Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 3, 2025

Bumps the minor-updates group with 15 updates:

Package From To
github.com/go-playground/validator/v10 10.27.0 10.28.0
golang.org/x/text 0.28.0 0.29.0
github.com/aws/smithy-go 1.23.0 1.23.1
github.com/gabriel-vasile/mimetype 1.4.10 1.4.11
github.com/klauspost/compress 1.18.0 1.18.1
github.com/mattn/go-runewidth 0.0.16 0.0.19
github.com/prometheus/common 0.66.1 0.67.2
github.com/prometheus/procfs 0.17.0 0.19.2
github.com/sagikazarmark/locafero 0.10.0 0.12.0
github.com/tinylib/msgp 1.4.0 1.5.0
go.opentelemetry.io/auto/sdk 1.1.0 1.2.1
go.yaml.in/yaml/v2 2.4.2 2.4.3
golang.org/x/crypto 0.41.0 0.42.0
golang.org/x/sys 0.36.0 0.37.0
google.golang.org/protobuf 1.36.8 1.36.10

Updates github.com/go-playground/validator/v10 from 10.27.0 to 10.28.0

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

Release 10.28.0

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.27.0...v10.28.0

Commits
  • bdc3a7d Add alphaspace validator (#1343)
  • 63594a0 docs: add description for 'port' validator (#1435)
  • 45f3a8e Added https_url tag (#1461)
  • 7a23bca Remove Go version 1.23 from CI workflow
  • 13130d2 Fixed missing keys from returned errors in map validation (#1284)
  • 94e89f0 fix: should panic when define duplicate field param in required_if (#1468)
  • 6905468 Bump golang.org/x/crypto from 0.33.0 to 0.42.0 (#1467)
  • 77ef70e Bump actions/setup-go from 5 to 6 (#1465)
  • 78d05ae Bump golang.org/x/text from 0.22.0 to 0.29.0 (#1464)
  • 34aea1f Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.10 (#1463)
  • Additional commits viewable in compare view

Updates golang.org/x/text from 0.28.0 to 0.29.0

Commits
  • e69f31b go.mod: update golang.org/x dependencies
  • 60c9786 all: upgrade go directive to at least 1.24.0 [generated]
  • See full diff in compare view

Updates github.com/aws/smithy-go from 1.23.0 to 1.23.1

Commits

Updates github.com/gabriel-vasile/mimetype from 1.4.10 to 1.4.11

Release notes

Sourced from github.com/gabriel-vasile/mimetype's releases.

v1.4.11 cpio, wordperfect support

What's Changed

Full Changelog: gabriel-vasile/mimetype@v1.4.10...v1.4.11

Commits
  • 9914830 msoxml: match files and directories for first zip entry
  • 5ec1912 json: prevent one alloc by re-using the same slice (#726)
  • 7cfd614 performance: use regular funcs instead of var funcs (#670)
  • 71a0f37 aaf: remove individual node for aaf
  • d0ad103 supported_mimes: fix lint and make test short
  • fa141bd supported_mimes: add .git-blame-ignore-revs
  • 16a062b supported_mimes: add hierarchy to table
  • 49f3862 clone: stop cloning MIME when there is no charset
  • d0a95af dxf: add support; closes #719
  • 54d3513 markup: fix for duplicate branch warning from linter
  • Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.18.0 to 1.18.1

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.1

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.0...v1.18.1

Commits

Updates github.com/mattn/go-runewidth from 0.0.16 to 0.0.19

Commits
  • 7770d04 Merge pull request #78 from josharian/josh/optimize-intable
  • f53b71c Merge pull request #86 from mattn/fix-github-actions
  • a09d510 Merge branch 'master' into fix-github-actions
  • 778f900 Merge pull request #83 from clipperhouse/benchmark-allocs
  • bfbd30c fix test.yaml
  • 61f04f3 Merge pull request #82 from clipperhouse/graphemes-string-width
  • db39519 Rename
  • b3b19f2 Rename
  • 94c0db1 Merge pull request #85 from mattn/fix-windows-terminal
  • 76bca58 fix comment
  • Additional commits viewable in compare view

Updates github.com/prometheus/common from 0.66.1 to 0.67.2

Release notes

Sourced from github.com/prometheus/common's releases.

v0.67.2 / 2025-10-28

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.67.1...v0.67.2

v0.67.1

What's Changed

Full Changelog: prometheus/common@v0.67.0...v0.67.1

v0.67.0 / 2025-10-07

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.66.1...v0.67.0

Changelog

Sourced from github.com/prometheus/common's changelog.

v0.67.2 / 2025-10-28

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.67.1...v0.67.2

v0.67.1 / 2025-10-07

What's Changed

Full Changelog: prometheus/common@v0.67.0...v0.67.1

v0.67.0 / 2025-10-07

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.66.1...v0.67.0

Commits
  • 594f4d4 Merge pull request #861 from prometheus/beorn7/version
  • 440c1a3 Cut v0.67.2
  • acb1873 Merge pull request #860 from prometheus/superq/linting
  • 1e32339 Cleanup linting issues
  • 93d16be Update common Prometheus files (#859)
  • 8230d3b Merge pull request #792 from ndk/main
  • 633281f build(deps): bump golang.org/x/net from 0.44.0 to 0.46.0 (#856)
  • aca279f build(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 (#857)
  • 77db9c2 Update common Prometheus files (#854)
  • c41fe14 Merge pull request #853 from prometheus/superq/version
  • Additional commits viewable in compare view

Updates github.com/prometheus/procfs from 0.17.0 to 0.19.2

Release notes

Sourced from github.com/prometheus/procfs's releases.

v0.19.2

What's Changed

Full Changelog: prometheus/procfs@v0.19.1...v0.19.2

v0.19.1

What's Changed

Full Changelog: prometheus/procfs@v0.19.0...v0.19.1

v0.19.0

What's Changed

New Contributors

Full Changelog: prometheus/procfs@v0.18.0...v0.19.0

v0.18.0

What's Changed

New Contributors

... (truncated)

Commits

Updates github.com/sagikazarmark/locafero from 0.10.0 to 0.12.0

Commits

Updates github.com/tinylib/msgp from 1.4.0 to 1.5.0

Release notes

Sourced from github.com/tinylib/msgp's releases.

v1.5.0

What's Changed

Full Changelog: tinylib/msgp@v1.4.0...v1.5.0

Commits

Updates go.opentelemetry.io/auto/sdk from 1.1.0 to 1.2.1

Release notes

Sourced from go.opentelemetry.io/auto/sdk's releases.

sdk/v1.2.1

Overview

Fixed

  • Fix uint32 bounding on 32 bit architectures in the go.opentelemetry.io/auto/sdk module. (#2810)

Removed

  • Build support for Go 1.23 in go.opentelemetry.io/auto/sdk has been removed. Use Go >= 1.24 to develop and build the project. (#2799)

What's Changed

Full Changelog: open-telemetry/opentelemetry-go-instrumentation@v0.23.0...sdk/v1.2.1

Changelog

Sourced from go.opentelemetry.io/auto/sdk's changelog.

[go.opentelemetry.io/auto/sdk v1.2.1] - 2025-09-15

Fixed

  • Fix uint32 bounding on 32 bit architectures in the go.opentelemetry.io/auto/sdk module. (#2810)
  • Fix go.opentelemetry.io/auto/examples/rolldice build. (#2894)

[v0.23.0/v1.2.0] - 2025-09-10

[!NOTE] This is the last release version that will support building the auto-instrumentation CLI using Go 1.23. The next release will require development to be done using Go >= 1.24.

Added

  • Cache offsets for golang.org/x/net 0.42.0. (#2503)
  • Cache offsets for google.golang.org/grpc 1.74.2. (#2546)
  • Cache offsets for google.golang.org/grpc 1.76.0-dev. (#2596)
  • Allow configuration of the resource using a resource.Detector. (#2598)
    • The WithResourceDetector function is added to go.opentelemetry.io/auto/pipeline/otelsdk.
    • The WithEnv function is updated to parse the OTEL_RESOURCE_DETECTOR environment variable. Values are expected to be a comma-separated list of resource detector IDs registered with the autodetect package.
  • Cache offsets for Go 1.23.12. (#2603)
  • Cache offsets for Go 1.24.6. (#2603)
  • Cache offsets for golang.org/x/net 0.43.0. (#2615)
  • Cache offsets for Go 1.25.0. (#2651)
  • Cache offsets for google.golang.org/grpc 1.75.0. (#2686)
  • Cache offsets for github.com/segmentio/kafka-go 0.4.49. (#2699)
  • Cache offsets for go.opentelemetry.io/otel v1.38.0. (#2726)
  • Cache offsets for Go 1.24.7. (#2747)
  • Cache offsets for Go 1.25.1. (#2747)
  • Cache offsets for golang.org/x/net 0.44.0. (#2773)
  • Cache offsets for google.golang.org/grpc 1.72.3. (#2787)
  • Cache offsets for google.golang.org/grpc 1.73.1. (#2787)
  • Cache offsets for google.golang.org/grpc 1.74.3. (#2787)
  • Cache offsets for google.golang.org/grpc 1.75.1. (#2787)

Changed

  • Upgrade go.opentelemetry.io/auto semconv to v1.37.0. (#2763)
  • Upgrade go.opentelemetry.io/auto/sdk semconv to v1.37.0. (#2763)

Fixed

  • Add telemetry.distro.version resource attribute to the otelsdk handler. (#2383)

... (truncated)

Commits
  • 715f58c Release go.opentelemetry.io/auto/sdk v1.2.1 (#2811)
  • 2ffdc0d chore(deps): update module github.com/prometheus/otlptranslator to v1 (#2800)
  • edae086 chore(deps): update golang:1.25.1 docker digest to 8305f5f (#2807)
  • c0a461c Fix 32bit arch int overflow in sdk (#2810)
  • 146fa4d fix(deps): update google.golang.org/grpc/examples digest to ca78c90 (#2806)
  • a734c70 chore(deps): update module github.com/nunnatsa/ginkgolinter to v0.21.0 (#2805)
  • 3d60895 chore(deps): update module github.com/tetafro/godot to v1.5.2 (#2804)
  • 23bec2c chore(deps): update module github.com/antonboom/testifylint to v1.6.4 (#2803)
  • 3b82e63 fix(deps): update golang.org/x (#2762)
  • 65fc170 chore(deps): update module github.com/spf13/viper to v1.21.0 (#2796)
  • Additional commits viewable in compare view

Updates go.yaml.in/yaml/v2 from 2.4.2 to 2.4.3

Commits

Updates golang.org/x/crypto from 0.41.0 to 0.42.0

Commits
  • 5307a0c go.mod: update golang.org/x dependencies
  • 9d77937 acme: include order problem in OrderError
  • 8f580de ssh: remove Go 1.24 build tag for ML-KEM kex
  • a4d1237 ssh/knownhosts: improve IPv6 support in Normalize
  • b8d8dae curve25519: include potential fips140=only error in panic message
  • f5a2eab ssh: use curve25519.X25519 instead of curve25519.ScalarMult
  • 44ecf3a all: upgrade go directive to at least 1.24.0 [generated]
  • See full diff in compare view

Updates golang.org/x/sys from 0.36.0 to 0.37.0

Commits
  • 1edeebe unix: mkall.sh: fail if docker build failed
  • ecada54 unix: use slices.{Equal,Sort} in tests
  • 5e63aa5 windows: export O_FILE_FLAG_* to be used in os.OpenFile on windows
  • 033906b unix: add (*CPUSet).Fill helper to enable all CPUs
  • 6be6c58 windows: add FlushConsoleInputBuffer and GetNumberOfConsoleInputEvents
  • 32e2038 unix: use Go 1.21+ clear built-in
  • 137f2ed sys: add support for NetBSD getvfsstat
  • See full diff in compare view

Updates google.golang.org/protobuf from 1.36.8 to 1.36.10

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remo...

Description has been truncated

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 3, 2025

Assignees

The following users could not be added as assignees: security-team. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: dependencies, go, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Bumps the minor-updates group with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.27.0` | `10.28.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.28.0` | `0.29.0` |
| [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.23.0` | `1.23.1` |
| [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) | `1.4.10` | `1.4.11` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.0` | `1.18.1` |
| [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.16` | `0.0.19` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.66.1` | `0.67.2` |
| [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.17.0` | `0.19.2` |
| [github.com/sagikazarmark/locafero](https://github.com/sagikazarmark/locafero) | `0.10.0` | `0.12.0` |
| [github.com/tinylib/msgp](https://github.com/tinylib/msgp) | `1.4.0` | `1.5.0` |
| [go.opentelemetry.io/auto/sdk](https://github.com/open-telemetry/opentelemetry-go-instrumentation) | `1.1.0` | `1.2.1` |
| [go.yaml.in/yaml/v2](https://github.com/yaml/go-yaml) | `2.4.2` | `2.4.3` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.41.0` | `0.42.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.36.0` | `0.37.0` |
| google.golang.org/protobuf | `1.36.8` | `1.36.10` |


Updates `github.com/go-playground/validator/v10` from 10.27.0 to 10.28.0
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.27.0...v10.28.0)

Updates `golang.org/x/text` from 0.28.0 to 0.29.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.28.0...v0.29.0)

Updates `github.com/aws/smithy-go` from 1.23.0 to 1.23.1
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.23.0...v1.23.1)

Updates `github.com/gabriel-vasile/mimetype` from 1.4.10 to 1.4.11
- [Release notes](https://github.com/gabriel-vasile/mimetype/releases)
- [Commits](gabriel-vasile/mimetype@v1.4.10...v1.4.11)

Updates `github.com/klauspost/compress` from 1.18.0 to 1.18.1
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.18.0...v1.18.1)

Updates `github.com/mattn/go-runewidth` from 0.0.16 to 0.0.19
- [Commits](mattn/go-runewidth@v0.0.16...v0.0.19)

Updates `github.com/prometheus/common` from 0.66.1 to 0.67.2
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.66.1...v0.67.2)

Updates `github.com/prometheus/procfs` from 0.17.0 to 0.19.2
- [Release notes](https://github.com/prometheus/procfs/releases)
- [Commits](prometheus/procfs@v0.17.0...v0.19.2)

Updates `github.com/sagikazarmark/locafero` from 0.10.0 to 0.12.0
- [Commits](sagikazarmark/locafero@v0.10.0...v0.12.0)

Updates `github.com/tinylib/msgp` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/tinylib/msgp/releases)
- [Commits](tinylib/msgp@v1.4.0...v1.5.0)

Updates `go.opentelemetry.io/auto/sdk` from 1.1.0 to 1.2.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-instrumentation/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-instrumentation@sdk/v1.1.0...sdk/v1.2.1)

Updates `go.yaml.in/yaml/v2` from 2.4.2 to 2.4.3
- [Commits](yaml/go-yaml@v2.4.2...v2.4.3)

Updates `golang.org/x/crypto` from 0.41.0 to 0.42.0
- [Commits](golang/crypto@v0.41.0...v0.42.0)

Updates `golang.org/x/sys` from 0.36.0 to 0.37.0
- [Commits](golang/sys@v0.36.0...v0.37.0)

Updates `google.golang.org/protobuf` from 1.36.8 to 1.36.10

---
updated-dependencies:
- dependency-name: github.com/go-playground/validator/v10
  dependency-version: 10.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: golang.org/x/text
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.23.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-version: 1.4.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: github.com/mattn/go-runewidth
  dependency-version: 0.0.19
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: github.com/prometheus/common
  dependency-version: 0.67.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: github.com/prometheus/procfs
  dependency-version: 0.19.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: github.com/sagikazarmark/locafero
  dependency-version: 0.12.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: github.com/tinylib/msgp
  dependency-version: 1.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: go.opentelemetry.io/auto/sdk
  dependency-version: 1.2.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: go.yaml.in/yaml/v2
  dependency-version: 2.4.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: golang.org/x/crypto
  dependency-version: 0.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: golang.org/x/sys
  dependency-version: 0.37.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor-updates
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot-go_modules-minor-updates-8bca916304 branch from 388c4f5 to fb7e583 Compare November 10, 2025 00:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants