chore(deps): bump the gomod group across 1 directory with 10 updates #343

dependabot · 2025-11-24T06:05:06Z

Bumps the gomod group with 5 updates in the / directory:

Package	From	To
github.com/spf13/cobra	`1.9.1`	`1.10.1`
go.uber.org/zap	`1.27.0`	`1.27.1`
k8s.io/api	`0.33.4`	`0.34.2`
go.yaml.in/yaml/v2	`2.4.2`	`2.4.3`
golang.org/x/net	`0.43.0`	`0.47.0`

Updates github.com/spf13/cobra from 1.9.1 to 1.10.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.1

🐛 Fix

chore: upgrade pflags v1.0.9 by @jpmcb in spf13/cobra#2305

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

What's Changed

🚨 Attention!

Bump pflag to 1.0.8 by @tomasaschan in spf13/cobra#2303

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`

or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: spf13/cobra#2303

✨ Features

Flow context to command in SetHelpFunc by @Frassle in spf13/cobra#2241

The default ShellCompDirective can be customized for a command and its subcommands by @albers in spf13/cobra#2238

🐛 Fix

Upgrade golangci-lint to v2, address findings by @scop in spf13/cobra#2279

🪠 Testing

Test with Go 1.24 by @harryzcy in spf13/cobra#2236

chore: Rm GitHub Action PR size labeler by @jpmcb in spf13/cobra#2256

📝 Docs

Remove traling curlybrace by @yedayak in spf13/cobra#2237

Update command.go by @styee in spf13/cobra#2248

feat: Add security policy by @jpmcb in spf13/cobra#2253

Update Readme (Warp) by @ericdachen in spf13/cobra#2267

Add Periscope to the list of projects using Cobra by @anishathalye in spf13/cobra#2299

New Contributors

@harryzcy made their first contribution in spf13/cobra#2236

@yedayak made their first contribution in spf13/cobra#2237

@Frassle made their first contribution in spf13/cobra#2241

... (truncated)

Commits

7da941c chore: Bump pflag to v1.0.9 (#2305)
51d6751 Bump pflag to 1.0.8 (#2303)
3f3b818 Update README.md with new logo
dcaf42e Add Periscope to the list of projects using Cobra (#2299)
6dec1ae The default ShellCompDirective can be customized for a command and its subcom...
c8289c1 chore(golangci-lint): add some exclusion presets
4af7b64 refactor: apply golangci-lint autofixes, work around false positives
75790e4 chore(golangci-lint): upgrade to v2
db3ddb5 Adding sponsorship to README.md
67171d6 putting sponsorship below header
Additional commits viewable in compare view

Updates go.uber.org/zap from 1.27.0 to 1.27.1

Release notes

Sourced from go.uber.org/zap's releases.

v1.27.1

Enhancements:

#1501[]: prevent Object from panicking on nils

#1511[]: Fix a race condition in WithLazy.

Thanks to @rabbbit, @alshopov, @jquirke, @arukiidou for their contributions to this release.

#1501: uber-go/zap#1501 #1511: uber-go/zap#1511

Changelog

Sourced from go.uber.org/zap's changelog.

1.27.1 (19 Nov 2025)

Enhancements:

#1501[]: prevent Object from panicking on nils

#1511[]: Fix a race condition in WithLazy.

Thanks to @rabbbit, @alshopov, @jquirke, @arukiidou for their contributions to this release.

#1501: uber-go/zap#1501 #1511: uber-go/zap#1511

Commits

7b755a3 release 1.27.1 (#1521)
d6b395b Update lazy logger not to materialize unless it's being written to (#1519)
4b9cea0 ci: Test with Go 1.24, Go 1.25 (#1508)
7c80d7b Fix race condition in WithLazy implementation (#1426) (#1511)
07077a6 Prevent zap.Object from panicing on nils (#1501)
a6afd05 Fix lint check name (#1502)
6d48253 chore: fix typo (#1482)
32f2ec1 Fix the field test for bool type (#1480)
fe16eb5 Upgrade grpc in zapgrc test package & bump go version (#1478)
5f00c34 test(AtomicLevel): demonstrate Handler is not vulnerable to XSS (#1477)
Additional commits viewable in compare view

Updates k8s.io/api from 0.33.4 to 0.34.2

Commits

e28454b Update dependencies to v0.34.2 tag
133a39c Merge remote-tracking branch 'origin/master' into release-1.34
fd087be clarify that staging repos are automatically published
ff163ef add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
5ec86fc link to what a staging repository is
08c5dee docs: clarify that this is a staging repository and not for direct contributions
ba64d0b Update prerelease lifecycle to v1.34
25f849c Merge pull request #132522 from sunya-ch/KEP-5075-PR
baa1eb1 KEP-5075: generated codes from make update
740b2c9 KEP-5075: API updates
Additional commits viewable in compare view

Updates github.com/modern-go/reflect2 from 1.0.2 to 1.0.3-0.20250322232337-35a7c28c31ee

Commits

See full diff in compare view

Updates github.com/spf13/pflag from 1.0.7 to 1.0.9

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.9

What's Changed

fix: Restore ParseErrorsWhitelist name for now by @tomasaschan in spf13/pflag#446

Full Changelog: spf13/pflag@v1.0.8...v1.0.9

v1.0.8

⚠️ Breaking Change

This version, while only a patch bump, includes a (very minor) breaking change: the flag.ParseErrorsWhitelist struct and corresponding FlagSet.parseErrorsWhitelist field have been renamed to ParseErrorsAllowlist.

This should result in compilation errors in any code that uses these fields, which can be fixed by adjusting the names at call sites. There is no change in semantics or behavior of the struct or field referred to by these names. If your code compiles without errors after bumping to/past v1.0.8, you are not affected by this change.

The breaking change was reverted in v1.0.9, by means of re-introducing the old names with deprecation warnings. The plan is still to remove them in a future release, so if your code does depend on the old names, please change them to use the new names at your earliest convenience.

What's Changed

Remove Redundant "Unknown-Flag" Error by @vaguecoder in spf13/pflag#364

Switching from whitelist to Allowlist terminology by @dubrie in spf13/pflag#261

Omit zero time.Time default from usage line by @mologie in spf13/pflag#438

implement CopyToGoFlagSet by @pohly in spf13/pflag#330

flag: Emulate stdlib behavior and do not print ErrHelp by @tmc in spf13/pflag#407

Print Default Values of String-to-String in Sorted Order by @vaguecoder in spf13/pflag#365

fix: Don't print ErrHelp in ParseAll by @tomasaschan in spf13/pflag#443

Reset args on re-parse even if empty by @tomasaschan in spf13/pflag#444

New Contributors

@vaguecoder made their first contribution in spf13/pflag#364

@dubrie made their first contribution in spf13/pflag#261

@mologie made their first contribution in spf13/pflag#438

@pohly made their first contribution in spf13/pflag#330

@tmc made their first contribution in spf13/pflag#407

@tomasaschan made their first contribution in spf13/pflag#443

Full Changelog: spf13/pflag@v1.0.7...v1.0.8

Commits

1043857 Merge pull request #446 from spf13/fix-backwards-compat
7412009 fix: Restore ParseErrorsWhitelist name for now
b9c16fa Merge pull request #444 from spf13/reset-args-even-if-empty
40abc49 Merge pull request #443 from spf13/silence-errhelp
1bf832c Use errors.Is instead of equality check
d25dd24 Reset args on re-parse even if empty
094909d Merge pull request #365 from vaguecoder/str2str-sorted
ccb49e5 Print Default Values of String-to-String in Sorted Order
b55ffb6 fix: Don't print ErrHelp in ParseAll
7c651d1 Merge pull request #407 from tmc/fix-errhelp
Additional commits viewable in compare view

Updates go.yaml.in/yaml/v2 from 2.4.2 to 2.4.3

Commits

3b57511 Retract v2 tags that cannot be installed
See full diff in compare view

Updates golang.org/x/net from 0.43.0 to 0.47.0

Commits

9a29643 go.mod: update golang.org/x dependencies
07cefd8 context: deprecate
5ac9dac publicsuffix: don't treat ip addresses as domain names
d1f64cc quic: use testing/synctest
fff0469 http2: document that RFC 7540 prioritization does not work with small payloads
f35e3a4 http2: fix weight overflow in RFC 7540 write scheduler
89adc90 http2: fix typo referring to RFC 9218 as RFC 9128 instead
8d76a2c quic: don't defer MAX_STREAMS frames indefinitely
027f8b7 quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONE
dec9fe7 dns/dnsmessage: update SVCB packing to prohibit name compression
Additional commits viewable in compare view

Updates golang.org/x/text from 0.28.0 to 0.31.0

Commits

e7ff6b3 go.mod: update golang.org/x dependencies
fbf012b all: use reflect.TypeFor instead of reflect.TypeOf
c6abd03 go.mod: update golang.org/x dependencies
42f038d x/text: fix nil dereference in gotext extract
a42f0e2 all: use built-in max/min to simplify the code
e69f31b go.mod: update golang.org/x dependencies
60c9786 all: upgrade go directive to at least 1.24.0 [generated]
See full diff in compare view

Updates k8s.io/apimachinery from 0.33.4 to 0.34.2

Commits

b72d93d Merge remote-tracking branch 'origin/master' into release-1.34
cd8b91c clarify that staging repos are automatically published
8c59599 add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
ec3cea5 link to what a staging repository is
e4db694 docs: clarify that this is a staging repository and not for direct contributions
04507a3 Merge pull request #132942 from thockin/kyaml
50e39b1 Merge pull request #132935 from benluddy/cbor-bump-custom-marshalers
7d108e8 Re-vendor sigs.k8s.io/yaml @ v1.6.0
58c4eb0 Merge pull request #133130 from ylink-lfs/chore/residual_boolptr_removal
38a24e6 chore: residual boolptr and intptr removal
Additional commits viewable in compare view

Updates k8s.io/utils from 0.0.0-20241104163129-6fe5fd82f078 to 0.0.0-20250604170112-4c0f3b243397

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gomod group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.9.1` | `1.10.1` | | [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.0` | `1.27.1` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.33.4` | `0.34.2` | | [go.yaml.in/yaml/v2](https://github.com/yaml/go-yaml) | `2.4.2` | `2.4.3` | | [golang.org/x/net](https://github.com/golang/net) | `0.43.0` | `0.47.0` | Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.1 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.9.1...v1.10.1) Updates `go.uber.org/zap` from 1.27.0 to 1.27.1 - [Release notes](https://github.com/uber-go/zap/releases) - [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md) - [Commits](uber-go/zap@v1.27.0...v1.27.1) Updates `k8s.io/api` from 0.33.4 to 0.34.2 - [Commits](kubernetes/api@v0.33.4...v0.34.2) Updates `github.com/modern-go/reflect2` from 1.0.2 to 1.0.3-0.20250322232337-35a7c28c31ee - [Release notes](https://github.com/modern-go/reflect2/releases) - [Commits](https://github.com/modern-go/reflect2/commits) Updates `github.com/spf13/pflag` from 1.0.7 to 1.0.9 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.7...v1.0.9) Updates `go.yaml.in/yaml/v2` from 2.4.2 to 2.4.3 - [Commits](yaml/go-yaml@v2.4.2...v2.4.3) Updates `golang.org/x/net` from 0.43.0 to 0.47.0 - [Commits](golang/net@v0.43.0...v0.47.0) Updates `golang.org/x/text` from 0.28.0 to 0.31.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.28.0...v0.31.0) Updates `k8s.io/apimachinery` from 0.33.4 to 0.34.2 - [Commits](kubernetes/apimachinery@v0.33.4...v0.34.2) Updates `k8s.io/utils` from 0.0.0-20241104163129-6fe5fd82f078 to 0.0.0-20250604170112-4c0f3b243397 - [Commits](https://github.com/kubernetes/utils/commits) --- updated-dependencies: - dependency-name: github.com/spf13/cobra dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: go.uber.org/zap dependency-version: 1.27.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: k8s.io/api dependency-version: 0.34.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/modern-go/reflect2 dependency-version: 1.0.3-0.20250322232337-35a7c28c31ee dependency-type: indirect update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/spf13/pflag dependency-version: 1.0.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: gomod - dependency-name: go.yaml.in/yaml/v2 dependency-version: 2.4.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: gomod - dependency-name: golang.org/x/net dependency-version: 0.47.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/text dependency-version: 0.31.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gomod - dependency-name: k8s.io/apimachinery dependency-version: 0.34.2 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gomod - dependency-name: k8s.io/utils dependency-version: 0.0.0-20250604170112-4c0f3b243397 dependency-type: indirect update-type: version-update:semver-patch dependency-group: gomod ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 24, 2025

dependabot bot requested a review from 06kellyjac as a code owner November 24, 2025 06:05

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 24, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the gomod group across 1 directory with 10 updates #343

chore(deps): bump the gomod group across 1 directory with 10 updates #343

Uh oh!

dependabot bot commented on behalf of github Nov 24, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): bump the gomod group across 1 directory with 10 updates #343

Are you sure you want to change the base?

chore(deps): bump the gomod group across 1 directory with 10 updates #343

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 24, 2025

v1.10.1

🐛 Fix

v1.10.0

What's Changed

🚨 Attention!

✨ Features

🐛 Fix

🪠 Testing

📝 Docs

New Contributors

v1.27.1

1.27.1 (19 Nov 2025)

v1.0.9

What's Changed

v1.0.8

⚠️ Breaking Change

What's Changed

New Contributors

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant