deps: update Go dependencies #1965

renovate · 2025-11-25T09:22:09Z

This PR contains the following updates:

Package	Change	Type	Update
github.com/goccy/go-yaml	`v1.18.0` -> `v1.19.0`	require	minor
github.com/google/go-containerregistry	`v0.20.6` -> `v0.20.7`	require	patch
github.com/google/go-tdx-guest	`ffb0869` -> `5ba7655`	require	digest
github.com/prometheus/common	`v0.67.2` -> `v0.67.4`	require	patch
github.com/shirou/gopsutil/v4	`v4.25.10` -> `v4.25.11`	require	patch
go.podman.io/storage	`7ea7344` -> `94e31d2`	require	digest
golang.org/x/exp	`e25ba8c` -> `87e1e73`	require	digest
google.golang.org/grpc	`v1.76.0` -> `v1.77.0`	require	minor

Release Notes

goccy/go-yaml (github.com/goccy/go-yaml)

`v1.19.0`: 1.19.0

Compare Source

What's Changed

Revert "feat: Dont make copies of structs for validation" by @shuheiktgw in #763
Add decode option that allows specific field prefixes by @cpuguy83 in #795
Normalize CR and CRLF in multi-line strings by @shuheiktgw in #754
Support non string map keys by @shuheiktgw in #756
Skip directive in path operations by @shuheiktgw in #758
Add indentation to flow values on new lines by @shuheiktgw in #759
Add support for RawMessage, similar to json.RawMessage by @thanethomson in #790

New Contributors

@cpuguy83 made their first contribution in #795
@thanethomson made their first contribution in #790

Full Changelog: goccy/go-yaml@v1.18.0...v1.19.0

google/go-containerregistry (github.com/google/go-containerregistry)

`v0.20.7`

Compare Source

What's Changed

Fix ArgsEscaped lint directive by @Subserial in #2137
transport: Fix broken links to distribution docs by @guzalv in #2136
fix(remote): using customized retry predicate func if provided by @derekhjray in #2135
Adding docker file by @HassanJasim in #2138
crane: Add timestamp to flatten layer by @Stephanie0829 in #2117
feat(remote): pass retryBackoff option to transport by @aslafy-z in #1628
Expose clobber refusal error by @pjbgf in #2146
Build artifacts for riscv64 by @ffgan in #2159
Update dependencies and deprecate DockerVersion field by @Subserial in #2164

New Contributors

@guzalv made their first contribution in #2136
@derekhjray made their first contribution in #2135
@HassanJasim made their first contribution in #2138
@Stephanie0829 made their first contribution in #2117
@pjbgf made their first contribution in #2146
@ffgan made their first contribution in #2159

Full Changelog: google/go-containerregistry@v0.20.6...v0.20.7

prometheus/common (github.com/prometheus/common)

`v0.67.4`: / 2025-11-18

Compare Source

What's Changed

chore: clean up golangci-lint configuration by @mmorel-35 in #782
chore: 'omitempty' to Oauth2 fields with type Secret to avoid requiring them by @JorTurFer in #864
chore: Add omitempty tag to all config fields by @JorTurFer in #865

Full Changelog: prometheus/common@v0.67.3...v0.67.4

`v0.67.3`: / 2025-11-18

Compare Source

What's Changed

Support JWT Profile for Authorization Grant (RFC 7523 3.1) by @JorTurFer in #862
Config: remove outdated comment about HTTP/2 issues by @bboreham in #863

New Contributors

@JorTurFer made their first contribution in #862

Full Changelog: prometheus/common@v0.67.2...v0.67.3

shirou/gopsutil (github.com/shirou/gopsutil/v4)

`v4.25.11`

Compare Source

grpc/grpc-go (google.golang.org/grpc)

`v1.77.0`: Release 1.77.0

Compare Source

API Changes

mem: Replace the Reader interface with a struct for better performance and maintainability. (#8669)

Behavior Changes

balancer/pickfirst: Remove support for the old pick_first LB policy via the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false. The new pick_first has been the default since v1.71.0. (#8672)

Bug Fixes

xdsclient: Fix a race condition in the ADS stream implementation that could result in resource-not-found errors, causing the gRPC client channel to move to TransientFailure. (#8605)
client: Ignore HTTP status header for gRPC streams. (#8548)
client: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (#8534)
- Special Thanks: @jgold2-stripe
client: Fix a bug where default port 443 was not automatically added to addresses without a specified port when sent to a proxy.
- Setting environment variable GRPC_EXPERIMENTAL_ENABLE_DEFAULT_PORT_FOR_PROXY_TARGET=false disables this change; please file a bug if any problems are encountered as we will remove this option soon. (#8613)
balancer/pickfirst: Fix a bug where duplicate addresses were not being ignored as intended. (#8611)
server: Fix a bug that caused overcounting of channelz metrics for successful and failed streams. (#8573)
- Special Thanks: @hugehoo
balancer/pickfirst: When configured, shuffle addresses in resolver updates that lack endpoints. Since gRPC automatically adds endpoints to resolver updates, this bug only affects custom LB policies that delegate to pick_first but don't set endpoints. (#8610)
mem: Clear large buffers before re-using. (#8670)

Performance Improvements

transport: Reduce heap allocations to reduce time spent in garbage collection. (#8624, #8630, #8639, #8668)
transport: Avoid copies when reading and writing Data frames. (#8657, #8667)
mem: Avoid clearing newly allocated buffers. (#8670)

New Features

outlierdetection: Add metrics specified in gRFC A91. (#8644)
- Special Thanks: @davinci26, @PardhuKonakanchi
stats/opentelemetry: Add support for optional label grpc.lb.backend_service in per-call metrics (#8637)
xds: Add support for JWT Call Credentials as specified in gRFC A97. Set environment variable GRPC_EXPERIMENTAL_XDS_BOOTSTRAP_CALL_CREDS=true to enable this feature. (#8536)
- Special Thanks: @dimpavloff
experimental/stats: Add support for up/down counters. (#8581)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-11-25T09:22:12Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

2 additional dependencies were updated

Details:

Package	Change
`golang.org/x/oauth2`	`v0.32.0` -> `v0.33.0`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20250826171959-ef028d996bc1` -> `v0.0.0-20251022142026-3a174f9686a8`

File name: imagepuller/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

6 additional dependencies were updated

Details:

Package	Change
`github.com/cyphar/filepath-securejoin`	`v0.6.0` -> `v0.6.1`
`github.com/docker/cli`	`v28.3.3+incompatible` -> `v29.0.3+incompatible`
`github.com/modern-go/reflect2`	`v1.0.2` -> `v1.0.3-0.20250322232337-35a7c28c31ee`
`github.com/opencontainers/runtime-spec`	`v1.2.1` -> `v1.3.0`
`github.com/opencontainers/selinux`	`v1.13.0` -> `v1.13.1`
`github.com/sirupsen/logrus`	`v1.9.3` -> `v1.9.4-0.20230606125235-dd1b4c2e81af`

File name: imagestore/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

1 additional dependency was updated

Details:

Package	Change
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20250826171959-ef028d996bc1` -> `v0.0.0-20251022142026-3a174f9686a8`

File name: tools/imagepuller-benchmark/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

2 additional dependencies were updated

Details:

Package	Change
`github.com/ebitengine/purego`	`v0.9.0` -> `v0.9.1`
`github.com/sirupsen/logrus`	`v1.9.3` -> `v1.9.4-0.20230606125235-dd1b4c2e81af`

renovate · 2025-12-01T07:39:18Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Co-authored-by: Paul Meyer <[email protected]>

renovate bot added the dependencies Dependency update label Nov 25, 2025

edgelessci requested a review from katexochen as a code owner November 25, 2025 09:29

deps: update Go dependencies

042d284

renovate bot force-pushed the renovate/go-dependencies branch from 1455835 to 042d284 Compare December 1, 2025 07:31

fixup: update generated code

85ff37e

katexochen approved these changes Dec 2, 2025

View reviewed changes

katexochen merged commit 82d4b86 into main Dec 2, 2025
14 checks passed

katexochen deleted the renovate/go-dependencies branch December 2, 2025 09:16

msanft pushed a commit that referenced this pull request Dec 3, 2025

deps: update Go dependencies (#1965)

c50915b

Co-authored-by: Paul Meyer <[email protected]>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps: update Go dependencies #1965

deps: update Go dependencies #1965

Uh oh!

renovate bot commented Nov 25, 2025 •

edited

Loading

Uh oh!

renovate bot commented Nov 25, 2025 •

edited

Loading

Uh oh!

renovate bot commented Dec 1, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

deps: update Go dependencies #1965

deps: update Go dependencies #1965

Uh oh!

Conversation

renovate bot commented Nov 25, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.19.0: 1.19.0

What's Changed

New Contributors

v0.20.7

What's Changed

New Contributors

v0.67.4: / 2025-11-18

What's Changed

v0.67.3: / 2025-11-18

What's Changed

New Contributors

v4.25.11

v1.77.0: Release 1.77.0

API Changes

Behavior Changes

Bug Fixes

Performance Improvements

New Features

Configuration

Uh oh!

renovate bot commented Nov 25, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: go.mod

File name: imagepuller/go.mod

File name: imagestore/go.mod

File name: tools/imagepuller-benchmark/go.mod

Uh oh!

renovate bot commented Dec 1, 2025

Edited/Blocked Notification

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

renovate bot commented Nov 25, 2025 •

edited

Loading

`v1.19.0`: 1.19.0

`v0.20.7`

`v0.67.4`: / 2025-11-18

`v0.67.3`: / 2025-11-18

`v4.25.11`

`v1.77.0`: Release 1.77.0

renovate bot commented Nov 25, 2025 •

edited

Loading