Skip to content

build: bump the go-dependencies group across 1 directory with 4 updates - #12

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/go-dependencies-a7a9ca8682
Closed

build: bump the go-dependencies group across 1 directory with 4 updates#12
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/go-dependencies-a7a9ca8682

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 4 updates in the / directory: github.com/sirupsen/logrus, github.com/stretchr/testify, golang.org/x/time and sigs.k8s.io/external-dns.

Updates github.com/sirupsen/logrus from 1.9.4 to 1.10.2

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.2

Logrus v1.10.2

This is a small maintenance release that updates github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency from Logrus' dependency graph. There are no functional changes in this release.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.1

Full Changelog: sirupsen/logrus@v1.10.1...v1.10.2

v1.10.1

Logrus v1.10.1

This patch release fixes two issues in field formatting and handling:

  • Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.
  • Allow function-backed values implementing error to be used with WithError, WithField, and WithFields.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.0

Full Changelog: sirupsen/logrus@v1.10.0...v1.10.1

v1.10.0

Logrus v1.10.0

This release focuses on substantial performance improvements, concurrency correctness, and better interoperability with modern Go logging APIs.

🚀 Performance

Major improvements across TextFormatter, entry handling, and common logger paths:

  • ~17% lower geomean runtime across the benchmark suite
  • ~27% higher geomean formatter throughput
  • Common enabled logging paths are ~30–44% faster
  • WithError is ~40% faster
  • Chained fields are ~46% faster
  • TextFormatter paths are up to ~40% faster
  • Allocation counts are reduced by ~25–74% across measured TextFormatter cases, with the largest reductions in colored output

The improvements also show up in complete logger paths:

  • Logger + TextFormatter is ~31% faster, with ~24% fewer allocations
  • Logger + JSONFormatter is ~21% faster, with ~10% fewer allocations

... (truncated)

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.2

Changed:

  • Update github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency.

1.10.1

Fixes:

  • Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.
  • Allow function-backed implementations of error as field values.

1.10.0

Fixes:

  • Fix reentrant logging deadlocks in formatter paths.
  • Fix race conditions in formatter and entry handling.
  • Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel. Use the corresponding Panic methods when panic behavior is desired.
  • Improve concurrency safety around formatter and hook access.

Features:

  • Add slog hook for forwarding Logrus entries to log/slog.
  • Add slog.Handler for forwarding log/slog records to a Logrus logger, including levels, fields, groups, context, time, and optional caller reporting. The hook and handler can also be combined to help migrate between Logrus and log/slog.
  • Add minimal, composable logging interfaces for each log level. This enables consumers to depend on narrower interfaces, making it easier to substitute or adapt logging implementations.
  • Allow Entry.Caller to be set explicitly and preserve it across derived entries, enabling custom caller detection without Logrus overwriting caller information when ReportCaller is enabled.

Changed:

  • Raise minimum supported Go version to 1.23.
  • TextFormatter now renders []byte values as raw/quoted strings instead of slice-of-ints.
  • TextFormatter now uses distinct dimmed colors for debug and trace output.
  • TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching the behavior on other platforms.
  • Entry.HasCaller is now deprecated in favor of checking Entry.Caller directly.
  • Deprecated MutexWrap, which was unintentionally exposed as public API. It remains available as an alias for compatibility but should not be used

... (truncated)

Commits
  • 6d6a132 Merge pull request #1586 from thaJeztah/prepare_v1.10.2
  • 4f94653 update changelog for v1.10.2
  • 87434bb Merge pull request #1585 from thaJeztah/bump_testify
  • e7d2120 chore(deps): bump github.com/stretchr/testify v1.12.1
  • 8b673a9 Merge pull request #1583 from thaJeztah/release_1.10.1
  • 0b920ad Merge pull request #1584 from thaJeztah/more_coverage
  • 5e20694 TextFormatter: cover nil pointer method receivers
  • 8312732 update changelog for v1.10.1
  • e987a40 Merge pull request #1582 from thaJeztah/panic_handler
  • 17d574b TextFormatter: recover panics from Error and String methods
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • 959dbda Merge pull request #1935 from harryzcy/yaml-update
  • 9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • Additional commits viewable in compare view

Updates golang.org/x/time from 0.15.0 to 0.16.0

Commits
  • fb013b3 all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Updates sigs.k8s.io/external-dns from 0.21.0 to 0.23.0

Release notes

Sourced from sigs.k8s.io/external-dns's releases.

v0.23.0

General information

It's recommended to try this version with --dry-run=true first, see upgrade instructions.

Action required before upgrade

  • ⚠️ crd Registry now stores DNSRecord objects independantly of source namespace (#6606).
    • Upgrading from v0.22.0: set --crd-registry-namespace accordingly.
  • ⚠️ With --txt-encrypt-enabled, Go 1.27 changed gzip output (#6675):

Important

  • ℹ️ --enable-legacy-annotation-prefix allows reading also external-dns.alpha.kubernetes.io/ annotations during migration started since v0.22.0 (#6703).
  • ℹ️ --dry-run is now honored by ns1 (#6693) and alibabacloud (#6699).
  • ℹ️ On DNSEndpoint, cloudflare providerSpecific names are now prefix-free (#6731).
    • Annotation-style names (external-dns.alpha.kubernetes.io/cloudflare-*, external-dns.kubernetes.io/cloudflare-*) still work but are deprecated.
  • ℹ️ In-tree Gandi provider removed (#6654). Use a previous version or a webhook provider.
  • ℹ️ For security & reliability, webhook bodies are capped at 32 MiB
    • configurable with --webhook-provider-max-body-size (#6484).

⚠️ Breaking Changes

🚀 Features

🐛 Bug fixes

... (truncated)

Changelog

Sourced from sigs.k8s.io/external-dns's changelog.

Release

Release cycle

Currently we don't release regularly. Whenever we think it makes sense to release a new version we do it. You might want to ask in our Slack channel external-dns when the next release will come out.

Staging Release cycle

A new staging image is released weekly and can be found on the official staging registry.

There is a time lag between merging changes into the master branch and the subsequent creation of the staging image.

Example command to fetch 10 most recent staging images:

export EXT_DNS_VERSION="v0.23.0"
curl -sLk https://gcr.io/v2/k8s-staging-external-dns/external-dns/tags/list | jq | grep "$EXT_DNS_VERSION" | tail -n 10

Versioning convention

These are the conventions that we will be using for releases following 0.7.6:

  • Patch version should be updated if we need to merge bugfixes, e.g. provider a does need a fix in order make updates working again. I would see updating or improving documentation here.

  • Minor version should be updated if new features are implemented in existing providers or new provider get introduced.

  • Major version should be upgraded if we introduce breaking changes.

Semantic Versioning Discipline

External-DNS follows semantic versioning principles:

  • 0.x → pre-stable, APIs subject to change.
  • 1.x → not yet considered.

Versioning & Releases External-DNS opts to stay within 0.x versioning scheme. We strive for stability, but reserve the right to introduce breaking changes in minor version bumps when necessary.

How to release a new image

Prerequisite

We use https://github.com/cli/cli to automate the release process. Please install it according to the official documentation.

You must be an official maintainer of the project to be able to do a release.

Steps

... (truncated)

Commits
  • a10c566 fix(cloudflare): normalize provider-specific property names at ingestion (#6731)
  • 8a5d50d fix(source/crd): apply the annotation filter outside the cache transform (#6730)
  • 2f0f35a chore(deps): bump the dev-dependencies group with 14 updates (#6738)
  • 4e17229 docs: add Infoblox UDDI webhook (#6737)
  • 5470bfd fix(pdns): add request timeout and context cancellation for PowerDNS API call...
  • 0d5a6ac fix(annotations): add --enable-legacy-annotation-prefix migration flag (#6703)
  • b6a23ab refactor(provider): drop AWS SDK dependency from ZoneTypeFilter (#6707)
  • 8576495 fix(alibabacloud): deduplicate hosted zones before fetching records (#6711)
  • 09780a8 docs: document TXT encryption risks and recommendations (#6678)
  • 83db989 docs: fix 'pointing the the wrong role' typo in AWS IRSA tutorial (#6726)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-a7a9ca8682 branch from 53ab6f4 to c94a2d2 Compare September 19, 2026 13:23
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-a7a9ca8682 branch from c94a2d2 to 7f429d3 Compare September 29, 2026 20:25
@dependabot
build: bump the go-dependencies group across 1 directory with 4 updates
a531bc1 
Bumps the go-dependencies group with 4 updates in the / directory: [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus), [github.com/stretchr/testify](https://github.com/stretchr/testify), [golang.org/x/time](https://github.com/golang/time) and [sigs.k8s.io/external-dns](https://github.com/kubernetes-sigs/external-dns).


Updates `github.com/sirupsen/logrus` from 1.9.4 to 1.10.2
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.4...v1.10.2)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

Updates `golang.org/x/time` from 0.15.0 to 0.16.0
- [Commits](golang/time@v0.15.0...v0.16.0)

Updates `sigs.k8s.io/external-dns` from 0.21.0 to 0.23.0
- [Release notes](https://github.com/kubernetes-sigs/external-dns/releases)
- [Changelog](https://github.com/kubernetes-sigs/external-dns/blob/master/docs/release.md)
- [Commits](kubernetes-sigs/external-dns@v0.21.0...v0.23.0)

---
updated-dependencies:
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/time
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: sigs.k8s.io/external-dns
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-a7a9ca8682 branch from 7f429d3 to a531bc1 Compare October 10, 2026 13:23
@dependabot @github

dependabot Bot commented on behalf of github Oct 17, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 17, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-dependencies-a7a9ca8682 branch October 17, 2026 13:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants