chore: update dependencies

[renovate]

Update Request | Renovate Bot

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
github.com/cenkalti/backoff/v4	v4.3.0 → v7.0.0					require	major
github.com/klauspost/compress	v1.19.2 → v1.20.0					require	minor
github.com/planetscale/vtprotobuf	0393e58 → 8ae5a48					require	digest
github.com/siderolabs/gen	v0.8.7 → v0.8.8					require	patch
golang.org/x/sync	v0.22.0 → v0.23.0					require	minor
golang.org/x/time	v0.15.0 → v0.16.0					require	minor

---

Release Notes

cenkalti/backoff (github.com/cenkalti/backoff/v4)

v7.0.0

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

v5.0.3

Compare Source

v5.0.2

Compare Source

v5.0.1

Compare Source

v5.0.0

Compare Source

klauspost/compress (github.com/klauspost/compress)

v1.20.0

Compare Source

What's Changed

• Add lzw reader/writer by @​klauspost in #​1189
• xpress: add Microsoft XPRESS (MS-XCA) decompression by @​MP-GOWTHAM in #​1195
• s2: arm64 assembly encoders, lowered from the amd64 avo program by @​lizthegrey in #​1187
• zstd, huff0: improved arm64 lowering, and narrow two table loads to MOVWQZX by @​lizthegrey in #​1175
• gzhttp: limit jitter hash to jitterBuffer bytes by @​VedantMadane in #​1192
• s2: clamp the Go EncodeBetter skip to match the assembly by @​lizthegrey in #​1190
• xxhash: bound input of non-preemptive assembly by @​AskAlexSharov in #​1196
• zstd/huff0: fold two ISA-gap x86 idioms in the avo arm64 lowering by @​lizthegrey in #​1199
• ci: test against go1.27.x, drop go1.24.x by @​lizthegrey in #​1198
• zstd/huff0: break false partial-register dependencies in seqdec/4X decoders by @​lizthegrey in #​1197
• flate: Writer L7-9 with dictionary can emit the dictionary to stream by @​klauspost in #​1201

New Contributors

• @​VedantMadane made their first contribution in #​1192
• @​AskAlexSharov made their first contribution in #​1196
• @​MP-GOWTHAM made their first contribution in #​1195

Full Changelog: klauspost/compress@v1.19.2...v1.20.0

siderolabs/gen (github.com/siderolabs/gen)

v0.8.8

Compare Source

gen 0.8.8 (2026-09-11)

Welcome to the v0.8.8 release of gen!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/gen/issues.

Contributors

• Dmitriy Matrenichev
• Andrey Smirnov
• Artem Chernyshev
• Utku Ozdemir
• Andrey Smirnov
• Dmitriy Matrenichev
• Mark Glants
• Mateusz Urbanek

Changes

30 commits

• cbd9518 chore: rekres and update deps
• 26ccee1 feat: provide new YAMl unmarshal validator for null values
• c526410 fix: skip unknown-key check for types with custom YAML unmarshaler
• 4c7388b chore: update Go modules, replace YAML library
• 044d921 feat: add xslices.Deduplicate
• dcb2b74 feat: add panicsafe package
• b36ee43 feat: make xyaml.CheckUnknownKeys public
• 3e319e7 feat: implement xyaml.UnmarshalStrict
• 7c0324f chore: future-proof HashTrieMap
• 5ae3afe chore: update hashtriemap implementation from the latest upstream
• e847d2a chore: add more utilities to xiter
• f3c5a2b chore: add Empty and Empty2 iterators
• c53b90b chore: add packages xiter/xstrings/xbytes
• 7654108 chore: add hashtriemap implementation
• 8485864 chore: optimize maps.Values and maps.Keys
• 238baf9 chore: add typesafe SyncMap and bump stuff
• efca710 chore: add FilterInPlace method to maps and update module
• 36a3ae3 feat: update module
• f9f5805 chore: bump rekres and add functions from exp
• b968d21 feat: add TryRecv and RecvWithContext functions
• 476dfea feat: add foreach and clear to lazymap
• 214c1ef chore: set slice.Filter result slice cap to len
• 8e89b1e feat: add GetOrCreate and GetOrCall methods
• 7c7ccc3 feat: introduce channel SendWithContext
• b3b6db8 fix: fix Copy documentation and implementation
• 521f737 feat: add xerrors package which contains additions to the std errors
• 726e066 fix: rename tuples.go to pair.go and set proper package name
• d8d7d25 chore: minor additions
• 338a650 chore: add initial implementation and documentation
• 4fd8667 Initial commit

Changes since v0.8.7

2 commits

• cbd9518 chore: rekres and update deps
• 26ccee1 feat: provide new YAMl unmarshal validator for null values

Dependency Changes

This release has no dependency changes

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 6 additional dependencies were updated

Details:

Package	Change
golang.org/x/crypto	v0.40.0 -> v0.43.0
golang.org/x/net	v0.42.0 -> v0.46.1-0.20251013234738-63d1a5100f82
golang.org/x/sys	v0.34.0 -> v0.37.0
golang.org/x/text	v0.29.0 -> v0.30.0
google.golang.org/genproto/googleapis/api	v0.0.0-20250929231259-57b25ae835d4 -> v0.0.0-20251022142026-3a174f9686a8
google.golang.org/genproto/googleapis/rpc	v0.0.0-20250929231259-57b25ae835d4 -> v0.0.0-20251022142026-3a174f9686a8