Skip to content

chore(deps): Bump the backend group across 1 directory with 9 updates - #1012

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/backend-d4b99cfdd8
Open

chore(deps): Bump the backend group across 1 directory with 9 updates#1012
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/backend-d4b99cfdd8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the backend group with 8 updates in the / directory:

Package From To
github.com/moby/sys/userns 0.1.0 0.2.0
github.com/onsi/ginkgo/v2 2.32.0 2.32.1
github.com/onsi/gomega 1.42.1 1.43.0
github.com/opencontainers/cgroups 0.0.4 0.1.0
github.com/sirupsen/logrus 1.9.4 1.10.2
github.com/urfave/cli/v3 3.10.1 3.11.0
google.golang.org/grpc 1.83.0 1.83.2
k8s.io/cri-api 0.36.3 0.37.0

Updates github.com/moby/sys/userns from 0.1.0 to 0.2.0

Release notes

Sourced from github.com/moby/sys/userns's releases.

mountinfo v0.2.0

Bug fixes:

  • Fix path unescaping for paths with double quotes (#16)

Improvements:

  • Mounted: speed up by adding fast paths using openat2 (Linux-only, #29) and stat (#20)
  • Mounted: relax path requirements (allow relative, non-cleaned paths, symlinks) (fixes #27)
  • Unescape fstype and source fields (#16)
  • Documentation improvements (#15)

Testing/CI:

  • Unit tests: exclude darwin (#13)
  • CI: run tests under Fedora 32 to test openat2 (#29)
  • TestGetMounts: fix for Ubuntu build system (#18)
  • Makefile: fix ignoring test failures (#19)
  • CI: add cross build (#23)

Thanks to:

  • Aleksa Sarai
  • Shengjing Zhu

mount v0.2.0

Breaking changes:

  • Remove stub-implementations for Windows for Mount(), Unmount(), RecursiveUnmount(), MergeTmpfsOptions() (#311)

Fixes and improvements:

  • go.mod: update github.com/moby/sys/mountinfo to v0.4.0 (#443, #564)
  • use MNT_* flags from golang.org/x/sys/unix on freebsd (#365)
  • add support for OpenBSD in addition to FreeBSD (#326)
  • fix package overview documentation not showing (#437)
  • RecursiveUnmount(): minor improvements (#468)

Thanks to:

  • Tobias Klauser

symlink/v0.2.0

What's Changed

... (truncated)

Commits
  • 86870e7 Merge pull request #140 from thaJeztah/integrate_libcontainer_userns
  • 5cd502c user: require go1.21 or higher
  • a40602b user/userns: add godoc for package
  • bc3a8a5 libct/userns: implement RunningInUserNS with sync.OnceValue
  • bc0de32 libct/userns: make fuzzer Linux-only, and remove stub for uidMapInUserNS
  • 333fe31 libct/userns: change RunningInUserNS to a wrapper instead of an alias
  • bb72464 remove pre-go1.17 build-tags
  • 87e38c8 libcontainer/userns: simplify, and separate from "user" package.
  • b19e084 *: add go-1.17+ go:build tags
  • db243e2 *: rm redundant linux build tag
  • Additional commits viewable in compare view

Updates github.com/onsi/ginkgo/v2 from 2.32.0 to 2.32.1

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.32.1

2.32.1

Fixes

  • Defer AfterAll until repeated spec completes [e647b3b]
Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.32.1

Fixes

  • Defer AfterAll until repeated spec completes [e647b3b]
Commits

Updates github.com/onsi/gomega from 1.42.1 to 1.43.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.43.0

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

Commits

Updates github.com/opencontainers/cgroups from 0.0.4 to 0.1.0

Release notes

Sourced from github.com/opencontainers/cgroups's releases.

v0.1.0

What's Changed

Full Changelog: opencontainers/cgroups@v0.0.9...v0.1.0

v0.0.9

What's Changed

Full Changelog: opencontainers/cgroups@v0.0.8...v0.0.9

v0.0.8

What's Changed

New Contributors

Full Changelog: opencontainers/cgroups@v0.0.7...v0.0.8

v0.0.7

What's Changed

New Contributors

Full Changelog: opencontainers/cgroups@v0.0.6...v0.0.7

v0.0.6

What's Changed

... (truncated)

Changelog

Sourced from github.com/opencontainers/cgroups's changelog.

Releases

The release process hopes to encourage early, consistent consensus-building during project development. The mechanisms used are regular community communication on the mailing list about progress, scheduled meetings for issue resolution and release triage, and regularly paced and communicated releases. Releases are proposed and adopted or rejected using the usual project governance rules and procedures.

An anti-pattern that we want to avoid is heavy development or discussions "late cycle" around major releases. We want to build a community that is involved and communicates consistently through all releases instead of relying on "silent periods" as a judge of stability.

Parallel releases

A single project MAY consider several motions to release in parallel. However each motion to release after the initial 0.1.0 MUST be based on a previous release that has already landed.

For example, runtime-spec maintainers may propose a v1.0.0-rc2 on the 1st of the month and a v0.9.1 bugfix on the 2nd of the month. They may not propose a v1.0.0-rc3 until the v1.0.0-rc2 is accepted (on the 7th if the vote initiated on the 1st passes).

Specifications

The OCI maintains three categories of projects: specifications, applications, and conformance-testing tools. However, specification releases have special restrictions in the [OCI charter][charter]:

  • They are the target of backwards compatibility (§7.g), and
  • They are subject to the OFWa patent grant (§8.d and e).

To avoid unfortunate side effects (onerous backwards compatibility requirements or Member resignations), the following additional procedures apply to specification releases:

Planning a release

Every OCI specification project SHOULD hold meetings that involve maintainers reviewing pull requests, debating outstanding issues, and planning releases. This meeting MUST be advertised on the project README and MAY happen on a phone call, video conference, or on IRC. Maintainers MUST send updates to the dev@opencontainers.org with results of these meetings.

Before the specification reaches v1.0.0, the meetings SHOULD be weekly. Once a specification has reached v1.0.0, the maintainers may alter the cadence, but a meeting MUST be held within four weeks of the previous meeting.

The release plans, corresponding milestones and estimated due dates MUST be published on GitHub (e.g. https://github.com/opencontainers/runtime-spec/milestones). GitHub milestones and issues are only used for community organization and all releases MUST follow the project governance rules and procedures.

Timelines

Specifications have a variety of different timelines in their lifecycle.

  • Pre-v1.0.0 specifications SHOULD release on a monthly cadence to garner feedback.
  • Major specification releases MUST release at least three release candidates spaced a minimum of one week apart. This means a major release like a v1.0.0 or v2.0.0 release will take 1 month at minimum: one week for rc1, one week for rc2, one week for rc3, and one week for the major release itself. Maintainers SHOULD strive to make zero breaking changes during this cycle of release candidates and SHOULD restart the three-candidate count when a breaking change is introduced. For example if a breaking change is introduced in v1.0.0-rc2 then the series would end with v1.0.0-rc4 and v1.0.0.
  • Minor and patch releases SHOULD be made on an as-needed basis.

... (truncated)

Commits
  • 30a2293 Merge pull request #64 from kolyshkin/drop-cilium-ebpf
  • 713912d devices: drop cilium/ebpf{,link} deps
  • 974f3a5 Merge pull request #71 from kolyshkin/unsafe-tests
  • 8ef8f40 ci: skip running TestParallelConnections locally
  • d67c8a6 Merge pull request #72 from kolyshkin/fixups
  • 8bbeb6b Merge pull request #70 from kolyshkin/ci-bumps-II
  • 5ee0baa ci: replace modernize job with golangci linters
  • ed19a09 ci: bump Go versions
  • e3152db ci: bump golangci-lint, codespell, and runners
  • 30ca211 devices: setV2: add missing O_CLOEXEC
  • Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.9.4 to 1.10.2

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.2

Logrus v1.10.2

This is a small maintenance release that updates github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency from Logrus' dependency graph. There are no functional changes in this release.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.1

Full Changelog: sirupsen/logrus@v1.10.1...v1.10.2

v1.10.1

Logrus v1.10.1

This patch release fixes two issues in field formatting and handling:

  • Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.
  • Allow function-backed values implementing error to be used with WithError, WithField, and WithFields.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.0

Full Changelog: sirupsen/logrus@v1.10.0...v1.10.1

v1.10.0

Logrus v1.10.0

This release focuses on substantial performance improvements, concurrency correctness, and better interoperability with modern Go logging APIs.

🚀 Performance

Major improvements across TextFormatter, entry handling, and common logger paths:

  • ~17% lower geomean runtime across the benchmark suite
  • ~27% higher geomean formatter throughput
  • Common enabled logging paths are ~30–44% faster
  • WithError is ~40% faster
  • Chained fields are ~46% faster
  • TextFormatter paths are up to ~40% faster
  • Allocation counts are reduced by ~25–74% across measured TextFormatter cases, with the largest reductions in colored output

The improvements also show up in complete logger paths:

  • Logger + TextFormatter is ~31% faster, with ~24% fewer allocations
  • Logger + JSONFormatter is ~21% faster, with ~10% fewer allocations

... (truncated)

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.2

Changed:

  • Update github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency.

1.10.1

Fixes:

  • Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.
  • Allow function-backed implementations of error as field values.

1.10.0

Fixes:

  • Fix reentrant logging deadlocks in formatter paths.
  • Fix race conditions in formatter and entry handling.
  • Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel. Use the corresponding Panic methods when panic behavior is desired.
  • Improve concurrency safety around formatter and hook access.

Features:

  • Add slog hook for forwarding Logrus entries to log/slog.
  • Add slog.Handler for forwarding log/slog records to a Logrus logger, including levels, fields, groups, context, time, and optional caller reporting. The hook and handler can also be combined to help migrate between Logrus and log/slog.
  • Add minimal, composable logging interfaces for each log level. This enables consumers to depend on narrower interfaces, making it easier to substitute or adapt logging implementations.
  • Allow Entry.Caller to be set explicitly and preserve it across derived entries, enabling custom caller detection without Logrus overwriting caller information when ReportCaller is enabled.

Changed:

  • Raise minimum supported Go version to 1.23.
  • TextFormatter now renders []byte values as raw/quoted strings instead of slice-of-ints.
  • TextFormatter now uses distinct dimmed colors for debug and trace output.
  • TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching the behavior on other platforms.
  • Entry.HasCaller is now deprecated in favor of checking Entry.Caller directly.
  • Deprecated MutexWrap, which was unintentionally exposed as public API. It remains available as an alias for compatibility but should not be used

... (truncated)

Commits
  • 6d6a132 Merge pull request #1586 from thaJeztah/prepare_v1.10.2
  • 4f94653 update changelog for v1.10.2
  • 87434bb Merge pull request #1585 from thaJeztah/bump_testify
  • e7d2120 chore(deps): bump github.com/stretchr/testify v1.12.1
  • 8b673a9 Merge pull request #1583 from thaJeztah/release_1.10.1
  • 0b920ad Merge pull request #1584 from thaJeztah/more_coverage
  • 5e20694 TextFormatter: cover nil pointer method receivers
  • 8312732 update changelog for v1.10.1
  • e987a40 Merge pull request #1582 from thaJeztah/panic_handler
  • 17d574b TextFormatter: recover panics from Error and String methods
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • 959dbda Merge pull request #1935 from harryzcy/yaml-update
  • 9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • Additional commits viewable in compare view

Updates github.com/urfave/cli/v3 from 3.10.1 to 3.11.0

Release notes

Sourced from github.com/urfave/cli/v3's releases.

v3.11.0

What's Changed

New Contributors

Full Changelog: urfave/cli@v3.10.1...v3.11.0

Commits
  • 138d3b3 Merge pull request #2410 from dearchap/issue_2404
  • 1bee208 test: fix ineffective mutex error-string assertion and add mirror cases
  • 5ec7335 Merge pull request #2408 from urfave/issue_2405
  • cccd133 Merge branch 'main' into issue_2405
  • 493a0d3 test: add shell-completion case for hidden BoolWithInverseFlag
  • 141d89c Merge pull request #2407 from dearchap/issue_2406
  • 9eee563 test: cover Run with no args, empty name, and shell completion
  • 79f8fc7 Merge pull request #2395 from utkarshalpha/fix/hide-help-command-inheritance
  • 8f56e7f Merge branch 'main' into fix/hide-help-command-inheritance
  • 339a375 Merge pull request #2386 from BrandonIrizarry/bci
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.83.0 to 1.83.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)

Release 1.83.1

Security

  • xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
  • xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
  • xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
  • xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
  • xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Performance

  • transport: Restrict memory overhead of buffering small data frames. (#9331)
Commits

Updates k8s.io/cri-api from 0.36.3 to 0.37.0

Commits
  • d279f3c Add mount_options to CRI RuntimeFeatures
  • d106c2f Add mount_options to CRI Mount message
  • 7d8b14e Merge pull request #140366 from checkpoint-restore/pod-checkpoint-restore-cri...
  • 47789ac cri-api: Add pod checkpoint and restore RPCs
  • c9d9263 cri-api: Define pod checkpoint and restore messages
  • e238fc4 Merge pull request #140740 from dims/update-grpc-1.82.1
  • 8a6db44 Update google.golang.org/grpc to v1.82.1
  • 52bdbf8 Merge pull request #140385 from dims/update-cadvisor-v0.60.4
  • d66c0e6 bump github.com/google/cadvisor/lib from v0.60.3 to v0.60.4
  • bf5718a Merge pull request #140337 from liggitt/ttrpc
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): Bump the backend group across 1 directory with 9 updates
e4d333b 
Bumps the backend group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/moby/sys/userns](https://github.com/moby/sys) | `0.1.0` | `0.2.0` |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.32.0` | `2.32.1` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.42.1` | `1.43.0` |
| [github.com/opencontainers/cgroups](https://github.com/opencontainers/cgroups) | `0.0.4` | `0.1.0` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.4` | `1.10.2` |
| [github.com/urfave/cli/v3](https://github.com/urfave/cli) | `3.10.1` | `3.11.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.0` | `1.83.2` |
| [k8s.io/cri-api](https://github.com/kubernetes/cri-api) | `0.36.3` | `0.37.0` |



Updates `github.com/moby/sys/userns` from 0.1.0 to 0.2.0
- [Release notes](https://github.com/moby/sys/releases)
- [Commits](moby/sys@user/v0.1.0...user/v0.2.0)

Updates `github.com/onsi/ginkgo/v2` from 2.32.0 to 2.32.1
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.32.0...v2.32.1)

Updates `github.com/onsi/gomega` from 1.42.1 to 1.43.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.42.1...v1.43.0)

Updates `github.com/opencontainers/cgroups` from 0.0.4 to 0.1.0
- [Release notes](https://github.com/opencontainers/cgroups/releases)
- [Changelog](https://github.com/opencontainers/cgroups/blob/main/RELEASES.md)
- [Commits](opencontainers/cgroups@v0.0.4...v0.1.0)

Updates `github.com/sirupsen/logrus` from 1.9.4 to 1.10.2
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.4...v1.10.2)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

Updates `github.com/urfave/cli/v3` from 3.10.1 to 3.11.0
- [Release notes](https://github.com/urfave/cli/releases)
- [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md)
- [Commits](urfave/cli@v3.10.1...v3.11.0)

Updates `google.golang.org/grpc` from 1.83.0 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.0...v1.83.2)

Updates `k8s.io/cri-api` from 0.36.3 to 0.37.0
- [Commits](kubernetes/cri-api@v0.36.3...v0.37.0)

---
updated-dependencies:
- dependency-name: github.com/moby/sys/userns
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.32.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: github.com/opencontainers/cgroups
  dependency-version: 0.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: github.com/urfave/cli/v3
  dependency-version: 3.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: k8s.io/cri-api
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 2, 2026
@netlify

netlify Bot commented Sep 2, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for urunc canceled.

Name Link
🔨 Latest commit e4d333b
🔍 Latest deploy log https://app.netlify.com/projects/urunc/deploys/6a97e0e8282258000867d091

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code ok-to-test

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@cmainas