Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 3, 2025

Bumps the project group with 3 updates: cloud.google.com/go/storage, github.com/cilium/ebpf and google.golang.org/api.

Updates cloud.google.com/go/storage from 1.57.0 to 1.57.1

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.57.1

1.57.1 (2025-10-28)

Bug Fixes

  • storage: Takeover idempotence. (#13230) (cc5d2a1)
  • storage: Copy metadata when using Copier with grpc (#12919) (57a2e80)
  • storage: Fix takeover response handling. (#13239) (26d75bc)
  • storage: Remove default timeout for gRPC operations (#13022) (b94c3ba)
  • storage: Skip download of file outside of target dir (#12945) (6259aee)
  • storage: Upgrade gRPC service registration func (8fffca2)
Commits

Updates github.com/cilium/ebpf from 0.19.0 to 0.20.0

Release notes

Sourced from github.com/cilium/ebpf's releases.

v0.20.0

Performance Improvements

  • btf: Memory-map vmlinux BTF when possible instead of copying to heap (saves several megabytes)
  • btf: Decode BTF from byte slices instead of io.Reader for better performance
  • btf: Cache BTF during fixups and target search to avoid loading each blob multiple times
  • linker: Resolve kernel symbols in a single pass instead of individually
  • prog: Speed up opening pinned programs by using minimal program info
  • map: Avoid allocations during PerCPUMap batch lookups (76% faster, 99% fewer allocations)

New Features

  • btf: Added LoadSplitSpec function for easier use of split-BTF files
  • btf: Accept empty string tables in BTF data
  • link: Added Detach() method for explicitly detaching links
  • map: Preliminary support for arena maps
  • map: Parse and expose map_extra field in MapSpec (enables bloom filter configuration)
  • prog: Allow explicit ifindex specification when loading programs
  • prog: Support getting context output from syscall programs
  • prog: Allow passing extra targets for CO-RE relocations via ExtraRelocationTargets
  • bpf2go: Allow multiple commands in BPF2GO_CC environment variable (e.g., ccache clang)
  • tracefs: Allow hyphens in tracepoint group names
  • kallsyms: Return ErrRestrictedKernel when reading zero addresses due to kernel.kptr_restrict
  • info: Return ErrRestrictedKernel when program info is restricted by kernel security settings
  • prog: Tolerate ErrRestrictedKernel during ksym resolution unless ksyms are required

Bugfixes

  • ringbuf: Fixed panic when reading after close
  • btf: Fixed race condition when loading cached kernel/module specs
  • ringbuf: Fixed 32-bit compatibility by using uintptr for positions
  • memory: Set cleanup on *Memory instead of **Memory to fix resource leak
  • link: Fixed concurrent cleanup ordering for perf events and tracefs events

Windows Support Improvements

  • ringbuf: Added Windows support for ring buffer operations
  • windows: Fixed compatibility with recent eBPF for Windows changes (XDP_TEST removal, SAMPLE program type)
  • windows: Enabled Hyper-V support in test VMs
  • program: Added workaround for eBPF for Windows rejecting empty ContextOut

Breaking Changes

ProgramOptions.KernelModuleTypes removed

The KernelModuleTypes field in ProgramOptions has been removed. In 99% of cases this field should not be necessary anymore. Module BTF should be merged into the vmlinux BTF, as tools like btfhub do.

For advanced use cases that still require passing additional BTF specs for CO-RE relocations, use the new ExtraRelocationTargets field:

Before:

... (truncated)

Commits
  • c64ffee struct_ops: skip copy for zeroed nested structs and fail on non-zeroed
  • 843f326 docs: document how to build parts of efW
  • 8f23ed6 map, program: add StructOpsMap support
  • e6e4707 ci: install sample_ebpf_ext to provide BPF_PROG_TYPE_SAMPLE
  • e5c623f windows: deal with removal of XDP_TEST from efW
  • c41a50a program: work around efW rejecting an empty ContextOut
  • 9a014ef kallsyms: return ErrRestrictedKernel when reading zero address
  • 1bfe0bc info: return ErrRestrictedKernel when program info is restricted
  • c27ff92 staticcheck.conf: temporarily disable SA4003
  • e653f17 *: convert "go:generate go run ..." to "go:generate go tool ..."
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.253.0 to 0.254.0

Release notes

Sourced from google.golang.org/api's releases.

v0.254.0

0.254.0 (2025-10-28)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.254.0 (2025-10-28)

Features

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the project group with 3 updates: [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go), [github.com/cilium/ebpf](https://github.com/cilium/ebpf) and [google.golang.org/api](https://github.com/googleapis/google-api-go-client).


Updates `cloud.google.com/go/storage` from 1.57.0 to 1.57.1
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@spanner/v1.57.0...storage/v1.57.1)

Updates `github.com/cilium/ebpf` from 0.19.0 to 0.20.0
- [Release notes](https://github.com/cilium/ebpf/releases)
- [Commits](cilium/ebpf@v0.19.0...v0.20.0)

Updates `google.golang.org/api` from 0.253.0 to 0.254.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.253.0...v0.254.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.57.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: project
- dependency-name: github.com/cilium/ebpf
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: project
- dependency-name: google.golang.org/api
  dependency-version: 0.254.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: project
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 3, 2025
@dependabot dependabot bot deployed to terraform-plan November 3, 2025 00:47 Active
@dependabot dependabot bot deployed to pull-request November 3, 2025 00:47 Active
@github-actions
Copy link

github-actions bot commented Nov 3, 2025

Terraform Plan:

data.google_project.gke_metadata_server: Reading...
google_service_account.test: Refreshing state... [id=projects/gke-metadata-server/serviceAccounts/[email protected]]
google_service_account.clean_resources: Refreshing state... [id=projects/gke-metadata-server/serviceAccounts/[email protected]]
google_project_iam_custom_role.continuous_integration: Refreshing state... [id=projects/gke-metadata-server/roles/continuousIntegration]
google_service_account.release: Refreshing state... [id=projects/gke-metadata-server/serviceAccounts/[email protected]]
google_project_iam_custom_role.resource_cleaner: Refreshing state... [id=projects/gke-metadata-server/roles/resourceCleaner]
google_iam_workload_identity_pool.test_kind_cluster: Refreshing state... [id=projects/gke-metadata-server/locations/global/workloadIdentityPools/test-kind-cluster]
google_service_account.pull_request: Refreshing state... [id=projects/gke-metadata-server/serviceAccounts/[email protected]]
google_storage_bucket.test: Refreshing state... [id=gke-metadata-server-test]
google_service_account_iam_member.clean_resources_workload_identity_user: Refreshing state... [id=projects/gke-metadata-server/serviceAccounts/[email protected]/roles/iam.workloadIdentityUser/principal://iam.googleapis.com/projects/637293746831/locations/global/workloadIdentityPools/github-actions/subject/repo:matheuscscp/gke-metadata-server:environment:clean-resources]
google_service_account_iam_member.release_workload_identity_user: Refreshing state... [id=projects/gke-metadata-server/serviceAccounts/[email protected]/roles/iam.workloadIdentityUser/principal://iam.googleapis.com/projects/637293746831/locations/global/workloadIdentityPools/github-actions/subject/repo:matheuscscp/gke-metadata-server:environment:release]
google_service_account_iam_member.test_workload_identity_users: Refreshing state... [id=projects/gke-metadata-server/serviceAccounts/[email protected]/roles/iam.workloadIdentityUser/principal://iam.googleapis.com/projects/637293746831/locations/global/workloadIdentityPools/test-kind-cluster/subject/system:serviceaccount:default:test-impersonated]
google_storage_bucket_iam_binding.test_bucket_object_admins: Refreshing state... [id=b/gke-metadata-server-test/roles/storage.objectAdmin]
google_service_account_iam_member.pull_request_workload_identity_user: Refreshing state... [id=projects/gke-metadata-server/serviceAccounts/[email protected]/roles/iam.workloadIdentityUser/principal://iam.googleapis.com/projects/637293746831/locations/global/workloadIdentityPools/github-actions/subject/repo:matheuscscp/gke-metadata-server:environment:pull-request]
data.google_project.gke_metadata_server: Read complete after 0s [id=projects/gke-metadata-server]
google_project_iam_member.resource_cleaner: Refreshing state... [id=gke-metadata-server/projects/gke-metadata-server/roles/resourceCleaner/serviceAccount:[email protected]]
google_project_iam_binding.continuous_integration: Refreshing state... [id=gke-metadata-server/projects/gke-metadata-server/roles/continuousIntegration]

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

@github-actions
Copy link

github-actions bot commented Nov 3, 2025

New Releases Check:

No version releases in this pull request.

@matheuscscp matheuscscp merged commit f4f16af into main Nov 3, 2025
3 checks passed
@matheuscscp matheuscscp deleted the dependabot/project-06052f85b4 branch November 3, 2025 08:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants