[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change	Pending
github.com/Azure/go-ansiterm	indirect	digest	65faa4b → 51075c6
github.com/Microsoft/go-winio	indirect	patch	v0.6.3 → v0.6.4
github.com/cyberphone/json-canonicalization	indirect	digest	19d51d7 → 32a4819
github.com/digitorus/pkcs7	indirect	digest	ffadbf3 → d678ea5
github.com/digitorus/timestamp	indirect	digest	c455327 → b4b58b9
github.com/docker/cli	indirect	patch	v29.9.0+incompatible → v29.9.1+incompatible	v29.9.2+incompatible
github.com/grpc-ecosystem/grpc-gateway/v2	indirect	minor	v2.31.0 → v2.32.0
github.com/prometheus/common	indirect	patch	v0.72.0 → v0.72.1
github.com/protocolbuffers/txtpbfmt	indirect	digest	6e6d8eb → 7c8a61a
golang.org/x/crypto	require	minor	v0.57.0 → v0.58.0
golang.org/x/mod	indirect	minor	v0.41.0 → v0.42.0
golang.org/x/net	require	minor	v0.60.0 → v0.61.0
golang.org/x/term	indirect	minor	v0.46.0 → v0.47.0
golang.org/x/text	indirect	minor	v0.42.0 → v0.43.0
golang.org/x/tools	indirect	minor	v0.51.0 → v0.52.0
google.golang.org/api	indirect	minor	v0.301.0 → v0.304.0	v0.306.0 (+1)
k8s.io/kube-openapi	replace	digest	d427ff9 → ca3452a
k8s.io/kube-openapi	require	digest	d427ff9 → ca3452a

---

Release Notes

Microsoft/go-winio (github.com/Microsoft/go-winio)

v0.6.4

Compare Source

What's Changed

• Bump golang.org/x/sys from 0.48.0 to 0.49.0 by @​dependabot[bot] in microsoft#393
• Fix regression in mkwinsyscall for non SystemDLLs by @​jterry75 in microsoft#394

Full Changelog: microsoft/go-winio@v0.6.3...v0.6.4

docker/cli (github.com/docker/cli)

v29.9.1+incompatible

Compare Source

grpc-ecosystem/grpc-gateway (github.com/grpc-ecosystem/grpc-gateway/v2)

v2.32.0

Compare Source

What's Changed

• fix(openapiv2): render Any additional properties as true by @​Boulea7 in #​7215
• refuse client headers spoofing gateway x-forwarded-* metadata by @​itecz26 in #​7418
• avoid copying path components per handler in ServeMux.ServeHTTP by @​itecz26 in #​7426
• fix field mask path for nested Any in FieldMaskFromRequestBody by @​itecz26 in #​7438
• fix: handle CRLF line endings in proto comments by @​somaz94 in #​7419
• ci: detect deleted generated files by @​Boulea7 in #​7420
• stop double-unescaping path params in ServeMux.ServeHTTP by @​itecz26 in #​7449
• fix(httprule): reject invalid characters in HTTP path verb by @​Sducabbagedog in #​7454
• fix: preserve empty dynamic objects in field masks by @​tianrking in #​7450
• fix NewDoubleArray dropping path params that share a prefix by @​itecz26 in #​7452
• fix(openapiv2): pick merge leader from openapi_configuration too by @​LuisFigueroaG in #​7471
• fix(runtime): accept unpadded base64 for bytes parameters by @​LuisFigueroaG in #​7472
• treat %2f as a path separator in encodedPathSplitter by @​itecz26 in #​7486
• feat(openapiv3): support security schemes and requirements by @​LuisFigueroaG in #​7481
• feat(openapiv3): add openapiv3_tag service annotation by @​LuisFigueroaG in #​7495
• reject duplicate fields in DefaultQueryParser.Parse by @​itecz26 in #​7500
• fix(openapiv3): don't repeat nested path parameters as query parameters by @​LuisFigueroaG in #​7501
• Gate strict ** matching from #​7412 behind strict_deep_wildcard generator flag by @​johanbrandhorst in #​7527

New Contributors

• @​Boulea7 made their first contribution in #​7215
• @​somaz94 made their first contribution in #​7419
• @​Sducabbagedog made their first contribution in #​7454
• @​tianrking made their first contribution in #​7450
• @​LuisFigueroaG made their first contribution in #​7471
• @​TonyWu2333 made their first contribution in #​7484
• @​pujitha24 made their first contribution in #​7493

Full Changelog: grpc-ecosystem/grpc-gateway@v2.31.0...v2.32.0

prometheus/common (github.com/prometheus/common)

v0.72.1

Compare Source

Bugfixes

• fix(config): deep copy the header in cloneRequest #​982

Internal

• Fix MAINTAINERS.md link text typo in RELEASE.md #​1009
• Synchronize common files from prometheus/prometheus #​1010
• build(deps): bump the codeql group with 4 updates #​1007

Full Changelog: prometheus/common@v0.72.0...v0.72.1

googleapis/google-api-go-client (google.golang.org/api)

v0.304.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3770) (a3ea7ac)
• all: Auto-regenerate discovery clients (#​3773) (795f958)
• Enable non-blocking mode for generation pipeline (#​3772) (bd231b0)

v0.303.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3768) (38ac60a)

v0.302.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3762) (9fc8aaa)
• all: Auto-regenerate discovery clients (#​3764) (47c34e8)
• all: Auto-regenerate discovery clients (#​3765) (3e43226)
• all: Auto-regenerate discovery clients (#​3766) (b11bdec)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[red-hat-konflux]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 9 additional dependencies were updated
• The go directive was updated for compatibility reasons

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=3 days

Details:

Package	Change
go	1.26.5 -> 1.27.0
github.com/googleapis/enterprise-certificate-proxy	v0.3.22 -> v0.3.23
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	v0.71.0 -> v0.72.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.71.0 -> v0.72.0
go.opentelemetry.io/otel	v1.46.0 -> v1.47.0
go.opentelemetry.io/otel/exporters/stdout/stdouttrace	v1.46.0 -> v1.47.0
go.opentelemetry.io/otel/metric	v1.46.0 -> v1.47.0
go.opentelemetry.io/otel/sdk	v1.46.0 -> v1.47.0
go.opentelemetry.io/otel/trace	v1.46.0 -> v1.47.0
google.golang.org/genproto/googleapis/api	v0.0.0-20261005182115-fad411399dd8 -> v0.0.0-20261012220534-4341edf3f941