)]}'
{
  "log": [
    {
      "commit": "0c355fc62145beeb9ded273ca7c6cc8e5689e79a",
      "tree": "5cd84e02fb46d93c5eec5fa10d9ebe65c2ff859d",
      "parents": [
        "1249c6add844771cc42c2ade75dc937461b79569"
      ],
      "author": {
        "name": "mrproliu",
        "email": "741550557@qq.com",
        "time": "Fri Nov 06 19:24:45 2026 -0600"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Nov 07 09:24:45 2026 +0800"
      },
      "message": "Begin v1.5.0 release (#299)"
    },
    {
      "commit": "1249c6add844771cc42c2ade75dc937461b79569",
      "tree": "b36eeee4c1b45cb432d202e944f446e58c9a3127",
      "parents": [
        "4a1c50f2d61aabb76f2350759c53a75e7d49ebb7"
      ],
      "author": {
        "name": "Nick",
        "email": "surlymo@apache.org",
        "time": "Thu Nov 05 22:45:11 2026 -0500"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Nov 06 11:45:11 2026 +0800"
      },
      "message": "Fix routing key order in OTLP metrics v1 forwarder (#292)"
    },
    {
      "commit": "4a1c50f2d61aabb76f2350759c53a75e7d49ebb7",
      "tree": "9d2edf81a697e5a03028c695570fd114b5247e11",
      "parents": [
        "3d8e8e1ac8fe3c8d5e1ec36534633dddf7b29f04"
      ],
      "author": {
        "name": "mrproliu",
        "email": "741550557@qq.com",
        "time": "Thu Nov 05 01:54:03 2026 -0600"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Nov 05 15:54:03 2026 +0800"
      },
      "message": "Bump up infra E2E and lock ubuntu host versin for E2E (#298)"
    },
    {
      "commit": "3d8e8e1ac8fe3c8d5e1ec36534633dddf7b29f04",
      "tree": "153d250a6d44e0626d73d489616cc791f5ba5488",
      "parents": [
        "dea82e60d722df77d87a05c36a5b46a9325afd2b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Nov 03 11:50:21 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Nov 03 11:50:21 2026 +0800"
      },
      "message": "build(deps): bump github.com/prometheus/common (#297)\n\nBumps the actions-deps group with 1 update: [github.com/prometheus/common](https://github.com/prometheus/common).\n\n\nUpdates `github.com/prometheus/common` from 0.73.0 to 0.73.1\n- [Release notes](https://github.com/prometheus/common/releases)\n- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/common/compare/v0.73.0...v0.73.1)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/common\n  dependency-version: 0.73.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "dea82e60d722df77d87a05c36a5b46a9325afd2b",
      "tree": "cf10126e49e488884dc44b3b2352defdd83495d9",
      "parents": [
        "8fcaa340f66058bd5ec86dd1ba69d83e9d9c2d9a"
      ],
      "author": {
        "name": "吴晟 Wu Sheng",
        "email": "wu.sheng@foxmail.com",
        "time": "Mon Nov 02 21:49:35 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Nov 02 21:49:35 2026 +0800"
      },
      "message": "Bump Go toolchain, golang.org/x/net and e2e logback to fix security alerts (#296)\n\n- Go toolchain go1.26.7 -\u003e go1.26.10 (go.mod toolchain line, docker/Dockerfile\n  and test/e2e/base/satellite/Dockerfile base images). Fixes 12 standard\n  library vulnerabilities that govulncheck reports as reachable from the\n  satellite binary (GO-2026-6599, GO-2026-6600, GO-2026-6603, GO-2026-6605,\n  GO-2026-6607, GO-2026-6608, GO-2026-6610, GO-2026-6611, GO-2026-6612,\n  GO-2026-6613, GO-2026-6617, GO-2026-6809).\n- golang.org/x/net v0.61.0 -\u003e v0.62.0 (GO-2026-6860, GO-2026-6866).\n- test/e2e/base/provider (test-only): logback 1.2.3 -\u003e 1.2.13 via the\n  logback.version property (GHSA-vmq6-5m68-f53m / CVE-2023-6378).\n- CHANGES.md: one line for the toolchain and x/net bump.\n- GitHub Actions and the skywalking-infra-e2e pin unchanged.\n- dist/LICENSE and dist/licenses regenerated with the repository-pinned\n  license-eye (69f34ab), as documented in How-to-release.md:\n  license-eye dep resolve --summary dist/LICENSE.tpl -o dist/licenses\n  golang.org/x/net is now listed at v0.62.0. The committed file had\n  already drifted from go.mod on main (it still listed x/net v0.33.0), so\n  the regeneration also updates the other drifted entries. It adds the\n  license texts of 24 newly linked modules and removes the texts of 20\n  modules the binary no longer links (checked with go list -deps).\n  `license-eye dependency check -w` passes."
    },
    {
      "commit": "8fcaa340f66058bd5ec86dd1ba69d83e9d9c2d9a",
      "tree": "e386617d24e90548e1f58deb52b4ad3a618f1f6e",
      "parents": [
        "612e67dfd69d185b9af84f149a1c71abd65197bf"
      ],
      "author": {
        "name": "吴晟 Wu Sheng",
        "email": "wu.sheng@foxmail.com",
        "time": "Mon Nov 02 17:00:23 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Nov 02 17:00:23 2026 +0800"
      },
      "message": "cves: bump e2e service dependencies and re-pin GitHub Actions (#295)\n\nClose the open Dependabot alerts in the e2e test services and move CI to ASF-approved action versions.\n\n- test/e2e/base provider/consumer poms (test-only): guava 28.2-jre -\u003e 33.7.2-jre, log4j2 2.17.1 -\u003e 2.25.5 (log4j-core, log4j-api, log4j-to-slf4j together), unused log4j:log4j 1.2.17 removed. Closes all 7 open alerts.\n- docker/login-action re-pinned from a SHA that is not on the ASF allowlist to the approved v4.7.0 SHA; this fixes publish-docker failing at startup on main.\n- actions/checkout -\u003e v7, actions/setup-go -\u003e v7, actions/setup-java -\u003e v6, actions/upload-artifact -\u003e v7.\n- skywalking-infra-e2e re-pinned 0d91769 -\u003e 56ac8be in the native and Istio e2e jobs (Docker 29 / containerd image store on ubuntu-26.04).\n- Go module, dist LICENSE and skywalking-eyes pin unchanged (eyes v0.9.0 does not recognise LICENSE.md yet)."
    },
    {
      "commit": "612e67dfd69d185b9af84f149a1c71abd65197bf",
      "tree": "f8c82e4867c37b4ae7bfaec4dd7a0135209232d6",
      "parents": [
        "d28d689bdd73c90f00ea963cff34de0552715fe9"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Nov 02 10:33:02 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Nov 02 10:33:02 2026 +0800"
      },
      "message": "build(deps): bump the actions-deps group with 2 updates (#293)\n\nBumps the actions-deps group with 2 updates: [github.com/prometheus/common](https://github.com/prometheus/common) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\n\nUpdates `github.com/prometheus/common` from 0.72.1 to 0.73.0\n- [Release notes](https://github.com/prometheus/common/releases)\n- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/common/compare/v0.72.1...v0.73.0)\n\nUpdates `google.golang.org/grpc` from 1.84.0 to 1.85.0\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.84.0...v1.85.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/common\n  dependency-version: 0.73.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: google.golang.org/grpc\n  dependency-version: 1.85.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: kezhenxu94 \u003ckezhenxu94@apache.org\u003e"
    },
    {
      "commit": "d28d689bdd73c90f00ea963cff34de0552715fe9",
      "tree": "070ac82c6e3b57d957893181e60b8fb0026d1e33",
      "parents": [
        "5c03513f3d5e6bfd96c7deb6112729706746ae01"
      ],
      "author": {
        "name": "kezhenxu94",
        "email": "kezhenxu94@apache.org",
        "time": "Mon Nov 02 10:10:30 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Nov 02 10:10:30 2026 +0800"
      },
      "message": "ci: pin JDK 8 for building e2e Java services (#294)\n\nubuntu-latest now defaults to JDK 25, where javac no longer runs\nannotation processors implicitly, so Lombok is skipped and the e2e\nprovider fails to compile."
    },
    {
      "commit": "5c03513f3d5e6bfd96c7deb6112729706746ae01",
      "tree": "eaa7d82a4da4712b3980d161355b7b27dcca8397",
      "parents": [
        "c648d35f9b055b32b88301f225bc10d8adba66ad"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Oct 15 08:43:32 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Oct 15 08:43:32 2026 +0800"
      },
      "message": "build(deps): bump the actions-deps group with 3 updates (#291)"
    },
    {
      "commit": "c648d35f9b055b32b88301f225bc10d8adba66ad",
      "tree": "7bf6a9bfae2d4184f01ad6a519096ae1005a1183",
      "parents": [
        "496e737f983368f5c7ce01cc805ec8533b408d09"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Oct 12 20:08:58 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Oct 12 20:08:58 2026 +0800"
      },
      "message": "build(deps): bump github.com/prometheus/client_golang (#290)\n\nBumps the actions-deps group with 1 update: [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang).\n\n\nUpdates `github.com/prometheus/client_golang` from 1.24.1 to 1.25.0\n- [Release notes](https://github.com/prometheus/client_golang/releases)\n- [Changelog](https://github.com/prometheus/client_golang/blob/v1.25.0/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/client_golang/compare/v1.24.1...v1.25.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/client_golang\n  dependency-version: 1.25.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "496e737f983368f5c7ce01cc805ec8533b408d09",
      "tree": "00194a6b9f8997ec7f4feb1e2168e43d1dbd62d0",
      "parents": [
        "bda91716ceaa2e5e6a0a7a50a03bc2b731f9c199"
      ],
      "author": {
        "name": "surlymochan",
        "email": "surlymo@apache.org",
        "time": "Fri Oct 09 18:58:47 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Oct 09 18:58:47 2026 +0800"
      },
      "message": "Archive 1.3.0 changelog and start 1.4.0 section (#289)"
    },
    {
      "commit": "bda91716ceaa2e5e6a0a7a50a03bc2b731f9c199",
      "tree": "5f789ac59791af5fcbde75849e197a1a81e6fbac",
      "parents": [
        "f9babda3d769606e3fa2989fa4e54340d8a8a04d"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sat Oct 03 21:35:49 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Oct 03 21:35:49 2026 +0800"
      },
      "message": "build(deps): bump github.com/prometheus/common (#288)"
    },
    {
      "commit": "f9babda3d769606e3fa2989fa4e54340d8a8a04d",
      "tree": "19ec3e67fcbea354a5b99b4ac15a6e06adb15de7",
      "parents": [
        "ed175ac0233ee920ffe627dbdbdc3fc4051ef003"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Sep 21 19:22:10 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Sep 21 19:22:10 2026 +0800"
      },
      "message": "build(deps): bump google.golang.org/grpc in the actions-deps group (#287)"
    },
    {
      "commit": "ed175ac0233ee920ffe627dbdbdc3fc4051ef003",
      "tree": "f61eb9b85542e0a5df2ad1dd046054ef78e9d8de",
      "parents": [
        "a34d8f07a0de7d971f6e840565a19f3134031377"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Sep 14 09:25:03 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Sep 14 09:25:03 2026 +0800"
      },
      "message": "build(deps): bump golang.org/x/text in the actions-deps group (#286)"
    },
    {
      "commit": "a34d8f07a0de7d971f6e840565a19f3134031377",
      "tree": "fde56d8824dea97f9c822295b2c810a2a4395807",
      "parents": [
        "edd905dd891503e7014d46564ca7b895b6b8b09d"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Sep 09 10:27:48 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Sep 09 10:27:48 2026 +0800"
      },
      "message": "build(deps): bump golang.org/x/mod in the actions-deps group (#285)\n\nBumps the actions-deps group with 1 update: [golang.org/x/mod](https://github.com/golang/mod).\n\n\nUpdates `golang.org/x/mod` from 0.40.0 to 0.41.0\n- [Commits](https://github.com/golang/mod/compare/v0.40.0...v0.41.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/mod\n  dependency-version: 0.41.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "edd905dd891503e7014d46564ca7b895b6b8b09d",
      "tree": "97a68003159cd0c9417aa90b6b4e40c8d7fd691d",
      "parents": [
        "90eb4d6058743d6409431e2789c1dc1ef191c450"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Sep 04 10:25:51 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Sep 04 10:25:51 2026 +0800"
      },
      "message": "build(deps): bump github.com/prometheus/common (#284)\n\nBumps the actions-deps group with 1 update in the / directory: [github.com/prometheus/common](https://github.com/prometheus/common).\n\n\nUpdates `github.com/prometheus/common` from 0.70.1 to 0.71.0\n- [Release notes](https://github.com/prometheus/common/releases)\n- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/common/compare/v0.70.1...v0.71.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/common\n  dependency-version: 0.71.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "90eb4d6058743d6409431e2789c1dc1ef191c450",
      "tree": "b0914ed8852e5f160b407cc75883c2c5d78ac42d",
      "parents": [
        "f9a1ab1c772bd94e31a15361cb7592b576486941"
      ],
      "author": {
        "name": "tetrate-ci[bot]",
        "email": "52504619+tetrate-ci@users.noreply.github.com",
        "time": "Fri Sep 04 03:13:30 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Sep 04 09:13:30 2026 +0800"
      },
      "message": "cves: bump golang.org/x/crypto to v0.56.0 (#283)"
    },
    {
      "commit": "f9a1ab1c772bd94e31a15361cb7592b576486941",
      "tree": "c0a35d5b0f7e73b109817807401ab1d8a1c30717",
      "parents": [
        "260c947173d593de7a19cb6510d1cff79e1fb8bf"
      ],
      "author": {
        "name": "tetrate-ci[bot]",
        "email": "52504619+tetrate-ci@users.noreply.github.com",
        "time": "Tue Sep 01 16:45:31 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Sep 01 22:45:31 2026 +0800"
      },
      "message": "cves: bump Go toolchain to 1.26.7, grpc to v1.83.2, and openssl to 3.5.8-r0 (#282)\n\n* cves: bump libssl3/libcrypto3 to 3.5.8-r0 in Alpine Dockerfile\n\nFixes CVE-2026-14456, CVE-2026-18798, CVE-2026-63075 in libssl3/libcrypto3\nby pinning minimum version to 3.5.8-r0 in the Alpine-based Docker image.\n\n* cves: bump go toolchain to 1.26.7\n\nBumps Go toolchain from 1.26.6 to 1.26.7 and updates the build image\nin Dockerfile to golang:1.26.7 to fix Go stdlib CVEs:\n- CVE-2026-56858 (HIGH)\n- CVE-2026-56853 (HIGH)\n- CVE-2026-56860 (HIGH)\n- CVE-2026-33818 (HIGH)\n- CVE-2026-56862 (HIGH)\n\n---------\n\nCo-authored-by: Security Agent \u003csecurity-agent@tetrate.io\u003e"
    },
    {
      "commit": "260c947173d593de7a19cb6510d1cff79e1fb8bf",
      "tree": "20cb4414cf07ecc20aa86e8fa9985a3b6b296989",
      "parents": [
        "06a6519eccafe2f3011ae7b20d3ceeb41edc2286"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Aug 31 09:27:26 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Aug 31 09:27:26 2026 +0800"
      },
      "message": "build(deps): bump the actions-deps group with 2 updates (#280)\n\nBumps the actions-deps group with 2 updates: [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\n\nUpdates `github.com/sirupsen/logrus` from 1.10.1 to 1.10.2\n- [Release notes](https://github.com/sirupsen/logrus/releases)\n- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/sirupsen/logrus/compare/v1.10.1...v1.10.2)\n\nUpdates `google.golang.org/grpc` from 1.83.1 to 1.83.2\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.83.1...v1.83.2)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/sirupsen/logrus\n  dependency-version: 1.10.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n- dependency-name: google.golang.org/grpc\n  dependency-version: 1.83.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "06a6519eccafe2f3011ae7b20d3ceeb41edc2286",
      "tree": "45ebf480c31e003923ce078156db35b3dced05e7",
      "parents": [
        "46fd76846701dc6728901baf78cc644ffdbad7f7"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Aug 24 09:33:56 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Aug 24 09:33:56 2026 +0800"
      },
      "message": "build(deps): bump the actions-deps group with 2 updates (#279)"
    },
    {
      "commit": "46fd76846701dc6728901baf78cc644ffdbad7f7",
      "tree": "56632a1da55b0b82da74b4eed631d22ce937d3c4",
      "parents": [
        "221ffb55a841c1d6e71bf9df5889e7454f24dffa"
      ],
      "author": {
        "name": "kezhenxu94",
        "email": "kezhenxu94@apache.org",
        "time": "Tue Aug 18 22:35:02 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Aug 18 22:35:02 2026 +0800"
      },
      "message": "cves: bump go to 1.26.6 (#278)\n\nBumps the Go toolchain from 1.26.5 to 1.26.6 in docker/Dockerfile and the\ntoolchain directive in go.mod to fix Go stdlib CVEs.\n\nFixes CVE-2026-33818, CVE-2026-39821, CVE-2026-46600, CVE-2026-56853,\nCVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862,\nCVE-2026-56864, CVE-2026-56865\n\nCo-authored-by: Security Agent \u003csecurity-agent@tetrate.io\u003e"
    },
    {
      "commit": "221ffb55a841c1d6e71bf9df5889e7454f24dffa",
      "tree": "c1e42c50989c73ec185b8a0fca46141ef4420bdb",
      "parents": [
        "266ae39b407a6e2251fc68bd68290fd59d53361b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Aug 17 17:39:02 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Aug 17 17:39:02 2026 +0800"
      },
      "message": "build(deps): bump the actions-deps group across 1 directory with 4 updates (#277)\n\nBumps the actions-deps group with 4 updates in the / directory: [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus), [golang.org/x/mod](https://github.com/golang/mod), [golang.org/x/text](https://github.com/golang/text) and google.golang.org/protobuf.\n\n\nUpdates `github.com/sirupsen/logrus` from 1.9.4 to 1.10.0\n- [Release notes](https://github.com/sirupsen/logrus/releases)\n- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/sirupsen/logrus/compare/v1.9.4...v1.10.0)\n\nUpdates `golang.org/x/mod` from 0.38.0 to 0.40.0\n- [Commits](https://github.com/golang/mod/compare/v0.38.0...v0.40.0)\n\nUpdates `golang.org/x/text` from 0.40.0 to 0.41.0\n- [Release notes](https://github.com/golang/text/releases)\n- [Commits](https://github.com/golang/text/compare/v0.40.0...v0.41.0)\n\nUpdates `google.golang.org/protobuf` from 1.36.11 to 1.36.12\n\n---\nupdated-dependencies:\n- dependency-name: github.com/sirupsen/logrus\n  dependency-version: 1.10.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: golang.org/x/mod\n  dependency-version: 0.40.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: golang.org/x/text\n  dependency-version: 0.41.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: google.golang.org/protobuf\n  dependency-version: 1.36.12\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "266ae39b407a6e2251fc68bd68290fd59d53361b",
      "tree": "cb8d342a91b758ed8e06993362e535e509b8a2e4",
      "parents": [
        "7bb08020d4dfbed5ec0e88c6c94fac3067fb8638"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Aug 04 08:44:08 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Aug 04 08:44:08 2026 +0800"
      },
      "message": "build(deps): bump google.golang.org/grpc in the actions-deps group (#274)"
    },
    {
      "commit": "7bb08020d4dfbed5ec0e88c6c94fac3067fb8638",
      "tree": "7c901dbfc5d847383ce7ed8a572a4b93575cac6c",
      "parents": [
        "e8f341bacf8d10880f700186715183c7f7694883"
      ],
      "author": {
        "name": "kezhenxu94",
        "email": "kezhenxu94@apache.org",
        "time": "Mon Aug 03 16:47:55 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Aug 03 16:47:55 2026 +0800"
      },
      "message": "cves: bump go-openapi/swag to v0.27.1 and go-toml/v2 to v2.4.3 (#275)"
    },
    {
      "commit": "e8f341bacf8d10880f700186715183c7f7694883",
      "tree": "674064d0dba69ce825558a5c09b964d8d8a4237a",
      "parents": [
        "4ac6f9b676df52f21c69e0199a1cb01a1dcdfd5a"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 12:17:14 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 12:17:14 2026 +0800"
      },
      "message": "build(deps): bump github.com/prometheus/client_golang (#273)\n\nBumps the actions-deps group with 1 update: [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang).\n\n\nUpdates `github.com/prometheus/client_golang` from 1.24.0 to 1.24.1\n- [Release notes](https://github.com/prometheus/client_golang/releases)\n- [Changelog](https://github.com/prometheus/client_golang/blob/v1.24.1/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/client_golang/compare/v1.24.0...v1.24.1)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/client_golang\n  dependency-version: 1.24.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "4ac6f9b676df52f21c69e0199a1cb01a1dcdfd5a",
      "tree": "180c9bf12bbba186a643f9515fb2bd0519f5aa46",
      "parents": [
        "4dbb6fa154d08785c7989275ffb0b30fc82bb30c"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jul 23 09:28:44 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 23 09:28:44 2026 +0800"
      },
      "message": "build(deps): bump the actions-deps group across 1 directory with 2 updates (#272)"
    },
    {
      "commit": "4dbb6fa154d08785c7989275ffb0b30fc82bb30c",
      "tree": "2dab77e901d5d435c1c63a94a941a7abb2e727d9",
      "parents": [
        "6d4dddd98d7a9fe5e6c6fe107e707ced76eec310"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jul 16 09:47:05 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 16 09:47:05 2026 +0800"
      },
      "message": "build(deps): bump google.golang.org/grpc in the actions-deps group (#270)\n\nBumps the actions-deps group with 1 update: [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\n\nUpdates `google.golang.org/grpc` from 1.82.0 to 1.82.1\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.82.0...v1.82.1)\n\n---\nupdated-dependencies:\n- dependency-name: google.golang.org/grpc\n  dependency-version: 1.82.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "6d4dddd98d7a9fe5e6c6fe107e707ced76eec310",
      "tree": "af51cc090b69c4e51a6d5ef965875d8d4d554b97",
      "parents": [
        "313ea1c115ae6169cd4badf77a9a97601131d200"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 13 09:28:32 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 13 09:28:32 2026 +0800"
      },
      "message": "build(deps): bump github.com/prometheus/common in the actions-deps group (#269)\n\nBumps the actions-deps group with 1 update: [github.com/prometheus/common](https://github.com/prometheus/common).\n\n\nUpdates `github.com/prometheus/common` from 0.69.0 to 0.70.0\n- [Release notes](https://github.com/prometheus/common/releases)\n- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/common/compare/v0.69.0...v0.70.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/common\n  dependency-version: 0.70.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "313ea1c115ae6169cd4badf77a9a97601131d200",
      "tree": "9f7958a718a2b4daa32feb35869d9168a5010b0b",
      "parents": [
        "0a9f661ade9cf0c1a5d34a83f808a7aec8be1627"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Jul 10 11:00:25 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 10 11:00:25 2026 +0800"
      },
      "message": "build(deps): bump the actions-deps group across 1 directory with 3 updates (#267)\n\nBumps the actions-deps group with 3 updates in the / directory: [golang.org/x/mod](https://github.com/golang/mod), [golang.org/x/text](https://github.com/golang/text) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\n\nUpdates `golang.org/x/mod` from 0.37.0 to 0.38.0\n- [Commits](https://github.com/golang/mod/compare/v0.37.0...v0.38.0)\n\nUpdates `golang.org/x/text` from 0.38.0 to 0.40.0\n- [Release notes](https://github.com/golang/text/releases)\n- [Commits](https://github.com/golang/text/compare/v0.38.0...v0.40.0)\n\nUpdates `google.golang.org/grpc` from 1.81.1 to 1.82.0\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.81.1...v1.82.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/mod\n  dependency-version: 0.38.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: golang.org/x/text\n  dependency-version: 0.40.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: google.golang.org/grpc\n  dependency-version: 1.82.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "0a9f661ade9cf0c1a5d34a83f808a7aec8be1627",
      "tree": "521383a3f5318a6c9b395f86db62d5b2502784af",
      "parents": [
        "419d33d4e36ec92e633f02f997d790c9d148b581"
      ],
      "author": {
        "name": "tetrate-ci[bot]",
        "email": "52504619+tetrate-ci@users.noreply.github.com",
        "time": "Thu Jul 09 17:28:34 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 09 17:28:34 2026 +0800"
      },
      "message": "cves: bump go to 1.26.5 to fix CVE-2026-42505 and CVE-2026-39822 (#268)\n\nBumps the Go toolchain from 1.26.4 to 1.26.5 in docker/Dockerfile and\nthe toolchain directive in go.mod to fix two Go stdlib CVEs.\n\nFixes CVE-2026-42505, CVE-2026-39822\n\nCo-authored-by: Security Agent \u003csecurity-agent@tetrate.io\u003e"
    },
    {
      "commit": "419d33d4e36ec92e633f02f997d790c9d148b581",
      "tree": "67146e0d1f726f328f99511a97259eb394bf9e79",
      "parents": [
        "e18be4a89a0f66f7b2a5a8be58517c94d9e3b05b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Jun 19 21:28:18 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jun 19 21:28:18 2026 +0800"
      },
      "message": "build(deps): bump github.com/prometheus/common in the actions-deps group (#264)\n\nBumps the actions-deps group with 1 update: [github.com/prometheus/common](https://github.com/prometheus/common).\n\n\nUpdates `github.com/prometheus/common` from 0.68.1 to 0.69.0\n- [Release notes](https://github.com/prometheus/common/releases)\n- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/common/compare/v0.68.1...v0.69.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/common\n  dependency-version: 0.69.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "e18be4a89a0f66f7b2a5a8be58517c94d9e3b05b",
      "tree": "38a0cfac7fa2e0e84a1b269a1a23a59e63e3c080",
      "parents": [
        "b8c70ff140bcf68588c727893a4b15a76199b375"
      ],
      "author": {
        "name": "kezhenxu94",
        "email": "kezhenxu94@apache.org",
        "time": "Tue Jun 16 16:10:18 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jun 16 16:10:18 2026 +0800"
      },
      "message": "build: bump go to 1.26 and golang base images to 1.26.4 (#263)\n\n* build: bump go to 1.26 and golang base images to 1.26.4\n\n* build: pin e2e satellite base image to golang:1.26.4"
    },
    {
      "commit": "b8c70ff140bcf68588c727893a4b15a76199b375",
      "tree": "06255d50a722e10a64cd489725f21d37c77115a0",
      "parents": [
        "b95093fe457cf2349bf999a31d2f1ffbb28ba454"
      ],
      "author": {
        "name": "tetrate-ci[bot]",
        "email": "52504619+tetrate-ci@users.noreply.github.com",
        "time": "Fri Jun 12 19:22:58 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jun 12 19:22:58 2026 +0800"
      },
      "message": "cves: bump libssl3 and libcrypto3 to 3.5.7-r0 to fix CVE-2026-34183, CVE-2026-42769, CVE-2026-34181, CVE-2026-42768 (#262)"
    },
    {
      "commit": "b95093fe457cf2349bf999a31d2f1ffbb28ba454",
      "tree": "1caf741a703304366945ad7f54c70db69874f4a1",
      "parents": [
        "0927d439ca9c991bebf372f0fff22cb8530e64d4"
      ],
      "author": {
        "name": "Ashish Tiwari",
        "email": "ashishjaitiwari15112000@gmail.com",
        "time": "Thu Jun 11 15:15:56 2026 +0530"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jun 11 17:45:56 2026 +0800"
      },
      "message": "cves: bump golang.org/x/crypto to v0.52.0 (#261)\n\nFixes CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833,\nCVE-2026-39834, CVE-2026-42508, CVE-2026-46595 (Critical),\nCVE-2026-39829, CVE-2026-46597 (High), and CVE-2026-39827,\nCVE-2026-39828, CVE-2026-39835, CVE-2026-46598 (Medium) reported by\nsecurity scanners against golang.org/x/crypto v0.51.0."
    },
    {
      "commit": "0927d439ca9c991bebf372f0fff22cb8530e64d4",
      "tree": "b10edc1519bf3b15b78ad74d4ac0ac63ee267825",
      "parents": [
        "4f95a4bc054eaabbcab25fce9aec121de743978f"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jun 09 11:20:18 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jun 09 11:20:18 2026 +0800"
      },
      "message": "build(deps): bump the actions-deps group with 2 updates (#259)\n\nBumps the actions-deps group with 2 updates: [golang.org/x/mod](https://github.com/golang/mod) and [golang.org/x/text](https://github.com/golang/text).\n\n\nUpdates `golang.org/x/mod` from 0.36.0 to 0.37.0\n- [Commits](https://github.com/golang/mod/compare/v0.36.0...v0.37.0)\n\nUpdates `golang.org/x/text` from 0.37.0 to 0.38.0\n- [Release notes](https://github.com/golang/text/releases)\n- [Commits](https://github.com/golang/text/compare/v0.37.0...v0.38.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/mod\n  dependency-version: 0.37.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: golang.org/x/text\n  dependency-version: 0.38.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "4f95a4bc054eaabbcab25fce9aec121de743978f",
      "tree": "b13daed48198f0f0a9ce770a4e1250bb89773b43",
      "parents": [
        "c8f4536c0fde4462cdb37979004bad3bd22e2802"
      ],
      "author": {
        "name": "tetrate-ci[bot]",
        "email": "52504619+tetrate-ci@users.noreply.github.com",
        "time": "Fri Jun 05 13:24:23 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jun 05 13:24:23 2026 +0800"
      },
      "message": "cves: bump go toolchain to 1.26.4 (#258)\n\nCo-authored-by: Tetrate Security Agent \u003csecurity-agent@tetrate.io\u003e"
    },
    {
      "commit": "c8f4536c0fde4462cdb37979004bad3bd22e2802",
      "tree": "d65911edba198d9676943352618bf367ab53624b",
      "parents": [
        "cea1275c6fe6b5389d4067b06641aec282d2e0f9"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jun 04 07:34:52 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jun 04 07:34:52 2026 +0800"
      },
      "message": "build(deps): bump github.com/prometheus/common in the actions-deps group (#257)"
    },
    {
      "commit": "cea1275c6fe6b5389d4067b06641aec282d2e0f9",
      "tree": "b652991e1eaf46a3e62a3202f4e81f0419226041",
      "parents": [
        "3cfaf59a755e7ffcd900d6695a8bc4174397cace"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jun 02 13:15:49 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jun 02 13:15:49 2026 +0800"
      },
      "message": "build(deps): bump github.com/prometheus/common in the actions-deps group (#256)"
    },
    {
      "commit": "3cfaf59a755e7ffcd900d6695a8bc4174397cace",
      "tree": "956ab56df1cbca9b7106c393149461ae5f15a971",
      "parents": [
        "70f45bb7602873756001811ba2f8b427362f9346"
      ],
      "author": {
        "name": "mrproliu",
        "email": "741550557@qq.com",
        "time": "Thu May 21 16:56:23 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu May 21 16:56:23 2026 +0800"
      },
      "message": "Support transmit pprof protocol (#255)"
    },
    {
      "commit": "70f45bb7602873756001811ba2f8b427362f9346",
      "tree": "ad633ddec9eab6bf85ce2a56d120f1757966f3bd",
      "parents": [
        "ba8df47dcc3054e0e2c7de58e2f853a5b21379e7"
      ],
      "author": {
        "name": "kezhenxu94",
        "email": "kezhenxu94@apache.org",
        "time": "Mon May 18 15:50:59 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon May 18 15:50:59 2026 +0800"
      },
      "message": "cves: bump busybox to 1.37.0-r31, golang.org/x/net to v0.53.0 (#254)\n\n* cves: bump busybox to 1.37.0-r31 to fix CVE-2025-60876\n\nAdd Alpine edge/main repository to install busybox\u003e\u003d1.37.0-r31 which\ncontains the fix for CVE-2025-60876 (MEDIUM). The fix is not yet\nbackported to alpine:3.23 stable, so we pin busybox from the edge\nrepository.\n\nNote: golang.org/x/net was already bumped to v0.53.0 in PR #253,\nfixing CVE-2026-33814.\n\n* cves: use --repository flag for edge busybox, avoid apk upgrade\n\nAddress review feedback:\n- Use \u0027apk add --repository \u003cedge\u003e\u0027 instead of permanently adding edge\n  to /etc/apk/repositories, keeping the runtime image closer to Alpine 3.23 stable\n- Install only targeted packages (ca-certificates, libssl3, libcrypto3,\n  musl, busybox) instead of upgrading all packages via apk upgrade"
    },
    {
      "commit": "ba8df47dcc3054e0e2c7de58e2f853a5b21379e7",
      "tree": "6b72101cd4c0ed2dcd866a4b8040f10c025dbbc5",
      "parents": [
        "bab23e49c4fa4f69f44b194c2216c9f78ac503ab"
      ],
      "author": {
        "name": "tetrate-ci[bot]",
        "email": "52504619+tetrate-ci@users.noreply.github.com",
        "time": "Sat May 16 17:03:58 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat May 16 17:03:58 2026 +0800"
      },
      "message": "cves: bump golang.org/x/net to v0.53.0 to fix CVE-2026-33814 (#253)\n\n* cves: bump golang.org/x/net to v0.53.0 to fix CVE-2026-33814\n\n* go mod tidy\n\n---------\n\nCo-authored-by: Security Agent \u003csecurity-agent@tetrate.io\u003e\nCo-authored-by: kezhenxu94 \u003ckezhenxu94@apache.org\u003e"
    },
    {
      "commit": "bab23e49c4fa4f69f44b194c2216c9f78ac503ab",
      "tree": "ce9ca38ba80ff9739c956377a729677b96d5eaeb",
      "parents": [
        "33b92d33d1db4717b0cd9825426463863bc495c0"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri May 15 13:12:56 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri May 15 13:12:56 2026 +0800"
      },
      "message": "build(deps): bump google.golang.org/grpc in the actions-deps group (#252)"
    },
    {
      "commit": "33b92d33d1db4717b0cd9825426463863bc495c0",
      "tree": "a67489fcfa154220350145af4f9a63e9c26e9bd4",
      "parents": [
        "d76f3b5c413c5dd5ba16d61ed02520f72fbb272b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon May 11 11:48:09 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon May 11 11:48:09 2026 +0800"
      },
      "message": "Bump the actions-deps group with 2 updates (#251)\n\nBumps the actions-deps group with 2 updates: [golang.org/x/mod](https://github.com/golang/mod) and [golang.org/x/text](https://github.com/golang/text).\n\n\nUpdates `golang.org/x/mod` from 0.35.0 to 0.36.0\n- [Commits](https://github.com/golang/mod/compare/v0.35.0...v0.36.0)\n\nUpdates `golang.org/x/text` from 0.36.0 to 0.37.0\n- [Release notes](https://github.com/golang/text/releases)\n- [Commits](https://github.com/golang/text/compare/v0.36.0...v0.37.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/mod\n  dependency-version: 0.36.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: golang.org/x/text\n  dependency-version: 0.37.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "d76f3b5c413c5dd5ba16d61ed02520f72fbb272b",
      "tree": "daf3a7243489fc404281d8347b8ea850260a4205",
      "parents": [
        "7f388bfca3cd553769fdd649352671cb7ce74aa4"
      ],
      "author": {
        "name": "tetrate-ci[bot]",
        "email": "52504619+tetrate-ci@users.noreply.github.com",
        "time": "Sat May 09 14:15:19 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat May 09 14:15:19 2026 +0800"
      },
      "message": "cves: bump Go from 1.26.2 to 1.26.3 to fix stdlib CVEs (#250)\n\nBumps the Go toolchain from 1.26.2 to 1.26.3 to fix the following\nstdlib CVEs:\n- CVE-2026-39825\n- CVE-2026-39836\n- CVE-2026-42499\n- CVE-2026-33811\n- CVE-2026-39826\n- CVE-2026-39820\n- CVE-2026-33814\n- CVE-2026-39823\n\nChanges:\n- docker/Dockerfile: golang:1.26.2 -\u003e golang:1.26.3\n- go.mod: toolchain go1.26.2 -\u003e go1.26.3\n\nCo-authored-by: Security Agent \u003csecurity-agent@tetrate.io\u003e"
    },
    {
      "commit": "7f388bfca3cd553769fdd649352671cb7ce74aa4",
      "tree": "2478788bdc7555acf3b59a1c6381eb79b0ca32d8",
      "parents": [
        "28ef28478a6bd4d2b108f544c78bbf1b3785c63c"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu May 07 18:31:20 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu May 07 18:31:20 2026 +0800"
      },
      "message": "Bump google.golang.org/grpc in the actions-deps group (#248)\n\nBumps the actions-deps group with 1 update: [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\n\nUpdates `google.golang.org/grpc` from 1.80.0 to 1.81.0\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.80.0...v1.81.0)\n\n---\nupdated-dependencies:\n- dependency-name: google.golang.org/grpc\n  dependency-version: 1.81.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: kezhenxu94 \u003ckezhenxu94@apache.org\u003e"
    },
    {
      "commit": "28ef28478a6bd4d2b108f544c78bbf1b3785c63c",
      "tree": "c8d4f6e739d63d6dd84f09c880c3ecad21795388",
      "parents": [
        "d8151c147760e2993a4fd583af75c5821c126bb1"
      ],
      "author": {
        "name": "tetrate-ci[bot]",
        "email": "52504619+tetrate-ci@users.noreply.github.com",
        "time": "Thu May 07 18:08:17 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu May 07 18:08:17 2026 +0800"
      },
      "message": "cves: bump prometheus from v0.311.2 to v0.311.3 (#249)\n\nFix the following CVEs:\n- CVE-2026-42151 (HIGH): github.com/prometheus/prometheus v0.311.2 → v0.311.3\n- CVE-2026-42154 (HIGH): github.com/prometheus/prometheus upgrade\n- GHSA-fw8g-cg8f-9j28 (MEDIUM): github.com/prometheus/prometheus v0.311.2 → v0.311.3"
    },
    {
      "commit": "d8151c147760e2993a4fd583af75c5821c126bb1",
      "tree": "62a6411b7deff04994a08559880d692bd1d47eec",
      "parents": [
        "02962f1151c46c2d0f42ff454333fe667f4a1947"
      ],
      "author": {
        "name": "tetrate-ci[bot]",
        "email": "52504619+tetrate-ci@users.noreply.github.com",
        "time": "Thu Apr 16 09:48:31 2026 +0530"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Apr 16 12:18:31 2026 +0800"
      },
      "message": "cves: bump Go to 1.25.9, pin openssl/musl, bump prometheus to v0.311.2 (#247)\n\nFix multiple CVEs:\n- CVE-2026-32288 (MEDIUM): stdlib v1.25.8 → 1.25.9+ via Go 1.25.9 base image\n- CVE-2026-28387 (LOW): openssl 3.3.6-r0 → 3.3.7-r0 via explicit pin\n- CVE-2026-31789 (LOW): openssl 3.3.6-r0 → 3.3.7-r0 via explicit pin\n- CVE-2026-28389 (MEDIUM): openssl 3.3.6-r0 → 3.3.7-r0 via explicit pin\n- CVE-2026-31790 (HIGH): openssl 3.3.6-r0 → 3.3.7-r0 via explicit pin\n- CVE-2026-28390 (LOW): openssl 3.3.6-r0 → 3.3.7-r0 via explicit pin\n- CVE-2026-40200 (HIGH): musl 1.2.5-r9 → 1.2.5-r11 via explicit pin\n- CVE-2026-40179 (MEDIUM): prometheus v0.43.0 → v0.311.2\n\nChanges:\n- docker/Dockerfile: bump golang build image from 1.25.8 → 1.25.9\n- docker/Dockerfile: add explicit pins libssl3\u003e\u003d3.3.7-r0 libcrypto3\u003e\u003d3.3.7-r0 musl\u003e\u003d1.2.5-r11\n- go.mod/go.sum: bump github.com/prometheus/prometheus from v0.43.0 to v0.311.2\n- go.mod: update toolchain from go1.25.8 to go1.25.9\n- plugins/client/grpc/resolvers/kubernetes_kinds.go: adapt to new\n  prometheus discovery API (NewDiscoverer/NewDiscovererMetrics pattern)"
    },
    {
      "commit": "02962f1151c46c2d0f42ff454333fe667f4a1947",
      "tree": "0fa6d2a2011eaf7eed7edbccb742ebb9274c85b1",
      "parents": [
        "ebc14e3c7f2cbfbcf16cb59d057df353675b1ea6"
      ],
      "author": {
        "name": "tetrate-ci[bot]",
        "email": "52504619+tetrate-ci@users.noreply.github.com",
        "time": "Thu Apr 16 07:35:17 2026 +0530"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Apr 16 10:05:17 2026 +0800"
      },
      "message": "cves: bump prometheus from v0.43.0 to v0.311.2 (#246)\n\n* cves: bump prometheus to v0.311.2, adapt kubernetes discovery API\n\n- Bump github.com/prometheus/prometheus from v0.43.0 to v0.311.2\n- Update Dockerfile to golang:1.26.2 to match go.mod toolchain requirement\n- Adapt kubernetes_kinds.go to use new prometheus kubernetes.New() API\n  which now requires (*slog.Logger, DiscovererMetrics, *SDConfig) args\n  (replaced with discovery.DiscovererOptions pattern)\n\nFixes CVEs addressed in prometheus v0.311.2 upgrade.\n\n* ci: update Go version from 1.25 to 1.26 for compatibility with Go 1.26.2 toolchain\n\ngolangci-lint fails to analyze code when the toolchain in go.mod (1.26.2)\nis newer than the Go version used to build golangci-lint (1.25). Update\nthe CI workflow to use Go 1.26 to match the toolchain directive.\n\n* ci: upgrade golangci-lint to v2.11.4 for Go 1.26 compatibility\n\ngolangci-lint v2.4.0 was built with go1.25.0 and cannot lint projects\ntargeting go1.26.2 (required by prometheus v0.311.2 dependencies).\nUpgrade to v2.11.4 which supports go1.26.x.\n\n* fix: fix gofmt in kubernetes_kinds.go, add golangci exclusions for pre-existing issues\n\n- Remove trailing blank line in kubernetes_kinds.go (gofmt)\n- Add exclusion for gosec G117 in kubernetes_config.go (pre-existing: BearerToken\n  marshaling is by design for prometheus config conversion)\n- Add exclusion for staticcheck SA1019 in generate_plugin_doc.go (pre-existing:\n  parser.ParseDir deprecated in Go 1.25, refactoring outside CVE scope)\n\n* fix: upgrade go-openapi/swag sub-modules to v0.25.5 to fix go mod tidy\n\ngo-openapi/swag/loading v0.25.4 has a test dependency on\ngithub.com/go-openapi/testify/v2/assert/yaml which does not exist\nin the released go-openapi/testify/v2 module. Upgrading to v0.25.5\nfixes the go mod tidy failure in make check.\n\n---------\n\nCo-authored-by: Tetrate Security Agent \u003csecurity-agent@tetrate.io\u003e"
    },
    {
      "commit": "ebc14e3c7f2cbfbcf16cb59d057df353675b1ea6",
      "tree": "b0602cc657253fa14c881a5bf87e3df2a74436a6",
      "parents": [
        "6f0e3dead129b25f694e31eae93a556bf14546d9"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Apr 10 09:31:18 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Apr 10 09:31:18 2026 +0800"
      },
      "message": "Bump the actions-deps group across 1 directory with 3 updates (#243)"
    },
    {
      "commit": "6f0e3dead129b25f694e31eae93a556bf14546d9",
      "tree": "0cf212cc749d9854a0f8f26946a523e78162d2fd",
      "parents": [
        "16c03fe1edb44a64741648e8664589d8b07d01a7"
      ],
      "author": {
        "name": "tetrate-ci[bot]",
        "email": "52504619+tetrate-ci@users.noreply.github.com",
        "time": "Thu Apr 02 14:48:18 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Apr 02 14:48:18 2026 +0800"
      },
      "message": "cves: bump alpine packages to fix busybox and zlib CVEs (#242)\n\nRun apk update and apk upgrade explicitly before apk add to ensure\nthe latest Alpine packages are installed, fixing:\n- CVE-2025-60876: busybox 1.37.0-r14 → 1.37.0-r30\n- CVE-2026-27171: zlib 1.3.1-r2 → 1.3.2-r0\n\nCo-authored-by: CVE Fix Bot \u003ccve-fix@example.com\u003e"
    },
    {
      "commit": "16c03fe1edb44a64741648e8664589d8b07d01a7",
      "tree": "e3f4a732268d96667d652f753ad9ab82a65d8142",
      "parents": [
        "90748e4f49a56cb6aee24d59a290dd49c48e5cdc"
      ],
      "author": {
        "name": "kezhenxu94",
        "email": "kezhenxu94@apache.org",
        "time": "Tue Mar 31 15:58:11 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Mar 31 15:58:11 2026 +0800"
      },
      "message": "chore: pin docker login action (#240)"
    },
    {
      "commit": "90748e4f49a56cb6aee24d59a290dd49c48e5cdc",
      "tree": "c60d09bc587e2cc39fac9feb562c1c61492227c7",
      "parents": [
        "a6fadf6146ef2886f727a86d144407966163697e"
      ],
      "author": {
        "name": "tetrate-ci[bot]",
        "email": "52504619+tetrate-ci@users.noreply.github.com",
        "time": "Tue Mar 31 15:14:53 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Mar 31 15:14:53 2026 +0800"
      },
      "message": "ci: upgrade docker/login-action to v3 to fix workflow startup_failure (#238)\n\nThe publish-docker workflow was failing with startup_failure because\ndocker/login-action@v1.10.0 relies on deprecated Node.js 16 which\nGitHub Actions has removed. Upgrade to v3 to restore image publishing.\n\nCo-authored-by: Tetrate CVE Bot \u003ccve-bot@tetrate.io\u003e"
    },
    {
      "commit": "a6fadf6146ef2886f727a86d144407966163697e",
      "tree": "55a1731e4ae234a37c87b460d25fd5e17ffb58a3",
      "parents": [
        "df1e453b96141e37987a5ef21464794b55dbcdb5"
      ],
      "author": {
        "name": "tetrate-ci[bot]",
        "email": "52504619+tetrate-ci@users.noreply.github.com",
        "time": "Sat Mar 28 13:57:40 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Mar 28 13:57:40 2026 +0800"
      },
      "message": "cves: upgrade base image to alpine:3.23 to fix CVE-2026-27171 (zlib) (#237)\n\nAlpine 3.23 includes zlib 1.3.2-r0 which fixes CVE-2026-27171 (HIGH).\nAlso upgrades busybox to 1.37.0-r30.\n\nVerified clean with trivy scan (0 vulnerabilities in alpine and gobinary layers).\n\nCo-authored-by: CVE Bot \u003ccve-bot@tetrate.io\u003e"
    },
    {
      "commit": "df1e453b96141e37987a5ef21464794b55dbcdb5",
      "tree": "ad7f095148963d8e610c51b89bf99837733d915d",
      "parents": [
        "b2ceca4a95ef1bd57b79888202fb13794c021dda"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Mar 26 20:47:05 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Mar 26 20:47:05 2026 +0800"
      },
      "message": "Bump the actions-deps group across 1 directory with 2 updates (#234)\n\nBumps the actions-deps group with 2 updates in the / directory: [golang.org/x/mod](https://github.com/golang/mod) and [golang.org/x/text](https://github.com/golang/text).\n\n\nUpdates `golang.org/x/mod` from 0.32.0 to 0.34.0\n- [Commits](https://github.com/golang/mod/compare/v0.32.0...v0.34.0)\n\nUpdates `golang.org/x/text` from 0.33.0 to 0.35.0\n- [Release notes](https://github.com/golang/text/releases)\n- [Commits](https://github.com/golang/text/compare/v0.33.0...v0.35.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/mod\n  dependency-version: 0.34.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: golang.org/x/text\n  dependency-version: 0.35.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "b2ceca4a95ef1bd57b79888202fb13794c021dda",
      "tree": "c08656126e03e521f247bd3276614b38e278bb85",
      "parents": [
        "250acb7a3b45e8baa4f158a648d01258078a9a96"
      ],
      "author": {
        "name": "kezhenxu94",
        "email": "kezhenxu94@apache.org",
        "time": "Fri Mar 20 14:21:05 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Mar 20 14:21:05 2026 +0800"
      },
      "message": "Fix CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, CVE-2026-27171, CVE-2025-60876 (#233)\n\n* Fix CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, CVE-2026-27171, CVE-2025-60876\n\n- Upgrade google.golang.org/grpc from v1.78.0 to v1.79.3 (CVE-2026-33186)\n- Upgrade Go from 1.25 to 1.25.8 (CVE-2026-25679, CVE-2026-27142)\n- Upgrade Alpine base image from 3.19 to 3.21 (CVE-2026-27171, CVE-2025-60876)\n\n* fix: fix CI failures after grpc/Go upgrade\n\n- Fix go.mod: use \u0027go 1.25\u0027 + \u0027toolchain go1.25.8\u0027 (patch version not valid in go directive)\n- Fix TestStaticServer: replace fixed sleep with retry loop since grpc.NewClient\n  connects lazily and both connections may not be READY within 1 second\n- Fix Istio E2E: add xpack.security.enabled\u003dfalse for ES 8 compatibility\n\n* fix: update Istio E2E tests to use skywalking-helm OCI chart with ECK operator\n\nFollowing apache/skywalking@92a8f5d:\n- Update SW_KUBERNETES_COMMIT_SHA to 2850db1502283a2d8516146c57cc2b49f1da934b\n  (supports ECK operator with ES 8.18.8)\n- Add ECK operator installation step before SkyWalking install\n- Switch helm install from git-clone approach to OCI registry pull\n- Replace --set elasticsearch.replicas/minimumMasterNodes with --set eckOperator.enabled\u003dfalse\n- Fix values file path (no longer relative to chart subdir)\n- Remove xpack.security.enabled from values.yaml (ECK handles ES security)"
    },
    {
      "commit": "250acb7a3b45e8baa4f158a648d01258078a9a96",
      "tree": "1aa97984c3d78c804f21a22b3aaacefda0cefe75",
      "parents": [
        "64f16bc05d336e428abf6abf0f717636458a00a1"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Jan 16 10:41:52 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jan 16 10:41:52 2026 +0800"
      },
      "message": "Bump github.com/sirupsen/logrus in the actions-deps group (#230)\n\nBumps the actions-deps group with 1 update: [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus).\n\n\nUpdates `github.com/sirupsen/logrus` from 1.9.3 to 1.9.4\n- [Release notes](https://github.com/sirupsen/logrus/releases)\n- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/sirupsen/logrus/compare/v1.9.3...v1.9.4)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/sirupsen/logrus\n  dependency-version: 1.9.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "64f16bc05d336e428abf6abf0f717636458a00a1",
      "tree": "434db3b719be16c39801e185a0f10eef311bbb8e",
      "parents": [
        "395733adc8df48c86eb515ebd265bdb522788588"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jan 12 14:19:47 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jan 12 14:19:47 2026 +0800"
      },
      "message": "Bump the actions-deps group with 2 updates (#229)\n\nBumps the actions-deps group with 2 updates: [golang.org/x/mod](https://github.com/golang/mod) and [golang.org/x/text](https://github.com/golang/text).\n\n\nUpdates `golang.org/x/mod` from 0.31.0 to 0.32.0\n- [Commits](https://github.com/golang/mod/compare/v0.31.0...v0.32.0)\n\nUpdates `golang.org/x/text` from 0.32.0 to 0.33.0\n- [Release notes](https://github.com/golang/text/releases)\n- [Commits](https://github.com/golang/text/compare/v0.32.0...v0.33.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/mod\n  dependency-version: 0.32.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: golang.org/x/text\n  dependency-version: 0.33.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "395733adc8df48c86eb515ebd265bdb522788588",
      "tree": "26c8529204b2cc7afaacb46cf8779c88ae2255b5",
      "parents": [
        "b0cc6d680349ef8caeebda247ba1bfeb29cf2d64"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jan 07 11:50:14 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Jan 07 11:50:14 2026 +0800"
      },
      "message": "Bump github.com/prometheus/common in the actions-deps group (#228)\n\nBumps the actions-deps group with 1 update: [github.com/prometheus/common](https://github.com/prometheus/common).\n\n\nUpdates `github.com/prometheus/common` from 0.67.4 to 0.67.5\n- [Release notes](https://github.com/prometheus/common/releases)\n- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/common/compare/v0.67.4...v0.67.5)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/common\n  dependency-version: 0.67.5\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "b0cc6d680349ef8caeebda247ba1bfeb29cf2d64",
      "tree": "454dcf70ff752b9b1298c54d2f09764cba4abd13",
      "parents": [
        "2ea3e4addedd7204bfbb71e5d74457a43132ad54"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Dec 24 11:43:24 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Dec 24 11:43:24 2025 +0800"
      },
      "message": "Bump google.golang.org/grpc in the actions-deps group (#227)\n\nBumps the actions-deps group with 1 update: [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\n\nUpdates `google.golang.org/grpc` from 1.77.0 to 1.78.0\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.77.0...v1.78.0)\n\n---\nupdated-dependencies:\n- dependency-name: google.golang.org/grpc\n  dependency-version: 1.78.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "2ea3e4addedd7204bfbb71e5d74457a43132ad54",
      "tree": "b0bafeb7196e4adb1347690d4a8362dd62087977",
      "parents": [
        "831aefc29f7d162c3adb2ed364c28da3dcb58dd3"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Dec 16 13:21:59 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Dec 16 13:21:59 2025 +0800"
      },
      "message": "Bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#226)\n\nBumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.43.0 to 0.45.0.\n- [Commits](https://github.com/golang/crypto/compare/v0.43.0...v0.45.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/crypto\n  dependency-version: 0.45.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: kezhenxu94 \u003ckezhenxu94@apache.org\u003e"
    },
    {
      "commit": "831aefc29f7d162c3adb2ed364c28da3dcb58dd3",
      "tree": "4b8ddcc465234faba17621d9eb70bcf3e64ca15e",
      "parents": [
        "7d41779a5201b406c999b4b4500e8ddf500716ce"
      ],
      "author": {
        "name": "kezhenxu94",
        "email": "kezhenxu94@apache.org",
        "time": "Tue Dec 16 11:58:06 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Dec 16 11:58:06 2025 +0800"
      },
      "message": "fix(build): fix build error (#225)\n\n"
    },
    {
      "commit": "7d41779a5201b406c999b4b4500e8ddf500716ce",
      "tree": "6defa39a3df4ffadbe82f75cbb5accbab0c33433",
      "parents": [
        "937851e9136d2c8563cbb13ce93f24f6939c6975"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Dec 15 10:44:42 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Dec 15 10:44:42 2025 +0800"
      },
      "message": "Bump google.golang.org/protobuf in the actions-deps group (#224)\n\n"
    },
    {
      "commit": "937851e9136d2c8563cbb13ce93f24f6939c6975",
      "tree": "441e6aed8521eeb27953737506a17c2340b29507",
      "parents": [
        "f042b97693e4e3eaa64982185371a50009db7b40"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Dec 09 17:15:56 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Dec 09 17:15:56 2025 +0800"
      },
      "message": "Bump the actions-deps group with 2 updates (#223)\n\nBumps the actions-deps group with 2 updates: [golang.org/x/mod](https://github.com/golang/mod) and [golang.org/x/text](https://github.com/golang/text).\n\n\nUpdates `golang.org/x/mod` from 0.30.0 to 0.31.0\n- [Commits](https://github.com/golang/mod/compare/v0.30.0...v0.31.0)\n\nUpdates `golang.org/x/text` from 0.31.0 to 0.32.0\n- [Release notes](https://github.com/golang/text/releases)\n- [Commits](https://github.com/golang/text/compare/v0.31.0...v0.32.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/mod\n  dependency-version: 0.31.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: golang.org/x/text\n  dependency-version: 0.32.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "f042b97693e4e3eaa64982185371a50009db7b40",
      "tree": "86472de80f3ce2599cf771259e7be86fe6073f25",
      "parents": [
        "ca14a5b9e9c67641a39360d4f52103fb0e96580a"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Nov 24 21:48:34 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Nov 24 21:48:34 2025 +0800"
      },
      "message": "Bump github.com/prometheus/common in the actions-deps group (#222)\n\nBumps the actions-deps group with 1 update: [github.com/prometheus/common](https://github.com/prometheus/common).\n\n\nUpdates `github.com/prometheus/common` from 0.67.3 to 0.67.4\n- [Release notes](https://github.com/prometheus/common/releases)\n- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/common/compare/v0.67.3...v0.67.4)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/common\n  dependency-version: 0.67.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "ca14a5b9e9c67641a39360d4f52103fb0e96580a",
      "tree": "bf7853fb91fefa0b2011a72969097e3bb96b2b5a",
      "parents": [
        "79ba8c3bd66f9bdce6dbf32c68fd86a54ffca7b1"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Nov 19 09:38:20 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Nov 19 09:38:20 2025 +0800"
      },
      "message": "Bump github.com/prometheus/common in the actions-deps group (#221)\n\nBumps the actions-deps group with 1 update: [github.com/prometheus/common](https://github.com/prometheus/common).\n\n\nUpdates `github.com/prometheus/common` from 0.67.2 to 0.67.3\n- [Release notes](https://github.com/prometheus/common/releases)\n- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/common/compare/v0.67.2...v0.67.3)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/common\n  dependency-version: 0.67.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "79ba8c3bd66f9bdce6dbf32c68fd86a54ffca7b1",
      "tree": "cf0eeb28bdb5eabf3bb979a02ae96d5dca71fdf0",
      "parents": [
        "936615ebf9ef03f5cb6eacf4fcf47f5eb5fd8149"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Nov 18 16:30:10 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Nov 18 16:30:10 2025 +0800"
      },
      "message": "Bump google.golang.org/grpc in the actions-deps group (#220)\n\nBumps the actions-deps group with 1 update: [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\n\nUpdates `google.golang.org/grpc` from 1.76.0 to 1.77.0\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.76.0...v1.77.0)\n\n---\nupdated-dependencies:\n- dependency-name: google.golang.org/grpc\n  dependency-version: 1.77.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "936615ebf9ef03f5cb6eacf4fcf47f5eb5fd8149",
      "tree": "f17b2474c091d41f94656b1b3cdc6a7d44a4441a",
      "parents": [
        "dd2168ce2190cc6b2d1af9d8fc467a44f1d6ce4b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Nov 12 23:11:18 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Nov 12 23:11:18 2025 +0800"
      },
      "message": "Bump the actions-deps group with 2 updates (#219)\n\n"
    },
    {
      "commit": "dd2168ce2190cc6b2d1af9d8fc467a44f1d6ce4b",
      "tree": "ea19ccb96dba19a64041bcef296c1f0f4b7ed00d",
      "parents": [
        "e147cf68a1ad183d0d39a7bcdf27df41be06fcdc"
      ],
      "author": {
        "name": "kezhenxu94",
        "email": "kezhenxu94@apache.org",
        "time": "Tue Nov 11 12:33:19 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Nov 11 12:33:19 2025 +0800"
      },
      "message": "chore(deps): bump up go (#218)\n\n"
    },
    {
      "commit": "e147cf68a1ad183d0d39a7bcdf27df41be06fcdc",
      "tree": "2cad75b48c1b7465a8c734ce509176c5c4eff750",
      "parents": [
        "c324415f364671dee98a225d6088fe6047e646a0"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sat Nov 01 15:11:26 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Nov 01 15:11:26 2025 +0800"
      },
      "message": "Bump github.com/prometheus/common in the actions-deps group (#217)\n\nBumps the actions-deps group with 1 update: [github.com/prometheus/common](https://github.com/prometheus/common).\n\n\nUpdates `github.com/prometheus/common` from 0.67.1 to 0.67.2\n- [Release notes](https://github.com/prometheus/common/releases)\n- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/common/compare/v0.67.1...v0.67.2)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/common\n  dependency-version: 0.67.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "c324415f364671dee98a225d6088fe6047e646a0",
      "tree": "d32fd565dc8095896221975203283d1115d46ac6",
      "parents": [
        "7dc13aef26da46f474947bf48d6a823760233392"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Oct 10 20:29:30 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Oct 10 20:29:30 2025 +0800"
      },
      "message": "Bump the actions-deps group across 1 directory with 3 updates (#216)\n\nBumps the actions-deps group with 3 updates in the / directory: [github.com/prometheus/common](https://github.com/prometheus/common), [golang.org/x/mod](https://github.com/golang/mod) and [golang.org/x/text](https://github.com/golang/text).\n\n\nUpdates `github.com/prometheus/common` from 0.66.1 to 0.67.1\n- [Release notes](https://github.com/prometheus/common/releases)\n- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/common/compare/v0.66.1...v0.67.1)\n\nUpdates `golang.org/x/mod` from 0.28.0 to 0.29.0\n- [Commits](https://github.com/golang/mod/compare/v0.28.0...v0.29.0)\n\nUpdates `golang.org/x/text` from 0.29.0 to 0.30.0\n- [Release notes](https://github.com/golang/text/releases)\n- [Commits](https://github.com/golang/text/compare/v0.29.0...v0.30.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/common\n  dependency-version: 0.67.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: golang.org/x/mod\n  dependency-version: 0.29.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: golang.org/x/text\n  dependency-version: 0.30.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "7dc13aef26da46f474947bf48d6a823760233392",
      "tree": "52c6ebd3bdb500db17acf0bd96c8288bf6a4b80f",
      "parents": [
        "06bef6033b1b655c4cb502d007831db083a53521"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Oct 07 12:06:35 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Oct 07 12:06:35 2025 +0800"
      },
      "message": "Bump google.golang.org/grpc in the actions-deps group (#214)\n\nBumps the actions-deps group with 1 update: [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\n\nUpdates `google.golang.org/grpc` from 1.75.1 to 1.76.0\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.75.1...v1.76.0)\n\n---\nupdated-dependencies:\n- dependency-name: google.golang.org/grpc\n  dependency-version: 1.76.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "06bef6033b1b655c4cb502d007831db083a53521",
      "tree": "01066a315dbb9e02fe9e0e80b5c888cbb70fe2ec",
      "parents": [
        "97dc95d2505c16223b5724e83ac3b93b927f7e3d"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Oct 03 18:51:58 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Oct 03 18:51:58 2025 +0800"
      },
      "message": "Bump google.golang.org/protobuf in the actions-deps group (#213)\n\n"
    },
    {
      "commit": "97dc95d2505c16223b5724e83ac3b93b927f7e3d",
      "tree": "0cc2b869a06d67b88d8919e0869271df90075719",
      "parents": [
        "3a4a8037ffdfd33fa0af5208a6398378cf5ac967"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Sep 12 23:23:09 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Sep 12 23:23:09 2025 +0800"
      },
      "message": "Bump google.golang.org/grpc in the actions-deps group (#212)\n\n"
    },
    {
      "commit": "3a4a8037ffdfd33fa0af5208a6398378cf5ac967",
      "tree": "25dbee47e2ce009789fcbac09b787839a04396e9",
      "parents": [
        "43d7340772723607108ca36fbcbf7fcca2fc49b2"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Sep 10 17:30:52 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Sep 10 17:30:52 2025 +0800"
      },
      "message": "Bump google.golang.org/protobuf in the actions-deps group (#211)\n\nBumps the actions-deps group with 1 update: google.golang.org/protobuf.\n\n\nUpdates `google.golang.org/protobuf` from 1.36.8 to 1.36.9\n\n---\nupdated-dependencies:\n- dependency-name: google.golang.org/protobuf\n  dependency-version: 1.36.9\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "43d7340772723607108ca36fbcbf7fcca2fc49b2",
      "tree": "d0dce1ffc85c3fffc3dba4db601dabf0070d1f86",
      "parents": [
        "3caeb906ad01287ac2b99f27e8ab8d9556ef85ae"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Sep 09 11:28:04 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Sep 09 11:28:04 2025 +0800"
      },
      "message": "Bump the actions-deps group across 1 directory with 5 updates (#210)\n\nBumps the actions-deps group with 4 updates in the / directory: [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang), [github.com/spf13/viper](https://github.com/spf13/viper), [golang.org/x/mod](https://github.com/golang/mod) and [golang.org/x/text](https://github.com/golang/text).\n\n\nUpdates `github.com/prometheus/client_golang` from 1.23.1 to 1.23.2\n- [Release notes](https://github.com/prometheus/client_golang/releases)\n- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/client_golang/compare/v1.23.1...v1.23.2)\n\nUpdates `github.com/prometheus/common` from 0.66.0 to 0.66.1\n- [Release notes](https://github.com/prometheus/common/releases)\n- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/common/compare/v0.66.0...v0.66.1)\n\nUpdates `github.com/spf13/viper` from 1.20.1 to 1.21.0\n- [Release notes](https://github.com/spf13/viper/releases)\n- [Commits](https://github.com/spf13/viper/compare/v1.20.1...v1.21.0)\n\nUpdates `golang.org/x/mod` from 0.27.0 to 0.28.0\n- [Commits](https://github.com/golang/mod/compare/v0.27.0...v0.28.0)\n\nUpdates `golang.org/x/text` from 0.28.0 to 0.29.0\n- [Release notes](https://github.com/golang/text/releases)\n- [Commits](https://github.com/golang/text/compare/v0.28.0...v0.29.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/client_golang\n  dependency-version: 1.23.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n- dependency-name: github.com/prometheus/common\n  dependency-version: 0.66.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n- dependency-name: github.com/spf13/viper\n  dependency-version: 1.21.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: golang.org/x/mod\n  dependency-version: 0.28.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: golang.org/x/text\n  dependency-version: 0.29.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "3caeb906ad01287ac2b99f27e8ab8d9556ef85ae",
      "tree": "f5b78c1a4f87c98b5c0bef53205af44a5fd16772",
      "parents": [
        "192c245aa3c8afc3468df7a175bec37e5d98163f"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Sep 05 10:23:58 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Sep 05 10:23:58 2025 +0800"
      },
      "message": "Bump the actions-deps group across 1 directory with 2 updates (#208)\n\nBumps the actions-deps group with 1 update in the / directory: [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang).\n\n\nUpdates `github.com/prometheus/client_golang` from 1.23.0 to 1.23.1\n- [Release notes](https://github.com/prometheus/client_golang/releases)\n- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/client_golang/compare/v1.23.0...v1.23.1)\n\nUpdates `github.com/prometheus/common` from 0.65.0 to 0.66.0\n- [Release notes](https://github.com/prometheus/common/releases)\n- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md)\n- [Commits](https://github.com/prometheus/common/compare/v0.65.0...v0.66.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/client_golang\n  dependency-version: 1.23.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n- dependency-name: github.com/prometheus/common\n  dependency-version: 0.66.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "192c245aa3c8afc3468df7a175bec37e5d98163f",
      "tree": "fd7e30784238530208e587a0c42166b3906ee037",
      "parents": [
        "9ed8829503e0b12f7f1ce96694548f16cf404529"
      ],
      "author": {
        "name": "kezhenxu94",
        "email": "kezhenxu94@apache.org",
        "time": "Thu Aug 21 15:03:17 2025 +0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Aug 21 15:03:17 2025 +0700"
      },
      "message": "build: bump up go to 1.24.6 (#206)\n\n"
    },
    {
      "commit": "9ed8829503e0b12f7f1ce96694548f16cf404529",
      "tree": "99d6964dcad81b57f70d23269e806fe56de5f040",
      "parents": [
        "d82025fd293ed8c04bca5313bc481b8217bcddc3"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Aug 21 14:30:41 2025 +0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Aug 21 14:30:41 2025 +0700"
      },
      "message": "Bump google.golang.org/protobuf in the actions-deps group (#205)\n\nBumps the actions-deps group with 1 update: google.golang.org/protobuf.\n\n\nUpdates `google.golang.org/protobuf` from 1.36.7 to 1.36.8\n\n---\nupdated-dependencies:\n- dependency-name: google.golang.org/protobuf\n  dependency-version: 1.36.8\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "d82025fd293ed8c04bca5313bc481b8217bcddc3",
      "tree": "b2fc3c98b1e7bb9e88765f419f232ccb8c524844",
      "parents": [
        "ac52108d9d9bc74982a5795bf8c92e395edd6d35"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Aug 20 12:54:22 2025 +0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Aug 20 12:54:22 2025 +0700"
      },
      "message": "Bump google.golang.org/grpc in the actions-deps group (#204)\n\n"
    },
    {
      "commit": "ac52108d9d9bc74982a5795bf8c92e395edd6d35",
      "tree": "4a99689c8bc191af8cb304d9e3dc0bd3fd59ef8b",
      "parents": [
        "c0ef8736dacef77c99001f8ecd5e52b5a48f00f0"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Aug 08 11:01:41 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Aug 08 11:01:41 2025 +0800"
      },
      "message": "Bump the actions-deps group with 3 updates (#203)\n\nBumps the actions-deps group with 3 updates: [golang.org/x/mod](https://github.com/golang/mod), [golang.org/x/text](https://github.com/golang/text) and google.golang.org/protobuf.\n\n\nUpdates `golang.org/x/mod` from 0.26.0 to 0.27.0\n- [Commits](https://github.com/golang/mod/compare/v0.26.0...v0.27.0)\n\nUpdates `golang.org/x/text` from 0.27.0 to 0.28.0\n- [Release notes](https://github.com/golang/text/releases)\n- [Commits](https://github.com/golang/text/compare/v0.27.0...v0.28.0)\n\nUpdates `google.golang.org/protobuf` from 1.36.6 to 1.36.7\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/mod\n  dependency-version: 0.27.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: golang.org/x/text\n  dependency-version: 0.28.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: google.golang.org/protobuf\n  dependency-version: 1.36.7\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "c0ef8736dacef77c99001f8ecd5e52b5a48f00f0",
      "tree": "cad6f658235341a16ae683b4894a3a566d97a796",
      "parents": [
        "923a613d6c9d527567a1888e4bbbbe201a443d39"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Aug 01 10:35:05 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Aug 01 10:35:05 2025 +0800"
      },
      "message": "Bump github.com/prometheus/client_golang in the actions-deps group (#202)\n\nBumps the actions-deps group with 1 update: [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang).\n\n\nUpdates `github.com/prometheus/client_golang` from 1.22.0 to 1.23.0\n- [Release notes](https://github.com/prometheus/client_golang/releases)\n- [Changelog](https://github.com/prometheus/client_golang/blob/v1.23.0/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/client_golang/compare/v1.22.0...v1.23.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/client_golang\n  dependency-version: 1.23.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "923a613d6c9d527567a1888e4bbbbe201a443d39",
      "tree": "d4f816be127b7e1c702d41002d57672b8898c657",
      "parents": [
        "b532b13888e93a437f01c3ce3e9a5f60ae6197f9"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jul 23 11:14:36 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Jul 23 11:14:36 2025 +0800"
      },
      "message": "Bump google.golang.org/grpc in the actions-deps group (#201)\n\nBumps the actions-deps group with 1 update: [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\n\nUpdates `google.golang.org/grpc` from 1.74.0 to 1.74.2\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.74.0...v1.74.2)\n\n---\nupdated-dependencies:\n- dependency-name: google.golang.org/grpc\n  dependency-version: 1.74.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "b532b13888e93a437f01c3ce3e9a5f60ae6197f9",
      "tree": "bb4ed9496dfbcf6c90dcb611f8bb59258c756f01",
      "parents": [
        "c8bdf82fea2403493d7accb2246b39624d926caf"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jul 17 22:35:27 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 17 22:35:27 2025 +0800"
      },
      "message": "Bump google.golang.org/grpc in the actions-deps group (#200)\n\n"
    },
    {
      "commit": "c8bdf82fea2403493d7accb2246b39624d926caf",
      "tree": "113552898b4244b54d55591df0ce9c5f9ab7b7fc",
      "parents": [
        "806647b1363e03f070e5043ebf940b0430d17eca"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jul 10 12:29:40 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 10 12:29:40 2025 +0800"
      },
      "message": "Bump the actions-deps group with 2 updates (#199)\n\nBumps the actions-deps group with 2 updates: [golang.org/x/mod](https://github.com/golang/mod) and [golang.org/x/text](https://github.com/golang/text).\n\n\nUpdates `golang.org/x/mod` from 0.25.0 to 0.26.0\n- [Commits](https://github.com/golang/mod/compare/v0.25.0...v0.26.0)\n\nUpdates `golang.org/x/text` from 0.26.0 to 0.27.0\n- [Release notes](https://github.com/golang/text/releases)\n- [Commits](https://github.com/golang/text/compare/v0.26.0...v0.27.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/mod\n  dependency-version: 0.26.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: golang.org/x/text\n  dependency-version: 0.27.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "806647b1363e03f070e5043ebf940b0430d17eca",
      "tree": "ef3a103fd3e64d1e2c6c718c2ff146132598af4f",
      "parents": [
        "2f93dfd4e2da436c4426e9bf691cf51ccde749b1"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jul 02 11:49:07 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Jul 02 11:49:07 2025 +0800"
      },
      "message": "Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 (#198)\n\nBumps [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) from 2.2.1 to 2.3.0.\n- [Release notes](https://github.com/go-viper/mapstructure/releases)\n- [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/go-viper/mapstructure/v2\n  dependency-version: 2.3.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "2f93dfd4e2da436c4426e9bf691cf51ccde749b1",
      "tree": "c68c2c8ed6631b18fe843c4e7add2cc552c3db37",
      "parents": [
        "63d3caf47625fe0cfcce51a175486b6012933fb8"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jul 02 11:36:22 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Jul 02 11:36:22 2025 +0800"
      },
      "message": "Bump github.com/grandecola/mmap in the actions-deps group (#197)\n\nBumps the actions-deps group with 1 update: [github.com/grandecola/mmap](https://github.com/grandecola/mmap).\n\n\nUpdates `github.com/grandecola/mmap` from 0.6.0 to 0.7.0\n- [Release notes](https://github.com/grandecola/mmap/releases)\n- [Commits](https://github.com/grandecola/mmap/compare/v0.6.0...v0.7.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/grandecola/mmap\n  dependency-version: 0.7.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "63d3caf47625fe0cfcce51a175486b6012933fb8",
      "tree": "28f72635f4a2949573892e2a44bc206db8f7643d",
      "parents": [
        "5fe2d2201d5f26213135067bd48df40601377b3f"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jun 24 09:20:45 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jun 24 09:20:45 2025 +0800"
      },
      "message": "Bump github.com/prometheus/common in the actions-deps group (#196)\n\nBumps the actions-deps group with 1 update: [github.com/prometheus/common](https://github.com/prometheus/common).\n\n\nUpdates `github.com/prometheus/common` from 0.64.0 to 0.65.0\n- [Release notes](https://github.com/prometheus/common/releases)\n- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md)\n- [Commits](https://github.com/prometheus/common/compare/v0.64.0...v0.65.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/common\n  dependency-version: 0.65.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "5fe2d2201d5f26213135067bd48df40601377b3f",
      "tree": "492fc5c0ca9a5507fe53b36daba23c54e0ecbae8",
      "parents": [
        "f947f45187a9f0802427058520a3fe9710cf14b6"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jun 16 09:52:59 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jun 16 09:52:59 2025 +0800"
      },
      "message": "Bump github.com/urfave/cli/v2 in the actions-deps group (#195)\n\nBumps the actions-deps group with 1 update: [github.com/urfave/cli/v2](https://github.com/urfave/cli).\n\n\nUpdates `github.com/urfave/cli/v2` from 2.27.6 to 2.27.7\n- [Release notes](https://github.com/urfave/cli/releases)\n- [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md)\n- [Commits](https://github.com/urfave/cli/compare/v2.27.6...v2.27.7)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/urfave/cli/v2\n  dependency-version: 2.27.7\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "f947f45187a9f0802427058520a3fe9710cf14b6",
      "tree": "bc93bc0cdb9ff1dd4f0213fdb497c45916ab1fa4",
      "parents": [
        "da3865787a5e51b0b2b9ba8b9be896d1e6ba2a30"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Jun 06 10:32:10 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jun 06 10:32:10 2025 +0800"
      },
      "message": "Bump the actions-deps group across 1 directory with 3 updates (#194)\n\nBumps the actions-deps group with 3 updates in the / directory: [golang.org/x/mod](https://github.com/golang/mod), [golang.org/x/text](https://github.com/golang/text) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\n\nUpdates `golang.org/x/mod` from 0.24.0 to 0.25.0\n- [Commits](https://github.com/golang/mod/compare/v0.24.0...v0.25.0)\n\nUpdates `golang.org/x/text` from 0.25.0 to 0.26.0\n- [Release notes](https://github.com/golang/text/releases)\n- [Commits](https://github.com/golang/text/compare/v0.25.0...v0.26.0)\n\nUpdates `google.golang.org/grpc` from 1.72.1 to 1.73.0\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.72.1...v1.73.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/mod\n  dependency-version: 0.25.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: golang.org/x/text\n  dependency-version: 0.26.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: google.golang.org/grpc\n  dependency-version: 1.73.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "da3865787a5e51b0b2b9ba8b9be896d1e6ba2a30",
      "tree": "f01f8d87eed1a6c914542d6946b07c26f7080dd6",
      "parents": [
        "937f2078e5bb4402a9ff97feb1d48e53211ac87d"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri May 16 11:47:45 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri May 16 11:47:45 2025 +0800"
      },
      "message": "Bump github.com/prometheus/common in the actions-deps group (#192)\n\nBumps the actions-deps group with 1 update: [github.com/prometheus/common](https://github.com/prometheus/common).\n\n\nUpdates `github.com/prometheus/common` from 0.63.0 to 0.64.0\n- [Release notes](https://github.com/prometheus/common/releases)\n- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md)\n- [Commits](https://github.com/prometheus/common/compare/v0.63.0...v0.64.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/common\n  dependency-version: 0.64.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "937f2078e5bb4402a9ff97feb1d48e53211ac87d",
      "tree": "fa9f31f5bd279bb02457d17e4aa4e7ed47f4eb29",
      "parents": [
        "c18784af827d1ee19003b5dddd97bd03cca02136"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu May 15 09:54:37 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu May 15 09:54:37 2025 +0800"
      },
      "message": "Bump google.golang.org/grpc in the actions-deps group (#191)\n\nBumps the actions-deps group with 1 update: [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\n\nUpdates `google.golang.org/grpc` from 1.72.0 to 1.72.1\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.72.0...v1.72.1)\n\n---\nupdated-dependencies:\n- dependency-name: google.golang.org/grpc\n  dependency-version: 1.72.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "c18784af827d1ee19003b5dddd97bd03cca02136",
      "tree": "ec736e9b7120b9a3f1f4516a9b155973ff7dce3c",
      "parents": [
        "f2263d4f4b219ae533fd8c55fb2a49264ab5713b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue May 06 10:35:36 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue May 06 10:35:36 2025 +0800"
      },
      "message": "Bump golang.org/x/text from 0.24.0 to 0.25.0 in the actions-deps group (#190)\n\nBumps the actions-deps group with 1 update: [golang.org/x/text](https://github.com/golang/text).\n\n\nUpdates `golang.org/x/text` from 0.24.0 to 0.25.0\n- [Release notes](https://github.com/golang/text/releases)\n- [Commits](https://github.com/golang/text/compare/v0.24.0...v0.25.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/text\n  dependency-version: 0.25.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "f2263d4f4b219ae533fd8c55fb2a49264ab5713b",
      "tree": "b9b8abf6da6a132b4cefc0003de90c4b517d4d31",
      "parents": [
        "10dbd858dac2c5638efc54660546f009af74add7"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Apr 22 12:41:01 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Apr 22 12:41:01 2025 +0800"
      },
      "message": "Bump google.golang.org/grpc in the actions-deps group (#189)\n\n"
    },
    {
      "commit": "10dbd858dac2c5638efc54660546f009af74add7",
      "tree": "d6e0173efb10962344f1edf1046a9a30f86b3337",
      "parents": [
        "97e5f29929c73b5163c839fd68382cbaa89429ca"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Apr 09 16:02:00 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Apr 09 16:02:00 2025 +0800"
      },
      "message": "Bump github.com/prometheus/client_golang in the actions-deps group (#188)\n\nBumps the actions-deps group with 1 update: [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang).\n\n\nUpdates `github.com/prometheus/client_golang` from 1.21.1 to 1.22.0\n- [Release notes](https://github.com/prometheus/client_golang/releases)\n- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/client_golang/compare/v1.21.1...v1.22.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/client_golang\n  dependency-version: 1.22.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "97e5f29929c73b5163c839fd68382cbaa89429ca",
      "tree": "79a41d61c5fbad2c46c839b9ba31f6142a17bb09",
      "parents": [
        "74567f05f23f38a027cf8e1f894e58eb3f6799ac"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 07 18:23:53 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 07 18:23:53 2025 +0800"
      },
      "message": "Bump golang.org/x/net from 0.35.0 to 0.36.0 (#187)\n\nBumps [golang.org/x/net](https://github.com/golang/net) from 0.35.0 to 0.36.0.\n- [Commits](https://github.com/golang/net/compare/v0.35.0...v0.36.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n  dependency-version: 0.36.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "74567f05f23f38a027cf8e1f894e58eb3f6799ac",
      "tree": "5e5c3214010965168036e6c84323c9aab73ba6b9",
      "parents": [
        "a4977a5e94aabc77179f0c552f54c7337821df6b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 07 17:14:51 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 07 17:14:51 2025 +0800"
      },
      "message": "Bump the actions-deps group across 1 directory with 3 updates (#186)\n\nBumps the actions-deps group with 3 updates in the / directory: [github.com/spf13/viper](https://github.com/spf13/viper), [golang.org/x/text](https://github.com/golang/text) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\n\nUpdates `github.com/spf13/viper` from 1.20.0 to 1.20.1\n- [Release notes](https://github.com/spf13/viper/releases)\n- [Commits](https://github.com/spf13/viper/compare/v1.20.0...v1.20.1)\n\nUpdates `golang.org/x/text` from 0.23.0 to 0.24.0\n- [Release notes](https://github.com/golang/text/releases)\n- [Commits](https://github.com/golang/text/compare/v0.23.0...v0.24.0)\n\nUpdates `google.golang.org/grpc` from 1.71.0 to 1.71.1\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.71.0...v1.71.1)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/spf13/viper\n  dependency-version: 1.20.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n- dependency-name: golang.org/x/text\n  dependency-version: 0.24.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: google.golang.org/grpc\n  dependency-version: 1.71.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "a4977a5e94aabc77179f0c552f54c7337821df6b",
      "tree": "34eedc9aeb5f71479d7462e185fc123781db3800",
      "parents": [
        "513c99b664cbea737d247ce1180127cfb3fe687c"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Mar 25 11:23:46 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Mar 25 11:23:46 2025 +0800"
      },
      "message": "Bump the actions-deps group across 1 directory with 2 updates (#183)\n\nBumps the actions-deps group with 2 updates in the / directory: [github.com/spf13/viper](https://github.com/spf13/viper) and google.golang.org/protobuf.\n\n\nUpdates `github.com/spf13/viper` from 1.19.0 to 1.20.0\n- [Release notes](https://github.com/spf13/viper/releases)\n- [Commits](https://github.com/spf13/viper/compare/v1.19.0...v1.20.0)\n\nUpdates `google.golang.org/protobuf` from 1.36.5 to 1.36.6\n\n---\nupdated-dependencies:\n- dependency-name: github.com/spf13/viper\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: google.golang.org/protobuf\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "513c99b664cbea737d247ce1180127cfb3fe687c",
      "tree": "aff1ef1a5c153f1464b9839d7d83506e258e6a75",
      "parents": [
        "7267cd59cf77fdd0191c123c93972098b0e41d3b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Mar 14 13:44:09 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Mar 14 13:44:09 2025 +0800"
      },
      "message": "Bump github.com/prometheus/common in the actions-deps group (#181)\n\nBumps the actions-deps group with 1 update: [github.com/prometheus/common](https://github.com/prometheus/common).\n\n\nUpdates `github.com/prometheus/common` from 0.62.0 to 0.63.0\n- [Release notes](https://github.com/prometheus/common/releases)\n- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md)\n- [Commits](https://github.com/prometheus/common/compare/v0.62.0...v0.63.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/common\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "7267cd59cf77fdd0191c123c93972098b0e41d3b",
      "tree": "594b34e43309c26e80304c5802371ba631c868ad",
      "parents": [
        "80b5149e7a62809d30ac348905c2de4cc1415dd5"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Mar 06 10:46:31 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Mar 06 10:46:31 2025 +0800"
      },
      "message": "Bump the actions-deps group with 3 updates (#180)\n\n* Bump the actions-deps group with 3 updates\n\nBumps the actions-deps group with 3 updates: [github.com/urfave/cli/v2](https://github.com/urfave/cli), [golang.org/x/mod](https://github.com/golang/mod) and [golang.org/x/text](https://github.com/golang/text).\n\n\nUpdates `github.com/urfave/cli/v2` from 2.27.5 to 2.27.6\n- [Release notes](https://github.com/urfave/cli/releases)\n- [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md)\n- [Commits](https://github.com/urfave/cli/compare/v2.27.5...v2.27.6)\n\nUpdates `golang.org/x/mod` from 0.23.0 to 0.24.0\n- [Commits](https://github.com/golang/mod/compare/v0.23.0...v0.24.0)\n\nUpdates `golang.org/x/text` from 0.22.0 to 0.23.0\n- [Release notes](https://github.com/golang/text/releases)\n- [Commits](https://github.com/golang/text/compare/v0.22.0...v0.23.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/urfave/cli/v2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n- dependency-name: golang.org/x/mod\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n- dependency-name: golang.org/x/text\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\n\n* go mod tidy\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: kezhenxu94 \u003ckezhenxu94@apache.org\u003e"
    },
    {
      "commit": "80b5149e7a62809d30ac348905c2de4cc1415dd5",
      "tree": "6efd59e1cfc90decb04c72d2023ef06345c81a29",
      "parents": [
        "9d9b56f3a569e12f297bf47859b7474ad68e619b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Mar 05 09:40:51 2025 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Mar 05 09:40:51 2025 +0800"
      },
      "message": "Bump the actions-deps group with 2 updates (#179)\n\nBumps the actions-deps group with 2 updates: [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\n\nUpdates `github.com/prometheus/client_golang` from 1.21.0 to 1.21.1\n- [Release notes](https://github.com/prometheus/client_golang/releases)\n- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/client_golang/compare/v1.21.0...v1.21.1)\n\nUpdates `google.golang.org/grpc` from 1.70.0 to 1.71.0\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.70.0...v1.71.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/prometheus/client_golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: actions-deps\n- dependency-name: google.golang.org/grpc\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: actions-deps\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    }
  ],
  "next": "9d9b56f3a569e12f297bf47859b7474ad68e619b"
}