Skip to content

Bump the minor-dependencies group across 1 directory with 10 updates #503

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: release/0.3
Choose a base branch
from
Open

Bump the minor-dependencies group across 1 directory with 10 updates #503

wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 26, 2025 •
edited
Loading

Bumps the minor-dependencies group with 7 updates in the / directory:

Package From To
github.com/Microsoft/hcsshim 0.11.4 0.13.0
github.com/containernetworking/cni 1.1.2 1.3.0
github.com/coreos/go-systemd/v22 22.5.0 22.6.0
github.com/spf13/cobra 1.8.0 1.9.1
github.com/stretchr/testify 1.9.0 1.11.0
golang.org/x/sync 0.14.0 0.16.0
golang.org/x/sys 0.33.0 0.35.0

Updates github.com/Microsoft/hcsshim from 0.11.4 to 0.13.0

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.13.0

What's Changed

New Contributors

Full Changelog: microsoft/hcsshim@v0.13.0-rc.3...v0.13.0

v0.13.0-rc.3

What's Changed

Full Changelog: microsoft/hcsshim@v0.13.0-rc.2...v0.13.0-rc.3

v0.11.8

What's Changed

Full Changelog: microsoft/hcsshim@v0.11.7...v0.11.8

... (truncated)

Commits
  • 7084bd2 rego policy enforcer should use the same user parsing logic as GCS (#2405)
  • a5c5b4c Deps/crypto vulnFix golang.org/x/crypto vulnerability (#2416)
  • a00144a Add support for running confidential WCOW UVMs
  • 5def1d7 Allow different types of boot configurations for WCOW UVM
  • b4e0744 Merge pull request #2406 from anmaxvl/privileged-pause
  • e5f8fd8 tooling: allow pause container to be run in privileged mode
  • d7e3842 feature: cross-container named pipes (#2358)
  • 62ddb12 HvSocket support for containers (#2353)
  • fa9d402 ci: fix golangci-lint config (#2387)
  • a3c0edf github-actions: update lint action (#2379)
  • Additional commits viewable in compare view

Updates github.com/containernetworking/cni from 1.1.2 to 1.3.0

Release notes

Sourced from github.com/containernetworking/cni's releases.

v1.3.0

What's Changed

This adds a new config flag loadPluginsFromFolder - if present, for a given named network bar, plugin configuration objects will be loaded from <path-to-bar-network-config-file>/bar/xxx.conf. This may be useful for vendors providing chained plugins: you can add your plugin to a chain without needing to edit the file in-place.

New Contributors

Full Changelog: containernetworking/cni@v1.2.3...v1.3.0

libcni v1.2.3

This is a minor release to correct a divergence between the specification and libcni. In this case, the specification was updated, as it concerns a new feature, GC, that is not yet deployed.

What's Changed

libcni v1.2.2

What's Changed

Full Changelog: containernetworking/cni@v1.2.1...v1.2.2

Commits
  • a28faab Merge pull request #1155 from squeed/remove-deprecated
  • 3f7369a libcni: remove some deprecation warnings
  • 097592d Merge pull request #1154 from LionelJouin/maintainers
  • d2f3f46 Update MAINTAINERS
  • 3b4dfc5 Merge pull request #1119 from containernetworking/dependabot/github_actions/g...
  • a845cc8 build(deps): bump github/codeql-action from 3.26.4 to 3.26.7
  • 4c9ae43 Merge pull request #1109 from containernetworking/dependabot/go_modules/golan...
  • be3f5a9 Merge pull request #1108 from mmorel-35/scorecard
  • f4f2dc7 Setup scorecard workflow
  • 81ed2d0 Merge pull request #1110 from danwinship/cnitool-binary
  • Additional commits viewable in compare view

Updates github.com/coreos/go-systemd/v22 from 22.5.0 to 22.6.0

Release notes

Sourced from github.com/coreos/go-systemd/v22's releases.

v22.6.0

This release bumps Go requirement to 1.23, modernizes code, improves CI and documentation, fixes a few bugs, and adds a new dbus method.

What's Changed

New Contributors

Full Changelog: coreos/go-systemd@v22.5.0...v22.6.0

Commits
  • 8214e15 Merge pull request #469 from kolyshkin/nits
  • 3c6acce import1: fix TestImport* cleanup
  • 9f51dd8 import1: use t.TempDir
  • c063bef Merge pull request #470 from kolyshkin/fix-readme
  • f9135e7 README: bump minimal Go version
  • 45cbc16 Merge pull request #468 from Luap99/go-1.25
  • 485b30b ci: test go 1.25
  • b4e6d71 Merge pull request #467 from coreos/dependabot/github_actions/actions/checkout-5
  • 227924f build(deps): bump actions/checkout from 4 to 5
  • 446c54a Merge pull request #466 from kolyshkin/modernize
  • Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.8.0 to 1.9.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.9.1

🐛 Fixes

Full Changelog: spf13/cobra@v1.9.0...v1.9.1

v1.9.0

✨ Features

🐛 Fixes

🤖 Completions

🧪 Testing

✍🏼 Documentation

🔧 Dependency upgrades

... (truncated)

Commits

Updates github.com/spf13/pflag from 1.0.5 to 1.0.6

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.6

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.5...v1.0.6

Commits

Updates github.com/stretchr/testify from 1.9.0 to 1.11.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.11.0

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • b7801fb Merge pull request #1778 from stretchr/dependabot/github_actions/actions/chec...
  • 69831f3 build(deps): bump actions/checkout from 4 to 5
  • a53be35 Improve captureTestingT helper
  • aafb604 mock: improve formatting of error message
  • 7218e03 improve error msg
  • 929a212 Merge pull request #1758 from stretchr/dolmen/suite-faster-method-filtering
  • bc7459e suite: faster filtering of methods (-testify.m)
  • 7d37b5c suite: refactor methodFilter
  • c58bc90 Merge pull request #1764 from stretchr/dolmen/suite-refactor-stats-for-readab...
  • 87101a6 suite.Run: refactor handling of stats
  • Additional commits viewable in compare view

Updates github.com/vishvananda/netlink from 1.2.1-beta.2 to 1.3.0

Release notes

Sourced from github.com/vishvananda/netlink's releases.

v1.3.0

  • Fixed backward compatibility breakage of func (h *Handle) ConntrackDeleteFilter.
  • Other fixes and improvements from the community.

v1.2.1

Thanks to the community, this release contains several new functionalities and many bug fixes

Commits
  • 6f57139 Fix recvfrom goroutine leak
  • 298ff27 Handle: add ConntrackDeleteFilter alias for backward compat
  • 5b0b9d8 rule: add Rule.Type to allow adding/listing unreachable (RTN_UNREACHABLE) rules
  • 65a253d link_linux: add support for IFLA_MACVLAN_BC_QUEUE_LEN(_USED)
  • 3b7e16c Add ConntrackDeleteFilters
  • 4317e32 feat: add LinkSetBondSlaveActive()/LinkDelBondSlave()
  • a57a7bd Add handle support for socket
  • aaf4f98 Fix determination of the promiscuity counter for links
  • 7a4f10d fix: updates SizeofVfVlanInfo to address #1003
  • 8f96fd8 # rule: fix 32-bit platforms don't support adding rules with a mark value of ...
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.14.0 to 0.16.0

Commits
  • 7fad2c9 errgroup: revert propagation of panics
  • 8a14946 errgroup: remove duplicated comment
  • 1869c69 all: replace deprecated ioutil
  • d1ac909 sync/errgroup: PanicError.Error print stack trace
  • See full diff in compare view

Updates golang.org/x/sys from 0.33.0 to 0.35.0

Commits
  • 5b936e1 unix/linux: update to Linux kernel 6.16, Go to 1.24.5
  • 3a82703 unix: remove redundant xnu version check for {p}readv/{p}writev
  • 9920300 unix: add missing nft conntrack constants
  • ad4e0fc unix: remove redundant word in comment
  • 084ad87 unix: fix //sys decl after CL 548795
  • 751c3c6 unix: add missing NFT_PAYLOAD_* consts on linux
  • 0c740cc unix: update Go to 1.24.3
  • d62d31c unix: update Linux constants and types to v6.14
  • See full diff in compare view

Updates google.golang.org/grpc from 1.62.0 to 1.69.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.69.0

Known Issues

  • The recently added grpc.NewClient function is incompatible with forward proxies, because it resolves the target hostname on the client instead of passing the hostname to the proxy. A fix is expected to be a part of grpc-go v1.70. (#7556)

New Features

  • stats/opentelemetry: Introduce new APIs to enable OpenTelemetry instrumentation for metrics on servers and clients (#7874)
  • xdsclient: add support to fallback to lower priority servers when higher priority ones are down (#7701)
  • dns: Add support for link local IPv6 addresses (#7889)
  • The new experimental pickfirst LB policy (disabled by default) supports Happy Eyeballs, interleaving IPv4 and IPv6 address as described in RFC-8305 section 4, to attempt connections to multiple backends concurrently. The experimental pickfirst policy can be enabled by setting the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST to true. (#7725, #7742)
  • balancer/pickfirst: Emit metrics from the pick_first load balancing policy (#7839)
  • grpc: export MethodHandler, which is the type of an already-exported field in MethodDesc (#7796)

Bug Fixes

  • credentials/google: set scope for application default credentials (#7887)
  • xds: fix edge-case issues where some clients or servers would not initialize correctly or would not receive errors when resources are invalid or unavailable if another channel or server with the same target was already in use . (#7851, #7853)
  • examples: fix the debugging example, which was broken by a recent change (#7833)

Behavior Changes

  • client: update retry attempt backoff to apply jitter per updates to gRFC A6. (#7869)
  • balancer/weightedroundrobin: use the pick_first LB policy to manage connections (#7826)

API Changes

  • balancer: An internal method is added to the balancer.SubConn interface to force implementors to embed a delegate implementation. This requirement is present in the interface documentation, but wasn't enforced earlier. (#7840)

Performance Improvements

  • mem: implement a ReadAll() method for more efficient io.Reader consumption (#7653)
  • mem: use slice capacity instead of length to determine whether to pool buffers or directly allocate them (#7702)

Documentation

  • examples/csm_observability: Add xDS Credentials and switch server to be xDS enabled (#7875)

Release 1.68.2

Dependencies

  • Remove the experimental stats/opentelemetry module and instead add the experimental packages it contains directly into the main google.golang.org/grpc module (#7936)

Release 1.68.1

Bug Fixes

... (truncated)

Commits
  • 317271b pickfirst: Register a health listener when used as a leaf policy (#7832)
  • 5565631 balancer/pickfirst: replace grpc.Dial with grpc.NewClient in tests (#7879)
  • 634497b test: Split import paths for generated message and service code (#7891)
  • 78aa51b pickfirst: Stop test servers without closing listeners (#7872)
  • 00272e8 dns: Support link local IPv6 addresses (#7889)
  • 17d08f7 scripts/gen-deps: filter out grpc modules (#7890)
  • ab189b0 examples/features/csm_observability: Add xDS Credentials (#7875)
  • 3ce87dd credentials/google: Add cloud-platform scope for ADC (#7887)
  • 3c0586a stats/opentelemetry: Cleanup OpenTelemetry API's before stabilization (#7874)
  • 4c07bca stream: add jitter to retry backoff in accordance with gRFC A6 (#7869)
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 15, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

1 similar comment
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 15, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot dependabot bot force-pushed the dependabot/go_modules/release/0.3/minor-dependencies-f5c0089777 branch from d6f6c5b to fa3ffb0 Compare October 27, 2025 22:48
@dependabot
Bump the minor-dependencies group across 1 directory with 10 updates
a13be49 
Bumps the minor-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/Microsoft/hcsshim](https://github.com/Microsoft/hcsshim) | `0.11.4` | `0.13.0` |
| [github.com/containernetworking/cni](https://github.com/containernetworking/cni) | `1.1.2` | `1.3.0` |
| [github.com/coreos/go-systemd/v22](https://github.com/coreos/go-systemd) | `22.5.0` | `22.6.0` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.8.0` | `1.9.1` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.9.0` | `1.11.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.14.0` | `0.16.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.33.0` | `0.35.0` |



Updates `github.com/Microsoft/hcsshim` from 0.11.4 to 0.13.0
- [Release notes](https://github.com/Microsoft/hcsshim/releases)
- [Commits](microsoft/hcsshim@v0.11.4...v0.13.0)

Updates `github.com/containernetworking/cni` from 1.1.2 to 1.3.0
- [Release notes](https://github.com/containernetworking/cni/releases)
- [Commits](containernetworking/cni@v1.1.2...v1.3.0)

Updates `github.com/coreos/go-systemd/v22` from 22.5.0 to 22.6.0
- [Release notes](https://github.com/coreos/go-systemd/releases)
- [Commits](coreos/go-systemd@v22.5.0...v22.6.0)

Updates `github.com/spf13/cobra` from 1.8.0 to 1.9.1
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.8.0...v1.9.1)

Updates `github.com/spf13/pflag` from 1.0.5 to 1.0.6
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.5...v1.0.6)

Updates `github.com/stretchr/testify` from 1.9.0 to 1.11.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.9.0...v1.11.0)

Updates `github.com/vishvananda/netlink` from 1.2.1-beta.2 to 1.3.0
- [Release notes](https://github.com/vishvananda/netlink/releases)
- [Commits](vishvananda/netlink@v1.2.1-beta.2...v1.3.0)

Updates `golang.org/x/sync` from 0.14.0 to 0.16.0
- [Commits](golang/sync@v0.14.0...v0.16.0)

Updates `golang.org/x/sys` from 0.33.0 to 0.35.0
- [Commits](golang/sys@v0.33.0...v0.35.0)

Updates `google.golang.org/grpc` from 1.62.0 to 1.69.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.62.0...v1.69.0)

---
updated-dependencies:
- dependency-name: github.com/Microsoft/hcsshim
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-dependencies
- dependency-name: github.com/containernetworking/cni
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-dependencies
- dependency-name: github.com/coreos/go-systemd/v22
  dependency-version: 22.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-dependencies
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-dependencies
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-dependencies
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-dependencies
- dependency-name: github.com/vishvananda/netlink
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/release/0.3/minor-dependencies-f5c0089777 branch from fa3ffb0 to a13be49 Compare November 3, 2025 22:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependabot release/0.3

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant