1.7.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: golang.org/x/crypto dependency-version: 0.41.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: golang.org/x/mod dependency-version: 0.27.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: golang.org/x/net dependency-version: 0.43.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: golang.org/x/sync dependency-version: 0.16.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: golang.org/x/sys dependency-version: 0.35.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: golang.org/x/term dependency-version: 0.34.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: golang.org/x/text dependency-version: 0.28.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: golang.org/x/time dependency-version: 0.12.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: golang.org/x/tools dependency-version: 0.36.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20250818200422-3122310a409c dependency-type: indirect update-type: version-update:semver-patch dependency-group: github-dependencies - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20250818200422-3122310a409c dependency-type: indirect update-type: version-update:semver-patch dependency-group: github-dependencies - dependency-name: gopkg.in/evanphx/json-patch.v4 dependency-version: 4.13.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

k8s-ci-robot · 2025-08-25T09:56:02Z

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubernetes-csi member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

k8s-ci-robot · 2025-08-25T09:56:08Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign msau42 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

k8s-ci-robot · 2025-08-25T09:58:41Z

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
pull-kubernetes-csi-external-provisioner-1-31-on-kubernetes-1-31	`aa16db0`	link	true	`/test pull-kubernetes-csi-external-provisioner-1-31-on-kubernetes-1-31`
pull-kubernetes-csi-external-provisioner-1-32-on-kubernetes-1-32	`aa16db0`	link	true	`/test pull-kubernetes-csi-external-provisioner-1-32-on-kubernetes-1-32`
pull-kubernetes-csi-external-provisioner-distributed-on-kubernetes-1-26	`aa16db0`	link	true	`/test pull-kubernetes-csi-external-provisioner-distributed-on-kubernetes-1-26`
pull-kubernetes-csi-external-provisioner-1-33-on-kubernetes-1-33	`aa16db0`	link	false	`/test pull-kubernetes-csi-external-provisioner-1-33-on-kubernetes-1-33`
pull-kubernetes-csi-external-provisioner-unit	`aa16db0`	link	true	`/test pull-kubernetes-csi-external-provisioner-unit`

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

dependabot bot added area/dependency Issues or PRs related to dependency changes ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. labels Aug 25, 2025

k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Aug 25, 2025

k8s-ci-robot requested review from andyzhangx and carlory August 25, 2025 09:56

k8s-ci-robot added the size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. label Aug 25, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the github-dependencies group with 40 updates #1410

build(deps): bump the github-dependencies group with 40 updates #1410

dependabot bot commented on behalf of github Aug 25, 2025

Uh oh!

k8s-ci-robot commented Aug 25, 2025

Uh oh!

k8s-ci-robot commented Aug 25, 2025

Uh oh!

k8s-ci-robot commented Aug 25, 2025

Uh oh!

Uh oh!

build(deps): bump the github-dependencies group with 40 updates #1410

Are you sure you want to change the base?

build(deps): bump the github-dependencies group with 40 updates #1410

Conversation

dependabot bot commented on behalf of github Aug 25, 2025

v1.0.7

What's Changed

New Contributors

v1.11.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

Release 1.75.0

Behavior Changes

New Features

Bug Fixes

Release 1.74.2

New Features

API Changes

Behavior Changes

Bug Fixes

Performance Improvements

v2.25.1

2.25.1

Fixes

v2.25.0

2.25.0

AroundNode

v2.24.0

2.24.0

Features

Fixes

Maintenance

2.25.1

Fixes

2.25.0

AroundNode

2.24.0

Features

Fixes

Maintenance

v1.38.1

1.38.1

Fixes

v1.38.0

1.38.0

Features

Fixes

Maintenance

1.38.1

Fixes

1.38.0

Features

Fixes

Maintenance

v22.6.0

What's Changed

New Contributors

[v3.13.0] - 2025-08-14

What's Changed

Docs

CI

Special Thanks

New Contributors

Uh oh!

k8s-ci-robot commented Aug 25, 2025

Uh oh!

k8s-ci-robot commented Aug 25, 2025

Uh oh!

k8s-ci-robot commented Aug 25, 2025

Uh oh!

Uh oh!

`AroundNode`

`AroundNode`