Update Go deps by renovate[bot] · Pull Request #409 · cerbos/cloud-api

renovate · 2026-05-18T01:23:11Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
cel.dev/expr	`v0.25.1` → `v0.25.2`	indirect	patch
github.com/clipperhouse/uax29/v2	`v2.2.0` → `v2.7.0`	indirect	minor
github.com/fatih/color	`v1.18.0` → `v1.19.0`	indirect	minor
github.com/fsnotify/fsnotify	`v1.9.0` → `v1.10.1`	indirect	minor
github.com/google/cel-go	`v0.28.0` → `v0.28.1`	indirect	patch
github.com/jedib0t/go-pretty/v6	`v6.7.8` → `v6.7.10`	indirect	patch
github.com/klauspost/compress	`v1.17.11` → `v1.18.6`	indirect	minor
github.com/klauspost/cpuid/v2	`v2.2.8` → `v2.3.0`	indirect	minor
github.com/knadh/koanf/v2	`v2.3.2` → `v2.3.4`	indirect	patch
github.com/mattn/go-isatty	`v0.0.20` → `v0.0.22`	indirect	patch
github.com/mattn/go-runewidth	`v0.0.19` → `v0.0.23`	indirect	patch
github.com/prometheus/client_golang	`v1.21.1` → `v1.23.2`	indirect	minor
github.com/prometheus/client_model	`v0.6.1` → `v0.6.2`	indirect	patch
github.com/prometheus/common	`v0.62.0` → `v0.67.5`	indirect	minor
github.com/prometheus/procfs	`v0.15.1` → `v0.20.1`	indirect	minor
github.com/rs/zerolog	`v1.34.0` → `v1.35.1`	indirect	minor
github.com/stretchr/objx	`v0.5.2` → `v0.5.3`	indirect	patch
go (source)	`1.26.2` → `1.26.3`	toolchain	patch
golang.org/x/crypto	`v0.50.0` → `v0.51.0`	require	minor
golang.org/x/exp	`746e56f` → `74f9aab`	indirect	digest
golang.org/x/exp	`42675ad` → `74f9aab`	indirect	digest
golang.org/x/mod	`v0.35.0` → `v0.36.0`	indirect	minor
golang.org/x/net	`v0.53.0` → `v0.54.0`	require	minor
golang.org/x/sys	`v0.43.0` → `v0.44.0`	indirect	minor
golang.org/x/term	`v0.42.0` → `v0.43.0`	indirect	minor
golang.org/x/text	`v0.36.0` → `v0.37.0`	indirect	minor
golang.org/x/tools	`v0.44.0` → `v0.45.0`	require	minor
google.golang.org/genproto/googleapis/api	`e10c466` → `3700d41`	indirect	digest
google.golang.org/genproto/googleapis/rpc	`60b97b3` → `3700d41`	require	digest
nikand.dev/go/hacked	`0939a5c` → `07820a7`	indirect	digest
tlog.app/go/errors	`v0.11.0` → `v0.20.0`	indirect	minor
tlog.app/go/loc	`v0.7.0` → `v0.7.2`	indirect	patch
tlog.app/go/tlog	`v0.25.2-0.20250211180435-0d82ae6285a8` → `v0.26.1`	indirect	minor

Release Notes

google/cel-spec (cel.dev/expr)

`v0.25.2`

Compare Source

What's Changed

Add conformance tests for (string).reverse() by @jnthntatum in #491
Updates to the conformance tests for integer values in %e and %f format directives by @TristonianJones in #495
Add automated BCR publishing on release tags by @mmorel-35 in #498
Add clarification on scoping rules. by @jnthntatum in #506
Networking extension conformance tests by @TristonianJones in #507
Add conformance test cases for null assignability around repeated fields and maps by @l46kok in #510

New Contributors

@mmorel-35 made their first contribution in #498

Full Changelog: google/cel-spec@v0.25.1...v0.25.2

clipperhouse/uax29 (github.com/clipperhouse/uax29/v2)

What's Changed

Unicode 17 by @aymanbagabas in #44
Fast paths for ASCII by @clipperhouse in #42

Breaking change

The returned iterator type from FromString() and FromBytes() is now a pointer. This will not present a problem if you are just using it in the typical way, which is assigning to a local variable and iterating.

If you are embedding this iterator into another object, and therefore declaring its type, this change might break your compilation. You’ll need to change to a pointer type. Apologies if so — this seems like a small enough change that a v3 would be a bit much.

New Contributors

@aymanbagabas made their first contribution in #44

Full Changelog: clipperhouse/uax29@v2.4.0...v2.5.0

`v2.4.0`

Compare Source

Adds Unicode 16 support

What's Changed

Unicode 16 by @clipperhouse in #41

Full Changelog: clipperhouse/uax29@v2.3.0...v2.4.0

`v2.3.1`

Compare Source

`v2.3.0`

Compare Source

fatih/color (github.com/fatih/color)

`v1.19.0`

Compare Source

What's Changed

Bump golang.org/x/sys from 0.25.0 to 0.28.0 by @dependabot[bot] in #246
Fix for issue #230 set/unsetwriter symmetric wrt color support detection by @ataypamart in #243
chore: go mod cleanup by @sashamelentyev in #244
Bump golang.org/x/sys from 0.28.0 to 0.30.0 by @dependabot[bot] in #249
Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14 by @dependabot[bot] in #248
Update CI and go deps by @fatih in #254
Bump golang.org/x/sys from 0.31.0 to 0.37.0 by @dependabot[bot] in #268
fix: include escape codes in byte counts from Fprint, Fprintf by @qualidafial in #282
Bump golang.org/x/sys from 0.37.0 to 0.40.0 by @dependabot[bot] in #277
fix: add nil check for os.Stdout to prevent panic on Windows services by @majiayu000 in #275
Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0 by @dependabot[bot] in #259
Bump actions/checkout from 4 to 6 by @dependabot[bot] in #273
Optimize Color.Equals performance (O(n²) → O(n)) by @UnSubble in #269
Bump actions/setup-go from 5 to 6 by @dependabot[bot] in #266

New Contributors

@ataypamart made their first contribution in #243
@sashamelentyev made their first contribution in #244
@qualidafial made their first contribution in #282
@majiayu000 made their first contribution in #275
@UnSubble made their first contribution in #269

Full Changelog: fatih/color@v1.18.0...v1.19.0

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

`v1.10.1`

Compare Source

Changes and fixes

inotify: don't remove sibling watches sharing a path prefix (#754)
inotify, windows: don't rename sibling watches sharing a path prefix
(#755)

`v1.10.0`

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes

inotify: improve initialization error message (#731)
inotify: send Rename event if recursive watch is renamed (#696)
inotify: avoid copying event buffers when reading names (#741)
kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)
kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)
windows: fix nil pointer dereference in remWatch (#736)
windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)

google/cel-go (github.com/google/cel-go)

`v0.28.1`

Compare Source

What's Changed

fix: deleted IntToDuration overload by @alexsnaps in #1300
Support shorthand types in env yaml and REPL by @jnthntatum in #1301
Preserve operation interrupted in ContextEval error by @dims in #1303
Use shorthand type specifiers in env yaml files by @jnthntatum in #1305
Cost estimation and tracking for strings extension by @TristonianJones in #1307
Update repl type string for doubles by @TristonianJones in #1308

New Contributors

@alexsnaps made their first contribution in #1300
@dims made their first contribution in #1303

Full Changelog: google/cel-go@v0.28.0...v0.28.1

jedib0t/go-pretty (github.com/jedib0t/go-pretty/v6)

`v6.7.10`

Compare Source

What's Changed

Fix panic on text align with unicode by @edznux-dd in #404

New Contributors

@edznux-dd made their first contribution in #404

Full Changelog: jedib0t/go-pretty@v6.7.9...v6.7.10

`v6.7.9`

Compare Source

What's Changed

table: markdown padding for human-friendly output; fixes #402 by @jedib0t in #403

Full Changelog: jedib0t/go-pretty@v6.7.8...v6.7.9

klauspost/compress (github.com/klauspost/compress)

`v1.18.6`

Compare Source

What's Changed

s2: Fix amd64 stack frame corruption by @klauspost in #1145
gzhttp: Canonicalize ETag header by @justinmayhew in #1139
perf: pool hash tables in Go encode paths to reduce allocations by @huynhanx03 in #1143

New Contributors

@justinmayhew made their first contribution in #1139
@huynhanx03 made their first contribution in #1143
@thaJeztah made their first contribution in #1144

Full Changelog: klauspost/compress@v1.18.5...v1.18.6

`v1.18.5`

Compare Source

What's Changed

zstd: Fix crash when changing encoder dictionary with same ID by @klauspost in #1135
zstd: Default to full zero frames by @klauspost in #1134
flate: Clean up histogram order by @klauspost in #1133

Full Changelog: klauspost/compress@v1.18.4...v1.18.5

`v1.18.4`

Compare Source

What's Changed

gzhttp: Add zstandard to server handler wrapper by @klauspost in #1121
zstd: Add ResetWithOptions to encoder/decoder by @klauspost in #1122
gzhttp: preserve qvalue when extra parameters follow in Accept-Encoding by @analytically in #1116

New Contributors

@analytically made their first contribution in #1116
@ethaizone made their first contribution in #1124
@zwass made their first contribution in #1125

Full Changelog: klauspost/compress@v1.18.2...v1.18.4

`v1.18.3`

Compare Source

Downstream CVE-2025-61728

See golang/go#77102

Full Changelog: klauspost/compress@v1.18.2...v1.18.3

`v1.18.2`

Compare Source

What's Changed

flate: Fix invalid encoding on level 9 with single value input by @klauspost in #1115
flate: reduce stateless allocations by @RXamzin in #1106
build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 in the github-actions group by @dependabot[bot] in #1111

v1.18.1 is marked "retracted" due to invalid flate/zip/gzip encoding.

New Contributors

@RXamzin made their first contribution in #1106

Full Changelog: klauspost/compress@v1.18.1...v1.18.2

`v1.18.1`

Compare Source

What's Changed

zstd: Fix incorrect buffer size in dictionary encodes by @klauspost in #1059
s2: check for cap, not len of buffer in EncodeBetter/Best by @vdarulis in #1080
zstd: Add simple zstd EncodeTo/DecodeTo functions by @klauspost in #1079
zlib: Avoiding extra allocation in zlib.reader.Reset by @travelpolicy in #1086
gzhttp: remove redundant err check in zstdReader by @ryanfowler in #1090
Run modernize. Deprecate Go 1.22 by @klauspost in #1095
flate: Simplify matchlen by @klauspost in #1101
flate: Add examples by @klauspost in #1102
flate: Use exact sizes for huffman tables by @klauspost in #1103
flate: Faster load+store by @klauspost in #1104
Add notice to S2 about MinLZ by @klauspost in #1065

New Contributors

@wooffie made their first contribution in #1069
@vdarulis made their first contribution in #1080
@travelpolicy made their first contribution in #1086
@ryanfowler made their first contribution in #1090

Full Changelog: klauspost/compress@v1.18.0...v1.18.1

`v1.18.0`

Compare Source

What's Changed

Deprecate Go 1.21 and add 1.24 by @klauspost in #1055
Add unsafe little endian loaders by @klauspost in #1036
fix: check r.err != nil but return a nil value error err by @alingse in #1028
refactor: use built-in min function by @Juneezee in #1038
zstd: use slices.Max for max value in slice by @Juneezee in #1041
flate: Simplify L4-6 loading by @klauspost in #1043
flate: Simplify matchlen (remove asm) by @klauspost in #1045
s2: Add block decode fuzzer by @klauspost in #1044
s2: Improve small block compression speed w/o asm by @klauspost in #1048
flate: Fix matchlen L5+L6 by @klauspost in #1049
flate: Cleanup & reduce casts by @klauspost in #1050

New Contributors

@tcpdumppy made their first contribution in #1021
@sam9291 made their first contribution in #1022
@dezza made their first contribution in #1023
@alingse made their first contribution in #1028
@hyunsooda made their first contribution in #1031
@Juneezee made their first contribution in #1038
@Bbulatov made their first contribution in #1052

Full Changelog: klauspost/compress@v1.17.11...v1.18.0

klauspost/cpuid (github.com/klauspost/cpuid/v2)

`v2.3.0`

Compare Source

What's Changed

Add in PMU parsing from CPUID leaf 0xA for Intel processors by @echiugoog in #165
Add SGXPQC detection by @ozhuraki in #163
Detect AMD TSA mitigations by @klauspost in #166

New Contributors

@echiugoog made their first contribution in #165

Full Changelog: klauspost/cpuid@v2.2.11...v2.3.0

`v2.2.11`

Compare Source

What's Changed

Add AMXTRANSPOSE detection by @ozhuraki in #156
Add SM3, SM4 detection on x86 by @ozhuraki in #157
darwin/arm64: fix SIMD detection and improve ARM feature probing by @HippoBaro in #160
fix: Fix division by zero in physicalCores on intel by @skartikey in #162

New Contributors

@HippoBaro made their first contribution in #160
@skartikey made their first contribution in #162

Full Changelog: klauspost/cpuid@v2.2.10...v2.2.11

`v2.2.10`

Compare Source

What's Changed

Add rest of fields from ID_AA64ISAR0_EL1 by @craciunoiuc in #152
Add AMXCOMPLEX detection by @ozhuraki in #153
Add AMXTF32 detection by @ozhuraki in #154
Update versions & releaser by @klauspost in #155

New Contributors

@craciunoiuc made their first contribution in #152

Full Changelog: klauspost/cpuid@v2.2.9...v2.2.10

`v2.2.9`

Compare Source

What's Changed

Add Arm SVE Vector and Predicate lengths by @klauspost in #146
Add Hypervisor Vendor by @brianmcgee in #147
cpuid: Add AMX FP8 detection by @ozhuraki in #148
Fix threadsPerCore check for Zen 2 (AMD) by @maksimio in #149

New Contributors

@brianmcgee made their first contribution in #147
@maksimio made their first contribution in #149

Full Changelog: klauspost/cpuid@v2.2.8...v2.2.9

knadh/koanf (github.com/knadh/koanf/v2)

`v2.3.4`

Compare Source

What's Changed

Bump github.com/nats-io/nats-server/v2 from 2.10.27 to 2.11.12 in /providers/nats by @dependabot[bot] in #400
Bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 in /providers/kiln by @dependabot[bot] in #399
Bump google.golang.org/grpc from 1.71.1 to 1.79.3 in /providers/etcd by @dependabot[bot] in #405
fix: hold RLock during copy in Get to prevent concurrent map access by @alexchenai in #406
Add ability to check for prior values in cliflagv3.ProviderWithConfig() just like posflag by @knadh in #403

New Contributors

@alexchenai made their first contribution in #406

Full Changelog: knadh/koanf@v2.3.3...v2.3.4

`v2.3.3`

Compare Source

What's Changed

Fix deadlock in recursive Get*() calls in custom merge function. 2f44276
Bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 in /examples by @dependabot[bot] in #398

Full Changelog: knadh/koanf@v2.3.2...v2.3.3

mattn/go-isatty (github.com/mattn/go-isatty)

`v0.0.22`

Compare Source

`v0.0.21`

Compare Source

mattn/go-runewidth (github.com/mattn/go-runewidth)

`v0.0.23`

Compare Source

`v0.0.22`

Compare Source

`v0.0.21`

Compare Source

`v0.0.20`

Compare Source

prometheus/client_golang (github.com/prometheus/client_golang)

`v1.23.2`: - 2025-09-05

Compare Source

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

All Changes

[release-1.23] Upgrade to prometheus/common@v0.66.1 by @aknuds1 in #1869
[release-1.23] Cut v1.23.2 by @aknuds1 in #1870

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

`v1.23.1`: - 2025-09-04

Compare Source

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

All Changes

[release-1.23] Upgrade to prometheus/common v0.66 by @aknuds1 in #1866
[release-1.23] Cut v1.23.1 by @aknuds1 in #1867

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

`v1.23.0`: - 2025-07-30

Compare Source

[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812
[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766
[FEATURE] Add exemplars for native histograms #1686
[ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823
[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833
[BUGFIX] exp/api: client prompt return on context cancellation #1729

All Changes

* Update example test by @SuperQ in https://github.com/prometheus/client_golang/pull/1770 * build(deps): bump golang.org/x/net from 0.34.0 to 0.36.0 in /tutorials/whatsup by @dependabot[bot] in https://github.com/prometheus/client_golang/pull/1776 * Synchronize common files from prometheus/prometheus by @prombot in https://github.com/prometheus/client_golang/pull/1771 * Synchronize common files from prometheus/prometheus by @prombot in https://github.com/prometheus/client_golan

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-05-18T01:23:14Z

ℹ️ Artifact update notice

File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

1 additional dependency was updated

Details:

Package	Change
`nikand.dev/go/cbor`	`v0.0.0-20250209114510-2072ad4734c5` -> `v0.0.0-20250217185914-a319e53bb3df`

github-actions · 2026-05-18T01:23:26Z

The latest Buf updates on your PR. Results from workflow Pull Request / buf (pull_request).

Build	Format	Lint	Breaking	Updated (UTC)
`✅ passed`	`✅ passed`	`✅ passed`	`✅ passed`	May 18, 2026, 7:46 AM

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Signed-off-by: Charith Ellawala <charith@cerbos.dev>

renovate Bot added area/ci CI bots Bots kind/chore Chores labels May 18, 2026

Update Go deps

392dd0b

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot force-pushed the renovate/go-deps branch from 2c75dd9 to 392dd0b Compare May 18, 2026 07:33

Fix lint issue

abebf21

Signed-off-by: Charith Ellawala <charith@cerbos.dev>

charithe approved these changes May 18, 2026

View reviewed changes

charithe merged commit d5d0534 into main May 18, 2026
7 checks passed

charithe deleted the renovate/go-deps branch May 18, 2026 07:49

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update Go deps#409

Update Go deps#409
charithe merged 2 commits into
mainfrom
renovate/go-deps

renovate Bot commented May 18, 2026 •

edited

Loading

Uh oh!

renovate Bot commented May 18, 2026

Uh oh!

github-actions Bot commented May 18, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented May 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

Breaking change

New Contributors

What's Changed

What's Changed

New Contributors

Changes and fixes

Changes and fixes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

v1.23.2: - 2025-09-05

v1.23.1: - 2025-09-04

v1.23.0: - 2025-07-30

Configuration

Uh oh!

renovate Bot commented May 18, 2026

ℹ️ Artifact update notice

File name: tools/go.mod

Uh oh!

github-actions Bot commented May 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented May 18, 2026 •

edited

Loading

`v1.23.2`: - 2025-09-05

`v1.23.1`: - 2025-09-04

`v1.23.0`: - 2025-07-30

github-actions Bot commented May 18, 2026 •

edited

Loading