Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the gomod group with 8 updates #599

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 26, 2024

Bumps the gomod group with 8 updates:

Package From To
github.com/prometheus/client_golang 1.17.0 1.19.0
go.uber.org/zap 1.26.0 1.27.0
github.com/prometheus/client_model 0.5.0 0.6.0
github.com/prometheus/common 0.45.0 0.48.0
github.com/prometheus/procfs 0.12.0 0.13.0
github.com/secure-systems-lab/go-securesystemslib 0.7.0 0.8.0
golang.org/x/crypto 0.16.0 0.17.0
golang.org/x/sys 0.15.0 0.18.0

Updates github.com/prometheus/client_golang from 1.17.0 to 1.19.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.19.0

What's Changed

The module prometheus/common v0.48.0 introduced an incompatibility when used together with client_golang (See prometheus/client_golang#1448 for more details). If your project uses client_golang and you want to use prometheus/common v0.48.0 or higher, please update client_golang to v1.19.0.

  • [CHANGE] Minimum required go version is now 1.20 (we also test client_golang against new 1.22 version). #1445 #1449
  • [FEATURE] collectors: Add version collector. #1422 #1427

New Contributors

Full Changelog: prometheus/client_golang@v1.18.0...v1.19.0

v1.18.0

What's Changed

  • [FEATURE] promlint: Allow creation of custom metric validations. #1311
  • [FEATURE] Go programs using client_golang can be built in wasip1 OS. #1350
  • [BUGFIX] histograms: Add timer to reset ASAP after bucket limiting has happened. #1367
  • [BUGFIX] testutil: Fix comparison of metrics with empty Help strings. #1378
  • [ENHANCEMENT] Improved performance of MetricVec.WithLabelValues(...). #1360

New Contributors

Full Changelog: prometheus/client_golang@v1.17.0...v1.18.0

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.19.0 / 2023-02-27

The module prometheus/common v0.48.0 introduced an incompatibility when used together with client_golang (See prometheus/client_golang#1448 for more details). If your project uses client_golang and you want to use prometheus/common v0.48.0 or higher, please update client_golang to v1.19.0.

  • [CHANGE] Minimum required go version is now 1.20 (we also test client_golang against new 1.22 version). #1445 #1449
  • [FEATURE] collectors: Add version collector. #1422 #1427

1.18.0 / 2023-12-22

  • [FEATURE] promlint: Allow creation of custom metric validations. #1311
  • [FEATURE] Go programs using client_golang can be built in wasip1 OS. #1350
  • [BUGFIX] histograms: Add timer to reset ASAP after bucket limiting has happened. #1367
  • [BUGFIX] testutil: Fix comparison of metrics with empty Help strings. #1378
  • [ENHANCEMENT] Improved performance of MetricVec.WithLabelValues(...). #1360
Commits
  • 77d4003 Add 1.19.0 changelog (#1451)
  • 14259fa Merge pull request #1448 from ywwg/owilliams/content-negotiation
  • 6d03920 deps: bump prometheus/common version
  • 353395b Remove support for go 1.19 (#1449)
  • 9dd5d2a Merge pull request #1445 from kavu/add_go122_metrics_test
  • c906a5e Add support for Go 1.22
  • 7ac9036 Merge pull request #1440 from prometheus/dependabot/github_actions/github-act...
  • 8c7e30f Merge pull request #1441 from prometheus/dependabot/go_modules/tutorial/whats...
  • 08769f8 Bump github.com/prometheus/common in /tutorial/whatsup
  • 83d5940 Bump the github-actions group with 2 updates
  • Additional commits viewable in compare view

Updates go.uber.org/zap from 1.26.0 to 1.27.0

Release notes

Sourced from go.uber.org/zap's releases.

v1.27.0

Enhancements:

  • #1378[]: Add WithLazy method for SugaredLogger.
  • #1399[]: zaptest: Add NewTestingWriter for customizing TestingWriter with more flexibility than NewLogger.
  • #1406[]: Add Log, Logw, Logln methods for SugaredLogger.
  • #1416[]: Add WithPanicHook option for testing panic logs.

Thanks to @​defval, @​dimmo, @​arxeiss, and @​MKrupauskas for their contributions to this release.

#1378: uber-go/zap#1378 #1399: uber-go/zap#1399 #1406: uber-go/zap#1406 #1416: uber-go/zap#1416

Changelog

Sourced from go.uber.org/zap's changelog.

1.27.0 (20 Feb 2024)

Enhancements:

  • #1378[]: Add WithLazy method for SugaredLogger.
  • #1399[]: zaptest: Add NewTestingWriter for customizing TestingWriter with more flexibility than NewLogger.
  • #1406[]: Add Log, Logw, Logln methods for SugaredLogger.
  • #1416[]: Add WithPanicHook option for testing panic logs.

Thanks to @​defval, @​dimmo, @​arxeiss, and @​MKrupauskas for their contributions to this release.

#1378: uber-go/zap#1378 #1399: uber-go/zap#1399 #1406: uber-go/zap#1406 #1416: uber-go/zap#1416

Commits

Updates github.com/prometheus/client_model from 0.5.0 to 0.6.0

Release notes

Sourced from github.com/prometheus/client_model's releases.

v0.6.0

What's Changed

New Contributors

Full Changelog: prometheus/client_model@v0.5.0...v0.6.0

Commits
  • d56cd79 add exemplar to native histogram (#80)
  • f22bbab Merge pull request #79 from prometheus/repo_sync
  • 552c44f Update common Prometheus files
  • f68ef47 Merge pull request #78 from prometheus/dependabot/go_modules/google.golang.or...
  • 2aad054 Bump google.golang.org/protobuf from 1.31.0 to 1.32.0
  • 93dfe21 Merge pull request #77 from prometheus/repo_sync
  • d150866 Update common Prometheus files
  • 9b7b675 Merge pull request #76 from prometheus/repo_sync
  • 734da88 Update common Prometheus files
  • c26a8ee Merge pull request #75 from vesari/add-unit
  • Additional commits viewable in compare view

Updates github.com/prometheus/common from 0.45.0 to 0.48.0

Release notes

Sourced from github.com/prometheus/common's releases.

v0.48.0

This release will require changes of code that relies on direct access to content-type format strings. See the PR linked below for work-arounds. Please file an issue if your use case doesn't work anymore.

What's Changed

Full Changelog: prometheus/common@v0.47.0...v0.48.0

v0.47.0

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.46.0...v0.47.0

v0.46.0

What's Changed

New Contributors

... (truncated)

Commits
  • bd41eb6 Merge pull request #576 from ywwg/owilliams/unexport
  • 05d7387 Unexport Format strings
  • 773d566 Merge pull request #570 from ywwg/owilliams/quoted-metric-name-02
  • 319c62c UTF-8 support in metric and label names
  • a3bdb9e Support empty OAuth2 inline secrets (#547)
  • bd0376d UTF-8 support in validation, and some parsers and formatters (#537)
  • 7e44242 Bump Go modules (#568)
  • 0e201e4 Merge pull request #567 from stapelberg/protodelim
  • 53f76e7 version: make GetTegs() public (#565)
  • 1143fec switch to protodelim package (which pbutil now calls)
  • Additional commits viewable in compare view

Updates github.com/prometheus/procfs from 0.12.0 to 0.13.0

Release notes

Sourced from github.com/prometheus/procfs's releases.

v0.13.0

What's Changed

New Contributors

Full Changelog: prometheus/procfs@v0.12.0...v0.13.0

Commits
  • 72170b5 Bump golang.org/x/sys from 0.17.0 to 0.18.0 (#611)
  • b5cb3d2 Update common Prometheus files (#610)
  • 6ae6f98 Update common Prometheus files (#609)
  • 7b6eccc chore: class_fibrechannel: support optional attributes (#607)
  • da53333 Update common Prometheus files (#608)
  • 4b77c68 Bump golang.org/x/sys from 0.16.0 to 0.17.0 (#606)
  • 6d8714c Add support for for /proc/net/tls_stat kTLS stats (#579)
  • 0f527e6 Add /sys/class/watchdog statistics (#594)
  • d254b01 Add support for gtime and cgtime stats. (#597)
  • f5f033b feat: Add /sys/fs/btrfs/\<FSID>/commit_stats statistics (#580)
  • Additional commits viewable in compare view

Updates github.com/secure-systems-lab/go-securesystemslib from 0.7.0 to 0.8.0

Commits
  • 7e48227 Merge pull request #66 from secure-systems-lab/dependabot/go_modules/golang.o...
  • e615bd3 chore(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0
  • c55c6a6 Merge pull request #65 from adityasaky/sigstore-support
  • a0c6afa Support sigstore fields in public key
  • 2eb6599 Merge pull request #64 from secure-systems-lab/dependabot/github_actions/acti...
  • 7e04bd5 chore(deps): bump actions/setup-go from 4.1.0 to 5.0.0
  • a8e3b1f Merge pull request #63 from secure-systems-lab/dependabot/go_modules/golang.o...
  • 7539050 chore(deps): bump golang.org/x/crypto from 0.15.0 to 0.16.0
  • 8613a43 Merge pull request #59 from secure-systems-lab/dependabot/github_actions/acti...
  • 8402a9f Merge pull request #60 from neilnaveen/neil/signerverifier/utils
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.16.0 to 0.17.0

Commits
  • 9d2ee97 ssh: implement strict KEX protocol changes
  • 4e5a261 ssh: close net.Conn on all NewServerConn errors
  • 152cdb1 x509roots/fallback: update bundle
  • fdfe1f8 ssh: defer channel window adjustment
  • b8ffc16 blake2b: drop Go 1.6, Go 1.8 compatibility
  • 7e6fbd8 ssh: wrap errors from client handshake
  • bda2f3f argon2: avoid clobbering BP
  • See full diff in compare view

Updates golang.org/x/sys from 0.15.0 to 0.18.0

Commits
  • 360f961 unix: add API for fsconfig system call
  • 7ff74af unix: drop go version tags for unsupported versions
  • 6b4eab5 unix: suppress ENOMEM errors from sysctl's implementing Uname(uname *Utsname)...
  • 2f2cc5d unix: update IFLA and NETKIT constants with Linux kernel 6.7
  • 914b96c windows: support ill-formed UTF-16 in UTF16PtrToString
  • 511ec84 Revert "windows: support nil done parameter in ReadFile and WriteFile"
  • 628365d windows: support nil done parameter in ReadFile and WriteFile
  • bef1bd8 unix: move mksyscall regexp to package level variables
  • 5710a32 unix/linux: update Linux kernel to 6.7
  • b3ce6a3 windows: build env_windows_test.go only go Go 1.21 and above
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 26, 2024
Bumps the gomod group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.17.0` | `1.19.0` |
| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.26.0` | `1.27.0` |
| [github.com/prometheus/client_model](https://github.com/prometheus/client_model) | `0.5.0` | `0.6.0` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.45.0` | `0.48.0` |
| [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.12.0` | `0.13.0` |
| [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib) | `0.7.0` | `0.8.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.16.0` | `0.17.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.15.0` | `0.18.0` |


Updates `github.com/prometheus/client_golang` from 1.17.0 to 1.19.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.17.0...v1.19.0)

Updates `go.uber.org/zap` from 1.26.0 to 1.27.0
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.26.0...v1.27.0)

Updates `github.com/prometheus/client_model` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](prometheus/client_model@v0.5.0...v0.6.0)

Updates `github.com/prometheus/common` from 0.45.0 to 0.48.0
- [Release notes](https://github.com/prometheus/common/releases)
- [Commits](prometheus/common@v0.45.0...v0.48.0)

Updates `github.com/prometheus/procfs` from 0.12.0 to 0.13.0
- [Release notes](https://github.com/prometheus/procfs/releases)
- [Commits](prometheus/procfs@v0.12.0...v0.13.0)

Updates `github.com/secure-systems-lab/go-securesystemslib` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/secure-systems-lab/go-securesystemslib/releases)
- [Commits](secure-systems-lab/go-securesystemslib@v0.7.0...v0.8.0)

Updates `golang.org/x/crypto` from 0.16.0 to 0.17.0
- [Commits](golang/crypto@v0.16.0...v0.17.0)

Updates `golang.org/x/sys` from 0.15.0 to 0.18.0
- [Commits](golang/sys@v0.15.0...v0.18.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: go.uber.org/zap
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/prometheus/client_model
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/prometheus/common
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/prometheus/procfs
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/secure-systems-lab/go-securesystemslib
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/sys
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/gomod-968d7b3ef4 branch from e733522 to b8add49 Compare April 1, 2024 06:21
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 8, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Apr 8, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/gomod-968d7b3ef4 branch April 8, 2024 06:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants