chore(deps): bump the gomod group across 1 directory with 12 updates #710
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
dependabot
bot
added
dependencies
Member
|
@dependabot recreate |
Bumps the gomod group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.22.0` | `1.23.2` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.9.1` | `1.10.1` | | [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.17.0` | `0.19.1` | | [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib) | `0.9.0` | `0.9.1` | | [go.yaml.in/yaml/v2](https://github.com/yaml/go-yaml) | `2.4.2` | `2.4.3` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.40.0` | `0.43.0` | | [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml) | `1.5.0` | `1.6.0` | Updates `github.com/prometheus/client_golang` from 1.22.0 to 1.23.2 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.22.0...v1.23.2) Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.1 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.9.1...v1.10.1) Updates `github.com/prometheus/common` from 0.65.0 to 0.66.1 - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md) - [Commits](prometheus/common@v0.65.0...v0.66.1) Updates `github.com/prometheus/procfs` from 0.17.0 to 0.19.1 - [Release notes](https://github.com/prometheus/procfs/releases) - [Commits](prometheus/procfs@v0.17.0...v0.19.1) Updates `github.com/secure-systems-lab/go-securesystemslib` from 0.9.0 to 0.9.1 - [Release notes](https://github.com/secure-systems-lab/go-securesystemslib/releases) - [Commits](secure-systems-lab/go-securesystemslib@v0.9.0...v0.9.1) Updates `github.com/spf13/pflag` from 1.0.7 to 1.0.9 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.7...v1.0.9) Updates `go.yaml.in/yaml/v2` from 2.4.2 to 2.4.3 - [Commits](yaml/go-yaml@v2.4.2...v2.4.3) Updates `golang.org/x/crypto` from 0.40.0 to 0.43.0 - [Commits](golang/crypto@v0.40.0...v0.43.0) Updates `golang.org/x/sys` from 0.34.0 to 0.37.0 - [Commits](golang/sys@v0.34.0...v0.37.0) Updates `golang.org/x/text` from 0.27.0 to 0.30.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.27.0...v0.30.0) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.8 Updates `sigs.k8s.io/yaml` from 1.5.0 to 1.6.0 - [Release notes](https://github.com/kubernetes-sigs/yaml/releases) - [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md) - [Commits](kubernetes-sigs/yaml@v1.5.0...v1.6.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-version: 1.23.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/spf13/cobra dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/prometheus/common dependency-version: 0.66.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/prometheus/procfs dependency-version: 0.19.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/secure-systems-lab/go-securesystemslib dependency-version: 0.9.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/spf13/pflag dependency-version: 1.0.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: gomod - dependency-name: go.yaml.in/yaml/v2 dependency-version: 2.4.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: gomod - dependency-name: golang.org/x/crypto dependency-version: 0.43.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/sys dependency-version: 0.37.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/text dependency-version: 0.30.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gomod - dependency-name: google.golang.org/protobuf dependency-version: 1.36.8 dependency-type: indirect update-type: version-update:semver-patch dependency-group: gomod - dependency-name: sigs.k8s.io/yaml dependency-version: 1.6.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gomod ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
force-pushed
the
dependabot/go_modules/gomod-98423b622d
branch
from
af5d49c to
ccd8718
Compare
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the gomod group with 7 updates in the / directory:
1.22.01.23.21.9.11.10.10.17.00.19.10.9.00.9.12.4.22.4.30.40.00.43.01.5.01.6.0Updates
github.com/prometheus/client_golangfrom 1.22.0 to 1.23.2Release notes
Sourced from github.com/prometheus/client_golang's releases.
... (truncated)
Changelog
Sourced from github.com/prometheus/client_golang's changelog.
Commits
8179a56Cut v1.23.2 (#1870)4142b59Merge pull request #1869 from prometheus/arve/upgrade-common4ff40f0Cut v1.23.1 (#1867)989b029Upgrade to prometheus/common v0.66 (#1866)e4b2208Cut v1.23.0 (#1848)d9492afcut v1.23.0-rc.1 (#1842)aeae8a0Cut v1.23.0-rc.0 (#1837)b157309Update common Prometheus files (#1832)a704e28build(deps): bump the github-actions group with 3 updates (#1826)c774311Fix errNotImplemented reference (#1835)Updates
github.com/spf13/cobrafrom 1.9.1 to 1.10.1Release notes
Sourced from github.com/spf13/cobra's releases.
... (truncated)
Commits
7da941cchore: Bump pflag to v1.0.9 (#2305)51d6751Bump pflag to 1.0.8 (#2303)3f3b818Update README.md with new logodcaf42eAdd Periscope to the list of projects using Cobra (#2299)6dec1aeThe default ShellCompDirective can be customized for a command and its subcom...c8289c1chore(golangci-lint): add some exclusion presets4af7b64refactor: apply golangci-lint autofixes, work around false positives75790e4chore(golangci-lint): upgrade to v2db3ddb5Adding sponsorship to README.md67171d6putting sponsorship below headerUpdates
github.com/prometheus/commonfrom 0.65.0 to 0.66.1Release notes
Sourced from github.com/prometheus/common's releases.
... (truncated)
Changelog
Sourced from github.com/prometheus/common's changelog.
... (truncated)
Commits
8975ddeRevert "Use go.uber.org/atomic instead of sync/atomic (#825)" (#838)08d7f66Move to supported version of yaml parser (#834)80e275eRevert "Use github.com/grafana/regexp instead of regexp" (#835)4c2f9e7Merge pull request #832 from roidelapluie/retracte120453Retract v1.20.32b1487cMerge pull request #827 from prometheus/dependabot/go_modules/github.com/stre...db38951Merge pull request #829 from prometheus/dependabot/go_modules/golang.org/x/ne...9e19a90build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1a1ba2a7build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0c7a031cMerge pull request #830 from prometheus/dependabot/go_modules/google.golang.o...Updates
github.com/prometheus/procfsfrom 0.17.0 to 0.19.1Release notes
Sourced from github.com/prometheus/procfs's releases.
Commits
d4dc49bmeminfo: Fix ZswappedBytes (#759)638b55cfeat: expose MD raid component devices (#674)b2bde72sysfs: add link_layer property to InfiniBandPort (#700)9479c29Add FS handler for mountinfo (#757)25803afadd netfilter queue support (#677)e54b37aFix Proc.Limits limit name matching (#667)d9d95c9add sriov, power state and numa node info in PciDevice (#748)e9627e2[PROM-50] Update copyright headers (#756)d9fdbb4build(deps): bump golang.org/x/sys from 0.33.0 to 0.36.0 (#752)4a665d5build(deps): bump golang.org/x/sync from 0.15.0 to 0.17.0 (#751)Updates
github.com/secure-systems-lab/go-securesystemslibfrom 0.9.0 to 0.9.1Commits
a1a33cdMerge pull request #120 from secure-systems-lab/dependabot/github_actions/dom...4f201c1Merge pull request #122 from rosstimothy/tross/remove_testing5d1cc26Move hexDecode test helper into a test fileebae973Merge pull request #121 from secure-systems-lab/dependabot/go_modules/golang....551dff1chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.050ac487chore(deps): bump dominikh/staticcheck-action from 1.3.1 to 1.4.09d9f015Merge pull request #117 from secure-systems-lab/dependabot/go_modules/golang....9aa50eachore(deps): bump golang.org/x/crypto from 0.38.0 to 0.39.03e526e2Merge pull request #115 from secure-systems-lab/dependabot/go_modules/golang....a1093e6Merge pull request #116 from secure-systems-lab/dependabot/github_actions/act...Updates
github.com/spf13/pflagfrom 1.0.7 to 1.0.9Release notes
Sourced from github.com/spf13/pflag's releases.
Commits
1043857Merge pull request #446 from spf13/fix-backwards-compat7412009fix: Restore ParseErrorsWhitelist name for nowb9c16faMerge pull request #444 from spf13/reset-args-even-if-empty40abc49Merge pull request #443 from spf13/silence-errhelp1bf832cUse errors.Is instead of equality checkd25dd24Reset args on re-parse even if empty094909dMerge pull request #365 from vaguecoder/str2str-sortedccb49e5Print Default Values of String-to-String in Sorted Orderb55ffb6fix: Don't print ErrHelp in ParseAll7c651d1Merge pull request #407 from tmc/fix-errhelpUpdates
go.yaml.in/yaml/v2from 2.4.2 to 2.4.3Commits
3b57511Retract v2 tags that cannot be installedUpdates
golang.org/x/cryptofrom 0.40.0 to 0.43.0Commits
627cb89go.mod: update golang.org/x dependenciesdca4914acme: fix autocert TestHTTPHandlerDefaultFallback1336e21x509roots/fallback: update bundle2beaa59ssh: add VerifiedPublicKeyCallback66c3d8cssh: add support for FIPS modeddb4e80ssh: remove custom contains, use slices.Containsf4d47b0ssh: return clearer error when signature algorithm is used as key format96dc232x509roots/fallback/bundle: add bundle package to export root certs8c9ba31all: freeze and deprecate more packages559e062ssh/agent: return an error for unexpected message typesUpdates
golang.org/x/sysfrom 0.34.0 to 0.37.0Commits
1edeebeunix: mkall.sh: fail if docker build failedecada54unix: use slices.{Equal,Sort} in tests5e63aa5windows: export O_FILE_FLAG_* to be used in os.OpenFile on windows033906bunix: add (*CPUSet).Fill helper to enable all CPUs6be6c58windows: add FlushConsoleInputBuffer and GetNumberOfConsoleInputEvents32e2038unix: use Go 1.21+ clear built-in137f2edsys: add support for NetBSD getvfsstatb06ce05windows: add FILE_ZERO_DATA_INFORMATION689cc11unix: fix Listen on solarisa4712b9plan9: drop go version tags for unsupported versionsUpdates
golang.org/x/textfrom 0.27.0 to 0.30.0Commits
c6abd03go.mod: update golang.org/x dependencies42f038dx/text: fix nil dereference in gotext extracta42f0e2all: use built-in max/min to simplify the codee69f31bgo.mod: update golang.org/x dependencies60c9786all: upgrade go directive to at least 1.24.0 [generated]425d715go.mod: update golang.org/x dependenciesUpdates
google.golang.org/protobuffrom 1.36.6 to 1.36.8Updates
sigs.k8s.io/yamlfrom 1.5.0 to 1.6.0Release notes
Sourced from sigs.k8s.io/yaml's releases.
Commits
048d724Merge pull request #132 from thockin/master23c836cBolster tests, mostly in error-handling2e3340bAdd compact output tests4a4f539Add test case for tabs in multi-line strings13509adChange which methods get a newline and fix tests59c2c43Add compact mode so KYAML can be used in more placesabc1addkyaml: Implement escaping closer to YAML spec7749171Add a yamlfmt cmda932007Add KYAML supportDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions