maint(deps): bump the minor-patch group with 6 updates #1497

dependabot · 2025-03-01T11:47:20Z

Bumps the minor-patch group with 6 updates:

Package	From	To
github.com/klauspost/compress	`1.17.11`	`1.18.0`
github.com/prometheus/client_golang	`1.20.5`	`1.21.0`
github.com/redis/go-redis/v9	`9.7.0`	`9.7.1`
golang.org/x/sync	`0.10.0`	`0.11.0`
google.golang.org/protobuf	`1.36.4`	`1.36.5`
golang.org/x/tools	`0.29.0`	`0.30.0`

Updates github.com/klauspost/compress from 1.17.11 to 1.18.0

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.0

What's Changed

Deprecate Go 1.21 and add 1.24 by @klauspost in klauspost/compress#1055

Add unsafe little endian loaders by @klauspost in klauspost/compress#1036

fix: check r.err != nil but return a nil value error err by @alingse in klauspost/compress#1028

refactor: use built-in min function by @Juneezee in klauspost/compress#1038

zstd: use slices.Max for max value in slice by @Juneezee in klauspost/compress#1041

flate: Simplify L4-6 loading by @klauspost in klauspost/compress#1043

flate: Simplify matchlen (remove asm) by @klauspost in klauspost/compress#1045

s2: Add block decode fuzzer by @klauspost in klauspost/compress#1044

s2: Improve small block compression speed w/o asm by @klauspost in klauspost/compress#1048

flate: Fix matchlen L5+L6 by @klauspost in klauspost/compress#1049

flate: Cleanup & reduce casts by @klauspost in klauspost/compress#1050

New Contributors

@tcpdumppy made their first contribution in klauspost/compress#1021

@sam9291 made their first contribution in klauspost/compress#1022

@dezza made their first contribution in klauspost/compress#1023

@alingse made their first contribution in klauspost/compress#1028

@hyunsooda made their first contribution in klauspost/compress#1031

@Juneezee made their first contribution in klauspost/compress#1038

@Bbulatov made their first contribution in klauspost/compress#1052

Full Changelog: klauspost/compress@v1.17.11...v1.18.0

Commits

8e79dc4 Deprecate Go 1.21 and add 1.24 (#1055)
df8e99c build(deps): bump the github-actions group with 2 updates (#1053)
7787431 zstd: fix unused debug code (#1052)
0bf3ecb flate: Cleanup & reduce casts (#1050)
e0f89a9 flate: Fix matchlen L5+L6 (#1049)
c8a8470 s2: Improve small block compression speed w/o asm (#1048)
b05b993 s2: Add block decode fuzzer (#1044)
aafbabd flate: Simplify matchlen (remove asm) (#1045)
dbaa9c1 flate: Simplify l4-6 loading (#1043)
4fa2036 Add unsafe little endian loaders (#1036)
Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.20.5 to 1.21.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.21.0 / 2025-02-19

⚠️ This release contains potential breaking change if you upgrade github.com/prometheus/common to 0.62+ together with client_golang (and depend on the strict, legacy validation for the label names). New common version changes model.NameValidationScheme global variable, which relaxes the validation of label names and metric name, allowing all UTF-8 characters. Typically, this should not break any user, unless your test or usage expects strict certain names to panic/fail on client_golang metric registration, gathering or scrape. In case of problems change model.NameValidationScheme to old model.LegacyValidation value in your project init function. ⚠️

[BUGFIX] gocollector: Fix help message for runtime/metric metrics. #1583

[BUGFIX] prometheus: Fix Desc.String() method for no labels case. #1687

[PERF] prometheus: Optimize popular prometheus.BuildFQName function; now up to 30% faster. #1665

[PERF] prometheus: Optimize Inc, Add and Observe cumulative metrics; now up to 50% faster under high concurrent contention. #1661

[CHANGE] Upgrade prometheus/common to 0.62.0 which changes model.NameValidationScheme global variable. #1712

[CHANGE] Add support for Go 1.23. #1602

[FEATURE] process_collector: Add support for Darwin systems. #1600 #1616 #1625 #1675 #1715

[FEATURE] api: Add ability to invoke CloseIdleConnections on api.Client using api.Client.(CloseIdler).CloseIdleConnections() casting. #1513

[FEATURE] promhttp: Add promhttp.HandlerOpts.EnableOpenMetricsTextCreatedSamples option to create OpenMetrics _created lines. Not recommended unless you want to use opt-in Created Timestamp feature. Community works on OpenMetrics 2.0 format that should make those lines obsolete (they increase cardinality significantly). #1408

[FEATURE] prometheus: Add NewConstNativeHistogram function. #1654

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.21.0 / 2025-02-17

⚠️ This release contains potential breaking change if you upgrade github.com/prometheus/common to 0.62+ together with client_golang. ⚠️

New common version changes model.NameValidationScheme global variable, which relaxes the validation of label names and metric name, allowing all UTF-8 characters. Typically, this should not break any user, unless your test or usage expects strict certain names to panic/fail on client_golang metric registration, gathering or scrape. In case of problems change model.NameValidationScheme to old model.LegacyValidation value in your project init function.

[BUGFIX] gocollector: Fix help message for runtime/metric metrics. #1583

[BUGFIX] prometheus: Fix Desc.String() method for no labels case. #1687

[ENHANCEMENT] prometheus: Optimize popular prometheus.BuildFQName function; now up to 30% faster. #1665

[ENHANCEMENT] prometheus: Optimize Inc, Add and Observe cumulative metrics; now up to 50% faster under high concurrent contention. #1661

[CHANGE] Upgrade prometheus/common to 0.62.0 which changes model.NameValidationScheme global variable. #1712

[CHANGE] Add support for Go 1.23. #1602

[FEATURE] process_collector: Add support for Darwin systems. #1600 #1616 #1625 #1675 #1715

[FEATURE] api: Add ability to invoke CloseIdleConnections on api.Client using api.Client.(CloseIdler).CloseIdleConnections() casting. #1513

[FEATURE] promhttp: Add promhttp.HandlerOpts.EnableOpenMetricsTextCreatedSamples option to create OpenMetrics _created lines. Not recommended unless you want to use opt-in Created Timestamp feature. Community works on OpenMetrics 2.0 format that should make those lines obsolete (they increase cardinality significantly). #1408

[FEATURE] prometheus: Add NewConstNativeHistogram function. #1654

Commits

eaf03ef Cut 1.21.0 (#1737)
f1f89dc Cut 1.21.0-rc.0 (#1718)
c923f7c Revert "ci: daggerize test and lint pipelines (#1534)" (#1717)
1bcda80 process collector: Fixed pedantic registry failures on darwin with cgo. (#1715)
038b37a tutorials/whatsup: Updated deps (#1716)
56a2431 docs: Add RELEASE.md for the release process (#1690)
cbd9526 Merge pull request #1713 from prometheus/dependabot/go_modules/tutorials/what...
80b5a2a build(deps): bump golang.org/x/net in /tutorials/whatsup
1a822a8 Upgrade to prometheus/common 0.62.0 with breaking change (#1712)
7b39d01 Update common Prometheus files (#1708)
Additional commits viewable in compare view

Updates github.com/redis/go-redis/v9 from 9.7.0 to 9.7.1

Release notes

Sourced from github.com/redis/go-redis/v9's releases.

v9.7.1

Changes

Recognize byte slice for key argument in cluster client hash slot computation (#3049)

fix(search&aggregate):fix error overwrite and typo #3220 (#3224)

fix: linter configuration (#3279)

fix(search): if ft.aggregate use limit when limitoffset is zero (#3275)

Reinstate read-only lock on hooks access in dialHook to fix data race (#3225)

fix: flaky ClientKillByFilter test (#3268)

chore: fix some comments (#3226)

fix(aggregate, search): ft.aggregate bugfixes (#3263)

fix: add unstableresp3 to cluster client (#3266)

Fix race condition in clusterNodes.Addrs() (#3219)

SortByWithCount FTSearchOptions fix (#3201)

Eliminate redundant dial mutex causing unbounded connection queue contention (#3088)

Add guidance on unstable RESP3 support for RediSearch commands to README (#3177)

🚀 New Features

Add guidance on unstable RESP3 support for RediSearch commands to README (#3177)

🐛 Bug Fixes

fix(search): if ft.aggregate use limit when limitoffset is zero (#3275)

fix: add unstableresp3 to cluster client (#3266)

fix(aggregate, search): ft.aggregate bugfixes (#3263)

SortByWithCount FTSearchOptions fix (#3201)

Recognize byte slice for key argument in cluster client hash slot computation (#3049)

Contributors

We'd like to thank all the contributors who worked on this release!

@ofekshenawa, @Cgol9, @LINKIWI, @shawnwgit, @zhuhaicity, @bitsark, @vladvildanov, @ndyakov

Full Changelog: redis/go-redis@v9.7.0...v9.7.1

Commits

3d041a1 release: 9.7.1 patch (#3278)
See full diff in compare view

Updates golang.org/x/sync from 0.10.0 to 0.11.0

Commits

fe3591b sync/errgroup: improve documentation for semaphore limit behavior
See full diff in compare view

Updates google.golang.org/protobuf from 1.36.4 to 1.36.5

Updates golang.org/x/tools from 0.29.0 to 0.30.0

Commits

09747cd go.mod: update golang.org/x dependencies
dc9353b gopls/internal/analysis/modernize: appendclipped: unclip
a886a1c internal/analysisinternal: AddImport handles dot imports
94c3c49 go/analysis/analysistest: RunWithSuggestedFix: assume valid fixes
5f9967d gopls/internal/analysis/modernize: strings.Split -> SplitSeq
a1eb5fd go/analysis/passes/framepointer: support arm64
9c087d9 internal/analysis/gofix: change "forward" back to "inline"
82317ce gopls/internal/analysis/modernize: slices.Delete: import slices
e65ea15 go/analysis/internal/checker: implement three-way merge
a9bf6fd gopls/internal/analysis/modernize: remove SortStable
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-patch group with 6 updates: | Package | From | To | | --- | --- | --- | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.11` | `1.18.0` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.20.5` | `1.21.0` | | [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.7.0` | `9.7.1` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.10.0` | `0.11.0` | | google.golang.org/protobuf | `1.36.4` | `1.36.5` | | [golang.org/x/tools](https://github.com/golang/tools) | `0.29.0` | `0.30.0` | Updates `github.com/klauspost/compress` from 1.17.11 to 1.18.0 - [Release notes](https://github.com/klauspost/compress/releases) - [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml) - [Commits](klauspost/compress@v1.17.11...v1.18.0) Updates `github.com/prometheus/client_golang` from 1.20.5 to 1.21.0 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.20.5...v1.21.0) Updates `github.com/redis/go-redis/v9` from 9.7.0 to 9.7.1 - [Release notes](https://github.com/redis/go-redis/releases) - [Changelog](https://github.com/redis/go-redis/blob/master/CHANGELOG.md) - [Commits](redis/go-redis@v9.7.0...v9.7.1) Updates `golang.org/x/sync` from 0.10.0 to 0.11.0 - [Commits](golang/sync@v0.10.0...v0.11.0) Updates `google.golang.org/protobuf` from 1.36.4 to 1.36.5 Updates `golang.org/x/tools` from 0.29.0 to 0.30.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.29.0...v0.30.0) --- updated-dependencies: - dependency-name: github.com/klauspost/compress dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/prometheus/client_golang dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/redis/go-redis/v9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: golang.org/x/sync dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: google.golang.org/protobuf dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: golang.org/x/tools dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch ... Signed-off-by: dependabot[bot] <[email protected]>

Replaces #1497 so that CI passes Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot · 2025-03-03T17:09:57Z

Looks like these dependencies are no longer updatable, so this is no longer needed.

dependabot bot requested a review from a team as a code owner March 1, 2025 11:47

dependabot bot added the type: dependencies label Mar 1, 2025

TylerHelmuth mentioned this pull request Mar 3, 2025

maint(deps): bump the minor-patch group with 6 updates #1499

Merged

dependabot bot closed this Mar 3, 2025

dependabot bot deleted the dependabot/go_modules/minor-patch-33cb21257a branch March 3, 2025 17:10

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

maint(deps): bump the minor-patch group with 6 updates #1497

maint(deps): bump the minor-patch group with 6 updates #1497

dependabot bot commented on behalf of github Mar 1, 2025 •

edited

Loading

dependabot bot commented on behalf of github Mar 3, 2025

maint(deps): bump the minor-patch group with 6 updates #1497

maint(deps): bump the minor-patch group with 6 updates #1497

Conversation

dependabot bot commented on behalf of github Mar 1, 2025 • edited Loading

v1.18.0

What's Changed

New Contributors

v1.21.0 / 2025-02-19

1.21.0 / 2025-02-17

v9.7.1

Changes

🚀 New Features

🐛 Bug Fixes

Contributors

dependabot bot commented on behalf of github Mar 3, 2025

dependabot bot commented on behalf of github Mar 1, 2025 •

edited

Loading