Bump the go-dependencies group with 15 updates by dependabot[bot] · Pull Request #254 · trustwallet/go-libs

dependabot · 2026-02-12T17:00:43Z

Bumps the go-dependencies group with 15 updates:

Package	From	To
github.com/alicebob/miniredis/v2	`2.14.3`	`2.36.1`
github.com/gin-gonic/gin	`1.9.1`	`1.11.0`
github.com/golang-migrate/migrate/v4	`4.15.2`	`4.19.1`
github.com/heralight/logrus_mate	`1.0.1-0.20170807195635-969b6efb860e`	`1.0.1`
github.com/prometheus/client_golang	`1.12.0`	`1.19.1`
github.com/sirupsen/logrus	`1.8.1`	`1.9.3`
github.com/spf13/viper	`1.8.1`	`1.21.0`
github.com/streadway/amqp	`1.0.0`	`1.1.0`
github.com/stretchr/testify	`1.8.3`	`1.11.1`
golang.org/x/exp	`0.0.0-20220827204233-334a2380cb91`	`0.0.0-20230315142452-642cacee5cc0`
golang.org/x/net	`0.10.0`	`0.47.0`
golang.org/x/sync	`0.1.0`	`0.18.0`
gorm.io/driver/postgres	`1.4.7`	`1.6.0`
gorm.io/gorm	`1.24.3`	`1.25.10`
gorm.io/plugin/dbresolver	`1.4.1`	`1.6.2`

Updates github.com/alicebob/miniredis/v2 from 2.14.3 to 2.36.1

Release notes

Sourced from github.com/alicebob/miniredis/v2's releases.

support CLUSTER SHARDS

support CLUSTER SHARDS (thanks @dadrus)

redis 8.4.0, DUMP/RESTORE, EVALRO, WAIT

return actual server address by CLUSTER NODES (thanks @nastik-kum)

support DUMP and RESTORE (thanks @alyssaruth)

support EVALRO (thanks @max-frank)

add WAIT command as no-op (thanks @aroullet)

support info stats (thanks @destinyoooo)

add "-*" keys

compare against Redis 8.4.0

drop a go.mod dep, lua fi, BLMOVE XAUTOCLAIM fixes

add Lua redis.setresp({2,3})

embed gopher-json package

fix XAUTOCLAIM (thanks @kgunning)

fix writeXpending (thanks @gnpaone)

fix BLMOVE TTL special case

constants for key types @alyssaruth

add ZRANK/ZREVRANK, fix ZINTERSTORE and XTRIM

fix ZINTERSTORE where target is one of the source sets

added support for ZRank and ZRevRank with score (thanks Jeff Howell)

fix MEMORY subcommand casing (thanks @joshaber)

use streamCmp in Xtrim (thanks @daniel-cohere)

Go >= 1.17, redis.set_repl(), StartAddrTLS, XADD and SRANDMEMBER fixes

minimum Go version is now 1.17

fix integer overflow (thanks @wszaranski)

test against the last BSD redis (7.2.4)

ignore 'redis.set_repl()' call (thanks @TingluoHuang)

various build fixes (thanks @wszaranski)

add StartAddrTLS function (thanks @agriffaut)

support for the NOMKSTREAM option for XADD (thanks @Jahaja)

return empty array for SRANDMEMBER on nonexistent key (thanks @WKBae)

SINTERCARD and [P]EXPIRETIME

support for SINTERCARD (thanks @s-barr-fetch)

support for EXPIRETIME and PEXPIRETIME (thanks @wszaranski)

fix GEO* units to be case insensitive

COUNT, IDLETIME, and HRANDFIELD

support COUNT in SCAN and ZSCAN (thanks @BarakSilverfort)

support for OBJECT IDLETIME (thanks @nerd2)

support for HRANDFIELD (thanks @sejin-P)

MEMORY USAGE, CLIENT {SET|GET}NAME, float fixes

support for MEMORY USAGE (thanks @davidroman0O)

test against Redis 7.2.0

support for CLIENT SETNAME/GETNAME (thanks @mr-karan)

... (truncated)

Changelog

Sourced from github.com/alicebob/miniredis/v2's changelog.

v2.36.1

support CLUSTER SHARDS (thanks @dadrus)

v2.36.0

return actual server address by CLUSTER NODES (thanks @nastik-kum)

support DUMP and RESTORE (thanks @alyssaruth)

support EVALRO (thanks @max-frank)

add WAIT command as no-op (thanks @aroullet)

support info stats (thanks @destinyoooo)

add "-*" keys

compare against Redis 8.4.0

v2.35.0

add Lua redis.setresp({2,3})

embed gopher-json package

fix XAUTOCLAIM (thanks @kgunning)

fix writeXpending (thanks @gnpaone)

fix BLMOVE TTL special case

constants for key types @alyssaruth

v2.34.0

fix ZINTERSTORE where target is one of the source sets

added support for ZRank and ZRevRank with score (thanks Jeff Howell)

fix MEMORY subcommand casing (thanks @joshaber)

use streamCmp in Xtrim (thanks @daniel-cohere)

v2.33.0

minimum Go version is now 1.17

fix integer overflow (thanks @wszaranski)

test against the last BSD redis (7.2.4)

ignore 'redis.set_repl()' call (thanks @TingluoHuang)

various build fixes (thanks @wszaranski)

add StartAddrTLS function (thanks @agriffaut)

support for the NOMKSTREAM option for XADD (thanks @Jahaja)

return empty array for SRANDMEMBER on nonexistent key (thanks @WKBae)

v2.32.1

support for SINTERCARD (thanks @s-barr-fetch)

support for EXPIRETIME and PEXPIRETIME (thanks @wszaranski)

fix GEO* units to be case insensitive

... (truncated)

Commits

64de52d changelog for v2.36.1
7ae63ba CLUSTER SHARDS (#431)
99437e6 v2.36.0 changelog
e5c9a13 update redis to 8.4.0 (#425)
879c91c use math/bits
dfe3831 support for "<timestamp>-*" (#426)
72a6b15 Add evalro support (#416)
3f960ee direct implementations for 2 commands
20a81e7 Merge pull request #422 from destinyoooo/client-stats
b50ef1c feat: support info stats
Additional commits viewable in compare view

Updates github.com/gin-gonic/gin from 1.9.1 to 1.11.0

Release notes

Sourced from github.com/gin-gonic/gin's releases.

v1.11.0

Changelog

Features

6ca8ddb1aed78d9ffaf984e5489111838242fedb: feat(binding): add BindPlain (#3904) (@guonaihong)

4ccfa7c275c449990818e46759d5974a953cc1c1: feat(binding): add support for unixMilli and unixMicro (#4190) (@takanuva15)

9d7c0e9e1a301f417df9dc89a8cadc3bf9063db2: feat(context): GetXxx added support for more go native types (#3633) (@CC11001100)

fb09c825e8e13134daaa90debfda198520e1b347: feat(context): add SetCookieData (#4240) (@Narita-1095305)

f05f966a0824b1d302ee556183e2579c91954266: feat(form): Support default values for collections in form binding (#4048) (@takanuva15)

3cb30679b5e3021db16c776ed7e70d380586e9ce: feat(form): add array collection format in form binding (#3986) (@slowhigh)

24d67647cb9b4e0bbdcdec7f0c2086e8004e1572: feat(form): add custom string slice for form tag unmarshal (#3970) (#3971) (@bruceNu1l)

8791c96960e719ff2f41e24163c5898656cee474: feat(fs): Export, test and document OnlyFilesFS (#3939) (@joeig)

71496abe6836462e2ed70436b7d72ea2a3585417: feat(fs): Implement loading HTML from http.FileSystem (#4053) (@sunshineplan)

3ac729dc4a497d360a23b9d7e766c622b3c99f51: feat(gin): support http3 using quic-go/quic-go (#3210) (@thinkerou)

4621b7ac982335d9a74432e182dd2bfc6d841431: feat(router): add literal colon support (#1432) (#2857) (@wssccc)

dbd8a2515093ad47cadc5c1fface89861a0b765c: feat: added AbortWithStatusPureJSON() in Context (#4290) (@ddevsr)

688a429d19d8c804447bb889d3635e2c31a5564d: feat: support custom json codec at runtime (#3391) (@timandy)

Bug fixes

8fb3136664254d7c592127f00d52849caba18a67: Revert "fix(time): binding time with empty value (#4103)" (#4245) (@appleboy)

e737e3e267beb4dc3bab16cc8be59e3902d98a94: fix(binding): prevent duplicate decoding and add validation in decodeToml (#4193) (@revevide)

4f339e6a35b163d31b30916b37f4176d385f41bd: fix(context): YAML judgment logic in Negotiate (#3966) (@RedCrazyGhost)

36b0dede4b8c4a67d92c4107cebc5a068364321d: fix(context): check handler is nil (#3413) (@hktalent)

e0d46ded6cb6974d55a255ab122d1aa6ca0cd60e: fix(context): verify URL is Non-nil in initQueryCache() (#3969) (@adrianosela)

dd33ff793861cee3baa77d575ff319119c366f3a: fix(docs): missing go markdown codeblock (#4266) (@vdusart)

b38c59de7fef67400a1c98efeae700a689c45783: fix(errors): change Unwrap method receiver to value type (#4232) (@OrkhanAlikhanov)

28e57f58b184b2305ace192e02496bb89f6fd8cb: fix(form): Set default value for form fields (#4047) (@ahmadSaeedGoda)

626d55b0c02937645c21774cacc021713de88604: fix(gin): Do not panic when handling method not allowed on empty tree (#4003) (@phsym)

7d147928ee232fce156ea7ce8ae6329e148aeb41: fix(gin): data race warning for gin mode (#1580) (@kplachkov)

c677ccc40a60386565dd0d755efacb85d153feca: fix(go): invalid Go toolchain version (#3961) (@thinkerou)

3319038418656a268c889393cb2dd4224c4469ec: fix(readme): fix broken link to English documentation (#4222) (@eduardo-ax)

674522db91d637d179c16c372d87756ea26fa089: fix(time): binding time with empty value (#4103) (@ksw2000)

ea53388e6ee4a6a0a1647b390c56eeed780e7e56: fix(tree): Keep panic infos consistent when wildcard type build faild (#4077) (@kingcanfish)

8763f33c65f7df8be5b9fe7504ab7fcf20abb41d: fix: prevent middleware re-entry issue in HandleContext (#3987) (@bound2)

7a1b655074c313f9491c83bb8ea164cdc4a9afe9: fix: sonic on arm64 (#4234) (@yashgorana)

5826722a87cf5855fcc4b794cbef11612352771d: fix: version number discrepancy (#4299) (@suwakei)

Enhancements

40725d85badd647870df6f9fa7a75ac76341f804: chore(bind): return 413 status code when error is http.MaxBytesError (#4227) (@ItalyPaleAle)

f875d8728306c2c2c6f504900ab08cd1d8c47f12: chore(context): test context initialization and handler logic (#4087) (@appleboy)

e7693e67c23005743502962d3bb9839a354d6688: chore(deps): bump actions/setup-go from 5 to 6 (#4351) (@dependabot[bot])

afa0c31d97e1b112ccfe7652957f7d8514580c72: chore(deps): bump github.com/gin-contrib/sse from 0.1.0 to 1.1.0 (#4216) (@dependabot[bot])

255af882db4baf0ed6209f1a5471f1663c5d0060: chore(deps): bump github.com/go-playground/validator/v10 (#4208) (@dependabot[bot])

545fd74379a0b167a918e38626ae5f7eb83fb243: chore(deps): bump github.com/go-playground/validator/v10 (#4289) (@dependabot[bot])

c3c8620a7fb4e09c7845feca4e8e8a8678a2685d: chore(deps): bump github.com/go-playground/validator/v10 from 10.20.0 to 10.22.1 (#4052) (@dependabot[bot])

cf32d2dcf8c7534f59727c5e213e45f2412c593a: chore(deps): bump github.com/pelletier/go-toml/v2 from 2.2.2 to 2.2.4 (#4212) (@dependabot[bot])

bb824731032856460aa3ffc23bd90e11bf7d5199: chore(deps): bump github.com/quic-go/quic-go from 0.48.2 to 0.50.1 (#4197) (@dependabot[bot])

61c2b1c28f0c5a754330545e31f02cd6d6f7944e: chore(deps): bump github.com/quic-go/quic-go from 0.51.0 to 0.52.0 (#4250) (@dependabot[bot])

b7d6308bcc84066df79a047ae363a6120fe87808: chore(deps): bump github.com/quic-go/quic-go from 0.52.0 to 0.53.0 (#4281) (@dependabot[bot])

077a2f39c85700ba0823f85ed29cec0c8f2cbdfc: chore(deps): bump github.com/quic-go/quic-go from 0.53.0 to 0.54.0 (#4328) (@dependabot[bot])

46150257b3eec60e3e0bf1cee7c03439099aef83: chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (#4347) (@dependabot[bot])

a6287825c95821a378a34f8a5c9139ea1f6ebd96: chore(deps): bump github.com/ugorji/go/codec from 1.2.12 to 1.3.0 (#4268) (@dependabot[bot])

cc4e11438cd6c0bcc632fe3492d3817dfa21c337: chore(deps): bump golang.org/x/net from 0.25.0 to 0.27.0 (#4013) (@dependabot[bot])

... (truncated)

Changelog

Sourced from github.com/gin-gonic/gin's changelog.

Gin v1.11.0

Features

feat(gin): Experimental support for HTTP/3 using quic-go/quic-go (#3210)

feat(form): add array collection format in form binding (#3986), add custom string slice for form tag unmarshal (#3970)

feat(binding): add BindPlain (#3904)

feat(fs): Export, test and document OnlyFilesFS (#3939)

feat(binding): add support for unixMilli and unixMicro (#4190)

feat(form): Support default values for collections in form binding (#4048)

feat(context): GetXxx added support for more go native types (#3633)

Enhancements

perf(context): optimize getMapFromFormData performance (#4339)

refactor(tree): replace string(/) with "/" in node.insertChild (#4354)

refactor(render): remove headers parameter from writeHeader (#4353)

refactor(context): simplify "GetType()" functions (#4080)

refactor(slice): simplify SliceValidationError Error method (#3910)

refactor(context):Avoid using filepath.Dir twice in SaveUploadedFile (#4181)

refactor(context): refactor context handling and improve test robustness (#4066)

refactor(binding): use strings.Cut to replace strings.Index (#3522)

refactor(context): add an optional permission parameter to SaveUploadedFile (#4068)

refactor(context): verify URL is Non-nil in initQueryCache() (#3969)

refactor(context): YAML judgment logic in Negotiate (#3966)

tree: replace the self-defined 'min' to official one (#3975)

context: Remove redundant filepath.Dir usage (#4181)

Bug Fixes

fix: prevent middleware re-entry issue in HandleContext (#3987)

fix(binding): prevent duplicate decoding and add validation in decodeToml (#4193)

fix(gin): Do not panic when handling method not allowed on empty tree (#4003)

fix(gin): data race warning for gin mode (#1580)

fix(context): verify URL is Non-nil in initQueryCache() (#3969)

fix(context): YAML judgment logic in Negotiate (#3966)

fix(context): check handler is nil (#3413)

fix(readme): fix broken link to English documentation (#4222)

fix(tree): Keep panic infos consistent when wildcard type build faild (#4077)

Build process updates / CI

ci: integrate Trivy vulnerability scanning into CI workflow (#4359)

ci: support Go 1.25 in CI/CD (#4341)

build(deps): upgrade github.com/bytedance/sonic from v1.13.2 to v1.14.0 (#4342)

ci: add Go version 1.24 to GitHub Actions (#4154)

build: update Gin minimum Go version to 1.21 (#3960)

ci(lint): enable new linters (testifylint, usestdlibvars, perfsprint, etc.) (#4010, #4091, #4090)

ci(lint): update workflows and improve test request consistency (#4126)

... (truncated)

Commits

6ad6205 docs(changelog): upgrade Gin to v1.11.0 and add release notes (#4361)
7858527 docs(changelog): update release notes for Gin v1.10.1 (#4360)
cb000f5 ci: integrate Trivy vulnerability scanning into CI workflow (#4359)
2119046 ci: support Go 1.25 (#4341)
da372fc build(deps): upgrade github.com/bytedance/sonic from v1.13.2 to v1.14.0 (#4342)
e198f6e refactor(render): remove headers parameter from writeHeader (#4353)
cca98d2 chore(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.9 (#4356)
9b1e353 refactor(tree): replace string(/) with "/" in node.insertChild (#4354)
f9bd00a perf(context): optimize getMapFromFormData performance (#4339)
28172fa chore(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.8 (#4346)
Additional commits viewable in compare view

Updates github.com/golang-migrate/migrate/v4 from 4.15.2 to 4.19.1

Release notes

Sourced from github.com/golang-migrate/migrate/v4's releases.

v4.19.1

What's Changed

Bump github.com/dvsekhvalnov/jose2go from 1.6.0 to 1.7.0 by @dependabot[bot] in golang-migrate/migrate#1334

Update docker image to use go 1.25, addressing vulnerabilities by @matsoob in golang-migrate/migrate#1333

Bump golang.org/x/crypto from 0.36.0 to 0.45.0 by @dependabot[bot] in golang-migrate/migrate#1335

fix linter issues by @HaraldNordgren in golang-migrate/migrate#1325

Rename databaseName to databaseDriverName by @iamonah in golang-migrate/migrate#1304

chore: Update cloud.google.com/go/spanner version by @jferrl in golang-migrate/migrate#1330

Bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @dependabot[bot] in golang-migrate/migrate#1336

chore: remove dependency on "hashicorp/go-multierror" by @leonklingele in golang-migrate/migrate#1322

New Contributors

@matsoob made their first contribution in golang-migrate/migrate#1333

@iamonah made their first contribution in golang-migrate/migrate#1304

@jferrl made their first contribution in golang-migrate/migrate#1330

@leonklingele made their first contribution in golang-migrate/migrate#1322

Full Changelog: golang-migrate/migrate@v4.19.0...v4.19.1

v4.19.0

What's Changed

Fixed sqlserver not actually getting a lock if lock is already set by @urbim in golang-migrate/migrate#1186

Bump golang.org/x/oauth2 from 0.18.0 to 0.27.0 by @dependabot[bot] in golang-migrate/migrate#1299

Update apt-key to gpg by @sandhilt in golang-migrate/migrate#1277

Update dktest to v0.4.6 for docker vuln fix by @dhui in golang-migrate/migrate#1309

refactor: Remove go.uber.org/atomic in favor of std sync/atomic by @romshark in golang-migrate/migrate#1303

Ensure bufferWriter is always closed in Migration.Buffer and propagate close errors by @ckantcs in golang-migrate/migrate#1308

Add support for Go 1.25 and drop support for 1.23 by @dhui in golang-migrate/migrate#1310

New Contributors

@urbim made their first contribution in golang-migrate/migrate#1186

@sandhilt made their first contribution in golang-migrate/migrate#1277

@romshark made their first contribution in golang-migrate/migrate#1303

@ckantcs made their first contribution in golang-migrate/migrate#1308

Full Changelog: golang-migrate/migrate@v4.18.3...v4.19.0

v4.18.3

Changelog

a4d0a1b Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2

f37ef79 Bump golang.org/x/crypto from 0.31.0 to 0.35.0

5b97c92 Bump golang.org/x/net from 0.33.0 to 0.38.0

e6d84f6 Drop support for Go 1.22 and add support for Go 1.24

fccd197 Mention CLI install instructions in main README

34c2b4a Remove redundant build tags

a868033 Update FAQ.md - typo

7269490 Update golangci-lint version used in GitHub Actions

c5137c4 Update migrate -help output for the readme file

033835a Update to dktest v0.4.5

8b09191 fix: typo limited not limitted

... (truncated)

Commits

89e308c chore: remove dependency on "hashicorp/go-multierror" (#1322)
472ef2e Merge pull request #1336 from golang-migrate/dependabot/go_modules/golang.org...
8d76259 Bump golang.org/x/crypto from 0.43.0 to 0.45.0
9f9df7c chore: Update cloud.google.com/go/spanner version (#1330)
a371c8e Merge pull request #1304 from iamonah/fix/clarify-databaseName-meaning
43cc3b3 Merge pull request #1325 from HaraldNordgren/linter_issues
f939a89 Merge pull request #1335 from golang-migrate/dependabot/go_modules/golang.org...
6dd86e0 Bump golang.org/x/crypto from 0.36.0 to 0.45.0
70e6d6d Merge pull request #1333 from matsoob/updateGoInBaseImage
a51d0da Merge pull request #1334 from golang-migrate/dependabot/go_modules/github.com...
Additional commits viewable in compare view

Updates github.com/heralight/logrus_mate from 1.0.1-0.20170807195635-969b6efb860e to 1.0.1

Commits

See full diff in compare view

Updates github.com/prometheus/client_golang from 1.12.0 to 1.19.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.19.1

What's Changed

Security patches for golang.org/x/sys and google.golang.org/protobuf

New Contributors

@lukasauk made their first contribution in prometheus/client_golang#1494

Full Changelog: prometheus/client_golang@v1.19.0...v1.19.1

v1.19.0

What's Changed

The module prometheus/common v0.48.0 introduced an incompatibility when used together with client_golang (See prometheus/client_golang#1448 for more details). If your project uses client_golang and you want to use prometheus/common v0.48.0 or higher, please update client_golang to v1.19.0.

[CHANGE] Minimum required go version is now 1.20 (we also test client_golang against new 1.22 version). #1445 #1449

[FEATURE] collectors: Add version collector. #1422 #1427

New Contributors

@michurin made their first contribution in prometheus/client_golang#1423

@kavu made their first contribution in prometheus/client_golang#1445

@ywwg made their first contribution in prometheus/client_golang#1448

Full Changelog: prometheus/client_golang@v1.18.0...v1.19.0

v1.18.0

What's Changed

[FEATURE] promlint: Allow creation of custom metric validations. #1311

[FEATURE] Go programs using client_golang can be built in wasip1 OS. #1350

[BUGFIX] histograms: Add timer to reset ASAP after bucket limiting has happened. #1367

[BUGFIX] testutil: Fix comparison of metrics with empty Help strings. #1378

[ENHANCEMENT] Improved performance of MetricVec.WithLabelValues(...). #1360

New Contributors

@srenatus made their first contribution in prometheus/client_golang#1350

@jadolg made their first contribution in prometheus/client_golang#1342

@manas-rust made their first contribution in prometheus/client_golang#1383

@bluekeyes made their first contribution in prometheus/client_golang#1378

@tsipo made their first contribution in prometheus/client_golang#1387

Full Changelog: prometheus/client_golang@v1.17.0...v1.18.0

v1.17.0

What's Changed

[CHANGE] Minimum required go version is now 1.19 (we also test client_golang against new 1.21 version). #1325

[FEATURE] Add support for Created Timestamps in Counters, Summaries and Historams. #1313

[ENHANCEMENT] Enable detection of a native histogram without observations. #1314

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

Unreleased

[FEATURE] HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #1925

Unreleased exp module

[BUGFIX] exp/api: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

1.23.0 / 2025-07-30

[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812

[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766

[FEATURE] Add exemplars for native histograms #1686

[ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823

[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833

[BUGFIX] exp/api: client prompt return on context cancellation #1729

1.22.0 / 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:
import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
[FEATURE] prometheus: Add new CollectorFunc utility #1724

[CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738

[FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743

[CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

1.21.1 / 2025-03-04

... (truncated)

Commits

6e3f4b1 Cut 1.19.1 (#1494)
cad1bfa Merge pull request #1454 from prometheus/small-nits
0aa8c9f Rephrase incompatibility with common v0.48.0
77d4003 Add 1.19.0 changelog (#1451)
14259fa Merge pull request #1448 from ywwg/owilliams/content-negotiation
6d03920 deps: bump prometheus/common version
353395b Remove support for go 1.19 (#1449)
9dd5d2a Merge pull request #1445 from kavu/add_go122_metrics_test
c906a5e Add support for Go 1.22
7ac9036 Merge pull request #1440 from prometheus/dependabot/github_actions/github-act...
Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.8.1 to 1.9.3

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.9.3

Fix a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines sirupsen/logrus@f9291a5 (re-apply sirupsen/logrus#1376)

Fix panic in Writer sirupsen/logrus@d40e25c

Full Changelog: sirupsen/logrus@v1.9.2...v1.9.3

v1.9.2

Revert sirupsen/logrus#1376, which introduced a regression in v1.9.1

Full Changelog: sirupsen/logrus@v1.9.1...v1.9.2

v1.9.1

What's Changed

Fix data race in hooks.test package by @FrancoisWagner in sirupsen/logrus#1362

Add instructions to use different log levels for local and syslog by @tommyblue in sirupsen/logrus#1372

This commit fixes a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines. by @ozfive in sirupsen/logrus#1376

Use text when shows the logrus output by @xieyuschen in sirupsen/logrus#1339

New Contributors

@FrancoisWagner made their first contribution in sirupsen/logrus#1362

@tommyblue made their first contribution in sirupsen/logrus#1372

@ozfive made their first contribution in sirupsen/logrus#1376

@xieyuschen made their first contribution in sirupsen/logrus#1339

Full Changelog: sirupsen/logrus@v1.9.0...v1.9.1

v1.9.0

No release notes provided.

v1.8.3

What's Changed

Add instructions to use different log levels for local and syslog by @tommyblue in sirupsen/logrus#1372

This commit fixes a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines. by @ozfive in sirupsen/logrus#1376

Use text when shows the logrus output by @xieyuschen in sirupsen/logrus#1339

New Contributors

@tommyblue made their first contribution in sirupsen/logrus#1372

@ozfive made their first contribution in sirupsen/logrus#1376

@xieyuschen made their first contribution in sirupsen/logrus#1339

Full Changelog: sirupsen/logrus@v1.8.2...v1.8.3

v1.8.2

What's Changed

CI: use GitHub Actions by @thaJeztah in sirupsen/logrus#1239

go.mod: github.com/stretchr/testify v1.7.0 by @thaJeztah in sirupsen/logrus#1246

Change godoc badge to pkg.go.dev badge by @minizilla in sirupsen/logrus#1249

Add support for the logger private buffer pool. by @edoger in sirupsen/logrus#1253

bump golang.org/x/sys depency version by @dgsb in sirupsen/logrus#1280

Update README.md by @runphp in sirupsen/logrus#1266

... (truncated)

Commits

d40e25c fix panic in Writer
f9291a5 Revert "Revert "Merge pull request #1376 from ozfive/master""
352781d Revert "Merge pull request #1376 from ozfive/master"
b30aa27 Merge pull request #1339 from xieyuschen/patch-1
6acd903 Merge pull request #1376 from ozfive/master
105e63f Merge pull request #1 from ashmckenzie/ashmckenzie/fix-writer-scanner
c052ba6 Scan text in 64KB chunks
e59b167 Merge pull request #1372 from tommyblue/syslog_different_loglevels
766cfec This commit fixes a potential denial of service vulnerability in logrus.Write...
70234da Add instructions to use different log levels for local and syslog
Additional commits viewable in compare view

Updates github.com/spf13/viper from 1.8.1 to 1.21.0

Release notes

Sourced from github.com/spf13/viper's releases.

v1.21.0

What's Changed

Enhancements 🚀

Add support for flags pflag.BoolSlice, pflag.UintSlice and pflag.Float64Slice by @nmvalera in spf13/viper#2015

feat: use maintained yaml library by @sagikazarmark in spf13/viper#2040

Bug Fixes 🐛

fix(config): get config type from v.configType or config file ext by @GuillaumeBAECHLER in spf13/viper#2003

fix: config type check when loading any config by @sagikazarmark in spf13/viper#2007

Dependency Updates ⬆️

Update dependencies by @sagikazarmark in spf13/viper#1993

build(deps): bump github.com/spf13/cast from 1.7.1 to 1.8.0 by @dependabot[bot] in spf13/viper#2017

build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.3 to 2.2.4 by @dependabot[bot] in spf13/viper#2013

build(deps): bump github.com/sagikazarmark/locafero from 0.8.0 to 0.9.0 by @dependabot[bot] in spf13/viper#2008

build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 in /remote by @dependabot[bot] in spf13/viper#2016

build(deps): bump github.com/spf13/cast from 1.8.0 to 1.9.2 by @dependabot[bot] in spf13/viper#2020

build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 by @dependabotDescription has been truncated

Bumps the go-dependencies group with 15 updates: | Package | From | To | | --- | --- | --- | | [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) | `2.14.3` | `2.36.1` | | [github.com/gin-gonic/gin](https://github.com/gin-gonic/gin) | `1.9.1` | `1.11.0` | | [github.com/golang-migrate/migrate/v4](https://github.com/golang-migrate/migrate) | `4.15.2` | `4.19.1` | | [github.com/heralight/logrus_mate](https://github.com/heralight/logrus_mate) | `1.0.1-0.20170807195635-969b6efb860e` | `1.0.1` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.12.0` | `1.19.1` | | [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.8.1` | `1.9.3` | | [github.com/spf13/viper](https://github.com/spf13/viper) | `1.8.1` | `1.21.0` | | [github.com/streadway/amqp](https://github.com/streadway/amqp) | `1.0.0` | `1.1.0` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.8.3` | `1.11.1` | | [golang.org/x/exp](https://github.com/golang/exp) | `0.0.0-20220827204233-334a2380cb91` | `0.0.0-20230315142452-642cacee5cc0` | | [golang.org/x/net](https://github.com/golang/net) | `0.10.0` | `0.47.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.1.0` | `0.18.0` | | [gorm.io/driver/postgres](https://github.com/go-gorm/postgres) | `1.4.7` | `1.6.0` | | [gorm.io/gorm](https://github.com/go-gorm/gorm) | `1.24.3` | `1.25.10` | | [gorm.io/plugin/dbresolver](https://github.com/go-gorm/dbresolver) | `1.4.1` | `1.6.2` | Updates `github.com/alicebob/miniredis/v2` from 2.14.3 to 2.36.1 - [Release notes](https://github.com/alicebob/miniredis/releases) - [Changelog](https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md) - [Commits](alicebob/miniredis@v2.14.3...v2.36.1) Updates `github.com/gin-gonic/gin` from 1.9.1 to 1.11.0 - [Release notes](https://github.com/gin-gonic/gin/releases) - [Changelog](https://github.com/gin-gonic/gin/blob/master/CHANGELOG.md) - [Commits](gin-gonic/gin@v1.9.1...v1.11.0) Updates `github.com/golang-migrate/migrate/v4` from 4.15.2 to 4.19.1 - [Release notes](https://github.com/golang-migrate/migrate/releases) - [Commits](golang-migrate/migrate@v4.15.2...v4.19.1) Updates `github.com/heralight/logrus_mate` from 1.0.1-0.20170807195635-969b6efb860e to 1.0.1 - [Commits](https://github.com/heralight/logrus_mate/commits) Updates `github.com/prometheus/client_golang` from 1.12.0 to 1.19.1 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.12.0...v1.19.1) Updates `github.com/sirupsen/logrus` from 1.8.1 to 1.9.3 - [Release notes](https://github.com/sirupsen/logrus/releases) - [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md) - [Commits](sirupsen/logrus@v1.8.1...v1.9.3) Updates `github.com/spf13/viper` from 1.8.1 to 1.21.0 - [Release notes](https://github.com/spf13/viper/releases) - [Commits](spf13/viper@v1.8.1...v1.21.0) Updates `github.com/streadway/amqp` from 1.0.0 to 1.1.0 - [Commits](streadway/amqp@v1.0.0...v1.1.0) Updates `github.com/stretchr/testify` from 1.8.3 to 1.11.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.8.3...v1.11.1) Updates `golang.org/x/exp` from 0.0.0-20220827204233-334a2380cb91 to 0.0.0-20230315142452-642cacee5cc0 - [Commits](https://github.com/golang/exp/commits) Updates `golang.org/x/net` from 0.10.0 to 0.47.0 - [Commits](golang/net@v0.10.0...v0.47.0) Updates `golang.org/x/sync` from 0.1.0 to 0.18.0 - [Commits](golang/sync@v0.1.0...v0.18.0) Updates `gorm.io/driver/postgres` from 1.4.7 to 1.6.0 - [Commits](go-gorm/postgres@v1.4.7...v1.6.0) Updates `gorm.io/gorm` from 1.24.3 to 1.25.10 - [Release notes](https://github.com/go-gorm/gorm/releases) - [Commits](go-gorm/gorm@v1.24.3...v1.25.10) Updates `gorm.io/plugin/dbresolver` from 1.4.1 to 1.6.2 - [Commits](go-gorm/dbresolver@v1.4.1...v1.6.2) --- updated-dependencies: - dependency-name: github.com/alicebob/miniredis/v2 dependency-version: 2.36.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/gin-gonic/gin dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/golang-migrate/migrate/v4 dependency-version: 4.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/heralight/logrus_mate dependency-version: 1.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/prometheus/client_golang dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/sirupsen/logrus dependency-version: 1.9.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/spf13/viper dependency-version: 1.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/streadway/amqp dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/stretchr/testify dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/exp dependency-version: 0.0.0-20230315142452-642cacee5cc0 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: golang.org/x/net dependency-version: 0.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/sync dependency-version: 0.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: gorm.io/driver/postgres dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: gorm.io/gorm dependency-version: 1.25.10 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: gorm.io/plugin/dbresolver dependency-version: 1.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added the dependencies Pull requests that update a dependency file label Feb 12, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the go-dependencies group with 15 updates#254

Bump the go-dependencies group with 15 updates#254
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-dependencies-28dd22ca11

dependabot Bot commented on behalf of github Feb 12, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

support CLUSTER SHARDS

redis 8.4.0, DUMP/RESTORE, EVALRO, WAIT

drop a go.mod dep, lua fi, BLMOVE XAUTOCLAIM fixes

add ZRANK/ZREVRANK, fix ZINTERSTORE and XTRIM

Go >= 1.17, redis.set_repl(), StartAddrTLS, XADD and SRANDMEMBER fixes

SINTERCARD and [P]EXPIRETIME

COUNT, IDLETIME, and HRANDFIELD

MEMORY USAGE, CLIENT {SET|GET}NAME, float fixes

v2.36.1

v2.36.0

v2.35.0

v2.34.0

v2.33.0

v2.32.1

v1.11.0

Changelog

Features

Bug fixes

Enhancements

Gin v1.11.0

Features

Enhancements

Bug Fixes

Build process updates / CI

v4.19.1

What's Changed

New Contributors

v4.19.0

What's Changed

New Contributors

v4.18.3

Changelog

v1.19.1

What's Changed

New Contributors

v1.19.0

What's Changed

New Contributors

v1.18.0

What's Changed

New Contributors

v1.17.0

What's Changed

Unreleased

Unreleased exp module

1.23.2 / 2025-09-05

1.23.1 / 2025-09-04

1.23.0 / 2025-07-30

1.22.0 / 2025-04-07

1.21.1 / 2025-03-04

v1.9.3

v1.9.2

v1.9.1

What's Changed

New Contributors

v1.9.0

v1.8.3

What's Changed

New Contributors

v1.8.2

What's Changed

v1.21.0

What's Changed

Enhancements 🚀

Bug Fixes 🐛

Dependency Updates ⬆️

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Feb 12, 2026 •

edited

Loading

Unreleased `exp` module