build(deps): bump the go-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the go-dependencies group with 4 updates in the /tailscale-mixin/scripts directory: github.com/cloudflare/pint, github.com/errata-ai/vale/v3, github.com/google/go-jsonnet and github.com/grafana/dashboard-linter.

Updates github.com/cloudflare/pint from 0.79.0 to 0.87.0

Release notes

Sourced from github.com/cloudflare/pint's releases.

v0.87.0

Added

• Added support for Prometheus v3.13.0 experimental PromQL functions: min_of(), max_of().
• rule/duplicate now also detects duplicated alerting rules that can produce identical alerts from the same source time series.
• alerts/template now validates PromQL queries passed to the query template function, reporting syntax errors and result labels that the query cannot produce.

Fixed

• Fixed alerts/template was missing support for tmpl template function.

v0.86.0

Added

• Added promql/nan check.

Changed

• promql/vector_matching was refactored heavily to be faster and more accurate.

Fixed

• Fixed false positive reports from promql/impossible when functions like abs(), clamp_min(), hour(), ln(), histogram_quantile(), or timestamp() wrap aggregations that already remove labels.
• Fixed a crash in promql/aggregate when name regexp is not set.
• Fixed alerts/template not populating $annotations map, causing template expansion to always return empty values for annotation references.
• Fixed rule/label not matching regex key patterns on recording rules.
• Fixed bare # pint disable promql/series comments having no effect on promql/series checks.
• Fixed pint_rule_file_owner metric using symlink target path instead of symlink name, making it inconsistent with pint_problem metric.
• Fixed swapped label name and URL in promql/vector_matching error message when both sides of a binary operation are missing a label.
• Fixed false positive promql/range_query reports when Prometheus retention flag cannot be parsed.

... (truncated)

Changelog

Sourced from github.com/cloudflare/pint's changelog.

v0.87.0

Added

• Added support for Prometheus v3.13.0 experimental PromQL functions: min_of(), max_of().
• rule/duplicate now also detects duplicated alerting rules that can produce identical alerts from the same source time series.
• alerts/template now validates PromQL queries passed to the query template function, reporting syntax errors and result labels that the query cannot produce.

Fixed

• Fixed alerts/template was missing support for tmpl template function.

v0.86.0

Added

• Added promql/nan check.

Changed

• promql/vector_matching was refactored heavily to be faster and more accurate.

Fixed

• Fixed false positive reports from promql/impossible when functions like abs(), clamp_min(), hour(), ln(), histogram_quantile(), or timestamp() wrap aggregations that already remove labels.
• Fixed a crash in promql/aggregate when name regexp is not set.
• Fixed alerts/template not populating $annotations map, causing template expansion to always return empty values for annotation references.
• Fixed rule/label not matching regex key patterns on recording rules.
• Fixed bare # pint disable promql/series comments having no effect on promql/series checks.
• Fixed pint_rule_file_owner metric using symlink target path instead of symlink name, making it inconsistent with pint_problem metric.
• Fixed swapped label name and URL in promql/vector_matching error message when both sides of a binary operation are missing a label.
• Fixed false positive promql/range_query reports when Prometheus retention flag cannot be parsed.

... (truncated)

Commits

• fcd0a6d Merge pull request #1920 from cloudflare/go-1.26.5
• c6c7a34 Use go 1.26.5
• cafafa9 Merge pull request #1918 from cloudflare/dependabot/go_modules/github.com/zcl...
• cc86b2b build(deps): bump github.com/zclconf/go-cty from 1.18.1 to 1.19.0
• 21d43a0 Merge pull request #1917 from cloudflare/dependabot/go_modules/github.com/gka...
• 8b67e9a Merge pull request #1916 from cloudflare/dependabot/go_modules/gitlab.com/git...
• fa8c29d build(deps): bump github.com/gkampitakis/go-snaps from 0.5.22 to 0.5.23
• b5a7986 build(deps): bump gitlab.com/gitlab-org/api/client-go/v2
• c26677a Merge pull request #1914 from cloudflare/dependabot/go_modules/gitlab.com/git...
• b3836fe build(deps): bump gitlab.com/gitlab-org/api/client-go/v2
• Additional commits viewable in compare view

Updates github.com/errata-ai/vale/v3 from 3.14.0 to 3.17.1

Release notes

Sourced from github.com/errata-ai/vale/v3's releases.

v3.17.1

Changelog

• bc78bf3a tests: add case for block change
• d078f4c3 perf: spend fewer cores on startup and more on large blocks
• 1dd53ff0 perf: hoist a lookaround shared by every swap key
• c8a19c9e perf: skip compiling rules the config can never run
• 70aa68fe fix: give each Org file its own HTML writer
• 44e5572b chore: bump regexp2
• 124ed7ca feat: build for Windows on ARM
• a335cfaf refactor: Warn on unrecognized core options
• 529d382c fix: pin the comment fixtures to LF
• fd1a319e docs: stop pinning a version in the security policy
• 20505a35 test: replace the Cucumber suite with YAML-driven Go tests
• 4503ee7f fix: resolve the default config during a dry run
• d947f200 perf: size the converter pools to the run, not the host
• 72a15022 Update SECURITY.md
• 6d08e80b docs: fix old links
• fdd18446 fix: bound and validate rule-embedded scripts

v3.17.0

Building on the dependency updates from the previous release, v3.17.0 brings the most significant performance improvements since v3.0.0.

It also brings support for inline scopes and style-level severity changes.

If you use MDX, make sure to update mdx2vast to v0.5.0 to see the performance gains.

✨ Sponsor Spotlight

Special thanks to Mintlify for becoming Vale's latest sponsor and the first to receive a Spotlight page!

Changelog

• 989be256 docs: add sponsor
• ff6de4d5 fix: stop sharing per-file scope state across goroutines
• 5d413a06 fix: name the spelling a vocab term wants, not its pattern
• 5f071ef5 perf: reuse one Docutils interpreter instead of one per file
• 4fd0ba63 perf: reuse one mdx2vast process instead of one per file
• d65b54c3 perf: keep Asciidoctor running instead of restarting it per file
• eea7ac3f perf: stop scanning the whole document to place each alert
• d6308d29 docs: update contributing
• dccf897f perf: run one search per block instead of one per line
• 769943cc fix: stop narrowing paragraph to a scope nothing carries
• 67f65023 fix: read block-comment decoration as decoration, not markup
• c937d0c8 perf: stop deduplicating rule runs per text
• 3bf1bb93 perf: read literals through a pattern's lookarounds
• c795e3ec perf: read literals through a pattern's lookarounds
• 1bbfca01 perf: decide a rule's scope once per block scope
• 38849c42 build: use regexp2 v2.5.4

... (truncated)

Commits

• bc78bf3 tests: add case for block change
• d078f4c perf: spend fewer cores on startup and more on large blocks
• 1dd53ff perf: hoist a lookaround shared by every swap key
• c8a19c9 perf: skip compiling rules the config can never run
• 70aa68f fix: give each Org file its own HTML writer
• 44e5572 chore: bump regexp2
• 124ed7c feat: build for Windows on ARM
• a335cfa refactor: Warn on unrecognized core options
• 529d382 fix: pin the comment fixtures to LF
• fd1a319 docs: stop pinning a version in the security policy
• Additional commits viewable in compare view

Updates github.com/google/go-jsonnet from 0.21.0 to 0.22.0

Release notes

Sourced from github.com/google/go-jsonnet's releases.

v0.22.0

The Python module can be found at https://pypi.org/project/gojsonnet/0.22.0/

What's Changed (since v0.21.0)

• Updates since Release Candidate 1

  • Apply nesting depth limit when manifesting objects to TOML, YAML, or JSON (#866)
  • Publish pre-built Python wheels (binary packages) for Linux aarch64 (ARM) (#865)

• Possibly breaking changes

  • Required Go version is increased to 1.24 (https://go.dev/doc/devel/release#go1.24.0) (#850)
  • When evaluating in --multi --string mode, output files now have an extra (trailing) newline added. If you do not want this, you can use --no-trailing-newline. (#819, #843)
  • Output files in --multi mode are restricted to the specified output directory (and subdirectories)
  • Pre-built binary archive names have changed (#848, #814)

• Language changes, new features, etc

  • Numbers in Jsonnet code can now be written with underscore used to separate groups of digits (e.g., 1_500_000) (#760)
  • New function std.isNull (#806)
  • Bitwise operation arguments are now limited to the "safe-integer" range (google/go-jsonnet#859)
  • jsonnet CLI: New flag --no-trailing-newline - this disables the final newline that is normally included in the output of any Jsonnet evaluation. This option is also added to the API (#819, #843)
  • jsonnetfmt CLI: Names of unclean files are printed to stdout when using --test or --in-place mode (#863)
  • API: FindDependencies can now optionally follow symlinks (#730)
  • Restrict file writes to the specified output directory for --multi (google/go-jsonnet#850)

• Bug fixes

  • The index expression of a super[e] access (#849)
  • Function std.objectRemoveKey has been re-implemented to fix several bugs and unexpected behaviours (#837)
  • Missing trailing newline when using both --multi and --string options (google/go-jsonnet#819)
  • Fix implicit-to-explicit-plus conversion in jsonnetfmt (google/go-jsonnet#853)
  • Improve handling of YAML document streams in std.parseYaml (google/go-jsonnet#862)
  • Unchecked error in std.manifestYamlDoc(). (google/go-jsonnet#800)
  • Cache the error too in importAST(). (google/go-jsonnet#823)
  • Do not mutate std.removeAt parameters (google/go-jsonnet#812)
  • Handle negative range by returning an empty array (google/go-jsonnet#839)
  • Return null if parseYaml does not yield any result (google/go-jsonnet#841)
  • Linter: Support std.clamp function (google/go-jsonnet#840)
  • Linter: add optional parameters to std.manifestJsonEx in (google/go-jsonnet#842)
  • Linter: Optimize runtime complexity when passing in multiple snippets (google/go-jsonnet#725)

• Build systems, testing, CI, internal

  • chore: fix bazel example by @​y1hao in google/go-jsonnet#820
  • Make CI build the bazel example with multiple Bazel versions (google/go-jsonnet#832)
  • Remove Go Releaser archive naming overrides (google/go-jsonnet#848)

Full commit history: google/go-jsonnet@v0.21.0...v0.22.0

New Contributors

• @​y1hao made their first contribution in google/go-jsonnet#820
• @​shrred26 made their first contribution in google/go-jsonnet#806
• @​hofbi made their first contribution in google/go-jsonnet#815

... (truncated)

Commits

• 567b61a release: v0.22.0
• 456331f refactor: use MaxStack as depth limit instead of fixed constant
• 502106b fix: add missing linter golden files for cyclic tests
• 033195b fix: add stack frame accounting to manifest builtins
• 86c6dc1 Extend "Build and Publish Python Package" workflow to build Linux aarch64 wheels
• b5ef4cd release: prepare to release v0.22.0-rc1
• 160987f deps: update referenced github actions to latest
• 7b3fbdd update cpp-jsonnet to (unreleased) 3a7b2a565827635615f8a9432d94941e2a827c70
• 154626d print names of reformatted files when using jsonnetfmt --test or --in-place
• 509404f update cpp-jsonnet to (unreleased) 833f18402b6b6a2da0b2fae75446a1e14b9116dd
• Additional commits viewable in compare view

Updates github.com/grafana/dashboard-linter from 0.0.0-20231114210226-c458893a5731 to 0.2.0

Release notes

Sourced from github.com/grafana/dashboard-linter's releases.

v0.2.0

Changelog

Others

• 4d0844b40d49cbfd442916fc6c0c3c6fc81084e3 feat: basic support Grafana v2 dashboard schema (#261)

v0.1.1

Changelog

Dependencies

• 1be3836b83fbcf9508efcd87af87dfbfbec94279 chore(deps): bump cobra, viper, and go directive (#260)
• 3de9984ca4c373ee1a60638e3b5b4fb3f5b1b0c0 chore(deps): update module github.com/go-jose/go-jose/v4 to v4.1.4 [security] (#255)
• 2b051b1c96773e3e29b738d972f1081e0f42bfd7 chore(deps): update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [security] (#256)
• 6d38b915eed828c3164124eaf3b3ab6481f01e78 chore(deps): update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [security] (#257)
• 4bd1bb7ed6ec8f7b643c4252a1cf13ac2b58f16a chore(deps): update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [security] (#258)

v0.1.0

Changelog

Others

• eb7ffaca54d32a36ebc6e7974986826bd927fe35 "Allow template variables to use ${datasource} instead of $datasource
• 646fa4b3b455526b00765d5e7656b8be22ee1d30 Really fix relative links to docs
• 1ec6315b9872d312b3a863e7bc05e2cca18b4c0b Accept $__auto_interval to support grafonnet-lib generated dashboards
• a52c0a6fde16e0d217125e7a934e42cf7894b8fe Account for custom type of template
• 36c97d0051e88e9f87b176bdeef164091aa021ed Actually unmarshal dashboard template options and current value
• 5c86894981e1682416fe7abe7034a48b8dfbdc88 Add --verbose flag to lint to print successful lint results. (#633)
• 455702588e39f3365cbf8983c259f13b3dd746bb Add ability to read from stdin
• 401a71778ae040485aba80aa000cbc1a3f596aca Add all failure test cases
• 80b6699d27107d250f4027ef42f2ee1c44dda987 Add dashboard lint rule for datasource templates. (#582)
• 378724cede35c9d0b00d8ee0ba7152a77bf9813b Add docs for new rule, and regenerate docs
• 63ed6fce489ac9ed56496e38c9dfaaa654f2b7d7 Add interval subs.
• 3461d124ab7579ffa91ce497522b0f0d53496251 Add license and readme.
• fa71def3a0f03ce321ed7c9e21b8f9b4ee90c407 Add lint rule for $__rate_interval
• 63f5e3017cc3f2dbda0a2209ad54fd83ce0b4db5 Add linter rule for templated label PromQL
• fbae007161a6c6781869b69d6be4851d51c8e56f Add list of valid units - Add tests
• 63deba1a215edd5562a136785c6be90fbcf238cc Add missing rules to README.md
• 82b8088ef5efbf3a5b10792df62a6c6a0ee05f24 Add more context to dashboard marshal/unmarshal errors when linting (#585)
• 6f9f69bf5d360d23963283d5edf4dc2627845e8d Add newline to gitignore (Github warning)
• 2434734f285f55fde8478245abe8a94a6f08b83c Add overrides parsing and checks
• 0d1d7239f163c5598de91dda31e1c7215adb34f1 Add remaining rule docs
• 91e9dab04d9030d114c5be3643eac64ea45e04e3 Add some CI.
• ade8d299576074d726f2f7d61154f242f14bb83a Add subcommand to print rules & descriptions, add to readme and add instructions on how to skip rules.
• 41b7eabeef59f191ba8e498e49636952119ecd83 Add target counter agg rule
• 044817fc5c961340148ebebc15d3ffa48890d5b8 Add target instance rule
• 0d7f1e9a71de18639e089c87eef30b682d354fcf Add target_job rule
• e9a8bc8dc848a0f5f493c092e83b5254d487057c Add tests
• 3fafab3be6347c8093793e911d66ed288056b1bc Add tests
• 15168e88b5b48846b6d334a1319eb591eb2a51bc Add the possibility to add custom rules implemented in Go
• ab2f0e5fbd77fdc41dfd51ab0869d4ae8242fd70 Add timeseries to list of panel types when checking datasource
• 4b54416b4a5d4ce65face052f4b3da515c2e4c15 Add unit rule smart exceptions
• 9ada1a4b2efe2dd7cf2e8b3a89f9226a79783739 Added Alert field to ConfigurationEntry
• d437d0a38f72d84f5dcad207b828ebf048e86957 Added Config Flag Support
• b9474179a67cd890ea7c07c5e0a5b76780f87edc Added LogQL Rules

... (truncated)

Commits

• See full diff in compare view

Updates github.com/prometheus/prometheus from 0.310.0 to 0.313.0

Commits

• 40af9c2 Merge pull request #19047 from prometheus/krajo/prep-release-3.13
• ead31f4 Merge pull request #19009 from roidelapluie/roidelapluie/npm-dist-tag
• 5e280be ui: do not tag pre-release npm packages as latest
• bd96185 chore: prepare 3.13.0-rc.1 release (#19001)
• 0efc626 Merge pull request #18995 from roidelapluie/roidelapluie/build-reuse-ui-assets
• 300f9d8 ci: reuse pre-built UI assets in build_all crossbuild
• ecd61e8 Merge pull request #18997 from roidelapluie/roidelapluie/embed-npm-licenses
• 60b92cb ci: bump pnpm/action-setup to v6.0.9 (#18998)
• 84a7c19 build: embed bundled web UI licenses instead of shipping a tarball
• 3c3c442 build: include react-app dependency licenses in npm_licenses tarball (#18993)
• Additional commits viewable in compare view

[adinhodovic]

@dependabot recreate