Repository navigation
chore(all): update deps (major) - #749
Open
renovate-bot wants to merge 1 commit into
Open
renovate-bot wants to merge 1 commit into
renovate-bot wants to merge 1 commit into
Conversation
renovate-bot
force-pushed
the
renovate/major-deps
branch
3 times, most recently
from
October 26, 2026 20:50
3a41428 to
0415fe6
Compare
renovate-bot
force-pushed
the
renovate/major-deps
branch
from
November 1, 2026 04:57
0415fe6 to
ca24873
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
v3.37.0→v4.11.0v1.0.0→v2.140.0Release Notes
osrg/gobgp (github.com/osrg/gobgp/v3)
v4.11.0Compare Source
Changelog
53ceb78GoBGP 4.11.0e01141aserver: prepare peer state before advertising initial routesd234c86test: rename the route server policy scenarios to ExportPolicy632031dtest: remove duplicated route server policy scenarios1c501eftest: use a soft reset out in the route server policy update scenarios10d3f16server: send the peer description in WatchEvent peer events07af837table: count destinations in the Adj-RIB-In table info4b289a8server: compare the AS too when matching a path to its source peer1955816ci: do not install linux-modules-extra on kernels that do not have it6afb03atable: use the router ID when a reflected route has no cluster IDf22b5ddtable: look at every segment for an ASN as-path pattern30786depacket/bgp: reject AS 0 in the path and aggregator attributes9b86c50server: check the label chunk from zebra before using itbb09f17packet/bgp: reject an EVPN MAC/IP route with a MAC length other than 483e7e231zebra, server: do not wait forever for zebra to answera6798ecsecurity: treat zebra as trustedd8325f5server: look up the RPKI server with its port in DeleteRpki9b268c6server: pass the file name to the MRT manager in DisableMrt155ea03server: do not read the peer capabilities from an API request7ecee7eserver: fix the VRF ID of next hops registered with zebraadcd4fctable: reject a lookup prefix of the wrong familya1f19dctable: do not overwrite our own AS when prepending 255 times82bbdb7apiutil: reject an AS path segment with more than 255 AS numbers8678b1capiutil: return an error for API input that used to panic21ce52dapiutil: return NLRI constructor errors and check NLRI lengths1836b1capiutil: do not panic on a missing ESI or Binding SID98094bcsecurity: put direct calls to the Go packages out of scope752b484table: handle AS4_AGGREGATOR from a two-octet AS peer as RFC 6793 says4b943c4apiutil: do not panic on an SR Policy segment list without Weight36ec0edpacket/bgp, api, apiutil: decode the BGP-LS Prefix Metric TLV (1155)77689depacket/bgp: reject an EVPN NLRI longer than its route4139d78packet/bgp, api, apiutil: decode the BGP-LS Extended Administrative Group TLV (1173)d5953eetable: set ORIGINATOR_ID and CLUSTER_LIST when reflecting to a non-client7c54535api: add a timestamp to WatchEventResponse.TableEventdff618dbfd: reset the BGP session only when an Up session expires0f0471ftable: drop the origin validation state community from external peersbdfa79fserver: do not expire the hold timer while a message is processed5fbd5a1docs: list the NOTIFICATIONs that are sent as a Hard Reset95e1ed8packet/bgp: send BFD Down as a Hard Reset6bd78b2server: send Administrative Reset as a Hard Reset265187cserver: put the original NOTIFICATION in the data of a Hard Reset98bbadcserver: send every NOTIFICATION in Established through one function625456dserver: send Hard Reset on admin down and the prefix limit43746e5server: end the session when the prefix limit is reached3eef764server: end the session gracefully on a new connection from the peer9208bd2gr: keep the routes of a family only in the LLGR Capability7aafbafserver: decide in the server whether a session ends gracefullyb80bddeserver: handle a failed hold timer NOTIFICATION as a graceful restartaaf4b20server: move RTC test listen ports out of the ephemeral range92e393fdocs: describe the route advertisement after a graceful restart83ccb7cserver: use gr.Restart for our own graceful restartfe21cc5gr: add a state machine for our own graceful restart9a0c5c2gr: move Helper to helper.go9a35402server: send the initial dump to a secondary-route client9d07ddfconfig/oc: fix the peer-group inheritance key of graceful-restartbb83190table: do not mark a stale path stale again319fa41server: use gr.Helper for the graceful restart of a peerbc66d00table: do not attach LLGR_STALE twice4377d70gr: add a state machine for the graceful restart of a peer73cb9c4server: drop the stale routes that the restarted peer does not preserved842e6fserver: rebuild the negotiated graceful restart state for each session1292420cmd/gobgp: add a test for parseNeighborSetdc7158eserver: do not drain a stopped watcher's queue under the server lockcbbcefcserver: reject a route with our own address as the next hop551a9f6packet/bgp: deprecate the EVPN type 9 (I-PMSI) route0058e57packet/bgp: discard MUP NLRI of an unknown route type9783303packet/bgp: discard EVPN NLRI of an unknown route typec495d57packet/bgp: check the MP_UNREACH_NLRI length for End-of-RIBee2c354bfd: apply timer changes to the running session238fbaeserver: do not drop admin state requests sent back to back840c730server: reject an admin state request for the current statecc2d358table: match the zone of a link-local neighbor in a neighbor set32018f4cmd/gobgp: keep prefixes in a neighbor set6c23a0fserver: report a NOTIFICATION received in OpenConfirm as receivedfe2c11fbfd: send AdminDown when a session is removed3d41767table: tell BGP-LS destinations apart by their serialization when keys collide37aed5atable: don't send or pass along AIGP on an eBGP session34fc457server: withdraw EVPN MAC mobility paths from ADD-PATH peers95a6372table: discard LOCAL_PREF and reflection attributes from external peers0919aadserver: pick the propagate bucket of an EVPN MAC/IP route from its MAC6d26fa2bfd: set the diagnostic code of sent packetsf3c13d7bfd: stop periodic transmission when the peer asks for itabd73d0bfd: keep the BGP session on a remote AdminDown2f4224fbfd: discard received packets with a wrong version, M bit or A bit3bf932bbfd: support multihop sessions3197018bfd: add the multihop option to the BFD configuration7bdc5d0bfd: discard received packets with a TTL other than 255dace5bcbfd: select the session by Your Discriminator11fa6f2bfd: use one receive socket per address familyf1f9f3bserver: do not run the FSM in the per-family End-of-RIB test75fe3f7server: purge stale routes per address family on End-of-RIB95c43b0server: handle ResetPeer in every FSM state2be423aserver: wait less before the first connection after Idled8ebe4bserver: support per-peer policies for regular peerse796717server: discard AS4_PATH and AS4_AGGREGATOR from a four-octet AS peer93b979dpacket/bgp: check the next hop of MP_REACH_NLRI like NEXT_HOPeefeaa5docs: ask contributors to run CI in their fork before a pull request2a7f432packet/bgp: keep unknown TLVs of the Prefix-SID attributedb3c928server: keep our connection when the other one fails before Established9be7565server: stop the outgoing manager when the session is establishedb9438d5server: do not stop the outgoing manager after it sent its OPENb841cb7server: resolve a collision in OpenSent at the OPEN on our connection9358020server: resolve a connection collision in OpenConfirmfaf661eserver: send Cease to the connection that loses a collision57fa92fbfd: take unspecified sources from established BGP connectionsfa928d2bfd: cancel queued BFD-down work before retiring sessionsc5a4639bfd: preserve dynamic neighbor interface binding on updatesa6cedb3server: preserve replacement BFD sessions when obsolete FSMs stop4d7b218server: replace the ROAs of an RPKI cache on a Reset Query4e70e76server: back off the idle hold time like FRRfae7ee5server: stop the deferral timer when the session or the peer goes away7d11a2cserver: send Cease/BFD Down when BFD goes down93858capacket/bgp: add the RFC 9384 BFD Down Cease subcode2544643server: send IPv4 routes with an IPv6 next hop only to ENHE peersee9c4b7server: advertise extended next hop only for RFC 8950 IPv4 families78d9177server: honor the RFC 1997 well-known communities when advertisingb5630a0server: don't answer a version error NOTIFICATION in OpenSent72e589dpacket/bgp: don't decode 0x81/0x82 communities as traffic actions7491a4etable: drop a second MP_REACH_NLRI next hop that is not link-local4f80923server: wait for the gRPC socket in the WatchEvent tests7503315test: extend TCP-AO scenario51b09ceserver: allow TCP-AO key change after neighbor connection closee9ac84btest: add TCP-AO scenario coverage3667c1etable, tools: add an UPDATE packer benchmark with a real tablec408b63table: use one UPDATE packer for all families86a0840server: check the error from sendMessageloop in the kill signal testf588155packet/bgp: check NEXT_HOP only when the UPDATE has NLRIs that use ite2cd8b1table: share the next hop that is set for a peer801cbectable, config: drop NewPeerGroupInfo, deprecate SetPeerGroupStateValuesf3612detable: keep the next hop of a path out of the path attributesc4b5a3ctable: group IPv4 paths by next hop as well in the UPDATE packer2e5ef2ctable: add GetFullPathAttrs for the attributes shown to users2966efdserver: convert AddPathStream paths with the AddPath code51802f8table: set the next hops when ToLocal changes the family of a pathb3e14f0table: set the next hops of a path in one place059f4e9table: read the next hops of a path through one Path method72446b4server: add tests that pin the next hop in MRT dumps and zebra routesa90c53eserver: add tests that pin the next hop of a path in the API05987cetable: add tests that pin the next hop of a path16e8ae0table: reject invalid peer policy assignments89ef85fzebra: fix nexthop registration field offsets for FRR 8.2953fc73zebra: serialize the correct route header for FRR 7.4d1fa614packet/bgp: fix EVPN I-PMSI route serializationde65525server: count the advertised paths of a peer as they are sent872abc7server: handle an RTC membership shorter than /96 as a prefix105d5dbtable: update the NLRI string when a VRF path is made global7dcd1eetable: do not add RTC memberships that cannot contain a Route Target76eea36table: match RTC memberships as prefixes of the Route Target4404a95server: withdraw what was sent on an RTC membership withdraw82e435atable, server: match RTC membership against Route Targets onlyc311b8dserver: drop the unused newPath parameter of sendSecondaryRoutes3c16205server: write down what the server state lock covers231ef09server: run Serve only once per server6757c25table: don't fast-path a community pattern with a leading zero or space403b244table: don't fast-path a multi-colon community patterne2d98a0server: read the global RIB options under the server lock in zebra5ecafd7server: do not hold the server lock while dumping the MRT tablee9123fcdocs(scenario): document timeout scaling2933db3test(scenario): clean labeled Docker resources around pytest sessions39cf519test(scenario): probe link-local reachability with scoped pings32d53e9server: fix the comment on validating an UPDATE62caebbpacket/bgp: reject a repeated MP_REACH_NLRI or MP_UNREACH_NLRIdd25386packet/bgp: treat an unrecognized well-known attribute as withdrawf988b41server: validate an UPDATE after an attribute was discarded1819cc3clamp encap nlri endpoint to its length octet3c5fcf9table: keep LLGR stale paths out of multipath sets8ea07aaserver: withdraw routes when nexthop tracking invalidates them1c9e36btable: withdraw all local paths when deleting a VRFc77ac78packet/bgp: keep unknown MUP extended community sub-typesf1fcae1packet: keep unknown EVPN extended community sub-types2fe3da6packet/bgp: keep the FlowSpec 2-octet length form below 2400de9844packet/bgp: fix FlowSpec extended length encoding189deb6docs: describe which address families a prefix-set matches1c98a37table: match prefix sets against EVPN routes7dd1d37server: pass t to the RTC membership test helpersa9ba783fix(server): retain VPN routes while another RT still matches9297b19fix(server): suppress VPN updates for duplicate RTC membershipsc979c37server: accept FlowSpec paths without a next hop in AddPathStream47264c5table: build each path's attribute list once in packerMP6dc3bb9packet/bgp: unmap an IPv4-mapped next hop when decoding0a3ccf0table: cache the path count of an AdjRib756932eserver: delete RPKI ROAs with the server key02cfc40server: discard ORIGINATOR_ID and CLUSTER_LIST from external peers689c58bserver: start FSM loop timings when an event is received0ac78f5packet/bmp: parse the statistics types of RFC 9972v4.10.0Compare Source
Changelog
da824d9GoBGP 4.10.0723f98cfeat: add multi-topology IDs to link descriptor APIa15f873server: apply AS path option updates without resetting sessions03eaa74server: drop the queued outgoing messages on a state change9470f3dserver: drain an InfiniteChannel until its output closes056eb2etable: don't panic on an rpki condition for an unvalidated path55fa98ftable: skip rejected paths in DropStale and MarkLLGRStaleOrDrope37cdd8table: skip rejected paths when building Drop withdrawalsc4d9e77server: move the ingress loop checks out of the handleUpdate loop9b49e3fbfd: use transport local address for BFD0cc5883packet/bgp: reject an OPEN message that carries AS 0e59efa7docs: say that a neighbor setting wins over the peer group05ba735server: make a peer group update reach the peers in the groupb2a5ee1server: keep the neighbor configuration as the caller passed it9041a8cconfig/oc: stop forcing peer-as and min-adv-interval from the group3e9288dfix(metrics): stop reporting peer gauges as counters7ad257atable: do not emit an empty AS_PATH segment when merging AS4_PATH16965d1docs: document TCP-AO CLI3aaee4dcmd/gobgp: add TCP-AO CLI commands8a89c99docs: document neighbor update commandec6495eserver: do not retry Rx forever when a BFD test injects a packet33309bbserver: wait for the BFD peer to accept an injected packet in testsaff4a72metrics: split bgp_peer_state into a session and an admin metric31c8da1table, server: withdraw the installed path when a loop check rejects71101d4docs: add rules for AI-assisted contributionsf790813server: drop the dead sent-message watch plumbingd39b0b3server/bmp: advertise ADD-PATH for every family in the Loc-RIB Peer Upe957514server/bmp: stop reporting locally originated routes under a pseudo peer9130d21server/bmp: drop the route monitoring cache19837b0server: notify the post-policy watchers only on a change3628442table: report whether an update changed the path it replaced6427db0table: shard the destinations only where they are written concurrently9376e01server: hold a Loc-RIB table for every address family6b6ac4atable: allocate the destination shards on the first insert5a51530table: add a regression test for the EVPN type-2 route key3f856cdserver/bmp: key the route monitoring cache by path identifierb05a989server/bmp: encode the path identifier in route monitoring4ba5724packet/bmp: parse the mirrored message with the session options7aca34aserver/bmp: mirror the message as it was received18d807dserver/bmp: build route monitoring messages in a separate functionf912784cmd/gobgp: show the peer group in the neighbor detail outputc7b8634table: move route selection options into the table manager8d4165dtable: make the stale flag atomic9fd6457table: use the link-local next hop when the global one is unspecifiedacd4abatable: keep the link-local next hop on the receive pathda33165table: do not advertise a link-local next hop to a peer on another linka901be7test(server): check remove-private-as across admin downc0f7f51metrics: add the peer group and description labels59fef02server: keep the config mirrors when a neighbor is admin down72a0256bfd: pace transmission by RFC 5880's transmit interval3fb2fc0table: make an AS_SET origin invalid when a ROA covers the prefixfade913test: add a BGP-LS scenario test for SR Policy candidate paths7893111cmd/gobgp: add "global rib add -a ls srpolicy"0fe655eapi: add the SR Policy Candidate Path NLRI and attribute024b1f8config/oc: report the peer group in the peer state8277599test(scenario): add scalable local command timeouts and failure logs00bac63test(scenario): centralize polling waits527139bapi: add multiple adjacency-SID support to the BGP-LS link attribute13db048docs: describe the peer group inheritance rules084da87server: always make a dynamic neighbor passive9f18809config/oc: keep the neighbor config set through the API2805b1cserver/mrt: fix the peer index entry for locally generated routes8a011ebserver/mrt: record the peer AS in the TABLE_DUMPv2 peer index tabledb0f1e1docs: add the missing BGP-LS link delay keywords74c1be5cmd/gobgp: fix the BGP-LS route format commentsb69e76bcmd/gobgp: do not store a typed nil Multi-Topology Identifier TLV28f422fcmd/gobgp: require sids for the srv6sid routeb624eaacmd/gobgp: assert which keyword the BGP-LS parser rejects1db8c5acmd/gobgp: require protocol and identifier for BGP-LS routesb7b3178packet/bgp: add the SR Candidate Path Constraints TLVde5a3d4packet/bgp: add the SR Segment List TLV and its sub-TLVsa23f65fpacket/bgp: add the SR Policy Binding SID, state and name TLVs8e049catools: check that Go and protobuf sources are ASCII only9bd8f3fuse ASCII characters in comments2943c5efix(table): ignore unmatched withdrawals to prevent RTC update loops4a22f90config/oc: look up the configured fields of an unnumbered neighborc7c0fffpacket/bgp: move lsTLVUnknown to bgp.go0bf4e41packet/bgp: preserve unknown BGP-LS Attribute TLVs3dcfccapacket/bgp: add the SR Policy Candidate Path NLRI (RFC 9857)18e483dpacket/bgp: add the BGP-LS Protocol-IDs for RSVP-TE and Segment Routing7258f20table, server: keep one toStatementApi, not two41cfcd7server: map the set-community option to the API enum, do not cast itc9814a4config, server: do not put "invalid IP" in the APIfb7e2fdtable, server: report the origin-eq condition from OriginEqee380dfdocs: fix the peer type values in the metrics table87e90f0metrics: fix the peer type values in the bgp_peer_type help text452e7f4netutils: do not panic on a non-IPv4 MD5 address on OpenBSDc13352epacket/bgp: set the SR range value lengths in the LS TLV constructorsef38c9dapiutil: return an error for an unhandled BGP-LS NLRI type475d678packet/bgp: set the value lengths in the LS TLV constructors2a3d321packet/mrt: write AFI/SAFI only for the RIB_GENERIC familiescf5ad1dpacket/bmp: bound the mirrored BGP message by its Route Mirroring TLV length50809e2zebra: only encode nexthop label_num with MessageLabel before frr7.3544c4beserver: reject local cluster loops on importde582e0tcp-ao: delete keys from listening sockets asynchronously15e9be9server: apply TCP-AO to peer sockets842b728server: jitter BFD control packet transmission746dff5server: bound the RTR message length before allocating the body5ac8c93build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.264906f0config/oc: report the peer description in the peer statea1136eeconfig/oc: add tests for TCP-AO peer group inheritance855e337server: add tests for the TCP-AO peer config from the API600249econfig/oc: add tests for the TCP-AO peer config conversion0af005aconfig/oc: require the TCP-AO keychain leafb9604efserver: wire TCP-AO peer configurationeea7ce0config/oc: add TCP-AO peer modelff8c5fdapi: add TCP-AO peer configuration & state APIv4.9.0Compare Source
Changelog
01c5c4cGoBGP 4.9.09d50d8eserver: drop stale notifications queued while a peer session was downefa0900packet/bgp: check the per-type message length in parseBodyd7c721dpacket/bgp: reject a body that does not match the declared length5e34ff5test: move the KEEPALIVE length test next to the other header testse37c5a2packet/bgp: reject KEEPALIVE messages that are not 19 octetsb2c73cftest: drop run_all_tests.sh and document how to run scenario tests8056d41docs: document the listen address of the gRPC API4bbeb79security: define what we treat as a vulnerabilitye6c6f10table: find the policy assignments in DeletePolicy itself4171aa9server: drop the policy assignment of a deleted peera111094server: store the per peer policy only for a route server clientc0214f7table: report a statement that the policy does not have36cca5dtable: check the import direction when deleting a policy698cc61table: fix preserve flag in DeletePolicyd4eb7d3config: remove the collector configuration8006da4config: log reload failures at Error again3436d72config: log the export policy assignment failure at Error5f4a6b5config: do not abort startup when zebra is not reachable94518c5fix(cmd/gobgpd): delay sdnotify readiness6e08373feat(config): return initial apply errors11a4096server: fill in the Data field of the too long message error8f72434packet/bgp: fill in the Data field of message header errorsc927e31server: type fsmStateReason's notification as *bgp.BGPNotification88ac6daserver: pass the sent NOTIFICATION to fsmStateReason in handleOpenc4e13d1server: fix wrong message wired into fsmStateReason on bad-peer-AS/invalid-msg36e6efdconfig: test peer group deletion against config updatese585c39config: fix deleting peer group and neighbor togethereb2a727packet/bgp: include the type in an unknown route distinguisher stringf9152c2packet/bgp: keep the value of an unknown route distinguisher33539eeapiutil: round-trip the SR-MPLS Binding SID label through the API8b19441tcp-ao: expose HMAC-SHA256 profiles9341943netutils: support HMAC-SHA256 for TCP-AOcb123e9spell-check: keep dictionary.txt sortedd7ae493spell-check: fix the "mututally" typo3b05300config: load TCP-AO keychains from configc32c92fconfig/oc: add TCP-AO keychain modeldae5a6cconfig/oc: reject out-of-range integers in the config file1b84a40packet/bgp: add a test for concurrent Serializee7f8d7epacket/bgp: do not cache the message length in the BGP headerb010677packet/bgp: do not store the serialized length in OPENcaccf7bpacket/bgp: do not store the serialized value in the capability3b6ff68packet/bgp: make capability Len independent of Serializea40450dserver: hold fsm.lock when reading fsm.recvOpen8c84624cmd/gobgp: document the I-PMSI route target as requiredaac7deacmd/gobgp: validate I-PMSI route target before use42abd24packet/bgp: serialize the full SID in the SRv6 Binding SID sub-TLVc0d5851packet/bgp: set the bottom-of-stack bit in the VPLS Label Base708c180packet/bgp: compare the decoded NLRI in the VPLS round-trip test45c9244packet/bgp: cover the VPLS BGP-AD NLRI at the MP_REACH level62f3d94packet/bgp: re-serialize the VPLS NLRI in the fuzz target96105cbpacket/bgp: drop the stale RFC 6074 comment in the VPLS NLRI decoder7b1d80areject VPLS NLRI with a length other than 1702bcba0ci: make the YANG check fail when pyang failsf626c40tools/pyang_plugins: declare the route-family typedef84868f8tools/pyang_plugins: drop the ineffective ip-prefix deviation9c22b63](https://redirect.github.com/osrg/gobgp/commit/9c22b636170c3c8Configuration
📅 Schedule: (UTC)
* * * * 1-5)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.