Skip to content

build(deps): bump the dependencies group across 1 directory with 14 updates #415

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: master
Choose a base branch
from
Open

build(deps): bump the dependencies group across 1 directory with 14 updates #415

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 8, 2025 •
edited
Loading

Bumps the dependencies group with 12 updates in the / directory:

Package From To
github.com/getsentry/sentry-go 0.28.1 0.40.0
github.com/go-ping/ping 1.1.0 1.2.0
github.com/hashicorp/go-retryablehttp 0.7.7 0.7.8
github.com/labstack/echo/v4 4.12.0 4.13.4
github.com/prometheus/common 0.67.2 0.67.4
github.com/prometheus/node_exporter 1.9.0 1.10.2
github.com/sagernet/sing 0.5.1 0.7.13
github.com/sagernet/sing-box 1.9.4 1.12.12
github.com/urfave/cli/v2 2.27.4 2.27.7
github.com/xtls/xray-core 1.251015.0 1.251202.0
go.uber.org/zap 1.27.0 1.27.1
modernc.org/sqlite 1.32.0 1.40.1

Updates github.com/getsentry/sentry-go from 0.28.1 to 0.40.0

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.40.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.40.0.

Bug Fixes

  • Disable DisableTelemetryBuffer flag and noop Telemetry Buffer, to prevent a panic at runtime (#1149).

0.39.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.39.0.

Features

  • Drop events from the telemetry buffer when rate-limited or transport is full, allowing the buffer queue to empty itself under load (#1138).

Bug Fixes

  • Fix scheduler's hasWork() method to check if buffers are ready to flush. The previous implementation was causing CPU spikes (#1143).

0.38.0

Breaking Changes

Features

  • Introduce a new async envelope transport and telemetry buffer to prioritize and batch events (#1094, #1093, #1107).

    • Advantages:
      • Prioritized, per-category buffers (errors, transactions, logs, check-ins) reduce starvation and improve resilience under load
      • Batching for high-volume logs (up to 100 items or 5s) cuts network overhead
      • Bounded memory with eviction policies
      • Improved flush behavior with context-aware flushing

  • Add ClientOptions.DisableTelemetryBuffer to opt out and fall back to the legacy transport layer (HTTPTransport / HTTPSyncTransport).

    err := sentry.Init(sentry.ClientOptions{
  Dsn: "__DSN__",
  DisableTelemetryBuffer: true, // fallback to legacy transport
})

Notes

  • If a custom Transport is provided, the SDK automatically disables the telemetry buffer and uses the legacy transport for compatibility.

0.37.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.37.0.

Breaking Changes

  • Behavioral change for the TraceIgnoreStatusCodes option. The option now defaults to ignoring 404 status codes (#1122).

Features

... (truncated)

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.40.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.40.0.

Bug Fixes

  • Disable DisableTelemetryBuffer flag and noop Telemetry Buffer, to prevent a panic at runtime (#1149).

0.39.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.39.0.

Features

  • Drop events from the telemetry buffer when rate-limited or transport is full, allowing the buffer queue to empty itself under load (#1138).

Bug Fixes

  • Fix scheduler's hasWork() method to check if buffers are ready to flush. The previous implementation was causing CPU spikes (#1143).

0.38.0

Breaking Changes

Features

  • Introduce a new async envelope transport and telemetry buffer to prioritize and batch events (#1094, #1093, #1107).

    • Advantages:
      • Prioritized, per-category buffers (errors, transactions, logs, check-ins) reduce starvation and improve resilience under load
      • Batching for high-volume logs (up to 100 items or 5s) cuts network overhead
      • Bounded memory with eviction policies
      • Improved flush behavior with context-aware flushing

  • Add ClientOptions.DisableTelemetryBuffer to opt out and fall back to the legacy transport layer (HTTPTransport / HTTPSyncTransport).

    err := sentry.Init(sentry.ClientOptions{
  Dsn: "__DSN__",
  DisableTelemetryBuffer: true, // fallback to legacy transport
})

Notes

  • If a custom Transport is provided, the SDK automatically disables the telemetry buffer and uses the legacy transport for compatibility.

0.37.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.37.0.

Breaking Changes

... (truncated)

Commits

Updates github.com/go-ping/ping from 1.1.0 to 1.2.0

Release notes

Sourced from github.com/go-ping/ping's releases.

v1.2.0

What's Changed

New Contributors

Full Changelog: go-ping/ping@v1.1.0...v1.2.0

Commits

Updates github.com/hashicorp/go-retryablehttp from 0.7.7 to 0.7.8

Commits
  • e1f5485 Add a new RateLimitLinearJitterBackoff policy
  • b0cac1e Merge pull request #262 from hashicorp/dependabot-intge
  • 66c110b few new parameters added to dependabot.yml
  • 25b39e6 IND-3836 additions of new parameters to dependabot.yml
  • eeac125 add comment for bodyType param in client.Post
  • 390c1d8 Merge pull request #254 from hashicorp/compliance/add-headers
  • f4d7325 [COMPLIANCE] Add Copyright and License Headers
  • a881d6c Merge pull request #251 from hashicorp/build-test
  • 9c1b40b go-version matrix updated
  • e3867e3 resolved comments
  • Additional commits viewable in compare view

Updates github.com/labstack/echo/v4 from 4.12.0 to 4.13.4

Release notes

Sourced from github.com/labstack/echo/v4's releases.

v4.13.4

What's Changed

Security

New Contributors

Full Changelog: labstack/echo@v4.13.3...v4.13.4

v4.13.3

Security

Full Changelog: labstack/echo@v4.13.2...v4.13.3

v4.13.2 - update dependencies

Security

Full Changelog: labstack/echo@v4.13.1...v4.13.2

v4.13.1

Fixes

Full Changelog: labstack/echo@v4.13.0...v4.13.1

JWT Middleware Removed

BREAKING CHANGE: JWT Middleware Removed from Core

The JWT middleware has been removed from Echo core due to another security vulnerability, CVE-2024-51744. For more details, refer to issue #2699. A drop-in replacement is available in the labstack/echo-jwt repository or see alternative implementation

Important: Direct assignments like token := c.Get("user").(*jwt.Token) will now cause a panic due to an invalid cast. Update your code accordingly. Replace the current imports from "github.com/golang-jwt/jwt" in your handlers to the new middleware version using "github.com/golang-jwt/jwt/v5".

... (truncated)

Changelog

Sourced from github.com/labstack/echo/v4's changelog.

v4.13.4 - 2025-05-22

Enhancements

Security

v4.13.3 - 2024-12-19

Security

v4.13.2 - 2024-12-12

Security

v4.13.1 - 2024-12-11

Fixes

v4.13.0 - 2024-12-04

BREAKING CHANGE JWT Middleware Removed from Core use labstack/echo-jwt instead

The JWT middleware has been removed from Echo core due to another security vulnerability, CVE-2024-51744. For more details, refer to issue #2699. A drop-in replacement is available in the labstack/echo-jwt repository.

Important: Direct assignments like token := c.Get("user").(*jwt.Token) will now cause a panic due to an invalid cast. Update your code accordingly. Replace the current imports from "github.com/golang-jwt/jwt" in your handlers to the new middleware version using "github.com/golang-jwt/jwt/v5".

Background:

The version of golang-jwt/jwt (v3.2.2) previously used in Echo core has been in an unmaintained state for some time. This is not the first vulnerability affecting this library; earlier issues were addressed in [PR #1946](labstack/echo#1946). JWT middleware was marked as deprecated in Echo core as of v4.10.0 on 2022-12-27. If you did not notice that, consider leveraging tools like Staticcheck to catch such deprecations earlier in you dev/CI flow. For bonus points - check out gosec.

We sincerely apologize for any inconvenience caused by this change. While we strive to maintain backward compatibility within Echo core, recurring security issues with third-party dependencies have forced this decision.

... (truncated)

Commits

Updates github.com/prometheus/common from 0.67.2 to 0.67.4

Release notes

Sourced from github.com/prometheus/common's releases.

v0.67.4 / 2025-11-18

What's Changed

Full Changelog: prometheus/common@v0.67.3...v0.67.4

v0.67.3 / 2025-11-18

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.67.2...v0.67.3

Changelog

Sourced from github.com/prometheus/common's changelog.

Changelog

main / unreleased

What's Changed

Commits
  • d80d854 chore: Add omitempty tag to all config fields (#865)
  • 04686b2 chore: 'omitempty' to Oauth2 fields with type Secret to avoid requiring them ...
  • 0b2fbf3 chore: clean up golangci-lint configuration (#782)
  • b2cdb07 Merge pull request #863 from prometheus/remove-http2-comment
  • cd1ab56 Config: remove outdated comment about HTTP/2 issues
  • f4c0aea Support JWT Profile for Authorization Grant (RFC 7523 3.1) (#862)
  • See full diff in compare view

Updates github.com/prometheus/node_exporter from 1.9.0 to 1.10.2

Release notes

Sourced from github.com/prometheus/node_exporter's releases.

1.10.2 / 2025-10-25

  • [BUGFIX] meminfo: Fix typo in Zswap metric name #3455

1.10.1 / 2025-10-25

  • [BUGFIX] filesystem: Fix mount points being collected multiple times #3376
  • [BUGFIX] filesystem: Refactor mountinfo parsing #3452
  • [BUGFIX] meminfo: Add Zswap/Zswapped metrics #3453

1.10.0 / 2025-10-24

  • [CHANGE] mdadm: Use sysfs for RAID metrics #3031
  • [CHANGE] filesystem: Add erofs in default excluded fs #3313
  • [CHANGE] tcpstat: Use std lib binary.NativeEndian #3386
  • [FEATURE] pcidevice: Add new collector for PCIe devices #3339
  • [FEATURE] AIX: Add more metrics #3338
  • [FEATURE] systemd: Add Virtualization metrics #3254
  • [FEATURE] swaps: Add new collector #3428
  • [ENHANCEMENT] wifi: Add packet received and transmitted metrics #3382
  • [ENHANCEMENT] filesystem: Take super options into account for read-only #3387
  • [ENHANCEMENT] pcidevice: Add additional metrics #3425
  • [ENHANCEMENT] perf: Add tlb_data metrics #3436
  • [BUGFIX] interrupts: Fix OpenBSD interrupt device parsing #3288
  • [BUGFIX] diskstats: Simplify condition #3290
  • [BUGFIX] thermal: Sanitize darwin thermal strings #3294
  • [BUGFIX] filesystem: Fix Darwin collector cgo memory leak #3315
  • [BUGFIX] cpufreq: Fix: collector enable #3318
  • [BUGFIX] ethtool: Fix returning 0 for sanitized metrics #3335
  • [BUGFIX] netdev: Fix Darwin netdev i/o bytes metric #3336
  • [BUGFIX] systemd: Fix logging race #3364
  • [BUGFIX] filesystem: Fix duplicate Darwin CGO import #3391

1.9.1 / 2025-04-01

  • [BUGFIX] pressure: Fix missing IRQ on older kernels #3263
  • [BUGFIX] Fix Darwin memory leak #3277
Changelog

Sourced from github.com/prometheus/node_exporter's changelog.

1.10.2 / 2025-10-25

  • [BUGFIX] meminfo: Fix typo in Zswap metric name #3455

1.10.1 / 2025-10-25

  • [BUGFIX] filesystem: Fix mount points being collected multiple times #3376
  • [BUGFIX] filesystem: Refactor mountinfo parsing #3452
  • [BUGFIX] meminfo: Add Zswap/Zswapped metrics #3453

1.10.0 / 2025-10-24

  • [CHANGE] mdadm: Use sysfs for RAID metrics #3031
  • [CHANGE] filesystem: Add erofs in default excluded fs #3313
  • [CHANGE] tcpstat: Use std lib binary.NativeEndian #3386
  • [FEATURE] pcidevice: Add new collector for PCIe devices #3339
  • [FEATURE] AIX: Add more metrics #3338
  • [FEATURE] systemd: Add Virtualization metrics #3254
  • [FEATURE] swaps: Add new collector #3428
  • [ENHANCEMENT] wifi: Add packet received and transmitted metrics #3382
  • [ENHANCEMENT] filesystem: Take super options into account for read-only #3387
  • [ENHANCEMENT] pcidevice: Add additional metrics #3425
  • [ENHANCEMENT] perf: Add tlb_data metrics #3436
  • [BUGFIX] interrupts: Fix OpenBSD interrupt device parsing #3288
  • [BUGFIX] diskstats: Simplify condition #3290
  • [BUGFIX] thermal: Sanitize darwin thermal strings #3294
  • [BUGFIX] filesystem: Fix Darwin collector cgo memory leak #3315
  • [BUGFIX] cpufreq: Fix: collector enable #3318
  • [BUGFIX] ethtool: Fix returning 0 for sanitized metrics #3335
  • [BUGFIX] netdev: Fix Darwin netdev i/o bytes metric #3336
  • [BUGFIX] systemd: Fix logging race #3364
  • [BUGFIX] filesystem: Fix duplicate Darwin CGO import #3391

1.9.1 / 2025-04-01

  • [BUGFIX] pressure: Fix missing IRQ on older kernels #3263
  • [BUGFIX] Fix Darwin memory leak #3277
Commits

Updates github.com/sagernet/sing from 0.5.1 to 0.7.13

Commits
  • 745da20 Fix socks bind addr not unwrapped
  • 0dde5e3 Revert "Fix quic-go leaking connections"
  • fcad2b6 Fix quic-go leaking connections
  • 759bdec Update .gitignore
  • a754c39 Pin gofumpt and golangci-lint versions, as we don't want to remove naked returns
  • e5b9208 Improve adguard matcher
  • 01287e5 Fix adguard file naming
  • 24955fd Fix adguard matcher
  • 1f1489e Add length checks for socks4 strings
  • 3d665ec Fix race codes
  • Additional commits viewable in compare view

Updates github.com/sagernet/sing-box from 1.9.4 to 1.12.12

Release notes

Sourced from github.com/sagernet/sing-box's releases.

1.12.12

📝 Release Notes

  • Fixes and improvements

1.12.11

📝 Release Notes

  • Fixes and improvements

1.12.10

📝 Release Notes

  • Update uTLS to v1.8.1 1
  • Fixes and improvements

1:

This update fixes an critical issue that could cause simulated Chrome fingerprints to be detected, see refraction-networking/utls#375.

1.12.9

📝 Release Notes

  • Fixes and improvements

1.12.8

📝 Release Notes

  • Fixes and improvements

1.12.7

📝 Release Notes

  • Fixes and improvements

1.12.5

📝 Release Notes

  • Fixes and improvements

1.12.4

📝 Release Notes

  • Fixes and improvements

1.12.3

📝 Release Notes

  • Fixes and improvements

... (truncated)

Changelog

Sourced from github.com/sagernet/sing-box's changelog.

1.12.12

  • Fixes and improvements

1.13.0-alpha.26

  • Update quic-go to v0.55.0
  • Fix memory leak in hysteria2
  • Fixes and improvements

1.12.11

  • Fixes and improvements

1.13.0-alpha.24

  • Add Claude Code Multiplexer service 1
  • Fixes and improvements

1:

CCM (Claude Code Multiplexer) service allows you to access your local Claude Code subscription remotely through custom tokens, eliminating the need for OAuth authentication on remote clients.

See CCM.

1.13.0-alpha.23

  • Fix compatibility with MPTCP 1
  • Fixes and improvements

1:

auto_redirect now rejects MPTCP connections by default to fix compatibility issues, but you can change it to bypass the sing-box via the new exclude_mptcp option.

See TUN.

1.13.0-alpha.22

  • Update uTLS to v1.8.1 1
  • Fixes and improvements

1:

This update fixes an critical issue that could cause simulated Chrome fingerprints to be detected, see refraction-networking/utls#375.

1.12.10

  • Update uTLS to v1.8.1 1

... (truncated)

Commits
  • 54ed584 Bump version
  • b1bdc18 Fix socks response
  • a38030c Fix memory leak in hysteria2
  • 4626aa2 Bump version
  • 5a40b67 Update dependencies
  • 541f63f redirect: Fix compatibility with /product/bin/su
  • 5de6f4a Fix tailscale not enforcing NoLogsNoSupport
  • 5658830 Fix trailing dot handling in local DNS transport
  • 0e50edc documentation: Add appreciate for Warp
  • 444f454 Bump version
  • Additional commits viewable in compare view

Updates github.com/urfave/cli/v2 from 2.27.4 to 2.27.7

Release notes

Sourced from github.com/urfave/cli/v2's releases.

v2.27.7

What's Changed

Full Changelog: urfave/cli@v2.27.6...v2.27.7

v2.27.6

What's Changed

Full Changelog: urfave/cli@v2.27.5...v2.27.6

v2.27.5

What's Changed

Full Changelog: urfave/cli@v2.27.4...v2.27.5

Commits
  • 19b951a Merge pull request #2159 from urfave/v2-deps-up
  • dd134b5 Update dependencies in v2 series
  • 347cd02 Merge pull request #2157 from urfave/v2-not-dependabot
  • 0acf2e4 Dependabot does not work like this (v2)
  • c7bc0a9 Merge pull request #2154 from urfave/v2-dependabot-maybe
  • 6ec0368 Is this file needed on each release branch? (v2)
  • 9d76d15 Merge pull request #2070 from dearchap/issue_2069
  • 4abc9c3 Fix:(issue_2069) Add sep for string slice
  • 3b17080 Merge pull request #2015 from urfave/update_docs_v2
  • 1e15e30 Update cli.yml
  • Additional commits viewable in compare view

Updates github.com/xtls/xray-core from 1.251015.0 to 1.251202.0

Commits
  • e403abe v25.12.2
  • c123f16 XTLS Vision: Discard expired pre-connect conn automatically
  • 93312d2 XTLS Vision: Fix IsCompleteRecord() (#5365)
  • 36cb0f0 v25.12.1
  • cadcb47 XTLS Vision: Add testpre (outbound pre-connect) and testseed (outbound & ...
  • c6afcd5 XTLS Vision: Check TLS record isComplete (#5179)
  • ed5f7e7 fix(dns): inheritance issue with disableCache (#5351)
  • 9d3401b Bump github.com/quic-go/quic-go from 0.57.0 to 0.57.1 (#5352)
  • d60ef65 Bump github.com/quic-go/quic-go from 0.56.0 to 0.57.0 (#5335)
  • a83253f VLESS Reverse Proxy: Forbid reverse-proxy UUID using forward-proxy, enabled b...
  • Additional commits viewable in compare view

Updates go.uber.org/zap from 1.27.0 to 1.27.1

Release notes

Sourced from go.uber.org/zap's releases.

v1.27.1

Enhancements:

  • #1501[]: prevent Object from panicking on nils
  • #1511[]: Fix a race condition in WithLazy.

Thanks to @​rabbbit, @​alshopov, @​jquirke, @​arukiidou for their contributions to this release.

#1501: uber-go/zap#1501 #1511: uber-go/zap#1511

Changelog

Sourced from go.uber.org/zap's changelog.

1.27.1 (19 Nov 2025)

Enhancements:

  • #1501[]: prevent Object from panicking on nils
  • #1511[]: Fix a race condition in WithLazy.

Thanks to @​rabbbit, @​alshopov, @​jquirke, @​arukiidou for their contributions to this release.

#1501: uber-go/zap#1501 #1511: uber-go/zap#1511

Commits

Updates golang.org/x/sync from 0.17.0 to 0.18.0

Commits

Updates google.golang.org/grpc from 1.76.0 to 1.77.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.77.0

API Changes

  • mem: Replace the Reader interface with a struct for better performance and maintainability. (#8669)

Behavior Changes

  • balancer/pickfirst: Remove support for the old pick_first LB policy via the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false. The new pick_first has been the default since v1.71.0. (#8672)

Bug Fixes

  • xdsclient: Fix a race condition in the ADS stream implementation that could result in resource-not-found errors, causing the gRPC client channel to move to TransientFailure. (#8605)
  • client: Ignore HTTP status header for gRPC streams. (#8548)
  • client: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (#8534)
  • client: Fix a bug where default port 443 was not automatically added to addresses without a specified port when sent to a proxy.
    • Setting environment variable GRPC_EXPERIMENTAL_ENABLE_DEFAULT_PORT_FOR_PROXY_TARGET=false disables this change; please file a bug if any problems are encountered as we will remove this option soon. (#8613)
  • balancer/pickfirst: Fix a bug where duplicate addresses were not being ignored as intended. (#8611)
  • server: Fix a bug that caused overcounting of channelz metrics for successful and failed streams. (#8573)
  • balancer/pickfirst: When configured, shuffle addresses in resolver updates that lack endpoints. Since gRPC automatically adds endpoints to resolver updates, this bug only affects custom LB policies that delegate to pick_first but don't set endpoints. (#8610)
  • mem: Clear large buffers before re-using. (#8670)

Performance Improvements

  • transport: Reduce heap allocations to reduce time spent in garbage collection. (#8624, #8630, #8639, #8668)
  • transport: Avoid copies when reading and writing Data frames. (#8657, #8667)
  • mem: Avoid clearing newly allocated buffers. (#8670)

New Features

  • outlierdetection: Add metrics specified in gRFC A91. (#8644)
  • stats/opentelemetry: Add support for optional label grpc.lb.backend_service in per-call metrics (#8637)
  • xds: Add support for JWT Call Credentials as specified in gRFC A97. Set environment variable GRPC_EXPERIMENTAL_XDS_BOOTSTRAP_CALL_CREDS=true to enable this feature. (#8536)
  • experimental/stats: Add support for up/down counters. (#8581)
Commits

@dependabot
build(deps): bump the dependencies group across 1 directory with 14 u…
c76673b 
…pdates

Bumps the dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) | `0.28.1` | `0.40.0` |
| [github.com/go-ping/ping](https://github.com/go-ping/ping) | `1.1.0` | `1.2.0` |
| [github.com/hashicorp/go-retryablehttp](https://github.com/hashicorp/go-retryablehttp) | `0.7.7` | `0.7.8` |
| [github.com/labstack/echo/v4](https://github.com/labstack/echo) | `4.12.0` | `4.13.4` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.67.2` | `0.67.4` |
| [github.com/prometheus/node_exporter](https://github.com/prometheus/node_exporter) | `1.9.0` | `1.10.2` |
| [github.com/sagernet/sing](https://github.com/sagernet/sing) | `0.5.1` | `0.7.13` |
| [github.com/sagernet/sing-box](https://github.com/sagernet/sing-box) | `1.9.4` | `1.12.12` |
| [github.com/urfave/cli/v2](https://github.com/urfave/cli) | `2.27.4` | `2.27.7` |
| [github.com/xtls/xray-core](https://github.com/xtls/xray-core) | `1.251015.0` | `1.251202.0` |
| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.0` | `1.27.1` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.32.0` | `1.40.1` |



Updates `github.com/getsentry/sentry-go` from 0.28.1 to 0.40.0
- [Release notes](https://github.com/getsentry/sentry-go/releases)
- [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-go@v0.28.1...v0.40.0)

Updates `github.com/go-ping/ping` from 1.1.0 to 1.2.0
- [Release notes](https://github.com/go-ping/ping/releases)
- [Commits](go-ping/ping@v1.1.0...v1.2.0)

Updates `github.com/hashicorp/go-retryablehttp` from 0.7.7 to 0.7.8
- [Changelog](https://github.com/hashicorp/go-retryablehttp/blob/main/CHANGELOG.md)
- [Commits](hashicorp/go-retryablehttp@v0.7.7...v0.7.8)

Updates `github.com/labstack/echo/v4` from 4.12.0 to 4.13.4
- [Release notes](https://github.com/labstack/echo/releases)
- [Changelog](https://github.com/labstack/echo/blob/master/CHANGELOG.md)
- [Commits](labstack/echo@v4.12.0...v4.13.4)

Updates `github.com/prometheus/common` from 0.67.2 to 0.67.4
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.67.2...v0.67.4)

Updates `github.com/prometheus/node_exporter` from 1.9.0 to 1.10.2
- [Release notes](https://github.com/prometheus/node_exporter/releases)
- [Changelog](https://github.com/prometheus/node_exporter/blob/master/CHANGELOG.md)
- [Commits](prometheus/node_exporter@v1.9.0...v1.10.2)

Updates `github.com/sagernet/sing` from 0.5.1 to 0.7.13
- [Commits](SagerNet/sing@v0.5.1...v0.7.13)

Updates `github.com/sagernet/sing-box` from 1.9.4 to 1.12.12
- [Release notes](https://github.com/sagernet/sing-box/releases)
- [Changelog](https://github.com/SagerNet/sing-box/blob/dev-next/docs/changelog.md)
- [Commits](SagerNet/sing-box@v1.9.4...v1.12.12)

Updates `github.com/urfave/cli/v2` from 2.27.4 to 2.27.7
- [Release notes](https://github.com/urfave/cli/releases)
- [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md)
- [Commits](urfave/cli@v2.27.4...v2.27.7)

Updates `github.com/xtls/xray-core` from 1.251015.0 to 1.251202.0
- [Release notes](https://github.com/xtls/xray-core/releases)
- [Commits](XTLS/Xray-core@v1.251015.0...v1.251202.0)

Updates `go.uber.org/zap` from 1.27.0 to 1.27.1
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.27.0...v1.27.1)

Updates `golang.org/x/sync` from 0.17.0 to 0.18.0
- [Commits](golang/sync@v0.17.0...v0.18.0)

Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)

Updates `modernc.org/sqlite` from 1.32.0 to 1.40.1
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.32.0...v1.40.1)

---
updated-dependencies:
- dependency-name: github.com/getsentry/sentry-go
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/go-ping/ping
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/hashicorp/go-retryablehttp
  dependency-version: 0.7.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/labstack/echo/v4
  dependency-version: 4.13.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/prometheus/common
  dependency-version: 0.67.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/prometheus/node_exporter
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/sagernet/sing
  dependency-version: 0.7.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/sagernet/sing-box
  dependency-version: 1.12.12
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/urfave/cli/v2
  dependency-version: 2.27.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/xtls/xray-core
  dependency-version: 1.251202.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: go.uber.org/zap
  dependency-version: 1.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.77.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: modernc.org/sqlite
  dependency-version: 1.40.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant