Skip to content

deps: bump the all-go-minor-and-patch group across 1 directory with 12 updates - #4854

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/all-go-minor-and-patch-0dd703196b
Open

deps: bump the all-go-minor-and-patch group across 1 directory with 12 updates#4854
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/all-go-minor-and-patch-0dd703196b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-go-minor-and-patch group with 10 updates in the / directory:

Package From To
github.com/Azure/azure-sdk-for-go/sdk/azcore 1.23.0 1.23.1
github.com/Azure/azure-sdk-for-go/sdk/azidentity 1.14.0 1.14.1
github.com/containernetworking/cni 1.3.0 1.3.1
github.com/prometheus/client_model 0.6.2 0.6.3
github.com/prometheus/common 0.70.1 0.71.0
github.com/sirupsen/logrus 1.10.1 1.10.2
golang.org/x/sync 0.22.0 0.23.0
golang.org/x/sys 0.47.0 0.48.0
golang.org/x/time 0.15.0 0.16.0
google.golang.org/grpc 1.83.1 1.83.2

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.23.0 to 1.23.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.23.1

1.23.1 (2026-08-27)

Other Changes

  • Upgraded dependencies.
Commits
  • d86ae78 Prep azcore for release (#27471)
  • 33dd768 [azwebpubsub] Fix GenerateClientAccessURL on the TokenCredential path (#27422)
  • a27ca57 Upgrade TypeSpec Go emitter dependencies (#27466)
  • af75eb0 [AutoPR sdk-resourcemanager/purestorageblock/armpurestorageblock]-generated-f...
  • 8dcff8c [AutoPR sdk-resourcemanager/redisenterprise/armredisenterprise]-generated-fro...
  • e4569f1 [AutoPR sdk-resourcemanager/chaos/armchaos]-generated-from-SDK Generation - G...
  • 7069bf8 [AutoPR sdk-resourcemanager/horizondb/armhorizondb]-generated-from-SDK Genera...
  • 5ceffce Bump gh-aw to v0.86.2 for mgmt review workflow (#27460)
  • 663b6ce Enhance azblob perf tests with OAuth, parallel setup, and profiling (#27324)
  • cf17431 [AutoPR sdk-resourcemanager/containerservice/armcontainerservice]-generated-f...
  • Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.14.0 to 1.14.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.14.1

1.14.1 (2026-08-27)

Other Changes

  • Upgraded dependencies
Commits
  • 920e79a Prep azidentity for release (#27473)
  • d86ae78 Prep azcore for release (#27471)
  • 33dd768 [azwebpubsub] Fix GenerateClientAccessURL on the TokenCredential path (#27422)
  • a27ca57 Upgrade TypeSpec Go emitter dependencies (#27466)
  • af75eb0 [AutoPR sdk-resourcemanager/purestorageblock/armpurestorageblock]-generated-f...
  • 8dcff8c [AutoPR sdk-resourcemanager/redisenterprise/armredisenterprise]-generated-fro...
  • e4569f1 [AutoPR sdk-resourcemanager/chaos/armchaos]-generated-from-SDK Generation - G...
  • 7069bf8 [AutoPR sdk-resourcemanager/horizondb/armhorizondb]-generated-from-SDK Genera...
  • 5ceffce Bump gh-aw to v0.86.2 for mgmt review workflow (#27460)
  • 663b6ce Enhance azblob perf tests with OAuth, parallel setup, and profiling (#27324)
  • Additional commits viewable in compare view

Updates github.com/containernetworking/cni from 1.3.0 to 1.3.1

Release notes

Sourced from github.com/containernetworking/cni's releases.

v1.3.1

What's Changed

New Contributors

Full Changelog: containernetworking/cni@v1.3.0...v1.3.1

Commits
  • 3f51e88 Merge pull request #1173 from jipperinbham/feat/otel-tracing
  • beb7d36 pkg/invoke: add OpenTelemetry trace context propagation
  • 7c27007 Merge pull request #1177 from Abhigyan-Shekhar/Abhigyan-Shekhar-patch-1
  • f1cb561 docs: Fix broken link to "Version considerations" in SPEC.md
  • 1d67f89 Merge pull request #1170 from Faaizz/main
  • bab140e Merge pull request #1172 from squeed/meeting-time-change
  • c5470a9 Merge pull request #1171 from scpeters/invalidcache_delnetwork
  • 27db8d2 README: change meeting to 10:00 US/East.
  • a30dcc7 Update test expectations to tolerate error
  • 36b1672 Tolerate invalid cni cache for DelNetwork
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_model from 0.6.2 to 0.6.3

Release notes

Sourced from github.com/prometheus/client_model's releases.

v0.6.3

What's Changed

New Contributors

Full Changelog: prometheus/client_model@v0.6.2...v0.6.3

What's Changed

... (truncated)

Commits

Updates github.com/prometheus/common from 0.70.1 to 0.71.0

Release notes

Sourced from github.com/prometheus/common's releases.

v0.71.0

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.70.1...v0.71.0

Commits
  • 9a4aff0 build(deps): bump github.com/stretchr/testify in /assets (#979)
  • 483bb89 Update dependabot config (#978)
  • d29e1ea build(deps): bump golang.org/x/net (#975)
  • e531bd2 build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 (#976)
  • bc3fc3a build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 (#977)
  • 15e9f45 expfmt: fix OpenMetrics 2.0 decoder error, format docs, and encoder version d...
  • 0acfdb3 expfmt: prevent st@ leaking to Gauge and Untyped samples in OpenMetrics 2.0 (...
  • eb72e27 model: add Duration unit constants and conversion methods (#952)
  • 67b7d90 fix: drop invalid OpenMetrics 2.0 exemplars instead of failing exposition (#970)
  • 715ac36 expfmt: format OpenMetrics 2.0 float values and validate units (#969)
  • Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.10.1 to 1.10.2

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.2

Logrus v1.10.2

This is a small maintenance release that updates github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency from Logrus' dependency graph. There are no functional changes in this release.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.1

Full Changelog: sirupsen/logrus@v1.10.1...v1.10.2

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.2

Changed:

  • Update github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency.
Commits
  • 6d6a132 Merge pull request #1586 from thaJeztah/prepare_v1.10.2
  • 4f94653 update changelog for v1.10.2
  • 87434bb Merge pull request #1585 from thaJeztah/bump_testify
  • e7d2120 chore(deps): bump github.com/stretchr/testify v1.12.1
  • See full diff in compare view

Updates github.com/stretchr/testify from 1.12.0 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

Commits

Updates golang.org/x/sync from 0.22.0 to 0.23.0

Commits
  • f75267d semaphore: panic on negative capacity
  • 3ffd83c all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Updates golang.org/x/sys from 0.47.0 to 0.48.0

Commits
  • 613e257 cpu: add riscv64 hwprobe drift test
  • 6f7b10f unix: add MLOCK_ONFAULT constant
  • 663e7c8 cpu: add basic support for GOARCH=sparc64
  • de5f12f cpu: add ppc64le POWER10 detection
  • 80e8acf unix: run go fix
  • 1e3c182 unix: add IPMI interface
  • d429e20 unix: stop generating sparc termbits from the generic header
  • bd3bddf unix: add missing HWTSTAMP_* constants
  • e812f53 windows: add SO_SNDTIMEO constant for socket options
  • f6989c5 unix: align Ifreq so its union accessors cannot fault
  • Additional commits viewable in compare view

Updates golang.org/x/time from 0.15.0 to 0.16.0

Commits
  • fb013b3 all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Updates google.golang.org/grpc from 1.83.1 to 1.83.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)
Commits

Updates google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…2 updates

Bumps the all-go-minor-and-patch group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.23.0` | `1.23.1` |
| [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.14.0` | `1.14.1` |
| [github.com/containernetworking/cni](https://github.com/containernetworking/cni) | `1.3.0` | `1.3.1` |
| [github.com/prometheus/client_model](https://github.com/prometheus/client_model) | `0.6.2` | `0.6.3` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.70.1` | `0.71.0` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.10.1` | `1.10.2` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.22.0` | `0.23.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.47.0` | `0.48.0` |
| [golang.org/x/time](https://github.com/golang/time) | `0.15.0` | `0.16.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.1` | `1.83.2` |



Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.23.0 to 1.23.1
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.23.0...sdk/azcore/v1.23.1)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.14.0 to 1.14.1
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.14.0...sdk/azidentity/v1.14.1)

Updates `github.com/containernetworking/cni` from 1.3.0 to 1.3.1
- [Release notes](https://github.com/containernetworking/cni/releases)
- [Commits](containernetworking/cni@v1.3.0...v1.3.1)

Updates `github.com/prometheus/client_model` from 0.6.2 to 0.6.3
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](prometheus/client_model@v0.6.2...v0.6.3)

Updates `github.com/prometheus/common` from 0.70.1 to 0.71.0
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.70.1...v0.71.0)

Updates `github.com/sirupsen/logrus` from 1.10.1 to 1.10.2
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.10.1...v1.10.2)

Updates `github.com/stretchr/testify` from 1.12.0 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.12.0...v1.12.1)

Updates `golang.org/x/sync` from 0.22.0 to 0.23.0
- [Commits](golang/sync@v0.22.0...v0.23.0)

Updates `golang.org/x/sys` from 0.47.0 to 0.48.0
- [Commits](golang/sys@v0.47.0...v0.48.0)

Updates `golang.org/x/time` from 0.15.0 to 0.16.0
- [Commits](golang/time@v0.15.0...v0.16.0)

Updates `google.golang.org/grpc` from 1.83.1 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.1...v1.83.2)

Updates `google.golang.org/protobuf` from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-minor-and-patch
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-minor-and-patch
- dependency-name: github.com/containernetworking/cni
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-minor-and-patch
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-minor-and-patch
- dependency-name: github.com/prometheus/common
  dependency-version: 0.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-minor-and-patch
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-minor-and-patch
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-minor-and-patch
- dependency-name: golang.org/x/sync
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-minor-and-patch
- dependency-name: golang.org/x/sys
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-minor-and-patch
- dependency-name: golang.org/x/time
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-minor-and-patch
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-minor-and-patch
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependencies only. label Sep 9, 2026
Copilot AI lite review requested due to automatic review settings September 9, 2026 02:54
@dependabot
dependabot Bot requested a review from a team as a code owner September 9, 2026 02:54
@dependabot dependabot Bot added the dependencies Dependencies only. label Sep 9, 2026
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The changes are limited to routine minor/patch dependency updates with consistent go.mod/go.sum state and no indicated code-level conflicts from the repository usage checks performed.

Pull request overview

This PR updates the repository’s Go module dependencies (minor/patch bumps) in the root module to pick up upstream fixes and security/maintenance updates while keeping the module on Go 1.26 (toolchain go1.26.7).

Changes:

  • Bumped Azure SDK modules (azcore, azidentity) to their latest patch releases.
  • Updated several core deps (containernetworking/cni, Prometheus libs, logrus, x/sync, x/sys, x/time, grpc, protobuf) and refreshed go.sum accordingly.
  • Repointed google.golang.org/protobuf from a pseudo-version to the tagged v1.36.12.
File summaries
File Description
go.mod Updates direct/indirect module versions for the root Go module while retaining go 1.26.0 + toolchain go1.26.7.
go.sum Updates module checksums to match the new dependency set.
Review details
  • Files reviewed: 1/2 changed files
  • Comments generated: 0
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@github-actions github-actions Bot mentioned this pull request Sep 11, 2026
11 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependencies only.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant