Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 24, 2025

Bumps the github-dependencies group with 25 updates:

Package From To
golang.org/x/sys 0.33.0 0.38.0
google.golang.org/grpc 1.72.1 1.77.0
github.com/container-storage-interface/spec 1.11.0 1.12.0
github.com/emicklei/go-restful/v3 3.12.2 3.13.0
github.com/go-logr/logr 1.4.2 1.4.3
github.com/go-openapi/jsonpointer 0.21.1 0.22.3
github.com/go-openapi/jsonreference 0.21.0 0.21.3
github.com/go-openapi/swag 0.23.1 0.25.3
github.com/google/gnostic-models 0.7.0 0.7.1
github.com/prometheus/client_golang 1.22.0 1.23.2
github.com/prometheus/common 0.64.0 0.66.1
github.com/prometheus/procfs 0.16.1 0.19.2
github.com/spf13/cobra 1.9.1 1.10.1
github.com/spf13/pflag 1.0.6 1.0.9
go.opentelemetry.io/auto/sdk 1.1.0 1.2.1
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.60.0 0.63.0
go.opentelemetry.io/otel 1.36.0 1.38.0
go.opentelemetry.io/otel/metric 1.36.0 1.38.0
go.opentelemetry.io/otel/trace 1.36.0 1.38.0
go.uber.org/zap 1.27.0 1.27.1
go.yaml.in/yaml/v2 2.4.2 2.4.3
golang.org/x/net 0.40.0 0.46.1-0.20251013234738-63d1a5100f82
golang.org/x/text 0.25.0 0.30.0
google.golang.org/genproto/googleapis/rpc 0.0.0-20250303144028-a0af3efb3deb 0.0.0-20251022142026-3a174f9686a8
google.golang.org/protobuf 1.36.6 1.36.10

Updates golang.org/x/sys from 0.33.0 to 0.38.0

Commits
  • 15129aa cpu: also use MRS instruction in getmmfr1
  • ed38ca2 unix: add SizeofNhmsg and SizeofNexthopGrp
  • 3675c4c cpu: use MRS instruction to read arm64 system registers
  • 2a15272 unix: add consts for ELF handling
  • 6239615 cpu: add HPDS, LOR, PAN detection for arm64
  • ea436ef windows: add iphlpapi routing functions
  • 28c5bda unix: add SetMemPolicy and its mode/flag values
  • b731f78 unix/linux: switch to ubuntu 25.04, Go 1.25.1
  • 1edeebe unix: mkall.sh: fail if docker build failed
  • ecada54 unix: use slices.{Equal,Sort} in tests
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.72.1 to 1.77.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.77.0

API Changes

  • mem: Replace the Reader interface with a struct for better performance and maintainability. (#8669)

Behavior Changes

  • balancer/pickfirst: Remove support for the old pick_first LB policy via the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false. The new pick_first has been the default since v1.71.0. (#8672)

Bug Fixes

  • xdsclient: Fix a race condition in the ADS stream implementation that could result in resource-not-found errors, causing the gRPC client channel to move to TransientFailure. (#8605)
  • client: Ignore HTTP status header for gRPC streams. (#8548)
  • client: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (#8534)
  • client: Fix a bug where default port 443 was not automatically added to addresses without a specified port when sent to a proxy.
    • Setting environment variable GRPC_EXPERIMENTAL_ENABLE_DEFAULT_PORT_FOR_PROXY_TARGET=false disables this change; please file a bug if any problems are encountered as we will remove this option soon. (#8613)
  • balancer/pickfirst: Fix a bug where duplicate addresses were not being ignored as intended. (#8611)
  • server: Fix a bug that caused overcounting of channelz metrics for successful and failed streams. (#8573)
  • balancer/pickfirst: When configured, shuffle addresses in resolver updates that lack endpoints. Since gRPC automatically adds endpoints to resolver updates, this bug only affects custom LB policies that delegate to pick_first but don't set endpoints. (#8610)
  • mem: Clear large buffers before re-using. (#8670)

Performance Improvements

  • transport: Reduce heap allocations to reduce time spent in garbage collection. (#8624, #8630, #8639, #8668)
  • transport: Avoid copies when reading and writing Data frames. (#8657, #8667)
  • mem: Avoid clearing newly allocated buffers. (#8670)

New Features

  • outlierdetection: Add metrics specified in gRFC A91. (#8644)
  • stats/opentelemetry: Add support for optional label grpc.lb.backend_service in per-call metrics (#8637)
  • xds: Add support for JWT Call Credentials as specified in gRFC A97. Set environment variable GRPC_EXPERIMENTAL_XDS_BOOTSTRAP_CALL_CREDS=true to enable this feature. (#8536)
  • experimental/stats: Add support for up/down counters. (#8581)

Release 1.76.0

Dependencies

Bug Fixes

  • client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#8523)
  • client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#8518)
  • pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#8615)

... (truncated)

Commits

Updates github.com/container-storage-interface/spec from 1.11.0 to 1.12.0

Release notes

Sourced from github.com/container-storage-interface/spec's releases.

v1.12.0

Breaking changes/Deprecations:

  • None

Additions:

Clarifications/Corrections/Fixes:

  • #597 - Clarify that the INVALID_ARGUMENT error code for ControllerModifyVolume is safe to not retry (i.e. "infeasible") by @​bswartz #591 - Documents the gRPC error code that should be returned for GetMetadataDelta when changed block tracking has not been enabled in the underlying storage subsystem by @​carlbraganza
  • #580 - removes "optional" from the description of GetVolumeGroupSnapshot to reduce confusion by @​xing-yang

Dependencies:

  • #585 - Bump golang from 1.18 to 1.23

Full Changelog: container-storage-interface/spec@v1.11.0...v1.12.0

v1.12.0-rc1

No release notes provided.

Commits
  • e6fc13e Bump golang.org/x/net from 0.23.0 to 0.38.0 (#585)
  • 6b73147 Remove optional to avoid confusion (#580)
  • 91b25fc Move ControllerModifyVolume to GA (#588)
  • 3a67636 Added FAILED_PRECONDITION as a possible error for GetMetadataDelta to (#591)
  • f437b19 Merge pull request #597 from bswartz/vac-infeasible-error
  • 4040d42 Clarify ControllerModifyVolume errors
  • a539b4f Add GetSnapshot RPC (#586)
  • 98819c4 Merge pull request #576 from saad-ali/release1.11bump
  • b5049c0 Bump master version to 1.12 for next release
  • See full diff in compare view

Updates github.com/emicklei/go-restful/v3 from 3.12.2 to 3.13.0

Changelog

Sourced from github.com/emicklei/go-restful/v3's changelog.

[v3.13.0] - 2025-08-14

  • optimize performance of path matching in CurlyRouter ( thanks @​wenhuang, Wen Huang)
Commits
  • 3fae6e4 update deps of jwtauth example
  • 9de612a update changes, document new feature
  • 4c1b61e Merge pull request #588 from wenhug/regexcache
  • 54fe5bb Refactor regex caching logic in CurlyRouter and custom verbs for improved rea...
  • 6a74e9b Merge pull request #589 from emicklei/dependabot/github_actions/v3/github-act...
  • 043cc22 Bump the github-actions group across 1 directory with 4 updates
  • 93fbb2f Add enable/disable functionality for regex caching in CurlyRouter and custom ...
  • c282bfe Implement regex caching for CurlyRouter and custom verbs
  • 1959514 Merge pull request #583 from emicklei/dependabot/github_actions/v3/github-act...
  • 246fc52 Bump codecov/codecov-action in the github-actions group
  • See full diff in compare view

Updates github.com/go-logr/logr from 1.4.2 to 1.4.3

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.3

Minor release.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

Commits
  • 38a1c47 build(deps): bump github/codeql-action from 3.28.17 to 3.28.18
  • f08bedd build(deps): bump actions/setup-go from 5.4.0 to 5.5.0
  • 6295e99 build(deps): bump golangci/golangci-lint-action from 7.0.0 to 8.0.0
  • 028840d build(deps): bump github/codeql-action from 3.28.15 to 3.28.17
  • 511e5fa Merge pull request #367 from go-logr/dependabot/github_actions/github/codeql-...
  • d806463 build(deps): bump github/codeql-action from 3.28.13 to 3.28.15
  • 158c311 Merge pull request #366 from thockin/master
  • c79ddb3 Update to support golangci-lint v2
  • 20a64ba build(deps): bump github/codeql-action from 3.28.12 to 3.28.13
  • 0385e14 Add comments around slog exceptions
  • Additional commits viewable in compare view

Updates github.com/go-openapi/jsonpointer from 0.21.1 to 0.22.3

Release notes

Sourced from github.com/go-openapi/jsonpointer's releases.

v0.22.3

0.22.3 - 2025-11-17

Full Changelog: go-openapi/jsonpointer@v0.22.2...v0.22.3

8 commits in this release.


Documentation

Code quality

Miscellaneous tasks


People who contributed to this release


New Contributors


jsonpointer license terms

[License][license-url]

... (truncated)

Commits
  • be76d48 docs: added maintainer's doc and style guide
  • c22925c doc: updated contributors file
  • a878179 doc: automated a record of all-time contributors
  • 61efbb7 test: added tests for edge cases
  • 3f0fe76 doc: release badge in README
  • 58fdaa4 ci: run fuzz test in ci
  • 3eb4edd doc: improved documentation
  • e4c97b3 chore(lint): more linting
  • c653a59 test: added fuzz test for parsing
  • 80920c3 test: improved test coverage
  • Additional commits viewable in compare view

Updates github.com/go-openapi/jsonreference from 0.21.0 to 0.21.3

Commits
  • d5ff0ea tests: replaced stretchr/testify by go-openapi/testify
  • 5cee2c3 chore: updated license marks in source files
  • 65f09e7 linting rules for go1.24
  • 832def3 chore(deps): updated dependencies
  • e316c9c build(deps): bump actions/setup-go in the development-dependencies group
  • 6973d2f deps: remove (indirect) dependency to mailru/easyjson
  • 5f816fb build(deps): bump github.com/stretchr/testify
  • a8d2f8a build(deps): bump actions/checkout in the development-dependencies group
  • 974e4af build(deps): bump github.com/go-openapi/jsonpointer
  • f820859 ci: fixed auto-merge
  • Additional commits viewable in compare view

Updates github.com/go-openapi/swag from 0.23.1 to 0.25.3

Commits
  • 4db976a prepare v0.25.3
  • c65e588 fix(mangler): name mangler panics on trailing pluralized initialisms
  • 47cac45 ci: lint now runs in 1 single job, not a matrix
  • 5434c90 lint: fix modernize issues
  • ca4d1dd build(deps): bump the development-dependencies group across 2 directories wit...
  • 8e10796 fix(typo): correct typos in funcs, comments, and docs
  • 274f279 build(deps): bump the development-dependencies group across 2 directories wit...
  • 23684ce build(deps): bump the development-dependencies group across 2 directories wit...
  • 48179bd fixup dependabot.yaml
  • 59456ad ci: pinned github actions used with their sha...
  • Additional commits viewable in compare view

Updates github.com/google/gnostic-models from 0.7.0 to 0.7.1

Commits
  • 289d7b4 Merge pull request #23 from sloretz/absolute_go_package
  • 338bf8a Use absolute packages in option go_package
  • See full diff in compare view

Updates github.com/prometheus/client_golang from 1.22.0 to 1.23.2

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.2 - 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1 - 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

v1.23.0 - 2025-07-30

  • [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812
  • [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766
  • [FEATURE] Add exemplars for native histograms #1686
  • [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823
  • [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833
  • [BUGFIX] exp/api: client prompt return on context cancellation #1729

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

1.23.0 / 2025-07-30

  • [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812
  • [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766
  • [FEATURE] Add exemplars for native histograms #1686
  • [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823
  • [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833
  • [BUGFIX] exp/api: client prompt return on context cancellation #1729
Commits

Updates github.com/prometheus/common from 0.64.0 to 0.66.1

Release notes

Sourced from github.com/prometheus/common's releases.

v0.66.1

This release has no functional changes, it just drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).

What's Changed

Full Changelog: prometheus/common@v1.20.99...v0.66.1

v0.66.0

⚠️ Breaking Changes ⚠️

  • A default-constructed TextParser will be invalid. It must have a valid scheme set, so users should use the NewTextParser function to create a valid TextParser. Otherwise parsing will panic with "Invalid name validation scheme requested: unset".

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from github.com/prometheus/common's changelog.

v0.66.1 / 2025-09-05

This release has no functional changes, it just drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).

What's Changed

Full Changelog: prometheus/common@v1.20.99...v0.66.1

v0.66.0 / 2025-09-02

⚠️ Breaking Changes ⚠️

  • A default-constructed TextParser will be invalid. It must have a valid scheme set, so users should use the NewTextParser function to create a valid TextParser. Otherwise parsing will panic with "Invalid name validation scheme requested: unset".

What's Changed

New Contributors

... (truncated)

Commits
  • 8975dde Revert "Use go.uber.org/atomic instead of sync/atomic (#825)" (#838)
  • 08d7f66 Move to supported version of yaml parser (#834)
  • 80e275e Revert "Use github.com/grafana/regexp instead of regexp" (#835)
  • 4c2f9e7 Merge pull request #832 from roidelapluie/retract
  • e120453 Retract v1.20.3
  • 2b1487c Merge pull request #827 from prometheus/dependabot/go_modules/github.com/stre...
  • db38951 Merge pull request #829 from prometheus/dependabot/go_modules/golang.org/x/ne...
  • 9e19a90 build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1
  • a1ba2a7 build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0
  • c7a031c Merge pull request #830 from prometheus/dependabot/go_modules/google.golang.o...
  • Additional commits viewable in compare view

Updates github.com/prometheus/procfs from 0.16.1 to 0.19.2

Release notes

Sourced from github.com/prometheus/procfs's releases.

v0.19.2

What's Changed

Full Changelog: prometheus/procfs@v0.19.1...v0.19.2

v0.19.1

What's Changed

Full Changelog: prometheus/procfs@v0.19.0...v0.19.1

v0.19.0

What's Changed

New Contributors

Full Changelog: prometheus/procfs@v0.18.0...v0.19.0

v0.18.0

What's Changed

  • chore: clean up golangci-lint configuration by @​mmorel-35 in

@dependabot dependabot bot added area/dependency Issues or PRs related to dependency changes ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. labels Nov 24, 2025
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign jsafrane for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot
Copy link
Contributor

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a github.com member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@k8s-ci-robot k8s-ci-robot added size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. labels Nov 24, 2025
Bumps the github-dependencies group with 25 updates:

| Package | From | To |
| --- | --- | --- |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.33.0` | `0.38.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.72.1` | `1.77.0` |
| [github.com/container-storage-interface/spec](https://github.com/container-storage-interface/spec) | `1.11.0` | `1.12.0` |
| [github.com/emicklei/go-restful/v3](https://github.com/emicklei/go-restful) | `3.12.2` | `3.13.0` |
| [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.2` | `1.4.3` |
| [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) | `0.21.1` | `0.22.3` |
| [github.com/go-openapi/jsonreference](https://github.com/go-openapi/jsonreference) | `0.21.0` | `0.21.3` |
| [github.com/go-openapi/swag](https://github.com/go-openapi/swag) | `0.23.1` | `0.25.3` |
| [github.com/google/gnostic-models](https://github.com/google/gnostic-models) | `0.7.0` | `0.7.1` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.22.0` | `1.23.2` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.64.0` | `0.66.1` |
| [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.16.1` | `0.19.2` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.9.1` | `1.10.1` |
| [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.6` | `1.0.9` |
| [go.opentelemetry.io/auto/sdk](https://github.com/open-telemetry/opentelemetry-go-instrumentation) | `1.1.0` | `1.2.1` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.60.0` | `0.63.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.36.0` | `1.38.0` |
| [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.36.0` | `1.38.0` |
| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.36.0` | `1.38.0` |
| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.0` | `1.27.1` |
| [go.yaml.in/yaml/v2](https://github.com/yaml/go-yaml) | `2.4.2` | `2.4.3` |
| [golang.org/x/net](https://github.com/golang/net) | `0.40.0` | `0.46.1-0.20251013234738-63d1a5100f82` |
| [golang.org/x/text](https://github.com/golang/text) | `0.25.0` | `0.30.0` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20250303144028-a0af3efb3deb` | `0.0.0-20251022142026-3a174f9686a8` |
| google.golang.org/protobuf | `1.36.6` | `1.36.10` |


Updates `golang.org/x/sys` from 0.33.0 to 0.38.0
- [Commits](golang/sys@v0.33.0...v0.38.0)

Updates `google.golang.org/grpc` from 1.72.1 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.72.1...v1.77.0)

Updates `github.com/container-storage-interface/spec` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/container-storage-interface/spec/releases)
- [Commits](container-storage-interface/spec@v1.11.0...v1.12.0)

Updates `github.com/emicklei/go-restful/v3` from 3.12.2 to 3.13.0
- [Release notes](https://github.com/emicklei/go-restful/releases)
- [Changelog](https://github.com/emicklei/go-restful/blob/v3/CHANGES.md)
- [Commits](emicklei/go-restful@v3.12.2...v3.13.0)

Updates `github.com/go-logr/logr` from 1.4.2 to 1.4.3
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](go-logr/logr@v1.4.2...v1.4.3)

Updates `github.com/go-openapi/jsonpointer` from 0.21.1 to 0.22.3
- [Release notes](https://github.com/go-openapi/jsonpointer/releases)
- [Commits](go-openapi/jsonpointer@v0.21.1...v0.22.3)

Updates `github.com/go-openapi/jsonreference` from 0.21.0 to 0.21.3
- [Commits](go-openapi/jsonreference@v0.21.0...v0.21.3)

Updates `github.com/go-openapi/swag` from 0.23.1 to 0.25.3
- [Commits](go-openapi/swag@v0.23.1...v0.25.3)

Updates `github.com/google/gnostic-models` from 0.7.0 to 0.7.1
- [Commits](google/gnostic-models@v0.7.0...v0.7.1)

Updates `github.com/prometheus/client_golang` from 1.22.0 to 1.23.2
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.22.0...v1.23.2)

Updates `github.com/prometheus/common` from 0.64.0 to 0.66.1
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.64.0...v0.66.1)

Updates `github.com/prometheus/procfs` from 0.16.1 to 0.19.2
- [Release notes](https://github.com/prometheus/procfs/releases)
- [Commits](prometheus/procfs@v0.16.1...v0.19.2)

Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.1
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.9.1...v1.10.1)

Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.9
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.6...v1.0.9)

Updates `go.opentelemetry.io/auto/sdk` from 1.1.0 to 1.2.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-instrumentation/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-instrumentation@sdk/v1.1.0...sdk/v1.2.1)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.60.0 to 0.63.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.60.0...zpages/v0.63.0)

Updates `go.opentelemetry.io/otel` from 1.36.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.36.0...v1.38.0)

Updates `go.opentelemetry.io/otel/metric` from 1.36.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.36.0...v1.38.0)

Updates `go.opentelemetry.io/otel/trace` from 1.36.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.36.0...v1.38.0)

Updates `go.uber.org/zap` from 1.27.0 to 1.27.1
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.27.0...v1.27.1)

Updates `go.yaml.in/yaml/v2` from 2.4.2 to 2.4.3
- [Commits](yaml/go-yaml@v2.4.2...v2.4.3)

Updates `golang.org/x/net` from 0.40.0 to 0.46.1-0.20251013234738-63d1a5100f82
- [Commits](https://github.com/golang/net/commits)

Updates `golang.org/x/text` from 0.25.0 to 0.30.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.25.0...v0.30.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250303144028-a0af3efb3deb to 0.0.0-20251022142026-3a174f9686a8
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.10

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.77.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/container-storage-interface/spec
  dependency-version: 1.12.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/emicklei/go-restful/v3
  dependency-version: 3.13.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/go-logr/logr
  dependency-version: 1.4.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/jsonpointer
  dependency-version: 0.22.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/jsonreference
  dependency-version: 0.21.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/swag
  dependency-version: 0.25.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/google/gnostic-models
  dependency-version: 0.7.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.23.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/prometheus/common
  dependency-version: 0.66.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/prometheus/procfs
  dependency-version: 0.19.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/auto/sdk
  dependency-version: 1.2.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.63.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-version: 1.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.uber.org/zap
  dependency-version: 1.27.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: go.yaml.in/yaml/v2
  dependency-version: 2.4.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.46.1-0.20251013234738-63d1a5100f82
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.30.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20251022142026-3a174f9686a8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github-dependencies-ceb6e44945 branch from 45e081f to 5f27a7e Compare December 1, 2025 10:30
@k8s-ci-robot
Copy link
Contributor

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
pull-kubernetes-csi-node-driver-registrar-1-34-on-kubernetes-1-34 5f27a7e link false /test pull-kubernetes-csi-node-driver-registrar-1-34-on-kubernetes-1-34
pull-kubernetes-csi-node-driver-registrar-unit 5f27a7e link true /test pull-kubernetes-csi-node-driver-registrar-unit
pull-kubernetes-csi-node-driver-registrar-1-33-on-kubernetes-1-33 5f27a7e link true /test pull-kubernetes-csi-node-driver-registrar-1-33-on-kubernetes-1-33
pull-kubernetes-csi-node-driver-registrar-1-32-on-kubernetes-1-32 5f27a7e link true /test pull-kubernetes-csi-node-driver-registrar-1-32-on-kubernetes-1-32

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/dependency Issues or PRs related to dependency changes cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants