Skip to content

Bump the go-dependencies group with 15 updates #468

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Nov 17, 2025
Merged

Bump the go-dependencies group with 15 updates #468

merged 1 commit into from
Nov 17, 2025

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 17, 2025

Bumps the go-dependencies group with 15 updates:

Package From To
github.com/go-openapi/runtime 0.29.1 0.29.2
github.com/swisscom/leaselocker 0.3.0 0.3.1
k8s.io/api 0.34.1 0.34.2
k8s.io/apimachinery 0.34.1 0.34.2
k8s.io/client-go 0.34.1 0.34.2
cel.dev/expr 0.25.0 0.25.1
github.com/go-openapi/jsonpointer 0.22.1 0.22.2
golang.org/x/mod 0.29.0 0.30.0
golang.org/x/net 0.46.0 0.47.0
golang.org/x/term 0.36.0 0.37.0
golang.org/x/text 0.30.0 0.31.0
golang.org/x/tools 0.38.0 0.39.0
k8s.io/apiextensions-apiserver 0.34.1 0.34.2
k8s.io/apiserver 0.34.1 0.34.2
k8s.io/component-base 0.34.1 0.34.2

Updates github.com/go-openapi/runtime from 0.29.1 to 0.29.2

Commits
  • 078717a fix(vuln): fixed vulnerability in returned error, not escaping single quotes
  • See full diff in compare view

Updates github.com/swisscom/leaselocker from 0.3.0 to 0.3.1

Commits

Updates k8s.io/api from 0.34.1 to 0.34.2

Commits

Updates k8s.io/apimachinery from 0.34.1 to 0.34.2

Commits

Updates k8s.io/client-go from 0.34.1 to 0.34.2

Commits
  • 54601aa Update dependencies to v0.34.2 tag
  • 1bb1ad2 Merge pull request #134589liggitt/automated-cherry-pick-of-#134588
  • 2505205 Remove invalid SAN certificate construction
  • 7ffba0f Merge pull request #134004DerekFrank/automated-cherry-pick-of-#133573
  • 145cb8f gofmt and review feedback
  • ddcdc12 fix: Update unit test to catch actual nil Labels case and fix functionality t...
  • See full diff in compare view

Updates cel.dev/expr from 0.25.0 to 0.25.1

Release notes

Sourced from cel.dev/expr's releases.

Release v0.25.1

Minor additions to the v0.25.0 release

What's Changed

Full Changelog: google/cel-spec@v0.25.0...v0.25.1

Commits

Updates github.com/go-openapi/jsonpointer from 0.22.1 to 0.22.2

Release notes

Sourced from github.com/go-openapi/jsonpointer's releases.

v0.22.2

0.22.2 - 2025-11-14

Full Changelog: go-openapi/jsonpointer@v0.22.1...v0.22.2

12 commits in this release.

Documentation

Code quality

Testing

Miscellaneous tasks

Security

Updates

People who contributed to this release

... (truncated)

Commits
  • c653a59 test: added fuzz test for parsing
  • 80920c3 test: improved test coverage
  • b834f57 ci: fixed sarif file
  • 5b5689d ci: fixed typo
  • 12e705f ci: added govulscan security scanner tool
  • adc6681 chore(deps): bump the development-dependencies group with 5 updates
  • c3422bb doc: added examples to document simple use cases
  • 061f7b4 chore(lint): reduced disabled linter, addressed a few code quality issues
  • e00aa64 ci: added workflows
  • 3e3ae75 docs: fixed typo in NOTICE
  • Additional commits viewable in compare view

Updates golang.org/x/mod from 0.29.0 to 0.30.0

Commits
  • 7416265 go.mod: update golang.org/x dependencies
  • 5517a71 all: fix some comments
  • b6cdd1a modfile: use reflect.TypeFor instead of reflect.TypeOf
  • See full diff in compare view

Updates golang.org/x/net from 0.46.0 to 0.47.0

Commits
  • 9a29643 go.mod: update golang.org/x dependencies
  • 07cefd8 context: deprecate
  • 5ac9dac publicsuffix: don't treat ip addresses as domain names
  • d1f64cc quic: use testing/synctest
  • fff0469 http2: document that RFC 7540 prioritization does not work with small payloads
  • f35e3a4 http2: fix weight overflow in RFC 7540 write scheduler
  • 89adc90 http2: fix typo referring to RFC 9218 as RFC 9128 instead
  • 8d76a2c quic: don't defer MAX_STREAMS frames indefinitely
  • 027f8b7 quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONE
  • dec9fe7 dns/dnsmessage: update SVCB packing to prohibit name compression
  • Additional commits viewable in compare view

Updates golang.org/x/term from 0.36.0 to 0.37.0

Commits

Updates golang.org/x/text from 0.30.0 to 0.31.0

Commits
  • e7ff6b3 go.mod: update golang.org/x dependencies
  • fbf012b all: use reflect.TypeFor instead of reflect.TypeOf
  • See full diff in compare view

Updates golang.org/x/tools from 0.38.0 to 0.39.0

Commits
  • 034e59c internal/analysis/analyzerutil: fix FileUsesGoVersion
  • 076bd80 gopls/internal/filewatcher: retry directory reading upon failure
  • 605803f go/analysis/passes/loopclosure: simplify using IsMethodNamed
  • 2c6e03f internal/testenv: allow Apple diff too
  • 82112c0 gopls/internal/settings: correct git issue for fieldalignment warning
  • 1f97856 go.mod: update golang.org/x dependencies
  • c24121c go/analysis/passes/modernize: stditerators: even better name heuristic
  • edb9587 go/analysis/passes/modernize: stditerators: better name heuristic
  • 2f6a4f9 go/analysis/passes/modernize: forvar: handle "if v := v; cond {"
  • efd8c43 go/analysis: don't apply fixes to generated files
  • Additional commits viewable in compare view

Updates k8s.io/apiextensions-apiserver from 0.34.1 to 0.34.2

Commits

Updates k8s.io/apiserver from 0.34.1 to 0.34.2

Commits
  • 92c4c2c Update dependencies to v0.34.2 tag
  • d24fa2b Merge pull request #134500vikasbolla/automated-cherry-pick-of-#133310
  • 67ad9b5 authz tests: delay response in context cancelled scenario
  • See full diff in compare view

Updates k8s.io/component-base from 0.34.1 to 0.34.2

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the go-dependencies group with 15 updates
1795dbc 
Bumps the go-dependencies group with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-openapi/runtime](https://github.com/go-openapi/runtime) | `0.29.1` | `0.29.2` |
| [github.com/swisscom/leaselocker](https://github.com/swisscom/leaselocker) | `0.3.0` | `0.3.1` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.34.1` | `0.34.2` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.34.1` | `0.34.2` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.34.1` | `0.34.2` |
| [cel.dev/expr](https://github.com/google/cel-spec) | `0.25.0` | `0.25.1` |
| [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) | `0.22.1` | `0.22.2` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.29.0` | `0.30.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.46.0` | `0.47.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.36.0` | `0.37.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.30.0` | `0.31.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.38.0` | `0.39.0` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.34.1` | `0.34.2` |
| [k8s.io/apiserver](https://github.com/kubernetes/apiserver) | `0.34.1` | `0.34.2` |
| [k8s.io/component-base](https://github.com/kubernetes/component-base) | `0.34.1` | `0.34.2` |


Updates `github.com/go-openapi/runtime` from 0.29.1 to 0.29.2
- [Release notes](https://github.com/go-openapi/runtime/releases)
- [Commits](go-openapi/runtime@v0.29.1...v0.29.2)

Updates `github.com/swisscom/leaselocker` from 0.3.0 to 0.3.1
- [Commits](swisscom/leaselocker@0.3.0...v0.3.1)

Updates `k8s.io/api` from 0.34.1 to 0.34.2
- [Commits](kubernetes/api@v0.34.1...v0.34.2)

Updates `k8s.io/apimachinery` from 0.34.1 to 0.34.2
- [Commits](kubernetes/apimachinery@v0.34.1...v0.34.2)

Updates `k8s.io/client-go` from 0.34.1 to 0.34.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.34.1...v0.34.2)

Updates `cel.dev/expr` from 0.25.0 to 0.25.1
- [Release notes](https://github.com/google/cel-spec/releases)
- [Commits](google/cel-spec@v0.25.0...v0.25.1)

Updates `github.com/go-openapi/jsonpointer` from 0.22.1 to 0.22.2
- [Release notes](https://github.com/go-openapi/jsonpointer/releases)
- [Commits](go-openapi/jsonpointer@v0.22.1...v0.22.2)

Updates `golang.org/x/mod` from 0.29.0 to 0.30.0
- [Commits](golang/mod@v0.29.0...v0.30.0)

Updates `golang.org/x/net` from 0.46.0 to 0.47.0
- [Commits](golang/net@v0.46.0...v0.47.0)

Updates `golang.org/x/term` from 0.36.0 to 0.37.0
- [Commits](golang/term@v0.36.0...v0.37.0)

Updates `golang.org/x/text` from 0.30.0 to 0.31.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.30.0...v0.31.0)

Updates `golang.org/x/tools` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.38.0...v0.39.0)

Updates `k8s.io/apiextensions-apiserver` from 0.34.1 to 0.34.2
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.34.1...v0.34.2)

Updates `k8s.io/apiserver` from 0.34.1 to 0.34.2
- [Commits](kubernetes/apiserver@v0.34.1...v0.34.2)

Updates `k8s.io/component-base` from 0.34.1 to 0.34.2
- [Commits](kubernetes/component-base@v0.34.1...v0.34.2)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/runtime
  dependency-version: 0.29.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/swisscom/leaselocker
  dependency-version: 0.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: k8s.io/api
  dependency-version: 0.34.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: cel.dev/expr
  dependency-version: 0.25.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/go-openapi/jsonpointer
  dependency-version: 0.22.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: golang.org/x/mod
  dependency-version: 0.30.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.47.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/term
  dependency-version: 0.37.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.31.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/tools
  dependency-version: 0.39.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.34.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: k8s.io/apiserver
  dependency-version: 0.34.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: k8s.io/component-base
  dependency-version: 0.34.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 17, 2025
@faebr faebr merged commit 5fbd9b1 into main Nov 17, 2025
13 checks passed
@faebr faebr deleted the dependabot/go_modules/go-dependencies-85b55f4bd1 branch November 17, 2025 07:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@faebr