Skip to content

chore(deps): bump the gomod group with 4 updates#252

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-a137748684
Open

chore(deps): bump the gomod group with 4 updates#252
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-a137748684

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the gomod group with 4 updates: github.com/influxdata/telegraf, github.com/prometheus/common, github.com/prometheus/exporter-toolkit and golang.org/x/sys.

Updates github.com/influxdata/telegraf from 1.38.4 to 1.39.1

Release notes

Sourced from github.com/influxdata/telegraf's releases.

v1.39.1 [2026-06-29]

Bugfixes

  • #19077 build Create tarballs correctly
  • #19070 inputs.opcua Close session on stop to prevent reload leak
  • #19159 inputs.opcua Skip client certificate on unsecured None channel
  • #19076 inputs.openweathermap Remove calls to deprecated v2.5 group API
  • #19167 inputs.smartctl Parse stdout only to avoid corrupting JSON
  • #19093 inputs.tail Prevent panic when closing tailers under load
  • #19067 inputs.temp Use non-blocking read for hwmon temperatures
  • #19126 inputs.vsphere Fix missing vSAN overall_health metric
  • #19074 processors.parser Handle metrics without inner timestamp correctly
  • #19129 migrations Add migration for inputs.aerospike
  • #19121 migrations Add migration for inputs.kafka_consumer connection_strategy option
  • #19122 migrations Add migration for inputs.openstack server_diagnotics option
  • #19133 migrations Add migration for inputs.openweathermap query_style option
  • #19117 migrations Add migration for inputs.tail from_beginning option
  • #19128 migrations Add migration for outputs.amon

Dependency Updates

  • #19138 deps Bump actions/checkout from 6 to 7
  • #19065 deps Bump cloud.google.com/go/storage from 1.62.2 to 1.62.3
  • #19058 deps Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.1 to 1.22.0
  • #19106 deps Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.13.1 to 1.14.0
  • #19059 deps Bump github.com/IBM/sarama from 1.50.1 to 1.50.2
  • #19110 deps Bump github.com/IBM/sarama from 1.50.2 to 1.50.3
  • #19102 deps Bump github.com/SAP/go-hdb from 1.16.11 to 1.16.12
  • #19057 deps Bump github.com/aws/smithy-go from 1.27.0 to 1.27.2
  • #19060 deps Bump github.com/gopacket/gopacket from 1.6.0 to 1.6.1
  • #19142 deps Bump github.com/gopcua/opcua from 0.8.0 to 0.9.0
  • #19064 deps Bump github.com/jedib0t/go-pretty/v6 from 6.7.10 to 6.8.0
  • #19108 deps Bump github.com/jedib0t/go-pretty/v6 from 6.8.0 to 6.8.1
  • #19150 deps Bump github.com/moby/moby/api from 1.54.2 to 1.55.0
  • #19149 deps Bump github.com/moby/moby/client from 0.4.1 to 0.5.0
  • #19053 deps Bump github.com/pion/dtls/v3 from 3.1.3 to 3.1.4
  • #19115 deps Bump github.com/prometheus-community/pro-bing from 0.8.0 to 0.9.0
  • #19147 deps Bump github.com/prometheus/common from 0.68.1 to 0.69.0
  • #19141 deps Bump github.com/rabbitmq/amqp091-go from 1.11.0 to 1.12.0
  • #19170 deps Bump github.com/rclone/rclone from 1.69.3 to 1.74.1-0.20260628215305-6bbc28cf02dc
  • #19109 deps Bump github.com/redis/go-redis/v9 from 9.20.0 to 9.20.1
  • #19148 deps Bump github.com/redis/go-redis/v9 from 9.20.1 to 9.21.0
  • #19152 deps Bump github.com/testcontainers/testcontainers-go/modules/azure from 0.42.0 to 0.43.0
  • #19143 deps Bump github.com/testcontainers/testcontainers-go/modules/kafka from 0.42.0 to 0.43.0
  • #19144 deps Bump github.com/testcontainers/testcontainers-go/modules/vault from 0.42.0 to 0.43.0
  • #19111 deps Bump go.opentelemetry.io/collector/pdata from 1.59.0 to 1.60.0
  • #19054 deps Bump go.step.sm/crypto from 0.81.1 to 0.82.0
  • #19104 deps Bump go.step.sm/crypto from 0.82.0 to 0.83.0
  • #19061 deps Bump golang.org/x/crypto from 0.52.0 to 0.53.0

... (truncated)

Changelog

Sourced from github.com/influxdata/telegraf's changelog.

v1.39.1 [2026-06-29]

Bugfixes

  • #19077 build Create tarballs correctly
  • #19070 inputs.opcua Close session on stop to prevent reload leak
  • #19159 inputs.opcua Skip client certificate on unsecured None channel
  • #19076 inputs.openweathermap Remove calls to deprecated v2.5 group API
  • #19167 inputs.smartctl Parse stdout only to avoid corrupting JSON
  • #19093 inputs.tail Prevent panic when closing tailers under load
  • #19067 inputs.temp Use non-blocking read for hwmon temperatures
  • #19126 inputs.vsphere Fix missing vSAN overall_health metric
  • #19074 processors.parser Handle metrics without inner timestamp correctly
  • #19129 migrations Add migration for inputs.aerospike
  • #19121 migrations Add migration for inputs.kafka_consumer connection_strategy option
  • #19122 migrations Add migration for inputs.openstack server_diagnotics option
  • #19133 migrations Add migration for inputs.openweathermap query_style option
  • #19117 migrations Add migration for inputs.tail from_beginning option
  • #19128 migrations Add migration for outputs.amon

Dependency Updates

  • #19138 deps Bump actions/checkout from 6 to 7
  • #19065 deps Bump cloud.google.com/go/storage from 1.62.2 to 1.62.3
  • #19058 deps Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.1 to 1.22.0
  • #19106 deps Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.13.1 to 1.14.0
  • #19059 deps Bump github.com/IBM/sarama from 1.50.1 to 1.50.2
  • #19110 deps Bump github.com/IBM/sarama from 1.50.2 to 1.50.3
  • #19102 deps Bump github.com/SAP/go-hdb from 1.16.11 to 1.16.12
  • #19057 deps Bump github.com/aws/smithy-go from 1.27.0 to 1.27.2
  • #19060 deps Bump github.com/gopacket/gopacket from 1.6.0 to 1.6.1
  • #19142 deps Bump github.com/gopcua/opcua from 0.8.0 to 0.9.0
  • #19064 deps Bump github.com/jedib0t/go-pretty/v6 from 6.7.10 to 6.8.0
  • #19108 deps Bump github.com/jedib0t/go-pretty/v6 from 6.8.0 to 6.8.1
  • #19150 deps Bump github.com/moby/moby/api from 1.54.2 to 1.55.0
  • #19149 deps Bump github.com/moby/moby/client from 0.4.1 to 0.5.0
  • #19053 deps Bump github.com/pion/dtls/v3 from 3.1.3 to 3.1.4
  • #19115 deps Bump github.com/prometheus-community/pro-bing from 0.8.0 to 0.9.0
  • #19147 deps Bump github.com/prometheus/common from 0.68.1 to 0.69.0
  • #19141 deps Bump github.com/rabbitmq/amqp091-go from 1.11.0 to 1.12.0
  • #19170 deps Bump github.com/rclone/rclone from 1.69.3 to 1.74.1-0.20260628215305-6bbc28cf02dc
  • #19109 deps Bump github.com/redis/go-redis/v9 from 9.20.0 to 9.20.1
  • #19148 deps Bump github.com/redis/go-redis/v9 from 9.20.1 to 9.21.0
  • #19152 deps Bump github.com/testcontainers/testcontainers-go/modules/azure from 0.42.0 to 0.43.0
  • #19143 deps Bump github.com/testcontainers/testcontainers-go/modules/kafka from 0.42.0 to 0.43.0
  • #19144 deps Bump github.com/testcontainers/testcontainers-go/modules/vault from 0.42.0 to 0.43.0
  • #19111 deps Bump go.opentelemetry.io/collector/pdata from 1.59.0 to 1.60.0
  • #19054 deps Bump go.step.sm/crypto from 0.81.1 to 0.82.0
  • #19104 deps Bump go.step.sm/crypto from 0.82.0 to 0.83.0
  • #19061 deps Bump golang.org/x/crypto from 0.52.0 to 0.53.0

... (truncated)

Commits
  • 9a8b202 Telegraf v1.39.1
  • ae46df4 Update changelog for v1.39.1
  • 58ac642 Update build_version.txt for v1.39.1
  • 86f5e9b chore(deps): Bump github.com/rclone/rclone from 1.69.3 to 1.74.1-0.2026062821...
  • 7a679fa fix(inputs.smartctl): Parse stdout only to avoid corrupting JSON (#19167)
  • 0864c9e docs(inputs.smart): Document sudo-rs incompatibility (#19169)
  • 19d1d8b chore(inputs.redfish): Move thermal and power subsystems to their own files (...
  • 37ad3b9 chore(inputs.elasticsearch_query): Cleanup code (#19137)
  • 33379f1 fix(inputs.vsphere): Fix missing vSAN overall_health metric (#19126)
  • 7c8e71f chore(inputs.redfish): Move vendor specific test data into respective folders...
  • Additional commits viewable in compare view

Updates github.com/prometheus/common from 0.68.0 to 0.69.0

Release notes

Sourced from github.com/prometheus/common's releases.

v0.69.0

What's Changed

Full Changelog: prometheus/common@v0.68.1...v0.69.0

v0.68.1

What's Changed

Full Changelog: prometheus/common@v0.68.0...v0.68.1

Changelog

Sourced from github.com/prometheus/common's changelog.

v0.69.0 / 2026-06-17

Security / behavior changes

  • config: credentials are no longer forwarded across cross-host redirects. When FollowRedirects is enabled, the HTTP client now strips Authorization, Cookie, Proxy-Authorization and other sensitive headers, and skips basic-auth, bearer-token and OAuth2 credentials, when a redirect points to a different host. This aligns with Go's net/http behavior. Callers that relied on credentials being sent to a redirect target on another host will need to target that host directly. #901 #920 #921
  • config: LoadHTTPConfigFile now resolves relative file paths (e.g. *_file credentials, http_headers files) against the config file's own directory instead of its parent directory. Configs that worked around the old behavior by prefixing paths with the config's directory name must drop that prefix. #925

Bugfixes

  • expfmt: fix nil pointer panic when parsing empty braces {}. #922
  • model: fix Time.UnmarshalJSON for larger negative numbers. #918

Performance

  • model: reduce allocations in Time.UnmarshalJSON. #918

Internal

  • Synchronize common files from prometheus/prometheus. #917
  • Modernize Go. #919

Full Changelog: prometheus/common@v0.68.1...v0.69.0

v0.67.2 / 2025-10-28

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.67.1...v0.67.2

v0.67.1 / 2025-10-07

What's Changed

Full Changelog: prometheus/common@v0.67.0...v0.67.1

v0.67.0 / 2025-10-07

What's Changed

... (truncated)

Commits
  • e3c14a0 Merge pull request #925 from roidelapluie/roidelapluie/fix-loadhttpconfigfile...
  • a7b791d config: resolve LoadHTTPConfigFile paths relative to the config file
  • f84efec Merge pull request #918 from prometheus/time-split
  • 2269d3d Merge pull request #922 from roidelapluie/roidelapluie/fix-textparse-empty-br...
  • a1600af expfmt: fix nil pointer panic when parsing empty braces "{}"
  • 56fe395 Merge pull request #921 from roidelapluie/roidelapluie/oauth2-cross-host-check
  • 0fcda47 Merge pull request #920 from roidelapluie/roidelapluie/cross-host-sticky
  • 30ba470 Merge pull request #919 from prometheus/superq/modernize
  • 2b55b3e config: check cross-host redirect before OAuth2 token fetch
  • 428856f config: make isCrossHostRedirect sticky across the redirect chain
  • Additional commits viewable in compare view

Updates github.com/prometheus/exporter-toolkit from 0.16.0 to 0.17.0

Release notes

Sourced from github.com/prometheus/exporter-toolkit's releases.

v0.17.0

What's Changed

New Contributors

Full Changelog: prometheus/exporter-toolkit@v0.16.0...v0.17.0

Commits
  • 0d4d131 Merge pull request #394 from nicolastakashi/bootstrap-runner
  • f4c8320 Update common Prometheus files (#402)
  • a2f76ba Update common Prometheus files (#401)
  • 23ad7fa Bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#397)
  • f2aede4 Update common Prometheus files (#395)
  • cc7a287 Bump github.com/prometheus/common from 0.67.5 to 0.68.0 (#399)
  • b38c4d6 Bump github.com/mdlayher/vsock from 1.2.1 to 1.3.0 (#398)
  • de53584 Bump github/codeql-action from 4.35.4 to 4.36.0 (#400)
  • 9138d4c bootstrap: own metrics path configuration
  • 22bb1e5 bootstrap: add exporter startup package
  • Additional commits viewable in compare view

Updates golang.org/x/sys from 0.45.0 to 0.46.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gomod group with 4 updates: [github.com/influxdata/telegraf](https://github.com/influxdata/telegraf), [github.com/prometheus/common](https://github.com/prometheus/common), [github.com/prometheus/exporter-toolkit](https://github.com/prometheus/exporter-toolkit) and [golang.org/x/sys](https://github.com/golang/sys).


Updates `github.com/influxdata/telegraf` from 1.38.4 to 1.39.1
- [Release notes](https://github.com/influxdata/telegraf/releases)
- [Changelog](https://github.com/influxdata/telegraf/blob/master/CHANGELOG.md)
- [Commits](influxdata/telegraf@v1.38.4...v1.39.1)

Updates `github.com/prometheus/common` from 0.68.0 to 0.69.0
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.68.0...v0.69.0)

Updates `github.com/prometheus/exporter-toolkit` from 0.16.0 to 0.17.0
- [Release notes](https://github.com/prometheus/exporter-toolkit/releases)
- [Commits](prometheus/exporter-toolkit@v0.16.0...v0.17.0)

Updates `golang.org/x/sys` from 0.45.0 to 0.46.0
- [Commits](golang/sys@v0.45.0...v0.46.0)

---
updated-dependencies:
- dependency-name: github.com/influxdata/telegraf
  dependency-version: 1.39.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/prometheus/common
  dependency-version: 0.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/prometheus/exporter-toolkit
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/sys
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from ricoberger as a code owner July 1, 2026 01:43
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant