Skip to content

chore(deps): update all dependencies - #2351

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all
Open

chore(deps): update all dependencies#2351
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all

Conversation

@renovate

@renovate renovate Bot commented Sep 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/download-artifact action patch v8.0.1 → v8.0.2 age confidence
actions/upload-artifact action patch v7.0.1 → v7.0.2 age confidence
alpine (source) final patch 3.24.1 → 3.24.3 age confidence
azure/setup-kubectl action minor v5.1.0 → v5.2.0 age confidence
curlimages/curl minor 8.22.0 → 8.23.0 age confidence
docker/login-action action minor v4.6.0 → v4.7.0 age confidence
fluent-plugin-grok-parser patch '2.6.2' → '2.6.3' age confidence
fluent-plugin-opensearch (changelog) patch '1.1.7' → '1.1.8' age confidence
fluent-plugin-rabbitmq patch '0.1.5' → '0.1.6' age confidence
gcr.io/distroless/static final digest 5813399 → 15f8637
github.com/kube-logging/telemetry-controller require digest 3af840d → ebf1452 age confidence
github.com/onsi/ginkgo/v2 require minor v2.32.2 → v2.33.1 age confidence
github.com/onsi/gomega require minor v1.43.0 → v1.44.0 age confidence
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring require patch v0.94.0 → v0.94.2 age confidence
github.com/prometheus/client_golang require minor v1.24.1 → v1.25.0 age confidence
github.com/stern/stern minor 1.34.0 → 1.35.0 age confidence
github.com/vladopajic/go-test-coverage/v2 minor 2.19.0 → 2.20.1 age confidence
github/codeql-action action minor v4.38.0 → v4.39.1 age confidence
golang (source) stage patch 1.27.1-alpine3.23 → 1.27.3-alpine3.23 age confidence
golang patch 1.27.1 → 1.27.3 age confidence
golangci/golangci-lint minor 2.13.2 → 2.15.0 age confidence
helm uses-with patch v4.3.0 → v4.3.1 age confidence
helm.sh/helm/v4 require patch v4.3.0 → v4.3.1 age confidence
k8s.io/api require patch v0.37.0 → v0.37.1 age confidence
k8s.io/apiextensions-apiserver require patch v0.37.0 → v0.37.1 age confidence
k8s.io/apimachinery require patch v0.37.0 → v0.37.1 age confidence
k8s.io/client-go require patch v0.37.0 → v0.37.1 age confidence
k8s.io/utils require digest cf1189d → ca04ba5 age confidence
kubernetes-sigs/controller-tools minor 0.22.0 → 0.23.0 age confidence
oj (source, changelog) patch '3.17.6' → '3.17.7' age confidence
rdkafka (source, changelog) minor '0.29.2' → '0.31.0' age confidence
ruby (source) final patch 4.0.7-alpine3.23 → 4.0.9-alpine3.23 age confidence
sigs.k8s.io/controller-runtime require patch v0.25.1 → v0.25.2 age confidence
vladopajic/go-test-coverage action minor v2.19.0 → v2.20.1 age confidence

Release Notes

actions/download-artifact

v8.0.2

Compare Source

What's Changed
New Contributors

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

actions/upload-artifact

v7.0.2

Compare Source

What's Changed
  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.
New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

azure/setup-kubectl

v5.2.0

Compare Source

Added
Fixed
Changed
Security
curl/curl-container (curlimages/curl)

v8.23.0

Compare Source

Changed
  • update certdata
docker/login-action

v4.7.0

Compare Source

Full Changelog: docker/login-action@v4.6.0...v4.7.0

fluent/fluent-plugin-grok-parser (fluent-plugin-grok-parser)

v2.6.3

Compare Source

fluent/fluent-plugin-opensearch (fluent-plugin-opensearch)

v1.1.8

Compare Source

  • out_opensearch: limit what a host placeholder can expand to (#​192)
  • out_opensearch: escape a customize_template value inside a string (#​194)
  • out_opensearch: lock the client cache against flush threads (#​195)
nttcom/fluent-plugin-rabbitmq (fluent-plugin-rabbitmq)

v0.1.6

Compare Source

onsi/ginkgo (github.com/onsi/ginkgo/v2)

v2.33.1

Compare Source

Fixes
  • Add several missing fields to spec report JSON output.

v2.33.0

Compare Source

Features
  • The JUnit reporter now records each spec's ReportEntrys as <properties> on its <testcase> element, with the entry's name and its JSON-encoded value. Thanks @​pohly! [23db51a]
Maintenance
  • Releases are now cut by a GitHub Actions workflow (Actions -> Release -> Run workflow) rather than by hand, with changelog entries collected under ## Unreleased as the work happens. See RELEASING.md. [8616ecb]
onsi/gomega (github.com/onsi/gomega)

v1.44.0

Compare Source

Fixes
  • BeNumerically compares signed and unsigned integers by value: -1 no longer equals uint64(math.MaxUint64) and uint(5) is now greater than -3 (#​925) [26e3c6b]
  • BeNumerically("~") no longer overflows when computing the distance between extreme integers (#​928) [1955764]
  • BeNumerically("==", x, threshold) now honors the threshold for floats, as it already did for integers (#​927) [10e2aca]
  • HaveKeyWithValue succeeds if any key accepted by the key matcher has a matching value, rather than depending on map iteration order (#​929) [ffc577a]
  • HaveKey and HaveKeyWithValue treat key and value matcher errors like ContainElement does: a match wins, and an error is only reported when nothing matches (#​926) [dc91598]
  • MatchJSON no longer treats numbers too large for a float64 as equal to one another (#​930) [9d619a5]
  • MatchJSON compares integers beyond ±2^53 exactly, so neighboring large integers (e.g. IDs) no longer match; all other numbers are still compared as float64s (#​931) [8ef1aa7, 630fe12]
  • HaveExactElements reports missing or extra elements that start at index 0, and reports the first extra element's index rather than the last (#​934) [af1b777]
  • MatchYAML compares every document in a multi-document stream rather than only the first; empty documents (e.g. a leading or trailing ---) are ignored (#​933) [2773796]
  • MatchXML ignores namespace prefixes: elements and attributes are compared by namespace URI, and the URIs declared on each element must match whatever prefix they are bound to (#​932) [c0dbd89, 2565350]

v1.43.1

Compare Source

Maintenance
  • Update go.yaml.in/yaml/v3 to v3.0.5 [d547015]
  • Releases are now cut by a GitHub Actions workflow (Actions -> Release -> Run workflow) rather than by hand, with changelog entries collected under ## Unreleased as the work happens. Releases still ship the stripped-down tree on master-lite - tests removed and Ginkgo dropped from go.mod - and the workflow now builds it and checks it on every push. See RELEASING.md. [e9dc84d]
prometheus-operator/prometheus-operator (github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring)

v0.94.2: 0.94.2 / 2026-10-22

Compare Source

  • [SECURITY] Rebuild with latest quay.io/prometheus/busybox base images to remove the Comodo AAA Services root and emSign ECC Root CA - G3 root CAs. #​8907
  • [SECURITY] Rebuild with Go 1.27.3 to fix various vulnerabilities. #​8907

v0.94.1: 0.94.1 / 2026-09-23

Compare Source

  • [BUGFIX] Restore update permission on finalizer subresources in the operator's ClusterRole, required by OwnerReferencesPermissionEnforcement when blockOwnerDeletion is set. #​8830
prometheus/client_golang (github.com/prometheus/client_golang)

v1.25.0

Compare Source

⚠️ This release raises the minimum required Go version to 1.26 and includes breaking API changes in api/prometheus/v1 (see the [CHANGE] entries below). ⚠️

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #​2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #​1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #​1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #​2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #​2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #​2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #​2090, #​2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #​2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #​2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #​2139
  • [BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #​2135
What's changed

What's Changed

New Contributors

Full Changelog: prometheus/client_golang@v1.24.1...v1.25.0

stern/stern (github.com/stern/stern)

v1.35.0

Compare Source

⚡ Notable Changes

A new --pager flag to pipe output into a pager

You can now pipe stern's output into a pager with the --pager flag. Unlike piping in the shell (stern --color=always backend | less -R), colors are preserved without any extra flags, and stern stops tailing when you quit the pager.

stern --pager less backend

The pager is used only when the standard output is connected to a terminal (tty). If you always want to use a pager, set it in the config file:

pager: less
Distinct colors for pods created by the same workload

Pods created by the same workload (e.g. replicas of a Deployment) are now assigned distinct colors as long as unused colors remain, so that their interleaved logs are easier to tell apart. Pods that do not share a workload with other pods keep the same colors as before.

Nested field extraction in extractJSONParts

extractJSONParts and tryExtractJSONParts now accept keys in dot notation to access nested fields.

stern --template='{{ extractJSONParts .Message "python.levelname" "message" }}{{"\n"}}' backend
The timestamp and the namespace in extjson and ppextjson

The extjson and ppextjson outputs now include the timestamp field when --timestamps is specified, and the namespace field when tailing multiple namespaces with --namespace. Nested JSON messages in ppextjson are now indented as well.

$ stern --timestamps -o extjson backend
{"pod":"backend-...","container":"backend","timestamp":"2026-10-01T10:00:00.123456789Z","message":"hello"}

⚠️ Breaking Changes

.Message no longer includes the timestamp with --timestamps

With --timestamps, the timestamp is no longer prepended to .Message in templates, so template functions that parse .Message as JSON now work with --timestamps. The timestamp is available as the new .Timestamp template variable. The output of the built-in default and raw templates is unchanged, but if you use a custom template with --timestamps, add .Timestamp to it to keep printing the timestamp.

stern --timestamps --template='{{.Timestamp}} {{.Message}}{{"\n"}}' backend

Changes

  • fix: close config file after reading (#​367) ee5b0b3 (Filip Boye-Kofi)
  • fix: change errorf format to represent real value (#​368) 0d39b3f (Filip Boye-Kofi)
  • docs: fix "when if" typo in max-log-requests table (#​371) 13b9806 (SEONGHYUN HONG)
  • Keep .Message raw with --timestamps; expose timestamp as .Timestamp (#​372) 8a00e61 (SEONGHYUN HONG)
  • Support nested field extraction via dot notation in extractJSONParts (#​373) 3dd605b (somaz)
  • docs: list toUTC in README template functions (#​378) 2926461 (Dean Chen)
  • Fix misspelled identifiers reHightlight and stirngSlice (#​382) 523c01a (MsfPablo)
  • fix: honor --timestamps when reading from stdin (#​380) 96b3c3a (Vincent)
  • fix: include the namespace in extjson and ppextjson for multiple namespaces (#​386) d6d42c9 (Ahmad Mehrabi)
  • fix: preserve the sign of fractional Unix timestamps (#​388) 6db257e (Haram Jeong)
  • docs: fix the function name in the colorCustom example (#​383) 050c9fe (Iain)
  • Assign distinct colors to pods created by the same workload (#​375) 74000c2 (Jojin)
  • Add --pager flag to pipe output into a pager (#​376) 4772306 (Jojin)
  • Hide the namespace when --namespace repeats a single namespace (#​389) b4b5d59 (Kazuki Suda)
  • Update dependencies for Kubernetes 1.37 (#​390) e62aec2 (Kazuki Suda)
  • fix: show the timestamp in extjson and ppextjson output (#​392) 5e330c6 (Spicy Shark)
  • Marshal extjson and ppextjson outputs with encoding/json instead of string concatenation (#​393) 7ef2365 (Kazuki Suda)
  • fix: keep inline regexp flags within their own --highlight pattern (#​395) 9a830a0 (Spicy Shark)
vladopajic/go-test-coverage (github.com/vladopajic/go-test-coverage/v2)

v2.20.1

Compare Source

What's Changed

Full Changelog: vladopajic/go-test-coverage@v2.20.0...v2.20.1

v2.20.0

Compare Source

What's Changed

  • Updated the Go runtime to v1.27
  • Fixed coverage-ignore handling for Go 1.27’s updated coverage profile format
  • Updated AWS SDK, Testify, and GitHub Actions dependencies
  • Updated lint tooling and rules

Full Changelog: vladopajic/go-test-coverage@v2.19.0...v2.20.0

github/codeql-action

v4.39.1

Compare Source

v4.39.0

Compare Source

  • Breaking change: Bump the minimum required CodeQL bundle version to 2.20.7. #​4205
  • The codeql-action/analyze step now validates that a correct argument for the checkout_path input has been provided. The checkout_path input must be set to the path wher

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Etc/UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Sep 18, 2026
@renovate
renovate Bot force-pushed the renovate/all branch 6 times, most recently from d15100b to 717150e Compare September 24, 2026 20:07
@renovate

renovate Bot commented Sep 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: e2e/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 11 additional dependencies were updated

Details:

Package Change
golang.org/x/crypto v0.57.0 -> v0.58.0
golang.org/x/sync v0.23.0 -> v0.24.0
golang.org/x/sys v0.48.0 -> v0.49.0
golang.org/x/term v0.46.0 -> v0.47.0
golang.org/x/text v0.42.0 -> v0.43.0
k8s.io/apiserver v0.37.0 -> v0.37.1
k8s.io/cli-runtime v0.37.0 -> v0.37.1
k8s.io/component-base v0.37.0 -> v0.37.1
k8s.io/kubectl v0.37.0 -> v0.37.1
k8s.io/streaming v0.37.0 -> v0.37.1
sigs.k8s.io/kustomize/kyaml v0.21.1 -> v0.21.2
File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 3 additional dependencies were updated

Details:

Package Change
github.com/prometheus/common v0.71.0 -> v0.72.0
github.com/prometheus/procfs v0.21.1 -> v0.22.0
golang.org/x/oauth2 v0.36.0 -> v0.37.0
File name: images/config-reloader/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated

Details:

Package Change
github.com/prometheus/common v0.71.0 -> v0.72.0
github.com/prometheus/procfs v0.21.1 -> v0.22.0
File name: pkg/sdk/logging/model/syslogng/config/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated

Details:

Package Change
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.94.0 -> v0.94.2
k8s.io/client-go v0.37.0 -> v0.37.1

@renovate
renovate Bot force-pushed the renovate/all branch 4 times, most recently from 6c0240d to bbba85f Compare October 1, 2026 16:54
@renovate
renovate Bot force-pushed the renovate/all branch 10 times, most recently from 7399e53 to e274e4c Compare October 10, 2026 04:23
@renovate
renovate Bot force-pushed the renovate/all branch 7 times, most recently from 17b0ebb to d7e6a26 Compare October 16, 2026 12:24
@renovate
renovate Bot force-pushed the renovate/all branch 8 times, most recently from 9a4a3f0 to 9358ab1 Compare October 23, 2026 18:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants