Skip to content

Bump go.k6.io/k6 from 1.8.0 to 1.8.1 in /long-running-test-arch/xk6 - #580

Merged
cleverchuk merged 1 commit into
mainfrom
dependabot/go_modules/long-running-test-arch/xk6/go.k6.io/k6-1.8.1
Aug 20, 2026
Merged

Bump go.k6.io/k6 from 1.8.0 to 1.8.1 in /long-running-test-arch/xk6#580
cleverchuk merged 1 commit into
mainfrom
dependabot/go_modules/long-running-test-arch/xk6/go.k6.io/k6-1.8.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 19, 2026

Copy link
Copy Markdown
Contributor

Bumps go.k6.io/k6 from 1.8.0 to 1.8.1.

Release notes

Sourced from go.k6.io/k6's releases.

v1.8.1

k6 v1.8.1 is here! This patch release includes:

  • Bug fix for the cloud secret source being enabled by default, which broke scripts that configure their own secret source
  • Bug fix for HTTP/2 negotiation and error classification under Go 1.27
  • Security updates for gRPC, golang.org/x/net, golang.org/x/text, golang.org/x/crypto, OpenTelemetry, klauspost/compress, and the Go toolchain

Bug fixes

  • #6274 Stops enabling the Grafana Cloud secret source by default in k6 cloud run --local-execution, reverting #5875. Scripts that configured their own secret source failed with no secret source with name "default" is configured. Explicitly configured secret sources now work again as they did in v1.7. Fixes #6093.
  • #6275 Fixes HTTP/2 negotiation and error classification under Go 1.27, which changed HTTP/2 negotiation and error behaviour. Keeps VUs on HTTP/2, classifies connection and GOAWAY errors consistently across Go versions, and preserves unknown HTTP/2 error buckets. Backport of #6234.

Maintenance and security updates

  • #6193, #6194 Updates google.golang.org/grpc to v1.82.1 [security].
  • #6187, #6189 Updates golang.org/x/net to v0.56.0 [security].
  • #6188, #6190 Updates golang.org/x/text to v0.39.0 [security].
  • #6207 Updates go.opentelemetry.io/otel to v1.44.0 [security].
  • #6220 Updates github.com/klauspost/compress to v1.18.7 [security].
  • #6135 Updates the Go toolchain to v1.25.12 [security].
  • Updates golang.org/x/crypto to v0.53.0 [security].
Commits
  • 73b044f Add v1.8.1 release notes (#6281)
  • c0e5391 Update k6 version to 1.8.1 (#6282)
  • 4fbdfe9 Stop enabling the cloud secret source by default (#6274)
  • ce1379a Backport #6234: fix HTTP/2 error handling on Go 1.27 (#6275)
  • 0600e04 fix(security/unknown/): update module golang.org/x/text to v0.39.0 [security]...
  • b81472e fix(security/unknown/examples/grpc_server): update module golang.org/x/net to...
  • 9c162ef fix(security/high/examples/grpc_server): update module google.golang.org/grpc...
  • ed4a379 fix(security/unknown/): update module go.opentelemetry.io/otel to v1.44.0 [se...
  • a974874 fix(security/unknown/): update module github.com/klauspost/compress to v1.18....
  • 94debff fix(security/unknown/): update module github.com/klauspost/compress to v1.18....
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [go.k6.io/k6](https://github.com/grafana/k6) from 1.8.0 to 1.8.1.
- [Release notes](https://github.com/grafana/k6/releases)
- [Commits](grafana/k6@v1.8.0...v1.8.1)

---
updated-dependencies:
- dependency-name: go.k6.io/k6
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 19, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 19, 2026 19:53
@dependabot dependabot Bot added the go Pull requests that update go code label Aug 19, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 19, 2026 19:53
@cleverchuk
cleverchuk merged commit 1864d29 into main Aug 20, 2026
16 checks passed
@cleverchuk
cleverchuk deleted the dependabot/go_modules/long-running-test-arch/xk6/go.k6.io/k6-1.8.1 branch August 20, 2026 14:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Development

Successfully merging this pull request may close these issues.

1 participant