chore(deps): update go-dependencies (9.5) (major)

[elastic-renovate-prod]

This PR contains the following updates:

Package	Type	Update	Change
github.com/cenkalti/backoff/v4	require	major	v4.3.0 → v7.0.0
github.com/dgraph-io/ristretto	require	major	v0.2.0 → v2.4.2
github.com/jstemmer/go-junit-report	indirect	major	v1.0.0 → v2.1.0

---

Release Notes

cenkalti/backoff (github.com/cenkalti/backoff/v4)

v7.0.0

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

v5.0.3

Compare Source

v5.0.2

Compare Source

v5.0.1

Compare Source

v5.0.0

Compare Source

dgraph-io/ristretto (github.com/dgraph-io/ristretto)

v2.4.2

Compare Source

Fixed

• Revert eager pre-allocation of the sampledLFU keyCosts map (#​482), which allocated
  NumCounters/10 map buckets at boot and caused a large RSS regression for caches with high
  NumCounters

Full Changelog: dgraph-io/ristretto@v2.4.1...v2.4.2

v2.4.1

Compare Source

Fixed

• Revert eager pre-allocation of the sampledLFU keyCosts map (#​482), which allocated
  NumCounters/10 map buckets at boot and caused a large RSS regression for caches with high
  NumCounters

Full Changelog: dgraph-io/ristretto@v2.4.1...v2.4.2

v2.4.0

Compare Source

Changed

• Pre-allocate keyCosts map in sampledLFU (#​482)

Fixed

• Handle mremap size mismatch on Linux s390x (#​491)

Full Changelog: dgraph-io/ristretto@v2.4.0...v2.4.1

v2.3.0

Compare Source

Added

• Implement public Cache.IterValues() method (#​475)
• Allow custom key types with underlying types in Key constraint (#​478)

Fixed

• Fix compilation on 32-bit archs (#​465)

Full Changelog: dgraph-io/ristretto@v2.3.0...v2.4.0

v2.2.0

Compare Source

Added

• Add public Cache.RemainingCost() method (#​448)
• Add support for uint keys (#​463)

Fixed

• Fix typo: ffor → for (#​456)
• Correct grammar in error message (#​461)

Full Changelog: dgraph-io/ristretto@v2.2.0...v2.3.0

v2.1.0

Compare Source

Changed

• Remove dependency: github.com/pkg/errors (#​443)

Fixed

• Switch from using a sync.WaitGroup to closing a channel of struct{} (#​442)

Full Changelog: dgraph-io/ristretto@v2.1.0...v2.2.0

v2.0.1

Compare Source

Added

• Add ShouldUpdate() function in config (#​427)

Fixed

• Fix memory leak while cleaning up expiration map (#​429)
• Execute m.Unlock in defer in store.go (#​425)

Full Changelog: dgraph-io/ristretto@v2.0.1...v2.1.0

v2.0.0

Compare Source

Fixed

• Wait for goroutines to finish (#​423)
• Bump golang.org/x/sys from 0.27.0 to 0.28.0 in the minor group (#​421)
• Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 in the minor group (#​420)
• Bump golang.org/x/sys from 0.26.0 to 0.27.0 in the minor group (#​419)

Full Changelog: dgraph-io/ristretto@v2.0.0...v2.0.1

v1.0.1

Compare Source

This release is deprecated

v1.0.0

Compare Source

This release is deprecated

jstemmer/go-junit-report (github.com/jstemmer/go-junit-report)

v2.1.0: Version 2.1.0

Compare Source

v2.1.0 changelog

• Fix #​147: Make timestamps in generated report more accurate.
• Fix #​140: Escape illegal XML characters in junit output.
• Fix #​145: Handle build errors in test packages with the _test suffix.
• Fix #​145: Don't ignore build errors that did not belong to a package.
• Fix #​134: Json test output was not parsed correctly when using the -race flag in go test.
• Add support for === NAME lines introduced in Go1.20
• junit: Add File attribute to testsuite.
• junit: Allow multiple properties with the same name.
• junit: Add the Testsuites.WriteXML convenience method.

v2.0.0: Version 2.0.0

Compare Source

Changes since v1.0.0

• Support for parsing go test -json output.
• Distinguish between build/runtime errors and test failures.
• JUnit report now includes output for all tests and benchmarks, and global output that doesn't belong to any test.
• Use full Go package name in generated report instead of only last path segment.
• Add support for reading skipped/failed benchmarks.
• Add -subtest-mode flag to exclude or ignore results of subtest parent tests.
• Add -in and -out flags for specifying input and output files respectively.
• Add -iocopy flag to copy stdin directly to stdout.
• Add -prop flags to set key/value properties in generated report.
• Add -parser flag to switch between regular go test (default) and go test -json parsing.
• Output in JUnit XML is written in <![CDATA[]]> tags for improved readability.
• Add hostname, timestamp and id attributes to JUnit XML.
• Improve accuracy of benchmark time calculation and update formatting in report.
• No longer strip leading whitespace from test output.
• The formatter and parser packages have been replaced with junit and parser/gotest packages respectively.
• Add support for parsing lines longer than 64KiB.
• The JUnit errors/failures attributes are now required fields.
• Drop support for parsing pre-Go1.13 test output.
• Deprecate -go-version flag.

---

Configuration

📅 Schedule: Branch creation - "on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

TL;DR

All 4 packaging jobs failed on the same compile-time break introduced by the ristretto major upgrade: Fleet Server still uses the pre-generics config type. Update cache initialization to instantiate ristretto.Config with concrete key/value types (or pin back to a compatible v0/v1 release).

Remediation

• Update internal/pkg/cache/impl_ristretto.go to use the new generic API (instantiate ristretto.Config[...] and align any dependent types to the selected key/value types).
• Re-run the packaging matrix (x86_64, aarch64, and FIPS variants) after the cache type fix to confirm build recovery.

Investigation details

Root Cause

The build fails during go build in all package jobs with:

• internal/pkg/cache/impl_ristretto.go:16:11: cannot use generic type ristretto.Config[K ristretto.Key, V any] without instantiation

This is consistent with the PR updating github.com/dgraph-io/ristretto from v0.2.0 to v2.4.2 (major API change to generics) while Fleet Server code still references ristretto.Config without type parameters.

Affected source location from compiler output:

• internal/pkg/cache/impl_ristretto.go:16

Evidence

• Build: https://buildkite.com/elastic/fleet-server/builds/16537
• Failed steps:
  • Package x86_64
  • Package aarch64
  • Package x86_64 FIPS
  • Package aarch64 FIPS
• Key log excerpt (present in each failed step):

# github.com/elastic/fleet-server/v7/internal/pkg/cache
internal/pkg/cache/impl_ristretto.go:16:11: cannot use generic type ristretto.Config[K ristretto.Key, V any] without instantiation
Error: running "go build ..." failed with exit code 1

Note: go: writing stat cache ... permission denied also appears in logs, but it is non-fatal noise here; the terminal failure is the compile error above.

Verification

• Not run locally in this environment; diagnosis is based on deterministic compiler errors from all failing Buildkite logs.

Follow-up

If you prefer minimal churn on this Renovate PR, an alternative is to constrain ristretto to the prior compatible major until a dedicated migration PR updates cache typing.

---

What is this? | From workflow: PR Buildkite Detective

Give us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not.

[elastic-renovate-prod]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[ebeahan]

Need to review the major changes.