Skip to content

build(deps): bump the all-updates group with 27 updates#7143

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/all-updates-abc96c97c8
Closed

build(deps): bump the all-updates group with 27 updates#7143
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/all-updates-abc96c97c8

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 24, 2025 •
edited
Loading

Bumps the all-updates group with 27 updates:

Package From To
github.com/BurntSushi/toml 1.4.0 1.5.0
github.com/KimMachineGun/automemlimit 0.7.1 0.7.4
github.com/alecthomas/chroma/v2 2.15.0 2.19.0
github.com/go-chi/chi/v5 5.2.1 5.2.2
github.com/google/cel-go 0.24.1 0.26.0
github.com/klauspost/cpuid/v2 2.2.10 2.3.0
github.com/prometheus/client_golang 1.19.1 1.22.0
github.com/smallstep/certificates 0.26.1 0.28.4
github.com/smallstep/nosql 0.6.1 0.7.0
github.com/spf13/pflag 1.0.6 1.0.7
github.com/yuin/goldmark 1.7.8 1.7.13
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.56.0 0.61.0
go.opentelemetry.io/contrib/propagators/autoprop 0.42.0 0.62.0
go.opentelemetry.io/otel 1.31.0 1.37.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 1.31.0 1.37.0
go.opentelemetry.io/otel/sdk 1.31.0 1.37.0
golang.org/x/crypto 0.36.0 0.39.0
golang.org/x/net 0.38.0 0.41.0
golang.org/x/sync 0.12.0 0.15.0
golang.org/x/term 0.30.0 0.32.0
golang.org/x/time 0.11.0 0.12.0
github.com/libdns/libdns 1.0.0-beta.1 1.1.0
github.com/pires/go-proxyproto 0.7.1-0.20240628150027-b718e7ce4964 0.8.1
github.com/prometheus/client_model 0.5.0 0.6.1
go.opentelemetry.io/otel/trace 1.31.0 1.37.0
go.step.sm/crypto 0.45.0 0.67.0
golang.org/x/sys 0.31.0 0.33.0

Updates github.com/BurntSushi/toml from 1.4.0 to 1.5.0

Release notes

Sourced from github.com/BurntSushi/toml's releases.

v1.5.0

Mostly some small bugfixes, with a few small new features:

  • Add Position.Col, to mark the column an error occurred (#410)

  • Print more detailed errors in the tomlv CLI.

  • Ensure ParseError.Message is always set (#411)

  • Allow custom string types as map keys (#414)

  • Mark meta keys as decoded when using Unmarshaler interface (#426)

  • Fix encoding when nested inline table ends with map (#438)

  • Fix encoding of several layers of embedded structs (#430)

  • Fix ErrorWithPosition panic when there is no newline in the TOML document (#433)

Commits
  • d97def5 Update toml-test
  • d10101f Correct encoding of comma when nested inline table ends with map
  • 75a4f17 Correct encoding of several layers of embedded structs
  • 702f5a6 Minor staticcheck fixes
  • 6f7689d Mark meta keys as decoded when using Unmarshaler interface (#426)
  • 8323983 Remove exception for fuzzer
  • 4664468 Fix ErrorWithPosition panic when less than two lines
  • 211c915 Fix typos in comments, tests, error message (#432)
  • c141a29 Test with Go 1.24 in CI
  • 2918ee7 Fix metadata: do not reuse result of append (#418)
  • Additional commits viewable in compare view

Updates github.com/KimMachineGun/automemlimit from 0.7.1 to 0.7.4

Release notes

Sourced from github.com/KimMachineGun/automemlimit's releases.

v0.7.4

What's Changed

New Contributors

Full Changelog: KimMachineGun/automemlimit@v0.7.3...v0.7.4

v0.7.3

What's Changed

Full Changelog: KimMachineGun/automemlimit@v0.7.2...v0.7.3

v0.7.2

What's Changed

Full Changelog: KimMachineGun/automemlimit@v0.7.1...v0.7.2

Commits
  • e8d0135 fix(memlimit): use memory.stat instead of memory.stats (#30)
  • b2c01e8 fix(memlimit): move goroutine execution inside refresh function
  • a9a712b ci: bump ubuntu version
  • a659ed1 fix(memlimit): fix mountinfo validation logic when super options have spaces
  • b5e3683 chore(examples/gosigar): remove gosigar example
  • See full diff in compare view

Updates github.com/alecthomas/chroma/v2 from 2.15.0 to 2.19.0

Release notes

Sourced from github.com/alecthomas/chroma/v2's releases.

v2.19.0

Changelog

  • adeac8f feat: WASM playground
  • 484750a chore: add uv
  • a5ceb28 fix: add lexer compile time validation for group by
  • cd5c4a8 docs(readme): update go reference badge to point to v2 and new domain (#1087)
  • 970eacc Add MoonScript lexer (#1091)
  • 6ffb465 chore(deps): update all non-major dependencies (#1082)
  • 2c20473 Various lexer & style fixes for RPGLE (#1086)
  • c803d79 fix(zig): detect zig object notation files as zig (#1085)
  • bc60826 Add Core lexer (#1083)
  • ffedbf4 fix(kotlin): detect kotlin script files as kotlin (#1081)

v2.18.0

Changelog

  • 7f0057b feat: support for dark mode in chromad
  • d87cb47 chore(deps): update all non-major dependencies (#1077)
  • 79dde77 Added IBM RPG lexer (#1078)
  • 1b932ec chore: disable gorilla/csrf upgrades temporarily

v2.17.2

Changelog

  • 66b90e7 fix: downgrade gorilla/csrf temporarily

v2.17.1

Changelog

  • 2cbcfa9 fix: a bunch of styles did not correctly fallback to parent styles
  • 8f4cf56 fix(zig): add rule for function calls (#1075)
  • abf98e0 chore(deps): update all non-major dependencies (#1074)

v2.17.0

Changelog

  • 8fa488c Fix Gleam lexer (#1072)
  • 211957a Update pygments-lexers.txt (#1070)
  • 22859e6 Add Lean lexer (#1071)
  • 5409db0 fix(vue): handle more edge cases for tags (#1069)
  • 3ee0984 chore(deps): update all non-major dependencies (#1067)
  • 3df29af styles: add proper diff styling to rrt (fix #603) (#1064)
  • 9077658 fix: properly tokenizes default_tags attribute (#1068)
  • e4ce323 Link to Chroma-using pager in README.md (#1027)
  • b310414 docs: add logo

v2.16.0

Changelog

  • ad6f149 chore: clean up Makefile
  • 9909f65 fix: switch to jsdelivr as unpkg was throwing CORS errors
  • 34bf362 chore(deps): update all non-major dependencies (#1066)
  • 88084b6 fix: Dot in a string breaks the highlighting in Terraform. Fixes #988 (#1065)
  • 62197e9 Add lexers.Aliases() method to display only lexers' aliases (#1057)
  • 7feb358 chore(deps): update dependency svu to v3 (#1053)

... (truncated)

Commits

Updates github.com/go-chi/chi/v5 from 5.2.1 to 5.2.2

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.2.2

What's Changed

Security fix

  • Fixes GHSA-vrw8-fxc6-2r93 - "Host Header Injection Leads to Open Redirect in RedirectSlashes" commit
    • a lower-severity Open Redirect that can't be exploited in browser or email client, as it requires manipulation of a Host header
    • reported by Anuraag Baishya, @​anuraagbaishya. Thank you!

New Contributors

Full Changelog: go-chi/chi@v5.2.1...v5.2.2

Commits

Updates github.com/google/cel-go from 0.24.1 to 0.26.0

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.26.0

New Features ✨

Bug Fixes 🐛

  • Fix lastIndexOf behavior against an empty string in strings extension by @​l46kok in #1173
  • Fix container setting for cel test all types example in online REPL by @​l46kok in #1182
  • fix(checker): Correct Sprintf argument count by @​cuishuang in #1185

Test Updates 🧪

Documentation 📚

Dependency Updates ⬆️

  • Bump the npm_and_yarn group across 1 directory with 2 updates by @​dependabot[bot] in #1188

Release v0.25.0

Features & Enhancements

This release introduces features for richer configuration-based CEL, AI prompt generation from config files, additional documentation, and 3x performance when evaluating traced / state-tracking expressions. This release also introduces a unit test runner framwork.

#1141: Expose extension option factory as a public method

#1143: Add a new compiler tool which can be used to compile CEL expressions and policies using serialized environment

#1151: Lightweight observable evaluation

#1155: Utilities for formatting and parsing documentation strings

#1156: Support for documentation and example strings in CEL environments

#1158: Re-export interpreter.AttributePattern in package cel.

#1159: Document the standard library macros and functions

... (truncated)

Commits
  • b023645 Cost tracking for list operations (#1192)
  • 41023c5 Test case for aliasing container imports (#1193)
  • 41e7392 Add test runner option to configure a custom test suite parser (#1189)
  • a4b169a Add Regex Extension Library (#1187)
  • 050981e fix(checker): Correct Sprintf argument count in notAnOptionalFieldSelectionCa...
  • be08958 Bump the npm_and_yarn group across 1 directory with 2 updates (#1188)
  • 66a441f Add support for global constants to constant folder (#1180)
  • dc36eaa Add documentation for YAML quirks in celpolicy (#1186)
  • c55aebf add support for handling unknown expression ids in test result (#1183)
  • 746d711 Fix container setting for cel test all types example in online REPL (#1182)
  • Additional commits viewable in compare view

Updates github.com/klauspost/cpuid/v2 from 2.2.10 to 2.3.0

Release notes

Sourced from github.com/klauspost/cpuid/v2's releases.

v2.3.0

What's Changed

New Contributors

Full Changelog: klauspost/cpuid@v2.2.11...v2.3.0

v2.2.11

What's Changed

New Contributors

Full Changelog: klauspost/cpuid@v2.2.10...v2.2.11

Commits

Updates github.com/prometheus/client_golang from 1.19.1 to 1.22.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.22.0 - 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:

import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
  • [FEATURE] prometheus: Add new CollectorFunc utility #1724
  • [CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738
  • [FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743
  • [CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.22.0 / 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:

import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
  • [FEATURE] prometheus: Add new CollectorFunc utility #1724
  • [CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738
  • [FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743
  • [CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

1.21.1 / 2025-03-04

  • [BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low contention cases.
  • [BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags.

1.21.0 / 2025-02-17

⚠️ This release contains potential breaking change if you upgrade github.com/prometheus/common to 0.62+ together with client_golang. ⚠️

New common version changes model.NameValidationScheme global variable, which relaxes the validation of label names and metric name, allowing all UTF-8 characters. Typically, this should not break any user, unless your test or usage expects strict certain names to panic/fail on client_golang metric registration, gathering or scrape. In case of problems change model.NameValidationScheme to old model.LegacyValidation value in your project init function.

  • [BUGFIX] gocollector: Fix help message for runtime/metric metrics. #1583
  • [BUGFIX] prometheus: Fix Desc.String() method for no labels case. #1687
  • [ENHANCEMENT] prometheus: Optimize popular prometheus.BuildFQName function; now up to 30% faster. #1665
  • [ENHANCEMENT] prometheus: Optimize Inc, Add and Observe cumulative metrics; now up to 50% faster under high concurrent contention. #1661
  • [CHANGE] Upgrade prometheus/common to 0.62.0 which changes model.NameValidationScheme global variable. #1712
  • [CHANGE] Add support for Go 1.23. #1602
  • [FEATURE] process_collector: Add support for Darwin systems. #1600 #1616 #1625 #1675 #1715
  • [FEATURE] api: Add ability to invoke CloseIdleConnections on api.Client using api.Client.(CloseIdler).CloseIdleConnections() casting. #1513
  • [FEATURE] promhttp: Add promhttp.HandlerOpts.EnableOpenMetricsTextCreatedSamples option to create OpenMetrics _created lines. Not recommended unless you want to use opt-in Created Timestamp feature. Community works on OpenMetrics 2.0 format that should make those lines obsolete (they increase cardinality significantly). #1408
  • [FEATURE] prometheus: Add NewConstNativeHistogram function. #1654

1.20.5 / 2024-10-15

  • [BUGFIX] testutil: Reverted #1424; functions using compareMetricFamilies are (again) only failing if filtered metricNames are in the expected input.

1.20.4 / 2024-09-07

... (truncated)

Commits
  • d50be25 Cut 1.22.0 (#1793)
  • 1043db7 Cut 1.22.0-rc.0 (#1768)
  • e575c9c promhttp: Isolate zstd support and klauspost/compress library use to promhttp...
  • f2276aa Merge pull request #1764 from prometheus/dependabot/github_actions/github-act...
  • 9df772c build(deps): bump peter-evans/create-pull-request
  • a3548c5 Merge pull request #1754 from saswatamcode/exp-eh
  • 60fd2b0 Remove go.work file for now
  • 8f9d0de exp: Add dependabot config
  • c5cf981 Merge pull request #1762 from prometheus/release-1.21
  • 8a42da3 Fix ios build. (#1758)
  • Additional commits viewable in compare view

Updates github.com/smallstep/certificates from 0.26.1 to 0.28.4

Release notes

Sourced from github.com/smallstep/certificates's releases.

Step CA v0.28.4 (25-07-14)

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below. And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate step-ca_darwin_0.28.4_amd64.tar.gz.pem \
  --signature step-ca_darwin_0.28.4_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  step-ca_darwin_0.28.4_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

  • 2c61c44176a89885ea69dd341dca16fb2875d868 Update changelog (#2332)
  • c86cf07be9c5909a08e631ca0490662f734c3505 Merge pull request #2331 from smallstep/mariano/fix-tests
  • 831d005df8f245ba2cc98028524488f6d0a7442c Fix gcp unit tests
  • bc09e46c3c8263b1d10cd5afcf50da34a1c97b82 Merge pull request #2133 from ericnorris/feat-gcp-enable-organization-checking
  • 0d9f0513cfd5506398f972dd8c40a5f3973be769 Merge branch 'master' into feat-gcp-enable-organization-checking
  • 197d0d3508d5f424865682a4df61a05850331487 Changelog updates (#2330)
  • 293222505539eed2e3dff9078070f1368dd55d99 Merge pull request #2329 from smallstep/dependabot/go_modules/google.golang.org/api-0.240.0

... (truncated)

Changelog

Sourced from github.com/smallstep/certificates's changelog.

[0.28.4] - unreleased

Added

  • Add support for using key usage, extended key usage, and basic constraints smallstep/crypto#767
  • smallstep/certificates#2326
  • smallstep/certificates#2290
  • Enable dynamic validation of project ownership within a GCP organization smallstep/certificates#2133

Changed

  • Introduce poolhttp package for improved memory performance of Authority smallstep/certificates#2325

[0.28.3] - 2025-03-17

  • dependabot updates

[0.28.2] - 2025-02-20

Added

  • smallstep/certificates#2113
  • smallstep/certificates#2114
  • smallstep/certificates#2124

Changed

[0.28.1] - 2024-11-19

Added

  • smallstep/certificates#2065
  • smallstep/certificates#2066smallstep/certificates#2069)
  • smallstep/certificates#2076
  • smallstep/certificates#2077

Changed

  • smallstep/certificates#2076

... (truncated)

Commits
  • 2c61c44 Update changelog (#2332)
  • c86cf07 Merge pull request #2331 from smallstep/mariano/fix-tests
  • 831d005 Fix gcp unit tests
  • bc09e46 Merge pull request #2133 from ericnorris/feat-gcp-enable-organization-checking
  • 0d9f051 Merge branch 'master' into feat-gcp-enable-organization-checking
  • 197d0d3 Changelog updates (#2330)
  • 2932225 Merge pull request #2329 from smallstep/dependabot/go_modules/google.golang.o...
  • 312d1a2 Merge pull request #2325 from smallstep/mariano/httpclient
  • b1dd5a6 Bump google.golang.org/api from 0.239.0 to 0.240.0
  • 244e610 Merge pull request #2326 from smallstep/mariano/fix-2323
  • Additional commits viewable in compare view

Updates github.com/smallstep/nosql from 0.6.1 to 0.7.0

Commits
  • cea08a0 Merge pull request #63 from smallstep/mariano/pgx
  • 383be78 Upgrade postgres library
  • 709752c Merge pull request #62 from smallstep/dependabot/go_modules/go.etcd.io/bbolt-...
  • 83bae70 Update go version in go.mod to v1.21
  • ceebe5d Bump go.etcd.io/bbolt from 1.3.9 to 1.3.10
  • 220ba2c Merge pull request #59 from smallstep/dependabot/go_modules/github.com/go-sql...
  • 08700c9 Bump github.com/go-sql-driver/mysql from 1.7.1 to 1.8.1
  • See full diff in compare view

Updates github.com/spf13/pflag from 1.0.6 to 1.0.7

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.7

What's Changed

@dependabot
build(deps): bump the all-updates group with 27 updates
d6ab14a 
Bumps the all-updates group with 27 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/BurntSushi/toml](https://github.com/BurntSushi/toml) | `1.4.0` | `1.5.0` |
| [github.com/KimMachineGun/automemlimit](https://github.com/KimMachineGun/automemlimit) | `0.7.1` | `0.7.4` |
| [github.com/alecthomas/chroma/v2](https://github.com/alecthomas/chroma) | `2.15.0` | `2.19.0` |
| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.2.1` | `5.2.2` |
| [github.com/google/cel-go](https://github.com/google/cel-go) | `0.24.1` | `0.26.0` |
| [github.com/klauspost/cpuid/v2](https://github.com/klauspost/cpuid) | `2.2.10` | `2.3.0` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.19.1` | `1.22.0` |
| [github.com/smallstep/certificates](https://github.com/smallstep/certificates) | `0.26.1` | `0.28.4` |
| [github.com/smallstep/nosql](https://github.com/smallstep/nosql) | `0.6.1` | `0.7.0` |
| [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.6` | `1.0.7` |
| [github.com/yuin/goldmark](https://github.com/yuin/goldmark) | `1.7.8` | `1.7.13` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.56.0` | `0.61.0` |
| [go.opentelemetry.io/contrib/propagators/autoprop](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.42.0` | `0.62.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.31.0` | `1.37.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.31.0` | `1.37.0` |
| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.31.0` | `1.37.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.36.0` | `0.39.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.38.0` | `0.41.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.12.0` | `0.15.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.30.0` | `0.32.0` |
| [golang.org/x/time](https://github.com/golang/time) | `0.11.0` | `0.12.0` |
| [github.com/libdns/libdns](https://github.com/libdns/libdns) | `1.0.0-beta.1` | `1.1.0` |
| [github.com/pires/go-proxyproto](https://github.com/pires/go-proxyproto) | `0.7.1-0.20240628150027-b718e7ce4964` | `0.8.1` |
| [github.com/prometheus/client_model](https://github.com/prometheus/client_model) | `0.5.0` | `0.6.1` |
| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.31.0` | `1.37.0` |
| [go.step.sm/crypto](https://github.com/smallstep/crypto) | `0.45.0` | `0.67.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.31.0` | `0.33.0` |


Updates `github.com/BurntSushi/toml` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/BurntSushi/toml/releases)
- [Commits](BurntSushi/toml@v1.4.0...v1.5.0)

Updates `github.com/KimMachineGun/automemlimit` from 0.7.1 to 0.7.4
- [Release notes](https://github.com/KimMachineGun/automemlimit/releases)
- [Commits](KimMachineGun/automemlimit@v0.7.1...v0.7.4)

Updates `github.com/alecthomas/chroma/v2` from 2.15.0 to 2.19.0
- [Release notes](https://github.com/alecthomas/chroma/releases)
- [Changelog](https://github.com/alecthomas/chroma/blob/master/.goreleaser.yml)
- [Commits](alecthomas/chroma@v2.15.0...v2.19.0)

Updates `github.com/go-chi/chi/v5` from 5.2.1 to 5.2.2
- [Release notes](https://github.com/go-chi/chi/releases)
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md)
- [Commits](go-chi/chi@v5.2.1...v5.2.2)

Updates `github.com/google/cel-go` from 0.24.1 to 0.26.0
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.24.1...v0.26.0)

Updates `github.com/klauspost/cpuid/v2` from 2.2.10 to 2.3.0
- [Release notes](https://github.com/klauspost/cpuid/releases)
- [Changelog](https://github.com/klauspost/cpuid/blob/master/.goreleaser.yml)
- [Commits](klauspost/cpuid@v2.2.10...v2.3.0)

Updates `github.com/prometheus/client_golang` from 1.19.1 to 1.22.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.19.1...v1.22.0)

Updates `github.com/smallstep/certificates` from 0.26.1 to 0.28.4
- [Release notes](https://github.com/smallstep/certificates/releases)
- [Changelog](https://github.com/smallstep/certificates/blob/master/CHANGELOG.md)
- [Commits](smallstep/certificates@v0.26.1...v0.28.4)

Updates `github.com/smallstep/nosql` from 0.6.1 to 0.7.0
- [Commits](smallstep/nosql@v0.6.1...v0.7.0)

Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.6...v1.0.7)

Updates `github.com/yuin/goldmark` from 1.7.8 to 1.7.13
- [Release notes](https://github.com/yuin/goldmark/releases)
- [Commits](yuin/goldmark@v1.7.8...v1.7.13)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.56.0 to 0.61.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.56.0...zpages/v0.61.0)

Updates `go.opentelemetry.io/contrib/propagators/autoprop` from 0.42.0 to 0.62.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.42.0...zpages/v0.62.0)

Updates `go.opentelemetry.io/otel` from 1.31.0 to 1.37.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.31.0...v1.37.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.31.0 to 1.37.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.31.0...v1.37.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.31.0 to 1.37.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.31.0...v1.37.0)

Updates `golang.org/x/crypto` from 0.36.0 to 0.39.0
- [Commits](golang/crypto@v0.36.0...v0.39.0)

Updates `golang.org/x/net` from 0.38.0 to 0.41.0
- [Commits](golang/net@v0.38.0...v0.41.0)

Updates `golang.org/x/sync` from 0.12.0 to 0.15.0
- [Commits](golang/sync@v0.12.0...v0.15.0)

Updates `golang.org/x/term` from 0.30.0 to 0.32.0
- [Commits](golang/term@v0.30.0...v0.32.0)

Updates `golang.org/x/time` from 0.11.0 to 0.12.0
- [Commits](golang/time@v0.11.0...v0.12.0)

Updates `github.com/libdns/libdns` from 1.0.0-beta.1 to 1.1.0
- [Release notes](https://github.com/libdns/libdns/releases)
- [Commits](libdns/libdns@v1.0.0-beta.1...v1.1.0)

Updates `github.com/pires/go-proxyproto` from 0.7.1-0.20240628150027-b718e7ce4964 to 0.8.1
- [Release notes](https://github.com/pires/go-proxyproto/releases)
- [Commits](https://github.com/pires/go-proxyproto/commits/v0.8.1)

Updates `github.com/prometheus/client_model` from 0.5.0 to 0.6.1
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](prometheus/client_model@v0.5.0...v0.6.1)

Updates `go.opentelemetry.io/otel/trace` from 1.31.0 to 1.37.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.31.0...v1.37.0)

Updates `go.step.sm/crypto` from 0.45.0 to 0.67.0
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](smallstep/crypto@v0.45.0...v0.67.0)

Updates `golang.org/x/sys` from 0.31.0 to 0.33.0
- [Commits](golang/sys@v0.31.0...v0.33.0)

---
updated-dependencies:
- dependency-name: github.com/BurntSushi/toml
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: github.com/KimMachineGun/automemlimit
  dependency-version: 0.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: github.com/alecthomas/chroma/v2
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: github.com/go-chi/chi/v5
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: github.com/google/cel-go
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: github.com/klauspost/cpuid/v2
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: github.com/smallstep/certificates
  dependency-version: 0.28.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: github.com/smallstep/nosql
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: github.com/yuin/goldmark
  dependency-version: 1.7.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-version: 0.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: go.opentelemetry.io/contrib/propagators/autoprop
  dependency-version: 0.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: golang.org/x/crypto
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: golang.org/x/net
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: golang.org/x/sync
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: golang.org/x/term
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: golang.org/x/time
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: github.com/libdns/libdns
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: github.com/pires/go-proxyproto
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: go.step.sm/crypto
  dependency-version: 0.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: golang.org/x/sys
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 24, 2025
This was referenced Jul 24, 2025
Closed
Closed
Closed
Closed
@CLAassistant
Copy link

CLAassistant commented Jul 24, 2025

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@dependabot dependabot bot mentioned this pull request Jul 24, 2025
Closed
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 29, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jul 29, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/all-updates-abc96c97c8 branch July 29, 2025 18:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@CLAassistant