Skip to content

build(deps): bump the dependencies group with 4 updates - #22410

Open
dependabot[bot] wants to merge 2 commits into
8.19from
dependabot/go_modules/8.19/dependencies-88d19f53fb
Open

dependabot[bot] wants to merge 2 commits into
8.19from
dependabot/go_modules/8.19/dependencies-88d19f53fb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 4 updates: github.com/elastic/elastic-agent-client/v7, github.com/spf13/pflag, go.yaml.in/yaml/v3 and golang.org/x/net.

Updates github.com/elastic/elastic-agent-client/v7 from 7.19.0 to 7.20.0

Release notes

Sourced from github.com/elastic/elastic-agent-client/v7's releases.

v7.20.0

What's Changed

New Contributors

Full Changelog: elastic/elastic-agent-client@v7.19.0...v7.20.0

Commits

Updates github.com/spf13/pflag from 1.0.10 to 1.1.0

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.1.0

It's been long enough, and enough things have been fixed, that it might be time to release a new version, even if there isn't any particular big new issue to market as the reason for this release.

If you notice anything breaking, it is entirely un-intentional, but you might also have been relying on undocumented or buggy behavior. Please file an issue describing what you're doing, how it worked before this release and why it doesn't work anymore, and pin your projects to v1.0.10 (the latest release before this one) while we decide how to address your concerns.

What's Changed

New Contributors

... (truncated)

Commits
  • f8a9906 Merge pull request #533 from gdpu11/fix/count-preserve-value-on-error
  • f3a68a1 Merge pull request #534 from gdpu11/fix/native-integer-ranges
  • 70f7745 fix: reject native integer flag overflow on 32-bit systems
  • 2084408 test: cover native integer flag bounds on 32-bit systems
  • 7d0f377 fix: preserve count flag values when parsing fails
  • d26a4dc Merge pull request #526 from dewanshshekhar/fix/text-flag-type-check
  • 2d401c7 Fix type identification for text flags
  • fa584ba Merge pull request #520 from adenzhou1350/codex/fix-copy-go-string-value
  • cc9e689 Merge upstream master and retain its linter version
  • 70f284b Merge pull request #521 from Harshil-1603/fix/string-map-records
  • Additional commits viewable in compare view

Updates go.yaml.in/yaml/v3 from 3.0.5 to 3.0.6

Commits
  • 5a62aba resolve: hint-class literal merge-key string "<<" so it's quoted on encode
  • See full diff in compare view

Updates golang.org/x/net from 0.61.0 to 0.62.0

Commits
  • 3de643d html: check all ancestor namespace transitions when rendering raw text
  • 05c76ee ipv4, ipv6: avoid slice bounds panics on empty batch or BPF filter
  • dad306f ipv6: avoid out-of-bounds panic in ICMPFilter
  • 9c0565a ipv4: fix TTL control message parsing on big-endian Linux and Solaris
  • 9425eb3 internal/socket, ipv4, ipv6: avoid panic on empty control message on non-Unix
  • 4b10404 ipv4, ipv6: avoid nil parse function call in ControlMessage.Parse
  • afcf8cd ipv4: fix several missing bounds checks
  • 4af4fce html: avoid quadratic complexity when coalescing text nodes
  • 7e56200 quic: per-path connection ids
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 4 updates: [github.com/elastic/elastic-agent-client/v7](https://github.com/elastic/elastic-agent-client), [github.com/spf13/pflag](https://github.com/spf13/pflag), [go.yaml.in/yaml/v3](https://github.com/yaml/go-yaml) and [golang.org/x/net](https://github.com/golang/net).


Updates `github.com/elastic/elastic-agent-client/v7` from 7.19.0 to 7.20.0
- [Release notes](https://github.com/elastic/elastic-agent-client/releases)
- [Commits](elastic/elastic-agent-client@v7.19.0...v7.20.0)

Updates `github.com/spf13/pflag` from 1.0.10 to 1.1.0
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.10...v1.1.0)

Updates `go.yaml.in/yaml/v3` from 3.0.5 to 3.0.6
- [Release notes](https://github.com/yaml/go-yaml/releases)
- [Commits](yaml/go-yaml@v3.0.5...v3.0.6)

Updates `golang.org/x/net` from 0.61.0 to 0.62.0
- [Commits](golang/net@v0.61.0...v0.62.0)

---
updated-dependencies:
- dependency-name: github.com/elastic/elastic-agent-client/v7
  dependency-version: 7.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: go.yaml.in/yaml/v3
  dependency-version: 3.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner November 6, 2026 17:14
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 6, 2026
Copilot AI balanced review requested due to automatic review settings November 6, 2026 17:14
@dependabot dependabot Bot added the go Pull requests that update Go code label Nov 6, 2026
@github-actions

github-actions Bot commented Nov 6, 2026

Copy link
Copy Markdown
Contributor

🤖 GitHub comments

Just comment with:

  • run docs-build : Re-trigger the docs validation. (use unformatted text in the comment!)

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues are reported for the dependency version and checksum updates.

No open issues 🎉

What changed in this PR

Updates four dependencies in APM Server’s root Go module and refreshes their checksums.

Changes:

  • Upgrades Elastic Agent client to v7.20.0 and pflag to v1.1.0.
  • Upgrades YAML v3 to v3.0.6 and golang.org/x/net to v0.62.0.
  • Updates matching go.sum entries; no application code changes.
File Description
go.sum Refreshes checksums for the four upgraded dependencies.
go.mod Updates the four dependency version requirements.

Review effort: Balanced

Copilot AI balanced review requested due to automatic review settings November 6, 2026 17:15

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues remain for the dependency updates and accompanying checksum and license-notice changes.

No open issues 🎉

Review effort: Balanced

@github-actions

github-actions Bot commented Nov 6, 2026

Copy link
Copy Markdown
Contributor

Dependency review finished without posting an analysis comment.

If you expected a review, push a new commit to this pull request (or close and reopen it) to try again.

Workflow run: https://github.com/elastic/apm-server/actions/runs/42259943565

@infra-vault-gh-plugin-prod

Copy link
Copy Markdown

💚 Build Succeeded

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants