chore(deps): Bump the production-dependencies group across 1 directory with 6 updates #398

dependabot · 2025-09-11T08:02:41Z

Bumps the production-dependencies group with 6 updates in the / directory:

Package	From	To
golang.org/x/crypto	`0.41.0`	`0.42.0`
go.yaml.in/yaml/v2	`2.4.2`	`2.4.3`
golang.org/x/net	`0.43.0`	`0.44.0`
golang.org/x/tools	`0.36.0`	`0.37.0`
google.golang.org/grpc	`1.75.0`	`1.75.1`
google.golang.org/protobuf	`1.36.8`	`1.36.9`

Updates golang.org/x/crypto from 0.41.0 to 0.42.0

Commits

5307a0c go.mod: update golang.org/x dependencies
9d77937 acme: include order problem in OrderError
8f580de ssh: remove Go 1.24 build tag for ML-KEM kex
a4d1237 ssh/knownhosts: improve IPv6 support in Normalize
b8d8dae curve25519: include potential fips140=only error in panic message
f5a2eab ssh: use curve25519.X25519 instead of curve25519.ScalarMult
44ecf3a all: upgrade go directive to at least 1.24.0 [generated]
See full diff in compare view

Updates go.yaml.in/yaml/v2 from 2.4.2 to 2.4.3

Release notes

Sourced from go.yaml.in/yaml/v2's releases.

v2.4.3

Retracted v2 tags that cannot be installed - @ccoVeille

Commits

3b57511 Retract v2 tags that cannot be installed
See full diff in compare view

Updates golang.org/x/net from 0.43.0 to 0.44.0

Commits

3b23d57 http2: fix race condition when disabling goroutine debugging for one test
8741050 http2: simplify TestServer_Push_RejectAfterGoAway
96e405c http2: modernize TestTransportRoundtripCloseOnWriteError
6dc6880 http2: simplify ClientConn Close and Shutdown tests
4e2915b http2: modernize TestTransportAllocationsAfterResponseBodyClose
30b0e78 http2: modernize TestRoundTripDoesntConsumeRequestBodyEarly
b9acd77 http2: speed up TestTransportFlowControl
5153f4d go.mod: update golang.org/x dependencies
9338bdd http2: speed up TestTransportHandlerBodyClose
6b20036 http2: add synchronous handler support to serverTester
Additional commits viewable in compare view

Updates golang.org/x/tools from 0.36.0 to 0.37.0

Commits

d49da96 go/analysis/internal/checker: fix panic due to nil Pass
9da4f7b gopls/internal/test/integration/completion: make test go1.26-robust
4409ea7 gopls/internal/server: add telemetry for Zed, Helix clientInfo
75023ae go/ast/inspector: update outdated documentation
785cd66 gopls/internal/test/integration/completion: skip TestFuzzFunc pre-go1.25
ac2e4a5 go.mod: update golang.org/x dependencies
bc9374d go/callgraph/vta: remove unnecessary use of unsafe
12d7e15 gopls/internal/analysis/modernize: add test of no gopls imports
263a769 gopls/internal/mcp: use official go mcp sdk
e548c70 gopls/internal/analysis/modernize: fix bad edit in var ( ... ) decl
Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.75.0 to 1.75.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.75.1

Bug Fixes

transport: Fix a data race while copying headers for stats handlers in the std lib http2 server transport. (#8519)

xdsclient:

Fix a data race caused while reporting load to LRS. (#8483)

Fix regression preventing empty node IDs when creating an LRS client. (#8483)

server: Fix a regression preventing streams from being cancelled or timed out when blocked on flow control. (#8528)

Commits

b4dc263 Change version to 1.75.1 (#8559)
1fffee7 Cherry-pick #8528 to v1.75.x (#8555)
a52e42b Cherry pick #8483 into v1.75.x (#8541)
369c9aa Cherry-pick #8519 to v1.75.x (#8530)
7269d5f Change version to 1.75.1-dev (#8494)
See full diff in compare view

Updates google.golang.org/protobuf from 1.36.8 to 1.36.9

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 6 updates Bumps the production-dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.41.0` | `0.42.0` | | [go.yaml.in/yaml/v2](https://github.com/yaml/go-yaml) | `2.4.2` | `2.4.3` | | [golang.org/x/net](https://github.com/golang/net) | `0.43.0` | `0.44.0` | | [golang.org/x/tools](https://github.com/golang/tools) | `0.36.0` | `0.37.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.75.0` | `1.75.1` | | google.golang.org/protobuf | `1.36.8` | `1.36.9` | Updates `golang.org/x/crypto` from 0.41.0 to 0.42.0 - [Commits](golang/crypto@v0.41.0...v0.42.0) Updates `go.yaml.in/yaml/v2` from 2.4.2 to 2.4.3 - [Release notes](https://github.com/yaml/go-yaml/releases) - [Commits](yaml/go-yaml@v2.4.2...v2.4.3) Updates `golang.org/x/net` from 0.43.0 to 0.44.0 - [Commits](golang/net@v0.43.0...v0.44.0) Updates `golang.org/x/tools` from 0.36.0 to 0.37.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.36.0...v0.37.0) Updates `google.golang.org/grpc` from 1.75.0 to 1.75.1 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.75.0...v1.75.1) Updates `google.golang.org/protobuf` from 1.36.8 to 1.36.9 --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: go.yaml.in/yaml/v2 dependency-version: 2.4.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: golang.org/x/net dependency-version: 0.44.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: golang.org/x/tools dependency-version: 0.37.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: google.golang.org/grpc dependency-version: 1.75.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: google.golang.org/protobuf dependency-version: 1.36.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

kubevirt-bot · 2025-09-11T08:02:50Z

Hi @dependabot[bot]. Thanks for your PR.

PRs from untrusted users cannot be marked as trusted with /ok-to-test in this repo meaning untrusted PR authors can never trigger tests themselves. Collaborators can still trigger tests on the PR using /test all.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

0xFelix

/test all
/approve
/lgtm

kubevirt-bot · 2025-09-11T08:03:58Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: 0xFelix

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

~~OWNERS~~ [0xFelix]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

0xFelix · 2025-09-11T08:20:25Z

/test pull-containerdisks-test

0xFelix · 2025-09-11T15:26:05Z

/retest

kubevirt-bot · 2025-09-11T16:18:57Z

@dependabot[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
pull-containerdisks-pipeline-centos-stream-9-s390x	`db56b1c`	link	true	`/test pull-containerdisks-pipeline-centos-stream-9-s390x`

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

dependabot · 2025-09-12T05:13:16Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added the release-note-none Denotes a PR that doesn't merit a release note. label Sep 11, 2025

kubevirt-bot added the dco-signoff: yes Indicates the PR's author has DCO signed all their commits. label Sep 11, 2025

kubevirt-bot requested review from ksimon1 and lyarwood September 11, 2025 08:02

kubevirt-bot added the size/XL label Sep 11, 2025

0xFelix approved these changes Sep 11, 2025

View reviewed changes

kubevirt-bot assigned 0xFelix Sep 11, 2025

kubevirt-bot added the lgtm Indicates that a PR is ready to be merged. label Sep 11, 2025

kubevirt-bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Sep 11, 2025

dependabot bot closed this Sep 12, 2025

dependabot bot deleted the dependabot/go_modules/production-dependencies-f301b04571 branch September 12, 2025 05:13

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): Bump the production-dependencies group across 1 directory with 6 updates #398

chore(deps): Bump the production-dependencies group across 1 directory with 6 updates #398

Uh oh!

dependabot bot commented on behalf of github Sep 11, 2025 •

edited

Loading

Uh oh!

kubevirt-bot commented Sep 11, 2025

Uh oh!

0xFelix left a comment

Uh oh!

kubevirt-bot commented Sep 11, 2025

Uh oh!

0xFelix commented Sep 11, 2025

Uh oh!

0xFelix commented Sep 11, 2025

Uh oh!

kubevirt-bot commented Sep 11, 2025

Uh oh!

dependabot bot commented on behalf of github Sep 12, 2025

Uh oh!

Uh oh!

chore(deps): Bump the production-dependencies group across 1 directory with 6 updates #398

chore(deps): Bump the production-dependencies group across 1 directory with 6 updates #398

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.4.3

Release 1.75.1

Bug Fixes

Uh oh!

kubevirt-bot commented Sep 11, 2025

Uh oh!

0xFelix left a comment

Choose a reason for hiding this comment

Uh oh!

kubevirt-bot commented Sep 11, 2025

Uh oh!

0xFelix commented Sep 11, 2025

Uh oh!

0xFelix commented Sep 11, 2025

Uh oh!

kubevirt-bot commented Sep 11, 2025

Uh oh!

dependabot bot commented on behalf of github Sep 12, 2025

Uh oh!

Uh oh!

dependabot bot commented on behalf of github Sep 11, 2025 •

edited

Loading