fix(go.mod/go.sum): update minor dependencies (golang)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
github.com/onsi/ginkgo/v2	v2.27.5 → v2.28.1			require	minor
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring	v0.88.0 → v0.90.1			require	minor
github.com/redis/go-redis/v9	v9.17.3 → v9.18.0			require	minor
go (source)	1.25.6 → 1.26.1			golang	minor
golang.org/x/mod	v0.32.0 → v0.34.0			require	minor

---

Release Notes

onsi/ginkgo (github.com/onsi/ginkgo/v2)

v2.28.1

Compare Source

2.28.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

v2.28.0

Compare Source

2.28.0

Ginkgo's SemVer filter now supports filtering multiple components by SemVer version:

It("should work in a specific version range (1.0.0, 2.0.0) and third-party dependency redis in [8.0.0, ~)", SemVerConstraint(">= 3.2.0"), ComponentSemVerConstraint("redis", ">= 8.0.0") func() {
    // This test will only run when version is between 1.0.0 (exclusive) and 2.0.0 (exclusive) and redis version is >= 8.0.0
})

can be filtered in or out with an invocation like:

ginkgo --sem-ver-filter="2.1.1, redis=8.2.0"

Huge thanks to @​Icarus9913 for working on this!

prometheus-operator/prometheus-operator (github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring)

v0.90.1: 0.90.1 / 2026-03-25

Compare Source

• [BUGFIX] Fix Probe ignoring HTTP client settings in scrape configuration. #​8461

v0.90.0: 0.90.0 / 2026-03-19

Compare Source

• [CHANGE/BUGFIX] Validate that the remote-write URL scheme is either http or https. #​8455
• [FEATURE] Add --repair-policy-for-statefulsets CLI argument to the operator. It defines how the operator manages StatefulSet's pods stuck at an incorrect revision. Users running Kubernetes v1.35+ are encouraged to enable this feature (see troubleshooting guide). #​8443
• [FEATURE] Add schedulerName support to the Prometheus, PrometheusAgent, Alertmanager and ThanosRuler CRDs. #​8451
• [ENHANCEMENT] Add --web.tls-curves CLI argument to the operator and admission-webhook binaries. #​8385
• [ENHANCEMENT] Support minimum TLS version for Thanos gRPC servers. #​8438
• [ENHANCEMENT] Add version label to ThanosRuler pods. #​8441
• [ENHANCEMENT] Add messageText support for Slack receiver in AlertmanagerConfig CRD. #​8374
• [ENHANCEMENT] Add messageText support for Slack receiver in Alertmanager secret config. #​8375
• [ENHANCEMENT] Add forceImplicitTLS support for SMTP email config in Alertmanager secret config. #​8384 #​8404
• [ENHANCEMENT] Add forceImplicitTLS support for SMTP email config in AlertmanagerConfig CRD. #​8386
• [ENHANCEMENT] Add forceImplicitTLS support for SMTP global config in Alertmanager secret config. #​8405
• [ENHANCEMENT] Add forceImplicitTLS support for SMTP global config in Alertmanager CRD. #​8406
• [ENHANCEMENT] Add support for global Telegram bot token in Alertmanager CRD. #​8372
• [ENHANCEMENT] Add chatIDFile support for Telegram receiver in Alertmanager secret config. #​8376
• [ENHANCEMENT] Add wechatAPISecretFile support in Alertmanager global config. #​8377
• [ENHANCEMENT] Add authSecretFile support for email config in Alertmanager secret config. #​8396
• [ENHANCEMENT] Add nested field support for PagerDuty description in Alertmanager secret config. #​8402
• [ENHANCEMENT] Add email threading support in Alertmanager secret config. #​8388
• [ENHANCEMENT] Add field and label selectors for ConfigMap watches. #​8368
• [ENHANCEMENT] Improve ScrapeConfig API consistency and validation. #​8422
• [BUGFIX] Fix ThanosRuler config resource status not being updated on initial StatefulSet creation. #​8358
• [BUGFIX] Preserve LastTransitionTime in Prometheus status conditions. #​8346
• [BUGFIX] Make Mattermost text field optional in AlertmanagerConfig CRD. #​8363
• [BUGFIX] Remove nil error wrapping in v1alpha1 duplicate receiver validation. #​8379
• [BUGFIX] Aggregate Available condition across Prometheus shards. #​8434
• [BUGFIX] Reconcile resources with inconsistent status. #​8397
• [BUGFIX] Fix namespace lister/watcher compatibility with Kubernetes v1.35 client-go. #​8431
• [BUGFIX] Fix missing OAuth2 field in IonosSDConfig generation. #​8433
• [BUGFIX] Fix missing fields in AzureSDConfig. #​8444
• [BUGFIX] Validate Microsoft Teams V2 URL in AlertmanagerConfig CRD. #​8227
• [BUGFIX] Fix labelmap relabel action rejecting valid replacement values with template variables for Prometheus 2.x. #​8337

v0.89.0: 0.89.0 / 2026-02-05

Compare Source

• [ENHANCEMENT] Add hostNetwork field to the Alertmanager CRD. #​8281
• [ENHANCEMENT] Add the crds and full-crds commands to the operator's binary. #​8251
• [ENHANCEMENT] Report deprecated field usage in the Reconciled condition type. #​8236
• [ENHANCEMENT] Avoid unnecessary reconciliation upon creation of the ThanosRuler StatefulSet. #​8347
• [ENHANCEMENT] Add bodySizeLimit to the ScrapeConfig CRD. #​8348
• [ENHANCEMENT] Support http_headers field in the Alertmanager Secret. #​8357
• [ENHANCEMENT] Add the -kubelet-http-metrics flag to enable/disable the HTTP metrics port in the Kubelet endpoint (default=enabled). #​8350
• [ENHANCEMENT] Include operator.prometheus.io/version annotation in the full version of CRDs. #​8279
• [BUGFIX] Validate VictorOps global configuration in the Alertmanager CRD. #​8020
• [BUGFIX] Validate Jira global configuration in the Alertmanager CRD. #​8265
• [BUGFIX] Validate VictorOps receiver's URL in the AlertmanagerConfig CRD. #​8258
• [BUGFIX] Validate Webex receiver's URL in the AlertmanagerConfig CRD. #​8255
• [BUGFIX] Validate Jira receiver's URL configuration in the AlertmanagerConfig CRD. #​8230
• [BUGFIX] Validate OpsGenie receiver configuration in the AlertmanagerConfig CRD. #​8267
• [BUGFIX] Validate WeChat receiver configuration in the AlertmanagerConfig CRD. #​8271
• [BUGFIX] Validate SNS receiver configuration in the AlertmanagerConfig CRD. #​8217
• [BUGFIX] Validate Webex global configuration in the Alertmanager CRD. #​7979
• [BUGFIX] Validate Telegram global configuration in the Alertmanager CRD. #​8268
• [BUGFIX] Restore statefulset's labels if the creation fails with AlreadyExists. #​8343
• [BUGFIX] Fix potential panic due to informer cache races. #​8310
• [BUGFIX] Support probers defined with IPv6 addresses in the Probe CRD. #​8354
• [BUGFIX] Prevent group and repeat intervals with zero duration from breaking Alertmanager. #​8126
• [BUGFIX] Propagate all supported RocketChat attributes for AlertmanagerConfig CRD. #​8016
• [BUGFIX] Add URL validation for WeChat receiver. #​8256
• [BUGFIX] Add URL validation for SNS receiver. #​8259
• [BUGFIX] Fix GCE service discovery for the ScrapeConfig CRD. #​8284
• [BUGFIX] Avoid stale conditions in Alertmanager, ThanosRuler, Prometheus and PrometheusAgent resources. #​8304
• [BUGFIX] Fix race condition when updating rule ConfigMaps. #​8290
• [BUGFIX] Fix race condition when patching finalizers. #​8323
• [BUGFIX] Reconcile ScrapeConfig resources when namespace selection changes. #​8334

v0.88.1: 0.88.1 / 2026-01-27

Compare Source

• [BUGFIX] Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD. #​8294
• [BUGFIX] Revert maximum version check for EC2/Lightsail SD in ScrapeConfig CRD. #​8308
• [BUGFIX] Relax URL validation in Slack receiver in AlertmanagerConfig CRD to support Go templates. #​8299 #​8331
• [BUGFIX] Relax URL validation in PagerDuty in AlertmanagerConfig CRD to support Go templates. #​8319
• [BUGFIX] Relax URL validation in WebhookConfig in AlertmanagerConfig CRD to support Go templates. #​8307 #​8317
• [BUGFIX] Relax URL validation in RocketChat receiver in AlertmanagerConfig CRD to support Go templates. #​8318
• [BUGFIX] Relax URL validation in Pushover receiver in AlertmanagerConfig CRD to support Go templates. #​8307 #​8316

redis/go-redis (github.com/redis/go-redis/v9)

v9.18.0: 9.18.0

Compare Source

Redis 8.6 Support

Added support for Redis 8.6, including new commands and features for streams idempotent production and HOTKEYS.

Smart Client Handoff (Maintenance Notifications) for Cluster

note: Pending RS version release

This release introduces comprehensive support for Redis Enterprise Cluster maintenance notifications via SMIGRATING/SMIGRATED push notifications. The client now automatically handles slot migrations by:

• Relaxing timeouts during migration (SMIGRATING) to prevent false failures
• Triggering lazy cluster state reloads upon completion (SMIGRATED)
• Enabling seamless operations during Redis Enterprise maintenance windows

(#​3643) by @​ndyakov

OpenTelemetry Native Metrics Support

Added comprehensive OpenTelemetry metrics support following the OpenTelemetry Database Client Semantic Conventions. The implementation uses a Bridge Pattern to keep the core library dependency-free while providing optional metrics instrumentation through the new extra/redisotel-native package.

Metric groups include:

• Command metrics: Operation duration with retry tracking
• Connection basic: Connection count and creation time
• Resiliency: Errors, handoffs, timeout relaxation
• Connection advanced: Wait time and use time
• Pubsub metrics: Published and received messages
• Stream metrics: Processing duration and maintenance notifications

(#​3637) by @​ofekshenawa

✨ New Features

• HOTKEYS Commands: Added support for Redis HOTKEYS feature for identifying hot keys based on CPU consumption and network utilization (#​3695) by @​ofekshenawa
• Streams Idempotent Production: Added support for Redis 8.6+ Streams Idempotent Production with ProducerID, IdempotentID, IdempotentAuto in XAddArgs and new XCFGSET command (#​3693) by @​ofekshenawa
• NaN Values for TimeSeries: Added support for NaN (Not a Number) values in Redis time series commands (#​3687) by @​ofekshenawa
• DialerRetries Options: Added DialerRetries and DialerRetryTimeout to ClusterOptions, RingOptions, and FailoverOptions (#​3686) by @​naveenchander30
• ConnMaxLifetimeJitter: Added jitter configuration to distribute connection expiration times and prevent thundering herd (#​3666) by @​cyningsun
• Digest Helper Functions: Added DigestString and DigestBytes helper functions for client-side xxh3 hashing compatible with Redis DIGEST command (#​3679) by @​ofekshenawa
• SMIGRATED New Format: Updated SMIGRATED parser to support new format and remember original host:port (#​3697) by @​ndyakov
• Cluster State Reload Interval: Added cluster state reload interval option for maintenance notifications (#​3663) by @​ndyakov

🐛 Bug Fixes

• PubSub nil pointer dereference: Fixed nil pointer dereference in PubSub after WithTimeout() - pubSubPool is now properly cloned (#​3710) by @​Copilot
• MaintNotificationsConfig nil check: Guard against nil MaintNotificationsConfig in initConn (#​3707) by @​veeceey
• wantConnQueue zombie elements: Fixed zombie wantConn elements accumulation in wantConnQueue (#​3680) by @​cyningsun
• XADD/XTRIM approx flag: Fixed XADD and XTRIM to use = when approx is false (#​3684) by @​ndyakov
• Sentinel timeout retry: When connection to a sentinel times out, attempt to connect to other sentinels (#​3654) by @​cxljs

⚡ Performance

• Fuzz test optimization: Eliminated repeated string conversions, used functional approach for cleaner operation selection (#​3692) by @​feiguoL
• Pre-allocate capacity: Pre-allocate slice capacity to prevent multiple capacity expansions (#​3689) by @​feelshu

🧪 Testing

• Comprehensive TLS tests: Added comprehensive TLS tests and example for standalone, cluster, and certificate authentication (#​3681) by @​ndyakov
• Redis 8.6: Updated CI to use Redis 8.6-pre (#​3685) by @​ndyakov

🧰 Maintenance

• Deprecation warnings: Added deprecation warnings for commands based on Redis documentation (#​3673) by @​ndyakov
• Use errors.Join(): Replaced custom error join function with standard library errors.Join() (#​3653) by @​cxljs
• Use Go 1.21 min/max: Use Go 1.21's built-in min/max functions (#​3656) by @​cxljs
• Proper formatting: Code formatting improvements (#​3670) by @​12ya
• Set commands documentation: Added comprehensive documentation to all set command methods (#​3642) by @​iamamirsalehi
• MaxActiveConns docs: Added default value documentation for MaxActiveConns (#​3674) by @​codykaup
• README example update: Updated README example (#​3657) by @​cxljs
• Cluster maintnotif example: Added example application for cluster maintenance notifications (#​3651) by @​ndyakov

👥 Contributors

We'd like to thank all the contributors who worked on this release!

@​12ya, @​Copilot, @​codykaup, @​cxljs, @​cyningsun, @​feelshu, @​feiguoL, @​iamamirsalehi, @​naveenchander30, @​ndyakov, @​ofekshenawa, @​veeceey

golang/go (go)

v1.26.1

v1.26.0

v1.25.8

v1.25.7

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 19 additional dependencies were updated

Details:

Package	Change
k8s.io/api	v0.35.0 -> v0.35.2
k8s.io/apiextensions-apiserver	v0.35.0 -> v0.35.2
k8s.io/apimachinery	v0.35.0 -> v0.35.2
k8s.io/client-go	v0.35.0 -> v0.35.2
k8s.io/code-generator	v0.35.0 -> v0.35.2
sigs.k8s.io/controller-runtime	v0.23.0 -> v0.23.3
github.com/google/pprof	v0.0.0-20250820193118-f64d9cf942d6 -> v0.0.0-20260115054156-294ebfa9ad83
go.yaml.in/yaml/v2	v2.4.3 -> v2.4.4
golang.org/x/crypto	v0.46.0 -> v0.49.0
golang.org/x/net	v0.48.0 -> v0.52.0
golang.org/x/sync	v0.19.0 -> v0.20.0
golang.org/x/sys	v0.39.0 -> v0.42.0
golang.org/x/term	v0.38.0 -> v0.41.0
golang.org/x/text	v0.32.0 -> v0.35.0
golang.org/x/tools	v0.40.0 -> v0.42.0
k8s.io/klog/v2	v2.130.1 -> v2.140.0
k8s.io/kube-openapi	v0.0.0-20250910181357-589584f1c912 -> v0.0.0-20260317180543-43fb72c5454a
k8s.io/utils	v0.0.0-20251002143259-bc988d571ff4 -> v0.0.0-20260210185600-b8788abfbbc2
sigs.k8s.io/structured-merge-diff/v6	v6.3.1 -> v6.3.2