Bump the all-minor-patch group across 1 directory with 7 updates

[dependabot]

Bumps the all-minor-patch group with 5 updates in the / directory:

Package	From	To
github.com/container-storage-interface/spec	1.12.0	1.13.0
github.com/kubernetes-csi/csi-test/v5	5.4.0	5.5.0
github.com/sirupsen/logrus	1.9.4	1.10.0
github.com/stretchr/testify	1.11.1	1.12.1
google.golang.org/protobuf	1.36.11	1.36.12

Updates github.com/container-storage-interface/spec from 1.12.0 to 1.13.0

Release notes

Sourced from github.com/container-storage-interface/spec's releases.

v1.13.0

Breaking changes/Deprecations:

• None

Additions:

• #604 - [ALPHA] Add Controller List/Get VolumeHealth RPCs by @​gnufied
• #606 - [ALPHA] Add Snapshot Topology by @​mdzraf

Clarifications/Corrections/Fixes:

• #587 - Add note about possibly lower available capacity on MountVolume volumes by @​nixpanic
• #563 - describe ABORTED as error message for CreateVolumeGroupSnapshot by @​nixpanic
• #605 - Fix RESOURCE_EXHAUSTED error code from 13 to 8 by @​nixpanic

Dependencies:

• #602/#607 - Bump golang from 1.23 to 1.25

New Contributors

• @​nixpanic made their first contribution in container-storage-interface/spec#587
• @​mdzraf made their first contribution in container-storage-interface/spec#606

Full Changelog: container-storage-interface/spec@v1.12.0...v1.13.0

v1.13.0-rc1

No release notes provided.

Commits

• b516e92 Merge pull request #607 from container-storage-interface/dependabot/go_module...
• 3c04186 Bump golang.org/x/net from 0.48.0 to 0.55.0
• ad56747 Merge pull request #606 from mdzraf/SnapTopologyPOC
• 5334f34 Introducing Snapshot Topology
• cd9e7ad Merge pull request #604 from gnufied/implement-volume-health
• 8e06851 Add documentation about reserved fields
• 6f80119 Update wording for DATA_LOSS and capabilities
• 72e2e56 Update the CSI spec to address the review comments
• 0c33790 Add volume health proposal
• e74e0e8 Fix RESOURCE_EXHAUSTED error code from 13 to 8 (#605)
• Additional commits viewable in compare view

Updates github.com/kubernetes-csi/csi-test/v5 from 5.4.0 to 5.5.0

Release notes

Sourced from github.com/kubernetes-csi/csi-test/v5's releases.

v5.5.0

Supported CSI spec versions

1.12.0

Full Changelog

https://github.com/kubernetes-csi/csi-test/blob/v5.5.0/CHANGELOG/CHANGELOG-5.5.md

Commits

• 2f1e2f2 Merge pull request #610 from xing-yang/changelog_5.5.0
• a3d9a7f Add changelog for v5.5.0
• 339599e Merge pull request #593 from chimanjain/repl-depr-methods
• 9399da2 Merge pull request #602 from chrishenzie/rwop-node-publish-test
• 8b9b7b6 Merge pull request #588 from kubernetes-csi/dependabot/go_modules/k8s.io/klog...
• cd98c55 Merge branch 'master' into repl-depr-methods
• 6e115b8 Merge pull request #609 from kubernetes-csi/dependabot/go_modules/google.gola...
• 00a1d1b Assert SINGLE_NODE_SINGLE_WRITER behavior
• 4544823 Refactor NodeService volume setup helpers to provide capabilities
• 1ae1774 Bump k8s.io/klog/v2 from 2.130.1 to 2.140.0
• Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.9.4 to 1.10.0

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.0

Logrus v1.10.0

This release focuses on substantial performance improvements, concurrency correctness, and better interoperability with modern Go logging APIs.

🚀 Performance

Major improvements across TextFormatter, entry handling, and common logger paths:

• ~17% lower geomean runtime across the benchmark suite
• ~27% higher geomean formatter throughput
• Common enabled logging paths are ~30–44% faster
• WithError is ~40% faster
• Chained fields are ~46% faster
• TextFormatter paths are up to ~40% faster
• Allocation counts are reduced by ~25–74% across measured TextFormatter cases, with the largest reductions in colored output

The improvements also show up in complete logger paths:

• Logger + TextFormatter is ~31% faster, with ~24% fewer allocations
• Logger + JSONFormatter is ~21% faster, with ~10% fewer allocations

JSONFormatter itself remains largely unchanged in runtime performance, with small allocation reductions.

🔄 log/slog interoperability

v1.10 adds bidirectional interoperability between Logrus and Go's log/slog:

• A Logrus slog hook can forward existing Logrus entries to an slog logger.
• hooks/slog.NewHandler implements slog.Handler, allowing log/slog records to use an existing Logrus logger and its hooks, formatter, and output.
• The handler preserves levels, fields, groups, context, record timestamps, and optionally caller information.
• Caller reporting is configured per handler, without requiring Logrus's logger-wide ReportCaller option.
• Custom slog levels can be mapped to Logrus levels.
• The hook and handler can be combined, providing a practical path for incrementally migrating from Logrus to log/slog without requiring an all-at-once transition.

This allows applications to migrate their logging API and logging backend independently: existing Logrus call sites can start using an slog backend, while new slog code can continue using an established Logrus setup.

🔒 Concurrency & Correctness

• Fix reentrant logging deadlocks, including logging from within MarshalJSON or formatter code.
• Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel, contrary to their documented behavior.
• Eliminate race conditions in entry and formatter paths.
• Improve locking boundaries around formatters and hooks.

➕ Added

• TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching behavior on other platforms.
• Entry.Caller can now be set explicitly and is preserved across derived entries. When caller reporting is enabled, Logrus only detects and populates caller information when none was provided, allowing custom caller detection and wrapper-aware logging without adding additional caller configuration APIs.
• Add minimal, composable logging interfaces for each log level, allowing consumers to depend on narrower interfaces and making logging implementations easier to substitute or adapt.
• Expand CI verification to include TinyGo and every cross-compile target reported by go tool dist list, improving coverage across alternative toolchains and platforms.

... (truncated)

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.0

Fixes:

• Fix reentrant logging deadlocks in formatter paths.
• Fix race conditions in formatter and entry handling.
• Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel. Use the corresponding Panic methods when panic behavior is desired.
• Improve concurrency safety around formatter and hook access.

Features:

• Add slog hook for forwarding Logrus entries to log/slog.
• Add slog.Handler for forwarding log/slog records to a Logrus logger, including levels, fields, groups, context, time, and optional caller reporting. The hook and handler can also be combined to help migrate between Logrus and log/slog.
• Add minimal, composable logging interfaces for each log level. This enables consumers to depend on narrower interfaces, making it easier to substitute or adapt logging implementations.
• Allow Entry.Caller to be set explicitly and preserve it across derived entries, enabling custom caller detection without Logrus overwriting caller information when ReportCaller is enabled.

Changed:

• Raise minimum supported Go version to 1.23.
• TextFormatter now renders []byte values as raw/quoted strings instead of slice-of-ints.
• TextFormatter now uses distinct dimmed colors for debug and trace output.
• TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching the behavior on other platforms.
• Entry.HasCaller is now deprecated in favor of checking Entry.Caller directly.
• Deprecated MutexWrap, which was unintentionally exposed as public API. It remains available as an alias for compatibility but should not be used directly.

Performance:

• Significantly improve TextFormatter performance and reduce allocations.
• Optimize common Entry and Logger hot paths.
• Reduce allocations in caller reporting.
• ~17% lower geomean runtime and ~27% higher formatter throughput overall.
• Common enabled logging paths are ~30–44% faster.
• TextFormatter paths are up to ~40% faster, with allocation counts reduced by 25–74% across the measured formatter cases.

Commits

• 457e372 Merge pull request #1573 from thaJeztah/update_colors
• 6b6a3a6 formatter: differentiate debug and trace colors
• 8ebae73 Merge pull request #1572 from thaJeztah/update_logs
• f156a33 docs: clarify formatter field handling
• 84cedf9 Merge pull request #1571 from thaJeztah/slog_hookopts
• a3e1580 hooks/slog: add HookOptions
• e5b377a Merge pull request #1570 from thaJeztah/slog_leveler
• 30a5487 hooks/slog: add level adapters
• 0cee61e Merge pull request #1569 from thaJeztah/slog_noleveler
• 4069973 hooks/slog: use concrete slog.Level for hook level mapping
• Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

• Change yaml library to go.yaml.in/yaml/v3 by @​harryzcy in stretchr/testify#1935
• change yaml library to go.yaml.in/yaml/v3 by @​boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

• @​harryzcy made their first contribution in stretchr/testify#1935
• @​boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

• Change yaml library to go.yaml.in/yaml/v3 by @​harryzcy in stretchr/testify#1935
• change yaml library to go.yaml.in/yaml/v3 by @​boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

• @​harryzcy made their first contribution in stretchr/testify#1935
• @​boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

• assert: make *AssertionFunc types just aliases by @​dolmen in stretchr/testify#1563

Fixes

• mock: avoid panic when expected type is nil in Arguments.Diff by @​mutaiib in stretchr/testify#1775
• mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @​brackendawson in stretchr/testify#1786
• suite: validate method signatures and continue execution for valid tests by @​vyas-git in stretchr/testify#1665
• assert.PanicsWithError: report error message by @​olivergondza in stretchr/testify#1400
• assert: IsIncreasing et al can return false w/out failing by @​brackendawson in stretchr/testify#1787
• add type to error message of assert.Same by @​egawata in stretchr/testify#1792
• mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @​brackendawson in stretchr/testify#1795
• assert: truncate very long objects in test failure messages by @​brackendawson in stretchr/testify#1646
• assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @​nghiack7 in stretchr/testify#1888
• suite: prevent panic when SetupTest skips with HandleStats by @​blackwell-systems in stretchr/testify#1877

Documentation, Build & CI

• CI: test also with Go 1.23 by @​dolmen in stretchr/testify#1783
• Vendor unmaintained github.com/pmezard/go-difflib by @​brackendawson in stretchr/testify#1708
• Promote ccoVeille to maintainer by @​brackendawson in stretchr/testify#1784
• build(deps): bump actions/setup-go from 5 to 6 by @​dependabot[bot] in stretchr/testify#1790
• assert.YAMLEq: Document mutlidoc behavior by @​brackendawson in stretchr/testify#1791
• _codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @​dolmen in stretchr/testify#1782
• doc: remove ineffective inline code blocks by @​brackendawson in stretchr/testify#1714
• Tag generated assertions as non-generated in new .gitattributes by @​ubunatic in stretchr/testify#1815

... (truncated)

Commits

• 959dbda Merge pull request #1935 from harryzcy/yaml-update
• 9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
• 001eb79 Merge pull request #1905 from Kentzo/patch-1
• ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
• 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
• f8c01f3 mock: Mock.Return does not exist anymore
• 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
• a11649e assert: make *AssertionFunc type just aliases
• dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
• 098f8d7 _codegen: use strings.Builder
• Additional commits viewable in compare view

Updates golang.org/x/sys from 0.43.0 to 0.46.0

Commits

• d58dcfa unix: add GPIO constants and structs
• 397d5f8 unix: update to Linux kernel 7.0
• 0a387f7 cpu: detect zbc extension on riscv64
• 758f71c cpu: add LLACQ_SCREL, SCQ, DBAR_HINTS detection for loong64
• 99666ae unix: merge Linux readv/writev implementation with Darwin/OpenBSD
• e4444cb windows: add NtSetEaFile, NtQueryEaFile and NtQueryInformationFile
• 04396e8 unix: add Readv, Writev, Preadv, Pwritev for OpenBSD
• fb1facd windows: avoid uint16 overflow in NewNTUnicodeString
• 94ad893 windows: add GetIfTable2Ex, GetIpInterface{Entry,Table}, GetUnicastIpAddressT...
• 54fe89f cpu: use IsProcessorFeaturePresent to calculate ARM64 on windows
• Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.80.0 to 1.82.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.0

Behavior Changes

• server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)
• transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)
• balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

• experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)
  • Special Thanks: @​seth-epps
• client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)
  • Special Thanks: @​chengxilo
• server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)
  • Special Thanks: @​dfinkel

Bug Fixes

• xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)
• grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)
  • Special Thanks: @​evilgensec
• stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)
• encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#9135)
• channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#9109)

Release 1.81.1

Security

• xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)
  • Special Thanks: @​al4an444

Bug Fixes

• otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)

Release 1.81.0

Behavior Changes

• balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#8808)

Dependencies

• Minimum supported Go version is now 1.25. (#8969)

Bug Fixes

• xds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (#8956)
• transport: Send a RST_STREAM when receiving an END_STREAM when the stream is not already half-closed. (#8832)
• xds: Fix ADS resource name validation to prevent a panic. (#8970)

... (truncated)

Commits

• bd23985 Change version to 1.82.0 (#9170)
• 0f3086d Fix minor issues not covered by PR #9137 (#9147)
• fef07fb internal: Split v3procservicepb import into pb and grpc for extproc (#9163)
• 91dd64f transport: surface subsequent data when receiving non-gRPC header (#8929)
• adc97de test/kokoro: add config for regional-td test (#9158)
• 57c9ff1 xds: ensure full-string matching for RBAC Filter rules (#9148)
• b58f32d server: Set a pprof label on new stream goroutines (#9082)
• 6c98be3 refactor(transport): extract shared stream state handling logic in `loopyWrit...
• bcaa6f4 rls: only reset backoff on recovery from TRANSIENT_FAILURE (#9137)
• 429e6e0 balancer: expose endpoint weight and hostname as experimental APIs (#9074)
• Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions