all: update standard-library dependencies at the start and end of each development cycle

[bcmills]

The x dependencies vendored into the standard library (via src/go.mod and src/cmd/go.mod) should be updated for each code freeze, so that we can apply any needed fixes to those dependencies without also pulling in unnecessary changes or requiring significant backporting work (see, for example, #36851).

This task, like #11811, #12042, and the API audit (#36167, #32813), should occur regularly in each development cycle. Probably we should update the dependencies at the beginning of each code freeze, and again when we reopen the tree at the end of each code freeze.

CC @golang/osp-team

[gopherbot]

Change https://golang.org/cl/362734 mentions this issue: all: update vendored golang.org/x/{arch,sys,term} for Go 1.18 release

[gopherbot]

Change https://golang.org/cl/362736 mentions this issue: all: update vendored golang.org/x/crypto for Go 1.18 release

[gopherbot]

Change https://golang.org/cl/362735 mentions this issue: all: update vendored golang.org/x/{net,text} for Go 1.18 release

[dmitshur]

CL 361294 updated github.com/google/pprof. CLs 362734, 362735, 362736, and 361094 updated all golang.org/x dependencies other than x/mod. That is all that's left for the purpose of this issue (other individual updates may also happen, as long as they're bringing in things in scope for the 1.18 freeze).

[dmitshur]

CL 364114 took care of x/mod, the remaining bit for this issue.

Moving to 1.19 early in cycle.

[gopherbot]

This issue is currently labeled as early-in-cycle for Go 1.19. That time is now, so a friendly reminder to look at it again.

[gopherbot]

Change https://go.dev/cl/393370 mentions this issue: cmd: update vendored pprof

[gopherbot]

Change https://go.dev/cl/393373 mentions this issue: all: update vendored golang.org/x/tools

[gopherbot]

Change https://go.dev/cl/393674 mentions this issue: cmd/updatestd: ignore _ directories

[gopherbot]

Change https://go.dev/cl/393369 mentions this issue: all: update vendored x dependencies for Go 1.19 development cycle

[gopherbot]

Change https://go.dev/cl/406355 mentions this issue: all: update vendored golang.org/x/{arch,sys,term} for Go 1.19 release

[gopherbot]

Change https://go.dev/cl/406356 mentions this issue: all: update vendored golang.org/x dependencies for Go 1.19 release

[gopherbot]

Change https://go.dev/cl/406359 mentions this issue: cmd/pprof: update vendored github.com/google/pprof

[dmitshur]

CL 406355 and CL 406356 updated golang.org/x dependencies. CL 406359 updated github.com/google/pprof. (Other individual updates may also happen, as long as they're bringing in things in scope for the 1.19 freeze, e.g., to fix release-blocking issues, but that's outside of scope if this issue.)

Moving to 1.20 early in cycle.

[gopherbot]

Change https://go.dev/cl/421334 mentions this issue: all: update vendored golang.org/x dependencies for Go 1.20 development

[gopherbot]

Change https://go.dev/cl/421461 mentions this issue: all: update vendored golang.org/x/{net,tools} for Go 1.20 development

[dmitshur]

CLs 421334 and 421461 took care of all the golang.org/x dependencies, and CL 420234 will update pprof. Once that's done, we can remove the early-in-cycle label and revisit this closer to the freeze.

[gopherbot]

Change https://go.dev/cl/452766 mentions this issue: all: update vendored golang.org/x dependencies for Go 1.20 release

[gopherbot]

Change https://go.dev/cl/452815 mentions this issue: cmd/vendor: update vendored github.com/google/pprof for Go 1.20 release

[cherrymui]

The two CLs above did it for 1.20. Move it to 1.21 early in cycle.

[gopherbot]

Change https://go.dev/cl/462199 mentions this issue: src: update go.mod files to go 1.21

[gopherbot]

This issue is currently labeled as early-in-cycle for Go 1.21. That time is now, so a friendly reminder to look at it again.

[dmitshur]

CL 467297 and a few others took care of this for early in cycle. Removing that label to revisit this at the start of freeze.

[gopherbot]

Change https://go.dev/cl/498598 mentions this issue: all: update vendored dependencies

[gopherbot]

Change https://go.dev/cl/502878 mentions this issue: all: update vendored dependencies

[gopherbot]

Change https://go.dev/cl/509099 mentions this issue: all: update vendored dependencies

[gopherbot]

This issue is currently labeled as early-in-cycle for Go 1.22. That time is now, so a friendly reminder to look at it again.

[gopherbot]

Change https://go.dev/cl/517875 mentions this issue: all: update vendored dependencies

[gopherbot]

Change https://go.dev/cl/519657 mentions this issue: cmd/pprof: update vendored github.com/google/pprof

[gopherbot]

Change https://go.dev/cl/536575 mentions this issue: all: update vendored dependencies

[gopherbot]

Change https://go.dev/cl/546055 mentions this issue: all: update vendored dependencies

[dmitshur]

CL 546055 did the start-of-freeze update for the 1.22 cycle. Moving to the Go 1.23 milestone and adding early-in-cycle.

[gopherbot]

This issue is currently labeled as early-in-cycle for Go 1.23. That time is now, so a friendly reminder to look at it again.

[gopherbot]

Change https://go.dev/cl/557457 mentions this issue: all: update vendored dependencies

[cherrymui]

CL https://go.dev/cl/557457 submitted for Go 1.23 early-in-cycle. Removed the early-in-cycle label, leave the issue for Go 1.23 end-of-cycle.

[gopherbot]

Change https://go.dev/cl/564636 mentions this issue: cmd/pprof: update vendored github.com/google/pprof

[gopherbot]

Change https://go.dev/cl/589935 mentions this issue: all: update vendored dependencies

[mknyszek]

CL 589935 did the start-of-freeze update for the 1.23 cycle. Moving to the Go 1.24 milestone and adding early-in-cycle.

[gopherbot]

This issue is currently labeled as early-in-cycle for Go 1.24. That time is now, so a friendly reminder to look at it again.

[gopherbot]

Change https://go.dev/cl/600535 mentions this issue: all: update vendored dependencies

[gopherbot]

Change https://go.dev/cl/600596 mentions this issue: cmd/pprof: update vendored github.com/google/pprof

[dmitshur]

CL 600535 did the early-in-cycle update for Go 1.24. (Also sent CL 600596 to update a pprof dependency.) Removing that label to revisit this when the freeze starts.