deps: bump the all-go-minor-and-patch group across 1 directory with 23 updates by dependabot[bot] · Pull Request #5152 · Azure/azure-container-networking

dependabot · 2026-11-04T09:57:12Z

Bumps the all-go-minor-and-patch group with 23 updates in the / directory:

Package	From	To
github.com/Azure/azure-sdk-for-go/sdk/azcore	`1.18.2`	`1.23.3`
github.com/Azure/azure-sdk-for-go/sdk/azidentity	`1.10.1`	`1.14.0`
github.com/Microsoft/go-winio	`0.6.2`	`0.6.4`
github.com/avast/retry-go/v4	`4.6.1`	`4.7.0`
github.com/containernetworking/cni	`1.3.0`	`1.3.1`
github.com/hashicorp/go-version	`1.7.0`	`1.9.0`
github.com/prometheus/client_golang	`1.23.0`	`1.25.0`
github.com/prometheus/client_model	`0.6.2`	`0.6.3`
github.com/spf13/cobra	`1.9.1`	`1.10.2`
github.com/spf13/pflag	`1.0.7`	`1.0.9`
github.com/spf13/viper	`1.20.1`	`1.21.0`
github.com/stretchr/testify	`1.11.1`	`1.12.1`
go.uber.org/zap	`1.27.0`	`1.28.0`
google.golang.org/grpc	`1.83.2`	`1.85.0`
google.golang.org/protobuf	`1.36.11`	`1.36.12`
github.com/fsnotify/fsnotify	`1.9.0`	`1.10.1`
github.com/labstack/echo/v4	`4.13.4`	`4.16.2`
github.com/prometheus/common	`0.65.0`	`0.72.0`
github.com/sirupsen/logrus	`1.9.3`	`1.10.2`
golang.org/x/net	`0.61.0`	`0.62.0`
golang.org/x/time	`0.12.0`	`0.15.0`
github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor	`0.11.0`	`0.13.0`
github.com/cilium/cilium	`1.15.15`	`1.16.19`

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.18.2 to 1.23.3

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.23.3

1.23.3 (2026-10-06)

Bugs Fixed

Fixed arm.ResourceID.Location being empty when the locations segment uses different casing.

Other Changes

Added azure-deprecating to the default set of allowed (non-redacted) response headers for logging.

Replaced internal default HTTP client with the one from sdk/internal.

sdk/azcore/v1.23.2

1.23.2 (2026-09-28)

Bugs Fixed

Fixed unmarshalling datetime.RFC7231 to use a fixed GMT zone.

Commits

b0d63ac Prep azcore@v1.23.3 for release (#27681)
83e527f [azdatalake] Update azblob to v1.8.2 for service.Client GetSASURL fix (#27657)
4e68728 [Service Bus] Stabilize session timeout tests (#27609)
f3c857e Sync eng/common directory with azure-sdk-tools for PR 17077 (#27678)
c76d8f0 Fix location parsing for mixed-case resource IDs (#27669)
6e5da8b fix: add period to LICENSE.txt (#26886)
add0a52 Configurations: 'specification/azurefleet/resource-manager/Microsoft.AzureFl...
856b379 feat(azcore): add azure-deprecating to default allowed logging headers (#27...
50a269f Fix base template. (#27666)
3714be0 Sync eng/common directory with azure-sdk-tools for PR 17167 (#27665)
Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.10.1 to 1.14.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/internal/v1.13.0

1.13.0 (2026-09-30)

Features Added

Extended the perf framework with new command-line options aligned with the .NET Azure.Test.Perf runner:

--iterations/-i to repeat the measurement phase multiple times.

--rate/-r to cap aggregate throughput in operations per second.

--status-interval to control the cadence of live status output.

--results-file to emit per-operation results as JSON when --latency is enabled.

--output-file-prefix to write run-summary artifacts as .json, .csv, .txt, and .md.

--resource-telemetry to print a runtime.MemStats and goroutine-count delta at the end of a run.

--config and --workload to load and select named workloads from a JSON workload-config file.

--job-statistics to emit the #StartJobStatistics / #EndJobStatistics block consumed by perf-automation.

--maxprocs to override GOMAXPROCS for the run.

--no-cleanup to skip Cleanup / GlobalCleanup at end of run.

--debug for additional diagnostic output.

--sync, --insecure, --max-io-completion-threads, --max-worker-threads, --min-io-completion-threads, and --min-worker-threads are accepted for CLI parity with the .NET runner.

The perf runner now samples process CPU and memory usage in the background, displaying them in the live status line and including averageCpuPercent / averageMemoryBytes in run-summary artifacts.

Added the transport package and containing types.

sdk/messaging/azservicebus/v1.11.0

1.11.0 (2026-10-06)

Features Added

Added Client.NewListSessionsForQueuePager() and Client.NewListSessionsForSubscriptionPager() to list the IDs of sessions in session-enabled queues and subscriptions. By default they list sessions that have active messages, as well as sessions that have session state set but no active messages; set SessionStateUpdatedAfter to instead list sessions whose session state was updated after a given time. (PR#26688)

Added SQLFilterCount and CorrelationFilterCount to TopicRuntimeProperties, exposing the total number of SQL filters and correlation filters across all of a topic's subscriptions, including the default rule each subscription is created with. The service reports these at api-version 2024-05 or later. (PR#27323)

Bugs Fixed

AcceptNextSessionForQueue and AcceptNextSessionForSubscription now pass the caller's context deadline to Service Bus, allowing session accepts to wait longer than the service's default timeout. (#19036)

Setting APIVersion in the administration client's ClientOptions now takes effect. Setting it previously made every administration call fail with "this client doesn't support overriding its API version". (PR#27323)

Management operations (PeekMessages, ScheduleMessages, CancelScheduledMessages, and others) now send a server-timeout that expires one second before the caller's context, so the broker answers first and the caller gets a service-side timeout instead of context deadline exceeded. When the context has no deadline, each attempt asks the broker to answer within 60 seconds, where it was previously given no bound at all. The client still waits only on its context, so set one to cap the call itself. (#26421)

Read com.microsoft:max-message-batch-size vendor property from the AMQP sender link to correctly limit batch size on Premium large-message entities, where max-message-size can be up to 100 MB but the batch limit is 1 MB.

Other Changes

Added unit-testing guidance and a compile-checked example for code that uses Receiver through a consumer-defined interface.

Every administration operation now runs against service api-version 2024-05, where it previously ran against 2021-05. Responses follow the 2024-05 contract, which adds fields to some entity descriptions, and the topic filter counts above require this version. Set APIVersion on the azcore.ClientOptions embedded in the client's ClientOptions to pin a different version. (PR#27323)

Cleaned up accumulated golangci-lint findings in azservicebus (deprecated runtime.WithHTTPHeader calls switched to policy.WithHTTPHeader, duplicate log package imports consolidated under the azlog alias, unchecked Close errors wrapped with the _ = ... ignore pattern, and assorted staticcheck style nits). No behavioral changes.

Commits

0495c20 Prep azcore 1.14.0 for release (#23293)
217edee fix(generator tool): filter tsp-client diagnostics log (#23292)
023c88f Increment package version after release of azidentity (#23290)
17f3361 Sync eng/common directory with azure-sdk-tools for PR 8760 (#23271)
f5f3234 bump proxy to one with an audit log and more correct locking (#23288)
d707091 Prepare azidentity v1.8.0-beta.2 for release (#23289)
84d213c NewManagedIdentityCredential returns an error for unsupported ID options (#23...
ea67e9c azcontainerregistry: move method to function (#23270)
40dad0a fix (#23287)
a368082 fix generator tool: ExecuteGoGenerate func (#23286)
Additional commits viewable in compare view

Updates github.com/Microsoft/go-winio from 0.6.2 to 0.6.4

Release notes

Sourced from github.com/Microsoft/go-winio's releases.

v0.6.4

What's Changed

Bump golang.org/x/sys from 0.48.0 to 0.49.0 by @dependabot[bot] in microsoft/go-winio#393

Fix regression in mkwinsyscall for non SystemDLLs by @jterry75 in microsoft/go-winio#394

Full Changelog: microsoft/go-winio@v0.6.3...v0.6.4

v0.6.3

What's Changed

switch back from golang.org/x/sys/execabs to os/exec (go1.19) by @thaJeztah in microsoft/go-winio#317

Add Go wrappers for Get/SetVirtualDiskInformation win32 APIs. by @ambarve in microsoft/go-winio#334

Add support for LX symlinks (0xA000001D) for WSL/MSYS2 compatibility by @vagokuln-msft in microsoft/go-winio#336

backuptar: fix sparse stream handling in seekable exports by @rzlink in microsoft/go-winio#375

Bump github.com/sirupsen/logrus from 1.9.3 to 1.10.2 by @dependabot[bot] in microsoft/go-winio#374

Pin GitHub Actions to full-length commit SHAs by @danfiedler-msft in microsoft/go-winio#373

ci: add windows-2025, remove windows-2019 by @thaJeztah in microsoft/go-winio#378

Bump actions/checkout from 4.4.0 to 7.0.1 by @dependabot[bot] in microsoft/go-winio#380

Bump actions/setup-go from 5.6.0 to 7.0.0 by @dependabot[bot] in microsoft/go-winio#381

go.mod: raise minimum go version to go1.24 and use tools directive by @thaJeztah in microsoft/go-winio#348

Restrict CI workflow token permissions by @jterry75 with @Copilot in microsoft/go-winio#382

Use go tool to run stringer by @thaJeztah in microsoft/go-winio#383

ci: update actions and golangci-lint, and fix linting by @thaJeztah in microsoft/go-winio#349

fix linting issues by @thaJeztah in microsoft/go-winio#325

Bump golang.org/x/tools to v0.50.0 by @jterry75 in microsoft/go-winio#385

Resolves race in makeConnectedServerPipe / Close by @jterry75 in microsoft/go-winio#388

tools/mkwinsyscall: remove errnoERROR_IO_PENDING const by @thaJeztah in microsoft/go-winio#260

linting: enable dupword, intrange, mirror, gocritic by @alexandear in microsoft/go-winio#387

improve interoperability with stdlib sentinel errors and deprecate aliases by @thaJeztah in microsoft/go-winio#392

New Contributors

@vagokuln-msft made their first contribution in microsoft/go-winio#336

@rzlink made their first contribution in microsoft/go-winio#375

@dependabot[bot] made their first contribution in microsoft/go-winio#374

@danfiedler-msft made their first contribution in microsoft/go-winio#373

@jterry75 with @Copilot made their first contribution in microsoft/go-winio#382

@alexandear made their first contribution in microsoft/go-winio#387

Full Changelog: microsoft/go-winio@v0.6.2...v0.6.3

Commits

b900fd8 Fix regression in mkwinsyscall for non SystemDLLs (#394)
48c993a Bump golang.org/x/sys from 0.48.0 to 0.49.0 (#393)
2430248 improve interoperability with stdlib sentinel errors and deprecate aliases (#...
f19d971 linting: enable dupword, intrange, mirror, gocritic (#387)
0b70f54 tools/mkwinsyscall: remove errnoERROR_IO_PENDING const (#260)
7e8af9b Resolves race in makeConnectedServerPipe / Close (#388)
70234f2 Bump golang.org/x/tools to v0.50.0 (#385)
1de8712 fix linting issues (#325)
3093527 ci: update actions and golangci-lint, and fix linting (#349)
c7e589d Merge pull request #383 from thaJeztah/use_tool_generate
Additional commits viewable in compare view

Updates github.com/avast/retry-go/v4 from 4.6.1 to 4.7.0

Release notes

Sourced from github.com/avast/retry-go/v4's releases.

v4.7.0

What's Changed

support context cancel cause by @NivKeidan in avast/retry-go#117

Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @dependabot[bot] in avast/retry-go#136

Add FullJitterBackoffDelay by @amirrezafahimi in avast/retry-go#128

No delay after final retry on max attempts by @StounhandJ in avast/retry-go#129

BackOffDelay multiplies attempts from zero by @StounhandJ in avast/retry-go#130

add Go version 1.25 to test matrix for expanded compatibility testing by @JaSei in avast/retry-go#142

New Contributors

@NivKeidan made their first contribution in avast/retry-go#117

@amirrezafahimi made their first contribution in avast/retry-go#128

@StounhandJ made their first contribution in avast/retry-go#129

Full Changelog: avast/retry-go@4.6.1...v4.7.0

Commits

375037b bump version
306fcee Merge pull request #142 from avast/go_1_25_test_environment
0bdef9c ci(workflow): add Go version 1.25 to test matrix for expanded compatibility t...
66013da Merge pull request #130 from StounhandJ/back_off_delay
9e5d0d6 Merge pull request #129 from StounhandJ/master
5068e50 Merge pull request #128 from amirrezafahimi/master
22920c3 Merge pull request #136 from avast/dependabot/go_modules/github.com/stretchr/...
459fade Bump github.com/stretchr/testify from 1.10.0 to 1.11.1
6c62c20 BackOffDelay multiplies attempts from zero
e330bce no delay after final retry on max attempts
Additional commits viewable in compare view

Updates github.com/containernetworking/cni from 1.3.0 to 1.3.1

Release notes

Sourced from github.com/containernetworking/cni's releases.

v1.3.1

What's Changed

SPEC: Clarify some language around DEL and prevResult by @bleggett in containernetworking/cni#1156

update MAINTAINERS by @squeed in containernetworking/cni#1157

Update my email by @bleggett in containernetworking/cni#1161

docs: remove archived 3rd party plugins by @xmulligan in containernetworking/cni#1153

Add error codes for STATUS verb to types.go and SPEC.md by @architkulkarni in containernetworking/cni#1152

Add exec error when stderr is present by @mlguerrero12 in containernetworking/cni#1163

refactor: cni-tool with cobra by @Xunzhuo in containernetworking/cni#1160

Fix golangci and ci lint error by @s1061123 in containernetworking/cni#1169

moving meeting to bi-weekly by @squeed in containernetworking/cni#1168

Tolerate invalid cni cache for DelNetwork by @scpeters in containernetworking/cni#1171

README: change meeting to 10:00 US/East. by @squeed in containernetworking/cni#1172

spec: update number of specifically defined terms by @Faaizz in containernetworking/cni#1170

docs: Fix broken link to "Version considerations" in SPEC.md by @Abhigyan-Shekhar in containernetworking/cni#1177

libcni: add OpenTelemetry trace context propagation by @jipperinbham in containernetworking/cni#1173

New Contributors

@xmulligan made their first contribution in containernetworking/cni#1153

@architkulkarni made their first contribution in containernetworking/cni#1152

@mlguerrero12 made their first contribution in containernetworking/cni#1163

@Xunzhuo made their first contribution in containernetworking/cni#1160

@scpeters made their first contribution in containernetworking/cni#1171

@Faaizz made their first contribution in containernetworking/cni#1170

@Abhigyan-Shekhar made their first contribution in containernetworking/cni#1177

@jipperinbham made their first contribution in containernetworking/cni#1173

Full Changelog: containernetworking/cni@v1.3.0...v1.3.1

Commits

3f51e88 Merge pull request #1173 from jipperinbham/feat/otel-tracing
beb7d36 pkg/invoke: add OpenTelemetry trace context propagation
7c27007 Merge pull request #1177 from Abhigyan-Shekhar/Abhigyan-Shekhar-patch-1
f1cb561 docs: Fix broken link to "Version considerations" in SPEC.md
1d67f89 Merge pull request #1170 from Faaizz/main
bab140e Merge pull request #1172 from squeed/meeting-time-change
c5470a9 Merge pull request #1171 from scpeters/invalidcache_delnetwork
27db8d2 README: change meeting to 10:00 US/East.
a30dcc7 Update test expectations to tolerate error
36b1672 Tolerate invalid cni cache for DelNetwork
Additional commits viewable in compare view

Updates github.com/hashicorp/go-version from 1.7.0 to 1.9.0

Release notes

Sourced from github.com/hashicorp/go-version's releases.

v1.9.0

What's Changed

Enhancements

Add support for prefix of any character by @brondum in hashicorp/go-version#79

Internal

Update CHANGELOG for version 1.8.0 enhancements by @sonamtenzin2 in hashicorp/go-version#178

Bump the github-actions-backward-compatible group across 1 directory with 2 updates by @dependabot[bot] in hashicorp/go-version#179

Bump the github-actions-breaking group with 4 updates by @dependabot[bot] in hashicorp/go-version#180

Bump the github-actions-backward-compatible group with 3 updates by @dependabot[bot] in hashicorp/go-version#182

Update GitHub Actions to trigger on pull requests and update go version by @ssagarverma in hashicorp/go-version#185

Bump actions/upload-artifact from 6.0.0 to 7.0.0 in the github-actions-breaking group across 1 directory by @dependabot[bot] in hashicorp/go-version#183

Bump the github-actions-backward-compatible group across 1 directory with 2 updates by @dependabot[bot] in hashicorp/go-version#186

New Contributors

@sonamtenzin2 made their first contribution in hashicorp/go-version#178

@brondum made their first contribution in hashicorp/go-version#79

@ssagarverma made their first contribution in hashicorp/go-version#185

Full Changelog: hashicorp/go-version@v1.8.0...v1.9.0

v1.8.0

What's Changed

Add CODEOWNERS file in .github/CODEOWNERS by @mukeshjc in hashicorp/go-version#145

Linting by @KaushikiAnand in hashicorp/go-version#151

Correct typos in comments by @alexandear in hashicorp/go-version#134

Migrate GitHub Actions updates from TSCCR to Dependabot by @nodyhub in hashicorp/go-version#155

Bump the github-actions-backward-compatible group with 2 updates by @dependabot[bot] in hashicorp/go-version#157

Update doc reference in README by @alexandear in hashicorp/go-version#135

Bump the github-actions-breaking group with 3 updates by @dependabot[bot] in hashicorp/go-version#156

[Compliance] - PR Template Changes Required by @compliance-pr-automation-bot[bot] in hashicorp/go-version#158

Add benchmark test for version.String() by @Manikkumar1988 in hashicorp/go-version#159

Bytes implementation by @Manikkumar1988 in hashicorp/go-version#161

Bump actions/cache from 4.2.3 to 4.2.4 in the github-actions-backward-compatible group by @dependabot[bot] in hashicorp/go-version#167

Bump actions/checkout from 4.2.2 to 5.0.0 in the github-actions-breaking group by @dependabot[bot] in hashicorp/go-version#166

Bump the github-actions-breaking group across 1 directory with 2 updates by @dependabot[bot] in hashicorp/go-version#171

[IND-4226] [COMPLIANCE] Update Copyright Headers by @oss-core-libraries-dashboard[bot] in hashicorp/go-version#172

drop init() by @florianl in hashicorp/go-version#175

New Contributors

@mukeshjc made their first contribution in hashicorp/go-version#145

@KaushikiAnand made their first contribution in hashicorp/go-version#151

@alexandear made their first contribution in hashicorp/go-version#134

@nodyhub made their first contribution in hashicorp/go-version#155

@compliance-pr-automation-bot[bot] made their first contribution in hashicorp/go-version#158

@Manikkumar1988 made their first contribution in hashicorp/go-version#159

@oss-core-libraries-dashboard[bot] made their first contribution in hashicorp/go-version#172

@florianl made their first contribution in hashicorp/go-version#175

Full Changelog: hashicorp/go-version@v1.7.0...v1.8.0

Changelog

Sourced from github.com/hashicorp/go-version's changelog.

1.9.0 (Mar 30, 2026)

ENHANCEMENTS:

Support parsing versions with custom prefixes via opt-in option in hashicorp/go-version#79

INTERNAL:

Bump the github-actions-backward-compatible group across 1 directory with 2 updates in hashicorp/go-version#179

Bump the github-actions-breaking group with 4 updates in hashicorp/go-version#180

Bump the github-actions-backward-compatible group with 3 updates in hashicorp/go-version#182

Update GitHub Actions to trigger on pull requests and update go version in hashicorp/go-version#185

Bump actions/upload-artifact from 6.0.0 to 7.0.0 in the github-actions-breaking group across 1 directory in hashicorp/go-version#183

Bump the github-actions-backward-compatible group across 1 directory with 2 updates in hashicorp/go-version#186

1.8.0 (Nov 28, 2025)

ENHANCEMENTS:

Add benchmark test for version.String() in hashicorp/go-version#159

Bytes implementation in hashicorp/go-version#161

INTERNAL:

Add CODEOWNERS file in .github/CODEOWNERS in hashicorp/go-version#145

Linting in hashicorp/go-version#151

Correct typos in comments in hashicorp/go-version#134

Migrate GitHub Actions updates from TSCCR to Dependabot in hashicorp/go-version#155

Bump the github-actions-backward-compatible group with 2 updates in hashicorp/go-version#157

Update doc reference in README in hashicorp/go-version#135

Bump the github-actions-breaking group with 3 updates in hashicorp/go-version#156

[Compliance] - PR Template Changes Required in hashicorp/go-version#158

Bump actions/cache from 4.2.3 to 4.2.4 in the github-actions-backward-compatible group in hashicorp/go-version#167

Bump actions/checkout from 4.2.2 to 5.0.0 in the github-actions-breaking group in hashicorp/go-version#166

Bump the github-actions-breaking group across 1 directory with 2 updates in hashicorp/go-version#171

[IND-4226] [COMPLIANCE] Update Copyright Headers in hashicorp/go-version#172

drop init() in hashicorp/go-version#175

Commits

b80b1e6 Update CHANGELOG for version 1.9.0 (#187)
e93736f Bump the github-actions-backward-compatible group across 1 directory with 2 u...
c009de0 Bump actions/upload-artifact from 6.0.0 to 7.0.0 in the github-actions-breaki...
0474357 Update GitHub Actions to trigger on pull requests and update go version (#185)
b4ab5fc Support parsing versions with custom prefixes via opt-in option (#79)
25c683b Merge pull request #182 from hashicorp/dependabot/github_actions/github-actio...
4f2bcd8 Bump the github-actions-backward-compatible group with 3 updates
acb8b18 Merge pull request #180 from hashicorp/dependabot/github_actions/github-actio...
0394c4f Merge pull request #179 from hashicorp/dependabot/github_actions/github-actio...
b2fbaa7 Bump the github-actions-backward-compatible group across 1 directory with 2 u...
Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.23.0 to 1.25.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.25.0

⚠️ This release raises the minimum required Go version to 1.26 and includes breaking API changes in api/prometheus/v1 (see the [CHANGE] entries below). ⚠️

1.25.0 / 2026-10-07

[CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138

[CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963

[CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928

[FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091

[FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146

[ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142

[ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095

[ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125

[BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136

[BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139

[BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135

What's Changed

fix: Remove unneeded and broken CI badge by @bwplotka in prometheus/client_golang#2057

Synchronize common files from prometheus/prometheus by @prombot in prometheus/client_golang#2060

build(deps): bump the codeql group with 4 updates by @dependabot[bot] in prometheus/client_golang#2066

build(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by @dependabot[bot] in prometheus/client_golang#2071

build(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 in the golang-org-x group across 1 directory by @dependabot[bot] in prometheus/client_golang#2069

build(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 in /exp by @dependabot[bot] in prometheus/client_golang#2072

build(deps): bump github.com/prometheus/common from 0.69.0 to 0.70.1 in /exp by @dependabot[bot] in prometheus/client_golang#2073

build(deps): bump github.com/prometheus/common from 0.69.0 to 0.70.1 by @dependabot[bot] in prometheus/client_golang#2070

build(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 in /tutorials/whatsup by @dependabot[bot] in prometheus/client_golang#2075

Pin GitHub Actions by @SuperQ in prometheus/client_golang#2074

build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in prometheus/client_golang#2067

promhttp: fix panic on requests with nil URL by @SAY-5 in prometheus/client_golang#2065

Return info annotations in addition to warnings in the API by @zenador in prometheus/client_golang#1963

build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @dependabot[bot] in prometheus/client_golang#2082

Synchronize common files from prometheus/prometheus by @prombot in prometheus/client_golang#2084

Synchronize common files from prometheus/prometheus by @prombot in prometheus/client_golang#2086

Synchronize common files from prometheus/prometheus by @prombot in prometheus/client_golang#2088

Regenerate Go collector runtime metrics for Go 1.25 and Go 1.26 by @bwplotka in prometheus/client_golang#2090

go.mod: remove obsolete exclude rule by @thaJeztah in prometheus/client_golang#2077

Synchronize common files from prometheus/prometheus by @prombot in prometheus/client_golang#2093

README: document the OpenTelemetry OTLP push bridge by @mvanhorn in prometheus/client_golang#1987

docs: add AGENTS.md contributor and maintainer guide by @bwplotka in prometheus/client_golang#2056

testutil: add GatherAndFormat helper by @wieghx in prometheus/client_golang#2091

build(deps): bump the codeql group with 4 updates by @dependabot[bot] in prometheus/client_golang#2101

build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 by @dependabot[bot] in prometheus/client_golang#2097

build(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 by @dependabot[bot] in prometheus/client_golang#2098

build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 in /exp by @dependabot[bot] in prometheus/client_golang#2099

build(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 in /exp by @dependabot[bot] in prometheus/client_golang#2100

build(deps): bump github.com/prometheus/procfs from 0.21.1 to 0.22.0 in the prometheus group across 1 directory by @dependabot[bot] in prometheus/client_golang#2096

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.25.0 / 2026-10-07

[CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138

[CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963

[CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty t...
Description has been truncated

…3 updates Bumps the all-go-minor-and-patch group with 23 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.18.2` | `1.23.3` | | [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.10.1` | `1.14.0` | | [github.com/Microsoft/go-winio](https://github.com/Microsoft/go-winio) | `0.6.2` | `0.6.4` | | [github.com/avast/retry-go/v4](https://github.com/avast/retry-go) | `4.6.1` | `4.7.0` | | [github.com/containernetworking/cni](https://github.com/containernetworking/cni) | `1.3.0` | `1.3.1` | | [github.com/hashicorp/go-version](https://github.com/hashicorp/go-version) | `1.7.0` | `1.9.0` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.23.0` | `1.25.0` | | [github.com/prometheus/client_model](https://github.com/prometheus/client_model) | `0.6.2` | `0.6.3` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.9.1` | `1.10.2` | | [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.7` | `1.0.9` | | [github.com/spf13/viper](https://github.com/spf13/viper) | `1.20.1` | `1.21.0` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` | | [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.0` | `1.28.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.2` | `1.85.0` | | google.golang.org/protobuf | `1.36.11` | `1.36.12` | | [github.com/fsnotify/fsnotify](https://github.com/fsnotify/fsnotify) | `1.9.0` | `1.10.1` | | [github.com/labstack/echo/v4](https://github.com/labstack/echo) | `4.13.4` | `4.16.2` | | [github.com/prometheus/common](https://github.com/prometheus/common) | `0.65.0` | `0.72.0` | | [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.3` | `1.10.2` | | [golang.org/x/net](https://github.com/golang/net) | `0.61.0` | `0.62.0` | | [golang.org/x/time](https://github.com/golang/time) | `0.12.0` | `0.15.0` | | [github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor](https://github.com/Azure/azure-sdk-for-go) | `0.11.0` | `0.13.0` | | [github.com/cilium/cilium](https://github.com/cilium/cilium) | `1.15.15` | `1.16.19` | Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.18.2 to 1.23.3 - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.18.2...sdk/azcore/v1.23.3) Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.10.1 to 1.14.0 - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Commits](Azure/azure-sdk-for-go@sdk/azidentity/v1.10.1...sdk/azcore/v1.14.0) Updates `github.com/Microsoft/go-winio` from 0.6.2 to 0.6.4 - [Release notes](https://github.com/Microsoft/go-winio/releases) - [Commits](microsoft/go-winio@v0.6.2...v0.6.4) Updates `github.com/avast/retry-go/v4` from 4.6.1 to 4.7.0 - [Release notes](https://github.com/avast/retry-go/releases) - [Commits](avast/retry-go@4.6.1...4.7.0) Updates `github.com/containernetworking/cni` from 1.3.0 to 1.3.1 - [Release notes](https://github.com/containernetworking/cni/releases) - [Commits](containernetworking/cni@v1.3.0...v1.3.1) Updates `github.com/hashicorp/go-version` from 1.7.0 to 1.9.0 - [Release notes](https://github.com/hashicorp/go-version/releases) - [Changelog](https://github.com/hashicorp/go-version/blob/main/CHANGELOG.md) - [Commits](hashicorp/go-version@v1.7.0...v1.9.0) Updates `github.com/prometheus/client_golang` from 1.23.0 to 1.25.0 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/v1.25.0/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.23.0...v1.25.0) Updates `github.com/prometheus/client_model` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/prometheus/client_model/releases) - [Commits](prometheus/client_model@v0.6.2...v0.6.3) Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.2 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.9.1...v1.10.2) Updates `github.com/spf13/pflag` from 1.0.7 to 1.0.9 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.7...v1.0.9) Updates `github.com/spf13/viper` from 1.20.1 to 1.21.0 - [Release notes](https://github.com/spf13/viper/releases) - [Commits](spf13/viper@v1.20.1...v1.21.0) Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.11.1...v1.12.1) Updates `go.uber.org/zap` from 1.27.0 to 1.28.0 - [Release notes](https://github.com/uber-go/zap/releases) - [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md) - [Commits](uber-go/zap@v1.27.0...v1.28.0) Updates `google.golang.org/grpc` from 1.83.2 to 1.85.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.83.2...v1.85.0) Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12 Updates `github.com/fsnotify/fsnotify` from 1.9.0 to 1.10.1 - [Release notes](https://github.com/fsnotify/fsnotify/releases) - [Changelog](https://github.com/fsnotify/fsnotify/blob/main/CHANGELOG.md) - [Commits](fsnotify/fsnotify@v1.9.0...v1.10.1) Updates `github.com/labstack/echo/v4` from 4.13.4 to 4.16.2 - [Release notes](https://github.com/labstack/echo/releases) - [Changelog](https://github.com/labstack/echo/blob/master/CHANGELOG.md) - [Commits](labstack/echo@v4.13.4...v4.16.2) Updates `github.com/prometheus/common` from 0.65.0 to 0.72.0 - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md) - [Commits](prometheus/common@v0.65.0...v0.72.0) Updates `github.com/sirupsen/logrus` from 1.9.3 to 1.10.2 - [Release notes](https://github.com/sirupsen/logrus/releases) - [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md) - [Commits](sirupsen/logrus@v1.9.3...v1.10.2) Updates `golang.org/x/net` from 0.61.0 to 0.62.0 - [Commits](golang/net@v0.61.0...v0.62.0) Updates `golang.org/x/time` from 0.12.0 to 0.15.0 - [Commits](golang/time@v0.12.0...v0.15.0) Updates `github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor` from 0.11.0 to 0.13.0 - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Commits](Azure/azure-sdk-for-go@sdk/azcore/v0.11.0...sdk/azcore/v0.13.0) Updates `github.com/cilium/cilium` from 1.15.15 to 1.16.19 - [Release notes](https://github.com/cilium/cilium/releases) - [Changelog](https://github.com/cilium/cilium/blob/1.16.19/CHANGELOG.md) - [Commits](cilium/cilium@1.15.15...1.16.19) --- updated-dependencies: - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore dependency-version: 1.23.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go-minor-and-patch - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go-minor-and-patch - dependency-name: github.com/Microsoft/go-winio dependency-version: 0.6.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go-minor-and-patch - dependency-name: github.com/avast/retry-go/v4 dependency-version: 4.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go-minor-and-patch - dependency-name: github.com/containernetworking/cni dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go-minor-and-patch - dependency-name: github.com/hashicorp/go-version dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go-minor-and-patch - dependency-name: github.com/prometheus/client_golang dependency-version: 1.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go-minor-and-patch - dependency-name: github.com/prometheus/client_model dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go-minor-and-patch - dependency-name: github.com/spf13/cobra dependency-version: 1.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go-minor-and-patch - dependency-name: github.com/spf13/pflag dependency-version: 1.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go-minor-and-patch - dependency-name: github.com/spf13/viper dependency-version: 1.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go-minor-and-patch - dependency-name: github.com/stretchr/testify dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go-minor-and-patch - dependency-name: go.uber.org/zap dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go-minor-and-patch - dependency-name: google.golang.org/grpc dependency-version: 1.85.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go-minor-and-patch - dependency-name: google.golang.org/protobuf dependency-version: 1.36.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-go-minor-and-patch - dependency-name: github.com/fsnotify/fsnotify dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go-minor-and-patch - dependency-name: github.com/labstack/echo/v4 dependency-version: 4.16.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go-minor-and-patch - dependency-name: github.com/prometheus/common dependency-version: 0.72.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go-minor-and-patch - dependency-name: github.com/sirupsen/logrus dependency-version: 1.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go-minor-and-patch - dependency-name: golang.org/x/net dependency-version: 0.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go-minor-and-patch - dependency-name: golang.org/x/time dependency-version: 0.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go-minor-and-patch - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor dependency-version: 0.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go-minor-and-patch - dependency-name: github.com/cilium/cilium dependency-version: 1.16.19 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-go-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Copilot

🟡 Changes recommended

The dependency bumps leave metric parsers that panic under prometheus/common v0.72.0 and unmigrated Azure workspace API calls that prevent the E2E framework from compiling.

2 open issues

What changed in this PR

Updates the root Go module’s dependencies for Azure Container Networking through a grouped minor-and-patch dependency refresh.

Changes:

Upgrades 23 grouped dependencies, including Azure SDKs, CNI, Cilium, Prometheus, and gRPC.
Updates related transitive dependencies and refreshes module checksums.

File	Description
`go.sum`	Refreshes checksums for the updated dependency graph.
`go.mod`	Updates direct and transitive dependency requirements.

_{Review effort: Balanced}

-	github.com/sirupsen/logrus v1.9.3
-	github.com/spf13/afero v1.12.0 // indirect
-	github.com/spf13/cast v1.7.1 // indirect
+	github.com/prometheus/common v0.72.0


 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v4 v4.9.0-beta.1
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/dashboard/armdashboard v1.2.0
-	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor v0.11.0
+	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor v0.13.0


Copilot · 2026-11-04T10:02:23Z

One or more custom setup steps configured for this repository failed during this Copilot code review run:

Pre-resolve container image digests (before firewall activates)

Setup steps run before each review. If the review above is missing context, or no review was posted at all, the failing step above may be the cause. See the workflow run for failure details, fix your setup steps configuration, and re-request a review.

Note

You can configure setup steps for Copilot code review separately from Copilot cloud agent with a copilot-code-review.yml file. Read the docs for details.

dependabot Bot requested a review from a team as a code owner November 4, 2026 09:57

dependabot Bot requested review from John Payne (jpayne3506) and a balanced review from Copilot November 4, 2026 09:57

dependabot Bot added dependencies Dependencies only. release/1.6 Change affects 1.6 release train labels Nov 4, 2026

Copilot started reviewing November 4, 2026 09:59

View session

Copilot AI reviewed Nov 4, 2026

View reviewed changes

Navigation Menu

Repository navigation

deps: bump the all-go-minor-and-patch group across 1 directory with 23 updates - #5152

deps: bump the all-go-minor-and-patch group across 1 directory with 23 updates#5152
dependabot[bot] wants to merge 1 commit into
release/v1.6from
dependabot/go_modules/release/v1.6/all-go-minor-and-patch-bce9baa078

dependabot Bot commented on behalf of github Nov 4, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI commented Nov 4, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 4, 2026

sdk/azcore/v1.23.3

1.23.3 (2026-10-06)

Bugs Fixed

Other Changes

sdk/azcore/v1.23.2

1.23.2 (2026-09-28)

Bugs Fixed

sdk/internal/v1.13.0

1.13.0 (2026-09-30)

Features Added

sdk/messaging/azservicebus/v1.11.0

1.11.0 (2026-10-06)

Features Added

Bugs Fixed

Other Changes

v0.6.4

What's Changed

v0.6.3

What's Changed

New Contributors

v4.7.0

What's Changed

New Contributors

v1.3.1

What's Changed

New Contributors

v1.9.0

What's Changed

Enhancements

Internal

New Contributors

v1.8.0

What's Changed

New Contributors

1.9.0 (Mar 30, 2026)

1.8.0 (Nov 28, 2025)

v1.25.0

1.25.0 / 2026-10-07

What's Changed

1.25.0 / 2026-10-07

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Uh oh!

Copilot AI commented Nov 4, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant