build(deps): bump the all-go-mod-patch-and-minor group with 7 updates

[dependabot]

Bumps the all-go-mod-patch-and-minor group with 7 updates:

Package	From	To
github.com/prometheus/client_golang	1.21.0	1.21.1
golang.org/x/crypto	0.35.0	0.36.0
golang.org/x/net	0.35.0	0.37.0
golang.org/x/oauth2	0.27.0	0.28.0
golang.org/x/sync	0.11.0	0.12.0
golang.org/x/term	0.29.0	0.30.0
golang.org/x/time	0.10.0	0.11.0

Updates github.com/prometheus/client_golang from 1.21.0 to 1.21.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.21.1 / 2025-03-04

This release addresses a performance regression introduced in #1661 -- thanks to all who reported this quickly: @​chlunde, @​dethi, @​aaronbee @​tsuna @​kakkoyun 💪🏽. This patch release also fixes the iOS build.

We will be hardening the release process even further (#1759, #1761) to prevent this in future, sorry for the inconvenience!

The high concurrency optimization is planned to be eventually reintroduced, however in a much safer manner, potentially in a separate API.

• [BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low concurrency cases #1757
• [BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags. #1758

• Revert "exponential backoff for CAS operations on floats" and cut 1.21.1 by @​bwplotka in prometheus/client_golang#1757
• Fix ios build for 1.21.1 by @​bwplotka in prometheus/client_golang#1758

Full Changelog: prometheus/client_golang@v1.21.0...v1.21.1

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.21.1 / 2025-03-04

• [BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low contention cases.
• [BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags.

Commits

• 8a42da3 Fix ios build. (#1758)
• 40c62f7 Merge pull request #1757 from prometheus/revert-121cas
• 689f590 Cut 1.21.1
• 9e567a7 Revert "Add: exponential backoff for CAS operations on floats (#1661)"
• See full diff in compare view

Updates golang.org/x/crypto from 0.35.0 to 0.36.0

Commits

• 49bf5b8 go.mod: update golang.org/x dependencies
• 24852b6 ssh: add decode support for banners
• bbc689c ssh: use a more straightforward return value
• See full diff in compare view

Updates golang.org/x/net from 0.35.0 to 0.37.0

Commits

• 99b3ae0 go.mod: update golang.org/x dependencies
• 85d1d54 go.mod: update golang.org/x dependencies
• cde1dda proxy, http/httpproxy: do not mismatch IPv6 zone ids against hosts
• fe7f039 publicsuffix: spruce up code gen and speed up PublicSuffix
• 459513d internal/http3: move more common stream processing to genericConn
• aad0180 http2: fix flakiness from t.Log when GOOS=js
• b73e574 http2: don't log expected errors from writing invalid trailers
• 5f45c77 internal/http3: make read-data tests usable for server handlers
• 43c2540 http2, internal/httpcommon: reject userinfo in :authority
• 1d78a08 http2, internal/httpcommon: factor out server header logic for h2/h3
• Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.27.0 to 0.28.0

Commits

• 0042180 oauth2: Deep copy context client in NewClient
• ce350bf oauth2: remove unneeded TokenSource implementation in transport test
• 44967ab google: fix typos
• 9c82a8c oauth2.go: use a more straightforward return value
• See full diff in compare view

Updates golang.org/x/sync from 0.11.0 to 0.12.0

Commits

• b637f27 errgroup: drop support for Go versions before 1.20
• 960bf1f all: upgrade go directive to at least 1.23.0 [generated]
• See full diff in compare view

Updates golang.org/x/term from 0.29.0 to 0.30.0

Commits

• 04218fd go.mod: update golang.org/x dependencies
• 208db03 all: upgrade go directive to at least 1.23.0 [generated]
• See full diff in compare view

Updates golang.org/x/time from 0.10.0 to 0.11.0

Commits

• 0c50ed8 all: upgrade go directive to at least 1.23.0 [generated]
• 66520f6 rate: simplify function advance only returns new Tokens to caller
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions