chore(deps): bump the dependencies group with 9 updates

[dependabot]

Bumps the dependencies group with 9 updates:

Package	From	To
github.com/Scalingo/go-utils/logger	1.6.1	1.9.1
github.com/moby/moby	28.3.0+incompatible	28.3.3+incompatible
go.etcd.io/etcd/api/v3	3.6.1	3.6.4
go.etcd.io/etcd/client/v3	3.6.1	3.6.4
golang.org/x/sys	0.33.0	0.34.0
google.golang.org/grpc	1.73.0	1.74.2
go.etcd.io/etcd/client/pkg/v3	3.6.1	3.6.4
golang.org/x/net	0.41.0	0.42.0
golang.org/x/text	0.26.0	0.27.0

Updates github.com/Scalingo/go-utils/logger from 1.6.1 to 1.9.1

Commits

• 219a61b Merge pull request #1268 from Scalingo/release/logger/1.9.1
• c55db9b build(logger): move retract at the beginning of the file
• e8efa25 [logger] Bump v1.9.1
• d81c98e Merge pull request #1267 from Scalingo/chore/retract_1.9.0
• 1d4d107 chore: retract version 1.9.0
• e56ee0f Merge pull request #1258 from Scalingo/dependabot/go_modules/postgresql/depen...
• f6caa33 Merge pull request #1249 from Scalingo/dependabot/go_modules/etcd/dependencie...
• 42e7901 Merge pull request #1241 from Scalingo/dependabot/go_modules/logger/dependenc...
• 832564e Merge pull request #1257 from Scalingo/dependabot/go_modules/pagination/depen...
• fa2f815 Merge pull request #1256 from Scalingo/dependabot/go_modules/security/depende...
• Additional commits viewable in compare view

Updates github.com/moby/moby from 28.3.0+incompatible to 28.3.3+incompatible

Release notes

Sourced from github.com/moby/moby's releases.

v28.3.3

28.3.3

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 28.3.3 milestone
• moby/moby, 28.3.3 milestone

Security

This release fixes an issue where, after a firewalld reload, published container ports could be accessed directly from the local network, even when they were intended to be accessible only via a loopback address. CVE-2025-54388 / GHSA-x4rx-4gw3-53p4 / moby/moby#50506.

Packaging updates

• Update Buildx to v0.26.1. docker/docker-ce-packaging#1230
• Update Compose to v2.39.1. docker/docker-ce-packaging#1234
• Update Docker Model CLI plugin to v0.1.36. docker/docker-ce-packaging#1233

Go SDK

• cli/command/formatter: add TrunateID() utility as alternative for github.com/docker/docker/pkg/stringid.TrunateID(). docker/cli#6180

28.3.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 28.3.2 milestone
• moby/moby, 28.3.2 milestone
• Deprecated and removed features, see Deprecated Features.
• Changes to the Engine API, see API version history.

Bug fixes and enhancements

• Fix --use-api-socket not working correctly when targeting a remote daemon. docker/cli#6157
• Fix stray "otel error" logs being printed if debug logging is enabled. docker/cli#6160
• Quote SSH arguments when connecting to a remote daemon over an SSH connection to avoid unexpected expansion. docker/cli#6147
• Warn when DOCKER_AUTH_CONFIG is set during docker login and docker logout. docker/cli#6163

Packaging updates

• Update Compose to v2.38.2. docker/docker-ce-packaging#1225
• Update Docker Model CLI plugin to v0.1.33. docker/docker-ce-packaging#1227
• Update Go runtime to 1.24.5. moby/moby#50354

28.3.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 28.3.1 milestone

... (truncated)

Commits

• bea959c Merge pull request #50506 from robmry/backport-28.x/fix_firewalld_reload
• 3e9ff78 bridge: Reapply endpoint iptables rules on firewalld reload
• 29ed80a bridge: Trigger firewalld reload during bridge integration tests
• da489a1 Merge pull request #50478 from thaJeztah/28.x_backport_gha_bump_bk
• f173e45 Merge pull request #50480 from austinvazquez/cherry-pick-ea29dffaa541289591aa...
• e4b1f89 daemon/server: remove compatibility with API v1.4 auth-config on push
• 0c9e14d hack/buildkit-ref: temporarily bump BuildKit to head of v0.23 branch
• bf6d688 Merge pull request #50471 from austinvazquez/cherry-pick-b1ce0c89f0214cc6711c...
• 4205776 client: always send (empty) body on push
• e77ff99 Merge pull request #50354 from vvoland/50353-28.x
• Additional commits viewable in compare view

Updates go.etcd.io/etcd/api/v3 from 3.6.1 to 3.6.4

Release notes

Sourced from go.etcd.io/etcd/api/v3's releases.

v3.6.4

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux

ETCD_VER=v3.6.4
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)

ETCD_VER=v3.6.4
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits

• 5400cdc version: bump up to 3.6.4
• effaa79 Merge pull request #20387 from ahrtr/20250722_learner_3.6
• e5f4311 Check promotion against v2store when updating v2store
• e59bb1f Add an e2e test to reproduce the issue 20340
• 1ed440d version: bump up to 3.6.3
• e3a3365 Merge pull request #20370 from k8s-infra-cherrypick-robot/cherry-pick-20368-t...
• 0655761 Fix v2store check returning wrong result even there isn't any auth data
• 68ddc06 Merge pull request #20352 from k8s-infra-cherrypick-robot/cherry-pick-20328-t...
• ad00289 Updated help for --quota-backend-bytes
• fe698af Merge pull request #20330 from kishen-v/cherrypick-TestWatchRestore
• Additional commits viewable in compare view

Updates go.etcd.io/etcd/client/v3 from 3.6.1 to 3.6.4

Release notes

Sourced from go.etcd.io/etcd/client/v3's releases.

v3.6.4

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux

ETCD_VER=v3.6.4
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)

ETCD_VER=v3.6.4
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits

• 5400cdc version: bump up to 3.6.4
• effaa79 Merge pull request #20387 from ahrtr/20250722_learner_3.6
• e5f4311 Check promotion against v2store when updating v2store
• e59bb1f Add an e2e test to reproduce the issue 20340
• 1ed440d version: bump up to 3.6.3
• e3a3365 Merge pull request #20370 from k8s-infra-cherrypick-robot/cherry-pick-20368-t...
• 0655761 Fix v2store check returning wrong result even there isn't any auth data
• 68ddc06 Merge pull request #20352 from k8s-infra-cherrypick-robot/cherry-pick-20328-t...
• ad00289 Updated help for --quota-backend-bytes
• fe698af Merge pull request #20330 from kishen-v/cherrypick-TestWatchRestore
• Additional commits viewable in compare view

Updates golang.org/x/sys from 0.33.0 to 0.34.0

Commits

• 751c3c6 unix: add missing NFT_PAYLOAD_* consts on linux
• 0c740cc unix: update Go to 1.24.3
• d62d31c unix: update Linux constants and types to v6.14
• See full diff in compare view

Updates google.golang.org/grpc from 1.73.0 to 1.74.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.74.2

New Features

• grpc: introduce new DialOptions and ServerOptions (WithStaticStreamWindowSize, WithStaticConnWindowSize, StaticStreamWindowSize, StaticConnWindowSize) that force fixed window sizes for all HTTP/2 connections. By default, gRPC uses dynamic sizing of these windows based upon a BDP estimation algorithm. The existing options (WithInitialWindowSize, etc) also disable BDP estimation, but this behavior will be changed in a following release. (#8283)

API Changes

• balancer: add ExitIdle method to Balancer interface. Earlier, implementing this method was optional. (#8367)

Behavior Changes

• xds: Remove the GRPC_EXPERIMENTAL_ENABLE_LEAST_REQUEST environment variable that allows disabling the least request balancer with xDS. Least request was made available by default with xDS in v1.72.0. (#8248)
  • Special Thanks: @​atollena
• server: allow 0s grpc-timeout header values, which older gRPC-Java versions could send. This restores the behavior of grpc-go before v1.73.0. (#8439)

Bug Fixes

• googledirectpath: avoid logging the error message Attempt to set a bootstrap configuration... when creating multiple directpath channels. (#8419)

Performance Improvements

• transport: reduce heap allocations by pooling objects and avoiding method-to-closure conversions. (#8361)
• transport: reduce heap allocations by re-using mem.Reader objects. (#8360)

Documentation

• examples: add examples to demonstrate enabling experimental metrics using the OpenTelemetry plugin. (#8388)
  • Special Thanks: @​vinothkumarr227

Release 1.74.1

Version 1.74.1 retracts release v1.74.0 and itself. Release 1.74.0 was accidentally tagged on the wrong commit and should not be used. Version 1.73.0 should be used until 1.74.2 is released.

Release 1.74.0 was accidentally tagged on the wrong commit and should not be used. Version 1.73.0 should be used until 1.74.1 is released.

Commits

• e9e00cb Change version to 1.74.2 (#8470)
• bd7cb0a Change version to 1.74.2-dev (#8461)
• 002a22c Change version to 1.74.1 (#8455)
• 6e8e7e4 Retract v1.74.0 and v1.74.1 (#8457)
• 48c9e4d Change version to 1.74.1-dev (#8408)
• b8b6cff Change version to 1.74.0 (#8407)
• 077e2c3 Cherry-pick #8411, #8419, #8422, #8445 and #8451 to v1.74.x (#8454)
• b34f845 server: allow 0s grpc-timeout header values, as java is known to be able to s...
• 1787f94 xdsclient: export genericResourceTypeDecoder (#8406)
• 15299cc xdsclient: make a function to return the supported resource type implementati...
• Additional commits viewable in compare view

Updates go.etcd.io/etcd/client/pkg/v3 from 3.6.1 to 3.6.4

Release notes

Sourced from go.etcd.io/etcd/client/pkg/v3's releases.

v3.6.4

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux

ETCD_VER=v3.6.4
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)

ETCD_VER=v3.6.4
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits

• 5400cdc version: bump up to 3.6.4
• effaa79 Merge pull request #20387 from ahrtr/20250722_learner_3.6
• e5f4311 Check promotion against v2store when updating v2store
• e59bb1f Add an e2e test to reproduce the issue 20340
• 1ed440d version: bump up to 3.6.3
• e3a3365 Merge pull request #20370 from k8s-infra-cherrypick-robot/cherry-pick-20368-t...
• 0655761 Fix v2store check returning wrong result even there isn't any auth data
• 68ddc06 Merge pull request #20352 from k8s-infra-cherrypick-robot/cherry-pick-20328-t...
• ad00289 Updated help for --quota-backend-bytes
• fe698af Merge pull request #20330 from kishen-v/cherrypick-TestWatchRestore
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.41.0 to 0.42.0

Commits

• 76358aa go.mod: update golang.org/x dependencies
• See full diff in compare view

Updates golang.org/x/text from 0.26.0 to 0.27.0

Commits

• b6d2645 go.mod: update golang.org/x dependencies
• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
google.golang.org/grpc	[>= 1.35.a, < 1.36]
google.golang.org/grpc	[>= 1.36.a, < 1.37]
google.golang.org/grpc	[>= 1.37.a, < 1.38]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions