Repository navigation
fix(deps): update all patch and minor versions - #1302
Merged
Merged
Conversation
jaydeluca
approved these changes
Oct 27, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
1.5.0→1.7.19.8.1→9.8.20.36.0→0.38.10.162.0→0.164.0efd719c→fa33022v3.15.0→v3.15.10.2.79→0.3.01.9.0→1.10.01.9.0→1.10.01.9.0→1.10.01.6.5→1.6.61.6.5→1.6.64.6.0→4.6.11.84.2→1.85.11.84.2→1.85.11.84.2→1.85.11.84.2→1.85.11.84.2→1.85.14.1.1→4.1.21.1.14→1.1.17Release Notes
grafana/gcx (aqua:grafana/gcx)
v1.7.1Compare Source
golang.org/x/nettov0.60.0, picking up standard library security fixes and five HTTP/2
fixes (GO-2026-6603, -6610, -6611, -6612, -6617) (#1625)
it published binaries or images (#1623)
v1.7.0Compare Source
Breaking changes
commands, Assistant helpers and
gcx api, and missing Cloud or SyntheticMonitoring credentials exit 3 instead of 1. Unknown flags and missing or
extra positional arguments exit 2 instead of 1. Error summaries use a fixed
vocabulary (
Authentication failed,Authorization failed,Resource not found,Resource conflict,Invalid command usage).Update scripts that branch on exit 1 or match the old error text. (#1483)
writes now stay editable in the Grafana UI by default. Pass
--allow-ui-updates=falseto keep them provisioned. Updating a contactpoint that is already provisioned requires
--allow-ui-updates=false;without it Grafana rejects the update. Alert rules are unchanged. (#1553)
gcx synthetic-monitoring checks statusandchecks get --show-statusnowread from the Synthetic Monitoring datasource and require Synthetic
Monitoring app v1.64.0 or later.
SUCCESS(JSONsuccess) is nowreachability over 3 hours instead of a 5-minute
probe_successaverage, sosome checks may change between
OKandFAILING.--datasource-uidishidden and ignored; it is still accepted, with a warning. (#1489)
gcx logs queryandgcx datasources loki query(including genericdatasources queryagainst Loki) now reject metric queries such asrate(...)in every output format, instead of printing metric values aslog lines. Run metric queries with
gcx logs metrics. (#1580)gcx kg notifications upsertnow rejects unknown or misspelled fields, andinput containing more than one YAML document. Both previously succeeded,
dropping the unknown key or the extra documents. It now also accepts the
output of
notifications getandlistdirectly. Correct field names insaved notification files before you upgrade. (#1571)
New commands and improvements
kggraph queries and threshold commands; deprecate legacy entity querieskggraph query and meta schema help, with--jqexamplessynthetic-monitoring suggestions list-o csv) for Prometheus, Loki, SQL, tabular, Cloud,search-metrics, Tempo and Pyroscope queries
datasources loki query-patternsandlogs query-patterns-o graphfor Loki log queries as a log-volume histogramprofileshelpGCX_CONTEXTenvironment variableirm oncall schedules list-final-shiftsignoring--start/ingestv1.6.0Compare Source
Breaking changes
spec.settings.geolocationLevel: region.Change it to
subdivisionin saved manifests before you upgrade.This affects
gcx frontend appswrites and resource pushes. Before thisrelease, gcx ignored Faro app settings on writes, so
regionnever tookeffect. Faro settings now reach the API. (#1444)
gcx datasources loki labelsandgcx logs labelsnow reject straypositional arguments. They also reject an explicit empty
--queryor--label. Omit these flags for an unscoped label list. Give each flaga nonempty value when you use it. (#1325)
New commands and improvements
gcx signupto create a Grafana Cloud account and save its firstconnection. Complete account setup in the browser. If the connection
fails after signup, finish it with
gcx login. (#1383)gcx login --cloud --oauthopen the stack chooser when no serveris set. Browser cancellation now exits with code 5. On macOS, the
terminal watcher uses its own device, so SSH paste works. (#1383)
gcx docscommands to search and read Grafana product docs.(#1234)
gcx alert routing-treescommands to manage native alert routingtrees. (#1472)
gcx profiles query-anomaliesandgcx datasources pyroscope query-anomaliescommands. Their flags andoutput may change. (#1435)
--queryto scope Loki label and value lists. (#1325)--dry-runto Synthetic Monitoring check create and update.(#1429)
Reduce its build size and startup time. (#1440)
resource selectors with dotted API groups. (#1537, #1441)
classification on create. Report truncated lists and accept app names
in get. (#1444, #1390, #1445)
example. Scope k6 load tests to the selected project. (#1457, #1452,
#1450)
selectors in help. Recover after concurrent config writes. (#1518,
#1458, #1485)
GCX_AGENT_SPILL_BYTES=0disable output spilling. (#1461, #1439)discovery. (#1520, #1206, #1305)
gradle/gradle (gradle)
v9.8.2: 9.8.2Compare Source
The Gradle team is excited to announce Gradle 9.8.2.
Here are the highlights of this release:
Read the Release Notes
We would like to thank the following community members for their contributions to this release of Gradle:
Aman Gautam,
Björn Kautler,
Eng Zer Jun,
Hashim Khan,
Julian Krannich,
KBS,
Labh R Jethe,
Mark Dodgson,
Maxim,
monkey,
nataphon-ktsystems,
Paul King,
Qiu Tian,
rg_sandesh,
Roberto Perez Alcolea,
Sean,
Zongle Wang.
Upgrade instructions
Switch your build to use Gradle 9.8.2 by updating your wrapper:
See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.
For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.
Reporting problems
If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.
We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.
grafana/docker-otel-lgtm (grafana/otel-lgtm)
v0.38.1Compare Source
What's Changed
OpenTelemetry & LGTM
Other Changes
Full Changelog: grafana/docker-otel-lgtm@v0.38.0...v0.38.1
v0.38.0Compare Source
What's Changed
OpenTelemetry & LGTM
Other Changes
Full Changelog: grafana/docker-otel-lgtm@v0.37.0...v0.38.0
v0.37.0Compare Source
What's Changed
OpenTelemetry & LGTM
Full Changelog: grafana/docker-otel-lgtm@v0.36.0...v0.37.0
open-telemetry/opentelemetry-collector-releases (otel/opentelemetry-collector-contrib)
v0.164.0Compare Source
🚀 New components 🚀
otelcol-contrib: Add the partitioning processor to the Contrib distribution (#1727)💡 Enhancements 💡
otelcol: Add thefilelogreceiver,resourcedetectionprocessor andtransformprocessor to the core distribution. (#44130)These Contrib components are priorities for stabilization.
See open-telemetry/opentelemetry-collector-contrib#44130.
🧰 Bug fixes 🧰
all: Build release binaries with Go 1.26.10 and require Alpineca-certificates2026102-r0 or later in container images. (#1722)Go 1.26.10 includes the
crypto/x509security fixes released on 2026-10-19.The updated CA bundle removes the distrusted eMudhra emSign roots, including
emSign ECC Root CA - G3.v0.163.2Compare Source
This release updates the binaries' Go version and CA bundle. It fixes #1722.
To see the collector changes in v0.163.x see v0.163.0
Changelog
6c65793[chore] Prepare release 0.163.2 (#1726)fb0342cmaint: ensure we use the latest Go and CA bundles (#1723)94fec53Update golang:1.27-alpine3.23 Docker digest to895e5fe(#1720)022f629Update github-actions deps (#1721)v0.163.1Compare Source
prometheus/prometheus (prom/prometheus)
v3.15.1: 3.15.1 / 2026-10-21Compare Source
net/http,net/textproto,crypto/tlsandhtml/template.rvben/rumdl (rumdl)
v0.3.0Compare Source
Changed
rumdl fmtthan 0.2.79 on frozen documentationsnapshots: Cargo (99 files) 4.7×, MkDocs Material (85 files) 2.6×, and
Ruff (16 files) 2.4×. Reusing parsed Markdown and shared source analysis
reduces repeated work. Speedups compare median elapsed times from 31 paired
runs after five warmups on Apple M6: ordinary Rust 1.96.0 release builds,
default threads, warm filesystem cache, and
--no-config --no-cache --silent(
--flavor=standardfor Cargo/Ruff,--flavor=mkdocsfor MkDocs Material).Output includes the correctness fixes listed below and can differ from 0.2.79.
active-mode tools and invocations with no tools checked are ignored by default.
An omitted unknown-tag policy inherits
on-missing-language-definition,preserving existing strict configurations. Valid internal cached checks count
as checked; applicable external tools rerun to reflect changes in their own
configuration and environment.
on-missing-language-definition = "warn"now reports uncovered languages;previous releases treated it as
ignore.opt into nearest-first project lookup bounded by repository/configuration
boundaries, including hoisted workspace installations.
automatic fixes, including editor fixes. Repair the reported emphasis manually;
inserting escapes or removing whitespace can change literal Markdown meaning.
Added
fmt --preflightandcheck --fix --preflightvalidate and plan the completeselected file batch before applying any writes, with atomic replacement per
file after successful planning.
fail-fast behavior. Invalid tool definitions receive central configuration
warnings, made fatal by
--deny-config-warnings.when document finding failures are disabled with
--fail-on never.No-tools invocation errors preserve JSON's findings array and use SARIF
invocation notifications rather than assigning errors to a document.
--stdin-batch-targets FILEsupplies a NUL-delimited file/directory inventoryfor cross-file existence checks without requiring placeholder documents.
Fixed
their container. Heading spacing, indentation, capitalization, and reflow
preserve list markers and avoid rewriting literal text or template code.
respect MkDocs admonition openers and Markdown-enabled HTML boundaries;
HTML markers inside comments and indented code remain literal content.
turn the following content into front matter.
while explicitly supplied unsupported source files still receive an error.
consistently across discovery and per-file configuration.
bytes and allowing that output to become formatted document content.
---(807899c)Breaking Changes
Performance
Downloads
Installation
Using uv (Recommended)
Using pip
Using pipx
Direct Download
Download the appropriate binary for your platform from the table above, extract it, and add it to your PATH.
prometheus/client_java (io.prometheus:prometheus-metrics-exporter-opentelemetry)
v1.10.0Features
Bug Fixes
Performance Improvements
grpc/grpc-java (io.grpc:protoc-gen-grpc-java)
v1.85.1What's Changed
v1.85.0gRPC Java 1.85.0 Release Notes
API Changes
e9a8c2b). High-cardinality metadata values provide little compression benefit and can churn the server's dynamic HPACK table. Adds `NettyChannelBuilder.neveConfiguration
📅 Schedule: (UTC)
* 0-7 * * 2)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.