deps: update Go dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
github.com/envoyproxy/go-control-plane	v0.13.0 -> v0.13.1					require	patch
github.com/foxboron/go-uefi	e2076f0 -> fab4fdf					require	digest
github.com/prometheus/client_golang	v1.20.4 -> v1.20.5					require	patch

---

Release Notes

envoyproxy/go-control-plane (github.com/envoyproxy/go-control-plane)

v0.13.1

Compare Source

What's Changed

• build(deps): Bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @​dependabot in https://github.com/envoyproxy/go-control-plane/pull/975
• build(deps): Bump github/codeql-action from 3.25.6 to 3.26.5 by @​dependabot in https://github.com/envoyproxy/go-control-plane/pull/990
• build(deps): Bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 by @​dependabot in https://github.com/envoyproxy/go-control-plane/pull/979
• build(deps): Bump actions/upload-artifact from 3.1.0 to 4.3.6 by @​dependabot in https://github.com/envoyproxy/go-control-plane/pull/982
• fix: golangci-lint by @​mmorel-35 in https://github.com/envoyproxy/go-control-plane/pull/993
• Bump google.golang.org/protobuf from 1.33.0 to 1.34.2 in /xdsmatcher by @​dependabot in https://github.com/envoyproxy/go-control-plane/pull/955
• build(deps): Bump github.com/envoyproxy/protoc-gen-validate from 1.0.4 to 1.1.0 by @​dependabot in https://github.com/envoyproxy/go-control-plane/pull/978
• update OSSF Scorecard badge link by @​mmorel-35 in https://github.com/envoyproxy/go-control-plane/pull/857
• build(deps): Bump actions/upload-artifact from 4.3.6 to 4.4.0 by @​dependabot in https://github.com/envoyproxy/go-control-plane/pull/998
• build(deps): Bump github/codeql-action from 3.26.5 to 3.26.6 by @​dependabot in https://github.com/envoyproxy/go-control-plane/pull/997

Full Changelog: envoyproxy/go-control-plane@v0.13.0...v0.13.1

prometheus/client_golang (github.com/prometheus/client_golang)

v1.20.5: / 2024-10-15

Compare Source

We decided to revert the testutil change that made our util functions less error-prone, but created a lot of work for our downstream users. Apologies for the pain! This revert should not cause any major breaking change, even if you already did the work--unless you depend on the exact error message.

Going forward, we plan to reinforce our release testing strategy [1],[2] and deliver an enhanced testutil package/module with more flexible and safer APIs.

Thanks to @​dashpole @​dgrisonnet @​kakkoyun @​ArthurSens @​vesari @​logicalhan @​krajorama @​bwplotka who helped in this patch release! 🤗

Changelog

[BUGFIX] testutil: Reverted #​1424; functions using compareMetricFamilies are (again) only failing if filtered metricNames are in the expected input. #​1645

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: service-mesh/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
github.com/envoyproxy/protoc-gen-validate	v1.0.4 -> v1.1.0