maint(deps): bump the minor-patch group across 1 directory with 22 updates by dependabot[bot] · Pull Request #5 · makenotion/refinery

dependabot · 2026-08-01T18:48:24Z

Bumps the minor-patch group with 13 updates in the / directory:

Package	From	To
github.com/grafana/pyroscope-go/godeltaprof	`0.1.9`	`0.1.12`
github.com/klauspost/compress	`1.18.6`	`1.19.1`
github.com/open-telemetry/opentelemetry-collector-contrib/pkg/pdatatest	`0.151.0`	`0.157.0`
github.com/pelletier/go-toml/v2	`2.3.0`	`2.4.3`
github.com/prometheus/client_golang	`1.23.2`	`1.24.1`
github.com/redis/go-redis/v9	`9.19.0`	`9.21.0`
github.com/tidwall/gjson	`1.18.0`	`1.19.0`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	`0.68.0`	`0.69.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	`0.68.0`	`0.69.0`
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp	`1.43.0`	`1.44.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace	`1.43.0`	`1.44.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	`1.43.0`	`1.44.0`
go.opentelemetry.io/proto/otlp	`1.10.0`	`1.11.0`

Updates github.com/grafana/pyroscope-go/godeltaprof from 0.1.9 to 0.1.12

Release notes

Sourced from github.com/grafana/pyroscope-go/godeltaprof's releases.

godeltaprof/v0.1.8 fix panic on go 1.23

Fixes:

Fix go 1.23 panic at initialization grafana/pyroscope-go#118

Incorrect function names for generics functions grafana/pyroscope-go#106

Handle renamed runtime.pprof_cyclesPerSecond grafana/pyroscope-go#107

Fix mutex tests on gotip grafana/pyroscope-go#108

Chore:

Decouple pprof builder from delta computation with an interface grafana/pyroscope-go#110

Commits

83467b8 fix(deps): update module github.com/grafana/pyroscope-go to v1.4.0 (#222)
d20dc8f fix(security/unknown/): update go toolchain directive to v1.25.12 [security] ...
0acc00b fix(security/unknown/godeltaprof): update go toolchain directive to v1.25.12 ...
693d96a fix(security/unknown/godeltaprof/compat): update go toolchain directive to v1...
96d2ae5 fix(security/unknown/x/k6): update go toolchain directive to v1.25.12 [securi...
d893cd3 fix: semconv labels do not override user provided labels (#221)
e1528d2 feat: report SDK name and version as series labels (#220)
684b168 Extend grafana-renovate-config base preset (#219)
072099c chore: remove examples (#216)
d6858a2 fix(deps): update module github.com/grafana/pyroscope-go to v1.3.1 (#217)
Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.18.6 to 1.19.1

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.19.1

What's Changed

zstd: Validate SnappyConverter literal copies by @klauspost in klauspost/compress#1170

flate: use Peek instead of ReadByte for the bufio.Reader decode path by @joechenrh in klauspost/compress#1169

zstd: bump avo pin, regenerate arm64 asm by @lizthegrey in klauspost/compress#1167

New Contributors

@joechenrh made their first contribution in klauspost/compress#1169

Full Changelog: klauspost/compress@v1.19.0...v1.19.1

v1.19.0

What's Changed

zstd: Add true concurrent stream encoding by @klauspost in klauspost/compress#1136

zstd: arm64 decoder asm by @lizthegrey in klauspost/compress#1160

zstd: avoid unused BuildDict encoder allocation by @snissn in klauspost/compress#1147

flate: Add inflate checkpoints by @klauspost in klauspost/compress#1154

snappy/s2: Limit length of varint in decodedLen by @eustas in klauspost/compress#1148

gzhttp: match qvalue parameter case-insensitively (RFC 7231) by @z9z in klauspost/compress#1149

zip: add NameDecoder callback for legacy encoding rewrite by @SAY-5 in klauspost/compress#1150

huff0: Allow building tables from histogram. by @klauspost in klauspost/compress#1155

huff0: Allow building table from oversized histogram. by @klauspost in klauspost/compress#1156

s2sx: Clean symlink targets by @klauspost in klauspost/compress#1163

New Contributors

@snissn made their first contribution in klauspost/compress#1147

@eustas made their first contribution in klauspost/compress#1148

@z9z made their first contribution in klauspost/compress#1149

@SAY-5 made their first contribution in klauspost/compress#1150

@HNO3Miracle made their first contribution in klauspost/compress#1165

Full Changelog: klauspost/compress@v1.18.6...v1.19.0

v1.18.7

Fix s2.NewDict OOB read.

Security release without other changes.

Full Changelog: klauspost/compress@v1.18.6...v1.18.7

Commits

2602f4a Update changelog for version 1.19.0
983acec add defensive checks
9960386 zstd: Validate SnappyConverter literal copies (#1170)
e29d4d3 flate: use Peek instead of ReadByte for the bufio.Reader decode path (#...
c0bbc84 zstd: bump avo pin, regenerate arm64 asm (#1167)
efdb6ed build(deps): bump the github-actions group with 6 updates (#1166)
f0953f9 flate: fix buffer formatting in tests (#1165)
ab2e3cc zstd: Add arm64 decoder asm (#1160)
bb2723d Merge commit from fork
539243b s2sx: Clean symlink targets (#1163)
Additional commits viewable in compare view

Updates github.com/open-telemetry/opentelemetry-collector-contrib/pkg/pdatatest from 0.151.0 to 0.157.0

Release notes

Sourced from github.com/open-telemetry/opentelemetry-collector-contrib/pkg/pdatatest's releases.

v0.157.0

The OpenTelemetry Collector Contrib contains everything in the opentelemetry-collector release, be sure to check the release notes there as well.

End User Changelog

🛑 Breaking changes 🛑
connector/failover: Remove deprecated field retry_gap and max_retries (#49583)

connector/routing: Promote the connector.routing.defaultErrorModeIgnore feature gate to beta. The default error_mode is now ignore instead of propagate. (#48418) To restore the previous default of propagate, run the collector with the feature gate disabled by passing --feature-gates=-connector.routing.defaultErrorModeIgnore.

processor/aws_ecs_attributes: Rename the component identifier from awsecsattributes to aws_ecs_attributes to follow the component naming guidelines. (#44476) The processor is still in development, so the old identifier is removed rather than kept as a deprecated alias.

processor/filter: Promote the processor.filter.defaultErrorModeIgnore feature gate to stable. The default top-level error_mode is now permanently ignore instead of propagate. (#47232) The gate will be removed in v0.159.0.

processor/tail_sampling: Fix metric units to comply with the UCUM specification (#49453)

processor/transform: Promote the processor.transform.defaultErrorModeIgnore feature gate to stable. The default top-level error_mode is now permanently ignore instead of propagate. (#47231) The gate will be removed in v0.159.0.

receiver/apache_spark: Fix metric units to comply with the UCUM specification (#49453)

receiver/chrony: Fix metric units to comply with the UCUM specification (#49453)

receiver/haproxy: Fix metric units to comply with the UCUM specification (#49453)
receiver/host_metrics: Make the cpu attribute opt-in for hostmetrics CPU time and utilization metrics. (#49161) By default, system.cpu.time and system.cpu.utilization are now aggregated across logical CPUs and no longer include the cpu attribute. To restore the previous per-logical-CPU output, configure:
receivers:
  hostmetrics:
    scrapers:
      cpu:
        metrics:
          system.cpu.time:
            attributes: [cpu, state]
          system.cpu.utilization:
            attributes: [cpu, state]
receiver/host_metrics: Enable the system.cpu.logical.count metric by default in the CPU scraper. (#49325) To restore the previous behavior, disable the new metric by applying the following config:
receivers:
  host_metrics:
    scrapers:
      cpu:
        metrics:
          system.cpu.logical.count:
            enabled: false
receiver/memcached: Fix metric units to comply with the UCUM specification (#49453)

receiver/mongodb: Fix metric units to comply with the UCUM specification (#49453)

receiver/nginx: Fix metric units to comply with the UCUM specification (#49453)

... (truncated)

Changelog

Sourced from github.com/open-telemetry/opentelemetry-collector-contrib/pkg/pdatatest's changelog.

v0.157.0

🛑 Breaking changes 🛑

pkg/ottl: Break lambda arity validation into a separate function. (#49421) This allows statically verifying arity.

💡 Enhancements 💡

internal/k8sinventory: Extract checkpoint package and update Observer interface to return startup errors. (#43602)

Extracted internal/k8sinventory/checkpoint as a shared package so checkpoint logic can be reused across observer implementations.

The Observer interface's Start method now returns an error, allowing callers to detect and propagate startup failures.

pkg/ottl: Add LambdaActivation.IsArgBound and variadic lambda argument evaluation helpers. (#49191)

IsArgBound reports whether a positional argument maps to a named formal parameter or a blank ("_") placeholder.

Lambda evaluation helpers now normalize only bound arguments.

pkg/pdatatest: Add IncludeHistogramExplicitBounds option to pmetricassert snapshot generation. (#49732) The option includes histogram explicit bounds without including other histogram datapoint values. Snapshot compaction preserves selected histogram datapoint assertion fields, including empty explicit bounds.

v0.156.0

🛑 Breaking changes 🛑

all: handle breaking change in pdata/pprofile (#49373)

pkg/ottl: Switch LambdaExpression arguments to be pointers. (#49420) These values are intended to be mutable and are passed by reference in normal use, so this keeps symmetry between the argument declaration and their use by the function.

💡 Enhancements 💡

pkg/ottl: Add ottl.NewTestingLambdaExpression and internal helpers for implementing lambda-based OTTL functions. (#49180) Adds ottl.NewTestingLambdaExpression, a test helper that builds a LambdaExpression with a custom value body. The callback receives resolveBinding func(string) any to read formal parameters from the active local scope during evaluation.

Also introduces internal helpers to support lambda-based OTTL functions:

funcutil.GetSliceOrMapValue coerces a getter result to pcommon.Slice or pcommon.Map.

funcutil.EvaluateBiFunction and funcutil.EvaluateBiPredicate bind two positional arguments, normalize them, and evaluate a LambdaActivation.

ottlcommon.NormalizeValue converts values, including pcommon.Value, into types used by OTTL comparisons.

pkg/ottl: Add String() method to ottl.Statement, ottl.Condition, and ottl.ValueExpression that return the original OTTL text used during parsing. (#49415)

processor/transform: Add exemplar context support to the transform processor, allowing metric_statements to read and modify exemplar fields on metric datapoints. (#49022)

... (truncated)

Commits

89e4355 [chore] Prepare release 0.157.0 (#49802)
95d1ae1 Update github-actions deps (#49776)
445eee6 Update dockerfile deps (#49775)
c0d84e7 Update module github.com/apache/pulsar-client-go to v0.21.0 (#49786)
88d3b4c Update module github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/a...
b808b2e Update module google.golang.org/grpc to v1.82.1 (#49784)
920c363 Update module github.com/getsentry/sentry-go to v0.48.0 (#49788)
6d61a75 [chore][exporter/awsxray] migrate feature gate to metadata.yaml (#48619)
2daec02 Update module github.com/cloudfoundry/go-cfclient/v3 to v3.0.0-beta.1 (#49780)
55df8ed Update module github.com/go-ldap/ldap/v3 to v3.4.14 (#49781)
Additional commits viewable in compare view

Updates github.com/pelletier/go-toml/v2 from 2.3.0 to 2.4.3

Release notes

Sourced from github.com/pelletier/go-toml/v2's releases.

v2.4.3

What's Changed

What's new

Add RawMessage marshal support to unstable by @pelletier in pelletier/go-toml#1084

Fixed bugs

Fix invalid TOML from commented multi-line values by @pelletier in pelletier/go-toml#1081

Deliver the whole document to a root Unmarshaler (#994) by @pelletier in pelletier/go-toml#1083

fix: report table placement errors with position and key context by @pelletier in pelletier/go-toml#1086

fix: do not recurse forever on recursively embedded structs by @pelletier in pelletier/go-toml#1087

fix: error instead of panic on nil unexported embedded pointer by @pelletier in pelletier/go-toml#1089

fix: bound array and inline table nesting depth to prevent stack-overflow DoS by @pelletier in pelletier/go-toml#1092

Documentation

unstable/kind: drop duplicate 'a' from LocalDate comment by @c-tonneslan in pelletier/go-toml#1062

Other changes

perf: avoid interface boxing when decoding date/time values by @nishantmehta in pelletier/go-toml#1085

New Contributors

@nishantmehta made their first contribution in pelletier/go-toml#1085

@c-tonneslan made their first contribution in pelletier/go-toml#1062

Full Changelog: pelletier/go-toml@v2.4.2...v2.4.3

v2.4.2

What's Changed

Fixed bugs

Fix decode of embedded structs tagged with options only (e.g. ,inline) by @pelletier in pelletier/go-toml#1079

Full Changelog: pelletier/go-toml@v2.4.1...v2.4.2

v2.4.1

What's Changed

Fixed bugs

Fix multiline string, array indentation, and omitempty behavior by @pelletier in pelletier/go-toml#1076

Full Changelog: pelletier/go-toml@v2.4.0...v2.4.1

v2.4.0

What's Changed

What's new

... (truncated)

Commits

071a36c fix: bound array and inline table nesting depth to prevent stack-overflow DoS...
57fec25 Add RawMessage marshal support to unstable (#1084)
79f82e3 fix: error instead of panic on nil unexported embedded pointer (#1089)
a28afed unstable/kind: drop duplicate 'a' from LocalDate comment (#1062)
6fa69af fix: do not recurse forever on recursively embedded structs (#1087)
82b792e fix: report table placement errors with position and key context (#1086)
f93de50 perf: avoid interface boxing when decoding date/time values (#1085)
21f8286 Deliver the whole document to a root Unmarshaler (#994) (#1083)
98e94ae Update bundled toml.abnf to TOML 1.1.0 and pin spec-corner behaviour (#1082)
35f78d5 Fix invalid TOML from commented multi-line values (#1081)
Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.23.2 to 1.24.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.24.1 / 2026-07-23

Small bugfix release for promhttp.

What's Changed

[BUGFIX] promhttp: Fix panic on requests with nil URL. #2065

Full Changelog: prometheus/client_golang@v1.24.0...v1.24.1

v1.24.0 - 2026-07-20

Changes

[CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. #1862

[CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated model.NameValidationScheme global. Default behavior is unchanged; code that set NameValidationScheme = LegacyValidation no longer gets legacy enforcement at metric, label, and push-grouping construction. #2051

[CHANGE] api/prometheus/v1: Support matchers (matches[] parameter) in Rules method (Rules(ctx context.Context, matches []string) (RulesResult, error)). #1843

[CHANGE] api/prometheus/v1: Refactor LabelNames method to return model.LabelNames instead of []string for consistency across the API. #1850

[CHANGE] exp/api/remote: Simplify Store interface, rename Handler to WriteHandler, and encapsulate write response handling. #1855

[FEATURE] prometheus: Add new Go 1.26 runtime metrics (/sched/goroutines-created:goroutines, /sched/goroutines/not-in-go:goroutines, /sched/goroutines/runnable:goroutines, /sched/goroutines/running:goroutines, /sched/goroutines/waiting:goroutines, /sched/threads/total:threads). #1942

[FEATURE] prometheus: Add WithUnit(unit string) option and explicit OpenMetrics unit support in CounterOpts, GaugeOpts, SummaryOpts, and HistogramOpts. #1392

[FEATURE] prometheus: Expose descriptor construction error through public Err() method on Desc. #1902

[FEATURE] promhttp: Add opt-in HandlerOpts.CoalesceGather to deduplicate concurrent Gather calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. #1969

[FEATURE] promhttp: HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #1925

[FEATURE] api/prometheus/v1: Add query formatting endpoint support (/format_query) and FormatQuery(ctx context.Context, query string) (string, error) method. #1846, #1856

[FEATURE] api/prometheus/v1: Add support for /status/tsdb/blocks endpoint via TSDBBlocks(ctx context.Context) ([]TSDBBlock, error) method. #1896

[FEATURE] exp/api/remote: Export BackoffConfig to allow customization when using WithAPIBackoff. #1895

[FEATURE] exp/api/remote: Add RetryCallBack to allow custom logging or handling on retry attempts in the remote write client. #1888, #1890

[ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. #1860

[ENHANCEMENT] api: Use cloned http.DefaultTransport when constructing default HTTP clients to prevent accidental mutations of shared global transport state. #1885

[BUGFIX] prometheus: Recover from collector panics during Gather() and return an error instead of crashing the process. #1961

[BUGFIX] prometheus: Fix cpu-seconds unit suffix handling for metric go_cpu_classes_gc_mark_assist_cpu_seconds. #1991

[BUGFIX] promhttp: InstrumentHandlerDuration and InstrumentHandlerCounter no longer panic when given an observer/counter that does not implement ExemplarObserver/ExemplarAdder (e.g. a SummaryVec). The exemplar is dropped and the value is recorded via the plain Observe/Add path, matching the safe-cast already used by Timer.ObserveDurationWithExemplar. #2005

[BUGFIX] api/prometheus/v1: Fall back to GET requests when POST requests return 403 Forbidden or method not allowed. #2030

[BUGFIX] api: Respect context cancellation inside httpClient.Do. #1971

[BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. #1889

[BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917

[BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. #1927

build(deps): bump github.com/prometheus/procfs from 0.16.1 to 0.17.0 by @dependabot[bot] in prometheus/client_golang#1839

build(deps): bump golang.org/x/sys from 0.33.0 to 0.34.0 by @dependabot[bot] in prometheus/client_golang#1838

prometheus/collectors: use godoc link for runtime/metrics supported metrics by @xieyuschen in prometheus/client_golang#1844

Fix doc typo by @torrca in prometheus/client_golang#1849

Merge release-1.23 into main by @vesari in prometheus/client_golang#1851

build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 in the github-actions group by @dependabot[bot] in prometheus/client_golang#1852

Refactor LabelNames to return model.LabelNames type for consistency by @yshngg in prometheus/client_golang#1850

remote: simplified Store interface; renamed Handler to WriteHandler by @bwplotka in prometheus/client_golang#1855

feat(api/prometheus): add format_query endpoint for query formatting by @yshngg in prometheus/client_golang#1846

feat(api): add FormatQuery method to Prometheus v1 API by @yshngg in prometheus/client_golang#1856

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.24.1 / 2026-07-23

[BUGFIX] promhttp: Fix panic on requests with nil URL. #2065

1.24.0 / 2026-07-20

[CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. #1862

[CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated model.NameValidationScheme global. Default behavior is unchanged; code that set NameValidationScheme = LegacyValidation no longer gets legacy enforcement at metric, label, and push-grouping construction. #2051

[CHANGE] api/prometheus/v1: Support matchers (matches[] parameter) in Rules method (Rules(ctx context.Context, matches []string) (RulesResult, error)). #1843

[CHANGE] api/prometheus/v1: Refactor LabelNames method to return model.LabelNames instead of []string for consistency across the API. #1850

[CHANGE] exp/api/remote: Simplify Store interface, rename Handler to WriteHandler, and encapsulate write response handling. #1855

[FEATURE] prometheus: Add new Go 1.26 runtime metrics (/sched/goroutines-created:goroutines, /sched/goroutines/not-in-go:goroutines, /sched/goroutines/runnable:goroutines, /sched/goroutines/running:goroutines, /sched/goroutines/waiting:goroutines, /sched/threads/total:threads). #1942

[FEATURE] prometheus: Add WithUnit(unit string) option and explicit OpenMetrics unit support in CounterOpts, GaugeOpts, SummaryOpts, and HistogramOpts. #1392

[FEATURE] prometheus: Expose descriptor construction error through public Err() method on Desc. #1902

[FEATURE] promhttp: Add opt-in HandlerOpts.CoalesceGather to deduplicate concurrent Gather calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. #1969

[FEATURE] promhttp: HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #1925

[FEATURE] api/prometheus/v1: Add query formatting endpoint support (/format_query) and FormatQuery(ctx context.Context, query string) (string, error) method. #1846, #1856

[FEATURE] api/prometheus/v1: Add support for /status/tsdb/blocks endpoint via TSDBBlocks(ctx context.Context) ([]TSDBBlock, error) method. #1896

[FEATURE] exp/api/remote: Export BackoffConfig to allow customization when using WithAPIBackoff. #1895

[FEATURE] exp/api/remote: Add RetryCallBack to allow custom logging or handling on retry attempts in the remote write client. #1888, #1890

[ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. #1860

[ENHANCEMENT] api: Use cloned http.DefaultTransport when constructing default HTTP clients to prevent accidental mutations of shared global transport state. #1885

[BUGFIX] prometheus: Recover from collector panics during Gather() and return an error instead of crashing the process. #1961

[BUGFIX] prometheus: Fix cpu-seconds unit suffix handling for metric go_cpu_classes_gc_mark_assist_cpu_seconds. #1991

[BUGFIX] promhttp: InstrumentHandlerDuration and InstrumentHandlerCounter no longer panic when given an observer/counter that does not implement ExemplarObserver/ExemplarAdder (e.g. a SummaryVec). The exemplar is dropped and the value is recorded via the plain Observe/Add path, matching the safe-cast already used by Timer.ObserveDurationWithExemplar. #2005

[BUGFIX] api/prometheus/v1: Fall back to GET requests when POST requests return 403 Forbidden or method not allowed. #2030

[BUGFIX] api: Respect context cancellation inside httpClient.Do. #1971

[BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. #1889

[BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917

[BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. #1927

Commits

d6087ee release: cut v1.24.1 (#2076)
48dd383 Cut v1.24.0 (#2061)
a725305 Cut v1.24.0-rc.0 (#2058)
77c584f build(deps): update all Go dependencies in all go.mod files (#2059)
78262a7 feat(promhttp): add CoalesceGather option to deduplicate concurrent Gather ca...
34e9a7f Merge pull request #2055 from prombot/repo_sync
43749bc Update common Prometheus files
de19217 examples: improve simple main.go example (#1999)
20355eb fix: correct typos in comments and test error messages (#2049)
4cd2d3a test: fix two flaky tests (darwin start_time regex, memstats HeapReleased dri...
Additional commits viewable in compare view

Updates github.com/redis/go-redis/v9 from 9.19.0 to 9.21.0

Release notes

Sourced from github.com/redis/go-redis/v9's releases.

9.21.0

This is a minor release adding new features and bug fixes. There are no breaking changes; upgrading from 9.20.x is a drop-in replacement.

🚀 Highlights

Zero-copy GetToBuffer / SetFromBuffer

Two new StringCmdable methods let callers read and write Redis string values directly into and from pre-allocated byte buffers, eliminating the per-call payload allocation that Get/Set incur:
GetToBuffer(ctx, key, buf) *ZeroCopyStringCmd   // reads into buf; ZeroCopyStringCmd { Val() int; Bytes() []byte; Result() (int, error) }
SetFromBuffer(ctx, key, buf) *StatusCmd
GetToBuffer decodes the bulk reply straight into the caller-owned buf (no intermediate allocation); a buffer that is too small returns an error after draining the payload, so the connection stays aligned for the next reply. SetFromBuffer is provided for API symmetry — it dispatches to the same []byte writer path as Set(ctx, key, buf, 0) and produces byte-identical output on the wire. Available on *Client, *ClusterClient, *Ring, *Conn and Pipeliner.

(#3834) by @ndyakov

Explicit LIMIT 0 for stream trimming

Redis treats XTRIM/XADD approximate-trim (~) LIMIT 0 as "disable the trimming effort cap entirely", which differs from omitting LIMIT (the implicit 100 * stream-node-max-entries default). The command builders previously only emitted LIMIT when limit > 0, so callers could never send an explicit LIMIT 0. Following the KeepTTL = -1 precedent, the new XTrimLimitDisabled = -1 sentinel now emits an explicit LIMIT 0; limit == 0 keeps the historical no-LIMIT behavior, so existing callers produce byte-identical commands.

(#3848) by @TheRealMal

✨ New Features

Zero-copy buffer string commands: new GetToBuffer / SetFromBuffer on StringCmdable and the ZeroCopyStringCmd result type, reading/writing string values into caller-owned buffers without per-call payload allocation (#3834) by @ndyakov

XTrimLimitDisabled sentinel: XTRIM/XADD approximate trimming can now send an explicit LIMIT 0 to disable the trim effort cap, via the new XTrimLimitDisabled = -1 sentinel (#3848) by @TheRealMal

PubSub health-check timeouts: channel.initHealthCheck now bounds the Ping it issues with a fresh per-check timeout context (the exported pingTimeout / reconnectTimeout) instead of context.TODO(), so a stuck health-check Ping can no longer block indefinitely (#3819) by @abdellani

Skip redundant UNWATCH in Tx.Close: a transaction now tracks whether a WATCH is still active (watchArmed) and only issues UNWATCH on Close when it is, removing an extra round trip on the common WATCH/.../EXEC and no-key Watch paths while never returning a connection to the pool with an active watch (#3854) by @fcostaoliveira

🐛 Bug Fixes

maintnotifications ModeAuto fail-open: ModeAuto now stays fail-open when the server does not support maintenance notifications — connections are retired and tracking is guarded during downgrade so the client keeps working instead of erroring (#3853) by @terrorobe

👥 Contributors

We'd like to thank all the contributors who worked on this release!

@abdellani, @fcostaoliveira, @ndyakov, @terrorobe, @TheRealMal

9.20.1

This is a patch release containing bug fixes only. There are no new features or breaking changes; upgrading from 9.20.0 is a drop-in replacement.

🚀 Highlights

RESP3 pub/sub message loss fixed

PeekPushNotificationName previously inspected only the bytes already buffered by bufio, so when a push frame header straddled a buffer fill boundary it could return a truncated notification name (e.g. "messa" instead of "message"). The push processor then mis-routed the frame and ReadReply silently dropped it, causing intermittent RESP3 pub/sub message loss. The peek now grows its window (36 bytes → up to 4 KiB) and reads more from the connection until the header is complete, cleanly separating incomplete prefixes from corrupt frames (including overflow-safe bulk-length handling). Fixes #3839.

... (truncated)

Changelog

Sourced from github.com/redis/go-redis/v9's changelog.

9.21.0 (2026-06-18)

This is a minor release adding new features and bug fixes. There are no breaking changes; upgrading from 9.20.x is a drop-in replacement.

🚀 Highlights

Zero-copy GetToBuffer / SetFromBuffer

Two new StringCmdable methods let callers read and write Redis string values directly into and from pre-allocated byte buffers, eliminating the per-call payload allocation that Get/Set incur:
GetToBuffer(ctx, key, buf) *ZeroCopyStringCmd   // reads into buf; ZeroCopyStringCmd { Val() int; Bytes() []byte; Result() (int, error) }
SetFromBuffer(ctx, key, buf) *StatusCmd
GetToBuffer decodes the bulk reply straight into the caller-owned buf (no intermediate allocation); a buffer that is too small returns an error after draining the payload, so the connection stays aligned for the next reply. SetFromBuffer is provided for API symmetry — it dispatches to the same []byte writer path as Set(ctx, key, buf, 0) and produces byte-identical output on the wire. Available on *Client, *ClusterClient, *Ring, *Conn and Pipeliner.

(#3834) by @ndyakov

Explicit LIMIT 0 for stream trimming

Redis treats XTRIM/XADD approximate-trim (~) LIMIT 0 as "disable the trimming effort cap entirely", which differs from omitting LIMIT (the implicit 100 * stream-node-max-entries default). The command builders previously only emitted LIMIT when limit > 0, so callers could never send an explicit LIMIT 0. Following the KeepTTL = -1 precedent, the new XTrimLimitDisabled = -1 sentinel now emits an explicit LIMIT 0; limit == 0 keeps the historical no-LIMIT behavior, so existing callers produce byte-identical commands.

(#3848) by @TheRealMal

✨ New Features

Zero-copy buffer string commands: new GetToBuffer / SetFromBuffer on StringCmdable and the ZeroCopyStringCmd result type, reading/writing string values into caller-owned buffers without per-call payload allocation (#3834) by @ndyakov

XTrimLimitDisabled sentinel: XTRIM/XADD approximate trimming can now send an explicit LIMIT 0 to disable the trim effort cap, via the new XTrimLimitDisabled = -1 sentinel (#3848) by @TheRealMal

PubSub health-check timeouts: channel.initHealthCheck now bounds the Ping it issues with a fresh per-check timeout context (the exported pingTimeout / reconnectTimeout) instead of context.TODO(), so a stuck health-check Ping can no longer block indefinitely (#3819) by @abdellani

Skip redundant UNWATCH in Tx.Close: a transaction now tracks whether a WATCH is still active (watchArmed) and only issues UNWATCH on Close when it is, removing an extra round trip on the common WATCH/.../EXEC and no-key Watch paths while never returning a connection to the pool with an active watch (#3854) by @fcostaoliveira

🐛 Bug Fixes

maintnotifi... Description has been truncated

…dates Bumps the minor-patch group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/grafana/pyroscope-go/godeltaprof](https://github.com/grafana/pyroscope-go) | `0.1.9` | `0.1.12` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.6` | `1.19.1` | | [github.com/open-telemetry/opentelemetry-collector-contrib/pkg/pdatatest](https://github.com/open-telemetry/opentelemetry-collector-contrib) | `0.151.0` | `0.157.0` | | [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) | `2.3.0` | `2.4.3` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.23.2` | `1.24.1` | | [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.19.0` | `9.21.0` | | [github.com/tidwall/gjson](https://github.com/tidwall/gjson) | `1.18.0` | `1.19.0` | | [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.68.0` | `0.69.0` | | [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.68.0` | `0.69.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` | | [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go) | `1.10.0` | `1.11.0` | Updates `github.com/grafana/pyroscope-go/godeltaprof` from 0.1.9 to 0.1.12 - [Release notes](https://github.com/grafana/pyroscope-go/releases) - [Commits](grafana/pyroscope-go@godeltaprof/v0.1.9...godeltaprof/v0.1.12) Updates `github.com/klauspost/compress` from 1.18.6 to 1.19.1 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.18.6...v1.19.1) Updates `github.com/open-telemetry/opentelemetry-collector-contrib/pkg/pdatatest` from 0.151.0 to 0.157.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-collector-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/main/CHANGELOG-API.md) - [Commits](open-telemetry/opentelemetry-collector-contrib@v0.151.0...v0.157.0) Updates `github.com/pelletier/go-toml/v2` from 2.3.0 to 2.4.3 - [Release notes](https://github.com/pelletier/go-toml/releases) - [Commits](pelletier/go-toml@v2.3.0...v2.4.3) Updates `github.com/prometheus/client_golang` from 1.23.2 to 1.24.1 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/v1.24.1/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.23.2...v1.24.1) Updates `github.com/redis/go-redis/v9` from 9.19.0 to 9.21.0 - [Release notes](https://github.com/redis/go-redis/releases) - [Changelog](https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md) - [Commits](redis/go-redis@v9.19.0...v9.21.0) Updates `github.com/tidwall/gjson` from 1.18.0 to 1.19.0 - [Commits](tidwall/gjson@v1.18.0...v1.19.0) Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.68.0 to 0.69.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.68.0...zpages/v0.69.0) Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.68.0 to 0.69.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.68.0...zpages/v0.69.0) Updates `go.opentelemetry.io/otel` from 1.43.0 to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` from 1.43.0 to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.43.0 to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.43.0 to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0) Updates `go.opentelemetry.io/otel/metric` from 1.43.0 to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0) Updates `go.opentelemetry.io/otel/sdk` from 1.43.0 to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0) Updates `go.opentelemetry.io/otel/sdk/metric` from 1.43.0 to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0) Updates `go.opentelemetry.io/otel/trace` from 1.43.0 to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0) Updates `go.opentelemetry.io/proto/otlp` from 1.10.0 to 1.11.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases) - [Commits](open-telemetry/opentelemetry-proto-go@v1.10.0...v1.11.0) Updates `google.golang.org/grpc` from 1.80.0 to 1.82.1 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.80.0...v1.82.1) Updates `go.opentelemetry.io/collector/pdata` from 1.57.0 to 1.63.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md) - [Commits](open-telemetry/opentelemetry-collector@pdata/v1.57.0...pdata/v1.63.0) Updates `golang.org/x/mod` from 0.35.0 to 0.37.0 - [Commits](golang/mod@v0.35.0...v0.37.0) Updates `golang.org/x/tools` from 0.43.0 to 0.47.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.43.0...v0.47.0) --- updated-dependencies: - dependency-name: github.com/grafana/pyroscope-go/godeltaprof dependency-version: 0.1.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: github.com/klauspost/compress dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/open-telemetry/opentelemetry-collector-contrib/pkg/pdatatest dependency-version: 0.157.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/pelletier/go-toml/v2 dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/prometheus/client_golang dependency-version: 1.24.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/redis/go-redis/v9 dependency-version: 9.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/tidwall/gjson dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc dependency-version: 0.69.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp dependency-version: 0.69.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: go.opentelemetry.io/otel dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: go.opentelemetry.io/otel/metric dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: go.opentelemetry.io/otel/sdk/metric dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: go.opentelemetry.io/proto/otlp dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: google.golang.org/grpc dependency-version: 1.82.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: go.opentelemetry.io/collector/pdata dependency-version: 1.63.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: golang.org/x/mod dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: golang.org/x/tools dependency-version: 0.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-01T18:48:25Z

Labels

The following labels could not be found: type: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot · 2026-09-01T18:50:19Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot closed this Sep 1, 2026

dependabot Bot deleted the dependabot/go_modules/minor-patch-058d4c3a29 branch September 1, 2026 18:50

Navigation Menu

Repository navigation

maint(deps): bump the minor-patch group across 1 directory with 22 updates - #5

maint(deps): bump the minor-patch group across 1 directory with 22 updates#5
dependabot[bot] wants to merge 1 commit into
notion-mainfrom
dependabot/go_modules/minor-patch-058d4c3a29

dependabot Bot commented on behalf of github Aug 1, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 1, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

godeltaprof/v0.1.8 fix panic on go 1.23

v1.19.1

What's Changed

New Contributors

v1.19.0

What's Changed

New Contributors

v1.18.7

v0.157.0

End User Changelog

🛑 Breaking changes 🛑

v0.157.0

🛑 Breaking changes 🛑

💡 Enhancements 💡

v0.156.0

🛑 Breaking changes 🛑

💡 Enhancements 💡

v2.4.3

What's Changed

What's new

Fixed bugs

Documentation

Other changes

New Contributors

v2.4.2

What's Changed

Fixed bugs

v2.4.1

What's Changed

Fixed bugs

v2.4.0

What's Changed

What's new

v1.24.1 / 2026-07-23

What's Changed

v1.24.0 - 2026-07-20

Changes

1.24.1 / 2026-07-23

1.24.0 / 2026-07-20

9.21.0

🚀 Highlights

Zero-copy GetToBuffer / SetFromBuffer

Explicit LIMIT 0 for stream trimming

✨ New Features

🐛 Bug Fixes

👥 Contributors

9.20.1

🚀 Highlights

RESP3 pub/sub message loss fixed

9.21.0 (2026-06-18)

🚀 Highlights

Zero-copy GetToBuffer / SetFromBuffer

Explicit LIMIT 0 for stream trimming

✨ New Features

🐛 Bug Fixes

Uh oh!

dependabot Bot commented on behalf of github Aug 1, 2026

Labels

Uh oh!

dependabot Bot commented on behalf of github Sep 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 1, 2026 •

edited

Loading

Zero-copy `GetToBuffer` / `SetFromBuffer`

Explicit `LIMIT 0` for stream trimming

Zero-copy `GetToBuffer` / `SetFromBuffer`

Explicit `LIMIT 0` for stream trimming