Skip to content

Bump go.k6.io/k6 from 1.6.1 to 1.7.0 in /long-running-test-arch/xk6#453

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/long-running-test-arch/xk6/go.k6.io/k6-1.7.0
Open

Bump go.k6.io/k6 from 1.6.1 to 1.7.0 in /long-running-test-arch/xk6#453
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/long-running-test-arch/xk6/go.k6.io/k6-1.7.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 25, 2026

Bumps go.k6.io/k6 from 1.6.1 to 1.7.0.

Release notes

Sourced from go.k6.io/k6's releases.

v1.7.0

k6 v1.7.0 is here 🎉! This release includes:

  • Automatic resolution for subcommand extensions — no more manual xk6 builds required to use them!
  • K6_SECRET_SOURCE env var as an alternative to --secret-source, accepting the same syntax.

Breaking changes

There are no breaking changes in this release.

New features

Automatic resolution for subcommand extensions #5664

You can now rely on automatic extension resolution also when using a subcommand extension that isn't included in the current binary.

Previously, using extension subcommands required manually building a custom k6 binary with xk6. Now, k6 detects the missing extension, provisions the binary on demand, and executes the command transparently — the same experience already available for JavaScript extensions.

For instance, if you run:

k6 x httpbin

and the xk6-subcommand-httpbin subcommand extension isn't in the current binary, k6 will automatically provision a binary with it on demand and execute the command transparently.

UX improvements and enhancements

  • #5655 Recommends the OpenTelemetry output instead of InfluxDB.
  • #5724 Adds K6_SECRET_SOURCE env var as an alternative to --secret-source, accepting the same syntax. Thanks @​vortegatorres, for the contribution!

Bug fixes

  • #5629 Ensures that all redirected requests are handled for page.on('response') and page.on('requestfinished').

Maintenance and internal improvements

  • #5447 Updates the actions/setup-go action to 7a3fe6c.
  • #5471 Uses WPT's harness to test the WebCrypto API. Thanks @​bjchris32, for the contribution!
  • #5583, #5687 Move Size and PageEmulateMediaOptions option parsing to the Browser's mapping layer. Thanks @​baeseokjae, for the contribution!
  • #5598 Updates the anchore/sbom-action action to v0.22.2.
  • #5599 Updates github.com/klauspost/compress to v1.18.4.
  • #5600 Updates the docker/login-action action to v3.7.0.
  • #5610 Improves error wrapping for Browser's actionability functions. Thanks @​joaquinalmora, for the contribution!
  • #5612 Adds a AGENTS.md for guiding coding agents.

... (truncated)

Commits
  • 776c078 Release notes v1.7.0 (#5638)
  • 390cd4e Bump k6 version to v1.7.0 (#5756)
  • 8c03cd5 fix(ci): Pass GITHUB_TOKEN as input to test-common composite action (#5755)
  • 4f25152 fix(cmd/state): Use constants when possible (#5626)
  • 3fdfa3b Merge pull request #5735 from grafana/5731-chore-exclude-non-essential-files-...
  • cece0c7 exclude non-essential files from vendor/ folder
  • af37f05 Merge pull request #5728 from grafana/5727-update-xk6-dashboard-dependency-to...
  • d0a75e0 [refactor] Add K6_SECRET_SOURCE (#5724)
  • 8db5ce1 go mod tidy
  • c49d53f removed (and git ignored) xk6-fashboard-assets yarn.lock file
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [go.k6.io/k6](https://github.com/grafana/k6) from 1.6.1 to 1.7.0.
- [Release notes](https://github.com/grafana/k6/releases)
- [Commits](grafana/k6@v1.6.1...v1.7.0)

---
updated-dependencies:
- dependency-name: go.k6.io/k6
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 25, 2026
@dependabot dependabot bot requested review from a team as code owners March 25, 2026 19:55
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Development

Successfully merging this pull request may close these issues.

0 participants