Bump the all-deps group with 8 updates #1672

dependabot · 2025-03-10T18:56:50Z

Bumps the all-deps group with 8 updates:

Package	From	To
github.com/prometheus/client_golang	`1.21.0`	`1.21.1`
go.etcd.io/etcd/client/v3	`3.5.18`	`3.5.19`
go.etcd.io/etcd/etcdctl/v3	`3.5.18`	`3.5.19`
go.etcd.io/etcd/v3	`3.5.18`	`3.5.19`
golang.org/x/crypto	`0.35.0`	`0.36.0`
golang.org/x/net	`0.35.0`	`0.36.0`
golang.org/x/time	`0.10.0`	`0.11.0`
google.golang.org/grpc	`1.70.0`	`1.71.0`

Updates github.com/prometheus/client_golang from 1.21.0 to 1.21.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.21.1 / 2025-03-04

This release addresses a performance regression introduced in #1661 -- thanks to all who reported this quickly: @chlunde, @dethi, @aaronbee @tsuna @kakkoyun 💪🏽. This patch release also fixes the iOS build.

We will be hardening the release process even further (#1759, #1761) to prevent this in future, sorry for the inconvenience!

The high concurrency optimization is planned to be eventually reintroduced, however in a much safer manner, potentially in a separate API.

[BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low concurrency cases #1757

[BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags. #1758

Revert "exponential backoff for CAS operations on floats" and cut 1.21.1 by @bwplotka in prometheus/client_golang#1757

Fix ios build for 1.21.1 by @bwplotka in prometheus/client_golang#1758

Full Changelog: prometheus/client_golang@v1.21.0...v1.21.1

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.21.1 / 2025-03-04

[BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low contention cases.

[BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags.

Commits

8a42da3 Fix ios build. (#1758)
40c62f7 Merge pull request #1757 from prometheus/revert-121cas
689f590 Cut 1.21.1
9e567a7 Revert "Add: exponential backoff for CAS operations on floats (#1661)"
See full diff in compare view

Updates go.etcd.io/etcd/client/v3 from 3.5.18 to 3.5.19

Release notes

Sourced from go.etcd.io/etcd/client/v3's releases.

v3.5.19

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux

ETCD_VER=v3.5.19
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)

ETCD_VER=v3.5.19
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits

815eaba version: bump up to 3.5.19
2261c53 Merge pull request #19540 from k8s-infra-cherrypick-robot/cherry-pick-19520-t...
3d2cce6 Add verify released binary assets GitHub workflow
d8de8c3 Merge pull request #19530 from ivanvc/release-3.5-bump-golang.org-x-net-to-v0...
7d985d0 Merge pull request #19528 from ivanvc/release-3.5-bump-go-to-1.23.7
607e555 dependency: bump golang.org/x/net from v0.34.0 to v0.36.0
db3d20d Bump go toolchain to 1.23.7
e230ade Merge pull request #19478 from ivanvc/release-3.5-bump-golang-org-x-crypto-to...
3601301 dependency: Bump golang.org/x/crypto from v0.32.0 to v0.35.0
fa7a22a Merge pull request #19430 from joshjms/bump-go-v1.23.6-release-3.5
Additional commits viewable in compare view

Updates go.etcd.io/etcd/etcdctl/v3 from 3.5.18 to 3.5.19

Release notes

Sourced from go.etcd.io/etcd/etcdctl/v3's releases.

v3.5.19

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux

ETCD_VER=v3.5.19
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)

ETCD_VER=v3.5.19
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits

815eaba version: bump up to 3.5.19
2261c53 Merge pull request #19540 from k8s-infra-cherrypick-robot/cherry-pick-19520-t...
3d2cce6 Add verify released binary assets GitHub workflow
d8de8c3 Merge pull request #19530 from ivanvc/release-3.5-bump-golang.org-x-net-to-v0...
7d985d0 Merge pull request #19528 from ivanvc/release-3.5-bump-go-to-1.23.7
607e555 dependency: bump golang.org/x/net from v0.34.0 to v0.36.0
db3d20d Bump go toolchain to 1.23.7
e230ade Merge pull request #19478 from ivanvc/release-3.5-bump-golang-org-x-crypto-to...
3601301 dependency: Bump golang.org/x/crypto from v0.32.0 to v0.35.0
fa7a22a Merge pull request #19430 from joshjms/bump-go-v1.23.6-release-3.5
Additional commits viewable in compare view

Updates go.etcd.io/etcd/v3 from 3.5.18 to 3.5.19

Release notes

Sourced from go.etcd.io/etcd/v3's releases.

v3.5.19

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux

ETCD_VER=v3.5.19
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)

ETCD_VER=v3.5.19
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits

815eaba version: bump up to 3.5.19
2261c53 Merge pull request #19540 from k8s-infra-cherrypick-robot/cherry-pick-19520-t...
3d2cce6 Add verify released binary assets GitHub workflow
d8de8c3 Merge pull request #19530 from ivanvc/release-3.5-bump-golang.org-x-net-to-v0...
7d985d0 Merge pull request #19528 from ivanvc/release-3.5-bump-go-to-1.23.7
607e555 dependency: bump golang.org/x/net from v0.34.0 to v0.36.0
db3d20d Bump go toolchain to 1.23.7
e230ade Merge pull request #19478 from ivanvc/release-3.5-bump-golang-org-x-crypto-to...
3601301 dependency: Bump golang.org/x/crypto from v0.32.0 to v0.35.0
fa7a22a Merge pull request #19430 from joshjms/bump-go-v1.23.6-release-3.5
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.35.0 to 0.36.0

Commits

49bf5b8 go.mod: update golang.org/x dependencies
24852b6 ssh: add decode support for banners
bbc689c ssh: use a more straightforward return value
See full diff in compare view

Updates golang.org/x/net from 0.35.0 to 0.36.0

Commits

85d1d54 go.mod: update golang.org/x dependencies
cde1dda proxy, http/httpproxy: do not mismatch IPv6 zone ids against hosts
fe7f039 publicsuffix: spruce up code gen and speed up PublicSuffix
459513d internal/http3: move more common stream processing to genericConn
aad0180 http2: fix flakiness from t.Log when GOOS=js
b73e574 http2: don't log expected errors from writing invalid trailers
5f45c77 internal/http3: make read-data tests usable for server handlers
43c2540 http2, internal/httpcommon: reject userinfo in :authority
1d78a08 http2, internal/httpcommon: factor out server header logic for h2/h3
0d7dc54 quic: add Conn.ConnectionState
Additional commits viewable in compare view

Updates golang.org/x/time from 0.10.0 to 0.11.0

Commits

0c50ed8 all: upgrade go directive to at least 1.23.0 [generated]
66520f6 rate: simplify function advance only returns new Tokens to caller
See full diff in compare view

Updates google.golang.org/grpc from 1.70.0 to 1.71.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.71.0

API Changes

balancer: Custom LB policies that record metrics must use the new MetricsRecorder method on Balancer.ClientConn instead of the removed Balancer.BuildOptions.MetricsRecorder field to obtain a metrics recorder. (#8027)

balancer: balancer.ClientConn implementations must now embed a delegate implementation. This allows grpc-go to add new methods to the interface and remain backward compatible. (#8026)

balancer/endpointsharding: The constructor accepts the child balancer's builder and a struct with optional configuration. (#8052)

New Features

xds: Add support for dualstack via the additional_addresses field in the Endpoint resource. To disable this feature, set the environment variable GRPC_EXPERIMENTAL_XDS_DUALSTACK_ENDPOINTS=false. (#8134)

stats/opentelemetry: Add experimental support for OpenTelemetry tracing. (#7852)

xds/internal/xdsclient: Add counter metrics for valid and invalid resource updates. (#8038)

balancer/leastrequest, roundrobin: Add dualstack support. (#7969, #7966)

balancer/endpointsharding: Balancers created with the new DisableAutoReconnect option will not attempt to call ExitIdle automatically on their children when the children report idle. (#8052)

Bug Fixes

client: Fix support for proxies when using grpc.NewClient so the target is resolved by the proxy as expected. (#7881)

Added WithLocalDNSResolution() dial option to explicitly force target resolution on the client instead. (#7881)

weightedtarget: Return erroring picker when no targets are configured. (#8070)

xds: Fail RPCs with UNAVAILABLE when the EDS resource is missing or contains no endpoints (#8070)

xdsclient: Fix a bug where connectivity failures were reported to resource watchers before trying all listed servers. (#8075)

grpc: Fix the number of bytes reported in the error message when encoded messages are larger than 4GB. (#8033)

xds: Fixed a bug preventing tests from creating multiple servers or channels with different bootstrap configs. (#8050)

grpc: Fix message length checks when compression is enabled and maxReceiveMessageSize is MaxInt (#7918)

Special Thanks: @vinothkumarr227

Documentation

client: Improve documentation of grpc.NewClient and ClientConn.CanonicalTarget by providing examples. (#8078)

examples/features/dualstack: New example demonstrating usage of endpoints and dualstack functionality. (#8098)

Commits

d01db5c Change version to 1.71.0 (#8105)
012f8bf xds: Enable dualstack flag (#8134)
bf0c885 examples/features/dualstack: Demonstrate Dual Stack functionality (#8098) (#8...
05bdd66 ringhash: Remove TODO comment (#8096)
ddb2484 xds: remove obsolete xDS transport custom dialer option (#8079)
8528f43 cleanup: replace Dial with NewClient (#7975)
ae2a04f ringhash: Replace DNS resolver before sending xDS Update in test (#8091)
e55819e lazy: Use channel to wait for resolver error being received in test (#8088)
b524c08 xdsclient: include xds node ID in errors from the WatchResource API (#8093)
91eb6aa client: improve documentation of target strings (#8078)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-deps group with 8 updates: | Package | From | To | | --- | --- | --- | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.21.0` | `1.21.1` | | [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) | `3.5.18` | `3.5.19` | | [go.etcd.io/etcd/etcdctl/v3](https://github.com/etcd-io/etcd) | `3.5.18` | `3.5.19` | | [go.etcd.io/etcd/v3](https://github.com/etcd-io/etcd) | `3.5.18` | `3.5.19` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.35.0` | `0.36.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.35.0` | `0.36.0` | | [golang.org/x/time](https://github.com/golang/time) | `0.10.0` | `0.11.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.70.0` | `1.71.0` | Updates `github.com/prometheus/client_golang` from 1.21.0 to 1.21.1 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.21.0...v1.21.1) Updates `go.etcd.io/etcd/client/v3` from 3.5.18 to 3.5.19 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.5.18...v3.5.19) Updates `go.etcd.io/etcd/etcdctl/v3` from 3.5.18 to 3.5.19 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.5.18...v3.5.19) Updates `go.etcd.io/etcd/v3` from 3.5.18 to 3.5.19 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.5.18...v3.5.19) Updates `golang.org/x/crypto` from 0.35.0 to 0.36.0 - [Commits](golang/crypto@v0.35.0...v0.36.0) Updates `golang.org/x/net` from 0.35.0 to 0.36.0 - [Commits](golang/net@v0.35.0...v0.36.0) Updates `golang.org/x/time` from 0.10.0 to 0.11.0 - [Commits](golang/time@v0.10.0...v0.11.0) Updates `google.golang.org/grpc` from 1.70.0 to 1.71.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.70.0...v1.71.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: go.etcd.io/etcd/client/v3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: go.etcd.io/etcd/etcdctl/v3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: go.etcd.io/etcd/v3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: golang.org/x/net dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: golang.org/x/time dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps ... Signed-off-by: dependabot[bot] <[email protected]>

roger2hk · 2025-03-10T20:42:37Z

/gcbrun

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 10, 2025

dependabot bot requested a review from a team as a code owner March 10, 2025 18:56

dependabot bot requested review from roger2hk and removed request for a team March 10, 2025 18:56

roger2hk approved these changes Mar 11, 2025

View reviewed changes

roger2hk merged commit dd49d3b into master Mar 11, 2025
9 checks passed

roger2hk deleted the dependabot/go_modules/all-deps-821de9a50b branch March 11, 2025 10:47

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the all-deps group with 8 updates #1672

Bump the all-deps group with 8 updates #1672

Uh oh!

dependabot bot commented on behalf of github Mar 10, 2025

Uh oh!

roger2hk commented Mar 10, 2025

Uh oh!

Uh oh!

Uh oh!

Bump the all-deps group with 8 updates #1672

Bump the all-deps group with 8 updates #1672

Uh oh!

Conversation

dependabot bot commented on behalf of github Mar 10, 2025

v1.21.1 / 2025-03-04

1.21.1 / 2025-03-04

v3.5.19

Linux

macOS (Darwin)

v3.5.19

Linux

macOS (Darwin)

v3.5.19

Linux

macOS (Darwin)

Release 1.71.0

API Changes

New Features

Bug Fixes

Documentation

Uh oh!

roger2hk commented Mar 10, 2025

Uh oh!

Uh oh!

Uh oh!