Skip to content

chore(deps): bump the workspace-deps group across 3 directories with 9 updates#1075

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/metis/workspace-deps-948502bb74
Open

chore(deps): bump the workspace-deps group across 3 directories with 9 updates#1075
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/metis/workspace-deps-948502bb74

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 20, 2026

Bumps the workspace-deps group with 3 updates in the /metis directory: github.com/spf13/cobra, github.com/mattn/go-sqlite3 and google.golang.org/grpc.
Bumps the workspace-deps group with 3 updates in the /providers directory: golang.org/x/oauth2, google.golang.org/api and github.com/GoogleCloudPlatform/k8s-cloud-provider.
Bumps the workspace-deps group with 3 updates in the /test/e2e directory: google.golang.org/api, github.com/GoogleCloudPlatform/k8s-cloud-provider and github.com/onsi/gomega.

Updates github.com/spf13/cobra from 1.10.0 to 1.10.2

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.2

🔧 Dependencies

  • chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @​dims in spf13/cobra#2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

v1.10.1

🐛 Fix

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

Commits

Updates github.com/mattn/go-sqlite3 from 1.14.37 to 1.14.42

Commits
  • 5df13a0 Merge pull request #1387 from mattn/codex/stmt-cache
  • e302e5c document that _stmt_cache_size is per connection
  • 867dcbf move reset/clear into putCachedStmt and always finalize on failure
  • 0e58fa4 simplify prepareWithCache to call prepare instead of duplicating logic
  • e9f47da do not bail out on finalize error in closeCachedStmtsLocked
  • 325cb8d remove redundant stmtCacheSize check in putCachedStmt
  • 061c2a5 check stmtCacheSize before acquiring mutex in takeCachedStmt
  • efa9b1c add opt-in statement cache
  • 8d12439 Merge pull request #1386 from mattn/perf/reduce-cgo-overhead
  • 89f4bbe fix build with SQLITE_ENABLE_UNLOCK_NOTIFY
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.79.3 to 1.80.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.80.0

Behavior Changes

  • balancer: log a warning if a balancer is registered with uppercase letters, as balancer names should be lowercase. In a future release, balancer names will be treated as case-insensitive; see #5288 for details. (#8837)
  • xds: update resource error handling and re-resolution logic (#8907)
    • Re-resolve all LOGICAL_DNS clusters simultaneously when re-resolution is requested.
    • Fail all in-flight RPCs immediately upon receipt of listener or route resource errors, instead of allowing them to complete.

Bug Fixes

  • xds: support the LB policy configured in LOGICAL_DNS cluster resources instead of defaulting to pick_first. (#8733)
  • credentials/tls: perform per-RPC authority validation against the leaf certificate instead of the entire peer certificate chain. (#8831)
  • xds: enabling A76 ring hash endpoint keys no longer causes EDS resources with invalid proxy metadata to be NACKed when HTTP CONNECT (gRFC A86) is disabled. (#8875)
  • xds: validate that the sum of endpoint weights in a locality does not exceed the maximum uint32 value. (#8899)
  • xds: fix incorrect proto field access in the weighted round robin (WRR) configuration where blackout_period was used instead of weight_expiration_period. (#8915)
  • xds/rbac: handle addresses with ports in IP matchers. (#8990)

New Features

  • ringhash: enable gRFC A76 (endpoint hash keys and request hash headers) by default. (#8922)

Performance Improvements

  • credentials/alts: pool write buffers to reduce memory allocations and usage. (#8919)
  • grpc: enable the use of pooled write buffers for buffering HTTP/2 frame writes by default. This reduces memory usage when connections are idle. Use the WithSharedWriteBuffer dial option or the SharedWriteBuffer server option to disable this feature. (#8957)
  • xds/priority: stop caching child LB policies removed from the configuration. This will help reduce memory and cpu usage when localities are constantly switching between priorities. (#8997)
  • mem: add a faster tiered buffer pool; use the experimental mem.NewBinaryTieredBufferPool function to create such pools. (#8775)
Commits

Updates google.golang.org/protobuf from 1.36.10 to 1.36.11

Updates golang.org/x/oauth2 from 0.34.0 to 0.36.0

Commits
  • 4d954e6 all: upgrade go directive to at least 1.25.0 [generated]
  • 89ff2e1 google: add safer credentials JSON loading options.
  • See full diff in compare view

Updates google.golang.org/api from 0.199.0 to 0.276.0

Release notes

Sourced from google.golang.org/api's releases.

v0.276.0

0.276.0 (2026-04-14)

Features

v0.275.0

0.275.0 (2026-04-07)

Features

v0.274.0

0.274.0 (2026-04-02)

Features

v0.273.1

0.273.1 (2026-03-31)

Bug Fixes

  • Merge duplicate x-goog-request-params header (#3547) (2008108)

v0.273.0

0.273.0 (2026-03-23)

Features

v0.272.0

0.272.0 (2026-03-16)

Features

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.276.0 (2026-04-14)

Features

0.275.0 (2026-04-07)

Features

0.274.0 (2026-04-02)

Features

0.273.1 (2026-03-31)

Bug Fixes

  • Merge duplicate x-goog-request-params header (#3547) (2008108)

0.273.0 (2026-03-23)

Features

0.272.0 (2026-03-16)

Features

... (truncated)

Commits

Updates github.com/GoogleCloudPlatform/k8s-cloud-provider from 1.27.0 to 1.34.0

Release notes

Sourced from github.com/GoogleCloudPlatform/k8s-cloud-provider's releases.

v1.34.0

Summary

  • Support for Regional TargetTCPProxy
  • Support custom headers in requests
  • e2e testing fixes
  • Ability to return partial success from AggregatedList
  • Patch for global TargetHTTPSProxy

What's Changed

Full Changelog: GoogleCloudPlatform/k8s-cloud-provider@v1.33.0...v1.34.0

v1.29.0

What's Changed

New Contributors

Full Changelog: GoogleCloudPlatform/k8s-cloud-provider@v1.28.0...v1.29.0

Commits
  • 7377992 Merge pull request #243 from kl52752/patch-https-proxy
  • 58812e0 Add Patch method for global TargetHTTPSProxy
  • e163b50 Merge pull request #241 from GoogleCloudPlatform/dependabot/go_modules/golang...
  • 417a64a Bump golang.org/x/crypto from 0.31.0 to 0.35.0
  • f45f962 Merge pull request #238 from bowei/pr-fixconst
  • 2ca43ad Fix non-const format strings
  • 19ea140 Fix non-const format string
  • 827fdbf Fix non-constant logf argument
  • b450481 Update year in generated files
  • e553d08 Merge pull request #237 from briantkennedy/agglist
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.199.0 to 0.276.0

Release notes

Sourced from google.golang.org/api's releases.

v0.276.0

0.276.0 (2026-04-14)

Features

v0.275.0

0.275.0 (2026-04-07)

Features

v0.274.0

0.274.0 (2026-04-02)

Features

v0.273.1

0.273.1 (2026-03-31)

Bug Fixes

  • Merge duplicate x-goog-request-params header (#3547) (2008108)

v0.273.0

0.273.0 (2026-03-23)

Features

v0.272.0

0.272.0 (2026-03-16)

Features

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.276.0 (2026-04-14)

Features

0.275.0 (2026-04-07)

Features

0.274.0 (2026-04-02)

Features

0.273.1 (2026-03-31)

Bug Fixes

  • Merge duplicate x-goog-request-params header (#3547) (2008108)

0.273.0 (2026-03-23)

Features

0.272.0 (2026-03-16)

Features

... (truncated)

Commits

Updates github.com/GoogleCloudPlatform/k8s-cloud-provider from 1.27.0 to 1.34.0

Release notes

Sourced from github.com/GoogleCloudPlatform/k8s-cloud-provider's releases.

v1.34.0

Summary

  • Support for Regional TargetTCPProxy
  • Support custom headers in requests
  • e2e testing fixes
  • Ability to return partial success from AggregatedList
  • Patch for global TargetHTTPSProxy

What's Changed

Full Changelog: GoogleCloudPlatform/k8s-cloud-provider@v1.33.0...v1.34.0

v1.29.0

What's Changed

New Contributors

Full Changelog: GoogleCloudPlatform/k8s-cloud-provider@v1.28.0...v1.29.0

Commits
  • 7377992 Merge pull request #243 from kl52752/patch-https-proxy
  • 58812e0 Add Patch method for global TargetHTTPSProxy
  • e163b50 Merge pull request #241 from GoogleCloudPlatform/dependabot/go_modules/golang...
  • 417a64a Bump golang.org/x/crypto from 0.31.0 to 0.35.0
  • f45f962 Merge pull request #238 from bowei/pr-fixconst
  • 2ca43ad Fix non-const format strings
  • 19ea140 Fix non-const format string
  • 827fdbf Fix non-constant logf argument
  • b450481 Update year in generated files
  • e553d08 Merge pull request #237 from briantkennedy/agglist
  • Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.38.3 to 1.39.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.39.1

1.39.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

v1.39.0

1.39.0

Features

Add MatchErrorStrictly which only passes if errors.Is(actual, expected) returns true. MatchError, by contrast, will fallback to string comparison.

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.39.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

1.39.0

Features

Add MatchErrorStrictly which only passes if errors.Is(actual, expected) returns true. MatchError, by contrast, will fallback to string comparison.

Commits

Updates github.com/onsi/ginkgo/v2 from 2.27.2 to 2.28.0

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.28.0

2.28.0

Ginkgo's SemVer filter now supports filtering multiple components by SemVer version:

It("should work in a specific version range (1.0.0, 2.0.0) and third-party dependency redis in [8.0.0, ~)", SemVerConstraint(">= 3.2.0"), ComponentSemVerConstraint("redis", ">= 8.0.0") func() {
    // This test will only run when version is between 1.0.0 (exclusive) and 2.0.0 (exclusive) and redis version is >= 8.0.0
})

can be filtered in or out with an invocation like:

ginkgo --sem-ver-filter="2.1.1, redis=8.2.0"

Huge thanks to @​Icarus9913 for working on this!

v2.27.5

2.27.5

Fixes

Don't make a new formatter for each GinkgoT(); that's just silly and uses precious memory

v2.27.4

2.27.4

Fixes

  • CurrentTreeConstructionNodeReport: fix for nested container nodes [59bc751]

v2.27.3

2.27.3

Fixes

report exit result in case of failure [1c9f356] fix data race [ece19c8]

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.28.0

Ginkgo's SemVer filter now supports filtering multiple components by SemVer version:

It("should work in a specific version range (1.0.0, 2.0.0) and third-party dependency redis in [8.0.0, ~)", SemVerConstraint(">= 3.2.0"), ComponentSemVerConstraint("redis", ">= 8.0.0") func() {
    // This test will only run when version is between 1.0.0 (exclusive) and 2.0.0 (exclusive) and redis version is >= 8.0.0
})

can be filtered in or out with an invocation like:

ginkgo --sem-ver-filter="2.1.1, redis=8.2.0"

Huge thanks to @​Icarus9913 for working on this!

2.27.5

Fixes

Don't make a new formatter for each GinkgoT(); that's just silly and uses precious memory

2.27.4

Fixes

  • CurrentTreeConstructionNodeReport: fix for nested container nodes [59bc751]

2.27.3

Fixes

report exit result in case of failure [1c9f356] fix data race [ece19c8]

Commits
  • 2b2305b v2.28.0
  • 71d2d89 feat: support component semantic version filtering
  • 8cbbcb4 Fix doclink for ginkgo run
  • a928307 v2.27.5
  • 0d0e96d don't make a new formatter for each GinkgoT(); that's just silly and uses pre...
  • 867ce95 v2.27.4
  • 59bc751 CurrentTreeConstructionNodeReport: fix for nested container nodes
  • f331739 v2.27.3
  • 1c9f356 ginkgo: report exit result in case of failure
  • ece19c8 ginkgo: fix data race
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…9 updates

Bumps the workspace-deps group with 3 updates in the /metis directory: [github.com/spf13/cobra](https://github.com/spf13/cobra), [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Bumps the workspace-deps group with 3 updates in the /providers directory: [golang.org/x/oauth2](https://github.com/golang/oauth2), [google.golang.org/api](https://github.com/googleapis/google-api-go-client) and [github.com/GoogleCloudPlatform/k8s-cloud-provider](https://github.com/GoogleCloudPlatform/k8s-cloud-provider).
Bumps the workspace-deps group with 3 updates in the /test/e2e directory: [google.golang.org/api](https://github.com/googleapis/google-api-go-client), [github.com/GoogleCloudPlatform/k8s-cloud-provider](https://github.com/GoogleCloudPlatform/k8s-cloud-provider) and [github.com/onsi/gomega](https://github.com/onsi/gomega).


Updates `github.com/spf13/cobra` from 1.10.0 to 1.10.2
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.10.0...v1.10.2)

Updates `github.com/mattn/go-sqlite3` from 1.14.37 to 1.14.42
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](mattn/go-sqlite3@v1.14.37...v1.14.42)

Updates `google.golang.org/grpc` from 1.79.3 to 1.80.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.80.0)

Updates `google.golang.org/protobuf` from 1.36.10 to 1.36.11

Updates `golang.org/x/oauth2` from 0.34.0 to 0.36.0
- [Commits](golang/oauth2@v0.34.0...v0.36.0)

Updates `google.golang.org/api` from 0.199.0 to 0.276.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.199.0...v0.276.0)

Updates `github.com/GoogleCloudPlatform/k8s-cloud-provider` from 1.27.0 to 1.34.0
- [Release notes](https://github.com/GoogleCloudPlatform/k8s-cloud-provider/releases)
- [Commits](GoogleCloudPlatform/k8s-cloud-provider@v1.27.0...v1.34.0)

Updates `google.golang.org/api` from 0.199.0 to 0.276.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.199.0...v0.276.0)

Updates `github.com/GoogleCloudPlatform/k8s-cloud-provider` from 1.27.0 to 1.34.0
- [Release notes](https://github.com/GoogleCloudPlatform/k8s-cloud-provider/releases)
- [Commits](GoogleCloudPlatform/k8s-cloud-provider@v1.27.0...v1.34.0)

Updates `github.com/onsi/gomega` from 1.38.3 to 1.39.1
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.38.3...v1.39.1)

Updates `github.com/onsi/ginkgo/v2` from 2.27.2 to 2.28.0
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.27.2...v2.28.0)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace-deps
- dependency-name: github.com/mattn/go-sqlite3
  dependency-version: 1.14.42
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace-deps
- dependency-name: google.golang.org/grpc
  dependency-version: 1.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace-deps
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
- dependency-name: google.golang.org/api
  dependency-version: 0.276.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
- dependency-name: github.com/GoogleCloudPlatform/k8s-cloud-provider
  dependency-version: 1.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
- dependency-name: google.golang.org/api
  dependency-version: 0.276.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
- dependency-name: github.com/GoogleCloudPlatform/k8s-cloud-provider
  dependency-version: 1.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.39.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added area/dependency Issues or PRs related to dependency changes ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. labels Apr 20, 2026
@k8s-ci-robot k8s-ci-robot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. labels Apr 20, 2026
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

This issue is currently awaiting triage.

If the repository mantainers determine this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@k8s-ci-robot
Copy link
Copy Markdown
Contributor

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubernetes member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@k8s-ci-robot k8s-ci-robot added the size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. label Apr 20, 2026
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign hdp617 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot requested review from cheftako and elmiko April 20, 2026 18:47
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
cloud-provider-gcp-verify-all 73b3986 link true /test cloud-provider-gcp-verify-all
cloud-provider-gcp-verify-up-to-date 73b3986 link true /test cloud-provider-gcp-verify-up-to-date
cloud-provider-gcp-tests 73b3986 link true /test cloud-provider-gcp-tests
pull-cloud-provider-gcp-scenario-kops-simple 73b3986 link false /test pull-cloud-provider-gcp-scenario-kops-simple
cloud-provider-gcp-e2e-full 73b3986 link true /test cloud-provider-gcp-e2e-full

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/dependency Issues or PRs related to dependency changes cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. size/XL Denotes a PR that changes 500-999 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant