Skip to content

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Aug 20, 2025

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
github.com/IBM/sarama v1.45.2 -> v1.46.0 age confidence require minor v1.46.1
github.com/dgraph-io/dgo/v250 fda084b -> 8fb2c71 require digest
github.com/dgraph-io/ristretto/v2 v2.2.0 -> v2.3.0 age confidence require minor
github.com/docker/docker v28.3.3+incompatible -> v28.4.0+incompatible age confidence require minor
github.com/graph-gophers/graphql-go v1.6.0 -> v1.8.0 age confidence require minor
github.com/hashicorp/vault/api v1.20.0 -> v1.21.0 age confidence require minor
github.com/mark3labs/mcp-go v0.37.0 -> v0.39.1 age confidence require minor
github.com/prometheus/client_golang v1.23.0 -> v1.23.2 age confidence require patch
github.com/spf13/cast v1.9.2 -> v1.10.0 age confidence require minor
github.com/spf13/cobra v1.9.1 -> v1.10.1 age confidence require minor
github.com/spf13/pflag v1.0.7 -> v1.0.10 age confidence require patch
github.com/spf13/viper v1.20.1 -> v1.21.0 age confidence require minor
github.com/stretchr/testify v1.10.0 -> v1.11.1 age confidence require minor
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.62.0 -> v0.63.0 age confidence require minor
go.opentelemetry.io/contrib/zpages v0.62.0 -> v0.63.0 age confidence require minor
go.opentelemetry.io/otel v1.37.0 -> v1.38.0 age confidence require minor
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.37.0 -> v1.38.0 age confidence require minor
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.37.0 -> v1.38.0 age confidence require minor
go.opentelemetry.io/otel/sdk v1.37.0 -> v1.38.0 age confidence require minor
go.opentelemetry.io/otel/trace v1.37.0 -> v1.38.0 age confidence require minor
golang.org/x/crypto v0.41.0 -> v0.42.0 age confidence require minor
golang.org/x/exp 42675ad -> df92998 age confidence require digest
golang.org/x/mod v0.27.0 -> v0.28.0 age confidence require minor
golang.org/x/net v0.43.0 -> v0.44.0 age confidence require minor
golang.org/x/sync v0.16.0 -> v0.17.0 age confidence require minor
golang.org/x/sys v0.35.0 -> v0.36.0 age confidence require minor
golang.org/x/term v0.34.0 -> v0.35.0 age confidence require minor
golang.org/x/text v0.28.0 -> v0.29.0 age confidence require minor
golang.org/x/tools v0.36.0 -> v0.37.0 age confidence require minor
google.golang.org/grpc v1.74.2 -> v1.75.1 age confidence require minor
google.golang.org/protobuf v1.36.7 -> v1.36.9 age confidence require patch

Release Notes

IBM/sarama (github.com/IBM/sarama)

v1.46.0: Version 1.46.0 (2025-08-25)

Compare Source

[!NOTE]
This release contains significant changes. Notably Sarama will now use the ApiVersionRequest response from each broker to aid in selecting the protocol version to use. The existing Version field in sarama.Config will continue to provide a "pinning" mechanism, but can safely be set to a maximum or higher value than the remote cluster and sarama will sensibly pick compatible versions. There is also a performance improvement relating to MetadataRequests whereby Sarama will avoid having more than a single request to each broker in-flight at any given time. These new (optimal) behaviour is on by default can be opt-ed out via the Metadata.SingleFlight field in Config.

What's Changed

🎉 New Features / Improvements
🐛 Fixes
📦 Dependency updates
🔧 Maintenance

New Contributors

Full Changelog: IBM/sarama@v1.45.2...v1.46.0

dgraph-io/ristretto (github.com/dgraph-io/ristretto/v2)

v2.3.0: Ristretto v2.3.0

Compare Source

What's Changed

New Contributors

Full Changelog: hypermodeinc/ristretto@v2.2.0...v2.3.0

docker/docker (github.com/docker/docker)

v28.4.0+incompatible

Compare Source

graph-gophers/graphql-go (github.com/graph-gophers/graphql-go)

v1.8.0

Compare Source

What's Changed
  • Add DecodeSelectedFieldArgs to decode argument values for any nested selected field path directly from a resolver context. Enables reflection-free multi-level prefetching / batching (e.g. Category → Products → Reviews) that only loads requested branches, mitigating N+1 query problem even with pagination & filters by @​pavelnikolov in #​684
  • Updated Go version in the go.mod file to 1.24 to be one minor version less than the latest Go release.

Full Changelog: graph-gophers/graphql-go@v1.7.2...v1.8.0

If this release helps you, please consider becoming a sponsor ❤️

v1.7.2

Compare Source

What's Changed
  • [BUGFIX] Fix checksum mismatch between direct git access and golang proxy for v1.7.1. This version contains identical functionality to v1.7.1 but with proper tag creation to ensure consistent checksums across all proxy configurations by @​pavelnikolov in #​683

Full Changelog: graph-gophers/graphql-go@v1.7.1...v1.7.2

v1.7.1

Compare Source

What's Changed
  • [BUGFIX] Reject object, interface, and input object type definitions that declare zero fields/input values (spec compliance) by @​pavelnikolov in #​676
  • [IMPROVEMENT] Optimize overlapping field validation to avoid quadratic memory blowups on large sibling field lists by @​pavelnikolov in #​678
  • [IMPROVEMENT] SelectedFieldNames now returns dot-delimited nested field paths (e.g. products, products.id, products.category, products.category.id). Intermediate container object/list paths are included so resolvers can check for both a branch (products.category) and its leaves (products.category.id). HasSelectedField and SortedSelectedFieldNames operate on these paths. This aligns behavior with typical resolver projection needs and fixes missing nested selections by @​pavelnikolov in #​680

Full Changelog: graph-gophers/graphql-go@v1.7.0...v1.7.1

v1.7.0

Compare Source

What's Changed
Important

The default branch of the repository is now main. The previous default branch (i.e. master) is still present but will not be updated anymore.

Full Changelog: graph-gophers/graphql-go@v1.6.0...v1.7.0

mark3labs/mcp-go (github.com/mark3labs/mcp-go)

v0.39.1

Compare Source

What's Changed

Full Changelog: mark3labs/mcp-go@v0.39.0...v0.39.1

v0.39.0

Compare Source

What's Changed

New Contributors

Full Changelog: mark3labs/mcp-go@v0.38.0...v0.39.0

v0.38.0

Compare Source

What's Changed

New Contributors

Full Changelog: mark3labs/mcp-go@v0.37.0...v0.38.0

prometheus/client_golang (github.com/prometheus/client_golang)

v1.23.2: - 2025-09-05

Compare Source

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

All Changes

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1: - 2025-09-04

Compare Source

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

All Changes

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

spf13/cast (github.com/spf13/cast)

v1.10.0

Compare Source

What's Changed

New Contributors

Full Changelog: spf13/cast@v1.9.2...v1.10.0

spf13/cobra (github.com/spf13/cobra)

v1.10.1

Compare Source

🐛 Fix

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

Compare Source

What's Changed

🚨 Attention!

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

  • If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`
  • or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: #​2303 (comment)

✨ Features
🐛 Fix
🪠 Testing
📝 Docs

New Contributors

Full Changelog: spf13/cobra@v1.9.1...v1.9.2

spf13/pflag (github.com/spf13/pflag)

v1.0.10

Compare Source

What's Changed

  • fix deprecation comment for (FlagSet.)ParseErrorsWhitelist by @​thaJeztah in #​447
  • remove uses of errors.Is, which requires go1.13, move go1.16/go1.21 tests to separate file by @​thaJeztah in #​448

New Contributors

Full Changelog: spf13/pflag@v1.0.9...v1.0.10

v1.0.9

Compare Source

What's Changed

Full Changelog: spf13/pflag@v1.0.8...v1.0.9

v1.0.8

Compare Source

⚠️ Breaking Change

This version, while only a patch bump, includes a (very minor) breaking change: the flag.ParseErrorsWhitelist struct and corresponding FlagSet.parseErrorsWhitelist field have been renamed to ParseErrorsAllowlist.

This should result in compilation errors in any code that uses these fields, which can be fixed by adjusting the names at call sites. There is no change in semantics or behavior of the struct or field referred to by these names. If your code compiles without errors after bumping to/past v1.0.8, you are not affected by this change.

The breaking change was reverted in v1.0.9, by means of re-introducing the old names with deprecation warnings. The plan is still to remove them in a future release, so if your code does depend on the old names, please change them to use the new names at your earliest convenience.

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.7...v1.0.8

spf13/viper (github.com/spf13/viper)

v1.21.0

Compare Source

What's Changed

Enhancements 🚀
Bug Fixes 🐛
Dependency Updates ⬆️
Other Changes

New Contributors

Full Changelog: spf13/viper@v1.20.0...v1.21.0

stretchr/testify (github.com/stretchr/testify)

v1.11.1

Compare Source

This release fixes #​1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

Compare Source

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Fixes

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner August 20, 2025 17:07
@renovate renovate bot force-pushed the renovate/main-go-minor-and-patch branch 2 times, most recently from 4254278 to 184b88b Compare August 22, 2025 18:42
Copy link
Contributor Author

renovate bot commented Aug 22, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 11 additional dependencies were updated

Details:

Package Change
github.com/cenkalti/backoff/v5 v5.0.2 -> v5.0.3
github.com/go-viper/mapstructure/v2 v2.3.0 -> v2.4.0
github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.1 -> v2.27.2
github.com/hashicorp/go-retryablehttp v0.7.7 -> v0.7.8
github.com/prometheus/common v0.65.0 -> v0.66.1
github.com/sagikazarmark/locafero v0.9.0 -> v0.11.0
github.com/sourcegraph/conc v0.3.0 -> v0.3.1-0.20240121214520-5f936abd7ae8
github.com/spf13/afero v1.14.0 -> v1.15.0
go.opentelemetry.io/otel/metric v1.37.0 -> v1.38.0
go.opentelemetry.io/proto/otlp v1.7.0 -> v1.7.1
golang.org/x/time v0.11.0 -> v0.12.0

@github-actions github-actions bot added area/testing Testing related issues area/graphql Issues related to GraphQL support on Dgraph. area/core internal mechanisms labels Aug 22, 2025
@renovate renovate bot force-pushed the renovate/main-go-minor-and-patch branch from 184b88b to 28ac823 Compare August 22, 2025 20:25
@matthewmcneely matthewmcneely force-pushed the renovate/main-go-minor-and-patch branch from 28ac823 to 395f8c3 Compare August 22, 2025 23:33
@renovate renovate bot force-pushed the renovate/main-go-minor-and-patch branch 8 times, most recently from 181da97 to e86b9a2 Compare August 28, 2025 22:45
@renovate renovate bot force-pushed the renovate/main-go-minor-and-patch branch 6 times, most recently from 3e34974 to db69bb6 Compare September 3, 2025 07:19
Copy link

trunk-io bot commented Sep 3, 2025

Static BadgeStatic BadgeStatic BadgeStatic Badge

View Full Report ↗︎Docs

Copy link

trunk-io bot commented Sep 3, 2025

Static BadgeStatic BadgeStatic BadgeStatic Badge

View Full Report ↗︎Docs

1 similar comment
Copy link

trunk-io bot commented Sep 3, 2025

Static BadgeStatic BadgeStatic BadgeStatic Badge

View Full Report ↗︎Docs

@renovate renovate bot force-pushed the renovate/main-go-minor-and-patch branch 4 times, most recently from 3c40551 to fc46079 Compare September 4, 2025 17:05
@renovate renovate bot force-pushed the renovate/main-go-minor-and-patch branch 12 times, most recently from 55357d6 to 1e52647 Compare September 11, 2025 13:28
@renovate renovate bot force-pushed the renovate/main-go-minor-and-patch branch 4 times, most recently from e24ed32 to d0a7cfe Compare September 15, 2025 18:12
@renovate renovate bot force-pushed the renovate/main-go-minor-and-patch branch from d0a7cfe to 4f2c7be Compare September 16, 2025 21:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/core internal mechanisms area/graphql Issues related to GraphQL support on Dgraph. area/testing Testing related issues
Development

Successfully merging this pull request may close these issues.

0 participants