An open index of dependabot pull requests across open source projects.

Bump the go-dependencies group across 1 directory with 10 updates

Closed
Number: #6772
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 1
Created: May 30, 2025 at 12:18 AM UTC
(5 months ago)
Updated: June 03, 2025 at 11:02 PM UTC
(5 months ago)
Closed: June 03, 2025 at 11:02 PM UTC
(5 months ago)
Time to Close: 5 days
Labels:
dependencies size/S dependency/etcd go
Description:

Bumps the go-dependencies group with 10 updates in the / directory:

Package From To
github.com/golang-migrate/migrate/v4 4.18.1 4.18.3
github.com/hashicorp/consul/api 1.31.2 1.32.1
github.com/minio/minio-go/v7 7.0.82 7.0.92
github.com/prometheus/client_golang 1.21.1 1.22.0
github.com/prometheus/common 0.62.0 0.64.0
github.com/spf13/afero 1.11.0 1.14.0
go.etcd.io/etcd/api/v3 3.5.17 3.6.0
go.etcd.io/etcd/client/pkg/v3 3.5.17 3.6.0
go.etcd.io/etcd/client/v3 3.5.17 3.6.0
github.com/VictoriaMetrics/fastcache 1.12.2 1.12.4

Updates github.com/golang-migrate/migrate/v4 from 4.18.1 to 4.18.3

Release notes

Sourced from github.com/golang-migrate/migrate/v4's releases.

v4.18.3

Changelog

  • a4d0a1b Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
  • f37ef79 Bump golang.org/x/crypto from 0.31.0 to 0.35.0
  • 5b97c92 Bump golang.org/x/net from 0.33.0 to 0.38.0
  • e6d84f6 Drop support for Go 1.22 and add support for Go 1.24
  • fccd197 Mention CLI install instructions in main README
  • 34c2b4a Remove redundant build tags
  • a868033 Update FAQ.md - typo
  • 7269490 Update golangci-lint version used in GitHub Actions
  • c5137c4 Update migrate -help output for the readme file
  • 033835a Update to dktest v0.4.5
  • 8b09191 fix: typo limited not limitted
  • 60d73be refactor: replace github.com/pkg/errors with stdlib
  • 36d17ba tests: fix various tests (#1209)

v4.18.2

Changelog

  • e145cde Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.1
  • e22d012 Don't output sensitive information on error
  • e5a152b Drop support for Azure SQL Edge
  • 12c619e Fix CI (#1222)
  • bc06922 Update dktest from v0.4.3 to v0.4.4
  • 7651c8a linter fixes
Commits
  • 9023d66 Merge pull request #1244 from alexandear-org/chore-redundant-build-tags
  • 1049490 Merge pull request #1179 from lunfel/master
  • 033835a Update to dktest v0.4.5
  • 329152e Merge pull request #1196 from Rambatino/patch-1
  • 34c2b4a Remove redundant build tags
  • a3b7633 Merge pull request #1259 from golang-migrate/dependabot/go_modules/golang.org...
  • 5b97c92 Bump golang.org/x/net from 0.33.0 to 0.38.0
  • 3c3ce91 Merge pull request #1258 from golang-migrate/dependabot/go_modules/golang.org...
  • f37ef79 Bump golang.org/x/crypto from 0.31.0 to 0.35.0
  • 1af841d Merge pull request #1260 from dhui/update_go
  • Additional commits viewable in compare view

Updates github.com/hashicorp/consul/api from 1.31.2 to 1.32.1

Commits

Updates github.com/minio/minio-go/v7 from 7.0.82 to 7.0.92

Release notes

Sourced from github.com/minio/minio-go/v7's releases.

Bugfix Release and new APIs

What's Changed

New Contributors

Full Changelog: https://github.com/minio/minio-go/compare/v7.0.91...v7.0.92

Bugfix Release

What's Changed

New Contributors

Full Changelog: https://github.com/minio/minio-go/compare/v7.0.90...v7.0.91

Bugfix v7.0.90

What's Changed

New Contributors

Full Changelog: https://github.com/minio/minio-go/compare/v7.0.89...v7.0.90

Bugfix Release

What's Changed

New Contributors

... (truncated)

Commits

Updates github.com/prometheus/client_golang from 1.21.1 to 1.22.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.22.0 - 2025-04-07

:warning: This release contains potential breaking change if you use experimental zstd support introduce in #1496 :warning:

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:

import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
  • [FEATURE] prometheus: Add new CollectorFunc utility #1724
  • [CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738
  • [FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743
  • [CHANGE] :warning: promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.22.0 / 2025-04-07

:warning: This release contains potential breaking change if you use experimental zstd support introduce in #1496 :warning:

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:

import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
  • [FEATURE] prometheus: Add new CollectorFunc utility #1724
  • [CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738
  • [FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743
  • [CHANGE] :warning: promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765
Commits
  • d50be25 Cut 1.22.0 (#1793)
  • 1043db7 Cut 1.22.0-rc.0 (#1768)
  • e575c9c promhttp: Isolate zstd support and klauspost/compress library use to promhttp...
  • f2276aa Merge pull request #1764 from prometheus/dependabot/github_actions/github-act...
  • 9df772c build(deps): bump peter-evans/create-pull-request
  • a3548c5 Merge pull request #1754 from saswatamcode/exp-eh
  • 60fd2b0 Remove go.work file for now
  • 8f9d0de exp: Add dependabot config
  • c5cf981 Merge pull request #1762 from prometheus/release-1.21
  • e84c305 exp: Reset snappy buf (#1756)
  • Additional commits viewable in compare view

Updates github.com/prometheus/common from 0.62.0 to 0.64.0

Release notes

Sourced from github.com/prometheus/common's releases.

v0.64.0

What's Changed

New Contributors

Full Changelog: https://github.com/prometheus/common/compare/v0.63.0...v0.64.0

v0.63.0

What's Changed

New Contributors

Full Changelog: https://github.com/prometheus/common/compare/v0.62.0...v0.63.0

Commits
  • 6a35e02 build(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 (#788)
  • 487c180 refactor(promslog): make NewNopLogger() wrapper around New() (#783)
  • b8eddd7 build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 (#786)
  • 8048031 build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 (#785)
  • 4ca345a build(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 (#784)
  • 633961f Merge pull request #787 from prometheus/repo_sync
  • 8c1fb2e Update common Prometheus files
  • 8de85c2 Merge pull request #739 from prometheus/beorn7/log
  • 31ee791 promslog: Use the default timezone (again)
  • 318ef65 build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 (#776)
  • Additional commits viewable in compare view

Updates github.com/spf13/afero from 1.11.0 to 1.14.0

Release notes

Sourced from github.com/spf13/afero's releases.

v1.14.0

What's Changed

Full Changelog: https://github.com/spf13/afero/compare/v1.13.0...v1.14.0

v1.13.0

What's Changed

New Contributors

Full Changelog: https://github.com/spf13/afero/compare/v1.12.0...v1.13.0

v1.12.0

What's Changed

New Contributors

Full Changelog: https://github.com/spf13/afero/compare/v1.11.0...v1.12.0

Commits
  • ea38482 Merge pull request #462 from spf13/dependencies
  • a9aaabc docs: add release instructions
  • d3a70b6 ci: run tests for submodules
  • 2af1925 feat: split gcsfs and sftpfs into separate modules
  • dbd6f61 Merge pull request #477 from spf13/update-dependencies
  • 83b8a55 update readme
  • bf3bd73 update dependencies
  • 464bc98 Merge pull request #473 from spf13/dependabot/github_actions/golangci/golangc...
  • da239a4 Bump golangci/golangci-lint-action from 6.5.0 to 6.5.1
  • 523f621 Merge pull request #461 from spf13/go124
  • Additional commits viewable in compare view

Updates go.etcd.io/etcd/api/v3 from 3.5.17 to 3.6.0

Release notes

Sourced from go.etcd.io/etcd/api/v3's releases.

v3.6.0

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux
ETCD_VER=v3.6.0

choose either URL

GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}

rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test

curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz

/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version

start a local etcd server

/tmp/etcd-download-test/etcd

write,read to etcd

/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)
ETCD_VER=v3.6.0

choose either URL

GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}

rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test

curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits
  • f5d605a Merge pull request #19951 from ahrtr/release_script_20250515
  • a1bcdc7 Update release script to exactly match the target tag
  • 7a7a77c version: bump up to 3.6.0
  • 115f15e version: bump up to 3.6.0-rc.5
  • 53b485a Merge pull request #19890 from k8s-infra-cherrypick-robot/cherry-pick-19862-t...
  • c774d44 Fix the tar unzip command, adding the --no-same-owner option to avoid permiss...
  • 8d1d1a9 Merge pull request #19867 from ivanvc/release-3.6-go-1.23.9-bump
  • cddc9bc Bump Go to 1.23.9
  • 1a1cc66 Merge pull request #19853 from k8s-infra-cherrypick-robot/cherry-pick-19848-t...
  • 9f66823 fix: test-release
  • Additional commits viewable in compare view

Updates go.etcd.io/etcd/client/pkg/v3 from 3.5.17 to 3.6.0

Release notes

Sourced from go.etcd.io/etcd/client/pkg/v3's releases.

v3.6.0

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux
ETCD_VER=v3.6.0

choose either URL

GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}

rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test

curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz

/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version

start a local etcd server

/tmp/etcd-download-test/etcd

write,read to etcd

/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)
ETCD_VER=v3.6.0

choose either URL

GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}

rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test

curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits
  • f5d605a Merge pull request #19951 from ahrtr/release_script_20250515
  • a1bcdc7 Update release script to exactly match the target tag
  • 7a7a77c version: bump up to 3.6.0
  • 115f15e version: bump up to 3.6.0-rc.5
  • 53b485a Merge pull request #19890 from k8s-infra-cherrypick-robot/cherry-pick-19862-t...
  • c774d44 Fix the tar unzip command, adding the --no-same-owner option to avoid permiss...
  • 8d1d1a9 Merge pull request #19867 from ivanvc/release-3.6-go-1.23.9-bump
  • cddc9bc Bump Go to 1.23.9
  • 1a1cc66 Merge pull request #19853 from k8s-infra-cherrypick-robot/cherry-pick-19848-t...
  • 9f66823 fix: test-release
  • Additional commits viewable in compare view

Updates go.etcd.io/etcd/client/v3 from 3.5.17 to 3.6.0

Release notes

Sourced from go.etcd.io/etcd/client/v3's releases.

v3.6.0

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux
ETCD_VER=v3.6.0

choose either URL

GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}

rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test

curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz

/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version

start a local etcd server

/tmp/etcd-download-test/etcd

write,read to etcd

/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)
ETCD_VER=v3.6.0

choose either URL

GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}

rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test

curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits
  • f5d605a Merge pull request #19951 from ahrtr/release_script_20250515
  • a1bcdc7 Update release script to exactly match the target tag
  • 7a7a77c version: bump up to 3.6.0
  • 115f15e version: bump up to 3.6.0-rc.5
  • 53b485a Merge pull request #19890 from k8s-infra-cherrypick-robot/cherry-pick-19862-t...
  • c774d44 Fix the tar unzip command, adding the --no-same-owner option to avoid permiss...
  • 8d1d1a9 Merge pull request #19867 from ivanvc/release-3.6-go-1.23.9-bump
  • cddc9bc Bump Go to 1.23.9
  • 1a1cc66 Merge pull request #19853 from k8s-infra-cherrypick-robot/cherry-pick-19848-t...
  • 9f66823 fix: test-release
  • Additional commits viewable in compare view

Updates github.com/VictoriaMetrics/fastcache from 1.12.2 to 1.12.4

Release notes

Sourced from github.com/VictoriaMetrics/fastcache's releases.

Release v1.12.4

Breaking Change:

The LoadFromFile function now accepts a second parameter: maxBytes. To retain the previous behavior, pass 0 as the value for maxBytes.

v1.12.3

No release notes provided.

Commits

Dependabot will resolve any conflicts with this PR as long a...

Description has been truncated

Pull Request Statistics
Commits:
1
Files Changed:
217
Additions:
+24798
Deletions:
-1936
Package Dependencies
Ecosystem:
go
Version Change:
1.21.1 → 1.22.0
Update Type:
Minor
Ecosystem:
go
Version Change:
0.62.0 → 0.64.0
Update Type:
Minor
Ecosystem:
go
Version Change:
1.31.2 → 1.32.1
Update Type:
Minor
Ecosystem:
go
Version Change:
7.0.82 → 7.0.92
Update Type:
Patch
Ecosystem:
go
Version Change:
1.11.0 → 1.14.0
Update Type:
Minor
Ecosystem:
go
Version Change:
4.18.1 → 4.18.3
Update Type:
Patch
Ecosystem:
go
Version Change:
3.5.17 → 3.6.0
Update Type:
Minor
Ecosystem:
go
Version Change:
3.5.17 → 3.6.0
Update Type:
Minor
Ecosystem:
go
Version Change:
3.5.17 → 3.6.0
Update Type:
Minor
Ecosystem:
go
Version Change:
1.12.2 → 1.12.4
Update Type:
Patch
Technical Details
ID: 856521
UUID: 2553472551
Node ID: PR_kwDOBApxtc6YMuYn
Host: GitHub
Repository: cortexproject/cortex
Merge State: Dirty