Skip to content

fix(deps): update go modules (master) - #1936

Open
red-hat-konflux[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master-master/go-modules
Open

red-hat-konflux[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master-master/go-modules

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
github.com/aws/aws-sdk-go-v2/credentials v1.19.19v1.20.4 age confidence
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.74.2v1.87.0 age confidence
github.com/gin-contrib/cors v1.7.7v1.7.8 age confidence
github.com/gin-contrib/gzip v1.2.6v1.2.7 age confidence
github.com/prometheus/client_golang v1.23.2v1.24.1 age confidence
github.com/sirupsen/logrus v1.9.4v1.10.2 age confidence
github.com/stretchr/testify v1.11.1v1.12.1 age confidence

Release Notes

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2/credentials)

v1.20.0

Module Highlights

  • github.com/aws/aws-sdk-go-v2/feature/s3/manager: v1.20.0
    • Feature: Add durability checks to validate part count and range for upload/download. You can disable this with DisableValidateParts in upload/download options, though doing so is not recommended because it damages the durability posture of your application.
  • github.com/aws/aws-sdk-go-v2/service/costexplorer: v1.59.0
    • Feature: Updated endpoint for eusc-de-east-1 region.
  • github.com/aws/aws-sdk-go-v2/service/iam: v1.49.0
    • Feature: Fixed missing SummaryMap keys in GetAccountSummary response that were being filtered out during deserialization in AWS Java SDK v2
  • github.com/aws/aws-sdk-go-v2/service/kinesis: v1.41.0
    • Feature: Adds support for record sizes up to 10MiB and introduces new UpdateMaxRecordSize API to modify stream record size limits. Adds record size parameters to existing CreateStream and DescribeStreamSummary APIs for request and response payloads respectively.
gin-contrib/cors (github.com/gin-contrib/cors)

v1.7.8

Compare Source

Changelog

Bug fixes
Enhancements
Build process updates
Documentation updates
gin-contrib/gzip (github.com/gin-contrib/gzip)

v1.2.7

Compare Source

Changelog

Bug fixes
Enhancements
Build process updates
Documentation updates
Others
prometheus/client_golang (github.com/prometheus/client_golang)

v1.24.1: / 2026-07-23

Compare Source

Small bugfix release for promhttp.

What's Changed

[BUGFIX] promhttp: Fix panic on requests with nil URL. #​2065

Full Changelog: prometheus/client_golang@v1.24.0...v1.24.1

v1.24.0: - 2026-07-20

Compare Source

Changes
  • [CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. #​1862
  • [CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated model.NameValidationScheme global. Default behavior is unchanged; code that set NameValidationScheme = LegacyValidation no longer gets legacy enforcement at metric, label, and push-grouping construction. #​2051
  • [CHANGE] api/prometheus/v1: Support matchers (matches[] parameter) in Rules method (Rules(ctx context.Context, matches []string) (RulesResult, error)). #​1843
  • [CHANGE] api/prometheus/v1: Refactor LabelNames method to return model.LabelNames instead of []string for consistency across the API. #​1850
  • [CHANGE] exp/api/remote: Simplify Store interface, rename Handler to WriteHandler, and encapsulate write response handling. #​1855
  • [FEATURE] prometheus: Add new Go 1.26 runtime metrics (/sched/goroutines-created:goroutines, /sched/goroutines/not-in-go:goroutines, /sched/goroutines/runnable:goroutines, /sched/goroutines/running:goroutines, /sched/goroutines/waiting:goroutines, /sched/threads/total:threads). #​1942
  • [FEATURE] prometheus: Add WithUnit(unit string) option and explicit OpenMetrics unit support in CounterOpts, GaugeOpts, SummaryOpts, and HistogramOpts. #​1392
  • [FEATURE] prometheus: Expose descriptor construction error through public Err() method on Desc. #​1902
  • [FEATURE] promhttp: Add opt-in HandlerOpts.CoalesceGather to deduplicate concurrent Gather calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. #​1969
  • [FEATURE] promhttp: HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #​1925
  • [FEATURE] api/prometheus/v1: Add query formatting endpoint support (/format_query) and FormatQuery(ctx context.Context, query string) (string, error) method. #​1846, #​1856
  • [FEATURE] api/prometheus/v1: Add support for /status/tsdb/blocks endpoint via TSDBBlocks(ctx context.Context) ([]TSDBBlock, error) method. #​1896
  • [FEATURE] exp/api/remote: Export BackoffConfig to allow customization when using WithAPIBackoff. #​1895
  • [FEATURE] exp/api/remote: Add RetryCallBack to allow custom logging or handling on retry attempts in the remote write client. #​1888, #​1890
  • [ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. #​1860
  • [ENHANCEMENT] api: Use cloned http.DefaultTransport when constructing default HTTP clients to prevent accidental mutations of shared global transport state. #​1885
  • [BUGFIX] prometheus: Recover from collector panics during Gather() and return an error instead of crashing the process. #​1961
  • [BUGFIX] prometheus: Fix cpu-seconds unit suffix handling for metric go_cpu_classes_gc_mark_assist_cpu_seconds. #​1991
  • [BUGFIX] promhttp: InstrumentHandlerDuration and InstrumentHandlerCounter no longer panic when given an observer/counter that does not implement ExemplarObserver/ExemplarAdder (e.g. a SummaryVec). The exemplar is dropped and the value is recorded via the plain Observe/Add path, matching the safe-cast already used by Timer.ObserveDurationWithExemplar. #​2005
  • [BUGFIX] api/prometheus/v1: Fall back to GET requests when POST requests return 403 Forbidden or method not allowed. #​2030
  • [BUGFIX] api: Respect context cancellation inside httpClient.Do. #​1971
  • [BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. #​1889
  • [BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #​1917
  • [BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. #​1927
All commits

New Contributors

Full Changelog: prometheus/client_golang@v1.23.2...v1.24.0

sirupsen/logrus (github.com/sirupsen/logrus)

v1.10.2

Compare Source

Logrus v1.10.2

This is a small maintenance release that updates github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency from Logrus' dependency graph. There are no functional changes in this release.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.1

Full Changelog: sirupsen/logrus@v1.10.1...v1.10.2

v1.10.1

Compare Source

Logrus v1.10.1

This patch release fixes two issues in field formatting and handling:

  • Fix a regression introduced in v1.10.0 where TextFormatter could panic
    when formatting nil or panicking error and fmt.Stringer values.
  • Allow function-backed values implementing error to be used with
    WithError, WithField, and WithFields.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.0

Full Changelog: sirupsen/logrus@v1.10.0...v1.10.1

v1.10.0

Compare Source

Logrus v1.10.0

This release focuses on substantial performance improvements, concurrency correctness, and better interoperability with modern Go logging APIs.

🚀 Performance

Major improvements across TextFormatter, entry handling, and common logger paths:

  • ~17% lower geomean runtime across the benchmark suite
  • ~27% higher geomean formatter throughput
  • Common enabled logging paths are ~30–44% faster
  • WithError is ~40% faster
  • Chained fields are ~46% faster
  • TextFormatter paths are up to ~40% faster
  • Allocation counts are reduced by ~25–74% across measured TextFormatter cases, with the largest reductions in colored output

The improvements also show up in complete logger paths:

  • Logger + TextFormatter is ~31% faster, with ~24% fewer allocations
  • Logger + JSONFormatter is ~21% faster, with ~10% fewer allocations

JSONFormatter itself remains largely unchanged in runtime performance, with small allocation reductions.

🔄 log/slog interoperability

v1.10 adds bidirectional interoperability between Logrus and Go's log/slog:

  • A Logrus slog hook can forward existing Logrus entries to an slog logger.
  • hooks/slog.NewHandler implements slog.Handler, allowing log/slog records to use an existing Logrus logger and its hooks, formatter, and output.
  • The handler preserves levels, fields, groups, context, record timestamps, and optionally caller information.
  • Caller reporting is configured per handler, without requiring Logrus's logger-wide ReportCaller option.
  • Custom slog levels can be mapped to Logrus levels.
  • The hook and handler can be combined, providing a practical path for incrementally migrating from Logrus to log/slog without requiring an all-at-once transition.

This allows applications to migrate their logging API and logging backend independently: existing Logrus call sites ca

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Europe/Prague)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux

red-hat-konflux Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: vmaas-go/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 21 additional dependencies were updated

Details:

Package Change
github.com/aws/aws-sdk-go-v2 v1.41.9 -> v1.47.0
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.11 -> v1.7.20
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.25 -> v1.5.3
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.25 -> v2.8.3
github.com/aws/smithy-go v1.26.0 -> v1.28.1
github.com/bytedance/gopkg v0.1.3 -> v0.1.4
github.com/bytedance/sonic v1.15.0 -> v1.15.2
github.com/bytedance/sonic/loader v0.5.0 -> v0.5.1
github.com/cloudwego/base64x v0.1.6 -> v0.1.7
github.com/gin-contrib/sse v1.1.0 -> v1.1.1
github.com/go-playground/validator/v10 v10.30.1 -> v10.30.3
github.com/goccy/go-json v0.10.5 -> v0.10.6
github.com/klauspost/cpuid/v2 v2.3.0 -> v2.4.0
github.com/mattn/go-isatty v0.0.20 -> v0.0.23
github.com/pelletier/go-toml/v2 v2.2.4 -> v2.4.3
github.com/prometheus/common v0.67.5 -> v0.70.1
github.com/prometheus/procfs v0.19.2 -> v0.21.1
github.com/quic-go/quic-go v0.59.1 -> v0.60.0
go.mongodb.org/mongo-driver/v2 v2.5.0 -> v2.8.0
go.yaml.in/yaml/v3 v3.0.4 -> v3.0.5
golang.org/x/arch v0.24.0 -> v0.29.0

@sourcery-ai

sourcery-ai Bot commented Sep 2, 2026

Copy link
Copy Markdown
Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

Renovate updates five direct Go modules and regenerates the transitive dependency graph and checksums, with the largest compatibility surface coming from the AWS SDK and CloudWatch Logs upgrade.

File-Level Changes

Change Details Files
Upgrade direct Go dependencies used for AWS integration, metrics, logging, and testing.
  • Update AWS credentials and CloudWatch Logs modules.
  • Update Prometheus client, Logrus, and Testify versions.
  • Review the cumulative AWS SDK API and behavior changes, especially CloudWatch Logs and Smithy dependencies.
vmaas-go/go.mod
Refresh the resolved indirect dependency graph and module checksums.
  • Align AWS SDK core, eventstream, config sources, endpoints, and Smithy versions.
  • Refresh Prometheus, YAML, and other transitive modules; remove no-longer-required indirect entries.
  • Regenerate module checksums for the updated graph.
vmaas-go/go.mod
vmaas-go/go.sum

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

@sourcery-ai sourcery-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey - I've reviewed your changes and they look great!


Sourcery is free for open source - if you like our reviews please consider sharing them ✨
Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/master-master/go-modules branch 5 times, most recently from 0946f27 to 58b7757 Compare September 11, 2026 01:39
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/master-master/go-modules branch 2 times, most recently from 78f627f to ec53bf9 Compare September 13, 2026 04:41
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/master-master/go-modules branch from ec53bf9 to 414ffca Compare September 14, 2026 01:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants