build(deps): bump the all-updates group with 9 updates #7285

dependabot · 2025-10-01T23:03:58Z

Bumps the all-updates group with 9 updates:

Package	From	To
github.com/mholt/acmez/v3	`3.1.3`	`3.1.4`
github.com/prometheus/client_golang	`1.23.0`	`1.23.2`
github.com/spf13/pflag	`1.0.9`	`1.0.10`
golang.org/x/crypto	`0.41.0`	`0.42.0`
golang.org/x/net	`0.43.0`	`0.44.0`
golang.org/x/sync	`0.16.0`	`0.17.0`
golang.org/x/term	`0.34.0`	`0.35.0`
golang.org/x/time	`0.12.0`	`0.13.0`
golang.org/x/sys	`0.35.0`	`0.36.0`

Updates github.com/mholt/acmez/v3 from 3.1.3 to 3.1.4

Release notes

Sourced from github.com/mholt/acmez/v3's releases.

v3.1.4

A few fixes that could technically be breaking, but are actually bugs, for example, a function that was spelled "Acccount" instead of "Account", and the way the DNS01Account helper function worked has been corrected to match the intent/documentation.

We also now truncate NotBefore and NotAfter to second precision.

What's Changed

Fixed typo by @huzpsb in mholt/acmez#44

fix(challenge): use consistent structure by @Integralist in mholt/acmez#45

New Contributors

@huzpsb made their first contribution in mholt/acmez#44

@Integralist made their first contribution in mholt/acmez#45

Full Changelog: mholt/acmez@v3.1.3...v3.1.4

Commits

f6b8d4a Truncate NotBefore/NotAfter to second precision
8706f54 fix(challenge): use consistent structure (#45)
adae529 Fixed typo of function name (#44)
See full diff in compare view

Updates github.com/prometheus/client_golang from 1.23.0 to 1.23.2

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.2 - 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

[release-1.23] Upgrade to prometheus/[email protected] by @aknuds1 in prometheus/client_golang#1869

[release-1.23] Cut v1.23.2 by @aknuds1 in prometheus/client_golang#1870

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1 - 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

[release-1.23] Upgrade to prometheus/common v0.66 by @aknuds1 in prometheus/client_golang#1866

[release-1.23] Cut v1.23.1 by @aknuds1 in prometheus/client_golang#1867

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

Commits

8179a56 Cut v1.23.2 (#1870)
4142b59 Merge pull request #1869 from prometheus/arve/upgrade-common
4ff40f0 Cut v1.23.1 (#1867)
989b029 Upgrade to prometheus/common v0.66 (#1866)
See full diff in compare view

Updates github.com/spf13/pflag from 1.0.9 to 1.0.10

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.10

What's Changed

fix deprecation comment for (FlagSet.)ParseErrorsWhitelist by @thaJeztah in spf13/pflag#447

remove uses of errors.Is, which requires go1.13, move go1.16/go1.21 tests to separate file by @thaJeztah in spf13/pflag#448

New Contributors

@thaJeztah made their first contribution in spf13/pflag#447

Full Changelog: spf13/pflag@v1.0.9...v1.0.10

Commits

0491e57 Merge pull request #448 from thaJeztah/fix_go_version
72abab1 Merge pull request #447 from thaJeztah/fix_deprecation_comment
7e4dfb1 Test on Go 1.12
18a9d17 move Func, BoolFunc, tests as they require go1.21
c5b9e98 remove uses of errors.Is, which requires go1.13
45a4873 fix deprecation comment for (FlagSet.)ParseErrorsWhitelist
See full diff in compare view

Updates golang.org/x/crypto from 0.41.0 to 0.42.0

Commits

5307a0c go.mod: update golang.org/x dependencies
9d77937 acme: include order problem in OrderError
8f580de ssh: remove Go 1.24 build tag for ML-KEM kex
a4d1237 ssh/knownhosts: improve IPv6 support in Normalize
b8d8dae curve25519: include potential fips140=only error in panic message
f5a2eab ssh: use curve25519.X25519 instead of curve25519.ScalarMult
44ecf3a all: upgrade go directive to at least 1.24.0 [generated]
See full diff in compare view

Updates golang.org/x/net from 0.43.0 to 0.44.0

Commits

3b23d57 http2: fix race condition when disabling goroutine debugging for one test
8741050 http2: simplify TestServer_Push_RejectAfterGoAway
96e405c http2: modernize TestTransportRoundtripCloseOnWriteError
6dc6880 http2: simplify ClientConn Close and Shutdown tests
4e2915b http2: modernize TestTransportAllocationsAfterResponseBodyClose
30b0e78 http2: modernize TestRoundTripDoesntConsumeRequestBodyEarly
b9acd77 http2: speed up TestTransportFlowControl
5153f4d go.mod: update golang.org/x dependencies
9338bdd http2: speed up TestTransportHandlerBodyClose
6b20036 http2: add synchronous handler support to serverTester
Additional commits viewable in compare view

Updates golang.org/x/sync from 0.16.0 to 0.17.0

Commits

04914c2 all: upgrade go directive to at least 1.24.0 [generated]
See full diff in compare view

Updates golang.org/x/term from 0.34.0 to 0.35.0

Commits

1a11b45 go.mod: update golang.org/x dependencies
d862cd5 all: upgrade go directive to at least 1.24.0 [generated]
See full diff in compare view

Updates golang.org/x/time from 0.12.0 to 0.13.0

Commits

c0b0320 all: upgrade go directive to at least 1.24.0 [generated]
See full diff in compare view

Updates golang.org/x/sys from 0.35.0 to 0.36.0

Commits

b06ce05 windows: add FILE_ZERO_DATA_INFORMATION
689cc11 unix: fix Listen on solaris
a4712b9 plan9: drop go version tags for unsupported versions
0293703 unix: add IFAL_* consts and ifaddrlblmsg on linux
ab85cbb unix/linux: extend rtnetlink constants
9bd3753 unix: switch (*CPUSet).Zero to clear builtin
899c232 windows/mkwinsyscall: use syscall.SyscallN instead of syscall.Syscall{6,9,12,15}
543f21a all: upgrade go directive to at least 1.24.0 [generated]
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-updates group with 9 updates: | Package | From | To | | --- | --- | --- | | [github.com/mholt/acmez/v3](https://github.com/mholt/acmez) | `3.1.3` | `3.1.4` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.23.0` | `1.23.2` | | [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.9` | `1.0.10` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.41.0` | `0.42.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.43.0` | `0.44.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.16.0` | `0.17.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.34.0` | `0.35.0` | | [golang.org/x/time](https://github.com/golang/time) | `0.12.0` | `0.13.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.35.0` | `0.36.0` | Updates `github.com/mholt/acmez/v3` from 3.1.3 to 3.1.4 - [Release notes](https://github.com/mholt/acmez/releases) - [Commits](mholt/acmez@v3.1.3...v3.1.4) Updates `github.com/prometheus/client_golang` from 1.23.0 to 1.23.2 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.23.0...v1.23.2) Updates `github.com/spf13/pflag` from 1.0.9 to 1.0.10 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.9...v1.0.10) Updates `golang.org/x/crypto` from 0.41.0 to 0.42.0 - [Commits](golang/crypto@v0.41.0...v0.42.0) Updates `golang.org/x/net` from 0.43.0 to 0.44.0 - [Commits](golang/net@v0.43.0...v0.44.0) Updates `golang.org/x/sync` from 0.16.0 to 0.17.0 - [Commits](golang/sync@v0.16.0...v0.17.0) Updates `golang.org/x/term` from 0.34.0 to 0.35.0 - [Commits](golang/term@v0.34.0...v0.35.0) Updates `golang.org/x/time` from 0.12.0 to 0.13.0 - [Commits](golang/time@v0.12.0...v0.13.0) Updates `golang.org/x/sys` from 0.35.0 to 0.36.0 - [Commits](golang/sys@v0.35.0...v0.36.0) --- updated-dependencies: - dependency-name: github.com/mholt/acmez/v3 dependency-version: 3.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: github.com/prometheus/client_golang dependency-version: 1.23.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: github.com/spf13/pflag dependency-version: 1.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: golang.org/x/crypto dependency-version: 0.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: golang.org/x/net dependency-version: 0.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: golang.org/x/sync dependency-version: 0.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: golang.org/x/term dependency-version: 0.35.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: golang.org/x/time dependency-version: 0.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: golang.org/x/sys dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 1, 2025

Merge branch 'master' into dependabot/go_modules/all-updates-2b56341bfd

6481657

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

build(deps): bump the all-updates group with 9 updates #7285

build(deps): bump the all-updates group with 9 updates #7285

Uh oh!

dependabot bot commented on behalf of github Oct 1, 2025

Uh oh!

Uh oh!

Uh oh!

build(deps): bump the all-updates group with 9 updates #7285

Are you sure you want to change the base?

build(deps): bump the all-updates group with 9 updates #7285

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 1, 2025

v3.1.4

What's Changed

New Contributors

v1.23.2 - 2025-09-05

v1.23.1 - 2025-09-04

1.23.2 / 2025-09-05

1.23.1 / 2025-09-04

v1.0.10

What's Changed

New Contributors

Uh oh!

Uh oh!