🌱 Update Update Golang Dependencies group (minor) #1567

syself-bot · 2025-03-20T11:03:14Z

This PR contains the following updates:

Package	Change	Type	Update
github.com/hetznercloud/hcloud-go/v2	`v2.19.1` -> `v2.22.0`	require	minor
github.com/onsi/gomega	`v1.36.2` -> `v1.38.0`	require	minor
github.com/prometheus/common	`v0.63.0` -> `v0.65.0`	require	minor
golang.org/x/crypto	`v0.36.0` -> `v0.40.0`	require	minor
golang.org/x/exp	`054e65f` -> `645b1fa`	require	digest
golang.org/x/mod	`v0.24.0` -> `v0.26.0`	require	minor
k8s.io/utils	`24370be` -> `4c0f3b2`	require	digest
sigs.k8s.io/kind	`v0.27.0` -> `v0.29.0`	require	minor

Release Notes

hetznercloud/hcloud-go (github.com/hetznercloud/hcloud-go/v2)

`v2.22.0`

Compare Source

Features

firewall: add applied_to_resources property (#667)
add missing error codes (#671)

`v2.21.1`

Compare Source

Bug Fixes

add arg name in missing or invalid argument errors (#652)

`v2.21.0`

Compare Source

Features

consistent argument errors (#637)

Bug Fixes

http transport ignored when using instrumentation (#642)

`v2.20.1`

Compare Source

Bug Fixes

panic when a request did not set the OpPath for instrumentation (#635)

`v2.20.0`

Compare Source

In this release, the api_endpoint metric labels changed for all our API requests. Please make sure to update your setup if you were relying on them. The new labels are now easier to understand, see the example below:

the path /volumes/64314930 now has the label /volumes/- instead of /volumes/
the path /volumes/64314930/actions/resize now has the label /volumes/-/actions/resize instead of /volumes/actions/resize

Features

support go v1.24 (#604)
drop go v1.21 (#604)
exp: remove sliceutil package (#610)
drop go v1.22 (#602) (#621)
redefine api_endpoint metric labels (#626)

Bug Fixes

request in batches of 25 when waiting for actions (#611)
missing response from requests return values (#613)
move primary ip client request/response structs to schema package (#633)

onsi/gomega (github.com/onsi/gomega)

`v1.38.0`

Compare Source

1.38.0

Features

gstruct handles extra unexported fields [4ee7ed0]

Fixes

support [] in IgnoringTopFunction function signatures (#851) [36bbf72]

Maintenance

Bump golang.org/x/net from 0.40.0 to 0.41.0 (#846) [529d408]
Fix typo [acd1f55]
Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 (#835) [bae65a0]
Bump nokogiri from 1.18.4 to 1.18.8 in /docs (#842) [8dda91f]
Bump golang.org/x/net from 0.39.0 to 0.40.0 (#843) [212d812]
Bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 (#839) [59bd7f9]
Bump nokogiri from 1.18.1 to 1.18.4 in /docs (#834) [328c729]
Bump uri from 1.0.2 to 1.0.3 in /docs (#826) [9a798a1]
Bump golang.org/x/net from 0.37.0 to 0.39.0 (#841) [04a72c6]

`v1.37.0`

Compare Source

1.37.0

Features

add To/ToNot/NotTo aliases for AsyncAssertion [5666f98]

`v1.36.3`

Compare Source

1.36.3

Maintenance

bump all the things [adb8b49]
chore: replace interface{} with any [7613216]
Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]
remove spurious "toolchain" from go.mod (#819) [a0e85b9]
Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]
Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]
Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]
Bump rexml from 3.2.6 to 3.3.9 in /docs (#788) [c8b4a07]
Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812) [06431b9]
Bump webrick from 1.8.1 to 1.9.1 in /docs (#800) [b55a92d]
Fix typos (#813) [a1d518b]

prometheus/common (github.com/prometheus/common)

`v0.65.0`

Compare Source

What's Changed

Synchronize common files from prometheus/prometheus by @prombot in https://github.com/prometheus/common/pull/789
Remove otlptranslator package by @ArthurSens in https://github.com/prometheus/common/pull/791
feat(promslog): add Level() method to get slog.Level by @tjhop in https://github.com/prometheus/common/pull/795
feat: Support negative duration in new function ParseDurationAllowNegative by @iamhalje in https://github.com/prometheus/common/pull/793

New Contributors

@iamhalje made their first contribution in https://github.com/prometheus/common/pull/793

Full Changelog: prometheus/common@v0.64.0...v0.65.0

`v0.64.0`

Compare Source

What's Changed

Add deprecation notice to otlptranslator by @ArthurSens in https://github.com/prometheus/common/pull/773
Synchronize common files from prometheus/prometheus by @prombot in https://github.com/prometheus/common/pull/774
Synchronize common files from prometheus/prometheus by @prombot in https://github.com/prometheus/common/pull/775
Update Go by @SuperQ in https://github.com/prometheus/common/pull/770
chore: Upgrade golangci-lint to v2 by @kakkoyun in https://github.com/prometheus/common/pull/779
build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by @dependabot in https://github.com/prometheus/common/pull/777
build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @dependabot in https://github.com/prometheus/common/pull/776
promslog: Use the default timezone (again) by @beorn7 in https://github.com/prometheus/common/pull/739
Synchronize common files from prometheus/prometheus by @prombot in https://github.com/prometheus/common/pull/787
build(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 by @dependabot in https://github.com/prometheus/common/pull/784
build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 by @dependabot in https://github.com/prometheus/common/pull/785
build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 by @dependabot in https://github.com/prometheus/common/pull/786
refactor(promslog): make NewNopLogger() wrapper around New() by @tjhop in https://github.com/prometheus/common/pull/783
build(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 by @dependabot in https://github.com/prometheus/common/pull/788

New Contributors

@kakkoyun made their first contribution in https://github.com/prometheus/common/pull/779

Full Changelog: prometheus/common@v0.63.0...v0.64.0

kubernetes-sigs/kind (sigs.k8s.io/kind)

`v0.29.0`

Compare Source

This is a quick security release to pickup the containerd 2.1.1 CVE-2025-47290 fix.
See v0.28.0 (release days ago!) for full release notes with recent changes:
https://github.com/kubernetes-sigs/kind/releases/tag/v0.28.0

Breaking Changes

The default node image is now kindest/node:v1.33.1@sha256:050072256b9a903bd914c0b2866828150cb229cea0efe5892e2b644d5dd3b34f

New Features

Updated to containerd 2.1.1

Images pre-built for this release:

v1.33.1: kindest/node:v1.33.1@sha256:050072256b9a903bd914c0b2866828150cb229cea0efe5892e2b644d5dd3b34f
v1.32.5: kindest/node:v1.32.5@sha256:e3b2327e3a5ab8c76f5ece68936e4cafaa82edf58486b769727ab0b3b97a5b0d
v1.31.9: kindest/node:v1.31.9@sha256:b94a3a6c06198d17f59cca8c6f486236fa05e2fb359cbd75dabbfc348a10b211
v1.30.13: kindest/node:v1.30.13@sha256:397209b3d947d154f6641f2d0ce8d473732bd91c87d9575ade99049aa33cd648

NOTE: You must use the @sha256 digest to guarantee an image built for this release, until such a time as we switch to a different tagging scheme. Even then we will highly encourage digest pinning for security and reproducibility reasons.

Fixes

Fixes containerd CVE-2025-47290 / GHSA-cm76-qm8v-3j95

Contributors

Committers for this release:

(Please see v0.28.0 https://github.com/kubernetes-sigs/kind/releases/tag/v0.28.0#Contributors)

`v0.28.0`

Compare Source

This release moves to Kubernetes to 1.33.1 by default.

Breaking Changes

The default node image is now kindest/node:v1.33.1@sha256:8d866994839cd096b3590681c55a6fa4a071fdaf33be7b9660e5697d2ed13002

New Features

Updated to containerd 2.1 and runc 1.3
Updated default node image to Kubernetes 1.33.1
Updated go to 1.24.2

Images pre-built for this release:

v1.33.1: kindest/node:v1.33.1@sha256:8d866994839cd096b3590681c55a6fa4a071fdaf33be7b9660e5697d2ed13002
v1.32.5: kindest/node:v1.32.5@sha256:36187f6c542fa9b78d2d499de4c857249c5a0ac8cc2241bef2ccd92729a7a259
v1.31.9: kindest/node:v1.31.9@sha256:156da58ab617d0cb4f56bbdb4b493f4dc89725505347a4babde9e9544888bb92
v1.30.13: kindest/node:v1.30.13@sha256:8673291894dc400e0fb4f57243f5fdc6e355ceaa765505e0e73941aa1b6e0b80

NOTE: You must use the @sha256 digest to guarantee an image built for this release, until such a time as we switch to a different tagging scheme. Even then we will highly encourage digest pinning for security and reproducibility reasons.

Fixes

Node image now sets net.ipv4.conf.all.arp_ignore to 0 to address some container networking failures

Contributors

Thank you to everyone who contributed to this kind over the years!

Committers for this release:

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

syself-bot · 2025-03-20T11:03:16Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

12 additional dependencies were updated

Details:

Package	Change
`github.com/onsi/ginkgo/v2`	`v2.23.0` -> `v2.23.4`
`github.com/google/pprof`	`v0.0.0-20241210010833-40e02aabc2ad` -> `v0.0.0-20250403155104-27863c87afa6`
`github.com/prometheus/client_golang`	`v1.20.5` -> `v1.22.0`
`github.com/prometheus/client_model`	`v0.6.1` -> `v0.6.2`
`golang.org/x/net`	`v0.37.0` -> `v0.42.0`
`golang.org/x/oauth2`	`v0.25.0` -> `v0.30.0`
`golang.org/x/sync`	`v0.12.0` -> `v0.16.0`
`golang.org/x/sys`	`v0.31.0` -> `v0.34.0`
`golang.org/x/term`	`v0.30.0` -> `v0.33.0`
`golang.org/x/text`	`v0.23.0` -> `v0.27.0`
`golang.org/x/tools`	`v0.31.0` -> `v0.35.0`
`google.golang.org/protobuf`	`v1.36.5` -> `v1.36.6`

| datasource | package | from | to | | ---------- | ------------------------------------ | ---------------------------------- | ---------------------------------- | | go | github.com/hetznercloud/hcloud-go/v2 | v2.19.1 | v2.22.0 | | go | github.com/onsi/gomega | v1.36.2 | v1.38.0 | | go | github.com/prometheus/common | v0.63.0 | v0.65.0 | | go | golang.org/x/crypto | v0.36.0 | v0.40.0 | | go | golang.org/x/exp | v0.0.0-20250305212735-054e65f0b394 | v0.0.0-20250718183923-645b1fa84792 | | go | golang.org/x/mod | v0.24.0 | v0.26.0 | | go | k8s.io/utils | v0.0.0-20241210054802-24370beab758 | v0.0.0-20250604170112-4c0f3b243397 | | go | sigs.k8s.io/kind | v0.27.0 | v0.29.0 |

syself-bot bot added type/minor update/go labels Mar 20, 2025

syself-bot bot added the size/XXL Denotes a PR that changes 2000+ lines, ignoring generated files. label Mar 20, 2025

syself-bot bot force-pushed the renovate/golang-deps branch from 24fa13a to ddb3840 Compare March 22, 2025 11:02

syself-bot bot changed the title ~~🌱 Update Golang Dependencies group to v2.20.1~~ 🌱 Update Update Golang Dependencies group (minor) Mar 22, 2025

syself-bot bot force-pushed the renovate/golang-deps branch 2 times, most recently from cabf92d to 282c214 Compare April 3, 2025 11:02

syself-bot bot force-pushed the renovate/golang-deps branch 2 times, most recently from 41e1bc3 to dd2d0ed Compare April 9, 2025 11:03

syself-bot bot force-pushed the renovate/golang-deps branch 2 times, most recently from 6a98167 to 71d8a0c Compare May 6, 2025 11:03

syself-bot bot force-pushed the renovate/golang-deps branch 2 times, most recently from 01d9313 to b052831 Compare May 17, 2025 11:02

syself-bot bot force-pushed the renovate/golang-deps branch from b052831 to fbbe196 Compare May 21, 2025 11:03

syself-bot bot force-pushed the renovate/golang-deps branch 4 times, most recently from eb7bc55 to e36b464 Compare June 6, 2025 11:03

syself-bot bot force-pushed the renovate/golang-deps branch 2 times, most recently from d8737ab to 344148c Compare June 23, 2025 11:03

syself-bot bot force-pushed the renovate/golang-deps branch 3 times, most recently from a411dfb to aa3a083 Compare July 12, 2025 11:02

syself-bot bot force-pushed the renovate/golang-deps branch 2 times, most recently from 5e14475 to e77c6a4 Compare July 19, 2025 11:02

syself-bot bot force-pushed the renovate/golang-deps branch from e77c6a4 to f291995 Compare July 23, 2025 11:03

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

🌱 Update Update Golang Dependencies group (minor) #1567

🌱 Update Update Golang Dependencies group (minor) #1567

Uh oh!

syself-bot bot commented Mar 20, 2025 •

edited

Loading

Uh oh!

syself-bot bot commented Mar 20, 2025 •

edited

Loading

Uh oh!

Uh oh!

🌱 Update Update Golang Dependencies group (minor) #1567

Are you sure you want to change the base?

🌱 Update Update Golang Dependencies group (minor) #1567

Uh oh!

Conversation

syself-bot bot commented Mar 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Features

Bug Fixes

Features

Bug Fixes

Bug Fixes

Features

Bug Fixes

1.38.0

Features

Fixes

Maintenance

1.37.0

Features

1.36.3

Maintenance

What's Changed

New Contributors

What's Changed

New Contributors

Breaking Changes

New Features

Fixes

Contributors

Breaking Changes

New Features

Fixes

Contributors

Configuration

Uh oh!

syself-bot bot commented Mar 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: go.mod

Uh oh!

Uh oh!

syself-bot bot commented Mar 20, 2025 •

edited

Loading

syself-bot bot commented Mar 20, 2025 •

edited

Loading