chore(deps): bump the go-dependencies group across 1 directory with 26 updates by dependabot[bot] · Pull Request #112 · poyrazK/thecloud

dependabot · 2026-04-08T15:52:49Z

Bumps the go-dependencies group with 15 updates in the / directory:

Package	From	To
github.com/alicebob/miniredis/v2	`2.35.0`	`2.37.0`
github.com/gin-contrib/pprof	`1.5.3`	`1.5.4`
github.com/go-resty/resty/v2	`2.17.1`	`2.17.2`
github.com/hashicorp/vault/api	`1.22.0`	`1.23.0`
github.com/jackc/pgx/v5	`5.8.0`	`5.9.1`
github.com/joeig/go-powerdns/v3	`3.20.0`	`3.21.0`
github.com/olekukonko/tablewriter	`1.1.3`	`1.1.4`
github.com/prometheus/client_golang	`1.17.0`	`1.23.2`
github.com/redis/go-redis/v9	`9.17.2`	`9.18.0`
github.com/testcontainers/testcontainers-go	`0.35.0`	`0.41.0`
github.com/testcontainers/testcontainers-go/modules/postgres	`0.35.0`	`0.41.0`
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin	`0.59.0`	`0.68.0`
golang.org/x/time	`0.14.0`	`0.15.0`
k8s.io/api	`0.29.9`	`0.35.3`
k8s.io/cloud-provider	`0.29.9`	`0.35.3`

Updates github.com/alicebob/miniredis/v2 from 2.35.0 to 2.37.0

Release notes

Sourced from github.com/alicebob/miniredis/v2's releases.

HEXPIRE

support HEXPIRE (thanks @mojixcoder)

support CLUSTER SHARDS

support CLUSTER SHARDS (thanks @dadrus)

redis 8.4.0, DUMP/RESTORE, EVALRO, WAIT

return actual server address by CLUSTER NODES (thanks @nastik-kum)

support DUMP and RESTORE (thanks @alyssaruth)

support EVALRO (thanks @max-frank)

add WAIT command as no-op (thanks @aroullet)

support info stats (thanks @destinyoooo)

add "-*" keys

compare against Redis 8.4.0

Changelog

Sourced from github.com/alicebob/miniredis/v2's changelog.

v2.37.0

suport HEXPIRE (thanks @mojixcoder)

v2.36.1

support CLUSTER SHARDS (thanks @dadrus)

v2.36.0

return actual server address by CLUSTER NODES (thanks @nastik-kum)

support DUMP and RESTORE (thanks @alyssaruth)

support EVALRO (thanks @max-frank)

add WAIT command as no-op (thanks @aroullet)

support info stats (thanks @destinyoooo)

add "-*" keys

compare against Redis 8.4.0

Commits

c1b59bf feat: implement HEXPIRE command (#424)
64de52d changelog for v2.36.1
7ae63ba CLUSTER SHARDS (#431)
99437e6 v2.36.0 changelog
e5c9a13 update redis to 8.4.0 (#425)
879c91c use math/bits
dfe3831 support for "<timestamp>-*" (#426)
72a6b15 Add evalro support (#416)
3f960ee direct implementations for 2 commands
20a81e7 Merge pull request #422 from destinyoooo/client-stats
Additional commits viewable in compare view

Updates github.com/gin-contrib/pprof from 1.5.3 to 1.5.4

Release notes

Sourced from github.com/gin-contrib/pprof's releases.

v1.5.4

Changelog

Enhancements

e99ea69812d8b0c0e0ae013cf4032404448329e8: chore(deps): upgrade golang.org/x/crypto to v0.45.0 (@appleboy)

aaad253166465a9cdd60825e4ac773b24f86126c: chore: bump Go version and update related dependencies (@appleboy)

e7ae998cbc67fba588bf4f5211d54bdf1839cc89: chore(deps): bump actions/checkout from 4 to 6 (@appleboy)

5511e0a42a8c504e3792812cc38894291085eed0: chore: drop Go 1.23 support, require Go 1.24+ (@appleboy)

a4be2070299de8362a7a1452b2d4d8c09188335b: chore(deps): upgrade quic-go to v0.57.1 (@appleboy)

6da41cda6c5fb6a06a191f1e4fbd70a8e1e5fe34: chore(ci): update golangci-lint to v2.6 (@appleboy)

df06d618608595ff41cf5b8e3456a644436e4bbc: chore(deps): bump actions/cache from 4 to 5 (@appleboy)

30ded767091dc0541c94a09b0040274265f618b9: chore(ci): upgrade trivy-action from 0.33.1 to 0.35.0 (@appleboy)

d8af6b6b9790686cab1dcbb9a92dd29c966a296a: chore(deps): upgrade gin to v1.12.0 and update CI Go versions (@appleboy)

583c094d70da0ede3d96f9d639f5f3da69cbeda4: chore(deps): upgrade golang.org/x/text to v0.35.0 (@appleboy)

Build process updates

85e072e8c56685edb5a79813c0e9598f0ab87386: ci: add Go 1.25 support to CI test matrix (@appleboy)

aad6c1c2b533454ddfb460dcd28dfd915e3029bb: ci: integrate automated Trivy security scanning and reporting (@appleboy)

9179bd2f34c9f9fd964baebbae4c6178c02bcfef: ci(workflow): bump goreleaser/goreleaser-action from v6 to v7 (@appleboy)

Others

13f7ff4f913a57cb4a3156d0e732a403e317e995: Add Go 1.26 to GitHub Actions test matrix (@appleboy)

9ce8ca4597acd95e98e99c7287ca07658402a319: Update golangci-lint version to v2.9 (@appleboy)

Commits

583c094 chore(deps): upgrade golang.org/x/text to v0.35.0
9179bd2 ci(workflow): bump goreleaser/goreleaser-action from v6 to v7
d8af6b6 chore(deps): upgrade gin to v1.12.0 and update CI Go versions
30ded76 chore(ci): upgrade trivy-action from 0.33.1 to 0.35.0
9ce8ca4 Update golangci-lint version to v2.9
13f7ff4 Add Go 1.26 to GitHub Actions test matrix
df06d61 chore(deps): bump actions/cache from 4 to 5
6da41cd chore(ci): update golangci-lint to v2.6
a4be207 chore(deps): upgrade quic-go to v0.57.1
5511e0a chore: drop Go 1.23 support, require Go 1.24+
Additional commits viewable in compare view

Updates github.com/gin-gonic/gin from 1.11.0 to 1.12.0

Release notes

Sourced from github.com/gin-gonic/gin's releases.

v1.12.0

Changelog

Features

192ac89eefc1c30f7c97ae48a9ffb1c6f1c8c8bc: feat(binding): add support for encoding.UnmarshalText in uri/query binding (#4203) (@takanuva15)

53410d2e07054369e0960fbe2eed97e1b9966f12: feat(context): add GetError and GetErrorSlice methods for error retrieval (#4502) (@raju-mechatronics)

acc55e049e33b401e810dbd8c0d6dcb6b3ba2b05: feat(context): add Protocol Buffers support to content negotiation (#4423) (@1911860538)

38e765119241d990705169bedb5002a29ae0cbd1: feat(context): implemented Delete method (@Spyder01)

771dcc6476d7bc6abb9ec0235ecefa4d38fe6fb0: feat(gin): add option to use escaped path (#4420) (@ldesauw)

4dec17afdff48e8018c83618fbbe69fceeb2b41d: feat(logger): color latency (#4146) (@wsyqn6)

d7776de7d444935ea4385999711bd6331a98fecb: feat(render): add bson protocol (#4145) (@laurentcau)

Bug fixes

b917b14ff9d189f16a7492be79d123a47806ee19: fix(binding): empty value error (#2169) (@guonaihong)

c3d1092b3b48addf6f9cd00fe274ec3bd14650eb: fix(binding): improve empty slice/array handling in form binding (#4380) (@1911860538)

9914178584e42458ff7d23891463a880f58c9d86: fix(context): ClientIP handling for multiple X-Forwarded-For header values (#4472) (@Nurysso)

2a794cd0b0faa7d829291375b27a3467ea972b0d: fix(debug): version mismatch (#4403) (@zeek0x)

c3d5a28ed6d3849da820195b6774d212bcc038a9: fix(gin): close os.File in RunFd to prevent resource leak (#4422) (@1911860538)

5fad976b372e381312f8de69f0969f1284d229d3: fix(gin): literal colon routes not working with engine.Handler() (#4415) (@pawannn)

63dd3e60cab89c27fb66bce1423bd268d52abad1: fix(recover): suppress http.ErrAbortHandler in recover (#4336) (@MondayCha)

5c00df8afadd06cc5be530dde00fe6d9fa4a2e4a: fix(render): write content length in Data.Render (#4206) (@dengaleev)

234a6d4c00cb77af9852aca0b8289745d5529b4b: fix(response): refine hijack behavior for response lifecycle (#4373) (@appleboy)

472d086af2acd924cb4b9d7be0525f7d790f69bc: fix(tree): panic in findCaseInsensitivePathRec with RedirectFixedPath (#4535) (@veeceey)

8e07d37c63e5536eb25f4af4c91eabeee4011fba: fix: Correct typos, improve documentation clarity, and remove dead code (#4511) (@mahanadh)

Enhancements

ba093d19477b896ac89a7fc3246af23d290b8e26: chore(binding): upgrade bson dependency to mongo-driver v2 (#4549) (@BobDu)

b2b489dbf4826c2c630717a77fd5e42774625410: chore(context): always trust xff headers from unix socket (#3359) (@WeidiDeng)

ecb3f7b5e2f3915bf1db240ed5eee572f8dbea36: chore(deps): upgrade golang.org/x/crypto to v0.45.0 (#4449) (@appleboy)

af6e8b70b8261bb0c99ad094fe552ab92991620a: chore(deps): upgrade quic-go to v0.57.1 (@appleboy)

db309081bc5c137b2aa15701ef53f7f19788da25: chore(logger): allow skipping query string output (#4547) (@USA-RedDragon)

26c3a628655cad2388380cb8102d6ce7d4875f3b: chore(response): prevent Flush() panic when http.Flusher (#4479) (@Twacqwq)

5dd833f1f26de0eb30eae47b17e05ced2482dc41: chore: bump minimum Go version to 1.24 and update workflows (#4388) (@appleboy)

Refactor

39858a0859c914bd26948fa950477e11bd8d3823: refactor(binding): use maps.Copy for cleaner map handling (#4352) (@russcoss)

c0048f645ee945c4db30593afdea10123e2c30a6: refactor(context): omit the return value names (#4395) (@wanghaolong613)

915e4c90d28ec4cffc6eb146e208ab5a65eac772: refactor(context): replace hardcoded localhost IPs with constants (#4481) (@pauloappbr)

414de60574449457f3192a7a1d5528940db2836d: refactor(context): using maps.Clone (#4333) (@cuiweixie)

59e9d4a794f12c4f9a6c7bed441b9644e5f6d99b: refactor(ginS): use sync.OnceValue to simplify engine function (#4314) (@1911860538)

3ab698dc5110af1977d57226e4995c57dd34c233: refactor(recovery): smart error comparison (#4142) (@zeek0x)

d1a15347b1e45a8ee816193d3578a93bfd73b70f: refactor(utils): move util functions to utils.go (#4467) (@zeek0x)

e3118cc378d263454098924ebbde7e8d1dd2e904: refactor: for loop can be modernized using range over int (#4392) (@wanghaolong613)

488f8c3ffa579a8d19beb2bae95ff8ef36b3d53f: refactor: replace magic numbers with named constants in bodyAllowedForStatus (#4529) (@veeceey)

9968c4bf9d5a99edc3eee2c068a4c9160ece8915: refactor: use b.Loop() to simplify the code and improve performance (#4389) (@reddaisyy)

a85ef5ce4d0cda8834c59c855068ed48b51192d1: refactor: use b.Loop() to simplify the code and improve performance (#4432) (@efcking)

Build process updates

61b67de522a189b568aced4c5c16917c558e3387: ci(bot): increase frequency and group updates for dependencies (#4367) (@appleboy)

fb27ef26c2fdfe25344b4c039d8a53551f9e912c: ci(lint): refactor test assertions and linter configuration (#4436) (@appleboy)

93ff771e6dbf10e432864b30f3719ac5c84a4d4a: ci(sec): improve type safety and server organization in HTTP middleware (#4437) (@appleboy)

e88fc8927a52b74f55bec0351604a56ac0aa1c51: ci(sec): schedule Trivy security scans to run daily at midnight UTC (#4439) (@appleboy)

5e5ff3ace496a31b138b0820136a146bfb5de0ef: ci: replace vulnerability scanning workflow with Trivy integration (#4421) (@appleboy)

00900fb3e1ea9dde33985a0e4f6afec793d5e786: ci: update CI workflows and standardize Trivy config quotes (#4531) (@appleboy)

ae3f524974fc4f55d18c9e7fae4614503c015226: ci: update Go version support to 1.25+ across CI and docs (#4550) (@appleboy)

... (truncated)

Changelog

Sourced from github.com/gin-gonic/gin's changelog.

Gin v1.12.0

Features

feat(render): add bson protocol (#4145)

feat(context): add GetError and GetErrorSlice methods for error retrieval (#4502)

feat(binding): add support for encoding.UnmarshalText in uri/query binding (#4203)

feat(gin): add option to use escaped path (#4420)

feat(context): add Protocol Buffers support to content negotiation (#4423)

feat(context): implemented Delete method (#38e7651)

feat(logger): color latency (#4146)

Enhancements

perf(tree): reduce allocations in findCaseInsensitivePath (#4417)

perf(recovery): optimize line reading in stack function (#4466)

perf(path): replace regex with custom functions in redirectTrailingSlash (#4414)

perf(tree): optimize path parsing using strings.Count (#4246)

chore(logger): allow skipping query string output (#4547)

chore(context): always trust xff headers from unix socket (#3359)

chore(response): prevent Flush() panic when the underlying ResponseWriter does not implement http.Flusher (#4479)

refactor(recovery): smart error comparison (#4142)

refactor(context): replace hardcoded localhost IPs with constants (#4481)

refactor(utils): move util functions to utils.go (#4467)

refactor(binding): use maps.Copy for cleaner map handling (#4352)

refactor(context): using maps.Clone (#4333)

refactor(ginS): use sync.OnceValue to simplify engine function (#4314)

refactor: replace magic numbers with named constants in bodyAllowedForStatus (#4529)

refactor: for loop can be modernized using range over int (#4392)

Bug Fixes

fix(tree): panic in findCaseInsensitivePathRec with RedirectFixedPath (#4535)

fix(render): write content length in Data.Render (#4206)

fix(context): ClientIP handling for multiple X-Forwarded-For header values (#4472)

fix(binding): empty value error (#2169)

fix(recover): suppress http.ErrAbortHandler in recover (#4336)

fix(gin): literal colon routes not working with engine.Handler() (#4415)

fix(gin): close os.File in RunFd to prevent resource leak (#4422)

fix(response): refine hijack behavior for response lifecycle (#4373)

fix(binding): improve empty slice/array handling in form binding (#4380)

fix(debug): version mismatch (#4403)

fix: correct typos, improve documentation clarity, and remove dead code (#4511)

Build process updates / CI

ci: update Go version support to 1.25+ across CI and docs (#4550)

chore(binding): upgrade bson dependency to mongo-driver v2 (#4549)

Commits

73726dc docs: update documentation to reflect Go version changes (#4552)
e292e5c docs: document and finalize Gin v1.12.0 release (#4551)
ae3f524 ci: update Go version support to 1.25+ across CI and docs (#4550)
38534e2 chore(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 (#4548)
472d086 fix(tree): panic in findCaseInsensitivePathRec with RedirectFixedPath (#4535)
fb25834 test(context): use http.StatusContinue constant instead of magic number 100 (...
6f1d5fe test(render): add comprehensive error handling tests (#4541)
5c00df8 fix(render): write content length in Data.Render (#4206)
db30908 chore(logger): allow skipping query string output (#4547)
ba093d1 chore(binding): upgrade bson dependency to mongo-driver v2 (#4549)
Additional commits viewable in compare view

Updates github.com/go-resty/resty/v2 from 2.17.1 to 2.17.2

Release notes

Sourced from github.com/go-resty/resty/v2's releases.

v2.17.2

Release Notes

Backport

backport: header deepcopy fix by @jeevatkm in go-resty/resty#1110

Release

release: version bump to v2.17.2 and readme update by @jeevatkm in go-resty/resty#1112

Full Changelog: go-resty/resty@v2.17.1...v2.17.2

Commits

b1b3aaa release: version bump to v2.17.2 and readme update (#1112)
fb4a091 backport: header deepcopy fix (#1110)
See full diff in compare view

Updates github.com/hashicorp/vault/api from 1.22.0 to 1.23.0

Commits

d430306 Merge remote-tracking branch 'remotes/from/ce/main'
a3bc0a3 (enos): Add LDAP secrets engine blackbox tests to Plugin Scenario (#13072) (#...
f8df539 Merge remote-tracking branch 'remotes/from/ce/main'
2b0ec25 VAULT-43444 Addressed races in tests (#13278) (#13285)
a097d1f Merge remote-tracking branch 'remotes/from/ce/main'
7e587fd Update vault-plugin-auth-kubernetes to v0.24.1 (#13259) (#13287)
1331818 UI: Fix namespace search showing empty state when namespaces exist (#13257) (...
7b12feb Merge remote-tracking branch 'remotes/from/ce/main'
7d4395c Update vault-plugin-auth-jwt to v0.26.1 (#13242) (#13283)
6d4b615 adds flag to fix chrome in ci (#13279) (#13282)
Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.8.0 to 5.9.1

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.9.1 (March 22, 2026)

Fix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)

5.9.0 (March 21, 2026)

This release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and PostgreSQL protocol 3.2 support.

It significantly reduces the amount of network traffic when using prepared statements (which are used automatically by default) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.

It also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends deliberately malformed messages.

Require Go 1.25+

Add SCRAM-SHA-256-PLUS support (Adam Brightwell)

Add OAuth authentication support for PostgreSQL 18 (David Schneider)

Add PostgreSQL protocol 3.2 support (Dirkjan Bussink)

Add tsvector type support (Adam Brightwell)

Skip Describe Portal for cached prepared statements reducing network round trips

Make LoadTypes query easier to support on "postgres-like" servers (Jelte Fennema-Nio)

Default empty user to current OS user matching libpq behavior (ShivangSrivastava)

Optimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)

Optimize date scanning by replacing regex with manual parsing (Mathias Bogaert)

Optimize pgio append/set functions with direct byte shifts (Mathias Bogaert)

Make RowsAffected faster (Abhishek Chanda)

Fix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)

Fix: ContextWatcher goroutine leak (Hank Donnay)

Fix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)

Fix: pipelineBatchResults.Exec silently swallowing lastRows error

Fix: ColumnTypeLength using BPCharArrayOID instead of BPCharOID

Fix: TSVector text encoding returning nil for valid empty tsvector

Fix: wrong error messages for Int2 and Int4 underflow

Fix: Numeric nil Int pointer dereference with Valid: true

Fix: reversed strings.ContainsAny arguments in Numeric.ScanScientific

Fix: message length parsing on 32-bit platforms

Fix: FunctionCallResponse.Decode mishandling of signed result size

Fix: returning wrong error in configTLS when DecryptPEMBlock fails (Maxim Motyshen)

Fix: misleading ParseConfig error when default_query_exec_mode is invalid (Skarm)

Fix: missed Unwatch in Pipeline error paths

Clarify too many failed acquire attempts error message

Better error wrapping with context and SQL statement (Aneesh Makala)

Enable govet and ineffassign linters (Federico Guerinoni)

Guard against various malformed binary messages (arrays, hstore, multirange, protocol messages)

Fix various godoc comments (ferhat elmas)

Fix typos in comments (Oleksandr Redko)

Commits

4e4eaed Release v5.9.1
6273188 Fix batch result format corruption when using cached prepared statements
f7b90c2 Merge pull request #2524 from dbussink/pipeline-result-format-reuse
3ce6d75 Add failing test: batch scan corrupted in cache_statement mode
b4d8e62 Release v5.9.0
c227cd4 Bump minimum Go version from 1.24 to 1.25
f492c14 Use reflect.TypeFor instead of reflect.TypeOf for static types
ad8fb08 Use sync.WaitGroup.Go to simplify goroutine spawning
3033773 Remove go1.26 build tag from synctest test
83ffb3c Validate multirange element count against source length before allocating
Additional commits viewable in compare view

Updates github.com/joeig/go-powerdns/v3 from 3.20.0 to 3.21.0

Release notes

Sourced from github.com/joeig/go-powerdns/v3's releases.

v3.21.0

New

Support Go 1.26 (#145)

Deprecate

Stop testing with Go 1.24 in accordance with Go's version support policy (#145)

Commits

f98c79d Bump golangci-lint to v2.9.0
d8d0890 Support Go 1.26, drop Go 1.24
fe9a156 Update copyright year to 2026
See full diff in compare view

Updates github.com/olekukonko/tablewriter from 1.1.3 to 1.1.4

Commits

a0dea8a no need to disable twice
a4fb40a Merge pull request #314 from sducamp/fix/rendition-debug-leak
6bc4cb4 fix: prevent debug output leak from renderer during Options() reconfiguration
54408fe update ll to v0.1.6
5ea5f3c add mote tab test ans update go mod
1455dd8 Merge pull request #311 from olekukonko/tabber
d7b0a55 improve tab and make test more predictable
62117a2 add space default #312 for colorized renderer
4958831 ll v0.1.5 update enables logging by default hence disable
1c68e06 use space for padding as default #312
Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.17.0 to 1.23.2

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.2 - 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

[release-1.23] Upgrade to prometheus/common@v0.66.1 by @aknuds1 in prometheus/client_golang#1869

[release-1.23] Cut v1.23.2 by @aknuds1 in prometheus/client_golang#1870

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1 - 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

[release-1.23] Upgrade to prometheus/common v0.66 by @aknuds1 in prometheus/client_golang#1866

[release-1.23] Cut v1.23.1 by @aknuds1 in prometheus/client_golang#1867

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

v1.23.0 - 2025-07-30

[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812

[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766

[FEATURE] Add exemplars for native histograms #1686

[ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823

[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833

[BUGFIX] exp/api: client prompt return on context cancellation #1729

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

1.23.0 / 2025-07-30

[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812

[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766

[FEATURE] Add exemplars for native histograms #1686

[ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823

[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833

[BUGFIX] exp/api: client prompt return on context cancellation #1729

1.22.0 / 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:
import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
[FEATURE] prometheus: Add new CollectorFunc utility #1724

[CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738

[FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743

[CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

1.21.1 / 2025-03-04

[BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low contention cases.

[BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags.

1.21.0 / 2025-02-17

⚠️ This release contains potential breaking change if you upgrade github.com/prometheus/common to 0.62+ together with client_golang. ⚠️

... (truncated)

Commits

8179a56 Cut v1.23.2 (#1870)
4142b59 Merge pull request #1869 from prometheus/arve/upgrade-common
4ff40f0 Cut v1.23.1 (#1867)
989b029 Upgrade to prometheus/common v0.66 (#1866)
e4b2208 Cut v1.23.0 (#1848)
d9492af cut v1.23.0-rc.1 (#1842)
aeae8a0 Cut v1.23.0-rc.0 (#1837)
b157309 Update common Prometheus files (#1832)
a704e28 build(deps): bump the github-actions group with 3 updates (#1826)
c774311 Fix errNotImplemented reference (#1835)
Additional commits viewable in compare view

Updates github.com/redis/go-redis/v9 from 9.17.2 to 9.18.0

Release notes

Sourced from github.com/redis/go-redis/v9's releases.

9.18.0

Redis 8.6 Support

Added support for Redis 8.6, including new commands and features for streams idempotent production and HOTKEYS.

Smart Client Handoff (Maintenance Notifications) for Cluster

note: Pending RS version release

This release introduces comprehensive support for Redis Enterprise Cluster maintenance notifications via SMIGRATING/SMIGRATED push notifications. The client now automatically handles slot migrations by:

Relaxing timeouts during migration (SMIGRATING) to prevent false failures

Triggering lazy cluster state reloads upon completion (SMIGRATED)

Enabling seamless operations during Redis Enterprise maintenance windows

(#3643) by @ndyakov

OpenTelemetry Native Metrics Support

Added comprehensive OpenTelemetry metrics support following the OpenTelemetry Database Client Semantic Conventions. The implementation uses a Bridge Pattern to keep the core library dependency-free while providing optional metrics instrumentation through the new extra/redisotel-native package.

Metric groups include:

Command metrics: Operation duration with retry tracking

Connection basic: Connection count and creation time

Resiliency: Errors, handoffs, timeout relaxation

Connection advanced: Wait time and use time

Pubsub metrics: Published and received messages

Stream metrics: Processing duration and maintenance notifications

(#3637) by @ofekshenawa

✨ New Features

HOTKEYS Commands: Added support for Redis HOTKEYS feature for identifying hot keys based on CPU consumption and network utilization (#3695) by @ofekshenawa

Streams Idempotent Production: Added support for Redis 8.6+ Streams Idempotent Production with ProducerID, IdempotentID, IdempotentAuto in XAddArgs and new XCFGSET command (#3693) by @ofekshenawa

NaN Values for TimeSeries: Added support for NaN (Not a Number) values in Redis time series commands (#3687) by @ofekshenawa

DialerRetries Options: Added DialerRetries and DialerRetryTimeout to ClusterOptions, RingOptions, and FailoverOptions (#3686) by @naveenchander30

ConnMaxLifetimeJitter: Added jitter configuration to distribute connection expiration times and prevent thundering herd (#3666) by @cyningsun

Digest Helper Functions: Added DigestString and DigestBytes helper functions for client-side xxh3 hashing compatible with Redis DIGEST command (#3679) by @ofekshenawa

SMIGRATED New Format: Updated SMIGRATED parser to support new format and remember original host:port (#3697) by @ndyakov

Cluster State Reload Interval: Added cluster state reload interval option for maintenance notifications (#3663) by @ndyakov

🐛 Bug Fixes

PubSub nil pointer dereference: Fixed nil pointer dereference in PubSub after WithTimeout() - pubSubPool is now properly cloned (#3710) by @Copilot

MaintNotificationsConfig nil check: Guard against nil MaintNotificationsConfig in initConn (#3707) by @veeceey

wantConnQueue zombie elements: Fixed zombie wantConn elements accumulation in wantConnQueue (#3680) by @cyningsun

XADD/XTRIM approx flag: Fixed XADD and XTRIM to use = when approx is false (#3684) by @ndyakov

Sentinel timeout retry: When connection to a sentinel times out, attempt to connect to other sentinels (#3654) by @cxljs

... (truncated)

Changelog

Sourced from github.com/redis/go-redis/v9's changelog.

9.18.0 (2026-02-16)

🚀 Highlights

Redis 8.6 Support

Added support for Redis 8.6, including new commands and features for streams idempotent production and HOTKEYS.

Smart Client Handoff (Maintenance Notifications) for Cluster

This release introduces comprehensive support for Redis Cluster maintenance notifications via SMIGRATING/SMIGRATED push notifications. The client now automatically handles slot migrations by:

Relaxing timeouts during migration (SMIGRATING) to prevent false failures

Triggering lazy cluster state reloads upon completion (SMIGRATED)

Enabling seamless operations during Redis Enterprise maintenance windows

(#3643) by @ndyakov

OpenTelemetry Native Metrics Support

Added comprehensive OpenTelemetry metrics support following the OpenTelemetry Database Client Semantic Conventions. The implementation uses a Bridge Pattern to keep the core library dependency-free while providing optional metrics instrumentation through the new extra/redisotel-native package.

Metric groups include:

Command metrics: Operation duration with retry tracking

Connection basic: Connection count and creation time

Resiliency: Errors, handoffs, timeout relaxation

Connection advanced: Wait time and use time

Pubsub metrics: Published and received messages

Stream metrics: Processing duration and maintenance notifications

(#3637) by @ofekshenawa

✨ New Features

HOTKEYS Commands: Added support for Redis HOTKEYS feature for identifying hot keys based on CPU consumption and network utilization (#3695) by @ofekshenawa

Streams Idempotent Production: Added support for Redis 8.6+ Streams Idempotent Production with ProducerID, IdempotentID, IdempotentAuto in XAddArgs and new XCFGSET command (#3693) by @ofekshenawa

NaN Values for TimeSeries: Added support for NaN (Not a Number) values in Redis time series commands (#3687) by @ofekshenawa

DialerRetries Options: Added DialerRetries and DialerRetryTimeout to ClusterOptions, RingOptions, and FailoverOptions (#3686) by @naveenchander30

ConnMaxLifetimeJitter: Added jitter configuration to distribute connection expiration times and prevent thundering herd (#3666) by @cyningsun

Digest Helper Functions: Added DigestString and DigestBytes helper functions for client-side xxh3 hashing compatible with Redis DIGEST command (#3679) by @ofekshenawa

SMIGRATED New Format: Updated SMIGRATED parser to support new format and remember original host:port (#3697) by @ndyakov

Cluster State Reload Interval: Added cluster state reload interval option for maintenance notifications (#3663) by @ndyakov

🐛 Bug Fixes

PubSub nil pointer dereference: Fixed nil pointer dereference in PubSub after WithTimeout() - pubSubPool is now properly cloned (#3710) by @Copilot
...
Description has been truncated

…6 updates Bumps the go-dependencies group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) | `2.35.0` | `2.37.0` | | [github.com/gin-contrib/pprof](https://github.com/gin-contrib/pprof) | `1.5.3` | `1.5.4` | | [github.com/go-resty/resty/v2](https://github.com/go-resty/resty) | `2.17.1` | `2.17.2` | | [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault) | `1.22.0` | `1.23.0` | | [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.8.0` | `5.9.1` | | [github.com/joeig/go-powerdns/v3](https://github.com/joeig/go-powerdns) | `3.20.0` | `3.21.0` | | [github.com/olekukonko/tablewriter](https://github.com/olekukonko/tablewriter) | `1.1.3` | `1.1.4` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.17.0` | `1.23.2` | | [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.17.2` | `9.18.0` | | [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.35.0` | `0.41.0` | | [github.com/testcontainers/testcontainers-go/modules/postgres](https://github.com/testcontainers/testcontainers-go) | `0.35.0` | `0.41.0` | | [go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.59.0` | `0.68.0` | | [golang.org/x/time](https://github.com/golang/time) | `0.14.0` | `0.15.0` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.29.9` | `0.35.3` | | [k8s.io/cloud-provider](https://github.com/kubernetes/cloud-provider) | `0.29.9` | `0.35.3` | Updates `github.com/alicebob/miniredis/v2` from 2.35.0 to 2.37.0 - [Release notes](https://github.com/alicebob/miniredis/releases) - [Changelog](https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md) - [Commits](alicebob/miniredis@v2.35.0...v2.37.0) Updates `github.com/gin-contrib/pprof` from 1.5.3 to 1.5.4 - [Release notes](https://github.com/gin-contrib/pprof/releases) - [Commits](gin-contrib/pprof@v1.5.3...v1.5.4) Updates `github.com/gin-gonic/gin` from 1.11.0 to 1.12.0 - [Release notes](https://github.com/gin-gonic/gin/releases) - [Changelog](https://github.com/gin-gonic/gin/blob/master/CHANGELOG.md) - [Commits](gin-gonic/gin@v1.11.0...v1.12.0) Updates `github.com/go-resty/resty/v2` from 2.17.1 to 2.17.2 - [Release notes](https://github.com/go-resty/resty/releases) - [Commits](go-resty/resty@v2.17.1...v2.17.2) Updates `github.com/hashicorp/vault/api` from 1.22.0 to 1.23.0 - [Release notes](https://github.com/hashicorp/vault/releases) - [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG-v1.10-v1.15.md) - [Commits](hashicorp/vault@api/v1.22.0...api/v1.23.0) Updates `github.com/jackc/pgx/v5` from 5.8.0 to 5.9.1 - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.8.0...v5.9.1) Updates `github.com/joeig/go-powerdns/v3` from 3.20.0 to 3.21.0 - [Release notes](https://github.com/joeig/go-powerdns/releases) - [Commits](joeig/go-powerdns@v3.20.0...v3.21.0) Updates `github.com/olekukonko/tablewriter` from 1.1.3 to 1.1.4 - [Release notes](https://github.com/olekukonko/tablewriter/releases) - [Commits](olekukonko/tablewriter@v1.1.3...v1.1.4) Updates `github.com/prometheus/client_golang` from 1.17.0 to 1.23.2 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.17.0...v1.23.2) Updates `github.com/redis/go-redis/v9` from 9.17.2 to 9.18.0 - [Release notes](https://github.com/redis/go-redis/releases) - [Changelog](https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md) - [Commits](redis/go-redis@v9.17.2...v9.18.0) Updates `github.com/testcontainers/testcontainers-go` from 0.35.0 to 0.41.0 - [Release notes](https://github.com/testcontainers/testcontainers-go/releases) - [Commits](testcontainers/testcontainers-go@v0.35.0...v0.41.0) Updates `github.com/testcontainers/testcontainers-go/modules/postgres` from 0.35.0 to 0.41.0 - [Release notes](https://github.com/testcontainers/testcontainers-go/releases) - [Commits](testcontainers/testcontainers-go@v0.35.0...v0.41.0) Updates `go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin` from 0.59.0 to 0.68.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.59.0...zpages/v0.68.0) Updates `go.opentelemetry.io/otel` from 1.42.0 to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.42.0...v1.43.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.34.0 to 1.41.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.34.0...v1.41.0) Updates `go.opentelemetry.io/otel/exporters/stdout/stdouttrace` from 1.34.0 to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.34.0...v1.43.0) Updates `go.opentelemetry.io/otel/sdk` from 1.42.0 to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.42.0...v1.43.0) Updates `go.opentelemetry.io/otel/trace` from 1.42.0 to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.42.0...v1.43.0) Updates `golang.org/x/crypto` from 0.47.0 to 0.49.0 - [Commits](golang/crypto@v0.47.0...v0.49.0) Updates `golang.org/x/time` from 0.14.0 to 0.15.0 - [Commits](golang/time@v0.14.0...v0.15.0) Updates `google.golang.org/grpc` from 1.69.4 to 1.79.1 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.69.4...v1.79.1) Updates `k8s.io/api` from 0.29.9 to 0.35.3 - [Commits](kubernetes/api@v0.29.9...v0.35.3) Updates `k8s.io/apimachinery` from 0.29.9 to 0.35.3 - [Commits](kubernetes/apimachinery@v0.29.9...v0.35.3) Updates `k8s.io/cloud-provider` from 0.29.9 to 0.35.3 - [Commits](kubernetes/cloud-provider@v0.29.9...v0.35.3) Updates `k8s.io/component-base` from 0.29.9 to 0.35.3 - [Commits](kubernetes/component-base@v0.29.9...v0.35.3) Updates `k8s.io/klog/v2` from 2.110.1 to 2.130.1 - [Release notes](https://github.com/kubernetes/klog/releases) - [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md) - [Commits](kubernetes/klog@v2.110.1...v2.130.1) --- updated-dependencies: - dependency-name: github.com/alicebob/miniredis/v2 dependency-version: 2.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/gin-contrib/pprof dependency-version: 1.5.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/gin-gonic/gin dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/go-resty/resty/v2 dependency-version: 2.17.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/hashicorp/vault/api dependency-version: 1.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/joeig/go-powerdns/v3 dependency-version: 3.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/olekukonko/tablewriter dependency-version: 1.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/prometheus/client_golang dependency-version: 1.23.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/redis/go-redis/v9 dependency-version: 9.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/testcontainers/testcontainers-go dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/testcontainers/testcontainers-go/modules/postgres dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin dependency-version: 0.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel dependency-version: 1.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp dependency-version: 1.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/exporters/stdout/stdouttrace dependency-version: 1.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/crypto dependency-version: 0.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/time dependency-version: 0.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: google.golang.org/grpc dependency-version: 1.79.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/api dependency-version: 0.35.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/apimachinery dependency-version: 0.35.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/cloud-provider dependency-version: 0.35.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/component-base dependency-version: 0.35.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/klog/v2 dependency-version: 2.130.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-04-19T09:13:24Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 8, 2026

dependabot bot force-pushed the dependabot/go_modules/go-dependencies-d89d5ac696 branch from 4f940d0 to 2d4c0a3 Compare April 12, 2026 09:14

dependabot bot closed this Apr 19, 2026

dependabot bot deleted the dependabot/go_modules/go-dependencies-d89d5ac696 branch April 19, 2026 09:13

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the go-dependencies group across 1 directory with 26 updates#112

chore(deps): bump the go-dependencies group across 1 directory with 26 updates#112
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go-dependencies-d89d5ac696

dependabot bot commented on behalf of github Apr 8, 2026 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Apr 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Apr 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

HEXPIRE

support CLUSTER SHARDS

redis 8.4.0, DUMP/RESTORE, EVALRO, WAIT

v2.37.0

v2.36.1

v2.36.0

v1.5.4

Changelog

Enhancements

Build process updates

Others

v1.12.0

Changelog

Features

Bug fixes

Enhancements

Refactor

Build process updates

Gin v1.12.0

Features

Enhancements

Bug Fixes

Build process updates / CI

v2.17.2

Release Notes

Backport

Release

5.9.1 (March 22, 2026)

5.9.0 (March 21, 2026)

v3.21.0

New

Deprecate

v1.23.2 - 2025-09-05

v1.23.1 - 2025-09-04

v1.23.0 - 2025-07-30

1.23.2 / 2025-09-05

1.23.1 / 2025-09-04

1.23.0 / 2025-07-30

1.22.0 / 2025-04-07

1.21.1 / 2025-03-04

1.21.0 / 2025-02-17

9.18.0

Redis 8.6 Support

Smart Client Handoff (Maintenance Notifications) for Cluster

OpenTelemetry Native Metrics Support

✨ New Features

🐛 Bug Fixes

9.18.0 (2026-02-16)

🚀 Highlights

Redis 8.6 Support

Smart Client Handoff (Maintenance Notifications) for Cluster

OpenTelemetry Native Metrics Support

✨ New Features

🐛 Bug Fixes

Uh oh!

dependabot bot commented on behalf of github Apr 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Apr 8, 2026 •

edited

Loading