chore(deps): Update go minor and patch by renovate[bot] · Pull Request #2254 · dgraph-io/badger

renovate · 2026-02-01T02:30:13Z

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/dgraph-io/ristretto/v2	`v2.2.0` → `v2.4.0`
github.com/google/flatbuffers	`v25.2.10+incompatible` → `v25.12.19+incompatible`
github.com/klauspost/compress	`v1.18.0` → `v1.18.6`
github.com/spf13/cobra	`v1.9.1` → `v1.10.2`
github.com/stretchr/testify	`v1.10.0` → `v1.11.1`
go.opentelemetry.io/contrib/zpages	`v0.62.0` → `v0.68.0`
golang.org/x/sys	`v0.35.0` → `v0.43.0`
google.golang.org/protobuf	`v1.36.7` → `v1.36.11`

Release Notes

dgraph-io/ristretto (github.com/dgraph-io/ristretto/v2)

`v2.4.0`

Compare Source

Added

Implement public Cache.IterValues() method (#475)
Allow custom key types with underlying types in Key constraint (#478)

Fixed

Fix compilation on 32-bit archs (#465)

Full Changelog: dgraph-io/ristretto@v2.3.0...v2.4.0

`v2.3.0`: Ristretto v2.3.0

Compare Source

What's Changed

chore(deps): Update go minor and patch by @renovate[bot] in hypermodeinc#447
Add public Cache.RemainingCost() method by @xl-s in hypermodeinc#448
chore(deps): Update module golang.org/x/sys to v0.33.0 by @renovate[bot] in hypermodeinc#449
chore(deps): Update dependency go to v1.24.3 by @renovate[bot] in hypermodeinc#450
chore(deps): Update dependency go to v1.24.4 by @renovate[bot] in hypermodeinc#453
Fix assertion in TestDropUpdates and trunk upgrade by @mangalaman93 in hypermodeinc#452
trunk upgrade by @mangalaman93 in hypermodeinc#454
Fix typo: ffor → for by @maximal in hypermodeinc#456
chore(deps): Update module golang.org/x/sys to v0.34.0 by @renovate[bot] in hypermodeinc#457
chore(deps): Update dependency go to v1.24.5 by @renovate[bot] in hypermodeinc#458
fix: correct grammar in error message by @Fungx in hypermodeinc#461
feat: Support uint Keys by @jcalabro in hypermodeinc#463
chore(deps): Update go minor and patch by @renovate[bot] in hypermodeinc#462

New Contributors

@xl-s made their first contribution in hypermodeinc#448
@maximal made their first contribution in hypermodeinc#456
@Fungx made their first contribution in hypermodeinc#461
@jcalabro made their first contribution in hypermodeinc#463

Full Changelog: dgraph-io/ristretto@v2.2.0...v2.3.0

google/flatbuffers (github.com/google/flatbuffers)

`v25.12.19+incompatible`

Compare Source

`v25.9.23+incompatible`

Compare Source

klauspost/compress (github.com/klauspost/compress)

`v1.18.6`

Compare Source

What's Changed

s2: Fix amd64 stack frame corruption by @klauspost in #1145
gzhttp: Canonicalize ETag header by @justinmayhew in #1139
perf: pool hash tables in Go encode paths to reduce allocations by @huynhanx03 in #1143

New Contributors

@justinmayhew made their first contribution in #1139
@huynhanx03 made their first contribution in #1143
@thaJeztah made their first contribution in #1144

Full Changelog: klauspost/compress@v1.18.5...v1.18.6

`v1.18.5`

Compare Source

What's Changed

zstd: Fix crash when changing encoder dictionary with same ID by @klauspost in #1135
zstd: Default to full zero frames by @klauspost in #1134
flate: Clean up histogram order by @klauspost in #1133

Full Changelog: klauspost/compress@v1.18.4...v1.18.5

`v1.18.4`

Compare Source

What's Changed

gzhttp: Add zstandard to server handler wrapper by @klauspost in #1121
zstd: Add ResetWithOptions to encoder/decoder by @klauspost in #1122
gzhttp: preserve qvalue when extra parameters follow in Accept-Encoding by @analytically in #1116

New Contributors

@analytically made their first contribution in #1116
@ethaizone made their first contribution in #1124
@zwass made their first contribution in #1125

Full Changelog: klauspost/compress@v1.18.2...v1.18.4

`v1.18.3`

Compare Source

Downstream CVE-2025-61728

See golang/go#77102

Full Changelog: klauspost/compress@v1.18.2...v1.18.3

`v1.18.2`

Compare Source

What's Changed

flate: Fix invalid encoding on level 9 with single value input by @klauspost in #1115
flate: reduce stateless allocations by @RXamzin in #1106
build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 in the github-actions group by @dependabot[bot] in #1111

v1.18.1 is marked "retracted" due to invalid flate/zip/gzip encoding.

New Contributors

@RXamzin made their first contribution in #1106

Full Changelog: klauspost/compress@v1.18.1...v1.18.2

`v1.18.1`

Compare Source

What's Changed

zstd: Fix incorrect buffer size in dictionary encodes by @klauspost in #1059
s2: check for cap, not len of buffer in EncodeBetter/Best by @vdarulis in #1080
zstd: Add simple zstd EncodeTo/DecodeTo functions by @klauspost in #1079
zlib: Avoiding extra allocation in zlib.reader.Reset by @travelpolicy in #1086
gzhttp: remove redundant err check in zstdReader by @ryanfowler in #1090
Run modernize. Deprecate Go 1.22 by @klauspost in #1095
flate: Simplify matchlen by @klauspost in #1101
flate: Add examples by @klauspost in #1102
flate: Use exact sizes for huffman tables by @klauspost in #1103
flate: Faster load+store by @klauspost in #1104
Add notice to S2 about MinLZ by @klauspost in #1065

New Contributors

@wooffie made their first contribution in #1069
@vdarulis made their first contribution in #1080
@travelpolicy made their first contribution in #1086
@ryanfowler made their first contribution in #1090

Full Changelog: klauspost/compress@v1.18.0...v1.18.1

spf13/cobra (github.com/spf13/cobra)

`v1.10.2`

Compare Source

🔧 Dependencies

chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @dims in #2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

Fix linter and allow CI to pass by @marckhouzam in #2327
fix: actions/setup-go v6 by @jpmcb in #2337

🔥✍🏼 Docs

Add documentation for repeated flags functionality by @rvergis in #2316

🍂 Refactors

refactor: replace several vars with consts by @htoyoda18 in #2328
refactor: change minUsagePadding from var to const by @ssam18 in #2325

🤗 New Contributors

@rvergis made their first contribution in #2316
@htoyoda18 made their first contribution in #2328
@ssam18 made their first contribution in #2325
@dims made their first contribution in #2336

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

`v1.10.1`

Compare Source

🐛 Fix

chore: upgrade pflags v1.0.9 by @jpmcb in #2305

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

`v1.10.0`

Compare Source

What's Changed

🚨 Attention!

Bump pflag to 1.0.8 by @tomasaschan in #2303

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`
or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: #2303 (comment)

✨ Features

Flow context to command in SetHelpFunc by @Frassle in #2241
The default ShellCompDirective can be customized for a command and its subcommands by @albers in #2238

🐛 Fix

Upgrade golangci-lint to v2, address findings by @scop in #2279

🪠 Testing

Test with Go 1.24 by @harryzcy in #2236
chore: Rm GitHub Action PR size labeler by @jpmcb in #2256

📝 Docs

Remove traling curlybrace by @yedayak in #2237
Update command.go by @styee in #2248
feat: Add security policy by @jpmcb in #2253
Update Readme (Warp) by @ericdachen in #2267
Add Periscope to the list of projects using Cobra by @anishathalye in #2299

New Contributors

@harryzcy made their first contribution in #2236
@yedayak made their first contribution in #2237
@Frassle made their first contribution in #2241
@styee made their first contribution in #2248
@ericdachen made their first contribution in #2267
@albers made their first contribution in #2238
@anishathalye made their first contribution in #2299
@tomasaschan made their first contribution in #2303

Full Changelog: spf13/cobra@v1.9.1...v1.9.2

stretchr/testify (github.com/stretchr/testify)

`v1.11.1`

Compare Source

This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Backport #1786 to release/1.11: mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in #1788

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

`v1.11.0`

Compare Source

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Call stack perf change for CallerInfo by @mikeauclair in #1614
Lazily render mock diff output on successful match by @mikeauclair in #1615
assert: check early in Eventually, EventuallyWithT, and Never by @cszczepaniak in #1427
assert: add IsNotType by @bartventer in #1730
assert.JSONEq: shortcut if same strings by @dolmen in #1754
assert.YAMLEq: shortcut if same strings by @dolmen in #1755
assert: faster and simpler isEmpty using reflect.Value.IsZero by @dolmen in #1761
suite: faster methods filtering (internal refactor) by @dolmen in #1758

Fixes

assert.ErrorAs: log target type by @craig65535 in #1345
Fix failure message formatting for Positive and Negative asserts in #1062
Improve ErrorIs message when error is nil but an error was expected by @tsioftas in #1681
fix Subset/NotSubset when calling with mixed input types by @siliconbrain in #1729
Improve ErrorAs failure message when error is nil by @ccoVeille in #1734
mock.AssertNumberOfCalls: improve error msg by @3scalation in #1743

Documentation, Build & CI

docs: Fix typo in README by @alexandear in #1688
Replace deprecated io/ioutil with io and os by @alexandear in #1684
Document consequences of calling t.FailNow() by @greg0ire in #1710
chore: update docs for Unset #1621 by @techfg in #1709
README: apply gofmt to examples by @alexandear in #1687
refactor: use %q and %T to simplify fmt.Sprintf by @alexandear in #1674
Propose Christophe Colombier (ccoVeille) as approver by @brackendawson in #1716
Update documentation for the Error function in assert or require package by @architagr in #1675
assert: remove deprecated build constraints by @alexandear in #1671
assert: apply gofumpt to internal test suite by @ccoVeille in #1739
CI: fix shebang in .ci.*.sh scripts by @dolmen in #1746
assert,require: enable parallel testing on (almost) all top tests by @dolmen in #1747
suite.Passed: add one more status test report by @Ararsa-Derese in #1706
Add Helper() method in internal mocks and assert.CollectT by @dolmen in #1423
assert.Same/NotSame: improve usage of Sprintf by @ccoVeille in #1742
mock: enable parallel testing on internal testsuite by @dolmen in #1756
suite: cleanup use of 'testing' internals at runtime by @dolmen in #1751
assert: check test failure message for Empty and NotEmpty by @ccoVeille in #1745
deps: fix dependency cycle with objx (again) by @dolmen in #1567
assert.Empty: comprehensive doc of "Empty"-ness rules by @dolmen in #1753
doc: improve godoc of top level 'testify' package by @dolmen in #1760
assert.ErrorAs: simplify retrieving the type name by @ccoVeille in #1740
assert.EqualValues: improve test coverage to 100% by @dolmen in #1763
suite.Run: simplify running of Setup/TeardownSuite by @renzoarreaza in #1769
assert.CallerInfo: micro optimization by using LastIndexByte by @dolmen in #1767
assert.CallerInfo: micro cleanup by @dolmen in #1768
assert: refactor TestFileExists and TestDirExists tests to enable parallel testing by @dolmen in #1766
suite.Run: refactor handling of stats for improved readability by @dolmen in #1764
tests: improve captureTestingT helper by @ccoVeille in #1741
build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #1778

New Contributors

@greg0ire made their first contribution in #1710
@techfg made their first contribution in #1709
@mikeauclair made their first contribution in #1614
@cszczepaniak made their first contribution in #1427
@architagr made their first contribution in #1675
@tsioftas made their first contribution in #1681
@siliconbrain made their first contribution in #1729
@bartventer made their first contribution in #1730
@Ararsa-Derese made their first contribution in #1706
@renzoarreaza made their first contribution in #1769
@3scalation made their first contribution in #1743

Full Changelog: stretchr/testify@v1.10.0...v1.11.0

protocolbuffers/protobuf-go (google.golang.org/protobuf)

`v1.36.11`

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.10...v1.36.11

User-visible changes:
CL/726780: encoding/prototext: Support URL chars in type URLs in text-format.

Bug fixes:
CL/728680: internal/impl: check recursion limit in lazy decoding validation
CL/711015: reflect/protodesc: fix handling of import options in dynamic builds

Maintenance:
CL/728681: reflect/protodesc: add support for edition unstable
CL/727960: all: add EDITION_UNSTABLE support
CL/727940: types: regenerate using latest protobuf v33.2 release
CL/727140: internal/testprotos/lazy: convert .proto files to editions
CL/723440: cmd/protoc-gen-go: add missing annotations for few generated protobuf symbols.
CL/720980: internal/filedesc: remove duplicative Message.unmarshalOptions
CL/716360: internal/encoding/tag: use proto3 defaults if proto3
CL/716520: proto: un-flake TestHasExtensionNoAlloc
CL/713342: compiler/protogen: properly filter option dependencies in go-protobuf plugin.
CL/711200: proto: add test for oneofs containing messages with required fields
CL/710855: proto: add explicit test for a non-nil but empty byte slice

`v1.36.10`

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.9...v1.36.10

Bug fixes:
CL/704415: reflect/protodesc: edition-2024-specific properties should not be lost when converting FileDescriptorProto to protoreflect.FileDescriptor

Maintenance:
CL/708555: internal/race_test: add missing impl.LazyEnabled() t.Skip
CL/703295: proto: add more invalid group encoding test cases
CL/703276: internal/impl: verify lazy unmarshal on Deterministic encoding
CL/703275: internal/impl: stop using deprecated .Field in lazy_test.go
CL/702795: all: update to latest github.com/google/go-cmp

`v1.36.9`

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.8...v1.36.9

User-visible changes:
CL/699715: cmd/protoc-gen-go: add test for "import option" directive
CL/699115: internal/editionssupport: declare support for edition 2024
CL/697595: editions: Fix spelling mistake in panic message

`v1.36.8`

Compare Source

Maintenance:

CL/696316: all: set Go language version to Go 1.23
CL/696315: types: regenerate using latest protobuf v32 release

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-02-01T02:30:15Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

6 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.23.0` -> `1.25.0`
`go.opentelemetry.io/otel`	`v1.37.0` -> `v1.43.0`
`github.com/spf13/pflag`	`v1.0.6` -> `v1.0.9`
`go.opentelemetry.io/auto/sdk`	`v1.1.0` -> `v1.2.1`
`go.opentelemetry.io/otel/metric`	`v1.37.0` -> `v1.43.0`
`go.opentelemetry.io/otel/sdk`	`v1.37.0` -> `v1.43.0`
`go.opentelemetry.io/otel/trace`	`v1.37.0` -> `v1.43.0`

CLAassistant · 2026-02-01T02:30:19Z

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

renovate Bot requested a review from a team as a code owner February 1, 2026 02:30

renovate Bot force-pushed the renovate/go-minor-and-patch branch 4 times, most recently from 6a1608f to b9ce655 Compare February 11, 2026 10:05

renovate Bot force-pushed the renovate/go-minor-and-patch branch from b9ce655 to af6dbd5 Compare February 12, 2026 22:02

renovate Bot force-pushed the renovate/go-minor-and-patch branch from af6dbd5 to 36c46d1 Compare February 26, 2026 15:17

renovate Bot force-pushed the renovate/go-minor-and-patch branch 4 times, most recently from bcf867e to 5f60cc9 Compare March 9, 2026 22:40

renovate Bot force-pushed the renovate/go-minor-and-patch branch 3 times, most recently from 09f1fcc to e655702 Compare March 27, 2026 20:50

renovate Bot force-pushed the renovate/go-minor-and-patch branch 3 times, most recently from 4ea87b6 to 0328640 Compare April 10, 2026 08:54

renovate Bot force-pushed the renovate/go-minor-and-patch branch 7 times, most recently from 26f05c2 to f31a390 Compare April 20, 2026 00:26

chore(deps): Update go minor and patch

e2e8d8d

renovate Bot force-pushed the renovate/go-minor-and-patch branch from f31a390 to e2e8d8d Compare May 3, 2026 16:56

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Update go minor and patch#2254

chore(deps): Update go minor and patch#2254
renovate[bot] wants to merge 1 commit intomainfrom
renovate/go-minor-and-patch

renovate Bot commented Feb 1, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Feb 1, 2026 •

edited

Loading

Uh oh!

CLAassistant commented Feb 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Feb 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Added

Fixed

v2.3.0: Ristretto v2.3.0

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

🔧 Dependencies

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

🐛 Fix

What's Changed

🚨 Attention!

✨ Features

🐛 Fix

🪠 Testing

📝 Docs

New Contributors

What's Changed

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

New Contributors

Configuration

Uh oh!

renovate Bot commented Feb 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

CLAassistant commented Feb 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Feb 1, 2026 •

edited

Loading

`v2.3.0`: Ristretto v2.3.0

renovate Bot commented Feb 1, 2026 •

edited

Loading