Bump the go-dependencies group across 1 directory with 19 updates by dependabot[bot] · Pull Request #457 · sdcio/config-server

dependabot · 2026-06-12T23:54:12Z

Bumps the go-dependencies group with 10 updates in the / directory:

Package	From	To
github.com/dgraph-io/badger/v4	`4.9.1`	`4.9.4`
github.com/go-git/go-git/v5	`5.16.5`	`5.19.1`
github.com/henderiw/apiserver-builder	`0.0.8`	`0.0.9`
github.com/openconfig/gnmic/pkg/api	`0.1.9`	`0.1.11`
github.com/prometheus/prometheus	`0.309.1`	`0.313.1`
github.com/sdcio/sdc-protos	`0.0.52-0.20260420093658-100270c40f0c`	`0.0.54`
k8s.io/apimachinery	`0.35.3`	`0.36.2`
k8s.io/apiserver	`0.35.3`	`0.36.2`
k8s.io/code-generator	`0.35.3`	`0.36.2`
sigs.k8s.io/structured-merge-diff/v6	`6.3.2`	`6.4.2`

Updates github.com/dgraph-io/badger/v4 from 4.9.1 to 4.9.4

Release notes

Sourced from github.com/dgraph-io/badger/v4's releases.

v4.9.4

What's Changed

fix(db): don't drop acknowledged writes during DropPrefix/DropAll by @matthewmcneely in dgraph-io/badger#2313

fix: fix an issue where the compactor causes previously deleted data to reappear by @yangchun0821 in dgraph-io/badger#2278

docs(changelog): backfill 4.9.2, add 4.9.3, fix 4.9.0 compare link by @matthewmcneely in dgraph-io/badger#2311

New Contributors

@yangchun0821 made their first contribution in dgraph-io/badger#2278

Full Changelog: dgraph-io/badger@v4.9.3...v4.9.4

v4.9.3

What's Changed

perf(db): signal-based L0 write backpressure (replace busy-sleeps) by @shaunpatterson in dgraph-io/badger#2308

fix(vlog): prevent deleted key from reappearing after value-log GC by @shiva-istari in dgraph-io/badger#2310

docs: update CONTRIBUTING (TOC, code style, license header, master→main) by @matthewmcneely in dgraph-io/badger#2300

chore(ci): add stale Action by @shiva-istari in dgraph-io/badger#2302

ci: keep required checks green on docs-only PRs by @matthewmcneely in dgraph-io/badger#2301

New Contributors

@shaunpatterson made their first contribution in dgraph-io/badger#2308

Full Changelog: dgraph-io/badger@v4.9.2...v4.9.3

v4.9.2

What's Changed

chore(core): remove unused event log by @xqqp in dgraph-io/badger#2257

fix(cd): upload build artifacts to GitHub Release by @matthewmcneely in dgraph-io/badger#2273

fix: Prevent NPE on sync with inmemory DB by @alpe in dgraph-io/badger#2264

perf: skip lsm lookup for expired entries during value log rewrite by @lamb007 in dgraph-io/badger#2269

chore: update jemalloc to 5.3.1 by @solracsf in dgraph-io/badger#2275

fix : read only user should be able to open db on ReadOnly mode by @Naelpuissant in dgraph-io/badger#2268

fix(compaction): clamp baseLevel to >=1 to prevent L0->L0 panic on la… by @shiva-istari in dgraph-io/badger#2296

New Contributors

@xqqp made their first contribution in dgraph-io/badger#2257

@alpe made their first contribution in dgraph-io/badger#2264

@lamb007 made their first contribution in dgraph-io/badger#2269

@Naelpuissant made their first contribution in dgraph-io/badger#2268

@shiva-istari made their first contribution in dgraph-io/badger#2296

Full Changelog: dgraph-io/badger@v4.9.1...v4.9.2

Changelog

Sourced from github.com/dgraph-io/badger/v4's changelog.

[4.9.4] - 2026-07-08

Fixed

fix(db): don't drop acknowledged writes during DropPrefix/DropAll (#2313)

fix: fix an issue where the compactor causes previously deleted data to reappear (#2278)

Docs

docs(changelog): backfill 4.9.2, add 4.9.3, fix 4.9.0 compare link (#2311)

Full Changelog: dgraph-io/badger@v4.9.3...v4.9.4

[4.9.3] - 2026-07-06

Performance

perf(db): signal-based L0 write backpressure (replace busy-sleeps) (#2308)

Fixed

fix(vlog): prevent deleted key from reappearing after value-log GC (#2310)

Docs

docs: update CONTRIBUTING (TOC, code style, license header, master→main) (#2300)

CI

chore(ci): add stale Action (#2302)

ci: keep required checks green on docs-only PRs (#2301)

Full Changelog: dgraph-io/badger@v4.9.2...v4.9.3

[4.9.2] - 2026-06-09

Fixed

fix: Prevent NPE on sync with inmemory DB (#2264)

fix: read only user should be able to open db on ReadOnly mode (#2268)

fix(compaction): clamp baseLevel to >=1 to prevent L0->L0 panic on large LSM trees (#2296)

Performance

perf: skip lsm lookup for expired entries during value log rewrite (#2269)

CI

fix(cd): upload build artifacts to GitHub Release (#2273)

... (truncated)

Commits

9b0ef41 chore: prepare for release v4.9.4 (#2314)
bcef113 fix: fix an issue where the compactor causes previously deleted data to reapp...
7df4b2f fix(db): don't drop acknowledged writes during DropPrefix/DropAll (#2313)
45d5bd1 docs(changelog): backfill 4.9.2, add 4.9.3, fix 4.9.0 compare link (#2311)
c3489dc perf(db): signal-based L0 write backpressure (replace busy-sleeps) (#2308)
34dba21 fix(vlog): prevent deleted key from reappearing after value-log GC (#2310)
5e2d536 chore (ci): add stale Action (#2302)
5df4188 docs: update CONTRIBUTING (TOC, code style, license header, master→main) (#2300)
d0c62dd ci: keep required checks green on docs-only PRs (#2301)
284cea0 fix(compaction): clamp baseLevel to >=1 to prevent L0->L0 panic on la… (#2296)
Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.16.5 to 5.19.1

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.19.1

What's Changed

v5: plumbing: transport/ssh, Shell-quote path by @hiddeco in go-git/go-git#2068

v5: git: submodule, Fix relative URL resolution by @hiddeco in go-git/go-git#2070

v5: git: submodule, canonical remote for relative URLs by @hiddeco in go-git/go-git#2074

v5: git: submodule, error on remote without URLs by @hiddeco in go-git/go-git#2078

v5: plumbing: format/idxfile, Validate offset64 indices by @hiddeco in go-git/go-git#2084

v5: *: Reject malformed variable-length integers by @hiddeco in go-git/go-git#2092

v5: plumbing: format/packfile, Tighten delta validation by @hiddeco in go-git/go-git#2091

v5: Add worktreeFilesystem wrapper for worktree and hardening by @hiddeco in go-git/go-git#2100

v5: config: validate submodule names by @hiddeco in go-git/go-git#2082

build: Update module github.com/go-git/go-git/v5 to v5.19.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in go-git/go-git#2111

v5: git: Allow MkdirAll on worktree-root paths by @hiddeco in go-git/go-git#2117

v5: git: Stop validating symlink target paths by @pjbgf in go-git/go-git#2116

v5: plumbing: format decoder input bounds and contracts by @hiddeco in go-git/go-git#2125

plumbing: format/packfile, cap delta chain depth in parser by @pjbgf in go-git/go-git#2137

Full Changelog: go-git/go-git@v5.19.0...v5.19.1

v5.19.0

What's Changed

build: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in go-git/go-git#2010

v5: Bump sha1cd and go-billy by @pjbgf in go-git/go-git#2060

v5: Align object encoding with upstream by @pjbgf in go-git/go-git#2065

Full Changelog: go-git/go-git@v5.18.0...v5.19.0

v5.18.0

What's Changed

plumbing: transport/http, Add support for followRedirects policy by @pjbgf in go-git/go-git#2004

Full Changelog: go-git/go-git@v5.17.2...v5.18.0

v5.17.2

What's Changed

build: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in go-git/go-git#1941

dotgit: skip writing pack files that already exist on disk by @pjbgf in go-git/go-git#1944

⚠️ This release fixes a bug (go-git/go-git#1942) that blocked some users from upgrading to v5.17.1. Thanks @pskrbasu for reporting it. 🙇

Full Changelog: go-git/go-git@v5.17.1...v5.17.2

v5.17.1

What's Changed

build: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in go-git/go-git#1930

[v5] plumbing: format/index, Improve v4 entry name validation by @pjbgf in go-git/go-git#1935

[v5] plumbing: format/idxfile, Fix version and fanout checks by @pjbgf in go-git/go-git#1937

... (truncated)

Commits

3c3be60 Merge pull request #2137 from go-git/validate-v5
3fba897 plumbing: format/packfile, cap delta chain depth in parser
a97d660 Merge pull request #2125 from hiddeco/v5/format-input-bounds
aeaa125 plumbing: format/objfile, require Header before Read
1f38e17 plumbing: format/packfile, bound inflate size
f7545a0 plumbing: format/idxfile, bound nr by file size
170b881 Merge pull request #2116 from pjbgf/symlink-v5
7b6d994 Merge pull request #2117 from hiddeco/v5/worktree-fs-mkdirall-root-noop
f0709b3 git: Stop validating symlink target paths
776d00f git: Allow MkdirAll on worktree-root paths
Additional commits viewable in compare view

Updates github.com/henderiw/apiserver-builder from 0.0.8 to 0.0.9

Commits

d5466c8 Merge pull request #9 from henderiw/openapi-refs
cc300f5 update openapi refs
5b5f020 update openapi refs
bbf4012 update openapi refs
9550533 update openapi refs
2221e4c update openapi refs
See full diff in compare view

Updates github.com/openconfig/gnmic/pkg/api from 0.1.9 to 0.1.11

Commits

25f4dac Merge pull request #817 from openconfig/api-pkg-enh
49d0eb1 Merge pull request #813 from Voronar/set_custom_ext
bc71ee9 Append custom request extension (get/set only)
907ecf1 fix proxyDialer
e1c36c4 fix typo
1e43121 add tests
328b812 use new Go funcs
aacb6b9 avoid pointer deref
38ba886 fix error formatting
71289d5 handle empty path elem while parsing an xpath string into a gNMI path
Additional commits viewable in compare view

Updates github.com/prometheus/prometheus from 0.309.1 to 0.313.1

Commits

73ff57c Merge pull request #19151 from prometheus/krajo/prep-3.13.1
1e3b14a chore: prep release 3.13.1 with tsdb related fix
9371381 Merge pull request #19137 from prometheus/krajo/backport-19134-head-chunk-cache
82c6e98 Merge remote-tracking branch 'origin/release-3.13' into krajo/backport-19134-...
7c22947 Merge pull request #19138 from prometheus/krajo/backport-lts-matrix-speedup
d98a8d0 ci: run version upgrade test as a per-LTS matrix
c418c17 tsdb: fix stale head-chunk cache after head-chunk truncation (#19134)
40af9c2 Merge pull request #19047 from prometheus/krajo/prep-release-3.13
ead31f4 Merge pull request #19009 from roidelapluie/roidelapluie/npm-dist-tag
5e280be ui: do not tag pre-release npm packages as latest
Additional commits viewable in compare view

Updates github.com/sdcio/sdc-protos from 0.0.52-0.20260420093658-100270c40f0c to 0.0.54

Release notes

Sourced from github.com/sdcio/sdc-protos's releases.

v0.0.54

What's Changed

Fix code that was linux only by @steiler in sdcio/sdc-protos#117

Full Changelog: sdcio/sdc-protos@v0.0.52...v0.0.54

v0.0.53

What's Changed

add pathvaluemessage by @steiler in sdcio/sdc-protos#112

render multiline and long blame tree values as indented blocks by @steiler in sdcio/sdc-protos#113

Bump google.golang.org/grpc from 1.80.0 to 1.81.0 by @dependabot[bot] in sdcio/sdc-protos#116

Fix the icon of a leaf thats deviated via a delete on the device by @steiler in sdcio/sdc-protos#114

Full Changelog: sdcio/sdc-protos@v0.0.51...v0.0.53

v0.0.52

What's Changed

add pathvaluemessage by @steiler in sdcio/sdc-protos#112

render multiline and long blame tree values as indented blocks by @steiler in sdcio/sdc-protos#113

Bump google.golang.org/grpc from 1.80.0 to 1.81.0 by @dependabot[bot] in sdcio/sdc-protos#116

Fix the icon of a leaf thats deviated via a delete on the device by @steiler in sdcio/sdc-protos#114

Full Changelog: sdcio/sdc-protos@v0.0.51...v0.0.52

Commits

See full diff in compare view

Updates go.opentelemetry.io/otel from 1.39.0 to 1.44.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27

Added

Add ByteSlice and ByteSliceValue functions for new BYTESLICE attribute type in go.opentelemetry.io/otel/attribute. (#7948)

Apply attribute value limit to the KindBytes attribute type in go.opentelemetry.io/otel/sdk/log. (#7990)

Apply attribute value limit to the BYTESLICE attribute type in go.opentelemetry.io/otel/sdk/trace. (#7990)

Support BYTESLICE attributes in go.opentelemetry.io/otel/trace. (#8153)

Support BYTESLICE attributes in go.opentelemetry.io/otel/exporters/otlp/otlptrace. (#8153)

Support BYTESLICE attributes in go.opentelemetry.io/otel/exporters/otlp/otlplog. (#8153)

Support BYTESLICE attributes in go.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#8153)

Support BYTESLICE attributes in go.opentelemetry.io/otel/exporters/zipkin. (#8153)

Add String method for Value type in go.opentelemetry.io/otel/attribute. (#8142)

Add Slice and SliceValue functions for new SLICE attribute type in go.opentelemetry.io/otel/attribute. (#8166)

Support SLICE attributes in go.opentelemetry.io/otel/exporters/otlp/otlptrace. (#8216)

Support SLICE attributes in go.opentelemetry.io/otel/exporters/otlp/otlplog. (#8216)

Support SLICE attributes in go.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#8216)

Support SLICE attributes in go.opentelemetry.io/otel/exporters/zipkin. (#8216)

Apply AttributeValueLengthLimit to attribute.SLICE type attribute values in go.opentelemetry.io/otel/sdk/trace, recursively truncating contained string values. (#8217)

Add Error field on Record type in go.opentelemetry.io/otel/log/logtest. (#8148)

Add WithMaxRequestSize option in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8157)

Add WithMaxRequestSize option in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#8157)

Add WithMaxRequestSize option in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#8157)

Add WithMaxRequestSize option in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#8157)

Add WithMaxRequestSize option in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#8157)

Add WithMaxRequestSize option in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8157)

Add Settable to go.opentelemetry.io/otel/metric/x to allow reusing attribute options. (#8178)

Add experimental support for splitting metric data across multiple batches in go.opentelemetry.io/otel/sdk/metric. Set OTEL_GO_X_METRIC_EXPORT_BATCH_SIZE=<max_size> to enable for all periodic readers. See go.opentelemetry.io/otel/sdk/metric/internal/x for feature documentation. (#8071)

Add experimental self-observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. Enable with OTEL_GO_X_SELF_OBSERVABILITY=true environment variable. See go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/x for feature documentation. (#8192)

Add experimental self-observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. Enable with OTEL_GO_X_SELF_OBSERVABILITY=true environment variable. See go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp/internal/x for feature documentation. (#8194)

Add experimental self-observability metrics in go.opentelemetry.io/otel/exporters/stdout/stdoutlog. Enable with OTEL_GO_X_SELF_OBSERVABILITY=true environment variable. See go.opentelemetry.io/otel/stdout/stdoutlog/internal/x for feature documentation. (#8263)

Add WithDefaultAttributes to go.opentelemetry.io/otel/metric/x to support setting default attributes on instruments. (#8135)

Add go.opentelemetry.io/otel/semconv/v1.41.0 package. The package contains semantic conventions from the v1.41.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.40.0. (#8324)

Add Observable variants of instruments to go.opentelemetry.io/otel/semconv/v1.41.0 package. (#8350)

Generate explicit histogram bucket boundaries from weaver configuration for HTTP and RPC duration instruments in go.opentelemetry.io/otel/semconv/v1.41.0. (#8002)

Changed

⚠️ Breaking Change: go.opentelemetry.io/otel/sdk/metric now applies a default cardinality limit of 2000 to comply with the Metrics SDK specification recommendation. New attribute sets are dropped when the cardinality limit is reached. The measurement of these sets are aggregated into a special attribute set containing attribute.Bool("otel.metric.overflow", true).

... (truncated)

Commits

b62d928 Release 1.44.0 (#8376)
94132a0 chore(deps): update golang.org/x/telemetry digest to 5997936 (#8379)
6fdcf82 feat: add self-observability metrics to otlpmetricgrpc metric exporters (#8192)
761bbfc fix(deps): update golang.org/x (#8377)
3a91dc6 fix(deps): update googleapis to 3dc84a4 (#8375)
f593185 exporters/otlp: default max request size to 64 MiB (#8365)
f02feac Merge commit from fork
36c2f1b semconvkit: add invariant test for histogram-exclusion rule (#8370)
d0b6cbd sdk/metric: document unit-sensitivity of DefaultAggregationSelector (#8224)
9a68034 add self observability for stdout exporter (#8263)
Additional commits viewable in compare view

Updates go.uber.org/zap from 1.27.1 to 1.28.0

Release notes

Sourced from go.uber.org/zap's releases.

v1.28.0

Enhancements:

#1534[]: Add zapcore.CheckPreWriteHook and CheckedEntry.Before method for transforming entries before they are written to any Cores.

#1534: uber-go/zap#1534

Changelog

Sourced from go.uber.org/zap's changelog.

1.28.0 (27 Apr 2026)

Enhancements:

#1534[]: Add zapcore.CheckPreWriteHook and CheckedEntry.Before method for transforming entries before they are written to any Cores.

Commits

5b81b37 release v1.28.0 (#1547)
0ab0d5a zapcore: Add PreWriteHook for transforming entries before write (#1534)
d278c59 [chore] CI: test on Go 1.26 (#1535)
16fb16b chore(dep): replace archived gopkg.in/yaml.v3 with officially maintained go.y...
See full diff in compare view

Updates golang.org/x/mod from 0.31.0 to 0.36.0

Commits

643da9b go.mod: update golang.org/x dependencies
ccc3cdf zip: include 'but content has correct sum' note in TestVCS
ab30318 zip: update zip hashes for new flate compression
03901d3 go.mod: update golang.org/x dependencies
1ac721d go.mod: update golang.org/x dependencies
fb1fac8 all: upgrade go directive to at least 1.25.0 [generated]
27761a2 go.mod: update golang.org/x dependencies
4c04067 go.mod: update golang.org/x dependencies
See full diff in compare view

Updates golang.org/x/sync from 0.19.0 to 0.21.0

Commits

5071ed6 all: fix some comments to improve readability
ec11c4a errgroup: fix a typo in the documentation
1a58307 all: modernize interface{} -> any
3172ca5 all: upgrade go directive to at least 1.25.0 [generated]
See full diff in compare view

Updates google.golang.org/grpc from 1.80.0 to 1.81.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.1

Security

xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)

Special Thanks: @al4an444

Bug Fixes

otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)

Release 1.81.0

Behavior Changes

balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#8808)

Dependencies

Minimum supported Go version is now 1.25. (#8969)

Bug Fixes

xds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (#8956)

transport: Send a RST_STREAM when receiving an END_STREAM when the stream is not already half-closed. (#8832)

xds: Fix ADS resource name validation to prevent a panic. (#8970)

New Features

grpc/stats: Add support for custom labels in per-call metrics (gRFC A108). (#9008)

xds: Add support for Server Name Indication (SNI) and SAN validation (gRFC A101). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_SNI=true environment variable. (#9016)

xds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (gRFC A85). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true. (#9005)

xds: Add metrics to track xDS client connectivity and cached resource state (gRFC A78). (#8807)

stats/otel: Enhance grpc.subchannel.disconnections metric by adding disconnection reason to the grpc.disconnect_error label (gRFC A94). This provides granular insights into why subchannels are closing. (#8973)

mem: Add mem.Buffer.Slice() API to slice the buffer like a slice. (#8977)

Special Thanks: @ash2k

Performance Improvements

alts: Pool read buffers to lower memory utilization when sockets are unreadable. (#8964)

transport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false and report any issues. (#9032)

Commits

caf0772 Change version from 1.81.1-dev to 1.81.1 (#9122)
6ccbeeb Cherry-pick #9111 into v1.81.x (#9121)
b33c29e Cherry-pick #9081 into v1.81.x (#9102)
c45fae6 Change version to 1.81.1-dev (#9063)
cb18228 Change version to 1.81.0 (#9062)
96748f9 Cherry-pick #9105 to 1.81.x (#9106)
9183222 Cherry pick #9055, #9032 to v1.81.x (#9095)
5cba6da Revert "deps: update dependencies for all modules (#9065)" (#9067)
af8a936 deps: update dependencies for all modules (#9065)
cdc60df transport: optimize heap allocations in ready reader and update syscall conne...
Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.35.3 to 0.36.2

Commits

ae3f98e Update dependencies to v0.36.2 tag
2ec982d Merge pull request #139508lalitc375/automated-cherry-pick-of-#139480
6a88102 Fix wrong marking of errors
efb7f26 Merge remote-tracking branch 'origin/master' into release-1.36
d966e56 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
79b3632 Merge pull request #137864 from yongruilin/dv-dra-mismatch
a8822f7 Add slice and map union member support with tests
7dba2d0 Use IsZero instead of IsNil for union ratcheting check
d95710f Fix union validation ratcheting when oldObj is nil
729062d Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
Additional commits viewable in compare view

Updates k8s.io/apiserver from 0.35.3 to 0.36.2

Commits

6d47504 Update dependencies to v0.36.2 tag
1c9198d Merge remote-tracking branch 'origin/master' into release-1.36
6f83612 Merge pull request #138346 from dashpole/update_otel_prop
690e679 Merge remote-tracking branch 'origin/master' into release-1.36
66ef378 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
bb1f8b5 update go.opentelemetry.io/otel to v1.41.0
e0b6d8f Merge remote-tracking branch 'origin/master' into release-1.36
c8527f7 Downgrade log level from Error to Info for unserved GVRs in peer proxy
5fba3db Merge pull request #137482 from aman4433/fix-apf-timeout-header-test-race
2f7d9d4 Merge pull request #137906 from aramase/aramase/c/grpc_v1.79.0
Additional commits viewable in compare view

Updates k8s.io/client-go from 0.35.3 to 0.36.2

Commits

877f535 Update dependencies to v0.36.2 tag
f22a53e Merge remote-tracking branch 'origin/master' into release-1.36
a948641 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
7e44ffc Add Workload-Aware Preemption fields to Workload and PodGroup APIs
df2d882 Merge pull request #136989 from nojnhuh/podgroup-resourceclaim
4eece52 Workload API: PodGroup ResourceClaims (KEP-5729)
3d35c51 Merge pull request #137190 from everpeace/KEP-5491-alpha
0434117 Merge pull request #137028 from nmn3m/feature/dra-resource-pool-status
ba785be Drop CSR analogy, mark ObjectMeta +required,reduce limits (maxItems=500, maxL...
4a9c878 Add ResourcePoolStatusRequest API types and generated code
Additional commits viewable in compare view

Updates k8s.io/code-generator from 0.35.3 to 0.36.2

Commits

c64281a Update dependencies to v0.36.2 tag
a85207c Merge remote-tracking branch 'origin/master' into release-1.36
634d8b3 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
a8853d1 Merge pull request #137772 from lalitc375/fix-linter
eae1aca Merge pull request #137864 from yongruilin/dv-dra-mismatch
6770f5f Merge pull request #137846 from lalitc375/required-forbidden
9681623 Add slice and map union member support with tests
6c2d782 Add nil OldValue test coverage for union doc_tests
f4e4b3a Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
8a4544d Add tests for validateTrueBeta and ValidateTrueAlpha
Additional commits viewable in compare view

Updates k8s.io/component-base from 0.35.3 to 0.36.2

Commits

3393ee8 Update dependencies to v0.36.2 tag
c842c86 Merge remote-tracking branch 'origin/master' into release-1.36

Bumps the go-dependencies group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/dgraph-io/badger/v4](https://github.com/dgraph-io/badger) | `4.9.1` | `4.9.4` | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.16.5` | `5.19.1` | | [github.com/henderiw/apiserver-builder](https://github.com/henderiw/apiserver-builder) | `0.0.8` | `0.0.9` | | [github.com/openconfig/gnmic/pkg/api](https://github.com/openconfig/gnmic) | `0.1.9` | `0.1.11` | | [github.com/prometheus/prometheus](https://github.com/prometheus/prometheus) | `0.309.1` | `0.313.1` | | [github.com/sdcio/sdc-protos](https://github.com/sdcio/sdc-protos) | `0.0.52-0.20260420093658-100270c40f0c` | `0.0.54` | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.35.3` | `0.36.2` | | [k8s.io/apiserver](https://github.com/kubernetes/apiserver) | `0.35.3` | `0.36.2` | | [k8s.io/code-generator](https://github.com/kubernetes/code-generator) | `0.35.3` | `0.36.2` | | [sigs.k8s.io/structured-merge-diff/v6](https://github.com/kubernetes-sigs/structured-merge-diff) | `6.3.2` | `6.4.2` | Updates `github.com/dgraph-io/badger/v4` from 4.9.1 to 4.9.4 - [Release notes](https://github.com/dgraph-io/badger/releases) - [Changelog](https://github.com/dgraph-io/badger/blob/main/CHANGELOG.md) - [Commits](dgraph-io/badger@v4.9.1...v4.9.4) Updates `github.com/go-git/go-git/v5` from 5.16.5 to 5.19.1 - [Release notes](https://github.com/go-git/go-git/releases) - [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md) - [Commits](go-git/go-git@v5.16.5...v5.19.1) Updates `github.com/henderiw/apiserver-builder` from 0.0.8 to 0.0.9 - [Commits](henderiw/apiserver-builder@v0.0.8...v0.0.9) Updates `github.com/openconfig/gnmic/pkg/api` from 0.1.9 to 0.1.11 - [Release notes](https://github.com/openconfig/gnmic/releases) - [Changelog](https://github.com/openconfig/gnmic/blob/main/docs/changelog.md) - [Commits](openconfig/gnmic@pkg/api/v0.1.9...pkg/api/v0.1.11) Updates `github.com/prometheus/prometheus` from 0.309.1 to 0.313.1 - [Release notes](https://github.com/prometheus/prometheus/releases) - [Changelog](https://github.com/prometheus/prometheus/blob/main/CHANGELOG.md) - [Commits](prometheus/prometheus@v0.309.1...v0.313.1) Updates `github.com/sdcio/sdc-protos` from 0.0.52-0.20260420093658-100270c40f0c to 0.0.54 - [Release notes](https://github.com/sdcio/sdc-protos/releases) - [Commits](https://github.com/sdcio/sdc-protos/commits/v0.0.54) Updates `go.opentelemetry.io/otel` from 1.39.0 to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.44.0) Updates `go.uber.org/zap` from 1.27.1 to 1.28.0 - [Release notes](https://github.com/uber-go/zap/releases) - [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md) - [Commits](uber-go/zap@v1.27.1...v1.28.0) Updates `golang.org/x/mod` from 0.31.0 to 0.36.0 - [Commits](golang/mod@v0.31.0...v0.36.0) Updates `golang.org/x/sync` from 0.19.0 to 0.21.0 - [Commits](golang/sync@v0.19.0...v0.21.0) Updates `google.golang.org/grpc` from 1.80.0 to 1.81.1 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.80.0...v1.81.1) Updates `k8s.io/apimachinery` from 0.35.3 to 0.36.2 - [Commits](kubernetes/apimachinery@v0.35.3...v0.36.2) Updates `k8s.io/apiserver` from 0.35.3 to 0.36.2 - [Commits](kubernetes/apiserver@v0.35.3...v0.36.2) Updates `k8s.io/client-go` from 0.35.3 to 0.36.2 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.35.3...v0.36.2) Updates `k8s.io/code-generator` from 0.35.3 to 0.36.2 - [Commits](kubernetes/code-generator@v0.35.3...v0.36.2) Updates `k8s.io/component-base` from 0.35.3 to 0.36.2 - [Commits](kubernetes/component-base@v0.35.3...v0.36.2) Updates `k8s.io/kube-openapi` from 0.0.0-20260127142750-a19766b6e2d4 to 0.0.0-20260317180543-43fb72c5454a - [Commits](https://github.com/kubernetes/kube-openapi/commits) Updates `k8s.io/utils` from 0.0.0-20251002143259-bc988d571ff4 to 0.0.0-20260210185600-b8788abfbbc2 - [Commits](https://github.com/kubernetes/utils/commits) Updates `sigs.k8s.io/structured-merge-diff/v6` from 6.3.2 to 6.4.2 - [Release notes](https://github.com/kubernetes-sigs/structured-merge-diff/releases) - [Changelog](https://github.com/kubernetes-sigs/structured-merge-diff/blob/master/RELEASE.md) - [Commits](kubernetes-sigs/structured-merge-diff@v6.3.2...v6.4.2) --- updated-dependencies: - dependency-name: github.com/dgraph-io/badger/v4 dependency-version: 4.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/henderiw/apiserver-builder dependency-version: 0.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/openconfig/gnmic/pkg/api dependency-version: 0.1.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/prometheus/prometheus dependency-version: 0.312.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/sdcio/sdc-protos dependency-version: 0.0.54 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.uber.org/zap dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/mod dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/sync dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: google.golang.org/grpc dependency-version: 1.81.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/apimachinery dependency-version: 0.36.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/apiserver dependency-version: 0.36.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/client-go dependency-version: 0.36.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/code-generator dependency-version: 0.36.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/component-base dependency-version: 0.36.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/kube-openapi dependency-version: 0.0.0-20260317180543-43fb72c5454a dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: k8s.io/utils dependency-version: 0.0.0-20260210185600-b8788abfbbc2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: sigs.k8s.io/structured-merge-diff/v6 dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 12, 2026

dependabot Bot requested a review from a team as a code owner June 12, 2026 23:54

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 12, 2026

dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-04592564df branch from 826b48f to 93024bf Compare July 10, 2026 23:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the go-dependencies group across 1 directory with 19 updates#457

Bump the go-dependencies group across 1 directory with 19 updates#457
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-04592564df

dependabot Bot commented on behalf of github Jun 12, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.9.4

What's Changed

New Contributors

v4.9.3

What's Changed

New Contributors

v4.9.2

What's Changed

New Contributors

[4.9.4] - 2026-07-08

[4.9.3] - 2026-07-06

[4.9.2] - 2026-06-09

v5.19.1

What's Changed

v5.19.0

What's Changed

v5.18.0

What's Changed

v5.17.2

What's Changed

v5.17.1

What's Changed

v0.0.54

What's Changed

v0.0.53

What's Changed

v0.0.52

What's Changed

[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27

Added

Changed

v1.28.0

1.28.0 (27 Apr 2026)

Release 1.81.1

Security

Bug Fixes

Release 1.81.0

Behavior Changes

Dependencies

Bug Fixes

New Features

Performance Improvements

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 12, 2026 •

edited

Loading