Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 24, 2025

Bumps the github-dependencies group with 46 updates:

Package From To
github.com/container-storage-interface/spec 1.11.0 1.12.0
google.golang.org/grpc 1.72.1 1.77.0
google.golang.org/protobuf 1.36.6 1.36.10
cel.dev/expr 0.24.0 0.25.1
github.com/antlr4-go/antlr/v4 4.13.0 4.13.1
github.com/coreos/go-systemd/v22 22.5.0 22.6.0
github.com/emicklei/go-restful/v3 3.12.2 3.13.0
github.com/go-logr/logr 1.4.2 1.4.3
github.com/go-openapi/jsonpointer 0.21.1 0.22.3
github.com/go-openapi/jsonreference 0.21.0 0.21.3
github.com/go-openapi/swag 0.23.1 0.25.3
github.com/google/cel-go 0.26.0 0.26.1
github.com/google/gnostic-models 0.7.0 0.7.1
github.com/grpc-ecosystem/grpc-gateway/v2 2.26.3 2.27.3
github.com/prometheus/client_golang 1.22.0 1.23.2
github.com/prometheus/common 0.64.0 0.66.1
github.com/prometheus/procfs 0.16.1 0.19.2
github.com/spf13/cobra 1.9.1 1.10.1
github.com/spf13/pflag 1.0.6 1.0.9
github.com/stoewer/go-strcase 1.3.0 1.3.1
go.etcd.io/etcd/api/v3 3.6.4 3.6.6
go.etcd.io/etcd/client/pkg/v3 3.6.4 3.6.6
go.etcd.io/etcd/client/v3 3.6.4 3.6.6
go.opentelemetry.io/auto/sdk 1.1.0 1.2.1
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.60.0 0.63.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.58.0 0.63.0
go.opentelemetry.io/otel 1.35.0 1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace 1.34.0 1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 1.34.0 1.38.0
go.opentelemetry.io/otel/metric 1.35.0 1.38.0
go.opentelemetry.io/otel/sdk 1.34.0 1.38.0
go.opentelemetry.io/otel/trace 1.35.0 1.38.0
go.opentelemetry.io/proto/otlp 1.5.0 1.7.1
go.uber.org/zap 1.27.0 1.27.1
go.yaml.in/yaml/v2 2.4.2 2.4.3
golang.org/x/crypto 0.38.0 0.43.0
golang.org/x/net 0.40.0 0.46.1-0.20251013234738-63d1a5100f82
golang.org/x/oauth2 0.30.0 0.32.0
golang.org/x/sync 0.14.0 0.17.0
golang.org/x/sys 0.33.0 0.37.0
golang.org/x/term 0.32.0 0.36.0
golang.org/x/text 0.25.0 0.30.0
golang.org/x/time 0.11.0 0.14.0
google.golang.org/genproto/googleapis/api 0.0.0-20250303144028-a0af3efb3deb 0.0.0-20251022142026-3a174f9686a8
google.golang.org/genproto/googleapis/rpc 0.0.0-20250303144028-a0af3efb3deb 0.0.0-20251022142026-3a174f9686a8
gopkg.in/evanphx/json-patch.v4 4.12.0 4.13.0

Updates github.com/container-storage-interface/spec from 1.11.0 to 1.12.0

Release notes

Sourced from github.com/container-storage-interface/spec's releases.

v1.12.0

Breaking changes/Deprecations:

  • None

Additions:

Clarifications/Corrections/Fixes:

  • #597 - Clarify that the INVALID_ARGUMENT error code for ControllerModifyVolume is safe to not retry (i.e. "infeasible") by @​bswartz #591 - Documents the gRPC error code that should be returned for GetMetadataDelta when changed block tracking has not been enabled in the underlying storage subsystem by @​carlbraganza
  • #580 - removes "optional" from the description of GetVolumeGroupSnapshot to reduce confusion by @​xing-yang

Dependencies:

  • #585 - Bump golang from 1.18 to 1.23

Full Changelog: container-storage-interface/spec@v1.11.0...v1.12.0

v1.12.0-rc1

No release notes provided.

Commits
  • e6fc13e Bump golang.org/x/net from 0.23.0 to 0.38.0 (#585)
  • 6b73147 Remove optional to avoid confusion (#580)
  • 91b25fc Move ControllerModifyVolume to GA (#588)
  • 3a67636 Added FAILED_PRECONDITION as a possible error for GetMetadataDelta to (#591)
  • f437b19 Merge pull request #597 from bswartz/vac-infeasible-error
  • 4040d42 Clarify ControllerModifyVolume errors
  • a539b4f Add GetSnapshot RPC (#586)
  • 98819c4 Merge pull request #576 from saad-ali/release1.11bump
  • b5049c0 Bump master version to 1.12 for next release
  • See full diff in compare view

Updates google.golang.org/grpc from 1.72.1 to 1.77.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.77.0

API Changes

  • mem: Replace the Reader interface with a struct for better performance and maintainability. (#8669)

Behavior Changes

  • balancer/pickfirst: Remove support for the old pick_first LB policy via the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false. The new pick_first has been the default since v1.71.0. (#8672)

Bug Fixes

  • xdsclient: Fix a race condition in the ADS stream implementation that could result in resource-not-found errors, causing the gRPC client channel to move to TransientFailure. (#8605)
  • client: Ignore HTTP status header for gRPC streams. (#8548)
  • client: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (#8534)
  • client: Fix a bug where default port 443 was not automatically added to addresses without a specified port when sent to a proxy.
    • Setting environment variable GRPC_EXPERIMENTAL_ENABLE_DEFAULT_PORT_FOR_PROXY_TARGET=false disables this change; please file a bug if any problems are encountered as we will remove this option soon. (#8613)
  • balancer/pickfirst: Fix a bug where duplicate addresses were not being ignored as intended. (#8611)
  • server: Fix a bug that caused overcounting of channelz metrics for successful and failed streams. (#8573)
  • balancer/pickfirst: When configured, shuffle addresses in resolver updates that lack endpoints. Since gRPC automatically adds endpoints to resolver updates, this bug only affects custom LB policies that delegate to pick_first but don't set endpoints. (#8610)
  • mem: Clear large buffers before re-using. (#8670)

Performance Improvements

  • transport: Reduce heap allocations to reduce time spent in garbage collection. (#8624, #8630, #8639, #8668)
  • transport: Avoid copies when reading and writing Data frames. (#8657, #8667)
  • mem: Avoid clearing newly allocated buffers. (#8670)

New Features

  • outlierdetection: Add metrics specified in gRFC A91. (#8644)
  • stats/opentelemetry: Add support for optional label grpc.lb.backend_service in per-call metrics (#8637)
  • xds: Add support for JWT Call Credentials as specified in gRFC A97. Set environment variable GRPC_EXPERIMENTAL_XDS_BOOTSTRAP_CALL_CREDS=true to enable this feature. (#8536)
  • experimental/stats: Add support for up/down counters. (#8581)

Release 1.76.0

Dependencies

Bug Fixes

  • client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#8523)
  • client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#8518)
  • pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#8615)

... (truncated)

Commits

Updates google.golang.org/protobuf from 1.36.6 to 1.36.10

Updates cel.dev/expr from 0.24.0 to 0.25.1

Release notes

Sourced from cel.dev/expr's releases.

Release v0.25.1

Minor additions to the v0.25.0 release

What's Changed

Full Changelog: google/cel-spec@v0.25.0...v0.25.1

Release v0.25.0

What's Changed

New Contributors

Full Changelog: google/cel-spec@v0.24.0...v0.25.0

Commits
  • 7f3c4c5 Add parsing tests for string and bytes literals (#489)
  • d3430a8 Remove test/v1 directory and its protos (#487)
  • 3c96c71 Remove remaining google.rpc.Status deps from cel-spec (#486)
  • 750024a Clarify formatting decimals, add %f formatting test cases around rounding (#485)
  • 9dd5f5c Remove int(enum) -> int signature (#483)
  • 808c918 Remove TOC from language definition (#482)
  • bad3928 Add a test case for lastIndexOf in string_ext against an empty string (#468)
  • 14cdd3f Tests for selector, function, and field names formerly defined as reserved (#...
  • 8a33394 Remove orphaned ToC entry for enums as ints from the specification (#476)
  • a8f582a Initial version of the policy specification (#477)
  • See full diff in compare view

Updates github.com/antlr4-go/antlr/v4 from 4.13.0 to 4.13.1

Release notes

Sourced from github.com/antlr4-go/antlr/v4's releases.

Release 4.13.1

The 4.13.1 release has:

  • Some minor performance improvements
  • An optional build tag -tags antlr.nomutex which allows a build without using mutexes, when the user knows they will not use it with multiple go routines. (Note, somewhat experimental)

Note that I did not remove the sort.Slices calls. They will not be experimental for long and are implemented efficently. Please make a fork if you must use it without this dependency. Maybe review whether you need to do so for the sake of one call.

Commits

Updates github.com/coreos/go-systemd/v22 from 22.5.0 to 22.6.0

Release notes

Sourced from github.com/coreos/go-systemd/v22's releases.

v22.6.0

This release bumps Go requirement to 1.23, modernizes code, improves CI and documentation, fixes a few bugs, and adds a new dbus method.

What's Changed

New Contributors

Full Changelog: coreos/go-systemd@v22.5.0...v22.6.0

Commits
  • 8214e15 Merge pull request #469 from kolyshkin/nits
  • 3c6acce import1: fix TestImport* cleanup
  • 9f51dd8 import1: use t.TempDir
  • c063bef Merge pull request #470 from kolyshkin/fix-readme
  • f9135e7 README: bump minimal Go version
  • 45cbc16 Merge pull request #468 from Luap99/go-1.25
  • 485b30b ci: test go 1.25
  • b4e6d71 Merge pull request #467 from coreos/dependabot/github_actions/actions/checkout-5
  • 227924f build(deps): bump actions/checkout from 4 to 5
  • 446c54a Merge pull request #466 from kolyshkin/modernize
  • Additional commits viewable in compare view

Updates github.com/emicklei/go-restful/v3 from 3.12.2 to 3.13.0

Changelog

Sourced from github.com/emicklei/go-restful/v3's changelog.

[v3.13.0] - 2025-08-14

  • optimize performance of path matching in CurlyRouter ( thanks @​wenhuang, Wen Huang)
Commits
  • 3fae6e4 update deps of jwtauth example
  • 9de612a update changes, document new feature
  • 4c1b61e Merge pull request #588 from wenhug/regexcache
  • 54fe5bb Refactor regex caching logic in CurlyRouter and custom verbs for improved rea...
  • 6a74e9b Merge pull request #589 from emicklei/dependabot/github_actions/v3/github-act...
  • 043cc22 Bump the github-actions group across 1 directory with 4 updates
  • 93fbb2f Add enable/disable functionality for regex caching in CurlyRouter and custom ...
  • c282bfe Implement regex caching for CurlyRouter and custom verbs
  • 1959514 Merge pull request #583 from emicklei/dependabot/github_actions/v3/github-act...
  • 246fc52 Bump codecov/codecov-action in the github-actions group
  • See full diff in compare view

Updates github.com/go-logr/logr from 1.4.2 to 1.4.3

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.3

Minor release.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

Commits
  • 38a1c47 build(deps): bump github/codeql-action from 3.28.17 to 3.28.18
  • f08bedd build(deps): bump actions/setup-go from 5.4.0 to 5.5.0
  • 6295e99 build(deps): bump golangci/golangci-lint-action from 7.0.0 to 8.0.0
  • 028840d build(deps): bump github/codeql-action from 3.28.15 to 3.28.17
  • 511e5fa Merge pull request #367 from go-logr/dependabot/github_actions/github/codeql-...
  • d806463 build(deps): bump github/codeql-action from 3.28.13 to 3.28.15
  • 158c311 Merge pull request #366 from thockin/master
  • c79ddb3 Update to support golangci-lint v2
  • 20a64ba build(deps): bump github/codeql-action from 3.28.12 to 3.28.13
  • 0385e14 Add comments around slog exceptions
  • Additional commits viewable in compare view

Updates github.com/go-openapi/jsonpointer from 0.21.1 to 0.22.3

Release notes

Sourced from github.com/go-openapi/jsonpointer's releases.

v0.22.3

0.22.3 - 2025-11-17

Full Changelog: go-openapi/jsonpointer@v0.22.2...v0.22.3

8 commits in this release.


Documentation

Code quality

Miscellaneous tasks


People who contributed to this release


New Contributors


jsonpointer license terms

[License][license-url]

... (truncated)

Commits
  • be76d48 docs: added maintainer's doc and style guide
  • c22925c doc: updated contributors file
  • a878179 doc: automated a record of all-time contributors
  • 61efbb7 test: added tests for edge cases
  • 3f0fe76 doc: release badge in README
  • 58fdaa4 ci: run fuzz test in ci
  • 3eb4edd doc: improved documentation
  • e4c97b3 chore(lint): more linting
  • c653a59 test: added fuzz test for parsing
  • 80920c3 test: improved test coverage
  • Additional commits viewable in compare view

Updates github.com/go-openapi/jsonreference from 0.21.0 to 0.21.3

Commits
  • d5ff0ea tests: replaced stretchr/testify by go-openapi/testify
  • 5cee2c3 chore: updated license marks in source files
  • 65f09e7 linting rules for go1.24
  • 832def3 chore(deps): updated dependencies
  • e316c9c build(deps): bump actions/setup-go in the development-dependencies group
  • 6973d2f deps: remove (indirect) dependency to mailru/easyjson
  • 5f816fb build(deps): bump github.com/stretchr/testify
  • a8d2f8a build(deps): bump actions/checkout in the development-dependencies group
  • 974e4af build(deps): bump github.com/go-openapi/jsonpointer
  • f820859 ci: fixed auto-merge
  • Additional commits viewable in compare view

Updates github.com/go-openapi/swag from 0.23.1 to 0.25.3

Commits
  • 4db976a prepare v0.25.3
  • c65e588 fix(mangler): name mangler panics on trailing pluralized initialisms
  • 47cac45 ci: lint now runs in 1 single job, not a matrix
  • 5434c90 lint: fix modernize issues
  • ca4d1dd build(deps): bump the development-dependencies group across 2 directories wit...
  • 8e10796 fix(typo): correct typos in funcs, comments, and docs
  • 274f279 build(deps): bump the development-dependencies group across 2 directories wit...
  • 23684ce build(deps): bump the development-dependencies group across 2 directories wit...
  • 48179bd fixup dependabot.yaml
  • 59456ad ci: pinned github actions used with their sha...
  • Additional commits viewable in compare view

Updates github.com/google/cel-go from 0.26.0 to 0.26.1

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.26.1

What's Changed

New Contributors

Full Changelog: google/cel-go@v0.25.1...v0.26.1

Commits
  • 8e7beb6 Support unwrapping unknown implementations of proto.Message (#1207)
  • 8750458 Add support for nested element type (#1190)
  • 93e910b Support variable descriptions in the AI prompt template (#1205)
  • fb02c9a Init function bindings on environment init (#1199)
  • cf932c7 Bump the npm_and_yarn group across 1 directory with 2 updates (#1197)
  • 8835891 Minor compatibility fixes for google3-import. (#1198)
  • 9453cde Comprehension nesting limit typo, allow nesting limit validator to accept dou...
  • See full diff in compare view

Updates github.com/google/gnostic-models from 0.7.0 to 0.7.1

Commits
  • 289d7b4 Merge pull request #23 from sloretz/absolute_go_package
  • 338bf8a Use absolute packages in option go_package
  • See full diff in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.26.3 to 2.27.3

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.27.3

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.2...v2.27.3

v2.27.2

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.1...v2.27.2

v2.27.1

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.0...v2.27.1

v2.27.0

What's Changed

... (truncated)

Commits
  • ab243ac chore(deps): update googleapis digest to 9070e63 (#5970)
  • 30abf93 fix(deps): update module google.golang.org/protobuf to v1.36.10 (#5969)
  • b73048f chore(deps): update dependency bazel to v8.4.2 (#5968)
  • 95f123b chore(deps): update googleapis digest to 3990e05 (#5967)
  • fb9da67 chore(deps): update googleapis digest to 063f9e1 (#5966)
  • 208372a chore(deps): update googleapis digest to e78280f (#5965)
  • 1a315aa fix(deps): update google.golang.org/genproto/googleapis/api digest to 57b25ae...
  • b862f0b fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 57b25ae...
  • e6cdbc7 chore(deps): update googleapis digest to eab82ec (#5962)
  • 7fefac0 chore(deps): update googleapis digest to a4ded73 (#5961)
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.22.0 to 1.23.2

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.2 - 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regex...

Description has been truncated

Bumps the github-dependencies group with 46 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/container-storage-interface/spec](https://github.com/container-storage-interface/spec) | `1.11.0` | `1.12.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.72.1` | `1.77.0` |
| google.golang.org/protobuf | `1.36.6` | `1.36.10` |
| [cel.dev/expr](https://github.com/google/cel-spec) | `0.24.0` | `0.25.1` |
| [github.com/antlr4-go/antlr/v4](https://github.com/antlr4-go/antlr) | `4.13.0` | `4.13.1` |
| [github.com/coreos/go-systemd/v22](https://github.com/coreos/go-systemd) | `22.5.0` | `22.6.0` |
| [github.com/emicklei/go-restful/v3](https://github.com/emicklei/go-restful) | `3.12.2` | `3.13.0` |
| [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.2` | `1.4.3` |
| [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) | `0.21.1` | `0.22.3` |
| [github.com/go-openapi/jsonreference](https://github.com/go-openapi/jsonreference) | `0.21.0` | `0.21.3` |
| [github.com/go-openapi/swag](https://github.com/go-openapi/swag) | `0.23.1` | `0.25.3` |
| [github.com/google/cel-go](https://github.com/google/cel-go) | `0.26.0` | `0.26.1` |
| [github.com/google/gnostic-models](https://github.com/google/gnostic-models) | `0.7.0` | `0.7.1` |
| [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.26.3` | `2.27.3` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.22.0` | `1.23.2` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.64.0` | `0.66.1` |
| [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.16.1` | `0.19.2` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.9.1` | `1.10.1` |
| [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.6` | `1.0.9` |
| [github.com/stoewer/go-strcase](https://github.com/stoewer/go-strcase) | `1.3.0` | `1.3.1` |
| [go.etcd.io/etcd/api/v3](https://github.com/etcd-io/etcd) | `3.6.4` | `3.6.6` |
| [go.etcd.io/etcd/client/pkg/v3](https://github.com/etcd-io/etcd) | `3.6.4` | `3.6.6` |
| [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) | `3.6.4` | `3.6.6` |
| [go.opentelemetry.io/auto/sdk](https://github.com/open-telemetry/opentelemetry-go-instrumentation) | `1.1.0` | `1.2.1` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.60.0` | `0.63.0` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.58.0` | `0.63.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.35.0` | `1.38.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.34.0` | `1.38.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.34.0` | `1.38.0` |
| [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.35.0` | `1.38.0` |
| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.34.0` | `1.38.0` |
| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.35.0` | `1.38.0` |
| [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go) | `1.5.0` | `1.7.1` |
| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.0` | `1.27.1` |
| [go.yaml.in/yaml/v2](https://github.com/yaml/go-yaml) | `2.4.2` | `2.4.3` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.38.0` | `0.43.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.40.0` | `0.46.1-0.20251013234738-63d1a5100f82` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.30.0` | `0.32.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.14.0` | `0.17.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.33.0` | `0.37.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.32.0` | `0.36.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.25.0` | `0.30.0` |
| [golang.org/x/time](https://github.com/golang/time) | `0.11.0` | `0.14.0` |
| [google.golang.org/genproto/googleapis/api](https://github.com/googleapis/go-genproto) | `0.0.0-20250303144028-a0af3efb3deb` | `0.0.0-20251022142026-3a174f9686a8` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20250303144028-a0af3efb3deb` | `0.0.0-20251022142026-3a174f9686a8` |
| gopkg.in/evanphx/json-patch.v4 | `4.12.0` | `4.13.0` |


Updates `github.com/container-storage-interface/spec` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/container-storage-interface/spec/releases)
- [Commits](container-storage-interface/spec@v1.11.0...v1.12.0)

Updates `google.golang.org/grpc` from 1.72.1 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.72.1...v1.77.0)

Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.10

Updates `cel.dev/expr` from 0.24.0 to 0.25.1
- [Release notes](https://github.com/google/cel-spec/releases)
- [Commits](google/cel-spec@v0.24.0...v0.25.1)

Updates `github.com/antlr4-go/antlr/v4` from 4.13.0 to 4.13.1
- [Release notes](https://github.com/antlr4-go/antlr/releases)
- [Commits](antlr4-go/antlr@v4.13.0...v4.13.1)

Updates `github.com/coreos/go-systemd/v22` from 22.5.0 to 22.6.0
- [Release notes](https://github.com/coreos/go-systemd/releases)
- [Commits](coreos/go-systemd@v22.5.0...v22.6.0)

Updates `github.com/emicklei/go-restful/v3` from 3.12.2 to 3.13.0
- [Release notes](https://github.com/emicklei/go-restful/releases)
- [Changelog](https://github.com/emicklei/go-restful/blob/v3/CHANGES.md)
- [Commits](emicklei/go-restful@v3.12.2...v3.13.0)

Updates `github.com/go-logr/logr` from 1.4.2 to 1.4.3
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](go-logr/logr@v1.4.2...v1.4.3)

Updates `github.com/go-openapi/jsonpointer` from 0.21.1 to 0.22.3
- [Release notes](https://github.com/go-openapi/jsonpointer/releases)
- [Commits](go-openapi/jsonpointer@v0.21.1...v0.22.3)

Updates `github.com/go-openapi/jsonreference` from 0.21.0 to 0.21.3
- [Commits](go-openapi/jsonreference@v0.21.0...v0.21.3)

Updates `github.com/go-openapi/swag` from 0.23.1 to 0.25.3
- [Commits](go-openapi/swag@v0.23.1...v0.25.3)

Updates `github.com/google/cel-go` from 0.26.0 to 0.26.1
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.26.0...v0.26.1)

Updates `github.com/google/gnostic-models` from 0.7.0 to 0.7.1
- [Commits](google/gnostic-models@v0.7.0...v0.7.1)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.26.3 to 2.27.3
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/main/.goreleaser.yml)
- [Commits](grpc-ecosystem/grpc-gateway@v2.26.3...v2.27.3)

Updates `github.com/prometheus/client_golang` from 1.22.0 to 1.23.2
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.22.0...v1.23.2)

Updates `github.com/prometheus/common` from 0.64.0 to 0.66.1
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.64.0...v0.66.1)

Updates `github.com/prometheus/procfs` from 0.16.1 to 0.19.2
- [Release notes](https://github.com/prometheus/procfs/releases)
- [Commits](prometheus/procfs@v0.16.1...v0.19.2)

Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.1
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.9.1...v1.10.1)

Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.9
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.6...v1.0.9)

Updates `github.com/stoewer/go-strcase` from 1.3.0 to 1.3.1
- [Release notes](https://github.com/stoewer/go-strcase/releases)
- [Commits](stoewer/go-strcase@v1.3.0...v1.3.1)

Updates `go.etcd.io/etcd/api/v3` from 3.6.4 to 3.6.6
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.6.4...v3.6.6)

Updates `go.etcd.io/etcd/client/pkg/v3` from 3.6.4 to 3.6.6
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.6.4...v3.6.6)

Updates `go.etcd.io/etcd/client/v3` from 3.6.4 to 3.6.6
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.6.4...v3.6.6)

Updates `go.opentelemetry.io/auto/sdk` from 1.1.0 to 1.2.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-instrumentation/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-instrumentation@sdk/v1.1.0...sdk/v1.2.1)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.60.0 to 0.63.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.60.0...zpages/v0.63.0)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.58.0 to 0.63.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.58.0...zpages/v0.63.0)

Updates `go.opentelemetry.io/otel` from 1.35.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.38.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.34.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.34.0...v1.38.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.34.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.34.0...v1.38.0)

Updates `go.opentelemetry.io/otel/metric` from 1.35.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.38.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.34.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.34.0...v1.38.0)

Updates `go.opentelemetry.io/otel/trace` from 1.35.0 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.38.0)

Updates `go.opentelemetry.io/proto/otlp` from 1.5.0 to 1.7.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases)
- [Commits](open-telemetry/opentelemetry-proto-go@v1.5.0...v1.7.1)

Updates `go.uber.org/zap` from 1.27.0 to 1.27.1
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.27.0...v1.27.1)

Updates `go.yaml.in/yaml/v2` from 2.4.2 to 2.4.3
- [Commits](yaml/go-yaml@v2.4.2...v2.4.3)

Updates `golang.org/x/crypto` from 0.38.0 to 0.43.0
- [Commits](golang/crypto@v0.38.0...v0.43.0)

Updates `golang.org/x/net` from 0.40.0 to 0.46.1-0.20251013234738-63d1a5100f82
- [Commits](https://github.com/golang/net/commits)

Updates `golang.org/x/oauth2` from 0.30.0 to 0.32.0
- [Commits](golang/oauth2@v0.30.0...v0.32.0)

Updates `golang.org/x/sync` from 0.14.0 to 0.17.0
- [Commits](golang/sync@v0.14.0...v0.17.0)

Updates `golang.org/x/sys` from 0.33.0 to 0.37.0
- [Commits](golang/sys@v0.33.0...v0.37.0)

Updates `golang.org/x/term` from 0.32.0 to 0.36.0
- [Commits](golang/term@v0.32.0...v0.36.0)

Updates `golang.org/x/text` from 0.25.0 to 0.30.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.25.0...v0.30.0)

Updates `golang.org/x/time` from 0.11.0 to 0.14.0
- [Commits](golang/time@v0.11.0...v0.14.0)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250303144028-a0af3efb3deb to 0.0.0-20251022142026-3a174f9686a8
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250303144028-a0af3efb3deb to 0.0.0-20251022142026-3a174f9686a8
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `gopkg.in/evanphx/json-patch.v4` from 4.12.0 to 4.13.0

---
updated-dependencies:
- dependency-name: github.com/container-storage-interface/spec
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.77.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: cel.dev/expr
  dependency-version: 0.25.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/antlr4-go/antlr/v4
  dependency-version: 4.13.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/coreos/go-systemd/v22
  dependency-version: 22.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/emicklei/go-restful/v3
  dependency-version: 3.13.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/go-logr/logr
  dependency-version: 1.4.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/jsonpointer
  dependency-version: 0.22.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/jsonreference
  dependency-version: 0.21.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/swag
  dependency-version: 0.25.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/google/cel-go
  dependency-version: 0.26.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/google/gnostic-models
  dependency-version: 0.7.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.27.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.23.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/prometheus/common
  dependency-version: 0.66.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/prometheus/procfs
  dependency-version: 0.19.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/stoewer/go-strcase
  dependency-version: 1.3.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: go.etcd.io/etcd/api/v3
  dependency-version: 3.6.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: go.etcd.io/etcd/client/pkg/v3
  dependency-version: 3.6.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: go.etcd.io/etcd/client/v3
  dependency-version: 3.6.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/auto/sdk
  dependency-version: 1.2.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.63.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-version: 0.63.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
  dependency-version: 1.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-version: 1.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/proto/otlp
  dependency-version: 1.7.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.uber.org/zap
  dependency-version: 1.27.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: go.yaml.in/yaml/v2
  dependency-version: 2.4.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: golang.org/x/crypto
  dependency-version: 0.43.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.46.1-0.20251013234738-63d1a5100f82
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.32.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.17.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.37.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/term
  dependency-version: 0.36.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.30.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/time
  dependency-version: 0.14.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20251022142026-3a174f9686a8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20251022142026-3a174f9686a8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: gopkg.in/evanphx/json-patch.v4
  dependency-version: 4.13.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added area/dependency Issues or PRs related to dependency changes ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. labels Nov 24, 2025
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign msau42 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Nov 24, 2025
@k8s-ci-robot
Copy link
Contributor

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a github.com member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@k8s-ci-robot k8s-ci-robot added the size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. label Nov 24, 2025
@k8s-ci-robot
Copy link
Contributor

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
pull-kubernetes-csi-external-attacher-1-34-on-kubernetes-1-34 6a9d6d2 link false /test pull-kubernetes-csi-external-attacher-1-34-on-kubernetes-1-34
pull-kubernetes-csi-external-attacher-1-32-on-kubernetes-1-32 6a9d6d2 link true /test pull-kubernetes-csi-external-attacher-1-32-on-kubernetes-1-32
pull-kubernetes-csi-external-attacher-unit 6a9d6d2 link true /test pull-kubernetes-csi-external-attacher-unit
pull-kubernetes-csi-external-attacher-1-33-on-kubernetes-1-33 6a9d6d2 link true /test pull-kubernetes-csi-external-attacher-1-33-on-kubernetes-1-33

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/dependency Issues or PRs related to dependency changes cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants