Repository navigation
[Upstream Sync] Merge v1.8.0 into main - #840
Open
securesign-upstream-sync[bot] wants to merge 32 commits into
Open
securesign-upstream-sync[bot] wants to merge 32 commits into
securesign-upstream-sync[bot] wants to merge 32 commits into
Conversation
Bumps the go-deps group with 11 updates: | Package | From | To | | --- | --- | --- | | [github.com/apache/beam/sdks/v2](https://github.com/apache/beam) | `2.71.0` | `2.72.0` | | [github.com/letsencrypt/pkcs11key/v4](https://github.com/letsencrypt/pkcs11key) | `4.0.0` | `4.0.1` | | [github.com/lib/pq](https://github.com/lib/pq) | `1.12.0` | `1.12.1` | | [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) | `3.6.9` | `3.6.10` | | [go.etcd.io/etcd/etcdctl/v3](https://github.com/etcd-io/etcd) | `3.6.9` | `3.6.10` | | [go.etcd.io/etcd/server/v3](https://github.com/etcd-io/etcd) | `3.6.9` | `3.6.10` | | [go.etcd.io/etcd/v3](https://github.com/etcd-io/etcd) | `3.6.9` | `3.6.10` | | [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.272.0` | `0.273.1` | | [google.golang.org/genproto](https://github.com/googleapis/go-genproto) | `0.0.0-20260217215200-42d3e9bedb6d` | `0.0.0-20260316180232-0b37fe3546d5` | | [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20260316180232-0b37fe3546d5` | `0.0.0-20260319201613-d00831a3d3e7` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.79.3` | `1.80.0` | Updates `github.com/apache/beam/sdks/v2` from 2.71.0 to 2.72.0 - [Release notes](https://github.com/apache/beam/releases) - [Changelog](https://github.com/apache/beam/blob/master/CHANGES.md) - [Commits](apache/beam@v2.71.0...v2.72.0) Updates `github.com/letsencrypt/pkcs11key/v4` from 4.0.0 to 4.0.1 - [Commits](letsencrypt/pkcs11key@v4.0.0...v4.0.1) Updates `github.com/lib/pq` from 1.12.0 to 1.12.1 - [Release notes](https://github.com/lib/pq/releases) - [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md) - [Commits](lib/pq@v1.12.0...v1.12.1) Updates `go.etcd.io/etcd/client/v3` from 3.6.9 to 3.6.10 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.9...v3.6.10) Updates `go.etcd.io/etcd/etcdctl/v3` from 3.6.9 to 3.6.10 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.9...v3.6.10) Updates `go.etcd.io/etcd/server/v3` from 3.6.9 to 3.6.10 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.9...v3.6.10) Updates `go.etcd.io/etcd/v3` from 3.6.9 to 3.6.10 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.9...v3.6.10) Updates `google.golang.org/api` from 0.272.0 to 0.273.1 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.272.0...v0.273.1) Updates `google.golang.org/genproto` from 0.0.0-20260217215200-42d3e9bedb6d to 0.0.0-20260316180232-0b37fe3546d5 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260316180232-0b37fe3546d5 to 0.0.0-20260319201613-d00831a3d3e7 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.79.3 to 1.80.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.79.3...v1.80.0) --- updated-dependencies: - dependency-name: github.com/apache/beam/sdks/v2 dependency-version: 2.72.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/letsencrypt/pkcs11key/v4 dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/lib/pq dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: go.etcd.io/etcd/client/v3 dependency-version: 3.6.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: go.etcd.io/etcd/etcdctl/v3 dependency-version: 3.6.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: go.etcd.io/etcd/server/v3 dependency-version: 3.6.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: go.etcd.io/etcd/v3 dependency-version: 3.6.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/api dependency-version: 0.273.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: google.golang.org/genproto dependency-version: 0.0.0-20260316180232-0b37fe3546d5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20260319201613-d00831a3d3e7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/grpc dependency-version: 1.80.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the github-actions-deps group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [actions/setup-go](https://github.com/actions/setup-go). Updates `github/codeql-action` from 4.34.1 to 4.35.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@3869755...c10b806) Updates `actions/setup-go` from 6.3.0 to 6.4.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@4b73464...4a36011) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-deps - dependency-name: actions/setup-go dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-deps ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the docker-deps group with 1 update in the /examples/deployment/kubernetes/mysql/image directory: ubuntu. Updates `ubuntu` from `ce4a593` to `5e5b128` --- updated-dependencies: - dependency-name: ubuntu dependency-version: jammy dependency-type: direct:production dependency-group: docker-deps ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.1.3 to 4.1.4. - [Release notes](https://github.com/go-jose/go-jose/releases) - [Commits](go-jose/go-jose@v4.1.3...v4.1.4) --- updated-dependencies: - dependency-name: github.com/go-jose/go-jose/v4 dependency-version: 4.1.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.42.0 to 1.43.0. - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.42.0...v1.43.0) --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.43.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.9.1 to 5.9.2. - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.9.1...v5.9.2) --- updated-dependencies: - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.9.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the github-actions-deps group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [actions/upload-artifact](https://github.com/actions/upload-artifact). Updates `github/codeql-action` from 4.35.1 to 4.35.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@c10b806...e46ed2c) Updates `actions/upload-artifact` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@bbbca2d...043fb46) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-deps - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-deps ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [go.etcd.io/etcd/v3](https://github.com/etcd-io/etcd) from 3.6.10 to 3.6.11. - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.10...v3.6.11) --- updated-dependencies: - dependency-name: go.etcd.io/etcd/v3 dependency-version: 3.6.11 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Replace deprecated golang.org/x/crypto/ed25519 with stdlib crypto/ed25519
Updated the Claimant Model docs for readability. There are no functional changes to the core model in here, but a lot has been reworded for clarity and quick lookup. The main changes in content are around witnessing. At the time of first writing, witnessing wasn't well defined. Now we have a much broader consensus and specs around what witnessing is. I've thus included them in the body of the Logs.md writeup, and adjusted the diagram to explicitly include witnesses as an active entity.
This uses the minimal bump to go that avoids the CVEs blocking the vuln checker. Unfixable vulns are ignored via a custom wrapper. Hopefully this feature appears upstream soon and we can retire this.
…e#3892) Bumps the docker-deps group with 1 update in the /examples/deployment/docker/db_server directory: mysql. Bumps the docker-deps group with 1 update in the /examples/deployment/docker/db_server/postgresql directory: postgres. Bumps the docker-deps group with 1 update in the /examples/deployment/docker/envsubst directory: alpine. Bumps the docker-deps group with 2 updates in the /examples/deployment/docker/log_server directory: golang and distroless/base-debian12. Bumps the docker-deps group with 2 updates in the /examples/deployment/docker/log_signer directory: golang and distroless/base-debian12. Bumps the docker-deps group with 1 update in the /examples/deployment/kubernetes/mysql/image directory: ubuntu. Bumps the docker-deps group with 1 update in the /integration/cloudbuild/testbase directory: golang. Updates `mysql` from `da90691` to `c36050a` Updates `postgres` from 18.3 to 18.4 Updates `alpine` from `2510918` to `5b10f43` Updates `golang` from 1.26.1-bookworm to 1.26.4-bookworm Updates `distroless/base-debian12` from `937c7ea` to `58695f4` Updates `golang` from 1.26.1-bookworm to 1.26.4-bookworm Updates `distroless/base-debian12` from `937c7ea` to `58695f4` Updates `golang` from 1.26.1-bookworm to 1.26.4-bookworm Updates `golang` from 1.26.1-bookworm to 1.26.4-bookworm Updates `distroless/base-debian12` from `937c7ea` to `58695f4` Updates `golang` from 1.26.1-bookworm to 1.26.4-bookworm Updates `distroless/base-debian12` from `937c7ea` to `58695f4` Updates `golang` from 1.26.1-bookworm to 1.26.4-bookworm Updates `ubuntu` from `5e5b128` to `4f838ad` Updates `golang` from 1.26.1-bookworm to 1.26.4-bookworm Updates `golang` from 1.26.1-bookworm to 1.26.4-bookworm Updates `golang` from 1.26.1-bookworm to 1.26.4-bookworm --- updated-dependencies: - dependency-name: alpine dependency-version: '3.23' dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: distroless/base-debian12 dependency-version: 58695f439f772a00009c8f6be4c183f824c1f556d74b313c30900f167e4772f8 dependency-type: direct:production dependency-group: docker-deps - dependency-name: distroless/base-debian12 dependency-version: 58695f439f772a00009c8f6be4c183f824c1f556d74b313c30900f167e4772f8 dependency-type: direct:production dependency-group: docker-deps - dependency-name: distroless/base-debian12 dependency-version: 58695f439f772a00009c8f6be4c183f824c1f556d74b313c30900f167e4772f8 dependency-type: direct:production dependency-group: docker-deps - dependency-name: distroless/base-debian12 dependency-version: 58695f439f772a00009c8f6be4c183f824c1f556d74b313c30900f167e4772f8 dependency-type: direct:production dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.4-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.4-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.4-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.4-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.4-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.4-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.4-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.4-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.4-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: mysql dependency-version: '8.4' dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: postgres dependency-version: '18.4' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docker-deps - dependency-name: ubuntu dependency-version: jammy dependency-type: direct:production dependency-group: docker-deps ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump the go-deps group across 1 directory with 20 updates Bumps the go-deps group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [cloud.google.com/go/spanner](https://github.com/googleapis/google-cloud-go) | `1.89.0` | `1.91.0` | | [github.com/apache/beam/sdks/v2](https://github.com/apache/beam) | `2.72.0` | `2.74.0` | | [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` | | [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) | `3.6.11` | `3.6.12` | | [go.etcd.io/etcd/etcdctl/v3](https://github.com/etcd-io/etcd) | `3.6.11` | `3.6.12` | | [go.etcd.io/etcd/server/v3](https://github.com/etcd-io/etcd) | `3.6.11` | `3.6.12` | | [go.etcd.io/etcd/v3](https://github.com/etcd-io/etcd) | `3.6.11` | `3.6.12` | | [golang.org/x/tools](https://github.com/golang/tools) | `0.44.0` | `0.45.0` | | [google.golang.org/grpc/cmd/protoc-gen-go-grpc](https://github.com/grpc/grpc-go) | `1.6.1` | `1.6.2` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.35.3` | `0.36.1` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.35.3` | `0.36.1` | Updates `cloud.google.com/go/spanner` from 1.89.0 to 1.91.0 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@spanner/v1.89.0...spanner/v1.91.0) Updates `github.com/apache/beam/sdks/v2` from 2.72.0 to 2.74.0 - [Release notes](https://github.com/apache/beam/releases) - [Changelog](https://github.com/apache/beam/blob/master/CHANGES.md) - [Commits](apache/beam@v2.72.0...v2.74.0) Updates `github.com/go-sql-driver/mysql` from 1.9.3 to 1.10.0 - [Release notes](https://github.com/go-sql-driver/mysql/releases) - [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md) - [Commits](go-sql-driver/mysql@v1.9.3...v1.10.0) Updates `github.com/jackc/pgx/v5` from 5.9.2 to 5.10.0 - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.9.2...v5.10.0) Updates `github.com/lib/pq` from 1.12.1 to 1.12.3 - [Release notes](https://github.com/lib/pq/releases) - [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md) - [Commits](lib/pq@v1.12.1...v1.12.3) Updates `go.etcd.io/etcd/client/v3` from 3.6.11 to 3.6.12 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.11...v3.6.12) Updates `go.etcd.io/etcd/etcdctl/v3` from 3.6.11 to 3.6.12 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.11...v3.6.12) Updates `go.etcd.io/etcd/server/v3` from 3.6.11 to 3.6.12 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.11...v3.6.12) Updates `go.etcd.io/etcd/v3` from 3.6.11 to 3.6.12 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.11...v3.6.12) Updates `golang.org/x/tools` from 0.44.0 to 0.45.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.44.0...v0.45.0) Updates `google.golang.org/api` from 0.273.1 to 0.279.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.273.1...v0.279.0) Updates `google.golang.org/genproto` from 0.0.0-20260316180232-0b37fe3546d5 to 0.0.0-20260319201613-d00831a3d3e7 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260316180232-0b37fe3546d5 to 0.0.0-20260401024825-9d38bb4040a9 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260319201613-d00831a3d3e7 to 0.0.0-20260427160629-7cedc36a6bc4 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.80.0 to 1.81.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.80.0...v1.81.0) Updates `google.golang.org/grpc/cmd/protoc-gen-go-grpc` from 1.6.1 to 1.6.2 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@cmd/protoc-gen-go-grpc/v1.6.1...cmd/protoc-gen-go-grpc/v1.6.2) Updates `k8s.io/api` from 0.35.3 to 0.36.1 - [Commits](kubernetes/api@v0.35.3...v0.36.1) Updates `k8s.io/apimachinery` from 0.35.3 to 0.36.1 - [Commits](kubernetes/apimachinery@v0.35.3...v0.36.1) Updates `k8s.io/client-go` from 0.35.3 to 0.36.1 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.35.3...v0.36.1) Updates `k8s.io/utils` from 0.0.0-20251002143259-bc988d571ff4 to 0.0.0-20260210185600-b8788abfbbc2 - [Commits](https://github.com/kubernetes/utils/commits) --- updated-dependencies: - dependency-name: cloud.google.com/go/spanner dependency-version: 1.91.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/apache/beam/sdks/v2 dependency-version: 2.74.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/go-sql-driver/mysql dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/lib/pq dependency-version: 1.12.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: go.etcd.io/etcd/client/v3 dependency-version: 3.6.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: go.etcd.io/etcd/etcdctl/v3 dependency-version: 3.6.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: go.etcd.io/etcd/server/v3 dependency-version: 3.6.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: go.etcd.io/etcd/v3 dependency-version: 3.6.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: golang.org/x/tools dependency-version: 0.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: google.golang.org/api dependency-version: 0.279.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: google.golang.org/genproto dependency-version: 0.0.0-20260319201613-d00831a3d3e7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20260401024825-9d38bb4040a9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20260427160629-7cedc36a6bc4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/grpc dependency-version: 1.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: google.golang.org/grpc/cmd/protoc-gen-go-grpc dependency-version: 1.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: k8s.io/api dependency-version: 0.36.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: k8s.io/apimachinery dependency-version: 0.36.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: k8s.io/client-go dependency-version: 0.36.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: k8s.io/utils dependency-version: 0.0.0-20260210185600-b8788abfbbc2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps ... Signed-off-by: dependabot[bot] <support@github.com> * Revert changes forcing go 1.26 update * regen * Downgrade to non-devel version --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Martin Hutchinson <mhutchinson@gmail.com>
…oogle#3890) Bumps the github-actions-deps group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [github/codeql-action](https://github.com/github/codeql-action) and [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action). Updates `actions/checkout` from 6.0.2 to 6.0.3 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@de0fac2...df4cb1c) Updates `github/codeql-action` from 4.35.3 to 4.36.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@e46ed2c...87557b9) Updates `golangci/golangci-lint-action` from 9.2.0 to 9.2.1 - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](golangci/golangci-lint-action@1e7e51e...82606bf) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-deps - dependency-name: github/codeql-action dependency-version: 4.36.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-deps - dependency-name: golangci/golangci-lint-action dependency-version: 9.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-deps ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the github-actions-deps group with 7 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6.0.3` | `7.0.0` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.36.1` | `4.36.2` | | [github/codeql-action/autobuild](https://github.com/github/codeql-action) | `4.36.1` | `4.36.2` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.36.1` | `4.36.2` | | [actions/setup-go](https://github.com/actions/setup-go) | `6.4.0` | `6.5.0` | | [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `9.2.1` | `9.3.0` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.36.1` | `4.36.2` | Updates `actions/checkout` from 6.0.3 to 7.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@df4cb1c...9c091bb) Updates `github/codeql-action/init` from 4.36.1 to 4.36.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@87557b9...8aad20d) Updates `github/codeql-action/autobuild` from 4.36.1 to 4.36.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@87557b9...8aad20d) Updates `github/codeql-action/analyze` from 4.36.1 to 4.36.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@87557b9...8aad20d) Updates `actions/setup-go` from 6.4.0 to 6.5.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@4a36011...924ae3a) Updates `golangci/golangci-lint-action` from 9.2.1 to 9.3.0 - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](golangci/golangci-lint-action@82606bf...ba0d7d2) Updates `github/codeql-action/upload-sarif` from 4.36.1 to 4.36.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@87557b9...8aad20d) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-deps - dependency-name: github/codeql-action/init dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-deps - dependency-name: github/codeql-action/autobuild dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-deps - dependency-name: github/codeql-action/analyze dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-deps - dependency-name: actions/setup-go dependency-version: 6.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-deps - dependency-name: golangci/golangci-lint-action dependency-version: 9.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-deps - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-deps ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.51.0 to 0.52.0. - [Commits](golang/crypto@v0.51.0...v0.52.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.52.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…e#3898) Bumps the docker-deps group with 1 update in the /examples/deployment/docker/db_server directory: mysql. Bumps the docker-deps group with 1 update in the /examples/deployment/docker/db_server/postgresql directory: postgres. Bumps the docker-deps group with 1 update in the /examples/deployment/docker/envsubst directory: alpine. Bumps the docker-deps group with 2 updates in the /examples/deployment/docker/log_server directory: golang and distroless/base-debian12. Bumps the docker-deps group with 2 updates in the /examples/deployment/docker/log_signer directory: golang and distroless/base-debian12. Bumps the docker-deps group with 1 update in the /integration/cloudbuild/testbase directory: golang. Updates `mysql` from `c36050a` to `d36d39a` Updates `postgres` from `8ff36f3` to `4aabea7` Updates `alpine` from 3.23 to 3.24 Updates `golang` from `5d2b868` to `b305420` Updates `distroless/base-debian12` from `58695f4` to `e7e678c` Updates `golang` from `5d2b868` to `b305420` Updates `distroless/base-debian12` from `58695f4` to `e7e678c` Updates `golang` from `5d2b868` to `b305420` --- updated-dependencies: - dependency-name: mysql dependency-version: '8.4' dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: postgres dependency-version: '18.4' dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: alpine dependency-version: '3.24' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.4-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: distroless/base-debian12 dependency-version: e7e678c88c59e70e105a46549bb3fbfb3d732ee3b4afd3a19fdab2e15afaa6b3 dependency-type: direct:production dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.4-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: distroless/base-debian12 dependency-version: e7e678c88c59e70e105a46549bb3fbfb3d732ee3b4afd3a19fdab2e15afaa6b3 dependency-type: direct:production dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.4-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [go.etcd.io/etcd/v3](https://github.com/etcd-io/etcd) from 3.6.12 to 3.6.14. - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.12...v3.6.14) --- updated-dependencies: - dependency-name: go.etcd.io/etcd/v3 dependency-version: 3.6.14 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* offer caching for mysql quota provider Signed-off-by: Bob Callaway <bcallaway@google.com> * Update quota/mysqlqm/quota_provider.go Co-authored-by: Roger Ng <roger2hk@gmail.com> * add fmt Signed-off-by: Bob Callaway <bcallaway@google.com> --------- Signed-off-by: Bob Callaway <bcallaway@google.com> Co-authored-by: Roger Ng <roger2hk@gmail.com>
…oogle#3910) * Bump the github-actions-deps group across 1 directory with 7 updates Bumps the github-actions-deps group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.36.2` | `4.37.7` | | [github/codeql-action/autobuild](https://github.com/github/codeql-action) | `4.36.2` | `4.37.7` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.36.2` | `4.37.7` | | [actions/setup-go](https://github.com/actions/setup-go) | `6.5.0` | `7.0.0` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.3` | `2.4.4` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.36.2` | `4.37.7` | Updates `actions/checkout` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@9c091bb...3d3c42e) Updates `github/codeql-action/init` from 4.36.2 to 4.37.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@8aad20d...ff2f1c6) Updates `github/codeql-action/autobuild` from 4.36.2 to 4.37.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@8aad20d...ff2f1c6) Updates `github/codeql-action/analyze` from 4.36.2 to 4.37.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@8aad20d...ff2f1c6) Updates `actions/setup-go` from 6.5.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@924ae3a...b7ad1da) Updates `ossf/scorecard-action` from 2.4.3 to 2.4.4 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@4eaacf0...2d11466) Updates `github/codeql-action/upload-sarif` from 4.36.2 to 4.37.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@8aad20d...ff2f1c6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-deps - dependency-name: actions/setup-go dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-deps - dependency-name: github/codeql-action/analyze dependency-version: 4.37.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-deps - dependency-name: github/codeql-action/autobuild dependency-version: 4.37.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-deps - dependency-name: github/codeql-action/init dependency-version: 4.37.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-deps - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-deps - dependency-name: ossf/scorecard-action dependency-version: 2.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-deps ... Signed-off-by: dependabot[bot] <support@github.com> * Pin postgres --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Martin Hutchinson <mhutchinson@gmail.com>
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.82.1 to 1.83.1. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.82.1...v1.83.1) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.83.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the github-actions-deps group with 4 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.37.7 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@ff2f1c6...cdf488f) Updates `github/codeql-action/autobuild` from 4.37.7 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@ff2f1c6...cdf488f) Updates `github/codeql-action/analyze` from 4.37.7 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@ff2f1c6...cdf488f) Updates `github/codeql-action/upload-sarif` from 4.37.7 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@ff2f1c6...cdf488f) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-deps - dependency-name: github/codeql-action/autobuild dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-deps - dependency-name: github/codeql-action/analyze dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-deps - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-deps ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…e#3918) * Bump the docker-deps group across 6 directories with 5 updates Bumps the docker-deps group with 1 update in the /examples/deployment/docker/db_server directory: mysql. Bumps the docker-deps group with 1 update in the /examples/deployment/docker/db_server/postgresql directory: postgres. Bumps the docker-deps group with 2 updates in the /examples/deployment/docker/log_server directory: golang and distroless/base-debian12. Bumps the docker-deps group with 2 updates in the /examples/deployment/docker/log_signer directory: golang and distroless/base-debian12. Bumps the docker-deps group with 1 update in the /examples/deployment/kubernetes/mysql/image directory: ubuntu. Bumps the docker-deps group with 1 update in the /integration/cloudbuild/testbase directory: golang. Updates `mysql` from `d36d39a` to `b3b90af` Updates `postgres` from 18.4 to 18.6 Updates `golang` from 1.26.4-bookworm to 1.27.0-bookworm Updates `distroless/base-debian12` from `e7e678c` to `fabbf1c` Updates `golang` from 1.26.4-bookworm to 1.27.0-bookworm Updates `distroless/base-debian12` from `e7e678c` to `fabbf1c` Updates `golang` from 1.26.4-bookworm to 1.27.0-bookworm Updates `golang` from 1.26.4-bookworm to 1.27.0-bookworm Updates `distroless/base-debian12` from `e7e678c` to `fabbf1c` Updates `golang` from 1.26.4-bookworm to 1.27.0-bookworm Updates `distroless/base-debian12` from `e7e678c` to `fabbf1c` Updates `golang` from 1.26.4-bookworm to 1.27.0-bookworm Updates `ubuntu` from `4f838ad` to `2edbbc5` Updates `golang` from 1.26.4-bookworm to 1.27.0-bookworm Updates `golang` from 1.26.4-bookworm to 1.27.0-bookworm Updates `golang` from 1.26.4-bookworm to 1.27.0-bookworm --- updated-dependencies: - dependency-name: distroless/base-debian12 dependency-version: 76b3162a31477bca4a245b836c624f4c4a1a3705e99b9003907d992bec2c4bca dependency-type: direct:production dependency-group: docker-deps - dependency-name: distroless/base-debian12 dependency-version: 76b3162a31477bca4a245b836c624f4c4a1a3705e99b9003907d992bec2c4bca dependency-type: direct:production dependency-group: docker-deps - dependency-name: distroless/base-debian12 dependency-version: 76b3162a31477bca4a245b836c624f4c4a1a3705e99b9003907d992bec2c4bca dependency-type: direct:production dependency-group: docker-deps - dependency-name: distroless/base-debian12 dependency-version: 76b3162a31477bca4a245b836c624f4c4a1a3705e99b9003907d992bec2c4bca dependency-type: direct:production dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.6-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.6-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.6-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.6-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.6-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.6-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.6-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.6-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: golang dependency-version: 1.26.6-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: mysql dependency-version: '8.4' dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: postgres dependency-version: '18.6' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docker-deps - dependency-name: ubuntu dependency-version: jammy dependency-type: direct:production dependency-group: docker-deps ... Signed-off-by: dependabot[bot] <support@github.com> * Bump Go toolchain version to 1.25.13 * Regenerate protobuf files --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roger Ng <rogerng@google.com>
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.83.1 to 1.83.2. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.83.1...v1.83.2) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.83.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…oogle#3927) Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) from 1.34.0 to 1.45.0. - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.34.0...v1.45.0) --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc dependency-version: 1.46.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
… to 1.26 AND regenerate protos AND bump golangci-lint in tests AND tighter master election lease filtering AND migrate to etcd/server in tests (google#3931) * Bump the go-deps group across 1 directory with 20 updates Bumps the go-deps group with 20 updates in the / directory: | Package | From | To | | --- | --- | --- | | [cloud.google.com/go/spanner](https://github.com/googleapis/google-cloud-go) | `1.91.0` | `1.95.1` | | [github.com/apache/beam/sdks/v2](https://github.com/apache/beam) | `2.72.0` | `2.76.0` | | [github.com/fullstorydev/grpcurl](https://github.com/fullstorydev/grpcurl) | `1.9.3` | `1.9.4` | | [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) | `1.10.0` | `1.10.1` | | [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.10.0` | `5.11.0` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.23.2` | `1.24.1` | | [github.com/prometheus/client_model](https://github.com/prometheus/client_model) | `0.6.2` | `0.6.3` | | [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) | `3.6.14` | `3.7.1` | | [go.etcd.io/etcd/etcdctl/v3](https://github.com/etcd-io/etcd) | `3.6.14` | `3.7.1` | | [go.etcd.io/etcd/server/v3](https://github.com/etcd-io/etcd) | `3.6.14` | `3.7.1` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.22.0` | `0.23.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.47.0` | `0.48.0` | | [golang.org/x/tools](https://github.com/golang/tools) | `0.48.0` | `0.50.0` | | [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.279.0` | `0.291.0` | | [google.golang.org/genproto](https://github.com/googleapis/go-genproto) | `0.0.0-20260319201613-d00831a3d3e7` | `0.0.0-20260523011958-0a33c5d7ca68` | | [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20260803160001-6ac0973c030d` | `0.0.0-20260825221802-da73d73af1c5` | | google.golang.org/protobuf | `1.36.11` | `1.36.12` | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.35.5` | `0.37.0` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.35.5` | `0.37.0` | | [k8s.io/utils](https://github.com/kubernetes/utils) | `0.0.0-20260210185600-b8788abfbbc2` | `0.0.0-20260626114624-be93311217bd` | Updates `cloud.google.com/go/spanner` from 1.91.0 to 1.95.1 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@spanner/v1.91.0...spanner/v1.95.1) Updates `github.com/apache/beam/sdks/v2` from 2.72.0 to 2.76.0 - [Release notes](https://github.com/apache/beam/releases) - [Changelog](https://github.com/apache/beam/blob/master/CHANGES.md) - [Commits](apache/beam@v2.72.0...v2.76.0) Updates `github.com/fullstorydev/grpcurl` from 1.9.3 to 1.9.4 - [Release notes](https://github.com/fullstorydev/grpcurl/releases) - [Commits](fullstorydev/grpcurl@v1.9.3...v1.9.4) Updates `github.com/go-sql-driver/mysql` from 1.10.0 to 1.10.1 - [Release notes](https://github.com/go-sql-driver/mysql/releases) - [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md) - [Commits](go-sql-driver/mysql@v1.10.0...v1.10.1) Updates `github.com/jackc/pgx/v5` from 5.10.0 to 5.11.0 - [Release notes](https://github.com/jackc/pgx/releases) - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.10.0...v5.11.0) Updates `github.com/prometheus/client_golang` from 1.23.2 to 1.24.1 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.23.2...v1.24.1) Updates `github.com/prometheus/client_model` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/prometheus/client_model/releases) - [Commits](prometheus/client_model@v0.6.2...v0.6.3) Updates `go.etcd.io/etcd/client/v3` from 3.6.14 to 3.7.1 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.14...v3.7.1) Updates `go.etcd.io/etcd/etcdctl/v3` from 3.6.14 to 3.7.1 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.14...v3.7.1) Updates `go.etcd.io/etcd/server/v3` from 3.6.14 to 3.7.1 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.14...v3.7.1) Updates `golang.org/x/sync` from 0.22.0 to 0.23.0 - [Commits](golang/sync@v0.22.0...v0.23.0) Updates `golang.org/x/sys` from 0.47.0 to 0.48.0 - [Commits](golang/sys@v0.47.0...v0.48.0) Updates `golang.org/x/tools` from 0.48.0 to 0.50.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.48.0...v0.50.0) Updates `google.golang.org/api` from 0.279.0 to 0.291.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.279.0...v0.291.0) Updates `google.golang.org/genproto` from 0.0.0-20260319201613-d00831a3d3e7 to 0.0.0-20260523011958-0a33c5d7ca68 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260803160001-6ac0973c030d to 0.0.0-20260825221802-da73d73af1c5 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12 Updates `k8s.io/apimachinery` from 0.35.5 to 0.37.0 - [Commits](kubernetes/apimachinery@v0.35.5...v0.37.0) Updates `k8s.io/client-go` from 0.35.5 to 0.37.0 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.35.5...v0.37.0) Updates `k8s.io/utils` from 0.0.0-20260210185600-b8788abfbbc2 to 0.0.0-20260626114624-be93311217bd - [Commits](https://github.com/kubernetes/utils/commits) --- updated-dependencies: - dependency-name: cloud.google.com/go/spanner dependency-version: 1.95.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/apache/beam/sdks/v2 dependency-version: 2.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fullstorydev/grpcurl dependency-version: 1.9.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/go-sql-driver/mysql dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/prometheus/client_golang dependency-version: 1.24.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/prometheus/client_model dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: go.etcd.io/etcd/client/v3 dependency-version: 3.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: go.etcd.io/etcd/etcdctl/v3 dependency-version: 3.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: go.etcd.io/etcd/server/v3 dependency-version: 3.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/sync dependency-version: 0.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/sys dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/tools dependency-version: 0.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: google.golang.org/api dependency-version: 0.291.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: google.golang.org/genproto dependency-version: 0.0.0-20260523011958-0a33c5d7ca68 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20260825221802-da73d73af1c5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/protobuf dependency-version: 1.36.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: k8s.io/apimachinery dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: k8s.io/client-go dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: k8s.io/utils dependency-version: 0.0.0-20260626114624-be93311217bd dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps ... Signed-off-by: dependabot[bot] <support@github.com> * re-introduce toolchain directive * regenerate protos * use golangci-lint v2.10.1 in test_pgdb and test_crdb * README and CHANGELOG * k8s: filter lease watch events by lease name in election watcher Validate that incoming lease watch events match the target election lease name (`e.lock.LeaseMeta.Name`) before updating observed mastership records. ### Background: client-go v0.35.5 -> v0.37.0 Transition In client-go <= v0.35.5, the fake client's `tracker.Watch` implementation (testing/fixture.go) was a stub that never replayed pre-existing objects: https://github.com/kubernetes/client-go/blob/v0.35.5/testing/fixture.go#L356-L372 In client-go v0.37.0, resource version tracking was introduced to simulate informer list-and-watch replay: https://github.com/kubernetes/client-go/blob/v0.37.0/testing/fixture.go#L403-L456 When `ListOptions` are provided with an empty `ResourceVersion` (as used by `election.go`'s `FieldSelector` watch), the v0.37.0 fake client enables `addExisting = true` with `addFromRV = 0`, replaying all existing namespace objects. However, the fake client only filters by namespace and completely ignores `FieldSelector`. Because subtests in `TestElection/RunElectionClose` share the same clientset and namespace, leases from earlier subtests ("master", "master-error") were replayed to the "not-master" watcher. Without checking `lease.Name`, "not-master" adopted the previous lease holder ("testID"), mistakenly assumed it was leader, and failed during `Close()` when attempting to resign an uninitialized lease. ### Why This Change is Safe & Has Zero Impact on Production 1. Zero Production Impact: In production, Trillian watches real kube-apiserver using `FieldSelector: metadata.name=<name>`. The Kubernetes API contract guarantees server-side filtering, so kube-apiserver never sends foreign leases down the watch. In production, `lease.Name == e.lock.LeaseMeta.Name` is always true for all received events. 2. Defensive Safety: If a malformed stream, proxy, or unexpected `watch.Deleted` event for another lease ever reaches the client, this check prevents Trillian from mistakenly zeroing its leadership record. 3. Behavior Preserved: Matching events execute the exact same record update logic as before. Verified: - go test -v -count=1 ./util/election2/k8s (PASS) - go test -race -count=5 ./util/election2/k8s (PASS) - go test ./util/election2/... (PASS) * integration: fix etcd build in CI and align etcd server dependencies Update tools.go to track go.etcd.io/etcd/server/v3 instead of the root go.etcd.io/etcd/v3 module, prune orphaned v3.6.14 test dependencies, and build the etcd binary directly in run_integration.sh. ### History & Context 1. In etcd v3.5 (PR etcd-io/etcd#12417), the server entrypoint moved to `go.etcd.io/etcd/server/v3`. The root module `go.etcd.io/etcd/v3` was reduced to an internal stub (`dummy.go`, package main_test) importing internal test harnesses (`etcdutl/v3` and `tests/v3`). 2. When Trillian adopted etcd v3 (PR google#2376), `tools/tools.go` tracked `go.etcd.io/etcd/v3` rather than `server/v3`. `go install go.etcd.io/etcd/v3` in CI produced no binary (due to package main_test), causing `functions.sh` to silently fall back to `--force_master`. 3. In this PR's dependency bump, Dependabot upgraded `server/v3`, `client/v3`, and `api/v3` to v3.7.1 and `raft/v3` to v3.7.0, but left `etcd/v3` at v3.6.14. This dragged in `etcdutl/v3@v3.6.14`, which failed to compile against the breaking API changes in `raft/v3@v3.7.0` (NodeId, Commit *uint64) and `api/v3@v3.7.1` (protobuf migration removing Unmarshal). ### Fix - `tools/tools.go`: track `go.etcd.io/etcd/server/v3` instead of `etcd/v3`. - `go.mod`: `go mod tidy` drops `etcd/v3 v3.6.14` and its incompatible test deps, cleanly aligning all etcd dependencies at v3.7.1. - `integration/cloudbuild/run_integration.sh`: compile the server binary via `go build -o "${ETCD_DIR}/etcd" go.etcd.io/etcd/server/v3` (avoiding Go's default name `server`), restoring real etcd integration testing in CI. * CHANGELOG.md --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Philippe Boneff <phb@google.com>
….8.0 # Conflicts: # .github/workflows/test_crdb.yaml # .github/workflows/test_pgdb.yaml # examples/deployment/docker/db_server/Dockerfile # examples/deployment/docker/db_server/postgresql/Dockerfile # examples/deployment/docker/envsubst/Dockerfile # examples/deployment/docker/log_server/Dockerfile # examples/deployment/docker/log_signer/Dockerfile # examples/deployment/kubernetes/mysql/image/Dockerfile # go.mod # go.sum # integration/cloudbuild/testbase/Dockerfile
securesign-upstream-sync
Bot
force-pushed
the
sync-upstream/main/v1.8.0
branch
from
November 9, 2026 08:25
bf5eec4 to
8056275
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Upstream Sync:
v1.8.0intomainMerges upstream google/trillian@v1.8.0 into
main.Upstream Changes (31 commits)
Generated by Sync Upstream action