fix(deps): Update Go

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
github.com/docker/go-connections	v0.5.0 -> v0.6.0			require	minor
github.com/spf13/cobra	v1.9.1 -> v1.10.1			require	minor
github.com/stretchr/testify	v1.10.0 -> v1.11.1			require	minor
github.com/zitadel/oidc/v3	v3.41.0 -> v3.44.0			require	minor
golang.org/x/crypto	v0.40.0 -> v0.41.0			require	minor
golang.org/x/exp	542afb5 -> 8b4c13b			require	digest
golang.org/x/term	v0.33.0 -> v0.34.0			require	minor

---

Release Notes

docker/go-connections (github.com/docker/go-connections)

v0.6.0

Compare Source

spf13/cobra (github.com/spf13/cobra)

v1.10.1

Compare Source

🐛 Fix

• chore: upgrade pflags v1.0.9 by @​jpmcb in #​2305

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

Compare Source

What's Changed

🚨 Attention!

• Bump pflag to 1.0.8 by @​tomasaschan in #​2303

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

• If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`
• or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: #​2303 (comment)

✨ Features

• Flow context to command in SetHelpFunc by @​Frassle in #​2241
• The default ShellCompDirective can be customized for a command and its subcommands by @​albers in #​2238

🐛 Fix

• Upgrade golangci-lint to v2, address findings by @​scop in #​2279

🪠 Testing

• Test with Go 1.24 by @​harryzcy in #​2236
• chore: Rm GitHub Action PR size labeler by @​jpmcb in #​2256

📝 Docs

• Remove traling curlybrace by @​yedayak in #​2237
• Update command.go by @​styee in #​2248
• feat: Add security policy by @​jpmcb in #​2253
• Update Readme (Warp) by @​ericdachen in #​2267
• Add Periscope to the list of projects using Cobra by @​anishathalye in #​2299

New Contributors

• @​harryzcy made their first contribution in #​2236
• @​yedayak made their first contribution in #​2237
• @​Frassle made their first contribution in #​2241
• @​styee made their first contribution in #​2248
• @​ericdachen made their first contribution in #​2267
• @​albers made their first contribution in #​2238
• @​anishathalye made their first contribution in #​2299
• @​tomasaschan made their first contribution in #​2303

Full Changelog: spf13/cobra@v1.9.1...v1.9.2

stretchr/testify (github.com/stretchr/testify)

v1.11.1

Compare Source

This release fixes #​1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

• Backport #​1786 to release/1.11: mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @​brackendawson in #​1788

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

Compare Source

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

• Call stack perf change for CallerInfo by @​mikeauclair in #​1614
• Lazily render mock diff output on successful match by @​mikeauclair in #​1615
• assert: check early in Eventually, EventuallyWithT, and Never by @​cszczepaniak in #​1427
• assert: add IsNotType by @​bartventer in #​1730
• assert.JSONEq: shortcut if same strings by @​dolmen in #​1754
• assert.YAMLEq: shortcut if same strings by @​dolmen in #​1755
• assert: faster and simpler isEmpty using reflect.Value.IsZero by @​dolmen in #​1761
• suite: faster methods filtering (internal refactor) by @​dolmen in #​1758

Fixes

• assert.ErrorAs: log target type by @​craig65535 in #​1345
• Fix failure message formatting for Positive and Negative asserts in #​1062
• Improve ErrorIs message when error is nil but an error was expected by @​tsioftas in #​1681
• fix Subset/NotSubset when calling with mixed input types by @​siliconbrain in #​1729
• Improve ErrorAs failure message when error is nil by @​ccoVeille in #​1734
• mock.AssertNumberOfCalls: improve error msg by @​3scalation in #​1743

Documentation, Build & CI

• docs: Fix typo in README by @​alexandear in #​1688
• Replace deprecated io/ioutil with io and os by @​alexandear in #​1684
• Document consequences of calling t.FailNow() by @​greg0ire in #​1710
• chore: update docs for Unset #​1621 by @​techfg in #​1709
• README: apply gofmt to examples by @​alexandear in #​1687
• refactor: use %q and %T to simplify fmt.Sprintf by @​alexandear in #​1674
• Propose Christophe Colombier (ccoVeille) as approver by @​brackendawson in #​1716
• Update documentation for the Error function in assert or require package by @​architagr in #​1675
• assert: remove deprecated build constraints by @​alexandear in #​1671
• assert: apply gofumpt to internal test suite by @​ccoVeille in #​1739
• CI: fix shebang in .ci.*.sh scripts by @​dolmen in #​1746
• assert,require: enable parallel testing on (almost) all top tests by @​dolmen in #​1747
• suite.Passed: add one more status test report by @​Ararsa-Derese in #​1706
• Add Helper() method in internal mocks and assert.CollectT by @​dolmen in #​1423
• assert.Same/NotSame: improve usage of Sprintf by @​ccoVeille in #​1742
• mock: enable parallel testing on internal testsuite by @​dolmen in #​1756
• suite: cleanup use of 'testing' internals at runtime by @​dolmen in #​1751
• assert: check test failure message for Empty and NotEmpty by @​ccoVeille in #​1745
• deps: fix dependency cycle with objx (again) by @​dolmen in #​1567
• assert.Empty: comprehensive doc of "Empty"-ness rules by @​dolmen in #​1753
• doc: improve godoc of top level 'testify' package by @​dolmen in #​1760
• assert.ErrorAs: simplify retrieving the type name by @​ccoVeille in #​1740
• assert.EqualValues: improve test coverage to 100% by @​dolmen in #​1763
• suite.Run: simplify running of Setup/TeardownSuite by @​renzoarreaza in #​1769
• assert.CallerInfo: micro optimization by using LastIndexByte by @​dolmen in #​1767
• assert.CallerInfo: micro cleanup by @​dolmen in #​1768
• assert: refactor TestFileExists and TestDirExists tests to enable parallel testing by @​dolmen in #​1766
• suite.Run: refactor handling of stats for improved readability by @​dolmen in #​1764
• tests: improve captureTestingT helper by @​ccoVeille in #​1741
• build(deps): bump actions/checkout from 4 to 5 by @​dependabot[bot] in #​1778

New Contributors

• @​greg0ire made their first contribution in #​1710
• @​techfg made their first contribution in #​1709
• @​mikeauclair made their first contribution in #​1614
• @​cszczepaniak made their first contribution in #​1427
• @​architagr made their first contribution in #​1675
• @​tsioftas made their first contribution in #​1681
• @​siliconbrain made their first contribution in #​1729
• @​bartventer made their first contribution in #​1730
• @​Ararsa-Derese made their first contribution in #​1706
• @​renzoarreaza made their first contribution in #​1769
• @​3scalation made their first contribution in #​1743

Full Changelog: stretchr/testify@v1.10.0...v1.11.0

zitadel/oidc (github.com/zitadel/oidc/v3)

v3.44.0

Compare Source

Features

• allow setting op.Crypto during provider setup (#​778) (3edc81e)

v3.43.1

Compare Source

Bug Fixes

• add redirect_uri decoded (#​775) (1fb34f3)

v3.43.0

Compare Source

Features

• rp: optional authorized party check (#​752) (0d50c93)

v3.42.0

Compare Source

Features

• pass optional logout hint and ui locales to end session request (#​774) (dbf1a73)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 7 additional dependencies were updated

Details:

Package	Change
github.com/go-logr/logr	v1.4.2 -> v1.4.3
go.opentelemetry.io/otel	v1.35.0 -> v1.37.0
go.opentelemetry.io/otel/metric	v1.35.0 -> v1.37.0
go.opentelemetry.io/otel/trace	v1.35.0 -> v1.37.0
golang.org/x/net	v0.41.0 -> v0.42.0
golang.org/x/sys	v0.34.0 -> v0.35.0
golang.org/x/text	v0.27.0 -> v0.28.0

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: module golang.org/x/exp@v0.0.0-20250819193227-8b4c13bb791b requires go >= 1.24.0; switching to go1.24.6
go: downloading go1.24.6 (linux/amd64)
go: download go1.24.6: golang.org/toolchain@v0.0.1-go1.24.6.linux-amd64: verifying module: checksum database disabled by GOSUMDB=off

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.