Skip to content

chore(deps): bump the workspace-deps group across 3 directories with 9 updates#1070

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/metis/workspace-deps-638f7acd13
Closed

chore(deps): bump the workspace-deps group across 3 directories with 9 updates#1070
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/metis/workspace-deps-638f7acd13

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 17, 2026

Bumps the workspace-deps group with 3 updates in the /metis directory: github.com/mattn/go-sqlite3, github.com/spf13/cobra and google.golang.org/grpc.
Bumps the workspace-deps group with 3 updates in the /providers directory: github.com/GoogleCloudPlatform/k8s-cloud-provider, golang.org/x/oauth2 and google.golang.org/api.
Bumps the workspace-deps group with 3 updates in the /test/e2e directory: github.com/GoogleCloudPlatform/k8s-cloud-provider, google.golang.org/api and github.com/onsi/ginkgo/v2.

Updates github.com/mattn/go-sqlite3 from 1.14.37 to 1.14.42

Commits
  • 5df13a0 Merge pull request #1387 from mattn/codex/stmt-cache
  • e302e5c document that _stmt_cache_size is per connection
  • 867dcbf move reset/clear into putCachedStmt and always finalize on failure
  • 0e58fa4 simplify prepareWithCache to call prepare instead of duplicating logic
  • e9f47da do not bail out on finalize error in closeCachedStmtsLocked
  • 325cb8d remove redundant stmtCacheSize check in putCachedStmt
  • 061c2a5 check stmtCacheSize before acquiring mutex in takeCachedStmt
  • efa9b1c add opt-in statement cache
  • 8d12439 Merge pull request #1386 from mattn/perf/reduce-cgo-overhead
  • 89f4bbe fix build with SQLITE_ENABLE_UNLOCK_NOTIFY
  • Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.10.0 to 1.10.2

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.2

🔧 Dependencies

  • chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @​dims in spf13/cobra#2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

v1.10.1

🐛 Fix

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

Commits

Updates google.golang.org/grpc from 1.79.3 to 1.80.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.80.0

Behavior Changes

  • balancer: log a warning if a balancer is registered with uppercase letters, as balancer names should be lowercase. In a future release, balancer names will be treated as case-insensitive; see #5288 for details. (#8837)
  • xds: update resource error handling and re-resolution logic (#8907)
    • Re-resolve all LOGICAL_DNS clusters simultaneously when re-resolution is requested.
    • Fail all in-flight RPCs immediately upon receipt of listener or route resource errors, instead of allowing them to complete.

Bug Fixes

  • xds: support the LB policy configured in LOGICAL_DNS cluster resources instead of defaulting to pick_first. (#8733)
  • credentials/tls: perform per-RPC authority validation against the leaf certificate instead of the entire peer certificate chain. (#8831)
  • xds: enabling A76 ring hash endpoint keys no longer causes EDS resources with invalid proxy metadata to be NACKed when HTTP CONNECT (gRFC A86) is disabled. (#8875)
  • xds: validate that the sum of endpoint weights in a locality does not exceed the maximum uint32 value. (#8899)
  • xds: fix incorrect proto field access in the weighted round robin (WRR) configuration where blackout_period was used instead of weight_expiration_period. (#8915)
  • xds/rbac: handle addresses with ports in IP matchers. (#8990)

New Features

  • ringhash: enable gRFC A76 (endpoint hash keys and request hash headers) by default. (#8922)

Performance Improvements

  • credentials/alts: pool write buffers to reduce memory allocations and usage. (#8919)
  • grpc: enable the use of pooled write buffers for buffering HTTP/2 frame writes by default. This reduces memory usage when connections are idle. Use the WithSharedWriteBuffer dial option or the SharedWriteBuffer server option to disable this feature. (#8957)
  • xds/priority: stop caching child LB policies removed from the configuration. This will help reduce memory and cpu usage when localities are constantly switching between priorities. (#8997)
  • mem: add a faster tiered buffer pool; use the experimental mem.NewBinaryTieredBufferPool function to create such pools. (#8775)
Commits

Updates google.golang.org/protobuf from 1.36.10 to 1.36.11

Updates github.com/GoogleCloudPlatform/k8s-cloud-provider from 1.27.0 to 1.34.0

Release notes

Sourced from github.com/GoogleCloudPlatform/k8s-cloud-provider's releases.

v1.34.0

Summary

  • Support for Regional TargetTCPProxy
  • Support custom headers in requests
  • e2e testing fixes
  • Ability to return partial success from AggregatedList
  • Patch for global TargetHTTPSProxy

What's Changed

Full Changelog: GoogleCloudPlatform/k8s-cloud-provider@v1.33.0...v1.34.0

v1.29.0

What's Changed

New Contributors

Full Changelog: GoogleCloudPlatform/k8s-cloud-provider@v1.28.0...v1.29.0

Commits
  • 7377992 Merge pull request #243 from kl52752/patch-https-proxy
  • 58812e0 Add Patch method for global TargetHTTPSProxy
  • e163b50 Merge pull request #241 from GoogleCloudPlatform/dependabot/go_modules/golang...
  • 417a64a Bump golang.org/x/crypto from 0.31.0 to 0.35.0
  • f45f962 Merge pull request #238 from bowei/pr-fixconst
  • 2ca43ad Fix non-const format strings
  • 19ea140 Fix non-const format string
  • 827fdbf Fix non-constant logf argument
  • b450481 Update year in generated files
  • e553d08 Merge pull request #237 from briantkennedy/agglist
  • Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.34.0 to 0.36.0

Commits
  • 4d954e6 all: upgrade go directive to at least 1.25.0 [generated]
  • 89ff2e1 google: add safer credentials JSON loading options.
  • See full diff in compare view

Updates google.golang.org/api from 0.199.0 to 0.276.0

Release notes

Sourced from google.golang.org/api's releases.

v0.276.0

0.276.0 (2026-04-14)

Features

v0.275.0

0.275.0 (2026-04-07)

Features

v0.274.0

0.274.0 (2026-04-02)

Features

v0.273.1

0.273.1 (2026-03-31)

Bug Fixes

  • Merge duplicate x-goog-request-params header (#3547) (2008108)

v0.273.0

0.273.0 (2026-03-23)

Features

v0.272.0

0.272.0 (2026-03-16)

Features

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.276.0 (2026-04-14)

Features

0.275.0 (2026-04-07)

Features

0.274.0 (2026-04-02)

Features

0.273.1 (2026-03-31)

Bug Fixes

  • Merge duplicate x-goog-request-params header (#3547) (2008108)

0.273.0 (2026-03-23)

Features

0.272.0 (2026-03-16)

Features

... (truncated)

Commits

Updates github.com/GoogleCloudPlatform/k8s-cloud-provider from 1.27.0 to 1.34.0

Release notes

Sourced from github.com/GoogleCloudPlatform/k8s-cloud-provider's releases.

v1.34.0

Summary

  • Support for Regional TargetTCPProxy
  • Support custom headers in requests
  • e2e testing fixes
  • Ability to return partial success from AggregatedList
  • Patch for global TargetHTTPSProxy

What's Changed

Full Changelog: GoogleCloudPlatform/k8s-cloud-provider@v1.33.0...v1.34.0

v1.29.0

What's Changed

New Contributors

Full Changelog: GoogleCloudPlatform/k8s-cloud-provider@v1.28.0...v1.29.0

Commits
  • 7377992 Merge pull request #243 from kl52752/patch-https-proxy
  • 58812e0 Add Patch method for global TargetHTTPSProxy
  • e163b50 Merge pull request #241 from GoogleCloudPlatform/dependabot/go_modules/golang...
  • 417a64a Bump golang.org/x/crypto from 0.31.0 to 0.35.0
  • f45f962 Merge pull request #238 from bowei/pr-fixconst
  • 2ca43ad Fix non-const format strings
  • 19ea140 Fix non-const format string
  • 827fdbf Fix non-constant logf argument
  • b450481 Update year in generated files
  • e553d08 Merge pull request #237 from briantkennedy/agglist
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.199.0 to 0.276.0

Release notes

Sourced from google.golang.org/api's releases.

v0.276.0

0.276.0 (2026-04-14)

Features

v0.275.0

0.275.0 (2026-04-07)

Features

v0.274.0

0.274.0 (2026-04-02)

Features

v0.273.1

0.273.1 (2026-03-31)

Bug Fixes

  • Merge duplicate x-goog-request-params header (#3547) (2008108)

v0.273.0

0.273.0 (2026-03-23)

Features

v0.272.0

0.272.0 (2026-03-16)

Features

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.276.0 (2026-04-14)

Features

0.275.0 (2026-04-07)

Features

0.274.0 (2026-04-02)

Features

0.273.1 (2026-03-31)

Bug Fixes

  • Merge duplicate x-goog-request-params header (#3547) (2008108)

0.273.0 (2026-03-23)

Features

0.272.0 (2026-03-16)

Features

... (truncated)

Commits

Updates github.com/GoogleCloudPlatform/k8s-cloud-provider from 1.27.0 to 1.34.0

Release notes

Sourced from github.com/GoogleCloudPlatform/k8s-cloud-provider's releases.

v1.34.0

Summary

  • Support for Regional TargetTCPProxy
  • Support custom headers in requests
  • e2e testing fixes
  • Ability to return partial success from AggregatedList
  • Patch for global TargetHTTPSProxy

What's Changed

Full Changelog: GoogleCloudPlatform/k8s-cloud-provider@v1.33.0...v1.34.0

v1.29.0

What's Changed

New Contributors

Full Changelog: GoogleCloudPlatform/k8s-cloud-provider@v1.28.0...v1.29.0

Commits
  • 7377992 Merge pull request #243 from kl52752/patch-https-proxy
  • 58812e0 Add Patch method for global TargetHTTPSProxy
  • e163b50 Merge pull request #241 from GoogleCloudPlatform/dependabot/go_modules/golang...
  • 417a64a Bump golang.org/x/crypto from 0.31.0 to 0.35.0
  • f45f962 Merge pull request #238 from bowei/pr-fixconst
  • 2ca43ad Fix non-const format strings
  • 19ea140 Fix non-const format string
  • 827fdbf Fix non-constant logf argument
  • b450481 Update year in generated files
  • e553d08 Merge pull request #237 from briantkennedy/agglist
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.199.0 to 0.276.0

Release notes

Sourced from google.golang.org/api's releases.

v0.276.0

0.276.0 (2026-04-14)

Features

v0.275.0

0.275.0 (2026-04-07)

Features

v0.274.0

0.274.0 (2026-04-02)

Features

v0.273.1

0.273.1 (2026-03-31)

Bug Fixes

  • Merge duplicate x-goog-request-params header (#3547) (2008108)

v0.273.0

0.273.0 (2026-03-23)

Features

  • all: Auto-regenerate discovery clients (

…9 updates

Bumps the workspace-deps group with 3 updates in the /metis directory: [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3), [github.com/spf13/cobra](https://github.com/spf13/cobra) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Bumps the workspace-deps group with 3 updates in the /providers directory: [github.com/GoogleCloudPlatform/k8s-cloud-provider](https://github.com/GoogleCloudPlatform/k8s-cloud-provider), [golang.org/x/oauth2](https://github.com/golang/oauth2) and [google.golang.org/api](https://github.com/googleapis/google-api-go-client).
Bumps the workspace-deps group with 3 updates in the /test/e2e directory: [github.com/GoogleCloudPlatform/k8s-cloud-provider](https://github.com/GoogleCloudPlatform/k8s-cloud-provider), [google.golang.org/api](https://github.com/googleapis/google-api-go-client) and [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo).


Updates `github.com/mattn/go-sqlite3` from 1.14.37 to 1.14.42
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](mattn/go-sqlite3@v1.14.37...v1.14.42)

Updates `github.com/spf13/cobra` from 1.10.0 to 1.10.2
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.10.0...v1.10.2)

Updates `google.golang.org/grpc` from 1.79.3 to 1.80.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.80.0)

Updates `google.golang.org/protobuf` from 1.36.10 to 1.36.11

Updates `github.com/GoogleCloudPlatform/k8s-cloud-provider` from 1.27.0 to 1.34.0
- [Release notes](https://github.com/GoogleCloudPlatform/k8s-cloud-provider/releases)
- [Commits](GoogleCloudPlatform/k8s-cloud-provider@v1.27.0...v1.34.0)

Updates `golang.org/x/oauth2` from 0.34.0 to 0.36.0
- [Commits](golang/oauth2@v0.34.0...v0.36.0)

Updates `google.golang.org/api` from 0.199.0 to 0.276.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.199.0...v0.276.0)

Updates `github.com/GoogleCloudPlatform/k8s-cloud-provider` from 1.27.0 to 1.34.0
- [Release notes](https://github.com/GoogleCloudPlatform/k8s-cloud-provider/releases)
- [Commits](GoogleCloudPlatform/k8s-cloud-provider@v1.27.0...v1.34.0)

Updates `google.golang.org/api` from 0.199.0 to 0.276.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.199.0...v0.276.0)

Updates `github.com/GoogleCloudPlatform/k8s-cloud-provider` from 1.27.0 to 1.34.0
- [Release notes](https://github.com/GoogleCloudPlatform/k8s-cloud-provider/releases)
- [Commits](GoogleCloudPlatform/k8s-cloud-provider@v1.27.0...v1.34.0)

Updates `google.golang.org/api` from 0.199.0 to 0.276.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.199.0...v0.276.0)

Updates `github.com/GoogleCloudPlatform/k8s-cloud-provider` from 1.27.0 to 1.34.0
- [Release notes](https://github.com/GoogleCloudPlatform/k8s-cloud-provider/releases)
- [Commits](GoogleCloudPlatform/k8s-cloud-provider@v1.27.0...v1.34.0)

Updates `github.com/onsi/ginkgo/v2` from 2.27.2 to 2.28.1
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.27.2...v2.28.1)

Updates `github.com/onsi/gomega` from 1.38.3 to 1.39.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.38.3...v1.39.0)

Updates `google.golang.org/api` from 0.199.0 to 0.276.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.199.0...v0.276.0)

---
updated-dependencies:
- dependency-name: github.com/mattn/go-sqlite3
  dependency-version: 1.14.42
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace-deps
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace-deps
- dependency-name: google.golang.org/grpc
  dependency-version: 1.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace-deps
- dependency-name: github.com/GoogleCloudPlatform/k8s-cloud-provider
  dependency-version: 1.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
- dependency-name: google.golang.org/api
  dependency-version: 0.276.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
- dependency-name: github.com/GoogleCloudPlatform/k8s-cloud-provider
  dependency-version: 1.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
- dependency-name: google.golang.org/api
  dependency-version: 0.276.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
- dependency-name: github.com/GoogleCloudPlatform/k8s-cloud-provider
  dependency-version: 1.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
- dependency-name: google.golang.org/api
  dependency-version: 0.276.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
- dependency-name: github.com/GoogleCloudPlatform/k8s-cloud-provider
  dependency-version: 1.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
- dependency-name: google.golang.org/api
  dependency-version: 0.276.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added area/dependency Issues or PRs related to dependency changes ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. labels Apr 17, 2026
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

This issue is currently awaiting triage.

If the repository mantainers determine this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@k8s-ci-robot k8s-ci-robot added the needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. label Apr 17, 2026
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubernetes member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@k8s-ci-robot
Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign vinayakankugoyal for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. labels Apr 17, 2026
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
cloud-provider-gcp-tests 2d81c6d link true /test cloud-provider-gcp-tests
cloud-provider-gcp-verify-all 2d81c6d link true /test cloud-provider-gcp-verify-all
cloud-provider-gcp-verify-up-to-date 2d81c6d link true /test cloud-provider-gcp-verify-up-to-date

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 17, 2026

Superseded by #1071.

@dependabot dependabot Bot closed this Apr 17, 2026
@dependabot dependabot Bot deleted the dependabot/go_modules/metis/workspace-deps-638f7acd13 branch April 17, 2026 07:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/dependency Issues or PRs related to dependency changes cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. size/XL Denotes a PR that changes 500-999 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant