1
0
mirror of https://github.com/etcd-io/etcd.git synced 2026-02-05 06:46:49 +01:00

30 Commits

Author SHA1 Message Date
Chun-Hung Tseng
5d4ef72c13 dependency: bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.4 to 2.27.5 and bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.4 to 2.27.5
Reference:
- #21194
- #21192

Signed-off-by: Chun-Hung Tseng <henrytseng@google.com>
2026-01-27 14:17:27 +00:00
Sharath P J
0988325ed5 server: refactor btree usage to generics-based k8s.io/utils
Signed-off-by: Sharath P J <pjsharath28@gmail.com>
2026-01-21 23:01:24 +05:30
Chun-Hung Tseng
e5fc59cb0e dependency: bump github.com/google/yamlfmt from 0.20.0 to 0.21.0
Reference:
- https://github.com/etcd-io/etcd/pull/21111

Signed-off-by: Chun-Hung Tseng <henrytseng@google.com>
2026-01-16 01:20:13 +09:00
Chun-Hung Tseng
7e64377e33 dependency: bump github.com/golangci/golangci-lint/v2 from 2.7.2 to 2.8.0
Reference:
- https://github.com/etcd-io/etcd/pull/21112

Signed-off-by: Chun-Hung Tseng <henrytseng@google.com>
2026-01-16 01:20:13 +09:00
Chun-Hung Tseng
125173b33c dependency: bump golang.org/x/tools from 0.40.0 to 0.41.0, golang.org/x/text from 0.32.0 to 0.33.0, golang.org/x/net from v0.48.0 to v0.49.0, golang.org/x/crypto from v0.46.0 to v0.49.0, golang.org/x/mod from v0.31.0 to v0.32.0
Reference:
- https://github.com/etcd-io/etcd/pull/21118
- https://github.com/etcd-io/etcd/pull/21117
- https://github.com/etcd-io/etcd/pull/21113
- https://github.com/etcd-io/etcd/pull/21110

Signed-off-by: Chun-Hung Tseng <henrytseng@google.com>
2026-01-16 01:20:13 +09:00
Chun-Hung Tseng
f2bab39a4a dependency: bump golang.org/x/sys from 0.39.0 to 0.40.0
Reference:
- https://github.com/etcd-io/etcd/pull/21115

Signed-off-by: Chun-Hung Tseng <henrytseng@google.com>
2026-01-16 01:20:13 +09:00
Sharath P J
739484002b cache: refactor btree usage to generics-based k8s.io/utils
Signed-off-by: Sharath P J <pjsharath28@gmail.com>
2026-01-14 19:22:35 +05:30
Chun-Hung Tseng
0d48346677 dependency: bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.63.0 to 0.64.0
Reference:
- https://github.com/etcd-io/etcd/pull/21087

Signed-off-by: Chun-Hung Tseng <henrytseng@google.com>
2026-01-06 16:04:35 +09:00
Chun-Hung Tseng
a030f7ec51 dependency: bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.3 to 2.27.4
Also bumped automatically:
- google.golang.org/genproto/googleapis/rpc from v0.0.0-20251202230838-ff82c1b0f217 to v0.0.0-20251222181119-0a764e51fe1b
- google.golang.org/genproto/googleapis/api from v0.0.0-20251202230838-ff82c1b0f217 to v0.0.0-20251222181119-0a764e51fe1b
- google.golang.org/grpc from v1.77.0 to v1.78.0

Reference:
- https://github.com/etcd-io/etcd/pull/21059
- https://github.com/etcd-io/etcd/pull/21055

Signed-off-by: Chun-Hung Tseng <henrytseng@google.com>
2026-01-03 12:42:31 +09:00
Chun-Hung Tseng
36fe7f9cc4 dependency: bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.38.0 to 1.39.0
Also bumped automatically:
- google.golang.org/genproto/googleapis/api from v0.0.0-20251022142026-3a174f9686a8 to v0.0.0-20251202230838-ff82c1b0f217
- google.golang.org/genproto/googleapis/rpc from v0.0.0-20251022142026-3a174f9686a8 to v0.0.0-20251202230838-ff82c1b0f217
- go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.38.0 to 1.39.0

Reference:
- https://github.com/etcd-io/etcd/pull/21060
- https://github.com/etcd-io/etcd/pull/21057

Signed-off-by: Chun-Hung Tseng <henrytseng@google.com>
2026-01-03 12:42:31 +09:00
Chun-Hung Tseng
be7a2e4a68 dependency: bump google.golang.org/protobuf from 1.36.10 to 1.36.11
Reference:
- https://github.com/etcd-io/etcd/pull/21056

Signed-off-by: Chun-Hung Tseng <henrytseng@google.com>
2026-01-03 12:42:31 +09:00
Ivan Valdes
c6ead5fcc3 build(deps): bump golang.org/x/tools from 0.39.0 to 0.40.0 in /tools/mod
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.39.0 to 0.40.0.
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.39.0...v0.40.0)

---
updated-dependencies:
- dependency-name: golang.org/x/tools
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Reference: https://github.com/etcd-io/etcd/pull/21018

Signed-off-by: Ivan Valdes <ivan@vald.es>
2025-12-22 22:45:00 -08:00
Ivan Valdes
8505dec782 build(deps): bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.39.0
Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.38.0 to 1.39.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.39.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.39.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Reference: https://github.com/etcd-io/etcd/pull/21002

Signed-off-by: Ivan Valdes <ivan@vald.es>
2025-12-22 22:44:56 -08:00
Ivan Valdes
4f99d2c03a build(deps): bump github.com/golangci/golangci-lint/v2 in /tools/mod
Bumps [github.com/golangci/golangci-lint/v2](https://github.com/golangci/golangci-lint) from 2.6.2 to 2.7.2.
- [Release notes](https://github.com/golangci/golangci-lint/releases)
- [Changelog](https://github.com/golangci/golangci-lint/blob/main/CHANGELOG.md)
- [Commits](golangci/golangci-lint@v2.6.2...v2.7.2)

---
updated-dependencies:
- dependency-name: github.com/golangci/golangci-lint/v2
  dependency-version: 2.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Reference: https://github.com/etcd-io/etcd/pull/21001

Signed-off-by: Ivan Valdes <ivan@vald.es>
2025-12-22 22:44:48 -08:00
ArkaSaha30
612c28db40 dependency: bump golang.org/x/tools from 0.38.0 to 0.39.0
This commit will bump golang.org/x/tools from 0.38.0 to 0.39.0

Signed-off-by: ArkaSaha30 <arkasaha30@gmail.com>
2025-11-28 23:47:47 +05:30
ArkaSaha30
7afc900659 dependency: bump google.golang.org/grpc from 1.76.0 to 1.77.0
This commit will bump google.golang.org/grpc from 1.76.0 to 1.77.0

Signed-off-by: ArkaSaha30 <arkasaha30@gmail.com>
2025-11-28 23:01:30 +05:30
Ivan Valdes
52a82c7fe9 build(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.44.0 to 0.45.0.
- [Commits](golang/crypto@v0.44.0...v0.45.0)

Signed-off-by: Ivan Valdes <ivan@vald.es>

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: direct:production
...

Addresses CVE-2025-58181 and CVE-2025-47914.

Reference: https://github.com/etcd-io/etcd/pull/20956.

Signed-off-by: Ivan Valdes <ivan@vald.es>
2025-11-19 15:19:44 -08:00
Ivan Valdes
a79b176fcd build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/v2
Bumps [github.com/grpc-ecosystem/go-grpc-middleware/v2](https://github.com/grpc-ecosystem/go-grpc-middleware) from 2.1.0 to 2.3.3.
- [Release notes](https://github.com/grpc-ecosystem/go-grpc-middleware/releases)
- [Commits](grpc-ecosystem/go-grpc-middleware@v2.1.0...v2.3.3)

Signed-off-by: Ivan Valdes <ivan@vald.es>

---
updated-dependencies:
- dependency-name: github.com/grpc-ecosystem/go-grpc-middleware/v2
  dependency-version: 2.3.3
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Reference: https://github.com/etcd-io/etcd/pull/20911

Signed-off-by: Ivan Valdes <ivan@vald.es>
2025-11-19 15:11:54 -08:00
ArkaSaha30
f9e9174a48 dependency: bump github.com/golangci/golangci-lint/v2 from 2.6.0 to 2.6.1
This commit will bump github.com/golangci/golangci-lint/v2 from 2.6.0 to 2.6.1

Signed-off-by: ArkaSaha30 <arkasaha30@gmail.com>
2025-11-19 21:56:07 +05:30
ArkaSaha30
dcfb9fed86 dependency: bump golang.org/x/net from 0.46.0 to 0.47.0
This PR will bump golang.org/x/net from 0.46.0 to 0.47.0
Additioanlly also updates the following dependent modules:
- golang.org/x/sys v0.38.0
- golang.org/x/text v0.31.0
- golang.org/x/crypto v0.44.0
- golang.org/x/sync v0.18.0

Signed-off-by: ArkaSaha30 <arkasaha30@gmail.com>
2025-11-19 20:40:33 +05:30
Ivan Valdes
f20a950d14 build(deps): bump github.com/prometheus/common from 0.67.1 to 0.67.2
Reference: https://github.com/etcd-io/etcd/pull/20883

Signed-off-by: Ivan Valdes <ivan@vald.es>
2025-11-08 20:50:57 -08:00
Ivan Valdes
107ff2148a build(deps): bump github.com/golangci/golangci-lint/v2 from 2.5.0 to 2.6.0
Reference: https://github.com/etcd-io/etcd/pull/20880

Signed-off-by: Ivan Valdes <ivan@vald.es>
2025-11-08 20:50:57 -08:00
Ivan Valdes
483c98fd86 build(deps): bump google.golang.org/grpc from 1.75.1 to 1.76.0
Reference: https://github.com/etcd-io/etcd/pull/20866

Signed-off-by: Ivan Valdes <ivan@vald.es>
2025-11-08 20:50:57 -08:00
joshjms
9033d6ee70 dependency: bump golang.org/x/tools from 0.37.0 to 0.38.0
Signed-off-by: joshjms <joshjms1607@gmail.com>
2025-10-23 00:48:22 +08:00
joshjms
53ce959dea dependency: bump github.com/prometheus/common from 0.66.1 to 0.67.1
Signed-off-by: joshjms <joshjms1607@gmail.com>
2025-10-23 00:47:31 +08:00
joshjms
4cbb086b1d dependency: bump golang.org/x/net from 0.44.0 to 0.46.0
Signed-off-by: joshjms <joshjms1607@gmail.com>
2025-10-23 00:46:07 +08:00
joshjms
17b3d18bc9 update go.work.sum
Signed-off-by: joshjms <joshjms1607@gmail.com>
2025-10-08 02:02:15 +08:00
joshjms
31ee22874c dependency: bump google.golang.org/protobuf from 1.36.9 to 1.36.10
Signed-off-by: joshjms <joshjms1607@gmail.com>
2025-10-08 01:27:50 +08:00
joshjms
a68b35c971 dependency: bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.2 to 2.27.3
Signed-off-by: joshjms <joshjms1607@gmail.com>
2025-10-08 00:02:44 +08:00
Ivan Valdes
913a1e9667 Enable Go workspace
Introduce a new Go workspace that references all the current submodules.
To preserve the current behavior, point all of the current
FORBIDDEN_DEPENCENCY virtual dependencies to the same path.

Add scripts/update_go_workspace.sh that generates the Go workspace file
(go.work) based on the submodules found in the project (excluding the
tools) and creates the go.work.sum file after running go mod download.
Added this script to the fix Makefile target. Even though, the number of
modules in the etcd repository is small, by adding an automated way of
updating the go.work modules future proofs the project in case there are
new modules or removal of them.

Remove the workaround to forbid dependencies through the
FORBIDDEN_DEPENDENCY replace. This can be done through a linter rather
than at the go.mod level. Using the go.mod approach also brings issues
with the workspace, as all the dependencies (including replaces) need to
have a consistent version and point to the same place.

Co-authored-by: Tim Hockin <thockin@google.com>
Signed-off-by: Ivan Valdes <ivan@vald.es>
2025-10-03 15:54:54 -07:00