Skip to content

fix(deps): update go#1624

Merged
MrAlias merged 8 commits into
mainfrom
renovate/go
Apr 2, 2026
Merged

fix(deps): update go#1624
MrAlias merged 8 commits into
mainfrom
renovate/go

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Mar 23, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/XSAM/otelsql v0.41.0 → v0.42.0 age confidence require minor
github.com/cilium/ebpf v0.20.0 → v0.21.0 age confidence require minor
github.com/go-playground/validator/v10 v10.30.1 → v10.30.2 age confidence require patch
github.com/goccy/go-json v0.10.5 → v0.10.6 age confidence require patch
github.com/golangci/golangci-lint/v2 v2.11.2 → v2.11.4 age confidence require patch
github.com/hashicorp/go-version v1.8.0 → v1.9.0 age confidence require minor
github.com/jackc/pgx/v5 v5.8.0 → v5.9.1 age confidence require minor
github.com/klauspost/compress v1.18.4 → v1.18.5 age confidence require patch
github.com/lib/pq v1.11.2 → v1.12.1 age confidence require minor
github.com/lib/pq v1.10.9 → v1.12.1 age confidence require minor
github.com/redis/go-redis/v9 v9.5.5 → v9.18.0 age confidence require minor
go.opentelemetry.io/collector/component v1.53.0 → v1.54.0 age confidence require minor
go.opentelemetry.io/collector/config/configgrpc v0.147.0 → v0.148.0 age confidence require minor
go.opentelemetry.io/collector/config/confighttp v0.147.0 → v0.148.0 age confidence require minor
go.opentelemetry.io/collector/config/configopaque v1.53.0 → v1.54.0 age confidence require minor
go.opentelemetry.io/collector/config/configretry v1.53.0 → v1.54.0 age confidence require minor
go.opentelemetry.io/collector/config/configtelemetry v0.147.0 → v0.148.0 age confidence require minor
go.opentelemetry.io/collector/config/configtls v1.53.0 → v1.54.0 age confidence require minor
go.opentelemetry.io/collector/confmap v1.53.0 → v1.54.0 age confidence require minor
go.opentelemetry.io/collector/consumer v1.53.0 → v1.54.0 age confidence require minor
go.opentelemetry.io/collector/consumer/consumertest v0.147.0 → v0.148.0 age confidence require minor
go.opentelemetry.io/collector/exporter/debugexporter v0.147.0 → v0.148.0 age confidence require minor
go.opentelemetry.io/collector/exporter/otlpexporter v0.147.0 → v0.148.0 age confidence require minor
go.opentelemetry.io/collector/exporter/otlphttpexporter v0.147.0 → v0.148.0 age confidence require minor
go.opentelemetry.io/collector/pdata v1.53.0 → v1.54.0 age confidence require minor
go.opentelemetry.io/collector/receiver v1.53.0 → v1.54.0 age confidence require minor
go.opentelemetry.io/collector/receiver/receivertest v0.147.0 → v0.148.0 age confidence require minor
golang.org/x/mod v0.33.0 → v0.34.0 age confidence require minor
golang.org/x/net v0.51.0 → v0.52.0 age confidence require minor
golang.org/x/sys v0.41.0 → v0.42.0 age confidence require minor
k8s.io/api v0.35.2 → v0.35.3 age confidence require patch
k8s.io/apimachinery v0.35.2 → v0.35.3 age confidence require patch
k8s.io/client-go v0.35.2 → v0.35.3 age confidence require patch
modernc.org/sqlite v1.46.1 → v1.48.0 age confidence require minor
sigs.k8s.io/controller-runtime/tools/setup-envtest 105baa6 → 773c064 age confidence require digest

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

XSAM/otelsql (github.com/XSAM/otelsql)

v0.42.0

Compare Source

This is the first release of otelsql.
It contains instrumentation for trace and depends on OTel v0.18.0.

Added
  • Instrumentation for trace.
  • CI files.
  • Example code for a basic usage.
  • Apache-2.0 license.
cilium/ebpf (github.com/cilium/ebpf)

v0.21.0: : Struct Ops, Weak Symbols and BTF deduplication

Compare Source

Hi, everyone! The Cilium project is proud to announce v0.21.0 of ebpf-go, our first major 2026 feature release. Please note that this version comes with a few breaking changes for XDP users that may require some intervention based on your use case, so please read the following section carefully before upgrading! We've also removed some long-deprecated APIs.

Breaking changes

XDP Attach Type

This release saw a change to the ELF parsing logic, specifically to XDP programs. Previously, XDP programs had their ProgramSpec.AttachType set to AttachNone. Prompted by upstream changes in Linux 6.18, XDP programs now come with an AttachXDP attach type. This change ensures compatibility with kernels going forward, as well as better interoperability with libbpf-based tools using shared PROG_ARRAY maps.

tl;dr: Linux 6.18 and later disallows mixing attach types within the same program array.

If your application uses a pinned program array, you may need to manually change the attach type of your XDP programs to AttachNone before they are loaded to ensure they can still be inserted into maps containing pre-upgrade programs.

The same goes for BPF links. If you're updating an XDP link created by an older version of ebpf-go, you need to ensure your XDP program is loaded with the same attach type the link was initially created with, or updating will fail with EINVAL.

For an example of how to deal with this change, here's the the Cilium PR that implemented logic to try both attach types when updating links.

Windows helper function rename

ebpf-for-windows was upgraded from 0.21.0 to v1.0.0-rc1. efW made breaking changes to the names of helper functions, our API has been updated to match:

New Features

  • Struct ops — The ELF reader can now parse struct ops sections, building MapSpecs and resolving function-pointer members. link.AttachStructOps has been added to allow attaching a StructOpsMap as a link. A sched_ext example can be found here.
  • Weak symbol & ELF linking — Programs and maps defined as weak symbols are now fully supported. The ELF reader performs per-symbol decoding for both ProgramSpec and MapSpec, meaning linked objects (produced via bpftool gen object) are now handled correctly.
  • BTF type deduplication — btf.Builder can now deduplicate types while generating a BTF blob. Deduplication can be enabled by passing BuilderOptions to NewBuilder with the Deduplication field set to true.
  • ProgramSpec.Compatible was added — ProgramSpec.Tag is now deprecated. The new ProgramSpec.Compatible method compares a loaded program's tag against both SHA-1 and SHA-256 hashes of the spec, ensuring correct behaviour across kernels — including kernel v6.18+, which switched to SHA-256 for program hashing.
  • ProgramInfo improvements — The program name as reported by ProgramInfo.Name is now sourced from BTF func info when available to provide the full program name if it's longer than 15 bytes.
  • LinkInfo improvements — Added a number of methods and types related to reading back link info.
  • Reverse symbol lookup — Added Executable.Symbol to resolve addresses to a symbol and relative offset.
  • Uprobe/kprobe link feature probing — HaveBPFLinkKprobeMulti, HaveBPFLinkUprobeMulti, and HaveBPFLinkKprobeSession are now exported from the features package, making it easier to probe for multi-attach support before loading programs.
  • Program run batching — A new RunOptions.BatchSize option has been added to support batching when running programs.

Bug Fixes

  • Allow weak kfuncs loading without CAP_SYS_ADMIN — Loading programs with weak kfuncs on kernels that don't have the kfunc no longer fails with "operation not permitted" when the caller lacks CAP_SYS_ADMIN. The permission error is now treated as "not found" for weak kfuncs.
  • ELF reader nil panic — Fixed a panic that could occur when loading an ELF without BTF due to a nil extInfo pointer. Along with the fix, a suite of regression tests was added that exercises the core loader logic with non-BTF ELFs as well.
  • QueryResult.HaveLinkInfo heuristic — The heuristic has been updated to check for at least one attached program with a non-zero link ID, fixing a false positive introduced by a kernel change that began populating the revision field for cgroup queries.
  • Windows map/program count — Increased the default map and program count on Windows to reduce failures when loading collections with more maps than previously allocated.

More breaking changes

Deprecations

In this release we have removed a number of features which had been deprecated for a while.

Breaking changes to Memory, Variable and VariableSpec
Breaking changes to link info
Breaking changes to BTF API

We exported methods and types from the btf package. This allowed us to directly assign BTF func info, line info and CO-RE relocations to instructions from outside of the btf package, making some methods unneeded and thus got removed.

What's Changed

New Contributors

Full Changelog: cilium/ebpf@v0.20.0...v0.21.0

go-playground/validator (github.com/go-playground/validator/v10)

v10.30.2

Compare Source

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.30.1...v10.30.2

goccy/go-json (github.com/goccy/go-json)

v0.10.6: 0.10.6

Compare Source

What's Changed

New Contributors

Full Changelog: goccy/go-json@v0.10.5...v0.10.6

golangci/golangci-lint (github.com/golangci/golangci-lint/v2)

v2.11.4

Compare Source

Released on 2026-03-22

  1. Linters bug fixes
    • govet-modernize: from 0.42.0 to 0.43.0
    • noctx: from 0.5.0 to 0.5.1
    • sqlclosecheck: from 0.5.1 to 0.6.0

v2.11.3

Compare Source

Released on 2026-03-10

  1. Linters bug fixes
hashicorp/go-version (github.com/hashicorp/go-version)

v1.9.0

Compare Source

What's Changed

Enhancements
Internal

New Contributors

Full Changelog: hashicorp/go-version@v1.8.0...v1.9.0

jackc/pgx (github.com/jackc/pgx/v5)

v5.9.1

Compare Source

v5.9.0

Compare Source

klauspost/compress (github.com/klauspost/compress)

v1.18.5

Compare Source

What's Changed

Full Changelog: klauspost/compress@v1.18.4...v1.18.5

lib/pq (github.com/lib/pq)

v1.12.1

Compare Source

  • Look for pgpass file in ~/.pgpass instead of ~/.postgresql/pgpass (#​1300).

  • Don't clear password if directly set on pq.Config (#​1302).

v1.12.0

Compare Source

  • The next release may change the default sslmode from require to prefer.
    See #​1271 for details.

  • CopyIn() and CopyInToSchema() have been marked as deprecated. These are
    simple query builders and not needed for COPY [..] FROM STDIN support (which
    is not deprecated). (#​1279)

    // Old
tx.Prepare(CopyIn("temp", "num", "text", "blob", "nothing"))

// Replacement
tx.Prepare(`copy temp (num, text, blob, nothing) from stdin`)
Features

  • Support protocol 3.2, and the min_protocol_version and
    max_protocol_version DSN parameters (#​1258).

  • Support sslmode=prefer and sslmode=allow (#​1270).

  • Support ssl_min_protocol_version and ssl_max_protocol_version (#​1277).

  • Support connection service file to load connection details (#​1285).

  • Support sslrootcert=system and use ~/.postgresql/root.crt as the default
    value of sslrootcert (#​1280, #​1281).

  • Add a new pqerror package with PostgreSQL error codes (#​1275).

    For example, to test if an error is a UNIQUE constraint violation:

    if pqErr, ok := errors.AsType[*pq.Error](err); ok && pqErr.Code == pqerror.UniqueViolation {
    log.Fatalf("email %q already exsts", email)
}

    To make this a bit more convenient, it also adds a pq.As() function:

    pqErr := pq.As(err, pqerror.UniqueViolation)
if pqErr != nil {
    log.Fatalf("email %q already exsts", email)
}
Fixes

  • Fix SSL key permission check to allow modes stricter than 0600/0640#1265 (#​1265).

  • Fix Hstore to work with binary parameters (#​1278).

  • Clearer error when starting a new query while pq is still processing another
    query (#​1272).

  • Send intermediate CAs with client certificates, so they can be signed by an
    intermediate CA (#​1267).

  • Use time.UTC for UTC aliases such as Etc/UTC (#​1282).

redis/go-redis (github.com/redis/go-redis/v9)

v9.18.0: 9.18.0

Compare Source

Redis 8.6 Support

Added support for Redis 8.6, including new commands and features for streams idempotent production and HOTKEYS.

Smart Client Handoff (Maintenance Notifications) for Cluster

note: Pending RS version release

This release introduces comprehensive support for Redis Enterprise Cluster maintenance notifications via SMIGRATING/SMIGRATED push notifications. The client now automatically handles slot migrations by:

  • Relaxing timeouts during migration (SMIGRATING) to prevent false failures
  • Triggering lazy cluster state reloads upon completion (SMIGRATED)
  • Enabling seamless operations during Redis Enterprise maintenance windows

(#​3643) by @​ndyakov

OpenTelemetry Native Metrics Support

Added comprehensive OpenTelemetry metrics support following the OpenTelemetry Database Client Semantic Conventions. The implementation uses a Bridge Pattern to keep the core library dependency-free while providing optional metrics instrumentation through the new extra/redisotel-native package.

Metric groups include:

  • Command metrics: Operation duration with retry tracking
  • Connection basic: Connection count and creation time
  • Resiliency: Errors, handoffs, timeout relaxation
  • Connection advanced: Wait time and use time
  • Pubsub metrics: Published and received messages
  • Stream metrics: Processing duration and maintenance notifications

(#​3637) by @​ofekshenawa

✨ New Features
  • HOTKEYS Commands: Added support for Redis HOTKEYS feature for identifying hot keys based on CPU consumption and network utilization (#​3695) by @​ofekshenawa
  • Streams Idempotent Production: Added support for Redis 8.6+ Streams Idempotent Production with ProducerID, IdempotentID, IdempotentAuto in XAddArgs and new XCFGSET command (#​3693) by @​ofekshenawa
  • NaN Values for TimeSeries: Added support for NaN (Not a Number) values in Redis time series commands (#​3687) by @​ofekshenawa
  • DialerRetries Options: Added DialerRetries and DialerRetryTimeout to ClusterOptions, RingOptions, and FailoverOptions (#​3686) by @​naveenchander30
  • ConnMaxLifetimeJitter: Added jitter configuration to distribute connection expiration times and prevent thundering herd (#​3666) by @​cyningsun
  • Digest Helper Functions: Added DigestString and DigestBytes helper functions for client-side xxh3 hashing compatible with Redis DIGEST command (#​3679) by @​ofekshenawa
  • SMIGRATED New Format: Updated SMIGRATED parser to support new format and remember original host:port (#​3697) by @​ndyakov
  • Cluster State Reload Interval: Added cluster state reload interval option for maintenance notifications (#​3663) by @​ndyakov
🐛 Bug Fixes
  • PubSub nil pointer dereference: Fixed nil pointer dereference in PubSub after WithTimeout() - pubSubPool is now properly cloned (#​3710) by @​Copilot
  • MaintNotificationsConfig nil check: Guard against nil MaintNotificationsConfig in initConn (#​3707) by @​veeceey
  • wantConnQueue zombie elements: Fixed zombie wantConn elements accumulation in `wan

Configuration

📅 Schedule: Branch creation - "before 6am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team as a code owner March 23, 2026 00:45
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Mar 23, 2026 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined
Post-upgrade command 'make go-mod-tidy' has not been added to the allowed list in allowedCommands
File name: undefined
Post-upgrade command 'make go-notices-update' has not been added to the allowed list in allowedCommands

@codecov
Copy link
Copy Markdown

codecov Bot commented Mar 23, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 44.95%. Comparing base (19c3387) to head (536df08).
⚠️ Report is 23 commits behind head on main.

Additional details and impacted files 
@@            Coverage Diff             @@
##             main    #1624      +/-   ##
==========================================
+ Coverage   44.48%   44.95%   +0.46%     
==========================================
  Files         337      339       +2     
  Lines       36472    37218     +746     
==========================================
+ Hits        16225    16731     +506     
- Misses      19225    19433     +208     
- Partials     1022     1054      +32
Flag Coverage Δ
integration-test 20.93% <ø> (+0.08%) ⬆️
integration-test-arm 0.00% <ø> (ø)
integration-test-vm-x86_64-5.15.152 0.00% <ø> (ø)
integration-test-vm-x86_64-6.10.6 0.00% <ø> (ø)
k8s-integration-test 2.11% <ø> (-0.05%) ⬇️
oats-test 0.00% <ø> (ø)
unittests 48.39% <ø> (+0.66%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate Bot force-pushed the renovate/go branch 25 times, most recently from 22c1f76 to fc0face Compare March 30, 2026 12:49
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Mar 31, 2026

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@MrAlias MrAlias mentioned this pull request Mar 31, 2026
Closed
@MrAlias

This comment was marked as outdated.

Sign in to view
@MrAlias
Copy link
Copy Markdown
Contributor

MrAlias commented Apr 2, 2026

It was pointed out in yesterday's SIG meeting that the cilium/ebpf upgrade contains a bug that prevents us including it in the upgrade. Rolling back.

@MrAlias MrAlias mentioned this pull request Apr 2, 2026
Closed
@MrAlias MrAlias merged commit f5e9a68 into main Apr 2, 2026
111 of 113 checks passed
@MrAlias MrAlias deleted the renovate/go branch April 2, 2026 19:48
@MrAlias
Copy link
Copy Markdown
Contributor

MrAlias commented Apr 2, 2026

The downgrade of github.com/redis/go-redis/v9 back to v9.5.5 needs to be tracked as follow-up work.

@MrAlias MrAlias mentioned this pull request Apr 2, 2026
Closed
@MrAlias
Copy link
Copy Markdown
Contributor

MrAlias commented Apr 2, 2026

The downgrade of github.com/redis/go-redis/v9 back to v9.5.5 needs to be tracked as follow-up work.

#1733

@MrAlias MrAlias added this to the v0.7.0 milestone Apr 3, 2026
@MrAlias MrAlias mentioned this pull request Apr 3, 2026
Closed
2 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@MrAlias MrAlias MrAlias approved these changes

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

v0.7.0

Development

Successfully merging this pull request may close these issues.

1 participant

@MrAlias