chore(deps): bump the go-dependencies group across 1 directory with 3 updates

[dependabot]

Bumps the go-dependencies group with 3 updates in the / directory: github.com/grafana/grafana-plugin-sdk-go, github.com/stretchr/testify and github.com/itchyny/timefmt-go.

Updates github.com/grafana/grafana-plugin-sdk-go from 0.294.0 to 0.296.2

Commits

• cc0b49b Force TLS 1.3 via toggle (#1600)
• 49c0731 Avoid misleading placeholder in User-Agent header when Grafana info is unknow...
• 1a579ad chore(deps): Update go-openapi packages to v1 (#1597)
• ee40220 add .DS_Store to .gitignore (#1625)
• c425d33 httpclient: add per-request response limit override (#1623)
• bfdfcd5 fix(slo): remove httpbin.org dependency from tests, fixing CI flake (#1619)
• 8f673a3 backend: add a capture seam for datasources that do not speak HTTP (#1617)
• c691973 chore(deps): Update module go.opentelemetry.io/proto/otlp to v1.11.0 (#1615)
• eb48d65 chore(deps): Update module golang.org/x/net to v0.56.0 [SECURITY] (#1607)
• 2d9e497 chore(deps): Update module github.com/getkin/kin-openapi to v0.144.0 [SECURIT...
• Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.0

Commits

• 001eb79 Merge pull request #1905 from Kentzo/patch-1
• ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
• 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
• f8c01f3 mock: Mock.Return does not exist anymore
• 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
• a11649e assert: make *AssertionFunc type just aliases
• dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
• 098f8d7 _codegen: use strings.Builder
• d2699be _codegen: modernize
• a463c8c Merge pull request #1885 from stretchr/dolmen/ci-check-ghactions-hashes
• Additional commits viewable in compare view

Updates github.com/itchyny/timefmt-go from 0.1.5 to 0.1.8

Changelog

Sourced from github.com/itchyny/timefmt-go's changelog.

v0.1.8 (2026-04-01)

• fix parsing negative year and Unix time (%Y, %G, %s)
• fix formatting negative year, century, Unix time (%Y, %G, %C, %y, %g, %s)
• fix %g parsing to use the same two-digit year threshold 69 as %y
• fix %s formatting and parsing on 32-bit platforms
• support parsing time zone offset with %:::z
• improve performance of parsing/formatting compound directives

v0.1.7 (2025-10-01)

• refactor code using built-in min and max functions

v0.1.6 (2024-06-01)

• support parsing week directives (%A, %a, %w, %u, %V, %U, %W)
• validate range of values on parsing directives
• fix formatting %l to show 12 at midnight

Commits

• 304aadf update CHANGELOG.md for v0.1.8
• e5fb258 add more test cases
• a7803a9 support parsing time zone offset with %:::z
• 52d3bc4 optimize compound directives by resolving in switch statement
• f0b9b83 refactor %G and %g parsing to reuse %Y and %y
• aad97f3 fix %s for 32-bit platforms, optimize formatting integers
• 85a916a add benchmarks for formatting and parsing
• 484b069 support parsing negative numbers (%Y, %G, %s)
• f94f156 add test with Go 1.26
• da66c43 fix %g parsing to use the same threshold as %y
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions