Skip to content

fix(deps): update all non-major dependencies #1345

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update all non-major dependencies #1345

wants to merge 1 commit into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Aug 31, 2025 •
edited
Loading

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/github-script action minor v7.0.1 -> v7.1.0 age confidence
alpine final patch 3.22.1 -> 3.22.2 age confidence
codecov/codecov-action action patch v5.5.0 -> v5.5.1 age confidence
docker/login-action action minor v3.5.0 -> v3.6.0 age confidence
github.com/gin-gonic/gin require minor v1.10.1 -> v1.11.0 age confidence
github.com/hashicorp/vault/api require minor v1.20.0 -> v1.22.0 age confidence
github.com/lestrrat-go/jwx/v3 require patch v3.0.10 -> v3.0.12 age confidence
github.com/prometheus/client_golang require patch v1.23.0 -> v1.23.2 age confidence
github.com/redis/go-redis/v9 require minor v9.12.1 -> v9.16.0 age confidence
github.com/spf13/afero require minor v1.14.0 -> v1.15.0 age confidence
github.com/urfave/cli/v3 require minor v3.4.1 -> v3.5.0 age confidence
github/codeql-action action minor v3.29.11 -> v3.31.2 age confidence
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin require minor v0.62.0 -> v0.63.0 age confidence
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace require minor v0.62.0 -> v0.63.0 age confidence
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp require minor v0.62.0 -> v0.63.0 age confidence
go.opentelemetry.io/otel require minor v1.37.0 -> v1.38.0 age confidence
go.opentelemetry.io/otel/exporters/otlp/otlptrace require minor v1.37.0 -> v1.38.0 age confidence
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp require minor v1.37.0 -> v1.38.0 age confidence
go.opentelemetry.io/otel/sdk require minor v1.37.0 -> v1.38.0 age confidence
go.opentelemetry.io/otel/trace require minor v1.37.0 -> v1.38.0 age confidence
go.starlark.net require digest 2a4f369 -> 7849196 age confidence
golang.org/x/crypto require minor v0.41.0 -> v0.43.0 age confidence
golang.org/x/oauth2 require minor v0.30.0 -> v0.32.0 age confidence
golang.org/x/sync require minor v0.16.0 -> v0.17.0 age confidence
golang.org/x/time require minor v0.12.0 -> v0.14.0 age confidence
gorm.io/gorm require minor v1.30.2 -> v1.31.1 age confidence
k8s.io/apimachinery require patch v0.34.0 -> v0.34.1 age confidence

Release Notes

actions/github-script (actions/github-script)

v7.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/github-script@v7...v7.1.0

codecov/codecov-action (codecov/codecov-action)

v5.5.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

docker/login-action (docker/login-action)

v3.6.0

Compare Source

Full Changelog: docker/login-action@v3.5.0...v3.6.0

gin-gonic/gin (github.com/gin-gonic/gin)

v1.11.0

Compare Source

Features
  • feat(gin): Experimental support for HTTP/3 using quic-go/quic-go (#​3210)
  • feat(form): add array collection format in form binding (#​3986), add custom string slice for form tag unmarshal (#​3970)
  • feat(binding): add BindPlain (#​3904)
  • feat(fs): Export, test and document OnlyFilesFS (#​3939)
  • feat(binding): add support for unixMilli and unixMicro (#​4190)
  • feat(form): Support default values for collections in form binding (#​4048)
  • feat(context): GetXxx added support for more go native types (#​3633)
Enhancements
  • perf(context): optimize getMapFromFormData performance (#​4339)
  • refactor(tree): replace string(/) with "/" in node.insertChild (#​4354)
  • refactor(render): remove headers parameter from writeHeader (#​4353)
  • refactor(context): simplify "GetType()" functions (#​4080)
  • refactor(slice): simplify SliceValidationError Error method (#​3910)
  • refactor(context):Avoid using filepath.Dir twice in SaveUploadedFile (#​4181)
  • refactor(context): refactor context handling and improve test robustness (#​4066)
  • refactor(binding): use strings.Cut to replace strings.Index (#​3522)
  • refactor(context): add an optional permission parameter to SaveUploadedFile (#​4068)
  • refactor(context): verify URL is Non-nil in initQueryCache() (#​3969)
  • refactor(context): YAML judgment logic in Negotiate (#​3966)
  • tree: replace the self-defined 'min' to official one (#​3975)
  • context: Remove redundant filepath.Dir usage (#​4181)
Bug Fixes
  • fix: prevent middleware re-entry issue in HandleContext (#​3987)
  • fix(binding): prevent duplicate decoding and add validation in decodeToml (#​4193)
  • fix(gin): Do not panic when handling method not allowed on empty tree (#​4003)
  • fix(gin): data race warning for gin mode (#​1580)
  • fix(context): verify URL is Non-nil in initQueryCache() (#​3969)
  • fix(context): YAML judgment logic in Negotiate (#​3966)
  • fix(context): check handler is nil (#​3413)
  • fix(readme): fix broken link to English documentation (#​4222)
  • fix(tree): Keep panic infos consistent when wildcard type build faild (#​4077)
Build process updates / CI
  • ci: integrate Trivy vulnerability scanning into CI workflow (#​4359)
  • ci: support Go 1.25 in CI/CD (#​4341)
  • build(deps): upgrade github.com/bytedance/sonic from v1.13.2 to v1.14.0 (#​4342)
  • ci: add Go version 1.24 to GitHub Actions (#​4154)
  • build: update Gin minimum Go version to 1.21 (#​3960)
  • ci(lint): enable new linters (testifylint, usestdlibvars, perfsprint, etc.) (#​4010, #​4091, #​4090)
  • ci(lint): update workflows and improve test request consistency (#​4126)
Dependency updates
  • chore(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#​4346, #​4356)
  • chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (#​4347)
  • chore(deps): bump actions/setup-go from 5 to 6 (#​4351)
  • chore(deps): bump github.com/quic-go/quic-go from 0.53.0 to 0.54.0 (#​4328)
  • chore(deps): bump golang.org/x/net from 0.33.0 to 0.38.0 (#​4178, #​4221)
  • chore(deps): bump github.com/go-playground/validator/v10 from 10.20.0 to 10.22.1 (#​4052)
Documentation updates
  • docs(changelog): update release notes for Gin v1.10.1 (#​4360)
  • docs: Fixing English grammar mistakes and awkward sentence structure in doc/doc.md (#​4207)
  • docs: update documentation and release notes for Gin v1.10.0 (#​3953)
  • docs: fix typo in Gin Quick Start (#​3997)
  • docs: fix comment and link issues (#​4205, #​3938)
  • docs: fix route group example code (#​4020)
  • docs(readme): add Portuguese documentation (#​4078)
  • docs(context): fix some function names in comment (#​4079)
hashicorp/vault (github.com/hashicorp/vault/api)

v1.21.0

Compare Source

lestrrat-go/jwx (github.com/lestrrat-go/jwx/v3)

v3.0.12

Compare Source

What's Changed

New Contributors

Full Changelog: lestrrat-go/jwx@v3.0.11...v3.0.12

v3.0.11

Compare Source

What's Changed

New Contributors

Full Changelog: lestrrat-go/jwx@v3.0.10...v3.0.11

prometheus/client_golang (github.com/prometheus/client_golang)

v1.23.2: - 2025-09-05

Compare Source

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

All Changes

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1: - 2025-09-04

Compare Source

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

All Changes

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

redis/go-redis (github.com/redis/go-redis/v9)

v9.16.0: 9.16.0

Compare Source

🚀 Highlights

Maintenance Notifications Support

This release introduces comprehensive support for Redis maintenance notifications, enabling applications to handle server maintenance events gracefully. The new maintnotifications package provides:

  • RESP3 Push Notifications: Full support for Redis RESP3 protocol push notifications
  • Connection Handoff: Automatic connection migration during server maintenance with configurable retry policies and circuit breakers
  • Graceful Degradation: Configurable timeout relaxation during maintenance windows to prevent false failures
  • Event-Driven Architecture: Background workers with on-demand scaling for efficient handoff processing

For detailed usage examples and configuration options, see the maintenance notifications documentation.

✨ New Features

  • Trace Filtering: Add support for filtering traces for specific commands, including pipeline operations and dial operations (#​3519, #​3550)
    • New TraceCmdFilter option to selectively trace commands
    • Reduces overhead by excluding high-frequency or low-value commands from traces

🐛 Bug Fixes

  • Pipeline Error Handling: Fix issue where pipeline repeatedly sets the same error (#​3525)
  • Connection Pool: Ensure re-authentication does not interfere with connection handoff operations (#​3547)

🔧 Improvements

  • Hash Commands: Update hash command implementations (#​3523)
  • OpenTelemetry: Use metric.WithAttributeSet to avoid unnecessary attribute copying in redisotel (#​3552)

📚 Documentation

  • Cluster Client: Add explanation for why MaxRetries is disabled for ClusterClient (#​3551)

🧪 Testing & Infrastructure

  • E2E Testing: Upgrade E2E testing framework with improved reliability and coverage (#​3541)
  • Release Process: Improved resiliency of the release process (#​3530)

📦 Dependencies

  • Bump rojopolis/spellcheck-github-actions from 0.51.0 to 0.52.0 (#​3520)
  • Bump github/codeql-action from 3 to 4 (#​3544)

👥 Contributors

We'd like to thank all the contributors who worked on this release!

@​ndyakov, @​htemelski-redis, @​Sovietaced, @​Udhayarajan, @​boekkooi-impossiblecloud, @​Pika-Gopher, @​cxljs, @​huiyifyj, @​omid-h70

Full Changelog: redis/go-redis@v9.14.0...v9.16.0

v9.15.1: Retract v9.15.0 and v9.15.1

v9.14.1: 9.14.1

Compare Source

Changes

  • fix(otel): Add support for filtering traces for certain commands (#​3519)
  • fix(pool): remove conn from idleConns if present (#​3546)

Contributors

We'd like to thank all the contributors who worked on this release!

@​Sovietaced, @​ndyakov

v9.14.0: 9.14.0

Compare Source

Highlights

  • Added batch process method to the pipeline (#​3510)

Changes

🚀 New Features

  • Added batch process method to the pipeline (#​3510)

🐛 Bug Fixes

  • fix: SetErr on Cmd if the command cannot be queued correctly in multi/exec (#​3509)

🧰 Maintenance

  • Updates release drafter config to exclude dependabot (#​3511)
  • chore(deps): bump actions/setup-go from 5 to 6 (#​3504)

Contributors

We'd like to thank all the contributors who worked on this release!

@​elena-kolevska, @​htemelski-redis and @​ndyakov

v9.13.0: 9.13.0

Compare Source

Highlights

  • Pipeliner expose queued commands (#​3496)
  • Ensure that JSON.GET returns Nil response (#​3470)
  • Fixes on Read and Write buffer sizes and UniversalOptions

Changes

  • Pipeliner expose queued commands (#​3496)
  • fix(test): fix a timing issue in pubsub test (#​3498)
  • Allow users to enable read-write splitting in failover mode. (#​3482)
  • Set the read/write buffer size of the sentinel client to 4KiB (#​3476)

🚀 New Features

  • fix(otel): register wait metrics (#​3499)
  • Support subscriptions against cluster slave nodes (#​3480)
  • Add wait metrics to otel (#​3493)
  • Clean failing timeout implementation (#​3472)

🐛 Bug Fixes

  • Do not assume that all non-IP hosts are loopbacks (#​3085)
  • Ensure that JSON.GET returns Nil response (#​3470)

🧰 Maintenance

  • fix(otel): register wait metrics (#​3499)
  • fix(make test): Add default env in makefile (#​3491)
  • Update the introduction to running tests in README.md (#​3495)
  • test: Add comprehensive edge case tests for IncrByFloat command (#​3477)
  • Set the default read/write buffer size of Redis connection to 32KiB (#​3483)
  • Bumps test image to 8.2.1-pre (#​3478)
  • fix UniversalOptions miss ReadBufferSize and WriteBufferSize options (#​3485)
  • chore(deps): bump actions/checkout from 4 to 5 (#​3484)
  • Removes dry run for stale issues policy (#​3471)
  • Update otel metrics URL (#​3474)

Contributors

We'd like to thank all the contributors who worked on this release!

@​LINKIWI, @​cxljs, @​cybersmeashish, @​elena-kolevska, @​htemelski-redis, @​mwhooker, @​ndyakov, @​ofekshenawa, @​suever

spf13/afero (github.com/spf13/afero)

v1.15.0

Compare Source

What's Changed

New Contributors

Full Changelog: spf13/afero@v1.14.0...v1.15.0

urfave/cli (github.com/urfave/cli/v3)

v3.5.0

Compare Source

What's Changed

New Contributors

Full Changelog: urfave/cli@v3.4.1...v3.5.0

github/codeql-action (github/codeql-action)

v3.31.2

Compare Source

v3.31.1

Compare Source

v3.31.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.0 - 24 Oct 2025
  • Bump minimum CodeQL bundle version to 2.17.6. #​3223
  • When SARIF files are uploaded by the analyze or upload-sarif actions, the CodeQL Action automatically performs post-processing steps to prepare the data for the upload. Previously, these post-processing steps were only performed before an upload took place. We are now changing this so that the post-processing steps will always be performed, even when the SARIF files are not uploaded. This does not change anything for the upload-sarif action. For analyze, this may affect Advanced Setup for CodeQL users who specify a value other than always for the upload input. #​3222

See the full CHANGELOG.md for more information.

v3.30.9

[Compare Source](https://redirect.github.com/github/codeql-action

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Contributor Author

renovate bot commented Aug 31, 2025 •
edited
Loading

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 18 additional dependencies were updated

Details:

Package Change
github.com/bytedance/sonic v1.13.3 -> v1.14.0
github.com/bytedance/sonic/loader v0.2.4 -> v0.3.0
github.com/cenkalti/backoff/v5 v5.0.2 -> v5.0.3
github.com/cloudwego/base64x v0.1.5 -> v0.1.6
github.com/gabriel-vasile/mimetype v1.4.9 -> v1.4.10
github.com/go-jose/go-jose/v4 v4.1.0 -> v4.1.1
github.com/go-playground/validator/v10 v10.26.0 -> v10.27.0
github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.1 -> v2.27.2
github.com/klauspost/cpuid/v2 v2.2.11 -> v2.3.0
github.com/lestrrat-go/httprc/v3 v3.0.0 -> v3.0.1
github.com/prometheus/common v0.65.0 -> v0.66.1
github.com/segmentio/asm v1.2.0 -> v1.2.1
go.opentelemetry.io/otel/metric v1.37.0 -> v1.38.0
go.opentelemetry.io/proto/otlp v1.7.0 -> v1.7.1
golang.org/x/arch v0.18.0 -> v0.20.0
golang.org/x/net v0.42.0 -> v0.45.0
golang.org/x/sys v0.35.0 -> v0.37.0
golang.org/x/text v0.28.0 -> v0.30.0

@renovate renovate bot added the dependencies Indicates a change to dependencies label Aug 31, 2025
@renovate renovate bot requested a review from a team as a code owner August 31, 2025 10:11
@renovate renovate bot added the dependencies Indicates a change to dependencies label Aug 31, 2025
@codecov
Copy link

codecov bot commented Aug 31, 2025 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 56.81%. Comparing base (d62d7ec) to head (418cdb5).

❌ Your project check has failed because the head coverage (56.81%) is below the target coverage (90.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##             main    #1345   +/-   ##
=======================================
  Coverage   56.81%   56.81%           
=======================================
  Files         647      647           
  Lines       36738    36738           
=======================================
  Hits        20873    20873           
  Misses      15210    15210           
  Partials      655      655
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 14 times, most recently from 00239db to f205226 Compare September 10, 2025 13:12
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from a177859 to ffb30ac Compare September 14, 2025 08:39
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 6489d53 to 54c6b3d Compare September 24, 2025 16:35
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from af59be1 to 3646e27 Compare September 29, 2025 14:33
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from 3646e27 to 7dec787 Compare October 2, 2025 16:47
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 5 times, most recently from 612a049 to 6bf816c Compare October 9, 2025 01:30
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from fc8f902 to a488481 Compare October 14, 2025 09:43
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 10 times, most recently from a31fba8 to 08cd145 Compare October 23, 2025 16:51
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 6 times, most recently from b1ebf46 to b0b13c9 Compare October 30, 2025 17:58
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from b0b13c9 to 68917ad Compare November 2, 2025 18:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Indicates a change to dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant