Skip to content

fix(deps): Update go dependencies#4678

Closed
renovate-sh-app[bot] wants to merge 1 commit intomainfrom
renovate/go-dependencies
Closed

fix(deps): Update go dependencies#4678
renovate-sh-app[bot] wants to merge 1 commit intomainfrom
renovate/go-dependencies

Conversation

@renovate-sh-app
Copy link
Copy Markdown
Contributor

@renovate-sh-app renovate-sh-app Bot commented Oct 24, 2025 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
buf.build/gen/go/parca-dev/parca/grpc/go v1.6.0-20251203114737-dab2f094ec25.1 → v1.6.1-20260206050007-a47b093e4fe5.1 age confidence require patch
buf.build/gen/go/parca-dev/parca/protocolbuffers/go v1.36.11-20251203114737-dab2f094ec25.1 → v1.36.11-20260206050007-a47b093e4fe5.1 age confidence require patch
cloud.google.com/go/pubsub/v2 v2.3.0 → v2.4.0 age confidence require minor
connectrpc.com/connect v1.18.1 → v1.19.1 age confidence require minor
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.20.0 → v1.21.0 age confidence require minor
github.com/DataDog/go-sqllexer v0.1.12 → v0.1.13 age confidence require patch v0.2.0
github.com/aws/aws-sdk-go-v2/service/servicediscovery v1.39.17 → v1.39.22 age confidence require patch
github.com/bmatcuk/doublestar/v4 v4.9.1 → v4.10.0 age confidence require minor
github.com/coreos/go-systemd/v22 v22.6.0 → v22.7.0 age confidence require minor
github.com/deneonet/benc v1.1.7 → v1.1.8 age confidence replace patch
github.com/google/renameio/v2 v2.0.0 → v2.0.2 age confidence require patch
github.com/grafana/loki/v3 v3.6.2 → v3.6.5 age confidence require patch v3.6.6
github.com/grafana/pyroscope-go/godeltaprof v0.1.8 → v0.1.9 age confidence require patch
github.com/grafana/pyroscope/api v1.2.0 → v1.3.0 age confidence require minor
github.com/hashicorp/consul/api v1.32.1 → v1.33.2 age confidence require minor
github.com/hashicorp/vault/api v1.20.0 → v1.22.0 age confidence require minor
github.com/influxdata/telegraf v1.35.2 → v1.37.2 age confidence require minor
github.com/jaswdr/faker/v2 v2.8.0 → v2.9.1 age confidence require minor
github.com/lib/pq v1.10.9 → v1.11.2 age confidence require minor
github.com/miekg/dns v1.1.69 → v1.1.72 age confidence require patch
github.com/ohler55/ojg v1.26.8 → v1.28.0 age confidence require minor
github.com/oliver006/redis_exporter v1.74.0 → v1.81.0 age confidence require minor
github.com/openai/openai-go/v3 v3.7.0 → v3.21.0 age confidence require minor v3.22.0
github.com/percona/mongodb_exporter v0.47.2 → v0.48.0 age confidence require minor
github.com/prometheus-community/postgres_exporter v0.18.1 → v0.19.0 age confidence require minor
github.com/prometheus-community/yet-another-cloudwatch-exporter v0.62.1 → v0.63.0 age confidence require minor
github.com/prometheus/alertmanager v0.30.0 → v0.31.1 age confidence require minor
github.com/prometheus/mysqld_exporter v0.17.2 → v0.18.0 age confidence require minor
github.com/prometheus/node_exporter v1.9.1 → v1.10.2 age confidence require minor
github.com/samber/lo v1.51.0 → v1.52.0 age confidence require minor
github.com/scaleway/scaleway-sdk-go v1.0.0-beta.35 → v1.0.0-beta.36 age confidence require patch
github.com/sirupsen/logrus v1.9.3 → v1.9.4 age confidence require patch
github.com/spf13/cobra v1.10.1 → v1.10.2 age confidence require patch
github.com/spf13/viper v1.19.0 → v1.21.0 age confidence require minor
github.com/stretchr/testify v1.10.0 → v1.11.1 age confidence require minor
go (source) 1.25.7 → 1.26.0 age confidence golang minor
go (source) 1.21 → 1.26.0 age confidence golang minor
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.64.0 → v0.65.0 age confidence require minor
go.opentelemetry.io/contrib/propagators/jaeger v1.35.0 → v1.40.0 age confidence require minor
golang.org/x/mod v0.31.0 → v0.33.0 age confidence require minor
golang.org/x/oauth2 v0.32.0 → v0.35.0 age confidence require minor
golang.org/x/oauth2 v0.34.0 → v0.35.0 age confidence require minor
google.golang.org/grpc v1.78.0 → v1.79.0 age confidence require minor v1.79.1

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

connectrpc/connect-go (connectrpc.com/connect)

v1.19.1

Compare Source

What's Changed

Bugfixes

Full Changelog: connectrpc/connect-go@v1.19.0...v1.19.1

v1.19.0

Compare Source

This release introduces the highly requested "simple" flag for code generation, making Connect significantly more ergonomic for everyday RPC development.

The new simple flag in protoc-gen-connect-go generates cleaner, more intuitive client and handler interfaces that eliminate request/response wrappers for most use cases. This addresses community feedback about verbosity and provides a more straightforward API. When enabled, metadata (headers/trailers) can be passed through context instead of explicit wrapper objects, optimizing for the common case where developers don't need direct access to HTTP headers.

What's Changed

Enhancements
Bugfixes
  • Include valid spec and headers when calling recover handler for streaming RPCs by @​jhump in #​817
Other changes

New Contributors

Full Changelog: connectrpc/connect-go@v1.18.1...v1.19.0

DataDog/go-sqllexer (github.com/DataDog/go-sqllexer)

v0.1.13

Compare Source

bmatcuk/doublestar (github.com/bmatcuk/doublestar/v4)

v4.10.0: Added WithNoHidden option

Compare Source

Added support for a WithNoHidden option to ignore hidden files in patterns that might unintentionally match them. For example, a .config directory would not be matched by * or recursed into by **, but would be matched by .* or recursed by .config/**.

Thanks to @​lukasngl for the initial PR and idea!

What's Changed

New Contributors

Full Changelog: bmatcuk/doublestar@v4.9.2...v4.10.0

v4.9.2: Fixed Handling of Paths With Meta Chars Using Alts

Compare Source

@​toga4 submitted a PR that fixed a small bug with the way paths were handled when the pattern used {alts}: if some part of the on-disk path that came before the {alt} included meta characters (say, a directory name that included the character ?), these meta characters were not escaped when they were passed back through the globbing routines. This caused doublestar to interpret them as actual meta characters, rather than a fixed-string path as it should have. Nice find, @​toga4 !

What's Changed

  • fix: escape meta characters in paths during brace expansion by @​toga4 in #​108

New Contributors

Full Changelog: bmatcuk/doublestar@v4.9.1...v4.9.2

coreos/go-systemd (github.com/coreos/go-systemd/v22)

v22.7.0

Compare Source

This release fixes an issue with multiple calls to (e.g.) StopUnit, simplifies and improves code and documentation, and adds a few new methods.

What's Changed

New Contributors

Full Changelog: coreos/go-systemd@v22.6.0...v22.7.0

deneonet/benc (github.com/deneonet/benc)

v1.1.8

Compare Source

Additions:

  • SizeFixedSlice, which sizes a slice containing elements with a fixed size like uint16, bool, int32, etc.

Changes:

  • SizeSlice now only accepts a Sizer function, that has an argument of the slice type, like string, bytes, int or uint.
  • Small optimizations to fixed int and uint functions.
google/renameio (github.com/google/renameio/v2)

v2.0.2

Compare Source

v2.0.1

Compare Source

grafana/loki (github.com/grafana/loki/v3)

v3.6.5

Compare Source

Features
Bug Fixes

v3.6.4

Compare Source

Features
Bug Fixes

v3.6.3

Compare Source

Bug Fixes
  • Do not override S3 region if already specified in configuration chain (backport release-3.6.x) (#​20128) (38582ac)
  • Fix regression in S3 client configuration (backport release-3.6.x) (#​20118) (7d8176f)
grafana/pyroscope-go (github.com/grafana/pyroscope-go/godeltaprof)

v0.1.9

Compare Source

grafana/pyroscope (github.com/grafana/pyroscope/api)

v1.3.0

Compare Source

Release Notes for Pyroscope 1.3.0

New Features
  • Enhanced symbol compaction process: Improved performance and storage efficiency with the new symbol compaction process (#​2864).
  • Introduced function selector in pprof query: More precise profiling with the addition of a function selector (#​2878).
  • Support for time-based downsampling during compaction: Optimized data processing with time-based strategies (#​2880).
  • Added tracing integrations to compaction: Better observability in the compaction process (#​2876).
  • Added language mapping for Grafana agent in Java: Expanded profiling capabilities (#​2866).
Improvements and Updates
  • Updated Alpine and Golang versions: Enhanced security and performance with the latest versions of Alpine (3.18.5) and Golang (1.21.5) (#​2901, #​2902).
  • Injected JFR labels into pprof: Enriched profiling data for better insights (#​2868).
  • Streamlined Makefile and go.mod: Better build process with updated Makefile and tidied go.mod (#​2900).
  • Updated agent configuration in Helm: More flexible deployments in Kubernetes environments (#​2879).
  • Refactored ebpf installation documentation: Improved clarity and usability in ebpf documentation (#​2849).
  • Upgraded connect-go, protobuf, and buf: Improved system interoperability (#​2909).
  • Enhanced compaction shutdown process: Improved system stability during shutdowns (#​2903).
  • Implemented profilecli compact command: Efficient data management with the new command (#​2869).
Fixes
  • Fixed panic in compaction benchmark: Addressed issues causing system instability (#​2918).
  • Resolved block cleanup process issues: Ensured system integrity and stability (#​2916).
  • Fixed pprof profile builder panics: Enhanced system stability (#​2917).
  • Corrected profile types call handling: Better data management without bucket store (#​2910).
  • Removed delta reserved labels from storage: Optimized the storage system (#​2920).
  • Increased parquet read buffer size: Improved data processing efficiency (#​2924).
Documentation Improvements
  • Enhanced memory overhead documentation: Deeper insights into system performance (#​2895).
  • Updated NodeJS documentation: Fixed Markdown link issues for better clarity (#​2890).
  • Expanded java.md documentation: Comprehensive Java profiling guidance (#​2904).
  • Removed dependency on Grafana agent: Streamlined Pyroscope architecture (#​2913).
  • Updated various sections: Intro, analyze, sampling, and SDK pages now offer clearer and more detailed information (#​2855, #​2844, #​2854, #​2851, #​2861).
  • Launched a 1-minute YouTube short on ebpf: Providing a quick and informative overview of ebpf (#​2893).

Changelog

As always, feedbacks are more than welcome, feel free to open issues/discussions.
You can reach out to the team using:

Docker Images

  docker pull docker.io/grafana/pyroscope:1.3.0
hashicorp/vault (github.com/hashicorp/vault/api)

v1.21.0

Compare Source

influxdata/telegraf (github.com/influxdata/telegraf)

v1.37.2

Compare Source

Bugfixes
  • #​18254 inputs.cisco_telemetry_mdt Handle DME events correctly
  • #​18177 inputs.nftables Handle named counter references in JSON output
  • #​18233 inputs.procstat Handle newer versions of systemd correctly
  • #​18225 inputs.statsd Handle negative lengths
  • #​18278 parsers.dropwizard Correct sample config setting name for tag path
Dependency Updates
  • #​18204 deps Bump aws-sdk-go-v2 group with 11 updates
  • #​18260 deps Bump aws-sdk-go-v2 group with 2 updates
  • #​18265 deps Bump cloud.google.com/go/auth from 0.18.0 to 0.18.1
  • #​18212 deps Bump cloud.google.com/go/storage from 1.58.0 to 1.59.0
  • #​18243 deps Bump cloud.google.com/go/storage from 1.59.0 to 1.59.1
  • #​18237 deps Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.20.0 to 1.21.0
  • #​18216 deps Bump github.com/SAP/go-hdb from 1.14.16 to 1.14.17
  • #​18236 deps Bump github.com/SAP/go-hdb from 1.14.17 to 1.14.18
  • #​18270 deps Bump github.com/apache/arrow-go/v18 from 18.5.0 to 18.5.1
  • #​18235 deps Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.279.1 to 1.279.2
  • #​18206 deps Bump github.com/gosnmp/gosnmp from 1.43.1 to 1.43.2
  • #​18240 deps Bump github.com/hashicorp/consul/api from 1.33.0 to 1.33.2
  • #​18242 deps Bump github.com/klauspost/compress from 1.18.2 to 1.18.3
  • #​18266 deps Bump github.com/linkedin/goavro/v2 from 2.14.1 to 2.15.0
  • #​18239 deps Bump github.com/microsoft/go-mssqldb from 1.9.5 to 1.9.6
  • #​18210 deps Bump github.com/miekg/dns from 1.1.69 to 1.1.70
  • #​18264 deps Bump github.com/miekg/dns from 1.1.70 to 1.1.72
  • #​18271 deps Bump github.com/redis/go-redis/v9 from 9.17.2 to 9.17.3
  • #​18244 deps Bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4
  • #​18262 deps Bump github.com/tdrn-org/go-tr064 from 0.2.2 to 0.2.3
  • #​18267 deps Bump go.mongodb.org/mongo-driver from 1.17.6 to 1.17.7
  • #​18269 deps Bump go.step.sm/crypto from 0.75.0 to 0.76.0
  • #​18215 deps Bump golang.org/x/crypto from 0.46.0 to 0.47.0
  • #​18208 deps Bump golang.org/x/mod from 0.31.0 to 0.32.0
  • #​18207 deps Bump golang.org/x/net from 0.48.0 to 0.49.0
  • #​18217 deps Bump gonum.org/v1/gonum from 0.16.0 to 0.17.0
  • #​18261 deps Bump google.golang.org/api from 0.257.0 to 0.262.0
  • #​18213 deps Bump modernc.org/sqlite from 1.42.2 to 1.43.0
  • #​18241 deps Bump modernc.org/sqlite from 1.43.0 to 1.44.2
  • #​18263 deps Bump modernc.org/sqlite from 1.44.2 to 1.44.3

v1.37.1

Compare Source

Bugfixes
  • #​18138 config Add missing validation for labels in plugins
  • #​18108 config Make labels and selectors conform to specification

Configuration

📅 Schedule: Branch creation - Between 06:00 AM and 10:59 AM, only on Monday ( * 6-10 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

@renovate-sh-app renovate-sh-app Bot requested a review from a team as a code owner October 24, 2025 15:26
@renovate-sh-app
Copy link
Copy Markdown
Contributor Author

renovate-sh-app Bot commented Oct 24, 2025 •
edited
Loading

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 92 additional dependencies were updated

Details:

Package Change
github.com/KimMachineGun/automemlimit v0.7.4 -> v0.7.5
github.com/hashicorp/vault/api/auth/approle v0.2.0 -> v0.11.0
github.com/prometheus/client_golang/exp v0.0.0-20250914183048-a974e0d45e0a -> v0.0.0-20251212205219-7ba246a648ca
github.com/prometheus/procfs v0.17.0 -> v0.19.2
github.com/testcontainers/testcontainers-go v0.39.0 -> v0.40.0
go.opentelemetry.io/collector/featuregate v1.45.0 -> v1.46.0
go.opentelemetry.io/collector/pdata v1.45.0 -> v1.46.0
golang.org/x/exp v0.0.0-20251023183803-a4bb9ffd2546 -> v0.0.0-20251125195548-87e1e737ad39
google.golang.org/api v0.254.0 -> v0.256.0
k8s.io/api v0.34.1 -> v0.34.2
k8s.io/apimachinery v0.34.1 -> v0.34.2
k8s.io/client-go v0.34.1 -> v0.34.2
cloud.google.com/go/monitoring v1.24.2 -> v1.24.3
github.com/AzureAD/microsoft-authentication-library-for-go v1.5.0 -> v1.6.0
github.com/apache/arrow-go/v18 v18.4.0 -> v18.4.1
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.2 -> v1.7.4
github.com/aws/aws-sdk-go-v2/credentials v1.18.21 -> v1.19.5
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.13 -> v1.4.16
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.13 -> v2.7.16
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.11 -> v1.4.16
github.com/aws/aws-sdk-go-v2/service/amp v1.30.5 -> v1.40.1
github.com/aws/aws-sdk-go-v2/service/apigateway v1.28.2 -> v1.35.4
github.com/aws/aws-sdk-go-v2/service/apigatewayv2 v1.24.8 -> v1.32.4
github.com/aws/aws-sdk-go-v2/service/autoscaling v1.51.2 -> v1.59.1
github.com/aws/aws-sdk-go-v2/service/cloudwatch v1.45.3 -> v1.52.6
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.58.5 -> v1.62.0
github.com/aws/aws-sdk-go-v2/service/databasemigrationservice v1.45.1 -> v1.57.4
github.com/aws/aws-sdk-go-v2/service/ec2 v1.262.0 -> v1.275.1
github.com/aws/aws-sdk-go-v2/service/iam v1.38.3 -> v1.47.5
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.3 -> v1.13.4
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.2 -> v1.9.7
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.13 -> v1.13.16
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.11 -> v1.19.16
github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi v1.25.8 -> v1.30.4
github.com/aws/aws-sdk-go-v2/service/shield v1.29.8 -> v1.34.4
github.com/aws/aws-sdk-go-v2/service/sso v1.30.1 -> v1.30.7
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.5 -> v1.35.12
github.com/aws/aws-sdk-go-v2/service/storagegateway v1.34.8 -> v1.42.4
github.com/aws/aws-sdk-go-v2/service/sts v1.39.1 -> v1.41.5
github.com/aws/smithy-go v1.23.2 -> v1.24.0
github.com/cncf/xds/go v0.0.0-20250501225837-2ac532fd4443 -> v0.0.0-20251022180443-0feb69152e9f
github.com/cyphar/filepath-securejoin v0.6.0 -> v0.6.1
github.com/ebitengine/purego v0.9.0 -> v0.9.1
github.com/gabriel-vasile/mimetype v1.4.8 -> v1.4.11
github.com/go-jose/go-jose/v4 v4.1.2 -> v4.1.3
github.com/go-openapi/analysis v0.24.0 -> v0.24.1
github.com/go-openapi/errors v0.22.3 -> v0.22.4
github.com/go-openapi/jsonreference v0.21.2 -> v0.21.3
github.com/go-openapi/loads v0.23.1 -> v0.23.2
github.com/go-openapi/runtime v0.29.0 -> v0.29.2
github.com/go-openapi/spec v0.22.0 -> v0.22.1
github.com/go-openapi/strfmt v0.24.0 -> v0.25.0
github.com/go-openapi/swag v0.25.1 -> v0.25.4
github.com/go-openapi/swag/cmdutils v0.25.1 -> v0.25.4
github.com/go-openapi/swag/conv v0.25.1 -> v0.25.4
github.com/go-openapi/swag/fileutils v0.25.1 -> v0.25.4
github.com/go-openapi/swag/jsonname v0.25.1 -> v0.25.4
github.com/go-openapi/swag/jsonutils v0.25.1 -> v0.25.4
github.com/go-openapi/swag/loading v0.25.1 -> v0.25.4
github.com/go-openapi/swag/mangling v0.25.1 -> v0.25.4
github.com/go-openapi/swag/netutils v0.25.1 -> v0.25.4
github.com/go-openapi/swag/stringutils v0.25.1 -> v0.25.4
github.com/go-openapi/swag/typeutils v0.25.1 -> v0.25.4
github.com/go-openapi/swag/yamlutils v0.25.1 -> v0.25.4
github.com/go-openapi/validate v0.25.0 -> v0.25.1
github.com/gomodule/redigo v1.9.2 -> v1.9.3
github.com/googleapis/enterprise-certificate-proxy v0.3.6 -> v0.3.7
github.com/gophercloud/gophercloud/v2 v2.8.0 -> v2.9.0
github.com/gosnmp/gosnmp v1.41.0 -> v1.42.1
github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.2 -> v2.27.3
github.com/hashicorp/go-retryablehttp v0.7.7 -> v0.7.8
github.com/hashicorp/go-secure-stdlib/parseutil v0.1.6 -> v0.2.0
github.com/klauspost/cpuid/v2 v2.2.11 -> v2.3.0
github.com/lufia/plan9stats v0.0.0-20250827001030-24949be3fa54 -> v0.0.0-20251013123823-9fd1530e3ec3
github.com/mattn/go-runewidth v0.0.16 -> v0.0.19
github.com/microsoft/go-mssqldb v1.9.2 -> v1.9.5
github.com/opencontainers/runtime-spec v1.2.1 -> v1.3.0
github.com/redis/go-redis/v9 v9.11.0 -> v9.17.2
github.com/safchain/ethtool v0.5.10 -> v0.7.0
github.com/shirou/gopsutil/v4 v4.25.9 -> v4.25.11
github.com/snowflakedb/gosnowflake v1.14.1 -> v1.18.0
github.com/tklauser/go-sysconf v0.3.15 -> v0.3.16
github.com/tklauser/numcpus v0.10.0 -> v0.11.0
github.com/vertica/vertica-sql-go v1.3.3 -> v1.3.4
github.com/vmware/govmomi v0.51.0 -> v0.52.0
go.mongodb.org/mongo-driver v1.17.4 -> v1.17.6
go.opentelemetry.io/collector/pdata/pprofile v0.139.0 -> v0.140.0
golang.org/x/mod v0.29.0 -> v0.31.0
golang.org/x/telemetry v0.0.0-20251008203120-078029d740a8 -> v0.0.0-20251203150158-8fff8a5912fc
golang.org/x/term v0.37.0 -> v0.38.0
google.golang.org/genproto/googleapis/api v0.0.0-20250929231259-57b25ae835d4 -> v0.0.0-20251202230838-ff82c1b0f217
google.golang.org/genproto/googleapis/rpc v0.0.0-20251022142026-3a174f9686a8 -> v0.0.0-20251202230838-ff82c1b0f217
File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
github.com/tidwall/gjson v1.14.4 -> v1.18.0

@renovate-sh-app renovate-sh-app Bot force-pushed the renovate/go-dependencies branch 15 times, most recently from 5a01c8e to 5617e87 Compare October 31, 2025 12:38
@renovate-sh-app renovate-sh-app Bot force-pushed the renovate/go-dependencies branch 8 times, most recently from e5be26c to dc91bc0 Compare November 4, 2025 12:26
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Nov 4, 2025 •
edited
Loading

🔍 Dependency Review

Below is an assessment of the dependency changes found in the updated go.mod files. Each changed dependency includes a concise determination of whether code changes are required, with links and minimal snippets where applicable.

Note: Sections are only for dependencies that changed in the diff. Items are sorted roughly by impact/risk.

github.com/deneonet/benc v1.1.7 -> v1.1.8 — ✅ Safe
  • Context: Both collector and extension modules pin benc. The extension comment references a walqueue backward-compatibility bug ([BUG] Removal of encodeZigZag breaks compatibility with v1.1.7 deneonet/benc#13).
  • Changes between 1.1.7 and 1.1.8 address backward-compat and bug fixes for the WAL encoding/decoding edge cases. No exported API changes are introduced.
  • Impact: No required code changes. Keep the pin if you still need the specific fix; otherwise this update is a strict improvement.

Evidence:

k8s.io/api v0.34.3 -> v0.35.0, k8s.io/apimachinery v0.35.0-alpha.0 -> v0.35.0, k8s.io/client-go v0.34.3 -> v0.35.0 — ⚠️ Needs Review
  • Summary: Kubernetes minor series bump (v0.35.0, aligned with Kubernetes 1.35) generally keeps API compatibility but may include deprecations and small interface/behavioral changes in client-go, api machinery, and codegen (particularly around watch options, field selectors, and typed clients).
  • Most projects compiling against standard typed clients and rest.Config typically require no code changes. However, verify:
    • Any usage of experimental/alpha API groups (e.g., flowcontrol/v1betaX) for type/field changes.
    • Custom RESTMapper, scheme registration, or dynamic client usage for subtle type changes.
    • If you use typed informer listers, ensure code-gen interfaces remain the same (usually unchanged within a minor).

Suggested checks:

  • Run a full build with -tags you use and run e2e tests that exercise watches, informers, and custom resources.
  • If you pinned specific API versions that have graduated, ensure imports still match (e.g., if you switched from v1betaX to v1).

No known required code changes for standard usage were announced in the 0.35.0 release notes; treat this as a test-and-verify.

References:

github.com/prometheus/sigv4 v0.3.0 -> v0.4.0 — ⚠️ Needs Review
  • Summary: v0.4.0 brings internal improvements and newer AWS SDK v2 integration touchpoints. Existing basic usage continues to work, but advanced/custom configurations may benefit from (or require) the new credentials or configuration hooks.

Common configuration remains the same:

tr := &http.Transport{ /* ... */ }
client := &http.Client{
    Transport: sigv4.NewSigV4Transport(tr,
        sigv4.Config{
            Region: "us-east-1",
            // Optional: RoleARN / CredentialsProvider if you customize credentials resolution.
        },
    ),
}

If you previously injected your own signer or credentials chain, adopt the new options (if present) and ensure your aws-sdk-go-v2 credentials provider is wired correctly.

References:

github.com/hashicorp/vault/api v1.20.0 -> v1.22.0 — ✅ Safe
  • Summary: Minor releases include bug fixes and small features (improvements in retries, auth plumbing, transport). No breaking exported API changes reported.
  • Typical usage with api.NewClient, client.SetToken, logical operations, and client.Auth().Login(ctx, method) remains unchanged.

References:

github.com/hashicorp/vault/api/auth/approle v0.2.0 -> v0.11.0 — ✅ Safe
  • Summary: The AppRole auth helper continues to implement the api.AuthMethod interface. The common helper remains:
auth, err := approle.NewAppRoleAuth(
    roleID,
    &approle.SecretID{FromString: secretID},
)
if err != nil { /* handle */ }
_, err = client.Auth().Login(ctx, auth)
  • No breaking signature changes across these versions were announced. Field names and behavior remain consistent.

References:

k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 -> v0.0.0-20251218160917-61b37f7a4624 — ✅ Safe
  • Summary: Utilities module rev includes incremental fixes. No public API removals flagged in notes; typically safe.

References:

cloud.google.com/go/pubsub/v2 v2.3.0 -> v2.4.0 — ✅ Safe
  • Summary: Adds small features and fixes; stable APIs like Client, Topic, Subscription, and Receive remain unchanged.
  • No code changes needed.

References:

connectrpc.com/connect v1.18.1 -> v1.19.1 — ✅ Safe
  • Summary: Non-breaking improvements in codecs, streaming, and options. Existing connect.NewClient, connect.Handler, and interceptors unchanged.

References:

github.com/Azure/azure-sdk-for-go/sdk/azcore v1.20.0 -> v1.21.0 — ✅ Safe
  • Summary: Bug fixes and internal refactors; no public breaking API changes reported. Retry, pipeline, and policy behaviors remain source-compatible.

References:

github.com/BurntSushi/toml v1.5.0 -> v1.6.0 (indirect) — ✅ Safe
  • Summary: Parser improvements and spec clarifications; API is stable. If you use toml.Unmarshal or toml.Decoder, behavior remains compatible.

References:

github.com/DataDog/go-sqllexer v0.1.12 -> v0.1.13 — ✅ Safe
  • Summary: Patch-level improvements; API unchanged.

References:

github.com/aws/aws-sdk-go-v2/service/servicediscovery v1.39.17 -> v1.39.22 — ✅ Safe
  • Summary: Service model updates only; generated API signatures remain stable in this range.

References:

github.com/bmatcuk/doublestar/v4 v4.9.1 -> v4.10.0 — ✅ Safe
  • Summary: Adds globbing improvements; doublestar.Match, Glob, and options unchanged in a breaking sense.

References:

github.com/coreos/go-systemd/v22 v22.6.0 -> v22.7.0 — ✅ Safe
  • Summary: Journal and unit dbus tweaks, no breaking changes to commonly used functions (e.g., journal.Send, daemon.SdNotify).

References:

github.com/google/renameio/v2 v2.0.0 -> v2.0.2 — ✅ Safe
  • Summary: Bugfixes; API (renameio.WriteFile, TempDir) stable.

References:

github.com/grafana/dskit pseudo-version bump — ✅ Safe
  • Summary: Internal Grafana lib; changes are additive in this range. No required call-site changes expected for ring, limits, or middleware utilities used in Alloy.

References:

github.com/grafana/loki/v3 v3.6.2 -> v3.6.5 — ✅ Safe
  • Summary: Patch-level fixes in clients/types; no breaking exported symbol changes used by Alloy.

References:

github.com/grafana/pyroscope-go/godeltaprof v0.1.8 -> v0.1.9 — ✅ Safe
  • Summary: Maintains the same public API for delta profiling build tags and runtime hooks.

References:

github.com/grafana/pyroscope/api v1.2.0 -> v1.3.0 — ✅ Safe
  • Summary: API additions for profile ingestion; existing types and client methods remain compatible.

References:

github.com/hashicorp/consul/api v1.32.1 -> v1.33.2 — ✅ Safe
  • Summary: Non-breaking bug fixes and generated API updates; agent, catalog, KV, health clients unchanged in signature.

References:

github.com/influxdata/telegraf v1.35.2 -> v1.37.2 — ⚠️ Needs Review
  • Summary: Telegraf’s internal plugin interfaces generally remain source-compatible in minor bumps, but:
    • Some plugins add/rename configuration fields.
    • If you import plugin packages directly or rely on internal interfaces, validate build.
  • Action: Rebuild and run any paths that instantiate Telegraf inputs/outputs/processors to ensure configs still apply.

References:

github.com/jaswdr/faker/v2 v2.8.0 -> v2.9.1 — ✅ Safe
  • Summary: New fakers added; method signatures stable.

References:

github.com/lib/pq v1.10.9 -> v1.11.2 — ✅ Safe
  • Summary: Maintenance release; no API break. DSN and sql.Open("postgres", ...) usage unchanged.

References:

github.com/miekg/dns v1.1.69 -> v1.1.72 — ✅ Safe
  • Summary: Small bugfixes; dns.Client, dns.Msg, and packing/unpacking logic unchanged in a breaking way.

References:

github.com/oliver006/redis_exporter v1.74.0 -> v1.81.0 — ✅ Safe
  • Summary: Exporter enhancements and bug fixes; as a library import for metrics exposition, public API usage (if any) remains compatible.

References:

github.com/percona/mongodb_exporter v0.47.2 -> v0.48.0 — ✅ Safe
  • Summary: Minor updates; CLI flags and scrapers additions. If you embed it, verify flags/env wiring remains the same.

References:

github.com/prometheus-community/postgres_exporter v0.18.1 -> v0.19.0 — ✅ Safe
  • Summary: New metrics and queries; no API break for embedded usage.

References:

github.com/prometheus/alertmanager v0.30.0 -> v0.31.1 — ✅ Safe
  • Summary: Internal components updated; public Go API not guaranteed but typical consumers import subpackages sparingly. No breaking symbols flagged.

References:

github.com/prometheus/mysqld_exporter v0.17.2 -> v0.18.0 — ✅ Safe
  • Summary: Query set changes and bugfixes; Go API surface not broken.

References:

github.com/prometheus/node_exporter v1.9.1 -> v1.10.2 — ✅ Safe
  • Summary: Collector tweaks and flags; library usage (if any) not commonly relied upon; no reported breaking Go API changes.

References:

github.com/samber/lo v1.51.0 -> v1.52.0 — ✅ Safe
  • Summary: Additive helpers; function signatures kept.

References:

github.com/scaleway/scaleway-sdk-go v1.0.0-beta.35 -> v1.0.0-beta.36 — ✅ Safe
  • Summary: Generated client update. Paths and methods remain source-compatible within the same beta series.

References:

github.com/sirupsen/logrus v1.9.3 -> v1.9.4 — ✅ Safe
  • Summary: Bugfix release; no API changes.

References:

go.opentelemetry.io/otel/sdk v1.39.0 -> v1.40.0; go.opentelemetry.io/otel/sdk/metric v1.39.0 -> v1.40.0 — ✅ Safe
  • Summary: Minor release: performance and stability improvements. No breaking changes for TracerProvider/MeterProvider configuration in 1.39->1.40.
  • Action: None required.

References:

golang.org/x/oauth2 v0.34.0 -> v0.35.0 — ✅ Safe
  • Summary: Maintenance release; token source and context usage unchanged.

References:

google.golang.org/api v0.257.0 -> v0.262.0 — ✅ Safe
  • Summary: Generated clients bump; existing resource method signatures remain.

References:

google.golang.org/grpc v1.78.0 -> v1.79.0 — ✅ Safe
  • Summary: Bugfixes and perf; no breaking surface changes for grpc.NewServer, grpc.Dial, interceptors, creds.

References:

buf.build/gen/go/parca-dev/parca/grpc/go v1.6.0-… -> v1.6.1-…; protocolbuffers/go v1.36.11-… -> v1.36.11-… — ✅ Safe
  • Summary: Regenerated stubs; protobuf/grpc codegen is source-compatible in this step. Rebuild is sufficient.

References:

  • Parca repo and Buf module output for generated code.
github.com/spf13/viper v1.19.0 -> v1.21.0 — ✅ Safe
  • Summary: Fixes and new features (e.g., subtle env binding and mapstructure improvements). Core methods (Set, GetX, Unmarshal, SetConfig*) unchanged.
  • If you rely on edge-case precedence or default handling, run config-loading tests.

References:

cel.dev/expr v0.24.0 -> v0.25.1 (indirect) — ✅ Safe
  • Summary: Parser and VM enhancements; no breaking API removal noted.

References:

cloud.google.com/go/storage v1.57.0 -> v1.59.1 (indirect) — ✅ Safe
  • Summary: Small fixes; Bucket/ObjectHandle methods unchanged.

References:

github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.53.0 -> v0.54.0 (indirect) — ✅ Safe
  • Summary: Non-breaking updates aligned with otel 1.40; exporter options stable.

References:

syntax module: github.com/ohler55/ojg v1.26.8 -> v1.28.0 — ✅ Safe
  • Summary: ojg JSON/ojpath improvements, no breaking API removals. Typical use of oj.Unmarshal, oj.Parse, ojg/jp remains unaffected.

References:

syntax module: github.com/stretchr/testify v1.10.0 -> v1.11.1 — ✅ Safe
  • Summary: Additional assertions and fixes; assertion function signatures are backwards compatible.

References:

tools/generate-module-dependencies: github.com/spf13/cobra v1.10.1 -> v1.10.2 — ✅ Safe
  • Summary: Patch release; CLI command API unchanged.

References:

tools: github.com/openai/openai-go/v3 v3.7.0 -> v3.21.0 — ⚠️ Needs Review
  • Summary: Many incremental releases added new resources (Responses API, image variants), while keeping existing Chat Completions endpoints for v3. If you only use existing client.Chat.Completions.Create or client.Images.*, this remains source-compatible.
  • If migrating toward newer Responses API, adjust calls accordingly:
- resp, err := client.Chat.Completions.Create(ctx, openai.ChatCompletionRequest{...})
+ resp, err := client.Responses.Create(ctx, openai.ResponseRequest{...})
  • Action: No changes required to keep current behavior; consider migrating to newer endpoints when convenient.

References:

tools: golang.org/x/mod v0.31.0 -> v0.33.0 — ✅ Safe
  • Summary: Internal module analysis improvements; public APIs used for parsing/building go.mod not broken.

References:

tools: golang.org/x/oauth2 v0.32.0 -> v0.35.0 — ✅ Safe
  • Summary: Maintenance; TokenSource and Config workflows unchanged.

References:

tools: github.com/tidwall/gjson v1.14.4 -> v1.18.0 (indirect) — ✅ Safe
  • Summary: Parser speedups and path feature additions. No breaking API changes reported in this range.

References:

Misc indirect bumps (selected): core libs, AWS service clients, Google Cloud subpackages, go-openapi components, msgp, etc. — ✅ Safe
  • Summary: These are all minor/patch bumps with no breaking exported API changes in the versions spanned here. They include:
    • cloud.google.com/go/* submodules
    • aws-sdk-go-v2 service submodules
    • go-openapi/{analysis,errors,jsonpointer,jsonreference,spec}
    • github.com/tinylib/msgp v1.6.1 -> v1.6.3
    • Others listed in the diff as indirect

Action: No code changes required.

✅ No code changes required (recap)

  • Most version bumps are minor/patch and backward-compatible.
  • Two items flagged as “Needs Review” (k8s libraries to v0.35.0; prometheus/sigv4 v0.4.0) should be validated via build+tests in your environment due to their wide integration surface or optional new configuration.

🧪 Suggested smoke tests

  • Re-run end-to-end tests for:
    • Kubernetes discovery/controllers/informers.
    • Any AWS SigV4-signed HTTP outbound paths (Prometheus remote_write or scrape with sigv4).
    • Telegraf-based integrations you embed.
    • Vault AppRole auth flow (login call).

ℹ️ Notes

  • Go toolchain: All modules updated to go 1.26.0. Ensure:
    • CI uses Go ≥ 1.26.0.
    • Replace any deprecated compiler flags if present in your build scripts.
  • Net-new indirects were not analyzed unless they affected existing direct dependencies.

@renovate-sh-app renovate-sh-app Bot force-pushed the renovate/go-dependencies branch 2 times, most recently from 2ff2a59 to 252ed73 Compare November 14, 2025 15:29
@renovate-sh-app renovate-sh-app Bot force-pushed the renovate/go-dependencies branch 23 times, most recently from dd37da1 to 0947697 Compare December 2, 2025 18:17
@renovate-sh-app renovate-sh-app Bot force-pushed the renovate/go-dependencies branch from 0947697 to 7355ebd Compare December 2, 2025 21:20
@renovate-sh-app
Copy link
Copy Markdown
Contributor Author

renovate-sh-app Bot commented Dec 23, 2025 •
edited
Loading

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 78 additional dependencies were updated

Details:

Package Change
github.com/BurntSushi/toml v1.5.0 -> v1.6.0
github.com/grafana/dskit v0.0.0-20250828173137-de14cf923eeb -> v0.0.0-20250917065751-798f5a8fa154
github.com/hashicorp/vault/api/auth/approle v0.2.0 -> v0.11.0
github.com/prometheus/sigv4 v0.3.0 -> v0.4.0
go.opentelemetry.io/otel/sdk v1.39.0 -> v1.40.0
go.opentelemetry.io/otel/sdk/metric v1.39.0 -> v1.40.0
google.golang.org/api v0.257.0 -> v0.262.0
k8s.io/api v0.34.3 -> v0.35.0
k8s.io/apimachinery v0.35.0-alpha.0 -> v0.35.0
k8s.io/client-go v0.34.3 -> v0.35.0
k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 -> v0.0.0-20251218160917-61b37f7a4624
cloud.google.com/go/auth v0.17.0 -> v0.18.1
cloud.google.com/go/iam v1.5.2 -> v1.5.3
cloud.google.com/go/logging v1.13.0 -> v1.13.1
cloud.google.com/go/longrunning v0.6.7 -> v0.7.0
cloud.google.com/go/monitoring v1.24.2 -> v1.24.3
cloud.google.com/go/trace v1.11.6 -> v1.11.7
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.6.1 -> v1.6.3
github.com/apache/arrow-go/v18 v18.4.0 -> v18.5.1
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.20.11 -> v1.20.19
github.com/aws/aws-sdk-go-v2/service/amp v1.30.5 -> v1.40.1
github.com/aws/aws-sdk-go-v2/service/apigateway v1.28.2 -> v1.35.4
github.com/aws/aws-sdk-go-v2/service/apigatewayv2 v1.24.8 -> v1.32.4
github.com/aws/aws-sdk-go-v2/service/autoscaling v1.51.2 -> v1.59.1
github.com/aws/aws-sdk-go-v2/service/cloudwatch v1.45.3 -> v1.53.1
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.61.0 -> v1.63.1
github.com/aws/aws-sdk-go-v2/service/databasemigrationservice v1.45.1 -> v1.57.4
github.com/aws/aws-sdk-go-v2/service/ec2 v1.277.0 -> v1.282.0
github.com/aws/aws-sdk-go-v2/service/iam v1.38.3 -> v1.47.5
github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi v1.25.8 -> v1.30.4
github.com/aws/aws-sdk-go-v2/service/shield v1.29.8 -> v1.34.4
github.com/aws/aws-sdk-go-v2/service/storagegateway v1.34.8 -> v1.42.4
github.com/cncf/xds/go v0.0.0-20251022180443-0feb69152e9f -> v0.0.0-20251210132809-ee656c7534f5
github.com/cyphar/filepath-securejoin v0.6.0 -> v0.6.1
github.com/gabriel-vasile/mimetype v1.4.8 -> v1.4.12
github.com/go-openapi/analysis v0.24.1 -> v0.24.2
github.com/go-openapi/errors v0.22.4 -> v0.22.6
github.com/go-openapi/jsonpointer v0.22.1 -> v0.22.4
github.com/go-openapi/jsonreference v0.21.3 -> v0.21.4
github.com/go-openapi/spec v0.22.1 -> v0.22.3
github.com/gomodule/redigo v1.9.2 -> v1.9.3
github.com/google/flatbuffers v25.9.23+incompatible -> v25.12.19+incompatible
github.com/google/go-tpm v0.9.7 -> v0.9.8
github.com/googleapis/enterprise-certificate-proxy v0.3.7 -> v0.3.11
github.com/googleapis/gax-go/v2 v2.15.0 -> v2.16.0
github.com/gophercloud/gophercloud/v2 v2.9.0 -> v2.10.0
github.com/gosnmp/gosnmp v1.41.0 -> v1.43.2
github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 -> v2.27.5
github.com/hashicorp/go-secure-stdlib/parseutil v0.1.6 -> v0.2.0
github.com/hashicorp/memberlist v0.5.3 -> v0.5.4
github.com/lufia/plan9stats v0.0.0-20250827001030-24949be3fa54 -> v0.0.0-20251013123823-9fd1530e3ec3
github.com/mattn/go-runewidth v0.0.16 -> v0.0.19
github.com/microsoft/go-mssqldb v1.9.2 -> v1.9.6
github.com/opencontainers/runtime-spec v1.2.1 -> v1.3.0
github.com/percona/percona-backup-mongodb v1.8.1-0.20250429102026-063dab6cc946 -> v1.8.1-0.20251124214042-d06cab743541
github.com/pierrec/lz4/v4 v4.1.22 -> v4.1.23
github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 -> v0.6.1-0.20250313105119-ba97887b0a25
github.com/redis/go-redis/v9 v9.11.0 -> v9.17.3
github.com/safchain/ethtool v0.5.10 -> v0.7.0
github.com/snowflakedb/gosnowflake v1.14.1 -> v1.18.1
github.com/tinylib/msgp v1.6.1 -> v1.6.3
github.com/vertica/vertica-sql-go v1.3.3 -> v1.3.4
go.mongodb.org/mongo-driver v1.17.6 -> v1.17.8
go.opentelemetry.io/contrib/detectors/gcp v1.38.0 -> v1.39.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0 -> v0.64.0
gonum.org/v1/gonum v0.16.0 -> v0.17.0
google.golang.org/genproto v0.0.0-20250922171735-9219d122eba9 -> v0.0.0-20251222181119-0a764e51fe1b
google.golang.org/genproto/googleapis/api v0.0.0-20251213004720-97cd9d5aeac2 -> v0.0.0-20260120221211-b8f7ae30c516
google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b -> v0.0.0-20260120221211-b8f7ae30c516
gopkg.in/ini.v1 v1.67.0 -> v1.67.1
cel.dev/expr v0.24.0 -> v0.25.1
cloud.google.com/go/storage v1.57.0 -> v1.59.1
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.53.0 -> v0.54.0
github.com/minio/crc64nvme v1.0.2 -> v1.1.1
github.com/minio/minio-go/v7 v7.0.95 -> v7.0.97
github.com/pelletier/go-toml/v2 v2.2.3 -> v2.2.4
github.com/sagikazarmark/locafero v0.7.0 -> v0.11.0
github.com/sourcegraph/conc v0.3.0 -> v0.3.1-0.20240121214520-5f936abd7ae8
File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
github.com/tidwall/gjson v1.14.4 -> v1.18.0

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Feb 18, 2026 •
edited
Loading

TruffleHog Scan Results

Summary: Found 11 potential secrets (0 verified, 11 unverified)

  • Possible secret (DatadogToken) at collector/go.sum:99 → vYIv***Th0O
  • Possible secret (DatadogToken) at collector/go.sum:39 → apjx***uJsA
  • Possible secret (DatadogToken) at collector/go.sum:78 → gnoy***ANOi
  • Possible secret (DatadogToken) at extension/alloyengine/go.sum:39 → apjx***uJsA
  • Possible secret (DatadogToken) at extension/alloyengine/go.sum:3 → gnoy***ANOi
  • Possible secret (DatadogToken) at extension/alloyengine/go.sum:99 → vYIv***Th0O
  • Possible secret (DatadogToken) at extension/alloyengine/go.sum:107 → gnoy***ANOi
  • Possible secret (DatadogToken) at go.sum:101 → vYIv***Th0O
  • Possible secret (DatadogToken) at go.sum:133 → gnoy***ANOi
  • Possible secret (DatadogToken) at go.sum:41 → apjx***uJsA
  • Possible secret (DatadogToken) at go.sum:27 → gnoy***ANOi

Review: Check if unverified secrets are false positives.

@renovate-sh-app
fix(deps): Update go dependencies
37c51f5 
| datasource     | package                                                         | from                                   | to                                     |
| -------------- | --------------------------------------------------------------- | -------------------------------------- | -------------------------------------- |
| go             | buf.build/gen/go/parca-dev/parca/grpc/go                        | v1.6.0-20251203114737-dab2f094ec25.1   | v1.6.1-20260206050007-a47b093e4fe5.1   |
| go             | buf.build/gen/go/parca-dev/parca/protocolbuffers/go             | v1.36.11-20251203114737-dab2f094ec25.1 | v1.36.11-20260206050007-a47b093e4fe5.1 |
| go             | cloud.google.com/go/pubsub/v2                                   | v2.3.0                                 | v2.4.0                                 |
| go             | connectrpc.com/connect                                          | v1.18.1                                | v1.19.1                                |
| go             | github.com/Azure/azure-sdk-for-go/sdk/azcore                    | v1.20.0                                | v1.21.0                                |
| go             | github.com/DataDog/go-sqllexer                                  | v0.1.12                                | v0.1.13                                |
| go             | github.com/aws/aws-sdk-go-v2/service/servicediscovery           | v1.39.17                               | v1.39.22                               |
| go             | github.com/bmatcuk/doublestar/v4                                | v4.9.1                                 | v4.10.0                                |
| go             | github.com/coreos/go-systemd/v22                                | v22.6.0                                | v22.7.0                                |
| go             | github.com/deneonet/benc                                        | v1.1.7                                 | v1.1.8                                 |
| go             | github.com/google/renameio/v2                                   | v2.0.0                                 | v2.0.2                                 |
| go             | github.com/grafana/loki/v3                                      | v3.6.2                                 | v3.6.5                                 |
| go             | github.com/grafana/pyroscope-go/godeltaprof                     | v0.1.8                                 | v0.1.9                                 |
| go             | github.com/grafana/pyroscope/api                                | v1.2.0                                 | v1.3.0                                 |
| go             | github.com/hashicorp/consul/api                                 | v1.32.1                                | v1.33.2                                |
| go             | github.com/hashicorp/vault/api                                  | v1.20.0                                | v1.22.0                                |
| go             | github.com/influxdata/telegraf                                  | v1.35.2                                | v1.37.2                                |
| go             | github.com/jaswdr/faker/v2                                      | v2.8.0                                 | v2.9.1                                 |
| go             | github.com/lib/pq                                               | v1.10.9                                | v1.11.2                                |
| go             | github.com/miekg/dns                                            | v1.1.69                                | v1.1.72                                |
| go             | github.com/ohler55/ojg                                          | v1.26.8                                | v1.28.0                                |
| go             | github.com/oliver006/redis_exporter                             | v1.74.0                                | v1.81.0                                |
| go             | github.com/openai/openai-go/v3                                  | v3.7.0                                 | v3.21.0                                |
| go             | github.com/percona/mongodb_exporter                             | v0.47.2                                | v0.48.0                                |
| go             | github.com/prometheus-community/postgres_exporter               | v0.18.1                                | v0.19.0                                |
| go             | github.com/prometheus-community/yet-another-cloudwatch-exporter | v0.62.1                                | v0.63.0                                |
| go             | github.com/prometheus/alertmanager                              | v0.30.0                                | v0.31.1                                |
| go             | github.com/prometheus/mysqld_exporter                           | v0.17.2                                | v0.18.0                                |
| go             | github.com/prometheus/node_exporter                             | v1.9.1                                 | v1.10.2                                |
| go             | github.com/samber/lo                                            | v1.51.0                                | v1.52.0                                |
| go             | github.com/scaleway/scaleway-sdk-go                             | v1.0.0-beta.35                         | v1.0.0-beta.36                         |
| go             | github.com/sirupsen/logrus                                      | v1.9.3                                 | v1.9.4                                 |
| go             | github.com/spf13/cobra                                          | v1.10.1                                | v1.10.2                                |
| go             | github.com/spf13/viper                                          | v1.19.0                                | v1.21.0                                |
| go             | github.com/stretchr/testify                                     | v1.10.0                                | v1.11.1                                |
| golang-version | go                                                              | 1.25.7                                 | 1.26.0                                 |
| golang-version | go                                                              | 1.21.0                                 | 1.26.0                                 |
| go             | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp   | v0.64.0                                | v0.65.0                                |
| go             | go.opentelemetry.io/contrib/propagators/jaeger                  | v1.35.0                                | v1.40.0                                |
| go             | golang.org/x/mod                                                | v0.31.0                                | v0.33.0                                |
| go             | golang.org/x/oauth2                                             | v0.32.0                                | v0.35.0                                |
| go             | golang.org/x/oauth2                                             | v0.34.0                                | v0.35.0                                |
| go             | google.golang.org/grpc                                          | v1.78.0                                | v1.79.0                                |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
@renovate-sh-app
Copy link
Copy Markdown
Contributor Author

renovate-sh-app Bot commented Feb 19, 2026

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@jharvey10
Copy link
Copy Markdown
Contributor

jharvey10 commented Mar 30, 2026

many of these were merged separately in #5896. Closing this to allow it to get reopened next week with currently outstanding dep updates.

@renovate-sh-app
Copy link
Copy Markdown
Contributor Author

renovate-sh-app Bot commented Apr 3, 2026

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (v2.5.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

frozen-due-to-age update-minor update-patch

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jharvey10