build(deps): bump the tools-mod group in /tools/mod with 7 updates

[dependabot]

Bumps the tools-mod group in /tools/mod with 7 updates:

Package	From	To
github.com/alexfalkowski/gocovmerge	1.3.14	1.4.0
github.com/golangci/golangci-lint	1.61.0	1.64.5
github.com/google/yamlfmt	0.14.0	0.16.0
github.com/grpc-ecosystem/grpc-gateway/v2	2.24.0	2.26.1
go.etcd.io/raft/v3	3.6.0-beta.0	3.6.0
gotest.tools/v3	3.5.1	3.5.2
honnef.co/go/tools	0.5.1	0.6.0

Updates github.com/alexfalkowski/gocovmerge from 1.3.14 to 1.4.0

Changelog

Sourced from github.com/alexfalkowski/gocovmerge's changelog.

v1.4.0 - 2025-02-11

• ea41ba0 feat(deps): bump golang.org/x/tools from 0.29.0 to 0.30.0 (#113)
• 93c65ca build(deps): bump bin from 5b56b0c to 3e0336a (#112)
• 64bf234 build(deps): bump bin from cb313fe to 5b56b0c (#110)
• 900cf5a build(ci): use alexfalkowski/go:1.7 (#109)
• 5220b86 build(ci): update go:1.5 (#108)
• e243ba9 build(ci): use feat for dependabot (#107)

v1.3.18 - 2025-01-14

• b0f14f7 fix(deps): bump golang.org/x/tools from 0.28.0 to 0.29.0 (#104)
• 9d1f6fb build(deps): bump bin from bde1e44 to cb313fe (#106)
• bc22b54 build(deps): bump bin from cf4a7d3 to bde1e44 (#103)

v1.3.17 - 2024-12-10

• f7d0220 fix(deps): bump golang.org/x/tools from 0.27.0 to 0.28.0 (#101)

v1.3.16 - 2024-11-19

• 5c24854 fix(deps): bump golang.org/x/tools from 0.26.0 to 0.27.0 (#100)
• fd70539 build(deps): bump bin from e8f9d73 to cf4a7d3 (#99)

v1.3.15 - 2024-10-07

• 3a7493d fix(deps): bump golang.org/x/tools from 0.25.0 to 0.26.0 (#98)
• 44f3c60 build(deps): bump bin from 8b87d26 to e8f9d73 (#97)
• aa7de2d build(deps): bump bin from b975eab to 8b87d26 (#96)
• 234f975 build(deps): bump bin from 376a295 to b975eab (#95)

Commits

• db1aad5 chore(release): v1.4.0 [ci skip]
• ea41ba0 feat(deps): bump golang.org/x/tools from 0.29.0 to 0.30.0 (#113)
• 93c65ca build(deps): bump bin from 5b56b0c to 3e0336a (#112)
• 64bf234 build(deps): bump bin from cb313fe to 5b56b0c (#110)
• 900cf5a build(ci): use alexfalkowski/go:1.7 (#109)
• 5220b86 build(ci): update go:1.5 (#108)
• e243ba9 build(ci): use feat for dependabot (#107)
• 6a1f412 chore(release): v1.3.18 [ci skip]
• b0f14f7 fix(deps): bump golang.org/x/tools from 0.28.0 to 0.29.0 (#104)
• 9d1f6fb build(deps): bump bin from bde1e44 to cb313fe (#106)
• Additional commits viewable in compare view

Updates github.com/golangci/golangci-lint from 1.61.0 to 1.64.5

Release notes

Sourced from github.com/golangci/golangci-lint's releases.

v1.64.5

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

• a43c84c5543785870617ec578d29a3d4fc58b720 build(deps): bump github.com/gostaticanalysis/forcetypeassert from 0.1.0 to 0.2.0 (#5409)
• 4be8bf8053eaef5d8c5aef0a3771c75e16a0d8b7 build(deps): bump github.com/securego/gosec/v2 from 2.22.0 to 2.22.1 (#5410)
• e352220b9c3016dbd40243ce2701fc32fa2654e9 build(deps): bump github.com/tdakkota/asciicheck from 0.3.0 to 0.4.0 (#5411)
• 0a603e49e5e9870f5f9f2035bcbe42cd9620a9d5 fix: add missing new-from-merge-base flag (#5412)

v1.64.4

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

• 04aec4f787c25a737641f3d434059880d2af0f53 gci: fix section parsing (#5407)

v1.64.3

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

• b8920ddc2352bf2a679c2424db16d2b36c2dbbce build(deps): bump github.com/go-critic/go-critic from 0.11.5 to 0.12.0 (#5400)
• 1a0b85b0ff9f5c90b72a5b20d34dd1620d860181 build(deps): bump github.com/mgechev/revive from 1.6.0 to 1.6.1 (#5399)
• 750e1abb31ec7883586d87e10722645a244317fb build(deps): bump github.com/nunnatsa/ginkgolinter from 0.18.4 to 0.19.0 (#5404)
• 08ae8055872f911072dd2c29b1454fc46a914245 gci: fix standard packages list for go1.24 (#5402)

v1.64.2

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

... (truncated)

Changelog

Sourced from github.com/golangci/golangci-lint's changelog.

v1.64.5

1. Bug fixes
   • Add missing flag new-from-merge-base-flag
2. Linters bug fixes
   • asciicheck: from 0.3.0 to 0.4.0
   • forcetypeassert: from 0.1.0 to 0.2.0
   • gosec: from 2.22.0 to 2.22.1

v1.64.4

1. Linters bug fixes
   • gci: fix standard packages list for go1.24

v1.64.3

1. Linters bug fixes
   • ginkgolinter: from 0.18.4 to 0.19.0
   • go-critic: from 0.11.5 to 0.12.0
   • revive: from 1.6.0 to 1.6.1
   • gci: fix standard packages list for go1.24
2. Misc.
   • Build Docker images with go1.24

v1.64.2

This is the last minor release of golangci-lint v1. The next release will be golangci-lint v2.

1. Enhancements
   • 🎉 go1.24 support
   • New issues.new-from-merge-base option
   • New run.relative-path-mode option
2. Linters new features
   • copyloopvar: from 1.1.0 to 1.2.1 (support suggested fixes)
   • exptostd: from 0.3.1 to 0.4.1 (handles golang.org/x/exp/constraints.Ordered)
   • fatcontext: from 0.5.3 to 0.7.1 (new option: check-struct-pointers)
   • perfsprint: from 0.7.1 to 0.8.1 (new options: integer-format, error-format, string-format, bool-format, and hex-format)
   • revive: from 1.5.1 to 1.6.0 (new rules: redundant-build-tag, use-errors-new. New option early-return.early-return)
3. Linters bug fixes
   • go-errorlint: from 1.7.0 to 1.7.1
   • gochecknoglobals: from 0.2.1 to 0.2.2
   • godox: from 006bad1f9d26 to 1.1.0
   • gosec: from 2.21.4 to 2.22.0
   • iface: from 1.3.0 to 1.3.1
   • nilnesserr: from 0.1.1 to 0.1.2
   • protogetter: from 0.3.8 to 0.3.9
   • sloglint: from 0.7.2 to 0.9.0
   • spancheck: fix default StartSpanMatchersSlice values
   • staticcheck: from 0.5.1 to 0.6.0

... (truncated)

Commits

• 0a603e4 fix: add missing new-from-merge-base flag (#5412)
• a43c84c build(deps): bump github.com/gostaticanalysis/forcetypeassert from 0.1.0 to 0...
• e352220 build(deps): bump github.com/tdakkota/asciicheck from 0.3.0 to 0.4.0 (#5411)
• 4be8bf8 build(deps): bump github.com/securego/gosec/v2 from 2.22.0 to 2.22.1 (#5410)
• b59bd60 docs: update GitHub Action assets (#5408)
• 04aec4f gci: fix section parsing (#5407)
• 5984eab docs: update GitHub Action assets (#5406)
• 09167d7 dev: update Docker base images (#5405)
• 750e1ab build(deps): bump github.com/nunnatsa/ginkgolinter from 0.18.4 to 0.19.0 (#5404)
• 08ae805 gci: fix standard packages list for go1.24 (#5402)
• Additional commits viewable in compare view

Updates github.com/google/yamlfmt from 0.14.0 to 0.16.0

Release notes

Sourced from github.com/google/yamlfmt's releases.

v0.16.0

Fixing yaml library stuff

This release features fixes for a couple problems in the yaml library, and one new feature.

Features

Alternate Array Indentation

There is now support for array_indent, indenting arrays at a different level than anything else, and indent_root_array, an option to indent an array that is at the root of the document.
To tell you the truth, I couldn't have possibly imagined anyone wanting this. It's quite outlandish to me. I decided to implement it because the request was well specified (#237), it was very simple to implement, and it could be implemented in a completely unintrusive and opt-in way, without me needing to worry whether other parsing might break as a result. Given that, I figured adding new options couldn't hurt!

Bug Fixes

Nested Indentless Arrays

There was an edge case where nested arrays would get collapsed when doing indentless arrays. This has been fixed now and should function as expected.

Comment Rendering Above Document Start

Comments above a document start used to end up rendered below the document start token with an extra newline. After digging into it I found out that this was a deliberate choice made by the upstream library (i.e. it was not in libyaml which that library was ported from) and I consider it an odd choice. I've changed it to work how one would expect, with comments above document start being rendered above the --- token.
I decided to make the change directly without guarding it with an option, since I thought the default behaviour was so odd and I can't imagine a world where someone wants it that way. But yaml is stupid, you never know if there's a random edge case I couldn't fathom that was broken by this. Hoping it will be okay, but might need a patch release if there's something I missed.

Contributors

• Thanks @​abicky for fixing the nested indentless array bug
• Thanks @​ELLIOTTCABLE for the original feature request for array indentation and contributing to the development of it

v0.15.0

Happy 2025!

New year new yamlfmt release! This one once again only features things contributed by the community. I am working on a major feature that I was hoping to finish before pushing this release out, but I ran into a snag and I didn't want to delay these things getting released.

Breaking Changes

New Minimum Go Version is 1.21

Originally I was keeping this library compatible with Go 1.18, which was the latest at the time. There was a time when I tried to update the minimum version to Go 1.20 when it was released, and I ended up getting complaints so I kept it where it was. Go 1.18 is long EOL, and it makes more sense as an application to stay up to date to in-support releases. So the new rule of thumb will be to maintain compatibility with the oldest non-EOL version of Go going forward.

Features

gitlab output format

Generate yamlfmt results in GitLab Code Quality report format. See more info here.

gitignore match type

We had support already for gitignore_excludes, i.e. using a gitignore file to match which files to exclude, similar to how it works with Git. However, it can be useful for positive matches, i.e. what files to actually include, since the gitignore patterns can also be negated meaning that all includes and excludes can be managed by a single gitignore-style file. See more info here.

yamlfmt Docker image

... (truncated)

Commits

• 928ce33 update yaml to v0.9.0 (#241)
• 87af88e add array indent functionality (#239)
• 3b54c67 update yaml package (#238)
• da185ab fix: correct link to configuration docs (#233)
• 16479a1 Update pre-commit.md (#231)
• 81ffee4 fix: add configuration for building container images (#230)
• 1bfe5e4 fix typos in test names (#227)
• 11e3c04 docs: change the language name from Golang to Go (#226)
• 399ca35 Feature: unified include/exclude file (#224)
• dff1eaa Document and improve integration test case creation. (#221)
• Additional commits viewable in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.24.0 to 2.26.1

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.26.1

What's Changed

• Prevent overwriting description of map fields by @​fredde-fisk in grpc-ecosystem/grpc-gateway#5158
• 5113. Validation of oneof nested objects by @​optician in grpc-ecosystem/grpc-gateway#5211

New Contributors

• @​fredde-fisk made their first contribution in grpc-ecosystem/grpc-gateway#5158
• @​optician made their first contribution in grpc-ecosystem/grpc-gateway#5211

Full Changelog: grpc-ecosystem/grpc-gateway@v2.26.0...v2.26.1

v2.26.0

What's Changed

• fix(deps): Relax the minimum required go version further by @​bobrik in grpc-ecosystem/grpc-gateway#5094
• protoc-gen-openapiv2: Do not add invisible enum values as default by @​navruzm in grpc-ecosystem/grpc-gateway#5129
• Only write Content-Length if the runtime.WithWriteContentLength() option is specified by @​joshgarnett in grpc-ecosystem/grpc-gateway#5151

New Contributors

• @​bobrik made their first contribution in grpc-ecosystem/grpc-gateway#5094
• @​navruzm made their first contribution in grpc-ecosystem/grpc-gateway#5129

Full Changelog: grpc-ecosystem/grpc-gateway@v2.25.1...v2.26.0

v2.25.1

Support the new Opaque API in openapiv2 generated files

This release contains breaking changes from v2.25.0, in that the previously deprecated EnumDescriptor and Descriptor methods on the struct types in the openapiv2 options package have been removed. This seems to be a requirement to generate the new Hybrid API. Please open an issue if you were depending on these functions and we'll see what we can do about it.

What's Changed

• protoc-gen-openapiv2: generate hybrid files by @​johanbrandhorst in grpc-ecosystem/grpc-gateway#5088

Full Changelog: grpc-ecosystem/grpc-gateway@v2.25.0...v2.25.1

v2.25.0

What's Changed

• Extend google.protobuf.EnumOptions for Schema by @​hown3d in grpc-ecosystem/grpc-gateway#4931
• fix(deps): Relax the minimum required go version by @​nhhagen in grpc-ecosystem/grpc-gateway#5022
• Correctly expand path variables for Update Methods. by @​nullaus in grpc-ecosystem/grpc-gateway#5041
• Use org_golang_x_tools as module extension by @​mering in grpc-ecosystem/grpc-gateway#5043
• fix: update to protobuf 1.36.0 and exclude synthetic oneofs during populateFieldValueFromPath by @​aerialls in grpc-ecosystem/grpc-gateway#5072

New Contributors

• @​hown3d made their first contribution in grpc-ecosystem/grpc-gateway#4931
• @​nhhagen made their first contribution in grpc-ecosystem/grpc-gateway#5022
• @​nullaus made their first contribution in grpc-ecosystem/grpc-gateway#5041
• @​mering made their first contribution in grpc-ecosystem/grpc-gateway#5043
• @​aerialls made their first contribution in grpc-ecosystem/grpc-gateway#5072

Full Changelog: grpc-ecosystem/grpc-gateway@v2.24.0...v2.25.0

Commits

• 3b8ac9f 5113. Validation of oneof nested objects (#5211)
• 4f1457d chore(deps): update googleapis digest to 2431239 (#5214)
• fb17f6e chore(deps): update googleapis digest to 8e62267 (#5213)
• 2fd9128 chore(deps): update googleapis digest to ad99638 (#5212)
• 3d82775 fix(deps): update module google.golang.org/protobuf to v1.36.5 (#5210)
• 801f278 chore(deps): update googleapis digest to fed8c26 (#5209)
• 9cbbcaf chore(deps): update googleapis digest to 2f843e2 (#5208)
• 9adca76 fix(deps): update module golang.org/x/text to v0.22.0 (#5206)
• 72f360d chore(deps): update golang docker tag to v1.23.6 (#5205)
• ce46021 chore(deps): update googleapis digest to f426820 (#5204)
• Additional commits viewable in compare view

Updates go.etcd.io/raft/v3 from 3.6.0-beta.0 to 3.6.0

Release notes

Sourced from go.etcd.io/raft/v3's releases.

v3.6.0

See the CHANGELOG/v3.6.0 for more details.

Commits

• f35a022 Merge pull request #261 from marcelfranca/issue/19333-main
• dc243e2 Update goland toolchain to 1.23.6
• f69d03f Merge pull request #259 from ahrtr/remove_changelog_20250204
• bcfd740 Remove changelog from release-3.6
• d797075 Merge pull request #256 from etcd-io/dependabot/github_actions/github/codeql-...
• 42e09ba build(deps): bump github/codeql-action from 3.28.6 to 3.28.8
• c9dabd0 Merge pull request #255 from etcd-io/dependabot/github_actions/github/codeql-...
• 7200b47 Merge pull request #254 from etcd-io/dependabot/github_actions/actions/setup-...
• c87be08 build(deps): bump github/codeql-action from 3.28.1 to 3.28.6
• 62f6679 build(deps): bump actions/setup-go from 5.2.0 to 5.3.0
• Additional commits viewable in compare view

Updates gotest.tools/v3 from 3.5.1 to 3.5.2

Release notes

Sourced from gotest.tools/v3's releases.

v3.5.2

What's Changed

• assert: ensure message is always displayed & fix under bazel by @​cstrahan in gotestyourself/gotest.tools#276
• go.mod: golang.org/x/tools v0.13.0 for go1.22+ compatibility by @​thaJeztah in gotestyourself/gotest.tools#282
• poll: Continue(): use format.Message for formatting by @​thaJeztah in gotestyourself/gotest.tools#279
• fix TestFromDirSymlink on Windows due to missing drive-letter by @​thaJeztah in gotestyourself/gotest.tools#283
• Fix various linting issues and minor bugs by @​thaJeztah in gotestyourself/gotest.tools#280
• fix badges in readme, gofmt, and minor linting fix by @​thaJeztah in gotestyourself/gotest.tools#284
• circleci: add go1.21, go1.22, go1.23, and update golangci-lint to v1.60.3 by @​thaJeztah in gotestyourself/gotest.tools#285
• assert, assert/cmp: un-deprecate assert.ErrorType for now by @​thaJeztah in gotestyourself/gotest.tools#286

New Contributors

• @​cstrahan made their first contribution in gotestyourself/gotest.tools#276

Full Changelog: gotestyourself/gotest.tools@v3.5.1...v3.5.2

Commits

• 0b81523 Merge pull request #286 from thaJeztah/undeprecate_ErrorType
• c5dad8f Merge pull request #285 from thaJeztah/update_go_versions
• 160ab0e Remove go1.18 and go1.19
• 8569bbc Merge pull request #284 from thaJeztah/cleanup_readme
• 4256834 assert, assert/cmp: un-deprecate assert.ErrorType for now
• eb32186 circleci: update golangci-lint to v1.60.3
• 5fc8473 circleci: add go1.21, go1.22, go1.23
• 6f26df9 circleci: test generics on go1.20 and windows as well
• 732dfcf internal/difflib: rename funcs that collided with built-ins
• 7d95f55 internal/difflib: gofmt
• Additional commits viewable in compare view

Updates honnef.co/go/tools from 0.5.1 to 0.6.0

Release notes

Sourced from honnef.co/go/tools's releases.

Staticcheck 2025.1 (v0.6.0)

Added Go 1.24 support

This release adds support for Go 1.24.

Checks

Changed checks

The following checks have been improved:

• U1000 treats all fields in a struct as used if the struct has a field of type structs.HostLayout.
• S1009 now emits a clearer message.
• S1008 no longer recommends simplifying branches that contain comments (issue 704, issue 1488).
• S1009 now flags another redundant nil check (issue 1605).
• QF1002 now emits a valid automatic fix for switches that use initialization statements (issue 1613).

Staticcheck 2024.1.1 (v0.5.1)

This release fixes the detection of the used Go version when Go was compiled with experimental features such as rangefunc or boringcrypto (#1586).

Staticcheck 2024.1 (v0.5.0)

Backwards incompatible changes

Staticcheck 2024.1 contains the following backwards incompatible changes:

• The keyify utility has been removed. The recommended alternative is gopls.
• staticcheck -merge now exits with a non-zero status if any problems have been found.

Improved Go 1.22 support

This release updates Staticcheck’s database of deprecated standard library APIs to cover the Go 1.22 release. Furthermore, checks have been updated to correctly handle the new “for” loop variable scoping behavior as well as ranging over integers.

Added Go 1.23 support

Staticcheck 2024.1 has full support for iterators / range-over-func. Furthermore, SA1015 will skip any code targeting Go 1.23 or newer, as it is now possible to use time.Tick without leaking memory.

Improved handling of Go versions

Go 1.21 more rigorously defined the meaning of the go directive in go.mod files, as well as its interactions with //go:build go1.N build constraints. The go directive now specifies a minimum Go version for the module. Furthermore, it sets the language version that is in effect, which may change the semantics of Go code. For example, before Go 1.22, loop variables were reused across iterations, but since Go 1.22, loop variables only exist for the duration of an iteration. Modules that specify go 1.22 will use the new semantics, while modules that specify an older version will not.

Individual files can both upgrade and downgrade their language version by using //go:build go1.N directives. In a module that requires Go 1.22, a file specifying Go 1.21 will experience the old loop variable semantics, and vice versa. Because the Go module as a whole still specifies a minimum version, even files specifying an older version will have access to the standard library of the minimum version.

Staticcheck 2024.1 takes all of this into consideration when analyzing the behavior of Go code, when determining which checks are applicable, and when making suggestions. Older versions of Staticcheck were already aware of Go versions, but 2024.1 works on a more fine-grained, per-file basis, and differentiates between the pre- and post-1.21 semantics of the go directive.

The -go command line flag continues to exist. It will override any module-based version selection. This is primarily useful for Go modules that target older Go versions (because here, the go directive didn’t specify a minimum version), or when working outside of Go modules.

To prevent misinterpreting code, Staticcheck now refuses to analyze modules that require a version of Go that is newer than that with which Staticcheck was built.

Checks

New checks

... (truncated)

Commits

• 5af2e5f Version 2025.1 (v0.6.0)
• 2010dd3 website: go mod tidy
• 91a891c website: add 2025.1 release notes
• f6cedc0 Depend on Go 1.23
• bcecb30 Update dependency on golang.org/x/tools
• 06aa835 knowledge: add deprecated for Go 1.24
• 0f2f291 Include value of godebug in artifact's name
• 1179d01 Update CI to use actions/upload-artifact@v4
• e65b392 S1008: allow either branch to be documented
• de48f96 S1008: ignore instructions used in our tests
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions