Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

deps: bump the all-go-minor-and-patch group across 1 directory with 10 updates

Open
Number: #4037
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 1
Created: September 12, 2025 at 09:19 AM UTC
(about 2 months ago)
Updated: September 16, 2025 at 09:23 AM UTC
(about 2 months ago)
Labels:
dependencies release/1.5
Description:

Bumps the all-go-minor-and-patch group with 8 updates in the / directory:

Package From To
github.com/Azure/azure-sdk-for-go/sdk/azcore 1.19.0 1.19.1
github.com/Microsoft/hcsshim 0.12.0 0.13.0
github.com/prometheus/client_golang 1.23.0 1.23.2
golang.org/x/sys 0.35.0 0.36.0
google.golang.org/grpc 1.75.0 1.75.1
google.golang.org/protobuf 1.36.8 1.36.9
golang.org/x/crypto 0.41.0 0.42.0
golang.org/x/time 0.12.0 0.13.0

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.19.0 to 1.19.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.19.1

1.19.1 (2025-09-11)

Bugs Fixed

  • Fixed resource identifier parsing for provider-specific resource hierarchies containing "resourceGroups" segments.

Other Changes

  • Improved error fall-back for improperly authored long-running operations.
  • Upgraded dependencies.
Commits

Updates github.com/Microsoft/hcsshim from 0.12.0 to 0.13.0

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.13.0

What's Changed

New Contributors

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.13.0-rc.3...v0.13.0

v0.13.0-rc.3

What's Changed

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.13.0-rc.2...v0.13.0-rc.3

v0.12.9

What's Changed

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.12.8...v0.12.9

v0.12.8

What's Changed

... (truncated)

Commits
  • 7084bd2 rego policy enforcer should use the same user parsing logic as GCS (#2405)
  • a5c5b4c Deps/crypto vulnFix golang.org/x/crypto vulnerability (#2416)
  • a00144a Add support for running confidential WCOW UVMs
  • 5def1d7 Allow different types of boot configurations for WCOW UVM
  • b4e0744 Merge pull request #2406 from anmaxvl/privileged-pause
  • e5f8fd8 tooling: allow pause container to be run in privileged mode
  • d7e3842 feature: cross-container named pipes (#2358)
  • 62ddb12 HvSocket support for containers (#2353)
  • fa9d402 ci: fix golangci-lint config (#2387)
  • a3c0edf github-actions: update lint action (#2379)
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.23.0 to 1.23.2

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.2 - 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

Full Changelog: https://github.com/prometheus/client_golang/compare/v1.23.1...v1.23.2

v1.23.1 - 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

Full Changelog: https://github.com/prometheus/client_golang/compare/v1.23.0...v1.23.1

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

Commits

Updates golang.org/x/sys from 0.35.0 to 0.36.0

Commits
  • b06ce05 windows: add FILE_ZERO_DATA_INFORMATION
  • 689cc11 unix: fix Listen on solaris
  • a4712b9 plan9: drop go version tags for unsupported versions
  • 0293703 unix: add IFAL_* consts and ifaddrlblmsg on linux
  • ab85cbb unix/linux: extend rtnetlink constants
  • 9bd3753 unix: switch (*CPUSet).Zero to clear builtin
  • 899c232 windows/mkwinsyscall: use syscall.SyscallN instead of syscall.Syscall{6,9,12,15}
  • 543f21a all: upgrade go directive to at least 1.24.0 [generated]
  • See full diff in compare view

Updates google.golang.org/grpc from 1.75.0 to 1.75.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.75.1

Bug Fixes

  • transport: Fix a data race while copying headers for stats handlers in the std lib http2 server transport. (#8519)
  • xdsclient:
    • Fix a data race caused while reporting load to LRS. (#8483)
    • Fix regression preventing empty node IDs when creating an LRS client. (#8483)
  • server: Fix a regression preventing streams from being cancelled or timed out when blocked on flow control. (#8528)
Commits

Updates google.golang.org/protobuf from 1.36.8 to 1.36.9

Updates github.com/prometheus/common from 0.65.0 to 0.66.1

Release notes

Sourced from github.com/prometheus/common's releases.

v0.66.1

This release has no functional changes, it just drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).

What's Changed

Full Changelog: https://github.com/prometheus/common/compare/v1.20.99...v0.66.1

v0.66.0

⚠️ Breaking Changes ⚠️

  • A default-constructed TextParser will be invalid. It must have a valid scheme set, so users should use the NewTextParser function to create a valid TextParser. Otherwise parsing will panic with "Invalid name validation scheme requested: unset".

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from github.com/prometheus/common's changelog.

v0.66.1 / 2025-09-05

This release has no functional changes, it just drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).

What's Changed

Full Changelog: https://github.com/prometheus/common/compare/v1.20.99...v0.66.1

v0.66.0 / 2025-09-02

⚠️ Breaking Changes ⚠️

  • A default-constructed TextParser will be invalid. It must have a valid scheme set, so users should use the NewTextParser function to create a valid TextParser. Otherwise parsing will panic with "Invalid name validation scheme requested: unset".

What's Changed

New Contributors

... (truncated)

Commits
  • 8975dde Revert "Use go.uber.org/atomic instead of sync/atomic (#825)" (#838)
  • 08d7f66 Move to supported version of yaml parser (#834)
  • 80e275e Revert "Use github.com/grafana/regexp instead of regexp" (#835)
  • 4c2f9e7 Merge pull request #832 from roidelapluie/retract
  • e120453 Retract v1.20.3
  • 2b1487c Merge pull request #827 from prometheus/dependabot/go_modules/github.com/stre...
  • db38951 Merge pull request #829 from prometheus/dependabot/go_modules/golang.org/x/ne...
  • 9e19a90 build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1
  • a1ba2a7 build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0
  • c7a031c Merge pull request #830 from prometheus/dependabot/go_modules/google.golang.o...
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.41.0 to 0.42.0

Commits
  • 5307a0c go.mod: update golang.org/x dependencies
  • 9d77937 acme: include order problem in OrderError
  • 8f580de ssh: remove Go 1.24 build tag for ML-KEM kex
  • a4d1237 ssh/knownhosts: improve IPv6 support in Normalize
  • b8d8dae curve25519: include potential fips140=only error in panic message
  • f5a2eab ssh: use curve25519.X25519 instead of curve25519.ScalarMult
  • 44ecf3a all: upgrade go directive to at least 1.24.0 [generated]
  • See full diff in compare view

Updates golang.org/x/time from 0.12.0 to 0.13.0

Commits
  • c0b0320 all: upgrade go directive to at least 1.24.0 [generated]
  • See full diff in compare view

Updates golang.org/x/sync from 0.16.0 to 0.17.0

Commits
  • 04914c2 all: upgrade go directive to at least 1.24.0 [generated]
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
0
Files Changed:
0
Additions:
+0
Deletions:
-0
Package Dependencies
Package:
google.golang.org/grpc
Ecosystem:
go
Version Change:
1.75.0 → 1.75.1
Update Type:
Patch
Package:
golang.org/x/crypto
Ecosystem:
go
Version Change:
0.41.0 → 0.42.0
Update Type:
Minor
Package:
golang.org/x/time
Ecosystem:
go
Version Change:
0.12.0 → 0.13.0
Update Type:
Minor
Package:
google.golang.org/protobuf
Ecosystem:
go
Version Change:
1.36.8 → 1.36.9
Update Type:
Patch
Package:
golang.org/x/sys
Ecosystem:
go
Version Change:
0.35.0 → 0.36.0
Update Type:
Minor
Package:
github.com/prometheus/client_golang
Ecosystem:
go
Version Change:
1.23.0 → 1.23.2
Update Type:
Patch
Package:
github.com/Microsoft/hcsshim
Ecosystem:
go
Version Change:
0.12.0 → 0.13.0
Update Type:
Minor
Package:
github.com/Azure/azure-sdk-for-go/sdk/azcore
Ecosystem:
go
Version Change:
1.19.0 → 1.19.1
Update Type:
Patch
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 7884685
UUID: 3409632046
Node ID: PR_kwDOAzeKP86oM1rO
Host: GitHub
Repository: Azure/azure-container-networking