Bump the github-dependencies group across 1 directory with 6 updates#278
Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
Closed
Bump the github-dependencies group across 1 directory with 6 updates#278dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot[bot] wants to merge 1 commit intomasterfrom
Conversation
Bumps the github-dependencies group with 2 updates in the / directory: [github.com/prometheus/common](https://github.com/prometheus/common) and [github.com/spf13/cobra](https://github.com/spf13/cobra). Updates `github.com/prometheus/common` from 0.53.0 to 0.55.0 - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md) - [Commits](prometheus/common@v0.53.0...v0.55.0) Updates `github.com/spf13/cobra` from 1.8.0 to 1.8.1 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.8.0...v1.8.1) Updates `golang.org/x/net` from 0.25.0 to 0.26.0 - [Commits](golang/net@v0.25.0...v0.26.0) Updates `golang.org/x/sys` from 0.20.0 to 0.21.0 - [Commits](golang/sys@v0.20.0...v0.21.0) Updates `golang.org/x/text` from 0.15.0 to 0.16.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.15.0...v0.16.0) Updates `google.golang.org/protobuf` from 1.34.1 to 1.34.2 --- updated-dependencies: - dependency-name: github.com/prometheus/common dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: github.com/spf13/cobra dependency-type: indirect update-type: version-update:semver-patch dependency-group: github-dependencies - dependency-name: golang.org/x/net dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: golang.org/x/sys dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: golang.org/x/text dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: google.golang.org/protobuf dependency-type: indirect update-type: version-update:semver-patch dependency-group: github-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
area/dependency
k8s-ci-robot
added
the
cncf-cla: yes
Contributor
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: dependabot[bot] The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
Contributor
|
Hi @dependabot[bot]. Thanks for your PR. I'm waiting for a kubernetes-csi member to verify that this patch is reasonable to test. If it is, they should reply with Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
k8s-ci-robot
added
the
size/XXL
Member
|
/lgtm |
k8s-ci-robot
added
the
lgtm
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
bot
deleted the
dependabot/go_modules/github-dependencies-8d61bfa9e0
branch
darshansreenivas
added a commit
to darshansreenivas/livenessprobe
that referenced
this pull request
Oct 23, 2025
74502e5 Merge pull request kubernetes-csi#278 from liangyuanpeng/migrate_k8s_testimages 5334430 Merge pull request kubernetes-csi#281 from kubernetes-csi/dependabot/github_actions/actions/checkout-5 458ce14 Bump actions/checkout from 4 to 5 5ec1a52 use gcr.io/k8s-staging-test-infra instead of gcr.io/k8s-testimages git-subtree-dir: release-tools git-subtree-split: 74502e5
Merged
jsafrane
added a commit
to jsafrane/livenessprobe
that referenced
this pull request
Nov 21, 2025
8d1258c Merge pull request kubernetes-csi#286 from kubernetes-csi/dependabot/github_actions/actions/checkout-6 91e3598 Bump actions/checkout from 5 to 6 2941381 Merge pull request kubernetes-csi#285 from andyzhangx/patch-6 fa8b339 fix: upgrade to go1.24.9 to fix CVEs 74502e5 Merge pull request kubernetes-csi#278 from liangyuanpeng/migrate_k8s_testimages 5334430 Merge pull request kubernetes-csi#281 from kubernetes-csi/dependabot/github_actions/actions/checkout-5 458ce14 Bump actions/checkout from 4 to 5 5ec1a52 use gcr.io/k8s-staging-test-infra instead of gcr.io/k8s-testimages git-subtree-dir: release-tools git-subtree-split: 8d1258c
rhrmo
pushed a commit
to rhrmo/livenessprobe
that referenced
this pull request
Jan 13, 2026
…testimages use gcr.io/k8s-staging-test-infra instead of gcr.io/k8s-testimages
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-dependencies group with 2 updates in the / directory: github.com/prometheus/common and github.com/spf13/cobra.
Updates
github.com/prometheus/commonfrom 0.53.0 to 0.55.0Release notes
Sourced from github.com/prometheus/common's releases.
... (truncated)
Commits
0c7b585Merge pull request #649 from rajagopalanand/13364804fbbeUpdate common Prometheus files (#660)3f20456Bump golang.org/x/net from 0.25.0 to 0.26.0 (#657)e31eeaaBump google.golang.org/protobuf from 1.34.1 to 1.34.2 (#658)3236a12Bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 (#656)1cfb464Bump github.com/aws/aws-sdk-go from 1.53.14 to 1.54.7 in /sigv4 (#659)ab322eachore: add HumanizeTimestamp; make ConvertToFloat exportable (#654)04635d2Merge pull request #655 from yeya24/change-omit-emptyc4974e5fix test43f0db5set http_headers to be omit emptyUpdates
github.com/spf13/cobrafrom 1.8.0 to 1.8.1Release notes
Sourced from github.com/spf13/cobra's releases.
... (truncated)
Commits
e94f6d0Address golangci-lint deprecation warnings, enable some more linters (#2152)8003b74Remove fully inactivated linters (#2148)5c2c1d6Consistent annotation names (#2140)5a1aceabuild(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4 (#2127)0fc86c2docs: update user guide (#2128)6b5f577More linting (#2099)bd914e5fix: remove deprecated io/ioutils package (#2120)1f80fa2chore: remove repetitive words (#2122)c69ae4cci: test golang 1.22 (#2113)a30cee5build(deps): bump actions/cache from 3 to 4 (#2102)Updates
golang.org/x/netfrom 0.25.0 to 0.26.0Commits
66e838cgo.mod: update golang.org/x dependencies6249541http2: avoid race in server handler SetReadDeadine/SetWriteDeadline603e3e6quic: disable X25519Kyber768Draft00 in tests67e8d0chttp2: report an error if goroutines outlive serverTester tests5608279http2: avoid corruption in priority write scheduler0d515a5http2: factor out frame read/write test functions9f5b79bhttp2: drop unused retry function03c24c2http2: use synthetic time in server tests022530chttp2: add a more full-featured test net.Conn410d19ehttp2: avoid racy access to clientStream.requestedGzipUpdates
golang.org/x/sysfrom 0.20.0 to 0.21.0Commits
673e0f9unix: skip ethtool driver test for busy interface6943ab6unix/linux: update glibc to 2.3992f3ad6unix: update to Linux kernel 6.9f34bb9fwindows: add net user enum6dfb94eunix: add types for SOCK_DIAGUpdates
golang.org/x/textfrom 0.15.0 to 0.16.0Commits
9c2f3a2cmd/gotext: fix segfault in extract & rewrite commands59e1219message: optimize lookupAndFormat function for better performancea20a3e2x/text: update x/tools for go/ssa range-over-func fixUpdates
google.golang.org/protobuffrom 1.34.1 to 1.34.2Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions