fix(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github.com/blang/semver/v4	require	pinDigest	-> af3461a
github.com/cilium/charts	require	digest	c939608 -> 9c16d4d
github.com/cilium/cilium	require	pinDigest	-> 5d3899f
github.com/cilium/hubble	require	pinDigest	-> 1758df7
github.com/cilium/tetragon/pkg/k8s	require	digest	8ee0889 -> 2625699
github.com/cilium/workerpool	require	pinDigest	-> c57e545
github.com/cloudflare/cfssl	require	pinDigest	-> b4d0d87
github.com/go-openapi/strfmt	require	pinDigest	-> 7b5538a
github.com/google/gops	require	pinDigest	-> 70408a1
github.com/mholt/archiver/v3	require	pinDigest	-> cc194d2
github.com/prometheus/client_model	require	minor	v0.3.0 -> v0.4.0
github.com/prometheus/common	require	minor	v0.42.0 -> v0.44.0
github.com/spf13/cobra	require	pinDigest	-> 4dd4b25
github.com/stretchr/testify	require	pinDigest	-> f97607b
golang.org/x/exp	require	digest	03e9162 -> 2e198f4
golang.org/x/mod	require	pinDigest	-> ad6fd61
google.golang.org/grpc	require	pinDigest	-> 82c6376
gopkg.in/yaml.v3	require	pinDigest	-> f6f7691
helm.sh/helm/v3	require	pinDigest	-> c9f554d

---

Release Notes

prometheus/client_model

v0.4.0: 0.4.0 / 2023-05-03

Compare Source

What's Changed

• Update proto tools by @​SuperQ in https://github.com/prometheus/client_model/pull/64

New Contributors

• @​SuperQ made their first contribution in https://github.com/prometheus/client_model/pull/64

Full Changelog: prometheus/client_model@v0.3.0...v0.4.0

prometheus/common

v0.44.0

Compare Source

What's Changed

• Allow custom log.Logger by @​jkroepke in https://github.com/prometheus/common/pull/474
• Allow TLS settings to be specified inline by @​rfratto in https://github.com/prometheus/common/pull/472
• Enable dependabot for sigv4 by @​SuperQ in https://github.com/prometheus/common/pull/480
• Bump github.com/prometheus/common from 0.42.0 to 0.43.0 in /sigv4 by @​dependabot in https://github.com/prometheus/common/pull/486
• Bump golang.org/x/net from 0.9.0 to 0.10.0 by @​dependabot in https://github.com/prometheus/common/pull/483
• Bump github.com/stretchr/testify from 1.8.0 to 1.8.2 in /sigv4 by @​dependabot in https://github.com/prometheus/common/pull/485
• Bump golang.org/x/oauth2 from 0.7.0 to 0.8.0 by @​dependabot in https://github.com/prometheus/common/pull/482
• Bump github.com/aws/aws-sdk-go from 1.43.26 to 1.44.266 in /sigv4 by @​dependabot in https://github.com/prometheus/common/pull/489

New Contributors

• @​jkroepke made their first contribution in https://github.com/prometheus/common/pull/474
• @​rfratto made their first contribution in https://github.com/prometheus/common/pull/472

Full Changelog: prometheus/common@v0.43.0...v0.43.1

v0.43.0: 0.43.0 / 2023-05-04

Compare Source

NOTE: The protobuf library has been changed from the deprecated github.com/golang/protobuf to the new officially supported google.golang.org/protobuf. If you have direct use of the proto, you may need to make changes for deprecated functions.

What's Changed

• Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/common/pull/463
• Negotiate OM v1.0.0 by @​gouthamve in https://github.com/prometheus/common/pull/475
• Bump golang.org/x/oauth2 from 0.5.0 to 0.7.0 by @​dependabot in https://github.com/prometheus/common/pull/478
• Bump github.com/prometheus/client_golang from 1.14.0 to 1.15.1 by @​dependabot in https://github.com/prometheus/common/pull/481
• Update Go modules by @​SuperQ in https://github.com/prometheus/common/pull/479
• Bump github.com/alecthomas/kingpin/v2 from 2.3.1 to 2.3.2 by @​dependabot in https://github.com/prometheus/common/pull/469

Full Changelog: prometheus/common@v0.42.0...v0.43.0

---

Configuration

📅 Schedule: Branch creation - "on friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[tklauser]

The erroneous govet warning:

copylocks: metricsIncrease passes lock by value: github.com/prometheus/client_model/go.MetricFamily contains google.golang.org/protobuf/internal/impl.MessageState contains sync.Mutex (govet)

(ref. https://github.com/cilium/cilium-cli/actions/runs/5087191687?pr=1661) is addressed in #1664. Let's merge that one and then rebase. Also, #1663 will make sure renovate won't update these PRs once opened. Otherwise it will keep force-pushing whenever there's a new module version 😞

[tklauser]

Go workflow failure should be fixed once #1679 is merged.