chore(deps): bump the go-dependencies group across 1 directory with 5 updates by dependabot[bot] · Pull Request #46 · craftgodotdev/craftgo

dependabot · 2026-07-23T04:14:41Z

Bumps the go-dependencies group with 4 updates in the / directory: github.com/getkin/kin-openapi, github.com/prometheus/client_golang, go.lsp.dev/jsonrpc2 and go.lsp.dev/protocol.

Updates github.com/getkin/kin-openapi from 0.124.0 to 0.145.0

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.145.0

What's Changed

openapi3: stop InternalizeRefs panicking on unresolved discriminator mappings by @snowyukitty in getkin/kin-openapi#1233

Full Changelog: getkin/kin-openapi@v0.144.0...v0.145.0

v0.144.0

What's Changed

openapi3filter: prefer non-empty value for repeated scalar query params by @sonnemusk in getkin/kin-openapi#1231

some fixes to please my moulinette by @fenollp in getkin/kin-openapi#1232

New Contributors

@sonnemusk made their first contribution in getkin/kin-openapi#1231

Full Changelog: getkin/kin-openapi@v0.143.0...v0.144.0

v0.143.0

What's Changed

openapi3: remove StringMap and its pre-OriginTree origin-stripping machinery by @reuvenharrison in getkin/kin-openapi#1219

openapi3: huge test suite: make it more parallel by @fenollp in getkin/kin-openapi#1221

openapi31: support 3.1+ reference metadata overrides by @AlexanderWangY in getkin/kin-openapi#1215

docs: move the StringMap changelog entry to v0.143.0 by @reuvenharrison in getkin/kin-openapi#1222

openapi3: add T.WalkParameters to visit every parameter in a document by @reuvenharrison in getkin/kin-openapi#1224

openapi3filter: reuse deepObject bracket regex by @matiasinsaurralde in getkin/kin-openapi#1225

openapi3filter: skip Split allocation for single-value array query params by @matiasinsaurralde in getkin/kin-openapi#1226

openapi3: preserve origin for a $ref to a schema under an arbitrary top-level key by @reuvenharrison in getkin/kin-openapi#1227

openapi3: stable codes for validation errors by @reuvenharrison in getkin/kin-openapi#1223

openapi3filter: skip schema checks for empty allowEmptyValue strings by @snowyukitty in getkin/kin-openapi#1228

openapi3gen: inline embedded struct with options-only JSON tag by @mvanhorn in getkin/kin-openapi#1229

New Contributors

@matiasinsaurralde made their first contribution in getkin/kin-openapi#1225

@snowyukitty made their first contribution in getkin/kin-openapi#1228

@mvanhorn made their first contribution in getkin/kin-openapi#1229

Full Changelog: getkin/kin-openapi@v0.142.0...v0.143.0

v0.142.0

What's Changed

openapi3: fix test that relied on now non-resolving domain by @fenollp in getkin/kin-openapi#1220

Full Changelog: getkin/kin-openapi@v0.141.0...v0.142.0

v0.141.0

What's Changed

openapi3filter: honor comma-separated and wildcard encoding.contentType by @utah-KT in getkin/kin-openapi#1201

openapi3: typed context wrappers for combinator and tag validation by @reuvenharrison in getkin/kin-openapi#1199

openapi3: enforce unique required entries and unique tag names in Validate() by @reuvenharrison in getkin/kin-openapi#1203

... (truncated)

Commits

88aa64c Merge commit from fork
f1a5b52 Merge commit from fork
27bc028 openapi3: stop InternalizeRefs panicking on unresolved discriminator mappings...
f0407d5 Merge commit from fork
c947670 some fixes to please my moulinette (#1232)
68ac2af Merge commit from fork
3e5d7f4 openapi3filter: prefer non-empty value for repeated scalar query params (#1231)
30e2923 Merge commit from fork
c11a481 openapi3gen: inline embedded struct with options-only JSON tag (#1229)
0fb1f0e openapi3filter: skip schema checks for empty allowEmptyValue strings (#1228)
Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.23.2 to 1.24.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.24.1 / 2026-07-23

Small bugfix release for promhttp.

What's Changed

[BUGFIX] promhttp: Fix panic on requests with nil URL. #2065

Full Changelog: prometheus/client_golang@v1.24.0...v1.24.1

v1.24.0 - 2026-07-20

Changes

[CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. #1862

[CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated model.NameValidationScheme global. Default behavior is unchanged; code that set NameValidationScheme = LegacyValidation no longer gets legacy enforcement at metric, label, and push-grouping construction. #2051

[CHANGE] api/prometheus/v1: Support matchers (matches[] parameter) in Rules method (Rules(ctx context.Context, matches []string) (RulesResult, error)). #1843

[CHANGE] api/prometheus/v1: Refactor LabelNames method to return model.LabelNames instead of []string for consistency across the API. #1850

[CHANGE] exp/api/remote: Simplify Store interface, rename Handler to WriteHandler, and encapsulate write response handling. #1855

[FEATURE] prometheus: Add new Go 1.26 runtime metrics (/sched/goroutines-created:goroutines, /sched/goroutines/not-in-go:goroutines, /sched/goroutines/runnable:goroutines, /sched/goroutines/running:goroutines, /sched/goroutines/waiting:goroutines, /sched/threads/total:threads). #1942

[FEATURE] prometheus: Add WithUnit(unit string) option and explicit OpenMetrics unit support in CounterOpts, GaugeOpts, SummaryOpts, and HistogramOpts. #1392

[FEATURE] prometheus: Expose descriptor construction error through public Err() method on Desc. #1902

[FEATURE] promhttp: Add opt-in HandlerOpts.CoalesceGather to deduplicate concurrent Gather calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. #1969

[FEATURE] promhttp: HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #1925

[FEATURE] api/prometheus/v1: Add query formatting endpoint support (/format_query) and FormatQuery(ctx context.Context, query string) (string, error) method. #1846, #1856

[FEATURE] api/prometheus/v1: Add support for /status/tsdb/blocks endpoint via TSDBBlocks(ctx context.Context) ([]TSDBBlock, error) method. #1896

[FEATURE] exp/api/remote: Export BackoffConfig to allow customization when using WithAPIBackoff. #1895

[FEATURE] exp/api/remote: Add RetryCallBack to allow custom logging or handling on retry attempts in the remote write client. #1888, #1890

[ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. #1860

[ENHANCEMENT] api: Use cloned http.DefaultTransport when constructing default HTTP clients to prevent accidental mutations of shared global transport state. #1885

[BUGFIX] prometheus: Recover from collector panics during Gather() and return an error instead of crashing the process. #1961

[BUGFIX] prometheus: Fix cpu-seconds unit suffix handling for metric go_cpu_classes_gc_mark_assist_cpu_seconds. #1991

[BUGFIX] promhttp: InstrumentHandlerDuration and InstrumentHandlerCounter no longer panic when given an observer/counter that does not implement ExemplarObserver/ExemplarAdder (e.g. a SummaryVec). The exemplar is dropped and the value is recorded via the plain Observe/Add path, matching the safe-cast already used by Timer.ObserveDurationWithExemplar. #2005

[BUGFIX] api/prometheus/v1: Fall back to GET requests when POST requests return 403 Forbidden or method not allowed. #2030

[BUGFIX] api: Respect context cancellation inside httpClient.Do. #1971

[BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. #1889

[BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917

[BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. #1927

build(deps): bump github.com/prometheus/procfs from 0.16.1 to 0.17.0 by @dependabot[bot] in prometheus/client_golang#1839

build(deps): bump golang.org/x/sys from 0.33.0 to 0.34.0 by @dependabot[bot] in prometheus/client_golang#1838

prometheus/collectors: use godoc link for runtime/metrics supported metrics by @xieyuschen in prometheus/client_golang#1844

Fix doc typo by @torrca in prometheus/client_golang#1849

Merge release-1.23 into main by @vesari in prometheus/client_golang#1851

build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 in the github-actions group by @dependabot[bot] in prometheus/client_golang#1852

Refactor LabelNames to return model.LabelNames type for consistency by @yshngg in prometheus/client_golang#1850

remote: simplified Store interface; renamed Handler to WriteHandler by @bwplotka in prometheus/client_golang#1855

feat(api/prometheus): add format_query endpoint for query formatting by @yshngg in prometheus/client_golang#1846

feat(api): add FormatQuery method to Prometheus v1 API by @yshngg in prometheus/client_golang#1856

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.24.1 / 2026-07-23

[BUGFIX] promhttp: Fix panic on requests with nil URL. #2065

1.24.0 / 2026-07-20

[CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. #1862

[CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated model.NameValidationScheme global. Default behavior is unchanged; code that set NameValidationScheme = LegacyValidation no longer gets legacy enforcement at metric, label, and push-grouping construction. #2051

[CHANGE] api/prometheus/v1: Support matchers (matches[] parameter) in Rules method (Rules(ctx context.Context, matches []string) (RulesResult, error)). #1843

[CHANGE] api/prometheus/v1: Refactor LabelNames method to return model.LabelNames instead of []string for consistency across the API. #1850

[CHANGE] exp/api/remote: Simplify Store interface, rename Handler to WriteHandler, and encapsulate write response handling. #1855

[FEATURE] prometheus: Add new Go 1.26 runtime metrics (/sched/goroutines-created:goroutines, /sched/goroutines/not-in-go:goroutines, /sched/goroutines/runnable:goroutines, /sched/goroutines/running:goroutines, /sched/goroutines/waiting:goroutines, /sched/threads/total:threads). #1942

[FEATURE] prometheus: Add WithUnit(unit string) option and explicit OpenMetrics unit support in CounterOpts, GaugeOpts, SummaryOpts, and HistogramOpts. #1392

[FEATURE] prometheus: Expose descriptor construction error through public Err() method on Desc. #1902

[FEATURE] promhttp: Add opt-in HandlerOpts.CoalesceGather to deduplicate concurrent Gather calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. #1969

[FEATURE] promhttp: HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #1925

[FEATURE] api/prometheus/v1: Add query formatting endpoint support (/format_query) and FormatQuery(ctx context.Context, query string) (string, error) method. #1846, #1856

[FEATURE] api/prometheus/v1: Add support for /status/tsdb/blocks endpoint via TSDBBlocks(ctx context.Context) ([]TSDBBlock, error) method. #1896

[FEATURE] exp/api/remote: Export BackoffConfig to allow customization when using WithAPIBackoff. #1895

[FEATURE] exp/api/remote: Add RetryCallBack to allow custom logging or handling on retry attempts in the remote write client. #1888, #1890

[ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. #1860

[ENHANCEMENT] api: Use cloned http.DefaultTransport when constructing default HTTP clients to prevent accidental mutations of shared global transport state. #1885

[BUGFIX] prometheus: Recover from collector panics during Gather() and return an error instead of crashing the process. #1961

[BUGFIX] prometheus: Fix cpu-seconds unit suffix handling for metric go_cpu_classes_gc_mark_assist_cpu_seconds. #1991

[BUGFIX] promhttp: InstrumentHandlerDuration and InstrumentHandlerCounter no longer panic when given an observer/counter that does not implement ExemplarObserver/ExemplarAdder (e.g. a SummaryVec). The exemplar is dropped and the value is recorded via the plain Observe/Add path, matching the safe-cast already used by Timer.ObserveDurationWithExemplar. #2005

[BUGFIX] api/prometheus/v1: Fall back to GET requests when POST requests return 403 Forbidden or method not allowed. #2030

[BUGFIX] api: Respect context cancellation inside httpClient.Do. #1971

[BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. #1889

[BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917

[BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. #1927

Commits

d6087ee release: cut v1.24.1 (#2076)
48dd383 Cut v1.24.0 (#2061)
a725305 Cut v1.24.0-rc.0 (#2058)
77c584f build(deps): update all Go dependencies in all go.mod files (#2059)
78262a7 feat(promhttp): add CoalesceGather option to deduplicate concurrent Gather ca...
34e9a7f Merge pull request #2055 from prombot/repo_sync
43749bc Update common Prometheus files
de19217 examples: improve simple main.go example (#1999)
20355eb fix: correct typos in comments and test error messages (#2049)
4cd2d3a test: fix two flaky tests (darwin start_time regex, memstats HeapReleased dri...
Additional commits viewable in compare view

Updates go.lsp.dev/jsonrpc2 from 0.10.0 to 1.0.1

Release notes

Sourced from go.lsp.dev/jsonrpc2's releases.

v1.0.1

What's Changed

Clean up raw copies and test diagnostics by @zchee in go-language-server/jsonrpc2#36

Full Changelog: go-language-server/jsonrpc2@v1.0.0...v1.0.1

Commits

285c360 tests: close compat listener during cleanup
15e6fec tests: expose cleanup regressions early
1a0ccec codec: reduce raw-byte copy helper noise
c9aebf7 lint: preserve hot-path shape under CI gates
7d67a87 docs: drop internal plan codenames from the benchmark ledger
d0b1417 benchmark: drop internal plan codenames from harness comments
7953d8f docs: record the null-answer contract delta in the benchmark ledger
f67cd9a docs: reconcile every ownership doc with the borrowed-request contract
08ee299 jsonrpc2: classify incoming frames with a single scan
a685e84 jsonrpc2: consolidate the direct-return surface as the only handler API
Additional commits viewable in compare view

Updates go.lsp.dev/protocol from 0.12.0 to 1.0.1

Release notes

Sourced from go.lsp.dev/protocol's releases.

v1.0.1

What's Changed

keep unimplemented notifications from closing connections by @zchee in go-language-server/protocol#60

Full Changelog: go-language-server/protocol@v1.0.0...v1.0.1

v1.0.0

What's Changed

client: Fix response type for workspace/applyEdit by @ja-he in go-language-server/protocol#36

context: fix context key by @hiroebe in go-language-server/protocol#46

fix: it must be possible to have a nil range to replace all content in the TextDocumentChangeEvent by @a-h in go-language-server/protocol#43

protocol: regenerate root onto LSP 3.18 with union-aware jsonrpc2 transport by @zchee in go-language-server/protocol#59

New Contributors

@ja-he made their first contribution in go-language-server/protocol#36

@hiroebe made their first contribution in go-language-server/protocol#46

@a-h made their first contribution in go-language-server/protocol#43

Full Changelog: go-language-server/protocol@v0.12.0...v1.0.0

Commits

175c67b go.mod: update dependencies to latest
dbfd534 genlsp: guard private-base flattening cycles
dadabcc genlsp: prevent private-base flattening collisions
19a4c8b cleanup: keep protocol PR review focused
c735ab2 genlsp: deduplicate fields and embeds during structure flattening
8bb731f nullable: add NewNullable and NullNullable constructors
ec635d6 genlsp: flatten _-prefixed bases and emit empty struct{}
6cdcfb5 unimplemented: return nil from notification handlers to keep the connection a...
2d08f2b go.mod: update dependencies to latest
af6ba92 golangci: exclude nilnil and maintidx on test files
Additional commits viewable in compare view

Updates go.lsp.dev/uri from 0.3.0 to 1.0.1

Release notes

Sourced from go.lsp.dev/uri's releases.

v1.0.1

What's Changed

Keep URI maintenance surface focused by @zchee in go-language-server/uri#5

Full Changelog: go-language-server/uri@v1.0.0...v1.0.1

Commits

3b145b1 path: avoid avoidable posixJoin allocations
425215a cleanup: keep URI maintenance surface focused
77008ac github: fix FUNDING.yml
7d9d40a README: update README.md
54d58b8 docs: clarify canonical escaping for URI consumers
064edf8 uri: keep canonical values string-backed
5ceaac2 docs: explain canonical URI migration and evidence
c974010 uri: align Go identity with vscode canonical semantics
0144ef1 golangci-lint: migrate to v2
2431dde go.mod,tools: update go version and dependencies
Additional commits viewable in compare view

… updates Bumps the go-dependencies group with 4 updates in the / directory: [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi), [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang), [go.lsp.dev/jsonrpc2](https://github.com/go-language-server/jsonrpc2) and [go.lsp.dev/protocol](https://github.com/go-language-server/protocol). Updates `github.com/getkin/kin-openapi` from 0.124.0 to 0.145.0 - [Release notes](https://github.com/getkin/kin-openapi/releases) - [Commits](getkin/kin-openapi@v0.124.0...v0.145.0) Updates `github.com/prometheus/client_golang` from 1.23.2 to 1.24.1 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/v1.24.1/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.23.2...v1.24.1) Updates `go.lsp.dev/jsonrpc2` from 0.10.0 to 1.0.1 - [Release notes](https://github.com/go-language-server/jsonrpc2/releases) - [Commits](go-language-server/jsonrpc2@v0.10.0...v1.0.1) Updates `go.lsp.dev/protocol` from 0.12.0 to 1.0.1 - [Release notes](https://github.com/go-language-server/protocol/releases) - [Commits](go-language-server/protocol@v0.12.0...v1.0.1) Updates `go.lsp.dev/uri` from 0.3.0 to 1.0.1 - [Release notes](https://github.com/go-language-server/uri/releases) - [Commits](go-language-server/uri@v0.3.0...v1.0.1) --- updated-dependencies: - dependency-name: github.com/getkin/kin-openapi dependency-version: 0.143.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/prometheus/client_golang dependency-version: 1.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.lsp.dev/jsonrpc2 dependency-version: 1.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: go-dependencies - dependency-name: go.lsp.dev/protocol dependency-version: 1.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: go-dependencies - dependency-name: go.lsp.dev/uri dependency-version: 1.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 23, 2026

dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-a5bb63815c branch from c162554 to 59e812f Compare July 29, 2026 04:18

dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-a5bb63815c branch from 59e812f to 892e72a Compare July 30, 2026 04:13

Navigation Menu

Uh oh!

chore(deps): bump the go-dependencies group across 1 directory with 5 updates - #46

chore(deps): bump the go-dependencies group across 1 directory with 5 updates#46
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-a5bb63815c

dependabot Bot commented on behalf of github Jul 23, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.145.0

What's Changed

v0.144.0

What's Changed

New Contributors

v0.143.0

What's Changed

New Contributors

v0.142.0

What's Changed

v0.141.0

What's Changed

v1.24.1 / 2026-07-23

What's Changed

v1.24.0 - 2026-07-20

Changes

1.24.1 / 2026-07-23

1.24.0 / 2026-07-20

v1.0.1

What's Changed

v1.0.1

What's Changed

v1.0.0

What's Changed

New Contributors

v1.0.1

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 23, 2026 •

edited

Loading