Skip to content

chore: bump the all-dependencies group across 1 directory with 20 updates - #3567

Merged
openshift-merge-bot[bot] merged 1 commit into
masterfrom
dependabot/go_modules/all-dependencies-32f08d9f14
Nov 4, 2026
Merged

openshift-merge-bot[bot] merged 1 commit into
masterfrom
dependabot/go_modules/all-dependencies-32f08d9f14

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 20 updates in the / directory:

Package From To
github.com/aws/aws-sdk-go-v2 1.47.4 1.47.5
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs 1.90.2 1.90.3
github.com/aws/aws-sdk-go-v2/service/s3 1.114.5 1.114.6
golang.org/x/net 0.61.0 0.62.0
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream 1.7.24 1.7.25
github.com/aws/aws-sdk-go-v2/internal/configsources 1.5.7 1.5.8
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 2.8.7 2.8.8
github.com/aws/aws-sdk-go-v2/internal/v4a 1.5.7 1.5.8
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding 1.13.22 1.13.23
github.com/aws/aws-sdk-go-v2/service/internal/checksum 1.11.8 1.11.9
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url 1.14.7 1.14.8
github.com/aws/aws-sdk-go-v2/service/internal/s3shared 1.20.7 1.20.8
github.com/aws/smithy-go 1.28.6 1.28.7
github.com/fxamacker/cbor/v2 2.9.6 2.10.0
github.com/grpc-ecosystem/grpc-gateway/v2 2.32.0 2.33.0
github.com/prometheus/common 0.72.1 0.73.1
go.yaml.in/yaml/v3 3.0.5 3.0.6
google.golang.org/genproto/googleapis/api 0.0.0-20261012220534-4341edf3f941 0.0.0-20261026165753-2ffab32bce7e
google.golang.org/genproto/googleapis/rpc 0.0.0-20261005182115-fad411399dd8 0.0.0-20261019180522-ce908d29299b
google.golang.org/grpc 1.84.0 1.85.0

Updates github.com/aws/aws-sdk-go-v2 from 1.47.4 to 1.47.5

Commits

Updates github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.90.2 to 1.90.3

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.114.5 to 1.114.6

Commits

Updates golang.org/x/net from 0.61.0 to 0.62.0

Commits
  • 3de643d html: check all ancestor namespace transitions when rendering raw text
  • 05c76ee ipv4, ipv6: avoid slice bounds panics on empty batch or BPF filter
  • dad306f ipv6: avoid out-of-bounds panic in ICMPFilter
  • 9c0565a ipv4: fix TTL control message parsing on big-endian Linux and Solaris
  • 9425eb3 internal/socket, ipv4, ipv6: avoid panic on empty control message on non-Unix
  • 4b10404 ipv4, ipv6: avoid nil parse function call in ControlMessage.Parse
  • afcf8cd ipv4: fix several missing bounds checks
  • 4af4fce html: avoid quadratic complexity when coalescing text nodes
  • 7e56200 quic: per-path connection ids
  • See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.7.24 to 1.7.25

Commits

Updates github.com/aws/aws-sdk-go-v2/internal/configsources from 1.5.7 to 1.5.8

Commits

Updates github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 from 2.8.7 to 2.8.8

Commits

Updates github.com/aws/aws-sdk-go-v2/internal/v4a from 1.5.7 to 1.5.8

Commits

Updates github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding from 1.13.22 to 1.13.23

Commits

Updates github.com/aws/aws-sdk-go-v2/service/internal/checksum from 1.11.8 to 1.11.9

Commits

Updates github.com/aws/aws-sdk-go-v2/service/internal/presigned-url from 1.14.7 to 1.14.8

Commits

Updates github.com/aws/aws-sdk-go-v2/service/internal/s3shared from 1.20.7 to 1.20.8

Commits

Updates github.com/aws/smithy-go from 1.28.6 to 1.28.7

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-10-27)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.7
    • Bug Fix: Fix a panic or EOF error when deserializing a JSON union that contains a member not modeled by the client and whose value is not null.
    • Bug Fix: Log the underlying error when dumping an HTTP request or response for logging fails

Release (2026-10-21)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.6
    • Bug Fix: Enforce event stream header key value length limit instead of truncating
    • Bug Fix: Retain the value in a list with the zero value when encountering a null entry on a dense list. This matches how legacy code-generated JSON deserializers behaved.

Release (2026-10-09)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.5
    • Bug Fix: Retain the key with the zero value when encountering a null-value key in a dense map. This matches how legacy code-generated JSON deserializers behaved.

Release (2026-10-07)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.4
    • Bug Fix: Revert #698 that fixed JoinPath with trailing slash. This has a side effect on certain S3 API paths in the downstream SDK that need more consideration.

Release (2026-10-06)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.3
    • Bug Fix: Accept either casing of message/Message on modeled JSON error structures in schema-based deserialization, and emit the smithy.api#error trait in generated schemas
    • Bug Fix: Include the underlying error when logging failures to discard or close an HTTP response body

Release (2026-09-18)

... (truncated)

Commits
  • 37210e1 Release 2026-10-27
  • d5b7eb0 fix(http): log the error when dumping a request or response for logging fails...
  • 02853b0 fix panic for unknown union member collection in json (#735)
  • See full diff in compare view

Updates github.com/fxamacker/cbor/v2 from 2.9.6 to 2.10.0

Release notes

Sourced from github.com/fxamacker/cbor/v2's releases.

v2.10.0

v2.10 speeds up encoding by up to 2.88× and decoding by up to 1.87× with zero memory regressions (B/op, allocs/op), reduces memory use, adds the toindefarray struct tag option, and fixes bugs. The Contributing Guidelines, Security Policy, and templates were extensively updated.

Encoding sorted nested maps of dynamic JSON-like data to CBOR drops from 70 allocs/op to 1 and from 7.2 KiB/op to 4.0 KiB/op in the benchmarks below. Encoding time.Time, big.Int, Tag and Marshaler values, and decoding into time.Time, big.Int and Tag, use 1 to 2 fewer allocs/op (20% to 50% fewer).

This release does not use Go's unsafe package. Performance in user apps depends on configuration and data.

Tests were refactored and coverage increased to 97.7%. Fuzz tests (not yet public) were also extended. Internal checklists and procedures were updated to reduce potential mistakes.

Performance and Benchmarks

Across all 215 benchmarks, there are zero memory regressions (B/op, allocs/op). Just one benchmark showed a speed dip: Marshal/struct_many_flds_all_omitempty_all_empty/map is ~4-5% slower, but only when a struct has 32 fields that are both omitzero and empty (same scenario with an 8-field struct is now faster).

Benchmarks ran with Go 1.26.10 on linux/amd64 (benchstat n=10, p=0.000):

  • CBOR Speedup by Data Type: groups of different benchmarks summarized per row
  • CBOR Encoding Reflection-Free Speedup: dynamic JSON-like data types and common types

CBOR Speedup by Data Type

Unmarshal Speedup ΔSec/op
Single values (bool, int, float, byte string, text string) 1.10× to 1.51×¹ -8.87% to -33.92%¹
Epoch time, bignum, other tags 1.18× to 1.64× -15.33% to -38.91%
Arrays and maps to non-struct 1.33× to 1.87× -24.63% to -46.49%
Arrays and maps to structs 1.06× to 1.52× -5.46% to -34.40%
Real-world (COSE, CWT, SenML, WebAuthn) 1.35× to 1.64× -26.06% to -39.19%

¹ 2.54× speedup (-60.64%) when decoding into a named []byte type that has methods.

Marshal Speedup ΔSec/op
Single values (bool, int, float, byte slice, string) 1.32× to 1.55× -24.49% to -35.41%
time.Time, big.Int, Tag, Marshaler² 1.15× to 1.63× -12.94% to -38.84%
Slices and maps 1.35× to 2.88× -25.97% to -65.26%
Structs 1.57× to 2.17× -36.37% to -53.96%
Structs with omitempty fields 0.95׳ to 1.35× +5.01%³ to -25.96%
Real-world (COSE, CWT, SenML, WebAuthn) 1.12× to 1.33× -10.66% to -24.77%

² For addressable values (reached through a pointer, struct field, slice element or map value).

³ Only when every field is omitempty and empty: 7.6 ns slower for a 32-field struct, 2.37 ns faster for an 8-field struct. This is the only performance regression in all 215 benchmarks.

CBOR Encoding Reflection-Free Speedup

PR #870 optimized common types: int, int64, uint, uint64, float64, bool, string, nil, []byte, []any, map[any]any, map[string]any, and map[string]string.

Marshal Benchmarkv2.9.6 → v2.10 Speedup TimeΔSec/op MemoryΔB/op MemoryΔAllocs/op
[]any 2.50× -607.5 ns (-60.03%) - -

... (truncated)

Commits
  • cc2e8fb Merge pull request #890 from fxamacker/fxamacker/update-docs-for-v2.10.0
  • c3279a6 Update doc.go and README.md for v2.10.0
  • 9106688 Merge pull request #891 from fxamacker/fxamacker/add-benchmarks
  • 864491f Add more benchmarks
  • 49a20b9 Merge pull request #889 from fxamacker/fxamacker/reduce-float64-unix-time-range
  • f5fbdcd Fix float range check when decoding Unix time
  • 67a9707 Merge pull request #886 from fxamacker/fxamacker/reduce-allocs
  • 6567310 Merge pull request #888 from fxamacker/fxamacker/cleanup-tests
  • 84ba3bf Fix several test bugs
  • 261eb13 Standardize test failure messages
  • Additional commits viewable in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.32.0 to 2.33.0

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.33.0

Notice to all users

This release contains a security fix that changes the behavior of header parsing in the gateway. As part of fixing #7281, the decision was made to stop automatically adding client headers with the Grpc-Metadata- prefix into the grpc metadata by default. This behavior can be restored using the new mux option WithLegacyHeaderMatching. See https://grpc-ecosystem.github.io/grpc-gateway/docs/operations/security_considerations/#request-headers-become-grpc-metadata-under-a-prefix for more information.

Changes

New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.32.0...v2.33.0

Commits
  • de0b890 drop Grpc-Metadata forwarding from DefaultHeaderMatcher (#7590)
  • b4a1288 fix(openapiv2): apply file-level responses to HEAD and OPTIONS operations (#7...
  • 4b9b9fc Update googleapis digest to 933dd1b (#7591)
  • 82aa33e Update googleapis digest to 6efda15 (#7589)
  • 29bff47 fix(descriptor): skip additional_bindings without an HTTP pattern (#7588)
  • 3ea00e5 Update googleapis digest to 4148102 (#7587)
  • 8387556 fix(runtime): parse an empty FieldMask query parameter as an empty mask (#7586)
  • f789d86 fix(openapiv2): don't put the schema type in format for json_schema types (#7...
  • 1315094 Update googleapis digest to 7721fc7 (#7584)
  • 8b3c0de ignore query keys naming the parent of a path-bound field (#7582)
  • Additional commits viewable in compare view

Updates github.com/prometheus/common from 0.72.1 to 0.73.1

Release notes

Sourced from github.com/prometheus/common's releases.

v0.73.1

What's Changed

Full Changelog: prometheus/common@v0.73.0...v0.73.1

v0.73.0

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.72.1...v0.73.0

Changelog

Sourced from github.com/prometheus/common's changelog.

Changelog

main / unreleased

What's Changed

Commits
  • d92d839 build(deps): bump github.com/pandatix/go-abnf from 0.5.1 to 0.5.3 (#1027)
  • 983d509 expfmt: add ABNF-based OpenMetrics 1.0 parser (#1015)
  • 220c51a expfmt: add FmtOpenMetrics_2_0_0_rc format constant (#1020)
  • 25bdf5c expfmt: default to allow-utf-8 escaping for OpenMetrics 2.0 (#1008)
  • See full diff in compare view

Updates go.yaml.in/yaml/v3 from 3.0.5 to 3.0.6

Commits
  • 5a62aba resolve: hint-class literal merge-key string "<<" so it's quoted on encode
  • See full diff in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20261012220534-4341edf3f941 to 0.0.0-20261026165753-2ffab32bce7e

Commits

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20261005182115-fad411399dd8 to 0.0.0-20261019180522-ce908d29299b

Commits

Updates google.golang.org/grpc from 1.84.0 to 1.85.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.85.0

New Features

  • stats: Expose the effective client authority (sent on the wire as the HTTP/2 :authority header) in client stats.OutHeader events. (#9296)
  • metadata: Add ValueFromOutgoingContext, which reads a single metadata value from outgoing context without copying the entire outgoing metadata into a new map. (#9282)

Bug Fixes

  • transport: Refine control buffer throttling to only count peer-induced control frames, raise the default GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT from 100 to 10,000, and close client connections if reads remain throttled for 10s. (#9563)
  • server: Ensure Stop() forcefully terminates the server while GracefulStop() is waiting for active handlers to complete. (#9394)
  • server: Unconditionally increment the highest-seen stream ID on when handling HEADERS frames to comply with RFC 7540 §5.1.1. Previously, truncated HEADERS frames left the connection in an inconsistent state and allowed stream IDs to be reused by clients without resulting in a protocol error. (#9414)
  • server: Terminate streams immediately when a HEADERS frame includes the EndStream bit. Previously, this caused server handlers to hang when reading a message. (#9391)
  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (#9365)
  • xds: Fix a bug where route header matchers with non-lowercase names failed to match routes. (#9353)
  • client: Ensure retried RPCs use the correct :authority value specified by the LB policy instead of inheriting it from a previous attempt. (#9277)
  • transport: Fail streams with io.ErrUnexpectedEOF instead of io.EOF upon receiving truncated message headers or bodies after partial data has already been received. (#9204)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

  • Chores
    • This update contains behind-the-scenes maintenance only. No new features or changes to the app’s public-facing interfaces are included.
    • No user-visible behavior changes are described in this update.

…ates

Bumps the all-dependencies group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.47.4` | `1.47.5` |
| [github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs](https://github.com/aws/aws-sdk-go-v2) | `1.90.2` | `1.90.3` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.114.5` | `1.114.6` |
| [golang.org/x/net](https://github.com/golang/net) | `0.61.0` | `0.62.0` |
| [github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream](https://github.com/aws/aws-sdk-go-v2) | `1.7.24` | `1.7.25` |
| [github.com/aws/aws-sdk-go-v2/internal/configsources](https://github.com/aws/aws-sdk-go-v2) | `1.5.7` | `1.5.8` |
| [github.com/aws/aws-sdk-go-v2/internal/endpoints/v2](https://github.com/aws/aws-sdk-go-v2) | `2.8.7` | `2.8.8` |
| [github.com/aws/aws-sdk-go-v2/internal/v4a](https://github.com/aws/aws-sdk-go-v2) | `1.5.7` | `1.5.8` |
| [github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding](https://github.com/aws/aws-sdk-go-v2) | `1.13.22` | `1.13.23` |
| [github.com/aws/aws-sdk-go-v2/service/internal/checksum](https://github.com/aws/aws-sdk-go-v2) | `1.11.8` | `1.11.9` |
| [github.com/aws/aws-sdk-go-v2/service/internal/presigned-url](https://github.com/aws/aws-sdk-go-v2) | `1.14.7` | `1.14.8` |
| [github.com/aws/aws-sdk-go-v2/service/internal/s3shared](https://github.com/aws/aws-sdk-go-v2) | `1.20.7` | `1.20.8` |
| [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.28.6` | `1.28.7` |
| [github.com/fxamacker/cbor/v2](https://github.com/fxamacker/cbor) | `2.9.6` | `2.10.0` |
| [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.32.0` | `2.33.0` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.72.1` | `0.73.1` |
| [go.yaml.in/yaml/v3](https://github.com/yaml/go-yaml) | `3.0.5` | `3.0.6` |
| [google.golang.org/genproto/googleapis/api](https://github.com/googleapis/go-genproto) | `0.0.0-20261012220534-4341edf3f941` | `0.0.0-20261026165753-2ffab32bce7e` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20261005182115-fad411399dd8` | `0.0.0-20261019180522-ce908d29299b` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.84.0` | `1.85.0` |



Updates `github.com/aws/aws-sdk-go-v2` from 1.47.4 to 1.47.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.47.4...v1.47.5)

Updates `github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs` from 1.90.2 to 1.90.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.90.2...service/ecs/v1.90.3)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.114.5 to 1.114.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.114.5...service/s3/v1.114.6)

Updates `golang.org/x/net` from 0.61.0 to 0.62.0
- [Commits](golang/net@v0.61.0...v0.62.0)

Updates `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream` from 1.7.24 to 1.7.25
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@aws/protocol/eventstream/v1.7.24...aws/protocol/eventstream/v1.7.25)

Updates `github.com/aws/aws-sdk-go-v2/internal/configsources` from 1.5.7 to 1.5.8
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/mpa/v1.5.7...service/evs/v1.5.8)

Updates `github.com/aws/aws-sdk-go-v2/internal/endpoints/v2` from 2.8.7 to 2.8.8
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@internal/endpoints/v2.8.7...internal/endpoints/v2.8.8)

Updates `github.com/aws/aws-sdk-go-v2/internal/v4a` from 1.5.7 to 1.5.8
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/mpa/v1.5.7...service/evs/v1.5.8)

Updates `github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding` from 1.13.22 to 1.13.23
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.13.22...credentials/v1.13.23)

Updates `github.com/aws/aws-sdk-go-v2/service/internal/checksum` from 1.11.8 to 1.11.9
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/waf/v1.11.8...service/dlm/v1.11.9)

Updates `github.com/aws/aws-sdk-go-v2/service/internal/presigned-url` from 1.14.7 to 1.14.8
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/mq/v1.14.7...service/pi/v1.14.8)

Updates `github.com/aws/aws-sdk-go-v2/service/internal/s3shared` from 1.20.7 to 1.20.8
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/mq/v1.20.7...credentials/v1.20.8)

Updates `github.com/aws/smithy-go` from 1.28.6 to 1.28.7
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.28.6...v1.28.7)

Updates `github.com/fxamacker/cbor/v2` from 2.9.6 to 2.10.0
- [Release notes](https://github.com/fxamacker/cbor/releases)
- [Commits](fxamacker/cbor@v2.9.6...v2.10.0)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.32.0 to 2.33.0
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Commits](grpc-ecosystem/grpc-gateway@v2.32.0...v2.33.0)

Updates `github.com/prometheus/common` from 0.72.1 to 0.73.1
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.72.1...v0.73.1)

Updates `go.yaml.in/yaml/v3` from 3.0.5 to 3.0.6
- [Commits](yaml/go-yaml@v3.0.5...v3.0.6)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20261012220534-4341edf3f941 to 0.0.0-20261026165753-2ffab32bce7e
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20261005182115-fad411399dd8 to 0.0.0-20261019180522-ce908d29299b
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.84.0 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.84.0...v1.85.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.47.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs
  dependency-version: 1.90.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.114.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
  dependency-version: 1.7.25
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/internal/configsources
  dependency-version: 1.5.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/internal/endpoints/v2
  dependency-version: 2.8.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/internal/v4a
  dependency-version: 1.5.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding
  dependency-version: 1.13.23
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/checksum
  dependency-version: 1.11.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/presigned-url
  dependency-version: 1.14.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/s3shared
  dependency-version: 1.20.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.28.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/fxamacker/cbor/v2
  dependency-version: 2.10.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.33.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/prometheus/common
  dependency-version: 0.73.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: go.yaml.in/yaml/v3
  dependency-version: 3.0.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20261026165753-2ffab32bce7e
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20261019180522-ce908d29299b
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.85.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added approved Indicates a PR has been approved by an approver from all required OWNERS files. kind/dependency-change Categorizes issue or PR as related to changing dependencies verified Signifies that the PR passed pre-merge verification criteria labels Nov 2, 2026
@coderabbitai

coderabbitai Bot commented Nov 2, 2026 •

Copy link
Copy Markdown
Contributor

No actionable comments were generated in the recent review.

Recent review info
Run configuration
Commits

Reviewing files that changed from the base of the PR and between cdf7005 and b56ff92.

Files ignored due to path filters: 1
  • go.sum is excluded by !**/*.sum
Files selected for processing: 1
  • go.mod

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 10 remain after this review.

Walkthrough

The change updates direct and indirect dependency versions in go.mod and adds github.com/pandatix/go-abnf as an indirect dependency.

Changes: Go module updates

Layer / File(s) Summary
Update dependency versions
go.mod
Updates AWS SDK, networking, CBOR, gRPC gateway, Prometheus, YAML, genproto, and gRPC dependencies. Adds github.com/pandatix/go-abnf as an indirect dependency.

Estimated code review effort: 2 (Simple) | ~8 minutes

Change: Other

Suggested reviewers: vparfonov, jcantrill

Merge Risk: Minimal · up to b56ff

No merge-blocking impact was identified in the dependency updates.

Pre-merge checks: Passed 4 · Failed 1

Failed Failed checks: 1 warning

Check name Status Explanation Resolution
Description check Warning The description gives a detailed package list and version changes, but it omits the mandatory reviewer and approver assignments and does not provide a clear structured description and links section. Add /cc with at least one reviewer and /assign with at least one approver from the top-level OWNERS file. Add the required Description and Links sections, including the change rationale, relevant issue or dependency links, and test results …
Passed Passed checks: 4 passed
Check name Status Explanation
Title check Passed The title clearly identifies a grouped dependency update covering 20 changes. It is concise and directly related to the pull request.
Docstring Coverage Passed No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: Description check

Resolution

Add /cc with at least one reviewer and /assign with at least one approver from the top-level OWNERS file. Add the required Description and Links sections, including the change rationale, relevant issue or dependency links, and test results if available.

Finishing Touches
Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR

@openshift-ci
openshift-ci Bot requested review from cahartma and jcantrill November 2, 2026 14:36
@openshift-ci openshift-ci Bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Nov 2, 2026
@openshift-ci

openshift-ci Bot commented Nov 2, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: dependabot[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci

openshift-ci Bot commented Nov 2, 2026

Copy link
Copy Markdown
Contributor

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@jcantrill

Copy link
Copy Markdown
Contributor

/ok-to-test

@openshift-ci openshift-ci Bot added ok-to-test Indicates a non-member PR verified by an org member that is safe to test. and removed needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels Nov 2, 2026
@jcantrill

Copy link
Copy Markdown
Contributor

/lgtm

@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Nov 2, 2026
@openshift-merge-bot

Copy link
Copy Markdown
Contributor

/retest-required

Remaining retests: 0 against base HEAD cdf7005 and 2 for PR HEAD b56ff92 in total

@jcantrill

Copy link
Copy Markdown
Contributor

/retest-required

2 similar comments
@jcantrill

Copy link
Copy Markdown
Contributor

/retest-required

@jcantrill

Copy link
Copy Markdown
Contributor

/retest-required

@openshift-ci

openshift-ci Bot commented Nov 4, 2026 •

Copy link
Copy Markdown
Contributor

@dependabot[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-pre-merge b56ff92 link false /test e2e-pre-merge

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@jcantrill

Copy link
Copy Markdown
Contributor

/override ci/prow/e2e-ocp-5-0

@openshift-ci

openshift-ci Bot commented Nov 4, 2026

Copy link
Copy Markdown
Contributor

@jcantrill: Overrode contexts on behalf of jcantrill: ci/prow/e2e-ocp-5-0

Details

In response to this:

/override ci/prow/e2e-ocp-5-0

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-merge-bot
openshift-merge-bot Bot merged commit c154180 into master Nov 4, 2026
9 of 10 checks passed
@jcantrill
jcantrill deleted the dependabot/go_modules/all-dependencies-32f08d9f14 branch November 4, 2026 19:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. kind/dependency-change Categorizes issue or PR as related to changing dependencies lgtm Indicates that a PR is ready to be merged. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. verified Signifies that the PR passed pre-merge verification criteria

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant