Skip to content

gomod(deps): Bump the go-deps group across 1 directory with 13 updates - #504

Open
dependabot[bot] wants to merge 1 commit into
prod-stagingfrom
dependabot/go_modules/prod-staging/go-deps-58cc6419fa
Open

gomod(deps): Bump the go-deps group across 1 directory with 13 updates#504
dependabot[bot] wants to merge 1 commit into
prod-stagingfrom
dependabot/go_modules/prod-staging/go-deps-58cc6419fa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-deps group with 13 updates in the / directory:

Package From To
charm.land/bubbles/v2 2.1.0 2.2.1
charm.land/bubbletea/v2 2.0.6 2.0.8
github.com/containerd/containerd/v2 2.3.0 2.4.0
github.com/containerd/log 0.1.0 0.2.0
github.com/containerd/platforms 1.0.0-rc.4 1.0.0-rc.5
github.com/docker/cli 29.4.2+incompatible 29.8.1+incompatible
github.com/moby/buildkit 0.29.0 0.33.0
github.com/moby/moby/client 0.4.1 0.6.0
github.com/posthog/posthog-go 1.12.4 1.25.2
github.com/sirupsen/logrus 1.9.4 1.10.2
github.com/tidwall/gjson 1.18.0 1.19.0
golang.org/x/mod 0.38.0 0.41.0
golang.org/x/sync 0.22.0 0.23.0

Updates charm.land/bubbles/v2 from 2.1.0 to 2.2.1

Release notes

Sourced from charm.land/bubbles/v2's releases.

v2.2.1

Tiny Monday bugfix

Textarea element had a bug, where you used to be able to go 1 word backwards, even if there was nothing, which resulted in the whole TUI freezing. It was now fixed by @​OxQuasar!

Changelog

Fixed

  • f6134114d735cf40e95c15ff62e7359e46d04fc9: fix(textarea): stop word-left at input boundary (#1036) (@​OxQuasar)

Docs

  • 87d445838781700cb25e3fc3a6b26006eab97b41: docs: update godoc link in readme to new package (@​meowgorithm)

Other stuff

  • 10489b5fafe92bfaea873297cab8ac8b5c5237f4: readme: drop tree section for now (@​meowgorithm)
  • 490948109eb4731927ba2f4cd464d8175a9630d7: v2.2.1 (@​andrinoff)

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

v2.2.0

A new Bubble and some new Textarea stuff

There are a couple nice features in today's release. Let's check em out!

If a tree falls in the forest…

At last, the tree Bubble from all star contributor @​dlvhdr’s is here! He built it for DiffNav and graciously contributed to Bubbles. We've been working with Dolev for a long time and were totally stoked when he offerd to contribute.

Select all, ctrl+c, ctrl+v…done!

Our own @​andrinoff added a bunch of awesome stuff to Textarea, including the long awaited text selection. Select, copy, and cut your way into mini text editing.

For more info see the docs.

And special thanks to @​zoriya for adding ctrl+left/right bindings.

xoxo, Charm! 💌

Changelog

New!

  • 8cea431500a8837c241cbe8ad71601aa8f00a0d9: feat(textarea): support ctrl + left/right/backspace (#1020) (@​zoriya)
  • 037ad37bb0aa6e8ec544df6d3af752755f0a72d9: feat: textarea selection (#1029) (@​andrinoff)
  • e97af08ee293131e7b71f7e3006c06a81a2584b8: feat: tree bubble (#893) (@​dlvhdr)

... (truncated)

Commits

Updates charm.land/bubbletea/v2 from 2.0.6 to 2.0.8

Release notes

Sourced from charm.land/bubbletea/v2's releases.

v2.0.8

Graphemes, schmraphemes

No terminal can render emojis perfectly, but we can try. This release improves some very specific edge cases around emoji rendering. Enjoy!

Changelog

  • db569adcb41d0eae251587e6a5f0cc3c7d77e8eb: fix(deps): bump ultraviolet for emoji-related rendering improvements

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

v2.0.7

A few lil’ stability patches

Hi! This is a patch release with a few solid improvements around stability and correctness.

  • @​lrstanley, one of our faves, fixed a race condition around mice in the Cursed Renderer
  • @​lawrence3699 fixed a panic that could happen when input's not available
  • We fixed a correctness issue with regard to mouse releases when Kitty Keyboard was active (thanks, @​mitchellh)

Thanks for using Bubble Tea, and if you see anything awry please do let us know!

—Charm 👋

Changelog

Fixed

  • c60f0c53042238305ec13b486326588f12aea0ec: fix: prevent data race with cursedRenderer.onMouse (#1691) (@​lrstanley)
  • 074596e14e2f5ca5e3986ee72e7c08f1569c4178: fix: skip input reader restore when input is disabled (#1680) (@​lawrence3699)
  • 878d7df2f2b02f3ca8db177fa8553834bc35ea7c: fix(deps): bump ultraviolet for kitty keyboard fix (@​meowgorithm)

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits
  • fc707bb chore(examples): go mod tidy
  • db569ad chore(deps): bump ultraviolet for emoji-related rendering fixes
  • a23da80 v2.0.7
  • 670963e chore(task): add release and fetch-tags tasks
  • 29c4c32 fix(examples/deps): go mod tidy
  • 878d7df chore(deps): bump ultraviolet for kitty keyboard fix
  • c60f0c5 fix: prevent data race with cursedRenderer.onMouse (#1691)
  • 640d879 docs(readme): update footer image
  • 0fbefd2 chore: remove CODEOWNERS
  • 074596e fix: skip input reader restore when input is disabled (#1680)
  • See full diff in compare view

Updates github.com/containerd/containerd/v2 from 2.3.0 to 2.4.0

Release notes

Sourced from github.com/containerd/containerd/v2's releases.

containerd 2.4.0

Welcome to the v2.4.0 release of containerd!

containerd 2.4 is a regular (non-LTS) release with a shorter support window, intended for users who want to adopt new features sooner. As the release following the 2.3 LTS, it is the point in the release cycle where previously deprecated features may be removed, so this release may include breaking changes; check the notes below and clear any deprecation warnings from your current version before upgrading.

Users prioritizing stability and a longer support lifecycle should stay on the 2.3 LTS release.

Highlights

Container Runtime Interface (CRI)

  • Enable mount manager for image mounts in CRI (#13542)
  • Export sandbox image and CNI directory configuration in CRI plugin info (#13940)
  • Set default runtimeFeatures.UserNamespacesHostNetwork to true (#13162)
  • Support OCI runtime feature introspection for non-runc runtimes (#13504)

Image Distribution

  • Apply hardening to strip sensitive authentication headers when fetching descriptor URLs (#12889)
  • Support propagating HTTP 299 warning headers from registries to the resolver (#12698)
  • Use klauspost/compress for gzip layer decompression (#13560)

Image Storage

  • Add client options to fetch all layer content during unpack even when snapshots exist (#14126)
  • Include media type in content create events (#13833)
  • Add forward References to the GC collection context (#13634)

Node Resource Interface (NRI)

  • Expose container image name, digest, and config digest to NRI plugins (#13960)
  • Emit deprecation warnings for plugins using deprecated NRI interfaces (#13916)

Runtime

  • Mask /proc/interrupts and CPU thermal throttle sysfs paths in Linux containers by default (#14090)
  • Add UpdateSandbox RPC to propagate sandbox controller updates to the shim (#14105)
  • Avoid immediately restarting containers with restart=always policy after they are explicitly stopped (#13993)
  • Pass tracing context from shim to runc and hooks (#14036)
  • Fix user and group lookup failures in container rootfs containing symlinked /etc/passwd or /etc/group (#13818)
  • Implement Windows named-pipe server and log streaming support in pkg/shim (#13948)
  • Enable log scrubbing by default on Windows (#13837)
  • Allow specifying parent checkpoint directory when checkpointing with runc (#13699)

... (truncated)

Changelog

Sourced from github.com/containerd/containerd/v2's changelog.

Versioning and Release

This document details the versioning and release plan for containerd. Stability is a top goal for this project, and we hope that this document and the processes it entails will help to achieve that. It covers the release process, versioning numbering, backporting, API stability and support horizons.

If you rely on containerd, it would be good to spend time understanding the areas of the API that are and are not supported and how they impact your project in the future.

This document will be considered a living document. Supported timelines, backport targets and API stability guarantees will be updated here as they change.

If there is something that you require or this document leaves out, please reach out by filing an issue.

Releases

Releases of containerd will be versioned using dotted triples, similar to Semantic Version. For the purposes of this document, we will refer to the respective components of this triple as <major>.<minor>.<patch>. The version number may have additional information, such as alpha, beta and release candidate qualifications. Such releases will be considered "pre-releases".

Major and Minor Releases

Major and minor releases of containerd will be made from main. Releases of containerd will be marked with GPG signed tags and announced at https://github.com/containerd/containerd/releases. The tag will be of the format v<major>.<minor>.<patch> and should be made with the command git tag -s v<major>.<minor>.<patch>.

After a minor release, a branch will be created, with the format release/<major>.<minor> from the minor tag. All further patch releases will be done from that branch. For example, once we release v1.0.0, a branch release/1.0 will be created from that tag. All future patch releases will be done against that branch.

Release Cadence

Since containerd v2.3 in April 2026, minor releases are provided on a time basis with a cadence of 4 months. New minor releases are scheduled for April, August, and December of each year. This cadence is synchronized with the Kubernetes release schedule to ensure that new features in containerd can be smoothly adopted by new Kubernetes releases.

The maintainers will maintain a roadmap and milestones for each release, however,

... (truncated)

Commits
  • a7fe631 Merge pull request #14169 from samuelkarp/prepare-release-2.4.0
  • 647fafa Prepare release notes for v2.4.0
  • c6d0192 Merge pull request #14170 from samuelkarp/prepare-api-v1.12.0
  • 5c4ea21 Prepare release notes for api/v1.12.0
  • 610d8d8 Merge pull request #14166 from samuelkarp/deprecations-and-removals-for-2.4
  • 531b3a3 tracing: remove deprecated tracing config options
  • ca8579a tracing: add tests for otlp exporter and env vars
  • ee024b7 tracing: remove deprecated otlp configs
  • f7c654f cri: remove deprecated cni bin_dir
  • 4f7de25 cri: remove enable_cdi config option
  • Additional commits viewable in compare view

Updates github.com/containerd/log from 0.1.0 to 0.2.0

Release notes

Sourced from github.com/containerd/log's releases.

v0.2.0

What's Changed

New Contributors

Full Changelog: containerd/log@v0.1.0...v0.2.0

Commits
  • 8b5d653 Merge pull request #25 from thaJeztah/integrate_tracing_improve
  • 65e60ca otel: add option to set span error status
  • 9c0b6a4 otel: add option to configure log level
  • 6fcf9c1 Merge pull request #28 from thaJeztah/handle_nil_contexts
  • 2b5e7c3 otel: avoid span lookup for entries without context
  • 4ec26d0 Merge pull request #24 from thaJeztah/integrate_tracing
  • dd120bd Merge pull request #21 from thaJeztah/rewrite_slog
  • dd21ae6 Merge pull request #27 from thaJeztah/bump_logrus
  • 18f2de6 log: accept slog-compatible levels in SetLevel
  • c474254 slog: improve bridge test coverage
  • Additional commits viewable in compare view

Updates github.com/containerd/platforms from 1.0.0-rc.4 to 1.0.0-rc.5

Release notes

Sourced from github.com/containerd/platforms's releases.

v1.0.0-rc.5

What's Changed

New Contributors

Full Changelog: containerd/platforms@v1.0.0-rc.4...v1.0.0-rc.5

Commits

Updates github.com/docker/cli from 29.4.2+incompatible to 29.8.1+incompatible

Commits
  • 4a63305 Merge pull request #7297 from docker/dependabot/github_actions/docker-actions...
  • 87ff477 Merge pull request #7307 from thaJeztah/ci_ubuntu_2604
  • 101ffc0 ci: update to Ubuntu 26.04 runners
  • 32ff1e7 build(deps): bump docker/docker-agent-action/.github/workflows/review-pr.yml
  • d146e67 Merge pull request #7290 from vvoland/port-template
  • ac976d9 Merge pull request #7296 from keeltrace/keeltrace/history-timezone-test
  • 48baf6c Merge pull request #7306 from thaJeztah/bump_x_deps
  • 47a06aa Merge pull request #7293 from thaJeztah/bump_uax29
  • 1bf3eb6 Merge pull request #7295 from thaJeztah/bump_userns
  • 60dffc9 vendor: golang.org/x/net v0.59.0
  • Additional commits viewable in compare view

Updates github.com/moby/buildkit from 0.29.0 to 0.33.0

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.33.0

Welcome to the v0.33.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • CrazyMax
  • Tõnis Tiigi
  • Sebastiaan van Stijn
  • Matthieu MOREL
  • eliuriegas
  • Daniel Nephin
  • Dawei Wei
  • Guthrie McAfee Armstrong
  • Jiří Moravčík
  • Leo Li
  • Ravi Arnan
  • Shurong Cao
  • Spencer G. Jones
  • Vedant Madane

Notable Changes

  • Built-in Dockerfile frontend has been updated to v1.27.0 changelog
  • Builds using proxy-based network tracking/monitoring for exec steps now support fallback to the daemon's proxy settings when the BuildKit daemon is running behind a proxy. #7074
  • The maximum attestation size for exporters has been raised to 80 MiB. #7104
  • Content produced by Rootless versions of BuildKit has been updated to be compatible with Rootful versions of BuildKit for result reproducibility. #7039
  • Buildctl now supports passing valueless build-args read from the environment. #7030
  • Sanitize platform IDs returned by frontend to ensure tar exports can't end up with invalid paths for Windows. #7022
  • Suppress bogus git advice messages on progress output from the way BuildKit checks out git repositories. #6998
  • Build history can now be disabled from daemon configuration #7040
  • Redact more possible inline credentials in progress output or HTTP source and Git bundle steps. This didn't include builds that used build secrets to pass credentials. #7068
  • MaxRegistryConcurrency now also applies to remote cache requests. #7049
  • Windows containers now support RUN --mount=type=secret build secrets. #6944
  • Fix possible "no active session for" error when running concurrent builds with remote cache #7047
  • Fix possible "failed to apply diffs: snapshot does not exist" error #7035
  • Fix possible context upload errors when context directory contains foreign characters. #6989
  • Fix possible silently dropped cache link in remote cache exporter. #7053
  • Fix xz archive unpacking silently skipping when xz binary was missing in environment. #7071
  • Fix possible incorrect platform validation warnings caused by mismatched Windows OS versions #7072
  • Fix QEMU emulator arguments being persisted on an exec operation when a canceled operation is executed again. #7092

Dependency Changes

  • cyphar.com/go-pathrs v0.2.1 -> v0.2.5

... (truncated)

Commits
  • dddd562 Merge pull request #7105 from crazy-max/v0.33_picks_v0.33.0-rc2
  • 3c05040 vendor: update moby/policy-helpers to dd6c5499c491
  • ae09dd0 solver: avoid mutating exec args for QEMU
  • bd1ac13 exporter: raise max attestation size to 80 MiB
  • ccfc875 dockerfile: update version to 1.27
  • eece108 Merge pull request #7080 from tonistiigi/dockerd-test-fix-v0.33
  • d3f86c1 test: fix dockerd integration coverage
  • b09f8f1 Merge pull request #6944 from rzlink/wcow-secret-mount
  • bb80b2a Merge pull request #7078 from thaJeztah/bump_grpc
  • 964cf3d vendor: google.golang.org/grpc v1.83.2
  • Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.4.1 to 0.6.0

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.6.0

0.6.0

Changelog

client/v0.5.1

0.5.1

Changelog

  • client/pkg/jsonmessage: Display: fix godoc link. moby/moby#53070
  • client: ServiceCreate, ServiceUpdate: fix duplicate and 'unkown' platforms. moby/moby#53012
  • client: ServiceInspect, ContainerCommit: omit optional query args if not set. moby/moby#53010
  • golangci-lint: enable perfsprint linter. moby/moby#53016

client/0.5.0

0.5.0

Changelog

  • The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636

client/v0.5.0-rc.1

0.5.0-rc.1

Changelog

  • The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636
Changelog

Sourced from github.com/moby/moby/client's changelog.

0.6.0 (2013-08-22)

  • Runtime: Load authConfig only when needed and fix useless WARNING
  • Runtime: Add lxc-conf flag to allow custom lxc options
  • Runtime: Fix race conditions in parallel pull
  • Runtime: Improve CMD, ENTRYPOINT, and attach docs.
  • Documentation: Small fix to docs regarding adding docker groups
  • Documentation: Add MongoDB image example
  • Builder: Add USER instruction do Dockerfile
  • Documentation: updated default -H docs
  • Remote API: Sort Images by most recent creation date.
  • Builder: Add workdir support for the Buildfile
  • Runtime: Add an option to set the working directory
  • Runtime: Show tag used when image is missing
  • Documentation: Update readme with dependencies for building
  • Documentation: Add instructions for creating and using the docker group
  • Remote API: Reworking opaque requests in registry module
  • Runtime: Fix Graph ByParent() to generate list of child images per parent image.
  • Runtime: Add Image name to LogEvent tests
  • Documentation: Add sudo to examples and installation to documentation
  • Hack: Bash Completion: Limit commands to containers of a relevant state
  • Remote API: Add image name in /events
  • Runtime: Apply volumes-from before creating volumes
  • Runtime: Make docker run handle SIGINT/SIGTERM
  • Runtime: Prevent crash when .dockercfg not readable
  • Hack: Add docker dependencies coverage testing into docker-ci
  • Runtime: Add -privileged flag and relevant tests, docs, and examples
  • Packaging: Docker-brew 0.5.2 support and memory footprint reduction
  • Runtime: Install script should be fetched over https, not http.
  • Packaging: Add new docker dependencies into docker-ci
  • Runtime: Use Go 1.1.2 for dockerbuilder
  • Registry: Improve auth push
  • Runtime: API, issue 1471: Use groups for socket permissions
  • Documentation: PostgreSQL service example in documentation
  • Contrib: bash completion script
  • Tests: Improve TestKillDifferentUser to prevent timeout on buildbot
  • Documentation: Fix typo in docs for docker run -dns
  • Documentation: Adding a reference to ps -a
  • Runtime: Correctly detect IPv4 forwarding
  • Packaging: Revert "docker.upstart: avoid spawning a sh process"
  • Runtime: Use ranged for loop on channels
  • Runtime: Fix typo: fmt.Sprint -> fmt.Sprintf
  • Tests: Fix typo in TestBindMounts (runContainer called without image)
  • Runtime: add websocket support to /container//attach/ws
  • Runtime: Mount /dev/shm as a tmpfs
  • Builder: Only count known instructions as build steps
  • Builder: Fix docker build and docker events output
  • Runtime: switch from http to https for get.docker.io
  • Tests: Improve TestGetContainersTop so it does not rely on sleep
  • Packaging: Docker-brew and Docker standard library
  • Testing: Add some tests in server and utils

... (truncated)

Commits
  • f4a4f1c Bump to 0.6.0
  • f925edd Merge pull request #1525 from griff/1503-fix
  • 12715c8 Merge pull request #1609 from jpetazzo/release-docker-with-docker
  • 326dadd Merge pull request #1565 from dotcloud/only_load_authconfig_when_needed
  • a3510c9 Merge pull request #1560 from dotcloud/439-allow-lxc-args
  • 262d57e Merge pull request #1623 from mhennings/1592-fix-race-conditions-in-parallel-...
  • 551092f Add lxc-conf flag to allow custom lxc options
  • 3f802f4 Fix race conditions in parallel pull
  • 0b9c8e2 Merge pull request #1596 from metalivedev/1149-easyfixes
  • 42fe550 Merge pull request #1614 from denibertovic/docs
  • Additional commits viewable in compare view

Updates github.com/posthog/posthog-go from 1.12.4 to 1.25.2

Release notes

Sourced from github.com/posthog/posthog-go's releases.

1.25.2

Unreleased

1.25.1

Unreleased

1.25.0

Unreleased

1.24.4

Unreleased

1.24.3

Unreleased

1.24.2

Unreleased

1.24.1

Unreleased

1.24.0

Unreleased

1.23.1

Unreleased

1.23.0

Unreleased

1.22.0

Unreleased

1.21.0

Unreleased

1.20.0

Unreleased

1.19.0

Unreleased

1.18.0

Unreleased

1.17.5

Unreleased

1.17.4

Unreleased

... (truncated)

Changelog

Sourced from github.com/posthog/posthog-go's changelog.

1.25.2

Patch Changes

  • 3bc1d1a: Fix local evaluation falling back to the API for gt, gte, lt and lte when the operand is stored as a string. The PostHog API stores a numeric comparison operand as a string, and its filters validation requires one, so most flags using these operators hold a string. interfaceToFloat had a case for every numeric type and none for string, so the operand was not orderable. The error it returned was not an InconclusiveMatchError, so the caller did not try other conditions either and fell back to the API for a flag it could have matched locally. A string operand is now parsed with strconv.ParseFloat, matching what the Python, Node, Ruby and PHP SDKs already do. A value that is not a finite number, including "NaN" and "Inf", stays not orderable.

1.25.1

Patch Changes

  • c159621: Fix not_regex local flag evaluation erroring on non-string/int property values. The not_regex operator used a manual string/int type switch and returned an error for other types, most notably float64, which is what JSON numbers deserialize to, so it failed on a numeric property value even though regex handled it. not_regex now coerces both sides with valueToString, mirroring regex. An explicit nil property value is represented as null, matching the feature flags evaluation service rather than Go's default <nil> representation.

1.25.0

Minor Changes

  • 897a0b4: Add the OpenTelemetry bridge for AI observability as an independently installable nested Go module.

1.24.4

Patch Changes

  • c3270b6: Align local feature flag property matching with the flags service, including boolean-array precedence, canonical JSON stringification, and operator-specific case folding.

1.24.3

Patch Changes

  • 749f1e8: Fix exact/is_not local flag evaluation to match case-insensitively and after string coercion, consistent with the other string operators here and the reference SDKs. A plain Go == made them case- and type-sensitive, so e.g. exact "US" did not match a "us" property value and exact 1 did not match a "1" property value.

1.24.2

Patch Changes

  • 360bc8d: Align local is_set and is_not_set evaluation with partial property context.

1.24.1

Patch Changes

  • 3d250c5: Return an empty feature flag snapshot without evaluating flags when FlagKeys is an explicit empty slice.

1.24.0

Minor Changes

  • 150f03e: Fall back to /flags when a requested flag is missing from loaded local definitions. This changes the earlier behavior where the key was omitted without a request.

1.23.1

... (truncated)

Commits
  • 07b16ce chore: release v1.25.2 [version bump] [skip ci]
  • 3bc1d1a fix(flags): accept a numeric operand stored as a string (#319)
  • 24cd918 chore(deps): bump pnpm/setup from 2.0.2 to 2.1.0 in the github-actions group ...
  • 34299a7 ci: remove unused release workflow permissions (#315)
  • 53f5471 chore(deps): bump the github-actions group with 2 updates (#309)
  • 92ec69b chore(deps): bump the go-dependencies group in /otel with 5 updates (#307)
  • a5e539c chore: release v1.25.1 [version bump] [skip ci]
  • c159621 fix: not_regex should handle all value types like regex (#305)
  • 5056987 chore: release v1.25.0 [version bump] [skip ci]
  • 897a0b4 feat: add OpenTelemetry bridge for AI observability (#306)
  • Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.9.4 to 1.10.2

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.2

Logrus v1.10.2

This is a small maintenance release that updates github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency from Logrus' dependency graph. There are no functional changes in this release.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.1

Full Changelog: sirupsen/logrus@v1.10.1...v1.10.2

v1.10.1

Logrus v1.10.1

This patch release fixes two issues in field formatting and handling:

  • Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.
  • Allow function-backed values implementing error to be used with WithError, WithField, and WithFields.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.0

Full Changelog: sirupsen/logrus@v1.10.0...v1.10.1

v1.10.0

Logrus v1.10.0

This release focuses on substantial performance improvements, concurrency correctness, and better interoperability with modern Go logging APIs.

🚀 Performance

Major improvements across TextFormatter, entry handling, and common logger paths:

  • ~17% lower geomean runtime across the benchmark suite
  • ~27% higher geomean formatter throughput
  • Common enabled logging paths are ~30–44% faster
  • WithError is ~40% faster
  • Chained fields are ~46% faster
  • TextFormatter paths are up to ~40% faster
  • Allocation counts are reduced by ~25–74% across measured TextFormatter cases, with the largest reductions in colored output

The improvements also show up in complete logger paths:

  • Logger + TextFormatter is ~31% faster, with ~24% fewer allocations
  • Logger + JSONFormatter is ~21% faster, with ~10% fewer allocations

... (truncated)

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.2

Changed:

  • Update github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency.

1.10.1

Fixes:

  • Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.
  • Allow function-backed implementations of error as field values.

1.10.0

Fixes:

  • Fix reentrant logging deadlocks in formatter paths.
  • Fix race conditions in formatter and entry handling.
  • Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel. Use the corresponding Panic methods when panic behavior is desired.
  • Improve concurrency safety around formatter and hook access.

Features:

  • Add slog hook for forwarding Logrus entries to log/slog.
  • Add slog.Handler for forwarding log/slog records to a Logrus logger, including levels, fields, groups, context, time, and optional caller reporting. The hook and handler can also be combined to help migrate between Logrus and log/slog.
  • Add minimal, composable logging interfaces for each log level. This enables consumers to depend on narrower interfaces, making it easier to substitute or adapt logging implementations.
  • Allow Entry.Caller to be set explicitly and preserve it across derived entries, enabling custom caller detection without Logrus overwriting caller information when ReportCaller is enabled.

Changed:

  • Raise minimum supported Go version to 1.23.
  • TextFormatter now renders []byte values as raw/quoted strings instead of slice-of-ints.
  • TextFormatter now uses distinct dimmed colors for debug and trace output.
  • TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching the behavior on other platforms.
  • Entry.HasCaller is now deprecated in favor of checking Entry.Caller directly.
  • Deprecated MutexWrap, which was unintentionally exposed as public API. It remains available as an alias for compatibility but should not be used

... (truncated)

Commits
  • 6d6a132 Merge pull request #1586 from thaJeztah/prepare_v1.10.2
  • 4f94653 update changelog for v1.10.2
  • 87434bb Merge pull request #1585 from thaJeztah/bump_testify
  • e7d2120 chore(deps): bump github.com/stretchr/testify v1.12.1
  • 8b673a9 Merge pull request #1583 from thaJeztah/release_1.10.1
  • 0b920ad Merge pull request #1584 from thaJeztah/more_coverage
  • 5e20694 TextFormatter: cover nil pointer method receivers
  • 8312732 update changelog for v1.10.1
  • e987a40 Merge pull request #1582 from thaJeztah/panic_handler
  • 17d574b TextFormatter: recover panics from Error and String methods
  • Additional commits viewable in compare view

Updates github.com/tidwall/gjson from 1.18.0 to 1.19.0

Commits

Updates golang.org/x/mod from 0.38.0 to 0.41.0

Commits
  • d0a27b2 modfile: fix Cleanup and DropTool documentation
  • d12008c all: upgrade go directive to at least 1.26.0 [generated]
  • d3398d0 go.mod: update golang.org/x dependencies

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 17, 2026
@dependabot
gomod(deps): Bump the go-deps group across 1 directory with 13 updates
7d42d36 
Bumps the go-deps group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [charm.land/bubbles/v2](https://github.com/charmbracelet/bubbles) | `2.1.0` | `2.2.1` |
| [charm.land/bubbletea/v2](https://github.com/charmbracelet/bubbletea) | `2.0.6` | `2.0.8` |
| [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.3.0` | `2.4.0` |
| [github.com/containerd/log](https://github.com/containerd/log) | `0.1.0` | `0.2.0` |
| [github.com/containerd/platforms](https://github.com/containerd/platforms) | `1.0.0-rc.4` | `1.0.0-rc.5` |
| [github.com/docker/cli](https://github.com/docker/cli) | `29.4.2+incompatible` | `29.8.1+incompatible` |
| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.29.0` | `0.33.0` |
| [github.com/moby/moby/client](https://github.com/moby/moby) | `0.4.1` | `0.6.0` |
| [github.com/posthog/posthog-go](https://github.com/posthog/posthog-go) | `1.12.4` | `1.25.2` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.4` | `1.10.2` |
| [github.com/tidwall/gjson](https://github.com/tidwall/gjson) | `1.18.0` | `1.19.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.38.0` | `0.41.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.22.0` | `0.23.0` |



Updates `charm.land/bubbles/v2` from 2.1.0 to 2.2.1
- [Release notes](https://github.com/charmbracelet/bubbles/releases)
- [Commits](charmbracelet/bubbles@v2.1.0...v2.2.1)

Updates `charm.land/bubbletea/v2` from 2.0.6 to 2.0.8
- [Release notes](https://github.com/charmbracelet/bubbletea/releases)
- [Commits](charmbracelet/bubbletea@v2.0.6...v2.0.8)

Updates `github.com/containerd/containerd/v2` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v2.3.0...v2.4.0)

Updates `github.com/containerd/log` from 0.1.0 to 0.2.0
- [Release notes](https://github.com/containerd/log/releases)
- [Commits](containerd/log@v0.1.0...v0.2.0)

Updates `github.com/containerd/platforms` from 1.0.0-rc.4 to 1.0.0-rc.5
- [Release notes](https://github.com/containerd/platforms/releases)
- [Commits](containerd/platforms@v1.0.0-rc.4...v1.0.0-rc.5)

Updates `github.com/docker/cli` from 29.4.2+incompatible to 29.8.1+incompatible
- [Commits](docker/cli@v29.4.2...v29.8.1)

Updates `github.com/moby/buildkit` from 0.29.0 to 0.33.0
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.29.0...v0.33.0)

Updates `github.com/moby/moby/client` from 0.4.1 to 0.6.0
- [Release notes](https://github.com/moby/moby/releases)
- [Changelog](https://github.com/moby/moby/blob/v0.6.0/CHANGELOG.md)
- [Commits](moby/moby@v0.4.1...v0.6.0)

Updates `github.com/posthog/posthog-go` from 1.12.4 to 1.25.2
- [Release notes](https://github.com/posthog/posthog-go/releases)
- [Changelog](https://github.com/PostHog/posthog-go/blob/main/CHANGELOG.md)
- [Commits](PostHog/posthog-go@v1.12.4...v1.25.2)

Updates `github.com/sirupsen/logrus` from 1.9.4 to 1.10.2
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.4...v1.10.2)

Updates `github.com/tidwall/gjson` from 1.18.0 to 1.19.0
- [Commits](tidwall/gjson@v1.18.0...v1.19.0)

Updates `golang.org/x/mod` from 0.38.0 to 0.41.0
- [Commits](golang/mod@v0.38.0...v0.41.0)

Updates `golang.org/x/sync` from 0.22.0 to 0.23.0
- [Commits](golang/sync@v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: charm.land/bubbles/v2
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: charm.land/bubbletea/v2
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/containerd/log
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/containerd/platforms
  dependency-version: 1.0.0-rc.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/docker/cli
  dependency-version: 29.8.0+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/moby/moby/client
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/posthog/posthog-go
  dependency-version: 1.25.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/tidwall/gjson
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/mod
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/sync
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/prod-staging/go-deps-58cc6419fa branch from ebb1a3d to 7d42d36 Compare September 20, 2026 09:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants