Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the all group across 1 directory with 10 updates #1971

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 17, 2025

Bumps the all group with 4 updates in the / directory: chainguard.dev/go-grpc-kit, chainguard.dev/sdk, cloud.google.com/go/security and github.com/spf13/pflag.

Updates chainguard.dev/go-grpc-kit from 0.17.7 to 0.17.8

Release notes

Sourced from chainguard.dev/go-grpc-kit's releases.

v0.17.8

What's Changed

Full Changelog: chainguard-dev/go-grpc-kit@v0.17.7...v0.17.8

Commits
  • a99f260 Bump github.com/prometheus/client_golang in the prom group (#370)
  • 80428d7 Bump the golang-org-x group across 1 directory with 2 updates (#374)
  • 5d75fd1 Bump the otel group with 4 updates (#375)
  • efb12c0 Bump github.com/grpc-ecosystem/grpc-gateway/v2 in the grpc group (#376)
  • 11a3cdb Bump actions/cache from 4.2.0 to 4.2.2 (#373)
  • 2535e06 Bump github.com/chainguard-dev/clog from 1.6.1 to 1.7.0 (#377)
  • 966e416 Bump google.golang.org/grpc from 1.70.0 to 1.71.0 (#378)
  • 28743aa Bump golang.org/x/net from 0.35.0 to 0.36.0 in the go_modules group (#379)
  • 8765fb9 Bump reviewdog/action-actionlint from 1.64.1 to 1.65.0 (#368)
  • 5ca8679 Bump golangci/golangci-lint-action from 6.3.2 to 6.5.0 (#367)
  • Additional commits viewable in compare view

Updates chainguard.dev/sdk from 0.1.29 to 0.1.32

Release notes

Sourced from chainguard.dev/sdk's releases.

v0.1.32

Full Changelog: chainguard-dev/sdk@v0.1.31...v0.1.32

v0.1.31

Full Changelog: chainguard-dev/sdk@v0.1.29...v0.1.31

v0.1.30

What's Changed

Full Changelog: chainguard-dev/sdk@v0.1.29...v0.1.30

Commits
  • af6af24 Merge pull request #87 from chainguard-dev/create-pull-request/patch
  • 2c4056a Export 7152990b94c5594223799dc522e6bdf41bd16b60
  • dbdbfd1 Export 6062a360b2021dbeee45a74433c0d918a531959d
  • 659b522 Export 23a23d364a850850ed90a8f12ea8111264393c25
  • 17fd2be Merge pull request #86 from chainguard-dev/create-pull-request/patch
  • 8792870 Export 6f71a059dc3a53d5a0c3f9ef32d647cee0b8a85b
  • 996f3f9 Export aeff924bb8ab592dcbe3e7d83617b166322b81cb
  • 503c7f5 Export 4078424f9cedc73dd80ca5aed4786d9c588f65e3
  • 7710118 Merge pull request #85 from chainguard-dev/create-pull-request/patch
  • 90353f4 Export cd5b607d08672c29a50795272baaa3ec96d89dac
  • Additional commits viewable in compare view

Updates cloud.google.com/go/security from 1.18.3 to 1.18.4

Release notes

Sourced from cloud.google.com/go/security's releases.

security: v1.18.4

1.18.4 (2025-03-13)

Bug Fixes

  • security: Update golang.org/x/net to 0.37.0 (1144978)
Commits

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.26.0 to 2.26.3

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.26.3

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.26.2...v2.26.3

v2.26.2

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.26.1...v2.26.2

v2.26.1

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.26.0...v2.26.1

Commits
  • e80a2e5 mod: downgrade to Go 1.23 (#5313)
  • 72466fe chore(deps): update googleapis digest to 0c50144 (#5314)
  • a337874 chore(deps): update googleapis digest to 938783f (#5311)
  • 22bb6bf chore(deps): update googleapis digest to d51753b (#5310)
  • 470a32d docs(install-guide): update Go 1.24 tool directive usage (#5298)
  • d9141b9 chore(deps): update googleapis digest to 05f571e (#5307)
  • e70c53c Update gorelease base
  • 641f83f chore(deps): update googleapis digest to c414002 (#5305)
  • 260ccbd Revert "feat: expose invalid argument error to clients in bidirectional strea...
  • c18bc4e fix(deps): update google.golang.org/genproto/googleapis/rpc digest to a0af3ef...
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.20.5 to 1.21.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.21.1 / 2025-03-04

This release addresses a performance regression introduced in #1661 -- thanks to all who reported this quickly: @​chlunde, @​dethi, @​aaronbee @​tsuna @​kakkoyun 💪🏽. This patch release also fixes the iOS build.

We will be hardening the release process even further (#1759, #1761) to prevent this in future, sorry for the inconvenience!

The high concurrency optimization is planned to be eventually reintroduced, however in a much safer manner, potentially in a separate API.

  • [BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low concurrency cases #1757
  • [BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags. #1758

Full Changelog: prometheus/client_golang@v1.21.0...v1.21.1

v1.21.0 / 2025-02-19

⚠️ This release contains potential breaking change if you upgrade github.com/prometheus/common to 0.62+ together with client_golang (and depend on the strict, legacy validation for the label names). New common version changes model.NameValidationScheme global variable, which relaxes the validation of label names and metric name, allowing all UTF-8 characters. Typically, this should not break any user, unless your test or usage expects strict certain names to panic/fail on client_golang metric registration, gathering or scrape. In case of problems change model.NameValidationScheme to old model.LegacyValidation value in your project init function. ⚠️

  • [BUGFIX] gocollector: Fix help message for runtime/metric metrics. #1583
  • [BUGFIX] prometheus: Fix Desc.String() method for no labels case. #1687
  • [PERF] prometheus: Optimize popular prometheus.BuildFQName function; now up to 30% faster. #1665
  • [PERF] prometheus: Optimize Inc, Add and Observe cumulative metrics; now up to 50% faster under high concurrent contention. #1661
  • [CHANGE] Upgrade prometheus/common to 0.62.0 which changes model.NameValidationScheme global variable. #1712
  • [CHANGE] Add support for Go 1.23. #1602
  • [FEATURE] process_collector: Add support for Darwin systems. #1600 #1616 #1625 #1675 #1715
  • [FEATURE] api: Add ability to invoke CloseIdleConnections on api.Client using api.Client.(CloseIdler).CloseIdleConnections() casting. #1513
  • [FEATURE] promhttp: Add promhttp.HandlerOpts.EnableOpenMetricsTextCreatedSamples option to create OpenMetrics _created lines. Not recommended unless you want to use opt-in Created Timestamp feature. Community works on OpenMetrics 2.0 format that should make those lines obsolete (they increase cardinality significantly). #1408
  • [FEATURE] prometheus: Add NewConstNativeHistogram function. #1654

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.21.1 / 2025-03-04

  • [BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low contention cases.
  • [BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags.

1.21.0 / 2025-02-17

⚠️ This release contains potential breaking change if you upgrade github.com/prometheus/common to 0.62+ together with client_golang. ⚠️

New common version changes model.NameValidationScheme global variable, which relaxes the validation of label names and metric name, allowing all UTF-8 characters. Typically, this should not break any user, unless your test or usage expects strict certain names to panic/fail on client_golang metric registration, gathering or scrape. In case of problems change model.NameValidationScheme to old model.LegacyValidation value in your project init function.

  • [BUGFIX] gocollector: Fix help message for runtime/metric metrics. #1583
  • [BUGFIX] prometheus: Fix Desc.String() method for no labels case. #1687
  • [ENHANCEMENT] prometheus: Optimize popular prometheus.BuildFQName function; now up to 30% faster. #1665
  • [ENHANCEMENT] prometheus: Optimize Inc, Add and Observe cumulative metrics; now up to 50% faster under high concurrent contention. #1661
  • [CHANGE] Upgrade prometheus/common to 0.62.0 which changes model.NameValidationScheme global variable. #1712
  • [CHANGE] Add support for Go 1.23. #1602
  • [FEATURE] process_collector: Add support for Darwin systems. #1600 #1616 #1625 #1675 #1715
  • [FEATURE] api: Add ability to invoke CloseIdleConnections on api.Client using api.Client.(CloseIdler).CloseIdleConnections() casting. #1513
  • [FEATURE] promhttp: Add promhttp.HandlerOpts.EnableOpenMetricsTextCreatedSamples option to create OpenMetrics _created lines. Not recommended unless you want to use opt-in Created Timestamp feature. Community works on OpenMetrics 2.0 format that should make those lines obsolete (they increase cardinality significantly). #1408
  • [FEATURE] prometheus: Add NewConstNativeHistogram function. #1654
Commits

Updates github.com/sigstore/sigstore from 1.9.1-0.20250310170251-f577ba06d54c to 1.9.1

Release notes

Sourced from github.com/sigstore/sigstore's releases.

v1.9.1

What's Changed

Full Changelog: sigstore/sigstore@v1.9.0...v1.9.1

Commits

Updates github.com/spf13/pflag from 1.0.5 to 1.0.6

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.6

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.5...v1.0.6

Commits

Updates google.golang.org/api from 0.218.0 to 0.225.0

Release notes

Sourced from google.golang.org/api's releases.

v0.225.0

0.225.0 (2025-03-11)

Features

Bug Fixes

v0.224.0

0.224.0 (2025-03-06)

Features

Bug Fixes

v0.223.0

0.223.0 (2025-02-25)

Features

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.225.0 (2025-03-11)

Features

Bug Fixes

0.224.0 (2025-03-06)

Features

Bug Fixes

0.223.0 (2025-02-25)

Features

Bug Fixes

... (truncated)

Commits

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20250115164207-1a7da9e5054f to 0.0.0-20250303144028-a0af3efb3deb

Commits

Updates google.golang.org/grpc from 1.70.0 to 1.71.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.71.0

API Changes

  • balancer: Custom LB policies that record metrics must use the new MetricsRecorder method on Balancer.ClientConn instead of the removed Balancer.BuildOptions.MetricsRecorder field to obtain a metrics recorder. (#8027)
  • balancer: balancer.ClientConn implementations must now embed a delegate implementation. This allows grpc-go to add new methods to the interface and remain backward compatible. (#8026)
  • balancer/endpointsharding: The constructor accepts the child balancer's builder and a struct with optional configuration. (#8052)

New Features

  • xds: Add support for dualstack via the additional_addresses field in the Endpoint resource. To disable this...

    Description has been truncated

@dependabot dependabot bot requested a review from a team as a code owner March 17, 2025 02:30
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 17, 2025
@dependabot dependabot bot force-pushed the dependabot/go_modules/all-caa53f7e03 branch from 67fd567 to a3ccc2f Compare March 18, 2025 17:44
Bumps the all group with 4 updates in the / directory: [chainguard.dev/go-grpc-kit](https://github.com/chainguard-dev/go-grpc-kit), [chainguard.dev/sdk](https://github.com/chainguard-dev/sdk), [cloud.google.com/go/security](https://github.com/googleapis/google-cloud-go) and [github.com/spf13/pflag](https://github.com/spf13/pflag).


Updates `chainguard.dev/go-grpc-kit` from 0.17.7 to 0.17.8
- [Release notes](https://github.com/chainguard-dev/go-grpc-kit/releases)
- [Commits](chainguard-dev/go-grpc-kit@v0.17.7...v0.17.8)

Updates `chainguard.dev/sdk` from 0.1.29 to 0.1.32
- [Release notes](https://github.com/chainguard-dev/sdk/releases)
- [Commits](chainguard-dev/sdk@v0.1.29...v0.1.32)

Updates `cloud.google.com/go/security` from 1.18.3 to 1.18.4
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@kms/v1.18.3...kms/v1.18.4)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.26.0 to 2.26.3
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/main/.goreleaser.yml)
- [Commits](grpc-ecosystem/grpc-gateway@v2.26.0...v2.26.3)

Updates `github.com/prometheus/client_golang` from 1.20.5 to 1.21.1
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.20.5...v1.21.1)

Updates `github.com/sigstore/sigstore` from 1.9.1-0.20250310170251-f577ba06d54c to 1.9.1
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](https://github.com/sigstore/sigstore/commits/v1.9.1)

Updates `github.com/spf13/pflag` from 1.0.5 to 1.0.6
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.5...v1.0.6)

Updates `google.golang.org/api` from 0.218.0 to 0.225.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.218.0...v0.225.0)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250115164207-1a7da9e5054f to 0.0.0-20250303144028-a0af3efb3deb
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.70.0 to 1.71.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.70.0...v1.71.0)

---
updated-dependencies:
- dependency-name: chainguard.dev/go-grpc-kit
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: chainguard.dev/sdk
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: cloud.google.com/go/security
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/spf13/pflag
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/all-caa53f7e03 branch from a3ccc2f to a30f112 Compare March 19, 2025 08:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants