chore(deps): update go dependencies by red-hat-konflux[bot] · Pull Request #782 · securesign/trillian

red-hat-konflux · 2026-10-03T01:46:35Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
cel.dev/expr	indirect	patch	`v0.25.2` → `v0.25.3`	`v0.26.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp	indirect	minor	`v1.33.0` → `v1.38.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric	indirect	minor	`v0.55.0` → `v0.62.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping	indirect	minor	`v0.55.0` → `v0.62.0`
github.com/Microsoft/go-winio	indirect	patch	`v0.6.2` → `v0.6.4`
github.com/avast/retry-go/v4	indirect	major	`v4.7.0` → `v5.1.1`
github.com/aws/aws-sdk-go	indirect	patch	`v1.55.7` → `v1.55.8`
github.com/cenkalti/backoff/v5	indirect	major	`v5.0.3` → `v7.0.3`
github.com/cheggaaa/pb/v3	indirect	minor	`v3.1.6` → `v3.3.0`
github.com/clipperhouse/uax29/v2	indirect	minor	`v2.2.0` → `v2.7.0`
github.com/coreos/go-systemd/v22	indirect	minor	`v22.6.0` → `v22.7.0`
github.com/docker/go-connections	indirect	minor	`v0.6.0` → `v0.8.2`
github.com/dustin/go-humanize	indirect	minor	`v1.0.1` → `v1.1.0`
github.com/emicklei/go-restful/v3	indirect	minor	`v3.12.2` → `v3.14.0`
github.com/envoyproxy/go-control-plane/envoy	indirect	minor	`v1.37.0` → `v1.40.0`
github.com/fatih/color	indirect	minor	`v1.18.0` → `v1.19.0`
github.com/felixge/httpsnoop	indirect	minor	`v1.0.4` → `v1.1.0`
github.com/fxamacker/cbor/v2	indirect	minor	`v2.9.0` → `v2.10.0`
github.com/go-jose/go-jose/v4	indirect	patch	`v4.1.4` → `v4.1.9`
github.com/go-logr/logr	indirect	patch	`v1.4.3` → `v1.4.4`
github.com/go-openapi/jsonpointer	indirect	major	`v0.22.5` → `v1.0.2`
github.com/go-openapi/jsonreference	indirect	major	`v0.21.5` → `v1.0.3`
github.com/go-openapi/swag	indirect	minor	`v0.25.5` → `v0.29.2`
github.com/go-openapi/swag/cmdutils	indirect	minor	`v0.25.5` → `v0.29.2`
github.com/go-openapi/swag/conv	indirect	minor	`v0.25.5` → `v0.29.2`
github.com/go-openapi/swag/fileutils	indirect	minor	`v0.25.5` → `v0.29.2`
github.com/go-openapi/swag/jsonname	indirect	minor	`v0.25.5` → `v0.29.2`
github.com/go-openapi/swag/jsonutils	indirect	minor	`v0.25.5` → `v0.29.2`
github.com/go-openapi/swag/loading	indirect	minor	`v0.25.5` → `v0.29.2`
github.com/go-openapi/swag/mangling	indirect	minor	`v0.25.5` → `v0.29.2`
github.com/go-openapi/swag/netutils	indirect	minor	`v0.25.5` → `v0.29.2`
github.com/go-openapi/swag/stringutils	indirect	minor	`v0.25.5` → `v0.29.2`
github.com/go-openapi/swag/typeutils	indirect	minor	`v0.25.5` → `v0.29.2`
github.com/go-openapi/swag/yamlutils	indirect	minor	`v0.25.5` → `v0.29.2`
github.com/go-sql-driver/mysql	require	minor	`v1.9.3` → `v1.10.1`
github.com/gofrs/flock	indirect	patch	`v0.13.0` → `v0.13.1`	`v0.13.2`
github.com/golang-cz/devslog	indirect	patch	`v0.0.15` → `v0.0.17`
github.com/google/pprof	indirect	digest	`a15ffb7` → `4bf881d`
github.com/google/s2a-go	indirect	patch	`v0.1.9` → `v0.1.11`
github.com/googleapis/enterprise-certificate-proxy	indirect	patch	`v0.3.14` → `v0.3.25`
github.com/googleapis/gax-go/v2	indirect	minor	`v2.19.0` → `v2.27.0`
github.com/grpc-ecosystem/go-grpc-middleware	require	major	`v1.4.0` → `v2.3.4`
github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus	indirect	minor	`v1.0.1` → `v1.1.1`
github.com/grpc-ecosystem/go-grpc-middleware/v2	indirect	minor	`v2.1.0` → `v2.3.4`
github.com/grpc-ecosystem/grpc-gateway/v2	indirect	minor	`v2.29.0` → `v2.33.0`
github.com/huandu/xstrings	indirect	minor	`v1.2.0` → `v1.6.3`
github.com/imdario/mergo	indirect	major	`v0.3.4` → `v1.0.2`
github.com/jackc/pgx/v4	indirect	major	`v4.18.3` → `v5.12.0`
github.com/jackc/pgx/v5	require	minor	`v5.9.1` → `v5.12.0`
github.com/jackc/puddle/v2	indirect	patch	`v2.2.2` → `v2.2.3`
github.com/jhump/protoreflect	indirect	major	`v1.18.0` → `v2.0.0`
github.com/jhump/protoreflect/v2	indirect	patch	`v2.0.0-beta.1` → `v2.0.0`
github.com/lib/pq	require	patch	`v1.12.0` → `v1.12.3`
github.com/mattn/go-colorable	indirect	patch	`v0.1.14` → `v0.1.16`
github.com/mattn/go-isatty	indirect	patch	`v0.0.20` → `v0.0.24`
github.com/mattn/go-runewidth	indirect	patch	`v0.0.21` → `v0.0.31`
github.com/olekukonko/errors	indirect	major	`v0.0.0-20250405072817-4e6d85265da6` → `v1.3.0`
github.com/olekukonko/ll	indirect	minor	`v0.0.8-0.20250516010636-22ea57d81985` → `v0.1.9`
github.com/olekukonko/tablewriter	indirect	minor	`v1.0.6` → `v1.1.5`
github.com/onsi/ginkgo	indirect	major	`v1.16.5` → `v2.34.0`
github.com/planetscale/vtprotobuf	indirect	digest	`ba97887` → `8ae5a48`
github.com/prometheus/client_golang	require	minor	`v1.23.2` → `v1.25.0`
github.com/prometheus/client_model	require	patch	`v0.6.2` → `v0.6.3`
github.com/prometheus/common	indirect	minor	`v0.67.5` → `v0.73.1`
github.com/prometheus/procfs	indirect	minor	`v0.20.1` → `v0.23.0`
github.com/prometheus/prometheus	indirect	minor	`v0.304.2` → `v0.316.0`
github.com/pseudomuto/protokit	indirect	minor	`v0.2.1` → `v0.3.0`
github.com/sirupsen/logrus	indirect	minor	`v1.9.4` → `v1.10.2`
github.com/spf13/pflag	indirect	minor	`v1.0.10` → `v1.1.0`
github.com/spiffe/go-spiffe/v2	indirect	minor	`v2.7.0` → `v2.9.0`
github.com/stretchr/testify	indirect	minor	`v1.11.1` → `v1.12.1`
go.etcd.io/bbolt	indirect	minor	`v1.4.3` → `v1.5.0`
go.etcd.io/etcd/api/v3	indirect	minor	`v3.6.14` → `v3.7.3`
go.etcd.io/etcd/client/pkg/v3	indirect	minor	`v3.6.14` → `v3.7.3`
go.etcd.io/etcd/etcdutl/v3	indirect	minor	`v3.6.14` → `v3.7.3`
go.etcd.io/etcd/pkg/v3	indirect	minor	`v3.6.14` → `v3.7.3`
go.etcd.io/etcd/tests/v3	indirect	minor	`v3.6.14` → `v3.7.3`
go.etcd.io/raft/v3	indirect	minor	`v3.6.0` → `v3.7.0`
go.opentelemetry.io/contrib/detectors/gcp	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	indirect	minor	`v0.69.0` → `v0.72.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.69.0` → `v0.72.0`
go.opentelemetry.io/otel	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/metric	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/sdk	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/sdk/metric	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/trace	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/proto/otlp	indirect	minor	`v1.10.0` → `v1.11.1`
go.uber.org/zap	indirect	minor	`v1.27.1` → `v1.28.0`
go.yaml.in/yaml/v2	indirect	major	`v2.4.3` → `v4.0.0`
go.yaml.in/yaml/v3	indirect	major	`v3.0.4` → `v4.0.0`
golang.org/x/crypto	indirect	minor	`v0.55.0` → `v0.58.0`
golang.org/x/mod	indirect	minor	`v0.38.0` → `v0.42.0`	`v0.43.0`
golang.org/x/net	indirect	minor	`v0.58.0` → `v0.62.0`
golang.org/x/oauth2	indirect	minor	`v0.36.0` → `v0.38.0`
golang.org/x/sync	require	minor	`v0.22.0` → `v0.25.0`
golang.org/x/sys	require	minor	`v0.47.0` → `v0.50.0`
golang.org/x/term	indirect	minor	`v0.45.0` → `v0.47.0`	`v0.48.0`
golang.org/x/text	indirect	minor	`v0.41.0` → `v0.43.0`	`v0.44.0`
golang.org/x/time	indirect	minor	`v0.15.0` → `v0.16.0`
golang.org/x/tools	require	minor	`v0.48.0` → `v0.52.0`
google.golang.org/grpc	require	minor	`v1.83.2` → `v1.85.0`
google.golang.org/grpc/cmd/protoc-gen-go-grpc	require	patch	`v1.6.1` → `v1.6.2`
google.golang.org/protobuf	require	patch	`v1.36.11` → `v1.36.12`
gopkg.in/evanphx/json-patch.v4	indirect	major	`v4.13.0` → `v5.9.11`
gopkg.in/yaml.v2	require	major	`v2.4.0` → `v3.0.1`
k8s.io/api	require	minor	`v0.35.3` → `v0.37.2`
k8s.io/apimachinery	require	minor	`v0.35.3` → `v0.37.2`
k8s.io/client-go	require	minor	`v0.35.3` → `v0.37.2`
k8s.io/kube-openapi	indirect	digest	`5883c5e` → `5bee61f`
k8s.io/utils	require	digest	`28399d8` → `ca04ba5`
sigs.k8s.io/json	indirect	digest	`2d32026` → `11ed52e`
sigs.k8s.io/structured-merge-diff/v6	indirect	major	`v6.3.0` → `v7.0.1`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

cel-expr/cel-spec (cel.dev/expr)

`v0.25.3`

Compare Source

What's Changed

Workaround inconsistent ? in proto textformat by @jnthntatum in #512
Update README with repository relocation notice by @dmitriplotnikov in #514
Add basic tests for out-of-range epoch int to timestamp conversions by @l46kok in #500
Update README with new repository link by @dmitriplotnikov in #519
Lint fixes for import by @jnthntatum in #521
CEL conformance test documentation: fix links in markdown by @AustinWise in #518
Avoid ? in textproto test cases. by @jnthntatum in #525
Add initial conformance tests for lists ext by @jnthntatum in #528

New Contributors

@dmitriplotnikov made their first contribution in #514
@AustinWise made their first contribution in #518

Full Changelog: cel-expr/cel-spec@v0.25.2...v0.25.3

GoogleCloudPlatform/opentelemetry-operations-go (github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric)

`v0.62.0`: v1.38.0/v0.62.0

Compare Source

What's Changed

exporter/collector/logs: Add support for the gcp.operation attribute by @quentinmit in #1201
Prepare release v1.38.0/v0.62.0 by @quentinmit in #1203

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.61.0...v0.62.0

`v0.61.0`: v1.37.0/v0.61.0

Compare Source

What's Changed

Drop support for go 1.25 by @dashpole in #1190
Deprecate trace and metric exporters and add migration guide by @dashpole in #1192
Deprecate extension/googleclientauthextension module by @dashpole in #1187
fix: update Cloud Functions gen2 e2e test runtime to go126 by @dashpole in #1195
propagator: deprecate package and add missing module-level deprecations by @dashpole in #1196
detectors/gcp: deprecate GCP resource detection package by @dashpole in #1193
Prepare release v1.37.0/v0.61.0 by @dashpole in #1198

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.60.0...v0.61.0

`v0.60.0`: v1.36.0/v0.60.0

Compare Source

What's Changed

Add GKEHostType by @iblancasa in #1177
Update OpenTelemetry dependencies to fix govulncheck GO-2026-5158 by @dashpole in #1185
exporter/trace: update span attribute and event limits to match backend by @dashpole in #1186
Add support for go 1.27 and fix zizimor by @dashpole in #1188
Prepare release v1.36.0/v0.60.0 by @dashpole in #1189

New Contributors

@iblancasa made their first contribution in #1177

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.59.0...v0.60.0

`v0.59.0`

Compare Source

What's Changed

Adds support for resolving OpenTelemetry authentication extensions by @Angelawork in #1181
update golang.org/x/crypto by @braydonk in #1182
Update module google.golang.org/grpc to v1.82.1 [SECURITY] by @renovate-bot in #1184
Prepare release 0.59.0/1.35.0 by @braydonk in #1183

New Contributors

@Angelawork made their first contribution in #1181

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.58.0...v0.59.0

`v0.58.0`: v1.34.0/v0.58.0

Compare Source

What's Changed

googlemanagedprometheus: Add destination_project_quota by @braydonk in #1175
Prepare release v1.34.0/v0.58.0 by @braydonk in #1178

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0...v0.58.0

`v0.57.0`: v1.33.0/v0.57.0

Compare Source

What's Changed

Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] by @renovate-bot in #1146
Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] by @renovate-bot in #1145
Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] by @renovate-bot in #1144
[chore] retry_on_failure is removed from our exporter by @braydonk in #1151
downgrade davecgh/go-spew, pmezard/go-difflib to tagged releases by @thaJeztah in #1152
Update module go.opentelemetry.io/otel/sdk to v1.43.0 [SECURITY] by @renovate-bot in #1149
Update e2e-testing image to fix presubmits by @dashpole in #1155
Update go.opentelemetry.io/collector by @renovate-bot in #1073
Auto comment /gcbrun for dependency updates by @dashpole in #1154
Revert "Auto comment /gcbrun for dependency updates" by @dashpole in #1157
Update module github.com/prometheus/common to v0.67.5 by @renovate-bot in #1156
Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.4.0 in /tools by @dependabot[bot] in #1118
Update golang.org/x by @renovate-bot in #1008
Combine dependency bumps by @dashpole in #1158
Update All Dependencies by @renovate-bot in #1161
Update all major dependencies by @dashpole in #1164
Update All Dependencies by @renovate-bot in #1163
Add AGENTS.md by @dashpole in #1165
Fix CodeQL permissions to allow uploading results by @dashpole in #1166
collector: bump golang.org/x/net to v0.55.0 to fix GO-2026-5026 by @dashpole in #1170
Migrate impersonate to use cloud.google.com/go/auth by @dashpole in #1169
fix: Support OTLP event_name field in logs exporter by @putcho01 in #1088
exporter/collector/logs: accept string-typed line in sourceLocation by @alliasgher in #1142
exporter/collector/logs: use parsed httpRequest.protocol instead of hardcoded HTTP/1.1 by @alliasgher in #1143
exporter/trace: sanitize invalid UTF-8 in span fields by @alliasgher in #1141
chore: update E2E tests to use centralized async cleanup 0.22.0 by @aabmass in #1171
Add support for cloud run worker pools by @dashpole in #1112
Prerelease 1.33.0/v0.57.0 by @avilevy18 in #1173

New Contributors

@thaJeztah made their first contribution in #1152
@putcho01 made their first contribution in #1088
@alliasgher made their first contribution in #1142

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.56.0...v0.57.0

`v0.56.0`: v1.32.0/v0.56.0

Compare Source

What's Changed

Support universe domains in collector exporter client configuration by @dashpole in #1097
Don't pass credentials fetched using FindDefaultCredentials by @dashpole in #1098
googleclientauthextension: support Proxy-Authorization header by @lindeskar in #1105
Improve unit tests for gcp auth extension by @dashpole in #1103
Allow providing a context to create the monitoring client by @dashpole in #1096
Add support for go 1.26 by @dashpole in #1107
chore(deps): update module golang.org/x/crypto to v0.45.0 [security] by @renovate-bot in #1102
Don't allow modifying the default scopes by @dashpole in #1109
Ignore versions in the user agent header when comparing fixtures by @dashpole in #1115
Bump go version to resolve govulncheck failures by @dashpole in #1114
Separate out govulncheck into its own CI job by @dashpole in #1113
Normalize user agents in span attributes as well by @dashpole in #1117
fix(deps): update module google.golang.org/grpc to v1.79.3 [security] by @jefferbrecht in #1131
Prepare for v1.32.0/v0.56.0 by @dashpole in #1132

New Contributors

@lindeskar made their first contribution in #1105
@jefferbrecht made their first contribution in #1131

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.55.0...v0.56.0

Microsoft/go-winio (github.com/Microsoft/go-winio)

`v0.6.4`

Compare Source

What's Changed

Bump golang.org/x/sys from 0.48.0 to 0.49.0 by @dependabot[bot] in microsoft#393
Fix regression in mkwinsyscall for non SystemDLLs by @jterry75 in microsoft#394

Full Changelog: microsoft/go-winio@v0.6.3...v0.6.4

`v0.6.3`

Compare Source

What's Changed

switch back from golang.org/x/sys/execabs to os/exec (go1.19) by @thaJeztah in microsoft#317
Add Go wrappers for Get/SetVirtualDiskInformation win32 APIs. by @ambarve in microsoft#334
Add support for LX symlinks (0xA000001D) for WSL/MSYS2 compatibility by @vagokuln-msft in microsoft#336
backuptar: fix sparse stream handling in seekable exports by @rzlink in microsoft#375
Bump github.com/sirupsen/logrus from 1.9.3 to 1.10.2 by @dependabot[bot] in microsoft#374
Pin GitHub Actions to full-length commit SHAs by @danfiedler-msft in microsoft#373
ci: add windows-2025, remove windows-2019 by @thaJeztah in microsoft#378
Bump actions/checkout from 4.4.0 to 7.0.1 by @dependabot[bot] in microsoft#380
Bump actions/setup-go from 5.6.0 to 7.0.0 by @dependabot[bot] in microsoft#381
go.mod: raise minimum go version to go1.24 and use tools directive by @thaJeztah in microsoft#348
Restrict CI workflow token permissions by @jterry75 with @Copilot in microsoft#382
Use go tool to run stringer by @thaJeztah in microsoft#383
ci: update actions and golangci-lint, and fix linting by @thaJeztah in microsoft#349
fix linting issues by @thaJeztah in microsoft#325
Bump golang.org/x/tools to v0.50.0 by @jterry75 in microsoft#385
Resolves race in makeConnectedServerPipe / Close by @jterry75 in microsoft#388
tools/mkwinsyscall: remove errnoERROR_IO_PENDING const by @thaJeztah in microsoft#260
linting: enable dupword, intrange, mirror, gocritic by @alexandear in microsoft#387
improve interoperability with stdlib sentinel errors and deprecate aliases by @thaJeztah in microsoft#392

New Contributors

@vagokuln-msft made their first contribution in microsoft#336
@rzlink made their first contribution in microsoft#375
@dependabot[bot] made their first contribution in microsoft#374
@danfiedler-msft made their first contribution in microsoft#373
@jterry75 with @Copilot made their first contribution in microsoft#382
@alexandear made their first contribution in microsoft#387

Full Changelog: microsoft/go-winio@v0.6.2...v0.6.3

avast/retry-go (github.com/avast/retry-go/v4)

`v5.1.1`

Compare Source

What's Changed

fix: keep zero full-jitter delay after many attempts by @dailyun in #171
fix(delay): clamp full-jitter ceiling to int64 range by @JaSei in #172

New Contributors

@dailyun made their first contribution in #171

Full Changelog: avast/retry-go@5.1.0...v5.1.1

`v5.1.0`

Compare Source

What's Changed

📝 Correct documentation examples by @blacksails in #150
ci(workflow): add Go 1.26 and 1.27, fix macOS for pre-1.24 Go by @JaSei in #165
options: fix newRetrierCore typo (was newRetrieerCore) by @c-tonneslan in #156
Update README for DoWithData method transition by @JaSei in #152
Fix backoff shift bounds for large delays by @bensynapse in #161
fix: honor attemptsForError and prevent uint underflow when attempts is zero by @AdamMagued in #163
ci(workflow): skip codecov upload on dependabot PRs by @JaSei in #166
docs: add AGENTS.md with agent guidelines by @JaSei in #167
fix: avoid unbounded error slice growth when lastErrorOnly is true by @Yanhu007 in #155
build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 by @JaSei in #168
docs: replace godocdown with in-repo stdlib README generator by @JaSei in #169
feat(throttle): add retry throttling by @nhancdt2602 in #154

New Contributors

@blacksails made their first contribution in #150
@c-tonneslan made their first contribution in #156
@bensynapse made their first contribution in #161
@AdamMagued made their first contribution in #163
@Yanhu007 made their first contribution in #155
@nhancdt2602 made their first contribution in #154

Full Changelog: avast/retry-go@5.0.0...v5.1.0

`v5.0.1`

Compare Source

Patch release — no public API changes.

Bug fixes

Backoff delay overflow with very large Delay — the shift cap was computed via math.Log2 on a float64, which underflowed for delays near math.MaxInt64, producing invalid backoff delays. The cap is now derived exactly from the bit length of math.MaxInt64. (#161)
AttemptsForError is now honored when Attempts is 0 (UntilSucceeded) — the per-error budget was previously ignored in the retry-until-success loop; this also fixes a uint underflow when a budget of 0 was configured, which caused infinite retries. (#163, fixes #137)
Unbounded error accumulation with LastErrorOnly(true) — errors were appended to the internal error log on every attempt even though only the last one is returned, growing memory without bound on long retry runs (e.g. Attempts(math.MaxUint) + context cancellation). Only the last error is retained now; the returned error is unchanged. (#155, fixes #118)

Documentation & tooling

Clarified the v5 migration for DoWithData → NewWithData[T] (#152)
README is now generated by an in-repo stdlib tool (tools/genreadme) with a CI golden-file check, replacing the unmaintained godocdown — the v5 changelog and doc links now render correctly on both GitHub and pkg.go.dev (#169, resolves #77)
CI: Go 1.26/1.27 added to the matrix, pre-1.24 Go excluded from macOS runners, Codecov no longer fails Dependabot PRs (#165, #166)
Development dependency: testify 1.11.1 → 1.12.1 (#168)

Thanks to @bensynapse, @AdamMagued, @Yanhu007, @c-tonneslan, @AruneshDwivedi and @team-humaki — whose contributions, including the ones superseded during review, shaped this release. 🙏

`v5.0.0`

Compare Source

What's Changed

Use Makefile lint target instead of blocked GitHub Action by @JaSei in #143
default type is combination of backoff and random by @JaSei in #144
Enhance readme + coverage by @JaSei in #146
default branch is main by @JaSei in #147
Proposal for v5 API: retry.New(...).Do(func) by @msf in #148
upgrade to v5.0.0 with Go 1.20 multiple error wrapping support by @JaSei in #149

New Contributors

@msf made their first contribution in #148

Full Changelog: avast/retry-go@4.7.0...v5.0.0

aws/aws-sdk-go (github.com/aws/aws-sdk-go)

`v1.55.8`

Compare Source

SDK Features

Mark the module and all packages as deprecated.
- This SDK has entered end-of-support.

cenkalti/backoff (github.com/cenkalti/backoff/v5)

cheggaaa/pb (github.com/cheggaaa/pb/v3)

`v3.3.0`

Compare Source

`v3.2.1`

Compare Source

`v3.2.0`

Compare Source

`v3.1.7`

Compare Source

clipperhouse/uax29 (github.com/clipperhouse/uax29/v2)

`v2.7.0`

Compare Source

`v2.6.0`

Compare Source

`v2.5.0`

Compare Source

What's Changed

Unicode 17 by @aymanbagabas in #44
Fast paths for ASCII by @clipperhouse in #42

Breaking change

The returned iterator type from FromString() and FromBytes() is now a pointer. This will not present a problem if you are just using it in the typical way, which is assigning to a local variable and iterating.

If you are embedding this iterator into another object, and therefore declaring its type, this change might break your compilation. You’ll need to change to a pointer type. Apologies if so — this seems like a small enough change that a v3 would be a bit much.

New Contributors

@aymanbagabas made their first contribution in #44

Full Changelog: clipperhouse/uax29@v2.4.0...v2.5.0

`v2.4.0`

Compare Source

Adds Unicode 16 support

What's Changed

Unicode 16 by @clipperhouse in #41

Full Changelog: clipperhouse/uax29@v2.3.0...v2.4.0

`v2.3.1`

Compare Source

`v2.3.0`

Compare Source

coreos/go-systemd (github.com/coreos/go-systemd/v22)

`v22.7.0`

Compare Source

This release fixes an issue with multiple calls to (e.g.) StopUnit, simplifies and improves code and documentation, and adds a few new methods.

What's Changed

build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #473
Fixing error on negative value of LISTEN_FDS by @vporoshok in #472
Misc error reporting improvements by @kolyshkin in #475
daemon: add SdNotifyMonotonicUsec helper function by @corhere in #435
build(deps): bump golangci/golangci-lint-action from 8 to 9 by @dependabot[bot] in #481
build(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #483
dbus: fix TestSetUnitProperties wrt systemd >= 252 by @kolyshkin in #489
Sync repo templates ⚙ by @coreosbot-releng in #486
unit: simplify escape chara

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-10-03T05:05:44Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: github.com/imdario/mergo@v1.0.2: parsing go.mod:
	module declares its path as: dario.cat/mergo
	        but was required as: github.com/imdario/mergo

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot added the dependencies label Oct 3, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from 79d7550 to b10a718 Compare October 3, 2026 05:05

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 5 times, most recently from 2010ed7 to 1003b05 Compare October 10, 2026 05:09

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 8 times, most recently from 1d9f6ff to e1ac976 Compare October 17, 2026 06:31

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 4 times, most recently from f70178f to 7bddc50 Compare October 24, 2026 11:10

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 6 times, most recently from 109d5ff to f703b67 Compare November 1, 2026 01:39

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 4 times, most recently from 5ff7474 to f77fbb3 Compare November 6, 2026 02:48

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 2 times, most recently from 7c52309 to 58d7b1f Compare November 9, 2026 01:03

chore(deps): update go dependencies

e7a8557

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from 58d7b1f to e7a8557 Compare November 10, 2026 01:48

Navigation Menu

Repository navigation

chore(deps): update go dependencies - #782

chore(deps): update go dependencies#782
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go-deps

red-hat-konflux Bot commented Oct 3, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Oct 3, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux Bot commented Oct 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

v0.62.0: v1.38.0/v0.62.0

What's Changed

v0.61.0: v1.37.0/v0.61.0

What's Changed

v0.60.0: v1.36.0/v0.60.0

What's Changed

New Contributors

What's Changed

New Contributors

v0.58.0: v1.34.0/v0.58.0

What's Changed

v0.57.0: v1.33.0/v0.57.0

What's Changed

New Contributors

v0.56.0: v1.32.0/v0.56.0

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

Bug fixes

Documentation & tooling

What's Changed

New Contributors

SDK Features

What's Changed

Breaking change

New Contributors

What's Changed

What's Changed

Configuration

Documentation

Uh oh!

red-hat-konflux Bot commented Oct 3, 2026

⚠️ Artifact update problem

File name: go.sum

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux Bot commented Oct 3, 2026 •

edited

Loading

`v0.62.0`: v1.38.0/v0.62.0

`v0.61.0`: v1.37.0/v0.61.0

`v0.60.0`: v1.36.0/v0.60.0

`v0.58.0`: v1.34.0/v0.58.0

`v0.57.0`: v1.33.0/v0.57.0

`v0.56.0`: v1.32.0/v0.56.0