Skip to content

[main] Upgrade to latest dependencies - #4115

Merged
knative-prow[bot] merged 3 commits into
knative:mainfrom
knative-automation:auto-updates/update-deps-main
Oct 28, 2026
Merged

[main] Upgrade to latest dependencies#4115
knative-prow[bot] merged 3 commits into
knative:mainfrom
knative-automation:auto-updates/update-deps-main

Conversation

@knative-automation

@knative-automation knative-automation commented Oct 28, 2026

Copy link
Copy Markdown
Contributor

Cron -dsimansk

/cc knative/func-approvers
/assign knative/func-approvers

Produced by: knative-extensions/knobots/actions/update-deps

@knative-automation
upgrade to latest dependencies
26a38ad 
bumping knative.dev/networking 7de3b18...cfc4315:
  > cfc4315 upgrade to latest dependencies (# 1161)
  > a81875c Update community files (# 1160)
bumping knative.dev/client/pkg 82489f8...f2bfc7f:
  > f2bfc7f Return an error instead of panicking on a valueless mount option (# 2271)
  > a545e1e Expose WatchServiceWithVersion on the KnServingClient interface (# 2274)
  > 169cc43 upgrade to latest dependencies (# 2272)
  > 3913805 Format sink type with %v instead of %q (# 2276)
bumping knative.dev/eventing 5272bfe...149a648:
  > 149a648 [main] Upgrade to latest dependencies (# 9486)
  > 23211b7 fix(delivery): wait one backoff delay before the first linear retry (# 9425)
bumping knative.dev/serving d01fc4f...e3c2d9b:
  > e3c2d9b upgrade to latest dependencies (# 16730)
  > 7fc7d57 upgrade to latest dependencies (# 16728)
bumping knative.dev/pkg c36432d...cfa0ac9:
  > cfa0ac9 upgrade to latest dependencies (# 3406)
  > 1a7e235 Bump github.com/prometheus/client_golang from 1.24.1 to 1.25.0 (# 3398)
bumping github.com/prometheus/client_golang d6087ee...0d88875:
  > 0d88875 Cut v1.25.0 (# 2164)
  > e9946ee Cut v1.25.0-rc.0 (# 2154)
  > de866d6 Merge pull request # 2152 from prometheus/dependabot/go_modules/api/prometheus/v1/paritytest/google.golang.org/grpc-1.83.2
  > a37302f prometheus: fix modernize lint findings (# 2151)
  > a3fa380 build(deps): bump google.golang.org/grpc
  > 9da3fcc fix: updates for tsdb blocks handling (# 1928)
  > 0ecb5c2 api: match complete URL placeholders (# 2136)
  > 2ad001a exp/api/remote: reset buffer before generic marshal (# 2139)
  > 0db8d43 promhttp: vary negotiated metrics responses (# 2142)
  > b1f9c7a Merge pull request # 2144 from prometheus/dependabot/go_modules/exp/github.com/klauspost/compress-1.20.1
  > 34e7852 Merge pull request # 2145 from prometheus/dependabot/github_actions/codeql-435f1796a1
  > c9040ea build(deps): bump github.com/klauspost/compress in /exp
  > 04e0231 Merge pull request # 2143 from prometheus/dependabot/go_modules/github.com/klauspost/compress-1.20.1
  > 6605e42 build(deps): bump the codeql group with 4 updates
  > ba782fc Merge pull request # 2146 from prometheus/om2-2
  > 122ebff build(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.1
  > 589113c Merge pull request # 2128 from liggitt/json-v2-unmarshal
  > 1b0b010 promhttp: add AcceptedFormats option to customize format negotiation
  > cb928bc all: update prometheus/common to v0.72.0 and apply modernize fixes (# 2138)
  > 7854376 Isolate json-iterator use to Go 1.26, use single-level decode
  > ae383ca Merge pull request # 2135 from ZainnQureshii/promlint-mebi
  > 877d43c Model double-decode using json-iterator in sample unmarshaling benchmark
  > c946c36 Merge pull request # 2122 from prometheus/dependabot/go_modules/tutorials/whatsup/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc-1.45.0
  > 1ecaee3 testutil/promlint: fix "mibi" unit prefix to "mebi"
  > d1984e7 Combine envelope/inner apiResponse decoding, switch to stdlib json (# 2118)
  > 2c20d4d build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  > ca4e53e Merge pull request # 2123 from prometheus/dependabot/go_modules/tutorials/whatsup/go.opentelemetry.io/otel/exporters/otlp/otlptrace-1.45.0
  > 196813c prometheus: fix revive indent-error-flow lint on Darwin (# 2131)
  > 6f4d4e3 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace
  > 45322d1 Merge pull request # 2116 from prombot/repo_sync
  > 8e2b47b Merge pull request # 2124 from prometheus/dependabot/go_modules/tutorials/whatsup/go.opentelemetry.io/otel/sdk-1.45.0
  > c6dc48f Update common Prometheus files
  > 935a4da Merge pull request # 2125 from ajavanma/fix/testutil-openmetrics-eof
  > f503d8c build(deps): bump go.opentelemetry.io/otel/sdk in /tutorials/whatsup
  > d2f148b Improve linting (# 2115)
  > 9bf26f7 Merge pull request # 2120 from liggitt/simplify-do-error
  > 1a59775 testutil: finalize OpenMetrics output
  > 3f5d680 Merge pull request # 2111 from liggitt/api-result
  > 1f2807b Merge pull request # 2121 from liggitt/delete-jsoniter-marshaling
  > 46c40f4 Fall back to non-API error return on json-decode error
  > 959db2a Merge pull request # 2110 from liggitt/query-result
  > 794ad4a APIResponse: switch to stdlib
  > 1ababcf Delete unused custom json-iterator marshaling
  > d9e5383 Simplify apiClientImpl#Do error path
  > 5a4ff97 Merge pull request # 2114 from radianceded/modernize-microbenchmarks
  > 09eacad QueryResult: use stdlib to decode envelope
  > c248e1e APIResponse: add benchmark
  > 3f29fcf Merge pull request # 2109 from liggitt/rule-group
  > 35aa9ae Modernize micro benchmarks: b.Loop and key=value case names
  > 121d25a QueryResult: add benchmark
  > b88d0f0 Merge pull request # 2112 from prometheus/dependabot/go_modules/tutorials/whatsup/google.golang.org/grpc-1.83.2
  > ce3781c RuleGroup: optimize internal decode
  > 1621a2c Add json/v2 benchmarks (# 2107)
  > 07aec88 build(deps): bump google.golang.org/grpc in /tutorials/whatsup
  > 93eab07 RuleGroup: avoid repeatedly unmarshaling type
  > 57bb367 Update Go Collector metrics for new Go version (# 2095)
  > 15f21fc RuleGroup: Use stdlib json to unmarshal
  > 9775124 Merge pull request # 2102 from prometheus/dependabot/go_modules/tutorials/whatsup/google.golang.org/grpc-1.83.1
  > 702db21 RuleGroup: add unmarshal and streaming benchmark
  > 8207dfb Merge pull request # 2096 from prometheus/dependabot/go_modules/prometheus-3f20afc7b4
  > a89ba97 Merge branch 'main' into dependabot/go_modules/tutorials/whatsup/google.golang.org/grpc-1.83.1
  > f42b858 Merge pull request # 2100 from prometheus/dependabot/go_modules/exp/github.com/klauspost/compress-1.19.2
  > 468962e build(deps): bump github.com/prometheus/procfs
  > 76f473c build(deps): bump google.golang.org/grpc in /tutorials/whatsup
  > dec9856 Merge pull request # 2099 from prometheus/dependabot/go_modules/exp/google.golang.org/protobuf-1.36.12
  > f5eead3 build(deps): bump github.com/klauspost/compress in /exp
  > f2632d8 Merge pull request # 2097 from prometheus/dependabot/go_modules/google.golang.org/protobuf-1.36.12
  > 17e031b Merge pull request # 2101 from prometheus/dependabot/github_actions/codeql-ebf40551bc
  > ff08097 Merge pull request # 2098 from prometheus/dependabot/go_modules/github.com/klauspost/compress-1.19.2
  > 919daf1 build(deps): bump google.golang.org/protobuf in /exp
  > 5a3bc8c build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12
  > 89c60c0 testutil: add GatherAndFormat helper (# 2091)
  > e3b1977 build(deps): bump the codeql group with 4 updates
  > 9d5cd80 build(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2
  > 3df9b67 docs: add AGENTS.md contributor and maintainer guide (# 2056)
  > 86daff1 README: document the OpenTelemetry OTLP push bridge (# 1987)
  > d8e38e0 Update common Prometheus files (# 2093)
  > 56b1a27 go.mod: remove obsolete exclude rule (# 2077)
  > 0b801df Regenerate Go collector runtime metrics for Go 1.25 and Go 1.26 (# 2090)
  > ff9340c Update common Prometheus files (# 2088)
  > 0c5dccd Merge remote-tracking branch 'origin/release-1.24'
  > 0b4876a Update common Prometheus files (# 2086)
  > 18218bf Update common Prometheus files (# 2084)
  > 291e2c6 Merge pull request # 2082 from prometheus/dependabot/github_actions/ossf/scorecard-action-2.4.4
  > ecdb825 Return info annotations in addition to warnings in the API (# 1963)
  > bcc8e7e build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4
  > 436bf2e promhttp: fix panic on requests with nil URL (# 2065)
  > e03749a build(deps): bump actions/checkout from 7.0.0 to 7.0.1 (# 2067)
  > 990e9e4 Pin GitHub Actions (# 2074)
  > a3615fc Merge pull request # 2075 from prometheus/dependabot/go_modules/tutorials/whatsup/google.golang.org/grpc-1.82.1
  > 2a170ab Merge pull request # 2070 from prometheus/dependabot/go_modules/github.com/prometheus/common-0.70.1
  > ea9302c build(deps): bump google.golang.org/grpc in /tutorials/whatsup
  > dfd24e3 Merge pull request # 2073 from prometheus/dependabot/go_modules/exp/github.com/prometheus/common-0.70.1
  > f3a330f build(deps): bump github.com/prometheus/common from 0.69.0 to 0.70.1
  > 4b23f2e Merge pull request # 2072 from prometheus/dependabot/go_modules/exp/github.com/klauspost/compress-1.19.1
  > e5885fe build(deps): bump github.com/prometheus/common in /exp
  > db1bfbf Merge pull request # 2069 from prometheus/dependabot/go_modules/golang-org-x-52f2481a87
  > 6edf28c build(deps): bump github.com/klauspost/compress in /exp
  > 2fb6ca3 Merge pull request # 2071 from prometheus/dependabot/go_modules/github.com/klauspost/compress-1.19.1
  > 031a203 build(deps): bump golang.org/x/sys
  > 91ec323 Merge pull request # 2066 from prometheus/dependabot/github_actions/codeql-85dd5d8b53
  > 90b4141 build(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1
  > 971d4a3 Update common Prometheus files (# 2060)
  > 7bc28f6 build(deps): bump the codeql group with 4 updates
  > fa362ed fix: Remove unneeded and broken CI badge (# 2057)
bumping github.com/klauspost/compress 2602f4a...5d880f2:
  > 5d880f2 tests: Pre-release cleanups (# 1231)
  > 5ed8a01 Report unexpected EOF for truncated Huffman extra bits (# 1229)
  > 0bed724 flate: avoid FMA in EstimatedBits for portable rounding (# 1224)
  > 147b531 zstd: apply reset options to reused frame decoders (# 1226)
  > 58dac78 gzhttp: only decompress a request when gzip is the outermost coding (# 1223)
  > 9b00a55 gzhttp: preserve caller request headers in Transport (# 1225)
  > de8f55d ossfuzz: include zstd seqdec path tests (# 1222)
  > a1c49c6 flate: precompute literal costs for findMatch (# 1217)
  > ebd8190 flate: avoid the hand-rolled sorts when generating Huffman codes (# 1214)
  > 4dc0d32 flate: use separate tables in histogramSplit (# 1215)
  > e022476 flate: restructure matchLen to avoid bounds checks (# 1216)
  > 8cacafd flate: speed up writeTokens (# 1218)
  > 9b2eb1b flate: combine codes in the writeBlockHuff literal loop (# 1220)
  > 32dbb2c huff0: regenerate the Decompress1X asm loop with a branch-free refill (# 1210)
  > 7dc45b1 s2: Swap s2.Index.appendTo() argument order to match add() (# 1213)
  > b882456 huff0: reshape the Decompress4X asm loops around a sentinel bit container (# 1209)
  > e3d11eb zstd: account for raw and RLE blocks in maxSyncLen (# 1211)
  > 5e17c92 huff0: seed FuzzDecompress1x with real compressed output, exercise Decompress4X (# 1208)
  > fc272ea zstd: copy the first block of short literal runs and matches unconditionally (# 1204)
  > ac559c1 zstd: stream a small buffer when its in-memory decode exceeds the size limit (# 1207)
  > 75489f9 zstd: make the seqdec decodeSync test and benchmark reach the assembly (# 1205)
  > dc3d000 zstd/huff0: branch-free arm64 decode reads, avo shift-copy folds, whole-register 4X exhausted counter (# 1203)
  > 9d8ccb1 flate: Writer with a preset dictionary emits the dictionary into the output stream (# 1201)
  > f93f23a build(deps): bump the github-actions group with 6 updates (# 1200)
  > 42f9d96 xpress: add Microsoft XPRESS (MS-XCA) decompression (# 1195)
  > 629c2ea zstd/huff0: break false partial-register dependencies in seqdec/4X decoders (# 1197)
  > ba74977 ci: test against go1.27.x, drop go1.24.x (# 1198)
  > f5c1529 zstd/huff0: pin avo peephole folds, regenerate arm64 (# 1199)
  > 73508b2 s2: arm64 assembly encoders, lowered from the amd64 avo program (# 1187)
  > 0e43f04 xxhash: bound input of non-preemptive assembly (# 1196)
  > 4005c15 s2: clamp the Go EncodeBetter skip to match the assembly (# 1190)
  > dd6de45 gzhttp: limit jitter hash to jitterBuffer bytes (# 1192)
  > 07f8bcd zstd, huff0: improved arm64 lowering, and narrow two table loads to MOVWQZX (# 1175)
  > ff8c845 Add lzw reader/writer (# 1189)
  > c3b3439 zstd: don't clear the registered dictionary when decoding past the window (# 1177)
  > 9874bc9 fix(zstd): handle zero-literal BuildDict corpus (# 1178)
  > 71bb6fd zstd: keep BuildDict recent-offsets positive and loadable (# 1184)
  > 3d4dacb zstd: avoid racing MaxDecodedSize write on shared dict litEnc (# 1182)
  > 3ceaa81 build(deps): bump the github-actions group with 5 updates (# 1185)
  > 72cb4d3 chore: add OpenSSF Scorecard GitHub Action (# 1183)
  > 69c9db4 zstd: fix arm64 asm locals overwriting the saved link register (# 1176)
  > 117430d zstd: Re-enable unsafe decodeSync memory copies (# 1168) (# 1171)
  > c73af0c huff0: add arm64 assembly for Decompress4X/1X via avo lowering (# 1172)

Signed-off-by: Knative Automation <automation@knative.team>
@knative-automation knative-automation added the skip-review PR may be merged without full review. label Oct 28, 2026
@knative-prow

knative-prow Bot commented Oct 28, 2026

Copy link
Copy Markdown

@knative-automation: GitHub didn't allow me to request PR reviews from the following users: knative/func-approvers.

Note that only knative members and repo collaborators can review this PR, and authors cannot review their own PRs.

Details

In response to this:

Cron -dsimansk

/cc knative/func-approvers
/assign knative/func-approvers

Produced by: knative-extensions/knobots/actions/update-deps

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@knative-prow

knative-prow Bot commented Oct 28, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: knative-automation
Once this PR has been reviewed and has the lgtm label, please assign matejvasek for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@knative-prow knative-prow Bot added the size/M 🤖 PR changes 30-99 lines, ignoring generated files. label Oct 28, 2026
@knative-prow
knative-prow Bot merged commit e98dae9 into knative:main Oct 28, 2026
41 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

size/M 🤖 PR changes 30-99 lines, ignoring generated files. skip-review PR may be merged without full review.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@knative-automation @dsimansk