Renovate: Update External dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/containerd/containerd	v1.7.27 -> v1.7.28
github.com/prometheus/client_golang	v1.22.0 -> v1.23.2
github.com/stretchr/testify	v1.10.0 -> v1.11.1
golang.org/x/net	v0.40.0 -> v0.46.0

---

Release Notes

containerd/containerd (github.com/containerd/containerd)

v1.7.28: containerd 1.7.28

Compare Source

Welcome to the v1.7.28 release of containerd!

The twenty-eighth patch release for containerd 1.7 contains various fixes
and updates.

Highlights

Image Distribution

• Refresh OAuth tokens when they expire during registry operations (#​11721)
• Set default differ for the default unpack config of transfer service (#​11689)

Runtime

• Update runc binary to v1.3.0 (#​11800)
• Remove invalid error log when stopping container after containerd restart (#​11620)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Akhil Mohan
• Akihiro Suda
• Austin Vazquez
• Maksym Pavlenko
• Phil Estes
• Derek McGowan
• Kirtana Ashok
• Henry Wang
• Iain Macdonald
• Jin Dong
• Swagat Bora
• Wei Fu
• Yang Yang
• madraceee

Changes

57 commits

• Prepare release notes for v1.7.28 (#​12134)
  • b01b809f8 Prepare release notes for v1.7.28
• ci: bump Go 1.23.11, 1.24.5 (#​12117)
  • ce2373176 ci: bump Go 1.23.11, 1.24.5
• Backport windows test fixes (#​12121)
  • 3c06bcc4d Fix intermittent test failures on Windows CIs
  • c6c0c6854 Remove WS2025 from CIs due to regression
• ci: use fedora 39 archive (#​12123)
  • 6d7e021cf ci: use fedora/39-cloud-base image from archive
• update runners to ubuntu 24.04 (#​11802)
  • c362e18cc CI: install OVMF for Vagrant
  • 1d99bec21 CI: fix "Unable to find a source package for vagrant" error
  • dafa3c48d add debian sources for ubuntu-24
  • b03301d85 partial: enable ubuntu 24 runners
  • 13fbc5f97 update release runners to ubuntu 24.04
• go.mod: golang.org/x/* latest (#​12096)
  • da5d1a371 go.mod: golang.org/x/* latest
• Remove additional fuzzers from instrumentation repo (#​12099)
  • 5fef123ba Remove additional fuzzers from CI
• backport windows runner and golang toolchain updates (#​11972)
  • a35978f5a ci: bump golang [1.23.10, 1.24.4] in build and release
  • df035aa3e ci: bump golang [1.23.9, 1.24.3] in build and release
  • 2a6d9fc71 use go1.23.8 as the default go version
  • 15d4d6eba update to go 1.24.2, 1.23.8
  • 1613a3b1a Enable CIs to run on WS2022 and WS2025
• test: added runc v1 tests using vagrant (#​11896)
  • 60e73122c test: added runc v1 tests using vagrant
• Revert "disable portmap test in ubuntu-22 to make CI happy" (#​11803)
  • 10e1b515e Revert "Disable port mapping tests in CRI-in-UserNS"
  • 7a680e884 fix unbound SKIP_TEST variable error
  • e5f8cc995 Revert "disable portmap test in ubuntu-22 to make CI happy"
• Update runc binary to v1.3.0 (#​11800)
  • b001469c7 Update runc binary to v1.3.0
• Refresh OAuth tokens when they expire during registry operations (#​11721)
  • a6421da84 remotes/docker/authorizer.go: invalidate auth tokens when they expire.
• [CI] Fix vagrant (#​11739)
  • effc49e8b Fix vagrant setup
• Fix CI (#​11722)
  • d3e7dd716 Skip criu on Arms
  • 7cf9ebe94 Disable port mapping tests in CRI-in-UserNS
  • 42657a4ed disable portmap test in ubuntu-22 to make CI happy
  • b300fd37b add option to skip tests in critest
  • 6f4ffad27 Address cgroup mountpoint does not exist
  • cef298331 Update Ubuntu to 24
  • 2dd9be16e ci: update GitHub Actions release runner to ubuntu-24.04
• Set default differ for the default unpack config of transfer service (#​11689)
  • e40e59e4e Set default differ for the default unpack config of transfer service
• silence govulncheck false positives (#​11679)
  • ff097d5a4 silence govulncheck false positives
• vendor: github.com/go-jose/go-jose/v3 v3.0.4 (#​11619)
  • 52dd4dc51 vendor: github.com/go-jose/go-jose/v3 v3.0.4
• Remove invalid error log when stopping container after containerd restart (#​11620)
  • 24f41d2d5 use shimCtx for fifo copy
• Update runc binary to v1.2.6 (#​11584)
  • 1e1e78ad7 Update runc binary to v1.2.6
• Use RWMutex in NSMap and reduce lock area (#​11556)
  • 9a8d1d44a Use RWMutex in NSMap and reduce lock area

Dependency Changes

• github.com/go-jose/go-jose/v3 v3.0.3 -> v3.0.4
• golang.org/x/crypto v0.31.0 -> v0.40.0
• golang.org/x/mod v0.17.0 -> v0.26.0
• golang.org/x/net v0.33.0 -> v0.42.0
• golang.org/x/oauth2 v0.11.0 -> v0.30.0
• golang.org/x/sync v0.10.0 -> v0.16.0
• golang.org/x/sys v0.28.0 -> v0.34.0
• golang.org/x/term v0.27.0 -> v0.33.0
• golang.org/x/text v0.21.0 -> v0.27.0
• golang.org/x/time 90d013b -> v0.12.0

Previous release can be found at v1.7.27

prometheus/client_golang (github.com/prometheus/client_golang)

v1.23.2: - 2025-09-05

Compare Source

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

All Changes

• [release-1.23] Upgrade to prometheus/common@​v0.66.1 by @​aknuds1 in #​1869
• [release-1.23] Cut v1.23.2 by @​aknuds1 in #​1870

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1: - 2025-09-04

Compare Source

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

All Changes

• [release-1.23] Upgrade to prometheus/common v0.66 by @​aknuds1 in #​1866
• [release-1.23] Cut v1.23.1 by @​aknuds1 in #​1867

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

v1.23.0: - 2025-07-30

Compare Source

• [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #​1812
• [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #​1766
• [FEATURE] Add exemplars for native histograms #​1686
• [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #​1823
• [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #​1833
• [BUGFIX] exp/api: client prompt return on context cancellation #​1729

All Changes

* Update example test by @​SuperQ in https://github.com/prometheus/client_golang/pull/1770 * build(deps): bump golang.org/x/net from 0.34.0 to 0.36.0 in /tutorials/whatsup by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1776 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1771 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1778 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1779 * build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 in /exp by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1782 * build(deps): bump github.com/prometheus/common from 0.62.0 to 0.63.0 in /exp by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1781 * build(deps): bump github.com/prometheus/common from 0.62.0 to 0.63.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1783 * build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1784 * build(deps): bump github.com/prometheus/procfs from 0.15.1 to 0.16.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1786 * chore: Upgrade golangci-lint to v2 by @​kakkoyun in https://github.com/prometheus/client_golang/pull/1789 * build(deps): bump the github-actions group across 1 directory with 3 updates by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1790 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1791 * Add `WrapCollectorWith` and `WrapCollectorWithPrefix` by @​colega in https://github.com/prometheus/client_golang/pull/1766 * feat(github-actions): add Go file change detection to golangci-lint workflow by @​kakkoyun in https://github.com/prometheus/client_golang/pull/1794 * chore(ci): Fix flaky tests by @​kakkoyun in https://github.com/prometheus/client_golang/pull/1795 * build(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 in /tutorials/whatsup by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1799 * test(registry): Add goleak-based goroutine leak detection by @​surinkim in https://github.com/prometheus/client_golang/pull/1797 * build(deps): bump go.uber.org/goleak from 1.2.0 to 1.3.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1806 * build(deps): bump the github-actions group with 2 updates by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1804 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1809 * Add exemplars for native histograms by @​shivanthzen in https://github.com/prometheus/client_golang/pull/1686 * build(deps): bump golang.org/x/sys from 0.30.0 to 0.32.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1807 * build(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1805 * build(deps): bump github.com/prometheus/procfs from 0.16.0 to 0.16.1 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1808 * build(deps): bump golang.org/x/net from 0.35.0 to 0.38.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1800 * Update supported Go versions by @​SuperQ in https://github.com/prometheus/client_golang/pull/1812 * Cleaup Go modules by @​SuperQ in https://github.com/prometheus/client_golang/pull/1813 * fix: client prompt return on context cancellation by @​umegbewe in https://github.com/prometheus/client_golang/pull/1729 * Simplify buf binary install by @​SuperQ in https://github.com/prometheus/client_golang/pull/1814 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1815 * build(deps): bump the github-actions group with 5 updates by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1817 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1821 * exp/api: Bubble up status code from writeResponse by @​saswatamcode in https://github.com/prometheus/client_golang/pull/1823 * build(deps): bump github.com/prometheus/common from 0.64.0 to 0.65.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1827 * build(deps): bump github.com/prometheus/common from 0.64.0 to 0.65.0 in /exp by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1828 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1831 * Update runtime metrics for Go v1.23 and v1.24 by @​aknuds1 in https://github.com/prometheus/client_golang/pull/1833 * Fix `errNotImplemented` reference by @​aknuds1 in https://github.com/prometheus/client_golang/pull/1835 * build(deps): bump the github-actions group with 3 updates by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1826 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1832 * Cut v1.23.0-rc.0 by @​vesari in https://github.com/prometheus/client_golang/pull/1837 * cut v1.23.0-rc.1 by @​vesari in https://github.com/prometheus/client_golang/pull/1842

New Contributors

• @​surinkim made their first contributihttps://github.com/prometheus/client_golang/pull/1797l/1797
• @​umegbewe made their first contributihttps://github.com/prometheus/client_golang/pull/1729l/1729
• @​aknuds1 made their first contributihttps://github.com/prometheus/client_golang/pull/1833l/1833

Full Changelog: prometheus/client_golang@v1.22.0...v1.23.0

stretchr/testify (github.com/stretchr/testify)

v1.11.1

Compare Source

This release fixes #​1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

• Backport #​1786 to release/1.11: mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @​brackendawson in #​1788

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

Compare Source

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

• Call stack perf change for CallerInfo by @​mikeauclair in #​1614
• Lazily render mock diff output on successful match by @​mikeauclair in #​1615
• assert: check early in Eventually, EventuallyWithT, and Never by @​cszczepaniak in #​1427
• assert: add IsNotType by @​bartventer in #​1730
• assert.JSONEq: shortcut if same strings by @​dolmen in #​1754
• assert.YAMLEq: shortcut if same strings by @​dolmen in #​1755
• assert: faster and simpler isEmpty using reflect.Value.IsZero by @​dolmen in #​1761
• suite: faster methods filtering (internal refactor) by @​dolmen in #​1758

Fixes

• assert.ErrorAs: log target type by @​craig65535 in #​1345
• Fix failure message formatting for Positive and Negative asserts in #​1062
• Improve ErrorIs message when error is nil but an error was expected by @​tsioftas in #​1681
• fix Subset/NotSubset when calling with mixed input types by @​siliconbrain in #​1729
• Improve ErrorAs failure message when error is nil by @​ccoVeille in #​1734
• mock.AssertNumberOfCalls: improve error msg by @​3scalation in #​1743

Documentation, Build & CI

• docs: Fix typo in README by @​alexandear in #​1688
• Replace deprecated io/ioutil with io and os by @​alexandear in #​1684
• Document consequences of calling t.FailNow() by @​greg0ire in #​1710
• chore: update docs for Unset #​1621 by @​techfg in #​1709
• README: apply gofmt to examples by @​alexandear in #​1687
• refactor: use %q and %T to simplify fmt.Sprintf by @​alexandear in #​1674
• Propose Christophe Colombier (ccoVeille) as approver by @​brackendawson in #​1716
• Update documentation for the Error function in assert or require package by @​architagr in #​1675
• assert: remove deprecated build constraints by @​alexandear in #​1671
• assert: apply gofumpt to internal test suite by @​ccoVeille in #​1739
• CI: fix shebang in .ci.*.sh scripts by @​dolmen in #​1746
• assert,require: enable parallel testing on (almost) all top tests by @​dolmen in #​1747
• suite.Passed: add one more status test report by @​Ararsa-Derese in #​1706
• Add Helper() method in internal mocks and assert.CollectT by @​dolmen in #​1423
• assert.Same/NotSame: improve usage of Sprintf by @​ccoVeille in #​1742
• mock: enable parallel testing on internal testsuite by @​dolmen in #​1756
• suite: cleanup use of 'testing' internals at runtime by @​dolmen in #​1751
• assert: check test failure message for Empty and NotEmpty by @​ccoVeille in #​1745
• deps: fix dependency cycle with objx (again) by @​dolmen in #​1567
• assert.Empty: comprehensive doc of "Empty"-ness rules by @​dolmen in #​1753
• doc: improve godoc of top level 'testify' package by @​dolmen in #​1760
• assert.ErrorAs: simplify retrieving the type name by @​ccoVeille in #​1740
• assert.EqualValues: improve test coverage to 100% by @​dolmen in #​1763
• suite.Run: simplify running of Setup/TeardownSuite by @​renzoarreaza in #​1769
• assert.CallerInfo: micro optimization by using LastIndexByte by @​dolmen in #​1767
• assert.CallerInfo: micro cleanup by @​dolmen in #​1768
• assert: refactor TestFileExists and TestDirExists tests to enable parallel testing by @​dolmen in #​1766
• suite.Run: refactor handling of stats for improved readability by @​dolmen in #​1764
• tests: improve captureTestingT helper by @​ccoVeille in #​1741
• build(deps): bump actions/checkout from 4 to 5 by @​dependabot[bot] in #​1778

New Contributors

• @​greg0ire made their first contribution in #​1710
• @​techfg made their first contribution in #​1709
• @​mikeauclair made their first contribution in #​1614
• @​cszczepaniak made their first contribution in #​1427
• @​architagr made their first contribution in #​1675
• @​tsioftas made their first contribution in #​1681
• @​siliconbrain made their first contribution in #​1729
• @​bartventer made their first contribution in #​1730
• @​Ararsa-Derese made their first contribution in #​1706
• @​renzoarreaza made their first contribution in #​1769
• @​3scalation made their first contribution in #​1743

Full Changelog: stretchr/testify@v1.10.0...v1.11.0

---

Configuration

📅 Schedule: Branch creation - "before 8am on Friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 7 additional dependencies were updated

Details:

Package	Change
github.com/prometheus/client_model	v0.6.1 -> v0.6.2
github.com/prometheus/common	v0.62.0 -> v0.66.1
github.com/prometheus/procfs	v0.15.1 -> v0.16.1
golang.org/x/sync	v0.14.0 -> v0.17.0
golang.org/x/sys	v0.33.0 -> v0.37.0
golang.org/x/text	v0.25.0 -> v0.30.0
google.golang.org/protobuf	v1.36.5 -> v1.36.8