chore(deps): update non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
gcr.io/cadvisor/cadvisor		minor	0.54.1 → 0.55.1
github.com/quic-go/quic-go	replace	minor	v0.57.1 → v0.58.0
prom/prometheus		minor	v3.8.1 → v3.9.0
prom/prometheus		minor	3.8.1 → 3.9.0
typescript-eslint (source)	devDependencies	patch	8.50.0 → 8.50.1

---

Release Notes

quic-go/quic-go (github.com/quic-go/quic-go)

v0.58.0

Compare Source

This release optimizes the QUIC handshake:

• Multiple incoming packets are now processed before sending an acknowledgment, reducing the total number of packets sent: #​5451
• ACK frames are now packed into coalesced packets, reducing the need to send a separate packet just for the ACK in many cases: #​5477
• When packets are buffered during the handshake, this now doesn't lead to inflated RTT measurements anymore: #​5493, #​5494

Other notable changes

• quic-go now has a new logo: #​5484
• ACK frames can now be encoded with up to 64 ranges (previously: 32): #​5476
• Serializing ACK frames is now significantly faster: #​5476
• Improved batch packet processing logic: #​5478
• qlog: added support for the datagram_id on packet_sent, packet_received and packet_buffered events, using the CRC32 of the packet

Changelog

• qlog: add a DebugEvent by @​marten-seemann in #​5456
• qlog the datagram_id for long header and coalesced packets by @​marten-seemann in #​5455
• build(deps): bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​5458
• handshake: pass cipherSuite by value instead of pointer by @​marten-seemann in #​5459
• handshake: add a benchmark for token decoding by @​marten-seemann in #​5460
• use synctest in the session resumption test by @​marten-seemann in #​5424
• handshake: fix QUIC events with session tickets disabled on Go 1.26 by @​marten-seemann in #​5462
• fix flaky TestConnectionCongestionControl by @​Copilot in #​5467
• simnet: move latency configuration to Router, simplify queueing logic by @​marten-seemann in #​5463
• use synctest for the RTT and reordering tests by @​marten-seemann in #​5464
• use synctest for 0-RTT integration tests by @​marten-seemann in #​5465
• allow processing of multiple packets before handshake completion by @​marten-seemann in #​5451
• ackhandler: disentangle ReceivedPacketHandler and SentPacketHandler by @​marten-seemann in #​5469
• refactor connection tests to remove ReceivedPacketHandler mock by @​marten-seemann in #​5468
• ackhandler: remove ReceivedPacketHandler interface, use struct directly by @​marten-seemann in #​5472
• wire: add a function to trunctate an ACK frame by @​marten-seemann in #​5476
• allow packing of ACKs in coalesced packets by @​marten-seemann in #​5477
• improve batch packet processing logic by @​marten-seemann in #​5478
• build(deps): bump actions/cache from 4 to 5 by @​dependabot[bot] in #​5482
• build(deps): bump actions/upload-artifact from 5 to 6 by @​dependabot[bot] in #​5483
• update the logo by @​marten-seemann in #​5484
• ci: add Go 1.26rc1 to tested Go versions by @​marten-seemann in #​5486
• utils: make TestAddTimestamp work in all time zones by @​marten-seemann in #​5492
• ackhandler: record RTT measurements for non-ack-eliciting packets by @​marten-seemann in #​5494
• ackhandler: only generate RTT sample for the last ack-eliciting packet by @​marten-seemann in #​5493

Full Changelog: quic-go/quic-go@v0.57.0...v0.58.0

prometheus/prometheus (prom/prometheus)

v3.9.0

Compare Source

typescript-eslint/typescript-eslint (typescript-eslint)

v8.50.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 6.98%. Comparing base (0a56486) to head (bc818eb).
⚠️ Report is 4 commits behind head on main.

Additional details and impacted files

@@          Coverage Diff          @@
##            main    #341   +/-   ##
=====================================
  Coverage   6.98%   6.98%           
=====================================
  Files         82      82           
  Lines      15183   15183           
=====================================
  Hits        1060    1060           
  Misses     14075   14075           
  Partials      48      48           

Flag	Coverage Δ
mariadb	6.98% <ø> (ø)
postgres	6.98% <ø> (ø)
unittests	6.98% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.