Skip to content

chore(deps): Bump golang.org/x/text, golang.org/x/term, and prometheus/client_golang - #725

Merged
adgubrud merged 3 commits into
mainfrom
dependabot/go_modules/golang.org/x/text-0.43.0
Oct 13, 2026
Merged

chore(deps): Bump golang.org/x/text, golang.org/x/term, and prometheus/client_golang#725
adgubrud merged 3 commits into
mainfrom
dependabot/go_modules/golang.org/x/text-0.43.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026 •
edited by adgubrud
Loading

Copy link
Copy Markdown
Contributor

This PR has been expanded to carry three dependency updates so they can land in a single merge, rather than three separate ones.

dependency from to originally
golang.org/x/text 0.42.0 0.43.0 this PR
golang.org/x/term 0.46.0 0.47.0 #726
github.com/prometheus/client_golang 1.24.1 1.25.0 #727

Indirect dependencies resolve to the union of the three updates — every shared dependency takes the highest version requested by any of them, so nothing from #726 or #727 is dropped:

golang.org/x/sys 0.49.0, golang.org/x/crypto 0.57.0, golang.org/x/net 0.59.0, google.golang.org/protobuf 1.36.12, prometheus/client_model 0.6.3, prometheus/common 0.72.0, prometheus/procfs 0.22.0.

Only go.mod and go.sum are changed; there are no source changes. The combination was done with go get + go mod tidy rather than by cherry-picking, since all three branches edit the same go.mod lines.

Verification

make check in the Go 1.27.2 builder image, on this branch:

  • gofmt, go vet, staticcheck, license headers — clean
  • golangci-lint — 0 issues
  • govulncheck — 0 affecting vulnerabilities
  • unit tests — 12/12 packages passing

This branch already has main merged in, so it includes #728 (Go 1.27.2). That matters: the CI failure previously seen on #727 was govulncheck flagging nine Go standard library advisories against the old pinned go1.26.6 toolchain, not anything caused by the client_golang bump.

Note on golang.org/x/net v0.59.0: five advisories apply to it, but they are import-level only and uncalled, so govulncheck stays green. Bumping x/net to v0.60.0+ in a follow-up would clear them outright.

Follow-ups

Original Dependabot release notes — golang.org/x/text 0.42.0 → 0.43.0
Commits
  • ac40b0f go.mod: update golang.org/x dependencies
  • 6dcc5b6 unicode/bidi: avoid quadratic behavior in Paragraph.Order and Paragraph.Line
  • d0ecd29 secure/bidirule: lazily precompute ASCII table
  • See full diff in compare view
Original Dependabot release notes — golang.org/x/term 0.46.0 → 0.47.0 (from #726)
Commits
Original Dependabot release notes — prometheus/client_golang 1.24.1 → 1.25.0 (from #727)
Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.25.0

⚠️ This release raises the minimum required Go version to 1.26 and includes breaking API changes in api/prometheus/v1 (see the [CHANGE] entries below). ⚠️

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139
  • [BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135

What's Changed

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.25.0 / 2026-10-07

  • [CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
  • [CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
  • [CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
  • [FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
  • [FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
  • [ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
  • [ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
  • [ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
  • [BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
  • [BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139
  • [BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135
Commits

@dependabot
chore(deps): Bump golang.org/x/text from 0.42.0 to 0.43.0
a635fd8 
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.42.0 to 0.43.0.
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.42.0...v0.43.0)

---
updated-dependencies:
- dependency-name: golang.org/x/text
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from harp-intel as a code owner October 13, 2026 01:10
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 13, 2026
adgubrud and others added 2 commits October 13, 2026 09:08
@adgubrud
Merge branch 'main' into dependabot/go_modules/golang.org/x/text-0.43.0
67e5695
@adgubrud @claude
chore(deps): Also bump golang.org/x/term and prometheus/client_golang
d393d37 
Combines the dependency updates from #726 and #727 into this PR so all
three can land in a single merge.

- golang.org/x/term 0.46.0 -> 0.47.0 (#726)
- github.com/prometheus/client_golang 1.24.1 -> 1.25.0 (#727)

golang.org/x/text 0.42.0 -> 0.43.0 was already in this PR.

Indirect dependencies resolve to the union of the three updates:
x/sys 0.49.0, x/crypto 0.57.0, x/net 0.59.0, protobuf 1.36.12,
prometheus/client_model 0.6.3, prometheus/common 0.72.0,
prometheus/procfs 0.22.0.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@adgubrud adgubrud changed the title chore(deps): Bump golang.org/x/text from 0.42.0 to 0.43.0 chore(deps): Bump golang.org/x/text, golang.org/x/term, and prometheus/client_golang Oct 13, 2026
This was referenced Oct 13, 2026
Closed
Closed
@adgubrud
adgubrud merged commit 0099497 into main Oct 13, 2026
5 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/golang.org/x/text-0.43.0 branch October 13, 2026 16:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@harp-intel harp-intel Awaiting requested review from harp-intel harp-intel is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@adgubrud