Skip to content

chore(deps): bump the go-modules group across 1 directory with 17 updates - #6

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-4c98de1e91
Closed

chore(deps): bump the go-modules group across 1 directory with 17 updates#6
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-4c98de1e91

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-modules group with 9 updates in the / directory:

Package From To
charm.land/bubbles/v2 2.1.0 2.1.1
github.com/gaissmai/bart 0.26.1 0.29.0
github.com/prometheus/client_golang 1.23.2 1.24.0
golang.org/x/crypto 0.53.0 0.54.0
golang.org/x/net 0.56.0 0.57.0
google.golang.org/grpc 1.80.0 1.82.1
google.golang.org/grpc/cmd/protoc-gen-go-grpc 1.6.1 1.6.2
github.com/cilium/ebpf 0.19.0 0.22.0
github.com/mdlayher/genetlink 1.3.2 1.4.0

Updates charm.land/bubbles/v2 from 2.1.0 to 2.1.1

Release notes

Sourced from charm.land/bubbles/v2's releases.

v2.1.1

Lil’ Textarea Fix

This is a tiny patch to fix a bug in textarea where the prompt character could be missing styling on empty lines. That’s all for now!

Thanks for using Bubbles, Charm 🌞

Changelog

Fixed

  • d2b2217d6352ce04183623d66d4266115419733c: fix(textarea): apply prompt style on all lines, including fillers (@​meowgorithm)

Docs

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits
  • d2b2217 fix(textarea): apply prompt style on all lines, including fillers
  • 0dafc72 chore(deps): bump actions/checkout from 6 to 7 in the all group (#1006)
  • 492ed7d chore(deps): bump the all group with 2 updates (#1004)
  • 40d145e chore(deps): bump the all group with 2 updates (#996)
  • 8585ef8 chore(deps): bump github.com/sahilm/fuzzy in the all group (#969)
  • ef0090e chore: remove CODEOWNERS
  • 6feda24 chore(deps): bump the all group with 3 updates (#958)
  • 42130e8 chore(deps): bump github.com/mattn/go-runewidth in the all group (#952)
  • 0d62ce2 chore(deps): bump dependabot/fetch-metadata from 2 to 3 in the all group (#953)
  • 204774b chore(deps): bump github.com/mattn/go-runewidth in the all group (#945)
  • Additional commits viewable in compare view

Updates charm.land/bubbletea/v2 from 2.0.2 to 2.0.7

Release notes

Sourced from charm.land/bubbletea/v2's releases.

v2.0.7

A few lil’ stability patches

Hi! This is a patch release with a few solid improvements around stability and correctness.

  • @​lrstanley, one of our faves, fixed a race condition around mice in the Cursed Renderer
  • @​lawrence3699 fixed a panic that could happen when input's not available
  • We fixed a correctness issue with regard to mouse releases when Kitty Keyboard was active (thanks, @​mitchellh)

Thanks for using Bubble Tea, and if you see anything awry please do let us know!

—Charm 👋

Changelog

Fixed

  • c60f0c53042238305ec13b486326588f12aea0ec: fix: prevent data race with cursedRenderer.onMouse (#1691) (@​lrstanley)
  • 074596e14e2f5ca5e3986ee72e7c08f1569c4178: fix: skip input reader restore when input is disabled (#1680) (@​lawrence3699)
  • 878d7df2f2b02f3ca8db177fa8553834bc35ea7c: fix(deps): bump ultraviolet for kitty keyboard fix (@​meowgorithm)

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

v2.0.6

This release fixes an issue with how Bubble Tea handled wide characters. Before, a wide character might be skipped or cause an infinite loop causing the CPU to spike. See charmbracelet/bubbletea@fdcd0cf and charmbracelet/ultraviolet#109 for more details.

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

v2.0.5

A small release to remove accidental unwanted debug log file. See charmbracelet/bubbletea@1ed724a and charmbracelet/ultraviolet@b516641 for details.

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

v2.0.4

This release includes a small fix related to width calculation in x/ansi. See charmbracelet/bubbletea@c788fe9 and charmbracelet/x@6921c75 for more details.

... (truncated)

Commits
  • a23da80 v2.0.7
  • 670963e chore(task): add release and fetch-tags tasks
  • 29c4c32 fix(examples/deps): go mod tidy
  • 878d7df chore(deps): bump ultraviolet for kitty keyboard fix
  • c60f0c5 fix: prevent data race with cursedRenderer.onMouse (#1691)
  • 640d879 docs(readme): update footer image
  • 0fbefd2 chore: remove CODEOWNERS
  • 074596e fix: skip input reader restore when input is disabled (#1680)
  • fdcd0cf chore: bump ultraviolet to 489999b90468 to fix a wide char issue
  • 1ed724a chore: bump ultraviolet to v0.0.0-20260413211237-bd52878bcec2
  • Additional commits viewable in compare view

Updates charm.land/lipgloss/v2 from 2.0.2 to 2.0.4

Release notes

Sourced from charm.land/lipgloss/v2's releases.

v2.0.4

Mini Crash Patch

Hi! This is a small patch to fix a writer-related panic. Thanks for using Lip Gloss!

Changelog

Fixed

Docs

Chore

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

v2.0.3

Changelog

Fixed

  • 472d718e2314596549bee2c0c8ccf8beea5f25ae: fix: Avoid background color query hang (#636) (@​jedevc)

Docs

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits
  • b00306c fix: prevent crash when writing to a closed wrap writer
  • 40ec0e6 docs: fix typo in table comment (#641)
  • e3b78a2 chore(deps): bump golang.org/x/sys in the all group (#691)
  • 758dd87 chore(deps): bump golang.org/x/sys in the all group (#674)
  • aa91b99 chore: remove CODEOWNERS
  • 9cbfe8b chore(lint): exclude revive naming linter
  • a4d0b40 docs: restore missing diaereses (#664)
  • 472d718 fix: Avoid background color query hang (#636)
  • 89fafba chore: bump x/ansi to v0.11.7 to fix width calculation bug
  • d6d41e1 chore(deps): bump golang.org/x/sys in the all group (#663)
  • Additional commits viewable in compare view

Updates github.com/gaissmai/bart from 0.26.1 to 0.29.0

Release notes

Sourced from github.com/gaissmai/bart's releases.

v0.29.0

Breaking Change for Equal:

Non-comparable types without a custom Equal method will now trigger a runtime panic instead of falling back to reflect.DeepEqual.

v0.28.2

  • minor code refactoring
  • better documentation

v0.28.1

What's Changed

  • better test coverage
  • cleans up the CI workflow
  • Remove Go Report Card badge
  • better docstrings for some functions
  • Expand edge-case tests
  • minor improvements in bitset and sparse-array handling

v0.28.0: New FastNode implementation

FastNode changed from fixed-size 256-slot arrays (the original ART design) to popcount-compressed sparse arrays (as for BartNode) but plus a pre-computed childRankCache[256]uint8 to improve the level traversing speed in comparison to BartNode.

The previous allotment propagation mechanism for Fast is removed in favor of the slower bitset-intersection-based LPM lookup.

The Fast lookup path is refactored to use the same stack-based backtracking pattern already used by Table.Lookup.

The zero-sized-type restriction on Fast is also lifted, since the new implementation stores values directly rather than requiring distinct pointer identity.

FastNode memory reduced: from a fixed 4,168 bytes to ~368 bytes base + sparse items; the allot propagation loop and *any pointer indirection are eliminated.

childRankCache: a 256-byte array caching the sparse-array rank for each child octet, maintained by O(256) increment/decrement loops on insert/delete; MustGetChild becomes a simple two-array lookup.

ZST (zero-sized-type) restriction removed.

v0.27.1

What's Changed

  • chore

always panic on nil receivers and arguments

  • Breaking Changes

... (truncated)

Commits
  • 578b05e refactor(Equal): replace reflect.DeepEqual with native equality
  • 9a14c7a refactor(value), avoid reflect package
  • a470f82 godoc formatting
  • 4d11a00 simplify internal/value
  • e2244a4 chore(actions): bump actions/setup-go from 6 to 7
  • f5e8406 refactor(value): modernize type checks
  • 1a6a9b5 update to 2026 in copyright
  • 0d6de7e remove panic guard in PfxToIdx
  • 5884d68 better comments
  • 3d69401 simplify code
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.23.2 to 1.24.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.24.0 - 2026-07-20

Changes

  • [CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. #1862
  • [CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated model.NameValidationScheme global. Default behavior is unchanged; code that set NameValidationScheme = LegacyValidation no longer gets legacy enforcement at metric, label, and push-grouping construction. #2051
  • [CHANGE] api/prometheus/v1: Support matchers (matches[] parameter) in Rules method (Rules(ctx context.Context, matches []string) (RulesResult, error)). #1843
  • [CHANGE] api/prometheus/v1: Refactor LabelNames method to return model.LabelNames instead of []string for consistency across the API. #1850
  • [CHANGE] exp/api/remote: Simplify Store interface, rename Handler to WriteHandler, and encapsulate write response handling. #1855
  • [FEATURE] prometheus: Add new Go 1.26 runtime metrics (/sched/goroutines-created:goroutines, /sched/goroutines/not-in-go:goroutines, /sched/goroutines/runnable:goroutines, /sched/goroutines/running:goroutines, /sched/goroutines/waiting:goroutines, /sched/threads/total:threads). #1942
  • [FEATURE] prometheus: Add WithUnit(unit string) option and explicit OpenMetrics unit support in CounterOpts, GaugeOpts, SummaryOpts, and HistogramOpts. #1392
  • [FEATURE] prometheus: Expose descriptor construction error through public Err() method on Desc. #1902
  • [FEATURE] promhttp: Add opt-in HandlerOpts.CoalesceGather to deduplicate concurrent Gather calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. #1969
  • [FEATURE] promhttp: HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #1925
  • [FEATURE] api/prometheus/v1: Add query formatting endpoint support (/format_query) and FormatQuery(ctx context.Context, query string) (string, error) method. #1846, #1856
  • [FEATURE] api/prometheus/v1: Add support for /status/tsdb/blocks endpoint via TSDBBlocks(ctx context.Context) ([]TSDBBlock, error) method. #1896
  • [FEATURE] exp/api/remote: Export BackoffConfig to allow customization when using WithAPIBackoff. #1895
  • [FEATURE] exp/api/remote: Add RetryCallBack to allow custom logging or handling on retry attempts in the remote write client. #1888, #1890
  • [ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. #1860
  • [ENHANCEMENT] api: Use cloned http.DefaultTransport when constructing default HTTP clients to prevent accidental mutations of shared global transport state. #1885
  • [BUGFIX] prometheus: Recover from collector panics during Gather() and return an error instead of crashing the process. #1961
  • [BUGFIX] prometheus: Fix cpu-seconds unit suffix handling for metric go_cpu_classes_gc_mark_assist_cpu_seconds. #1991
  • [BUGFIX] promhttp: InstrumentHandlerDuration and InstrumentHandlerCounter no longer panic when given an observer/counter that does not implement ExemplarObserver/ExemplarAdder (e.g. a SummaryVec). The exemplar is dropped and the value is recorded via the plain Observe/Add path, matching the safe-cast already used by Timer.ObserveDurationWithExemplar. #2005
  • [BUGFIX] api/prometheus/v1: Fall back to GET requests when POST requests return 403 Forbidden or method not allowed. #2030
  • [BUGFIX] api: Respect context cancellation inside httpClient.Do. #1971
  • [BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. #1889
  • [BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917
  • [BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. #1927

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.24.0 / 2026-07-20

  • [CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. #1862
  • [CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated model.NameValidationScheme global. Default behavior is unchanged; code that set NameValidationScheme = LegacyValidation no longer gets legacy enforcement at metric, label, and push-grouping construction. #2051
  • [CHANGE] api/prometheus/v1: Support matchers (matches[] parameter) in Rules method (Rules(ctx context.Context, matches []string) (RulesResult, error)). #1843
  • [CHANGE] api/prometheus/v1: Refactor LabelNames method to return model.LabelNames instead of []string for consistency across the API. #1850
  • [CHANGE] exp/api/remote: Simplify Store interface, rename Handler to WriteHandler, and encapsulate write response handling. #1855
  • [FEATURE] prometheus: Add new Go 1.26 runtime metrics (/sched/goroutines-created:goroutines, /sched/goroutines/not-in-go:goroutines, /sched/goroutines/runnable:goroutines, /sched/goroutines/running:goroutines, /sched/goroutines/waiting:goroutines, /sched/threads/total:threads). #1942
  • [FEATURE] prometheus: Add WithUnit(unit string) option and explicit OpenMetrics unit support in CounterOpts, GaugeOpts, SummaryOpts, and HistogramOpts. #1392
  • [FEATURE] prometheus: Expose descriptor construction error through public Err() method on Desc. #1902
  • [FEATURE] promhttp: Add opt-in HandlerOpts.CoalesceGather to deduplicate concurrent Gather calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. #1969
  • [FEATURE] promhttp: HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #1925
  • [FEATURE] api/prometheus/v1: Add query formatting endpoint support (/format_query) and FormatQuery(ctx context.Context, query string) (string, error) method. #1846, #1856
  • [FEATURE] api/prometheus/v1: Add support for /status/tsdb/blocks endpoint via TSDBBlocks(ctx context.Context) ([]TSDBBlock, error) method. #1896
  • [FEATURE] exp/api/remote: Export BackoffConfig to allow customization when using WithAPIBackoff. #1895
  • [FEATURE] exp/api/remote: Add RetryCallBack to allow custom logging or handling on retry attempts in the remote write client. #1888, #1890
  • [ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. #1860
  • [ENHANCEMENT] api: Use cloned http.DefaultTransport when constructing default HTTP clients to prevent accidental mutations of shared global transport state. #1885
  • [BUGFIX] prometheus: Recover from collector panics during Gather() and return an error instead of crashing the process. #1961
  • [BUGFIX] prometheus: Fix cpu-seconds unit suffix handling for metric go_cpu_classes_gc_mark_assist_cpu_seconds. #1991
  • [BUGFIX] promhttp: InstrumentHandlerDuration and InstrumentHandlerCounter no longer panic when given an observer/counter that does not implement ExemplarObserver/ExemplarAdder (e.g. a SummaryVec). The exemplar is dropped and the value is recorded via the plain Observe/Add path, matching the safe-cast already used by Timer.ObserveDurationWithExemplar. #2005
  • [BUGFIX] api/prometheus/v1: Fall back to GET requests when POST requests return 403 Forbidden or method not allowed. #2030
  • [BUGFIX] api: Respect context cancellation inside httpClient.Do. #1971
  • [BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. #1889
  • [BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917
  • [BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. #1927
Commits
  • 48dd383 Cut v1.24.0 (#2061)
  • a725305 Cut v1.24.0-rc.0 (#2058)
  • 77c584f build(deps): update all Go dependencies in all go.mod files (#2059)
  • 78262a7 feat(promhttp): add CoalesceGather option to deduplicate concurrent Gather ca...
  • 34e9a7f Merge pull request #2055 from prombot/repo_sync
  • 43749bc Update common Prometheus files
  • de19217 examples: improve simple main.go example (#1999)
  • 20355eb fix: correct typos in comments and test error messages (#2049)
  • 4cd2d3a test: fix two flaky tests (darwin start_time regex, memstats HeapReleased dri...
  • b0d896b Replace deprecated model.NameValidationScheme with explicit UTF8Validation (#...
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.53.0 to 0.54.0

Commits
  • cdce021 go.mod: update golang.org/x dependencies
  • d9474cc openpgp: make the deprecation message more explicit
  • 7626c50 ssh: verify declared key type matches decoded key in authorized_keys
  • 0471e79 ssh/agent: enforce strict limits on DSA key parameters
  • 6435c37 ssh: sanitize client disconnect messages
  • 7d695da ssh/agent: drain channel stderr in agent forwarders
  • 5b7f841 acme/autocert: fix data race in Manager.createCert
  • 0b316e7 argon2: update RFC 9106 parameter recommendations
  • 55aec0a x509roots/fallback: update bundle
  • 5f2de1a internal: remove wycheproof tests
  • See full diff in compare view

Updates golang.org/x/net from 0.56.0 to 0.57.0

Commits
  • b8f09f6 go.mod: update golang.org/x dependencies
  • f05f21b idna: reject all-ASCII xn-- labels on all Go versions
  • 0f748cf internal/http3: clean up stream I/O methods usages in tests
  • 0bb961e internal/http3: add net/http.ResponseController support
  • 0ca694d webdav: document Dir's lack of defense against filesystem modification
  • bd5f1dc http2: initialize Transport on NewClientConn
  • 488ff63 bpf: add security considerations to package docs
  • 93d1f25 xsrftoken: avoid token collisions
  • 5a3baee internal/http3: prevent panic in QPACK decoder due to overflow
  • See full diff in compare view

Updates golang.org/x/sys from 0.46.0 to 0.47.0

Commits
  • 9e7e939 cpu: handle vendor suffixes in parseRelease
  • f6fb8a1 unix: use epoll_pwait rather than epoll_wait
  • f3eeabf windows: avoid length overflow in NewNTString
  • 3cb6647 unix: update glibc to 2.43
  • c507910 windows: document safe usage of TrusteeValue
  • See full diff in compare view

Updates golang.org/x/term from 0.44.0 to 0.45.0

Commits

Updates golang.org/x/tools from 0.45.0 to 0.47.0

Commits
  • fbf9f2e gopls/internal/cmd: add tests of 'gopls help'
  • e891f79 go.mod: update golang.org/x dependencies
  • 0602b30 gopls: revert CLI usability revamp to stabilize release
  • 60c2434 gopls/internal/cmd: fix regression in initialization
  • 29e1583 gopls/internal/mcp: go_diagnostics: use idiomatic iterators
  • 0772d6a go/ssa: add test for fix of golang/go#73871 in go/types@go1.25
  • 0fdde84 gopls/internal/tool: rename Application to Command and embed in SubCommand
  • bd9e76d go/callgraph/vta: document ssa.InstantiateGenerics requirement
  • d711ac7 go/ssa: remove incorrect hasTypeParams check
  • 439decd gopls/internal/cache/xrefs: avoid materializing Inspector
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.80.0 to 1.82.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.1

Security

  • server: Stop reading from the connection when flooded by HTTP/2 frames. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
  • xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
  • xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
  • xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.

Release 1.82.0

Behavior Changes

  • server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)
  • transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)
  • balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

  • experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)
  • client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)
  • server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)

Bug Fixes

  • xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)
  • grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)
  • stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)
  • encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#9135)
  • channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#9109)

Release 1.81.1

Security

  • xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)

Bug Fixes

  • otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)

Release 1.81.0

Behavior Changes

  • balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#8808)

Dependencies

... (truncated)

Commits

Updates google.golang.org/grpc/cmd/protoc-gen-go-grpc from 1.6.1 to 1.6.2

Release notes

Sourced from google.golang.org/grpc/cmd/protoc-gen-go-grpc's releases.

protoc-gen-go-grpc v1.6.2

Dependencies

  • Upgrade dependencies to latest.
Commits
  • 1c63fa5 grpc: remove support for env var GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHE...
  • 959af53 transport: set current timestamp in channelz socket metrics (#9109)
  • 94b9449 xds/rbac: enforce strict presence-based short-circuit in authenticatedMatcher...
  • 89fe783 grpc: Document interactions between static flow control window options (#9096)
  • 3d0dd1e cmd/protoc-gen-go-grpc: Update to latest version of grpc-go (#9110)
  • 811290b stats/opentelemetry: restore the changes from #8342 and fix the flaky test. (...
  • 679ae4c stats: use correct import for services (#9107)
  • 850cc54 grpc: Remove ErrRetriesExhausted type in favor of error string (#9105)
  • 3d82ab3 otel: Segregate client and server RPCInfo used for metrics and traces (#9081)
  • a481b8f cleanup: removing TODO to improve timeouts encoding. (#9101)
  • Additional commits viewable in compare view

Updates github.com/cilium/ebpf from 0.19.0 to 0.22.0

Release notes

Sourced from github.com/cilium/ebpf's releases.

v0.21.0: Struct Ops, Weak Symbols and BTF deduplication

Hi, everyone! The Cilium project is proud to announce v0.21.0 of ebpf-go, our first major 2026 feature release. Please note that this version comes with a few breaking changes for XDP users that may require some intervention based on your use case, so please read the following section carefully before upgrading! We've also removed some long-deprecated APIs.

Breaking changes

XDP Attach Type

This release saw a change to the ELF parsing logic, specifically to XDP programs. Previously, XDP programs had their ProgramSpec.AttachType set to AttachNone. Prompted by upstream changes in Linux 6.18, XDP programs now come with an AttachXDP attach type. This change ensures compatibility with kernels going forward, as well as better interoperability with libbpf-based tools using shared PROG_ARRAY maps.

tl;dr: Linux 6.18 and later disallows mixing attach types within the same program array.

If your application uses a pinned program array, you may need to manually change the attach type of your XDP programs to AttachNone before they are loaded to ensure they can still be inserted into maps containing pre-upgrade programs.

The same goes for BPF links. If you're updating an XDP link created by an older version of ebpf-go, you need to ensure your XDP program is loaded with the same attach type the link was initially created with, or updating will fail with EINVAL.

For an example of how to deal with this change, here's the the Cilium PR that implemented logic to try both attach types when updating links.

Windows helper function rename

ebpf-for-windows was upgraded from 0.21.0 to v1.0.0-rc1. efW made breaking changes to the names of helper functions, our API has been updated to match:

New Features

  • Struct ops — The ELF reader can now parse struct ops sections, building MapSpecsDescription has been truncated

@dependabot
chore(deps): bump the go-modules group across 1 directory with 17 upd…
736a0ed 
…ates

Bumps the go-modules group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [charm.land/bubbles/v2](https://github.com/charmbracelet/bubbles) | `2.1.0` | `2.1.1` |
| [github.com/gaissmai/bart](https://github.com/gaissmai/bart) | `0.26.1` | `0.29.0` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.23.2` | `1.24.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.53.0` | `0.54.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.56.0` | `0.57.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.80.0` | `1.82.1` |
| [google.golang.org/grpc/cmd/protoc-gen-go-grpc](https://github.com/grpc/grpc-go) | `1.6.1` | `1.6.2` |
| [github.com/cilium/ebpf](https://github.com/cilium/ebpf) | `0.19.0` | `0.22.0` |
| [github.com/mdlayher/genetlink](https://github.com/mdlayher/genetlink) | `1.3.2` | `1.4.0` |



Updates `charm.land/bubbles/v2` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/charmbracelet/bubbles/releases)
- [Commits](charmbracelet/bubbles@v2.1.0...v2.1.1)

Updates `charm.land/bubbletea/v2` from 2.0.2 to 2.0.7
- [Release notes](https://github.com/charmbracelet/bubbletea/releases)
- [Commits](charmbracelet/bubbletea@v2.0.2...v2.0.7)

Updates `charm.land/lipgloss/v2` from 2.0.2 to 2.0.4
- [Release notes](https://github.com/charmbracelet/lipgloss/releases)
- [Commits](charmbracelet/lipgloss@v2.0.2...v2.0.4)

Updates `github.com/gaissmai/bart` from 0.26.1 to 0.29.0
- [Release notes](https://github.com/gaissmai/bart/releases)
- [Commits](gaissmai/bart@v0.26.1...v0.29.0)

Updates `github.com/prometheus/client_golang` from 1.23.2 to 1.24.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.24.0/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.23.2...v1.24.0)

Updates `golang.org/x/crypto` from 0.53.0 to 0.54.0
- [Commits](golang/crypto@v0.53.0...v0.54.0)

Updates `golang.org/x/net` from 0.56.0 to 0.57.0
- [Commits](golang/net@v0.56.0...v0.57.0)

Updates `golang.org/x/sys` from 0.46.0 to 0.47.0
- [Commits](golang/sys@v0.46.0...v0.47.0)

Updates `golang.org/x/term` from 0.44.0 to 0.45.0
- [Commits](golang/term@v0.44.0...v0.45.0)

Updates `golang.org/x/tools` from 0.45.0 to 0.47.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.45.0...v0.47.0)

Updates `google.golang.org/grpc` from 1.80.0 to 1.82.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.80.0...v1.82.1)

Updates `google.golang.org/grpc/cmd/protoc-gen-go-grpc` from 1.6.1 to 1.6.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@cmd/protoc-gen-go-grpc/v1.6.1...cmd/protoc-gen-go-grpc/v1.6.2)

Updates `github.com/cilium/ebpf` from 0.19.0 to 0.22.0
- [Release notes](https://github.com/cilium/ebpf/releases)
- [Commits](cilium/ebpf@v0.19.0...v0.22.0)

Updates `github.com/mdlayher/genetlink` from 1.3.2 to 1.4.0
- [Release notes](https://github.com/mdlayher/genetlink/releases)
- [Changelog](https://github.com/mdlayher/genetlink/blob/main/CHANGELOG.md)
- [Commits](mdlayher/genetlink@v1.3.2...v1.4.0)

Updates `github.com/mdlayher/netlink` from 1.7.3-0.20250113171957-fbb4dce95f42 to 1.9.0
- [Release notes](https://github.com/mdlayher/netlink/releases)
- [Changelog](https://github.com/mdlayher/netlink/blob/main/CHANGELOG.md)
- [Commits](https://github.com/mdlayher/netlink/commits/v1.9.0)

Updates `github.com/prometheus/procfs` from 0.16.1 to 0.21.1
- [Release notes](https://github.com/prometheus/procfs/releases)
- [Commits](prometheus/procfs@v0.16.1...v0.21.1)

Updates `github.com/sirupsen/logrus` from 1.9.3 to 1.9.4
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.3...v1.9.4)

---
updated-dependencies:
- dependency-name: charm.land/bubbles/v2
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: charm.land/bubbletea/v2
  dependency-version: 2.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: charm.land/lipgloss/v2
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/gaissmai/bart
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/net
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/term
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/tools
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.82.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/grpc/cmd/protoc-gen-go-grpc
  dependency-version: 1.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/cilium/ebpf
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/mdlayher/genetlink
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/mdlayher/netlink
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/prometheus/procfs
  dependency-version: 0.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 22, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 22, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-modules-4c98de1e91 branch July 22, 2026 10:35
thomas-mangin added a commit that referenced this pull request Aug 22, 2026
@thomas-mangin
answer: the document says what the line stopped saying
6257cf3 
Phase 8 of spec-record-answers-2-only-encoding, and the last one. The
fixtures and the documents catch up with the wire seven phases moved.

The wire stopped explaining itself, and the owner ruled on 2026-08-22
that the document now owes what it stopped saying. `#42 ok status=done
type=ndjson key=peers` needed no documentation, because the key names
WERE the explanation. We removed them for parse speed, so `#42 top map
5:peers 0:` is faster to read by machine and opaque to a person.

So every wire example in an API document now carries an IN-PLACE decode
naming each field, adjacent to the bytes rather than in prose nearby.
Nine examples are decoded: the doc answer and the streamed answer in
process-protocol.md, the three-line answer in wire-format.md, the
four-line rejecting answer, the over-wide record and the nay line in
ipc_protocol.md, the doc answer and the streamed head in
plugin-development/commands.md, and the doc answer in
plugin-development/protocol.md. Two ASCII sequence diagrams that phases
3 and 4 knowingly left stale carry the field names inline, where a
ladder would wreck the drawing.

Three more obligations came with it. Every count is stated as a BYTE
count, which phase 6 recorded the spec never said and which cost it
three red fixtures. Every three-letter word is given its meaning where a
reader first meets it, as a table of five kinds and three item types.
And no API page delegates its own subject: wire-format.md closed with
"the grammar is in ipc_protocol.md" and now carries the grammar, with
the link kept for the buffering threshold and the failure cases.

test/plugin/answer-payload-unchanged.ci is new, and it is the one test
that reads the PAYLOAD rather than the frame. recordRow.AppendTo
(internal/test/cli/cmd_record_plugin.go) writes each row with no
marshaler and this spec changed no line of it, so the literal the test
builds IS the byte string an operator received before the reframe
started. It reads both wire shapes, because the payload takes a
different road through each: `show test records fault` collapses twelve
rows into one counted record, and `show test records walk` writes one
counted record for each of three hundred.

Mutation-verified in both directions, which is the point of it. A
payload byte rewritten inside AppendAnswerItem, with the stated count
unchanged and the JSON still valid, reddens the collapsed leg with
"collapsed row 0 reached the operator as ... (85 bytes)" and the
streamed leg with the same message at 60021 bytes. The frame parsed
perfectly in both. A FRAME change in the other direction, an
answerRecordPrefixWidth one byte loose, reddens
TestAnswerRecordLineSizeExact and leaves this test green.

internal/exabgp/bridge/bridge_test.go fed the bridge a pre-phase-5
answer, `#6 top status=done type=ndjson key=peers`, and asserted the
bridge recognized it. It is now the wire ze writes. Mutation-verified:
taking the four kinds off the bridge's response arm reddens it with "an
answer line needs no acknowledgement".

Ten stale statements stood in the spec, and they all describe either the
id length prefix 9313b7d deleted or the 35-byte cap phase 6 retired.
Two of them are Key Design Decisions the owner REVERSED, and each now
says what was decided, that it was reversed, and the measurement that
reversed it: 8.1 to 9.2 ns for a counted id against 3.2 to 3.5 ns for a
fused loop, and 3.2 ns against 8.6 ns for a counted field length. A-2
and R-2 are marked retired with the mechanism they were about, AC-18 is
marked retired by phase 6, and the two renamed tests carry their real
names. The Files to Delete row named itself and now names
answer-not-negotiated.ci.

Four fixtures and eleven Go comments described the retired wire and now
describe this one. Five appender doc comments in message.go still
spelled `<len>:<n>:<value>`, the doubly counted form 50468ee deleted,
and AppendAnswerItem still said a newline inside a payload has no wire
form, which b05b628 made false.

make ze-functional-plugin-test: 633 of 634, all eleven answer fixtures
green. The one red is attach-process-reload, which is deterministic and
owned elsewhere.

test/plugin/exec-answer-unconditional.ci is the one thing this spec
planned and did not build. The scenario it names is driven by four
existing fixtures over the exec channel, and its row is left standing
rather than quietly retired.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants